~ ZHPDiag v2018.12.28.213 Par Nicolas Coolman (2018/12/28)
~ Démarré par Evarisse (Administrator) (2018/12/28 12:03:18)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Certificate ZHPDiag: Legal
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Evarisse\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Evarisse\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 8.1 Pro, 64-bit (Build 9600) =>.Microsoft Corporation

---\\ NAVIGATEURS INTERNET (3) - 2s
~ GCIE: Google Chrome v71.0.3578.98
~ MFIE: Mozilla Firefox 64.0 (x64 fr)
~ MSIE: Internet Explorer v11.0.9600.17126

---\\ INFORMATIONS SUR LES PRODUITS WINDOWS (3) - 4s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK

---\\ LOGICIELS DE PROTECTION (1) - 33s
SMADAV version 12.4.1 v12.4.1 (Protection)

---\\ SURVEILLANCE LOGICIEL (1) - 33s
~ Adobe Flash Player 32 NPAPI (Surveillance)

---\\ INFORMATIONS SUR LE SYSTÈME (6) - 0s
~ Operating System: AMD64 Family 20 Model 2 Stepping 0, AuthenticAMD
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 3779.484 MB (38% free) : OK =>.RAM Value
System Restore: Activé (Enable)
System drive C: has 109 GB (44%) free of 244 GB : OK =>.Disk Space

---\\ MODE DE CONNEXION AU SYSTÈME (3) - 0s
~ Computer Name: PC-EVARISTE
~ User Name: Evarisse
~ Logged in as Administrator

---\\ ÉNUMÉRATION DES UNITÉS DE STOCKAGE (3) - 0s
~ Drive C: has 109 GB free of 244 GB (System)
~ Drive D: has 16 GB free of 109 GB
~ Drive H: has 23 GB free of 122 GB

---\\ ÉTAT DU CENTRE DE SÉCURITÉ WINDOWS (11) - 2s
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ RECHERCHE PARTICULIÈRE DE FICHIERS GÉNÉRIQUES (25) - 12s
[MD5.81394C91B7B5A7C799E249AE82491F13] - 21/06/2014 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2373784] =>.Microsoft Corporation®
[MD5.6E0BDFBEEED65B017F2E4C2C910B0520] - 22/08/2013 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [52736] =>.Microsoft Corporation
[MD5.48CFA7BE561A7BE144C29BB912055016] - 22/08/2013 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [144384] =>.Microsoft Corporation
[MD5.40BFD9D6EC8E174145F012246CA73CCD] - 21/06/2014 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2266112] =>.Microsoft Corporation
[MD5.306EB21E5B480AE9065EA55AC8C35936] - 18/03/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [562176] =>.Microsoft Corporation
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - 18/03/2014 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [447488] =>.Microsoft Corporation
[MD5.F9BCD83D3ADB0A0CDB847915CE2CF13E] - 21/06/2014 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [655360] =>.Microsoft Corporation
[MD5.C595AB6674C31D9F4A676DC9D7FAE2A5] - 21/06/2014 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [494592] =>.Microsoft Corporation
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - 18/03/2014 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19456] =>.Microsoft Corporation
[MD5.7C7BE474915166B61B84C025F1F10157] - 21/06/2014 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\AFD.sys [563200] =>.Microsoft Corporation
[MD5.74B14192CF79A72F7536B27CB8814FBD] - 22/08/2013 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [26464] =>.Microsoft Corporation
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - 22/08/2013 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [88576] =>.Microsoft Corporation
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - 22/08/2013 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [164352] =>.Microsoft Corporation
[MD5.A03F362C5557E238CBFA914689C77248] - 21/06/2014 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [134144] =>.Microsoft Corporation
[MD5.498288DD5CA42C2D36D125893E968C53] - 21/06/2014 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [77312] =>.Microsoft Corporation
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - 22/08/2013 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [107520] =>.Microsoft Corporation
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - 18/03/2014 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [142848] =>.Microsoft Corporation
[MD5.7A1A3F213CDB3363D179D5014272025D] - 21/06/2014 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\MRxSmb.sys [402432] =>.Microsoft Corporation
[MD5.9DC17B7D9D84C37C102D379FCC7D4942] - 13/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [281088] =>.Microsoft Corporation
[MD5.8495BD788F8CE89EB66648988FC5A5C1] - 21/06/2014 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [2013528] =>.Microsoft Corporation
[MD5.764B1121867B2D9B31C491668AC72B2B] - 22/08/2013 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [94208] =>.Microsoft Corporation
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - 22/08/2013 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [120832] =>.Microsoft Corporation
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - 18/03/2014 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [195584] =>.Microsoft Corporation
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - 22/08/2013 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [107520] =>.Microsoft Corporation
[MD5.17F7B0F2298D97F4B6C7A69511033D3D] - 14/03/2016 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [316760] =>.Microsoft Corporation

---\\ LISTE DES SERVICES (Non désactivés) (104) - 61s
O23 - Service: Andrea RT Filters Service (AERTFilters) . (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe =>.Andrea Electronics®
O23 - Service: C:\Windows\System32\drivers\afd.sys,-1000 (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\System32\drivers\afd.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\drivers\ahcache.sys,-102 (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys =>.Microsoft Corporation
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe =>.AMD
O23 - Service: C:\Windows\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Générateur de points de terminaison du serv.) - C:\Windows\System32\AudioEndpointBuilder.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Service Audio Windows.) - C:\Windows\System32\Audiosrv.dll =>.Microsoft Corporation
O23 - Service: Service %1!s! Update (avast) (avast) . (...) - C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe (.not file.) =>.Avast Software s.r.o
O23 - Service: Background Logic Handler (backlh) . (. - ExtManager.) - C:\ProgramData\Logic Cramble\set.exe
O23 - Service: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\System32\drivers\BasicDisplay.sys =>.Microsoft Corporation
O23 - Service: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\System32\drivers\BasicRender.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\bfe.dll (BFE) . (.Microsoft Corporation - Moteur de filtrage de base.) - C:\Windows\System32\bfe.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\qmgr.dll (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) - C:\Windows\System32\qmgr.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\system32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Service d’infrastructure des tâches en arri.) - C:\Windows\System32\bisrv.dll =>.Microsoft Corporation
O23 - Service: @cdrom.inf,%cdrom_ServiceDesc%;CD-ROM Driver (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\drivers\cdrom.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Services de chiffrement.) - C:\Windows\System32\cryptsvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\drivers\dam.sys,-100 (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys =>.Microsoft Corporation
O23 - Service: Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc. - Dropbox Update.) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
O23 - Service: DbxSvc (DbxSvc) . (.Dropbox, Inc. - Dropbox Service.) - C:\Windows\System32\DbxSvc.exe =>.Dropbox, Inc.
O23 - Service: C:\Windows\System32\das.dll (DeviceAssociationService) . (.Microsoft Corporation - Service d’association de périphérique.) - C:\Windows\System32\das.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - Service client DHCP.) - C:\Windows\System32\dhcpcore.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - Service de résolution du cache DNS.) - C:\Windows\System32\dnsrslvr.dll =>.Microsoft Corporation
O23 - Service: VideoDriver service (EC83B8D19356) . (.VideoDriver - NT VideoDriver SYS.) - C:\Windows\EC83B8D19356.sys {081C1803CF7A146AE1AC5503F5627FE8}
O23 - Service: C:\Windows\System32\efssvc.dll (EFS) . (.Microsoft Corporation - Local Security Authority Process.) - C:\Windows\System32\lsass.exe =>.Microsoft Corporation
O23 - Service: EMP_UDSA (EMP_UDSA) . (.SEIKO EPSON CORPORATION - Epson USB Display Ver.1.63.) - C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UDSA.exe =>.SEIKO EPSON CORPORATION®
O23 - Service: C:\Windows\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe =>.Microsoft Corporation®
O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Service de cache de police Windows.) - C:\Windows\System32\FntCache.dll =>.Microsoft Corporation
O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) - C:\Windows\System32\gpsvc.dll =>.Microsoft Corporation
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
O23 - Service: C:\Windows\System32\iphlpsvc.dll (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) - C:\Windows\System32\iphlpsvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - DLL du service Serveur.) - C:\Windows\System32\srvsvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - DLL du service Station de travail.) - C:\Windows\System32\wkssvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\lltdres.dll (lltdio) . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - C:\Windows\System32\DRIVERS\lltdio.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\lmhsvc.dll (lmhosts) . (.Microsoft Corporation - DLL des services de transport NetBIOS sur T.) - C:\Windows\System32\lmhsvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\system32\lsm.dll (LSM) . (.Microsoft Corporation - Service du gestionnaire de session locale.) - C:\Windows\System32\lsm.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\drivers\luafv.sys,-100 (luafv) . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - C:\Windows\System32\drivers\luafv.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\mmcss.dll (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) - C:\Windows\System32\mmcss.dll =>.Microsoft Corporation
O23 - Service: Mobile Broadband HL Service (Mobile Broadband HL Service) . (...) - C:\ProgramData\MobileBrServ\mbbservice.exe =>.Huawei Technologies Co., Ltd.®
O23 - Service: C:\Windows\System32\FirewallAPI.dll (MpsSvc) . (.Microsoft Corporation - Service de protection Microsoft.) - C:\Windows\System32\mpssvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wkssvc.dll (mrxsmb10) . (.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) - C:\Windows\System32\DRIVERS\mrxsmb10.sys =>.Microsoft Corporation
O23 - Service: @mssmbios.inf,%mssmbios_svcdesc%;Microsoft System Managemen (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\System32\drivers\mssmbios.sys =>.Microsoft Corporation
O23 - Service: SQL Server (MSSQLSERVER) (MSSQLSERVER) . (.Microsoft Corporation - SQL Server Windows NT.) - c:\Program Files (x86)\Microsoft SQL Server\MSSQL10_50.MSSQLSERVER\MSSQL\Binn\sqlservr.exe =>.Microsoft Corporation®
O23 - Service: C:\Windows\System32\drivers\nwifi.sys,-101 (NativeWifiP) . (.Microsoft Corporation - Pilote de miniport WiFi natif.) - C:\Windows\System32\DRIVERS\nwifi.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\drivers\Ndu.sys,-10001 (Ndu) . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) - C:\Windows\System32\drivers\Ndu.sys =>.Microsoft Corporation
O23 - Service: @netnb.inf,%NetBIOS_Desc%;NetBIOS Interface (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\drivers\netbt.sys,-2 (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - Connaissance des emplacements réseau 2.) - C:\Windows\System32\nlasvc.dll =>.Microsoft Corporation
O23 - Service: NetGroup Packet Filter Driver (NPF) . (.Riverbed Technology, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) - C:\Windows\System32\drivers\npf.sys =>.Riverbed Technology, Inc.
O23 - Service: @npsvctrig.inf,%NPSVCTRIG.SvcDisplayName%;Named pipe servic (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\System32\drivers\npsvctrig.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Serveur RPC de l’interface du magasin résea.) - C:\Windows\System32\nsisvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\drivers\nsiproxy.sys,-2 (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys =>.Microsoft Corporation
O23 - Service: OracleDBConsoletp (OracleDBConsoletp) . (...) - C:\oracle\product\10.2.0\db_3\bin\nmesrvc.exe (.not file.)
O23 - Service: OracleOraDb10g_home3iSQL*Plus (OracleOraDb10g_home3iSQL*Plus) . (...) - C:\oracle\product\10.2.0\db_1\bin\isqlplussvc.exe (.not file.)
O23 - Service: OracleOraDb10g_home3TNSListener (OracleOraDb10g_home3TNSListener) . (...) - C:\oracle\product\10.2.0\db_1\BIN\TNSLSNR .TNSLSNR (.not file.)
O23 - Service: OracleOraDb10g_home4iSQL*Plus (OracleOraDb10g_home4iSQL*Plus) . (...) - C:\oracle\product\10.2.0\db_2\bin\isqlplussvc.exe (.not file.)
O23 - Service: OracleOraDb10g_home4TNSListener (OracleOraDb10g_home4TNSListener) . (...) - C:\oracle\product\10.2.0\db_2\BIN\TNSLSNR .TNSLSNR (.not file.)
O23 - Service: OracleOraDb10g_home5iSQL*Plus (OracleOraDb10g_home5iSQL*Plus) . (...) - C:\oracle\product\10.2.0\db_3\bin\isqlplussvc.exe (.not file.)
O23 - Service: OracleOraDb10g_home5TNSListener (OracleOraDb10g_home5TNSListener) . (...) - C:\oracle\product\10.2.0\db_3\BIN\TNSLSNR .TNSLSNR (.not file.)
O23 - Service: OracleServiceTP (OracleServiceTP) . (...) - c:\oracle\product\10.2.0\db_3\bin\ORACLE.EXE (.not file.)
O23 - Service: C:\Windows\System32\pcasvc.dll (PcaSvc) . (.Microsoft Corporation - Service de l’Assistant Compatibilité des pr.) - C:\Windows\System32\pcasvc.dll =>.Microsoft Corporation
O23 - Service: PEAUTH (PEAUTH) . (.Microsoft Corporation - Protected Environment Authentication and Au.) - C:\Windows\System32\drivers\peauth.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\umpo.dll (Power) . (.Microsoft Corporation - Service d’alimentation en mode utilisateur.) - C:\Windows\System32\umpo.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\Windows\System32\profsvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\drivers\pacer.sys,-101 (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys =>.Microsoft Corporation
O23 - Service: Quoteex (Quoteex) . (...) - C:\ProgramData\Quoteex\Quoteex.exe
O23 - Service: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\system32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - Mappeur de point de terminaison RPC.) - C:\Windows\System32\RpcEpMap.dll =>.Microsoft Corporation
O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\Windows\System32\rpcss.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\lltdres.dll (rspndr) . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - C:\Windows\System32\DRIVERS\rspndr.sys =>.Microsoft Corporation
O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp®
O23 - Service: C:\Windows\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) - C:\Windows\System32\schedsvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\Sens.dll (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) - C:\Windows\System32\sens.dll =>.Microsoft Corporation
O23 - Service: Service KMSELDI (Service KMSELDI) . (...) - C:\Program Files\KMSpico\Service_KMS.exe (.not file.)
O23 - Service: C:\Windows\System32\ipnathlp.dll (SharedAccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) - C:\Windows\System32\ipnathlp.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) - C:\Windows\System32\shsvcs.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\spoolsv.exe,-1 (Spooler) . (.Microsoft Corporation - Application sous-système spouleur.) - C:\Windows\System32\spoolsv.exe =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Service de la plateforme de protection logi.) - C:\Windows\System32\sppsvc.exe =>.Microsoft Corporation
O23 - Service: SQL Server Browser (SQLBrowser) . (.Microsoft Corporation - SQL Browser Service EXE.) - c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe =>.Microsoft Corporation®
O23 - Service: SQL Server VSS Writer (SQLWriter) . (.Microsoft Corporation - SQL Server VSS Writer - 64 Bit.) - C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe =>.Microsoft Corporation®
O23 - Service: C:\Windows\System32\srvsvc.dll (srv) . (.Microsoft Corporation - Server driver.) - C:\Windows\System32\DRIVERS\srv.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wiaservc.dll (stisvc) . (.Microsoft Corporation - Service de périphériques d’images fixes.) - C:\Windows\System32\wiaservc.dll =>.Microsoft Corporation
O23 - Service: SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated - 64-bit Synaptics Pointing Enhance Service.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated®
O23 - Service: C:\Windows\System32\sysmain.dll (SysMain) . (.Microsoft Corporation - Hôte de service Superfetch.) - C:\Windows\System32\sysmain.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\system32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) - C:\Windows\System32\SystemEventsBrokerServer.dll =>.Microsoft Corporation
O23 - Service: TCP/IP Registry Compatibility (tcpipreg) . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - C:\Windows\System32\drivers\tcpipreg.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\themeservice.dll (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) - C:\Windows\System32\themeservice.dll =>.Microsoft Corporation
O23 - Service: Unsigned Themes (UnsignedThemes) . (.The Within Network, LLC - Unsigned themes service executable.) - C:\Windows\unsignedthemes.exe =>.The Within Network, LLC
O23 - Service: (uxstyle) . (.The Within Network, LLC - UxStyle Kernel Driver.) - C:\Windows\system32\Drivers\uxstyle.sys =>.The Within Network, LLC
O23 - Service: VirtualBox Service (VBoxDrv) . (.Oracle Corporation - VirtualBox Support Driver.) - C:\Windows\System32\DRIVERS\VBoxDrv.sys =>.Oracle Corporation
O23 - Service: VirtualBox NDIS 6.0 Miniport Service (VBoxNetAdp) . (.Oracle Corporation - VirtualBox NDIS 6.0 Host-Only Network Adapt.) - C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys =>.Oracle Corporation
O23 - Service: VirtualBox USB Monitor Driver (VBoxUSBMon) . (.Oracle Corporation - VirtualBox USB Monitor Driver.) - C:\Windows\System32\DRIVERS\VBoxUSBMon.sys =>.Oracle Corporation
O23 - Service: (vToolbarUpdater190.7.0) . (.AVG Secure Search - ToolbarU Application.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\190.7.0\ToolbarUpdater.exe =>.AVG Technologies CZ, s.r.o.®
O23 - Service: C:\Windows\System32\drivers\vwififlt.sys,-259 (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - DLL du service de gestion des connexions Wi.) - C:\Windows\System32\wcmsvc.dll =>.Microsoft Corporation
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) . (.Microsoft Corporation - Antimalware Service Executable.) - C:\Program Files\Windows Defender\MsMpEng.exe =>.Microsoft Corporation®
O23 - Service: C:\Windows\System32\wbem\wmisvc.dll (Winmgmt) . (.Microsoft Corporation - WMI.) - C:\Windows\System32\wbem\WMIsvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wlansvc.dll (WlanSvc) . (.Microsoft Corporation - DLL du service de configuration automatique.) - C:\Windows\System32\wlansvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wscsvc.dll (wscsvc) . (.Microsoft Corporation - Service Centre de sécurité de Windows.) - C:\Windows\System32\wscsvc.dll =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\SearchIndexer.exe,-103 (WSearch) . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - C:\Windows\System32\SearchIndexer.exe =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) - C:\Windows\system32\wuaueng.dll =>.Microsoft Corporation

---\\ SERVICES NON MICROSOFT (SR=Démarré,SS=Stoppé) (21) - 78s
SS - Demand [17/12/2018] [ 335872] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [30/07/2015] [ 106952] Andrea RT Filters Service (AERTFilters) . (.Andrea Electronics Corporation.) - C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe =>.Andrea Electronics®
SR - Auto [16/07/2015] [ 246784] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe =>.AMD
SR - Auto [27/12/2018] [ 3780096] Background Logic Handler (backlh) . (...) - C:\ProgramData\Logic Cramble\set.exe
SS - Demand [31/10/2014] [ 588024] BlackBerry Device Manager (BlackBerry Device Manager) . (.BlackBerry Limited.) - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe =>.BlackBerry Ltd.®
SR - Auto [20/07/2017] [ 143144] Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
SS - Demand [20/07/2017] [ 143144] Service Mise à jour Dropbox (dbupdatem) (dbupdatem) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe =>.Dropbox, Inc®
SR - Auto [13/12/2018] [ 51024] DbxSvc (DbxSvc) . (.Dropbox, Inc..) - C:\Windows\System32\DbxSvc.exe =>.Dropbox, Inc®
SR - Auto [23/04/2014] [ 166504] EMP_UDSA (EMP_UDSA) . (.SEIKO EPSON CORPORATION.) - C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UDSA.exe =>.SEIKO EPSON CORPORATION®
SS - Demand [12/12/2018] [ 443872] Google Chrome Elevation Service (GoogleChromeElevationService) . (.Google Inc..) - C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\elevation_service.exe =>.Google Inc®
SR - Auto [14/12/2017] [ 153168] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SS - Demand [14/12/2017] [ 153168] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc®
SR - Auto [23/07/2013] [ 239696] Mobile Broadband HL Service (Mobile Broadband HL Service) . (...) - C:\ProgramData\MobileBrServ\mbbservice.exe =>.Huawei Technologies Co., Ltd.®
SR - Auto [28/12/2018] [ 0] Quoteex (Quoteex) . (...) - C:\ProgramData\Quoteex\Quoteex.exe
SS - Demand [01/03/2013] [ 118520] Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.Riverbed Technology, Inc..) - C:\Program Files (x86)\WinPcap\rpcapd.exe =>.Riverbed Technology, Inc.®
SR - Auto [30/07/2015] [ 306944] Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp®
SR - Auto [06/07/2015] [ 237736] SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated®
SR - Auto [23/09/2013] [ 13824] Unsigned Themes (UnsignedThemes) . (.The Within Network, LLC.) - C:\Windows\unsignedthemes.exe =>.The Within Network, LLC
SR - Auto [18/07/2017] [ 1277512] (vToolbarUpdater190.7.0) . (.AVG Secure Search.) - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\190.7.0\ToolbarUpdater.exe =>.AVG Technologies CZ, s.r.o.®
SS - Demand [13/05/2012] [ 24576] wampapache (wampapache) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.4.2\bin\httpd.exe =>.Apache Software Foundation
SS - Demand [19/04/2012] [ 9693696] wampmysqld (wampmysqld) . (...) - c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe =>.MySQL

---\\ TÂCHES PLANIFIÉES EN AUTOMATIQUE (Registre) (38) - 51s
O38 - TASK: {198D6BEA-FE42-4DC4-8127-C01D15D5DC26} [64Bits][\Updater_Online_Application] - (.Microleaves - Online Application Updater 2.7.0 © Microle.) -- C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe [908144] =>.SUP.Microleaves
O38 - TASK: {1FE581B2-2229-4FD6-BBD5-B977E095297F} [64Bits][\Online Application V2G6] - (.BTSIR2\PC-EVARISTE$ - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] =>.SUP.Microleaves
O38 - TASK: {317FFD81-33F9-4734-89B3-E1B3EFAA463B} [64Bits][\Avast Software\Overseer] - (.AVAST Software - Avast Overseer.) -- C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2038320] =>.AVAST Software
O38 - TASK: {38A15E93-85F2-4922-B7F1-AAC11DCC4E27} [64Bits][\Online Application V2G4] - (.BTSIR2\PC-EVARISTE$ - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] =>.SUP.Microleaves
O38 - TASK: {3DF84FB8-0A2F-4510-8817-868F425EE43A} [64Bits][\Adobe Flash Player NPAPI Notifier] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [1456128] =>.Adobe Systems Incorporated
O38 - TASK: {4335B321-E181-459F-8F4C-1D93191FBE25} [64Bits][\Opera scheduled Autoupdate 2796787680] - (.Evarisse - .) -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\cdsvtecc\iiijsbcf.exe [0]
O38 - TASK: {4AE14339-A407-41AB-8DA3-D6DDF669D9A9} [64Bits][\{60DD0508-2EAC-480B-B533-5586FA5B3E5B}] - (...) -- C:\Users\Evarisse\Downloads\DemoSph50FR.exe [86614329]
O38 - TASK: {4CF5A860-2BC2-43D9-BDFE-355F6FF9BA15} [64Bits][\Online Application V2G5] - (.BTSIR2\PC-EVARISTE$ - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] =>.SUP.Microleaves
O38 - TASK: {5C5241DC-67EF-4CD9-96CF-138EB9D0E26D} [64Bits][\{F84D2CE9-591D-48B8-B6BE-845BBEA66147}] - (. - TODO: .) -- C:\Program Files (x86)\Common Files\Kintrax\uninstall.exe [3622912]
O38 - TASK: {680F7043-35A8-47C4-8B48-E6A8672502CF} [64Bits][\GoogleUpdateTaskMachineUA] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc.
O38 - TASK: {69969BD8-C554-4C6C-AE1A-69E8B92964A2} [64Bits][\GoogleUpdateTaskMachineCore] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] =>.Google Inc.
O38 - TASK: {6B9FCDE9-8853-4981-994C-3FC7EC51C864} [64Bits][\Online Application V2G1] - (.BTSIR2\PC-EVARISTE$ - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] =>.SUP.Microleaves
O38 - TASK: {9E79734E-4806-4EAE-ABEC-3A71859C4E84} [64Bits][\Adobe Flash Player Updater] - (.Adobe Systems Incorporated - Adobe® Flash® Player Update Service 32.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335872] =>.Adobe Systems Incorporated
O38 - TASK: {AE463F43-E2C8-4609-8DAE-76340DB4DE9E} [64Bits][\Online Application V2G3] - (.BTSIR2\PC-EVARISTE$ - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] =>.SUP.Microleaves
O38 - TASK: {C275DD8D-7B9F-40E0-B070-E2247DF18AD9} [64Bits][\DropboxUpdateTaskMachineUA] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144] =>.Dropbox, Inc.
O38 - TASK: {C4BB4DE3-5A1F-4373-B284-AEA0BDA578D0} [64Bits][\Online Application V2G2] - (.BTSIR2\PC-EVARISTE$ - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] =>.SUP.Microleaves
O38 - TASK: {C8F08D28-029C-4CED-B688-1088607964B0} [64Bits][\DropboxUpdateTaskMachineCore] - (.Dropbox, Inc. - Dropbox Update.) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144] =>.Dropbox, Inc.
O38 - TASK: {CD623347-5D90-4604-9EB5-01BF33296C0F} [64Bits][\smadav] - (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files (x86)\SMADAV\SMΔRTP.exe [2010192] =>.SmadSoft
O38 - TASK: {CF2AB906-4E82-4E9B-96A2-847D6C1603FA} [64Bits][\AdobeAAMUpdater-1.0-BOOBA-Evarisse] - (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208] =>.Adobe Systems Incorporated
C:\Windows\System32\Tasks\Updater_Online_Application - (.Microleaves.) -- C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe [/silentall -nofreqcheck./silentall] =>.SUP.Microleaves
C:\Windows\System32\Tasks\Online Application V2G6 - (.BTSIR2\PC-EVARISTE$.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [1 62.1] =>.SUP.Microleaves
C:\Windows\System32\Tasks\Avast Software\Overseer - (.AVAST Software.) -- C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [/from_scheduler:1] =>.AVAST Software
C:\Windows\System32\Tasks\Online Application V2G4 - (.BTSIR2\PC-EVARISTE$.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [1 60.1] =>.SUP.Microleaves
C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [-check plugin.-check] =>.Adobe Systems Incorporated
C:\Windows\System32\Tasks\Opera scheduled Autoupdate 2796787680 - (.Evarisse.) -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\cdsvtecc\iiijsbcf.exe []
C:\Windows\System32\Tasks\{60DD0508-2EAC-480B-B533-5586FA5B3E5B} - (...) -- C:\Users\Evarisse\Downloads\DemoSph50FR.exe [C:\Users\Evarisse\Downloads\DemoSph50FR.exe]
C:\Windows\System32\Tasks\Online Application V2G5 - (.BTSIR2\PC-EVARISTE$.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [1 61.1] =>.SUP.Microleaves
C:\Windows\System32\Tasks\{F84D2CE9-591D-48B8-B6BE-845BBEA66147} - (..) -- C:\Program Files (x86)\Common Files\Kintrax\uninstall.exe [C:\Program Files (x86)\Common Files\Kintrax\uninstall.exe]
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/ua ./ua] =>.Google Inc.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [/c] =>.Google Inc.
C:\Windows\System32\Tasks\Online Application V2G1 - (.BTSIR2\PC-EVARISTE$.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [1 69.1] =>.SUP.Microleaves
C:\Windows\System32\Tasks\Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [] =>.Adobe Systems Incorporated
C:\Windows\System32\Tasks\Online Application V2G3 - (.BTSIR2\PC-EVARISTE$.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [1 71.1] =>.SUP.Microleaves
C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA - (.Dropbox, Inc..) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [/ua ./ua] =>.Dropbox, Inc.
C:\Windows\System32\Tasks\Online Application V2G2 - (.BTSIR2\PC-EVARISTE$.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [1 70.1] =>.SUP.Microleaves
C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore - (.Dropbox, Inc..) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [/c] =>.Dropbox, Inc.
C:\Windows\System32\Tasks\smadav - (.Smadsoft.) -- C:\Program Files (x86)\SMADAV\SMΔRTP.exe [rtp] =>.SmadSoft
C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-BOOBA-Evarisse - (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [-mode=scheduled] =>.Adobe Systems Incorporated

---\\ APPLICATIONS LANCÉES AU DÉMARRAGE DU SYSTÈME (17) - 4s
O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [Classic Start Menu] . (.IvoSoft - Classic Start Menu.) -- C:\Program Files\Classic Shell\ClassicStartMenu.exe =>.IvoSoft
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\RunOnce: [OMEWPRODUCT_] . (...) -- C:\Program Files\Windows Sidebar\ZHPV0N8VVDJ6PYQUXY05Z2P6EFV1I2DMVPUU8NIULEF\Ujk5l0T0Dl.exe =>Adware.Wizzcaster
O4 - HKCU\..\Run: [AdobeBridge] . (. - .) -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe (.Not File.) =>.SUP.Orphan
O4 - HKCU\..\Run: [hsG&ç9rN-O.exe] . (...) -- C:\Program Files\Windows Sidebar\ZHPV0N8VVDJ6PYQUXY05Z2P6EFV1I2DMVPUU8NIULEF\hsG&ç9rN-O.exe
O4 - HKCU\..\Run: [rgmoybvf] . (. - .) -- C:\Users\Evarisse\gxqtanzy.exe (.Not File.) =>.SUP.Orphan
O4 - HKLM\..\Wow6432Node\Run: [vProt] . (. - VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe =>.AVG Technologies CZ, s.r.o.®
O4 - HKLM\..\Wow6432Node\Run: [Wondershare Helper Compact.exe] . (. - .) -- C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (.Not File.) =>.SUP.Orphan
O4 - HKLM\..\Wow6432Node\Run: [PWRISOVM.EXE] . (.Power Software Ltd - PowerISO Virtual Drive Manager.) -- C:\Program Files\PowerISO\PWRISOVM.EXE =>.Power Software Limited®
O4 - HKLM\..\Wow6432Node\Run: [EPSON_UD_START] . (.SEIKO EPSON CORPORATION - Epson USB Display Ver.1.70.) -- C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UD.exe =>.SEIKO EPSON CORPORATION®
O4 - HKLM\..\Wow6432Node\Run: [RIMBBLaunchAgent.exe] . (.BlackBerry Limited - Launch Agent Service.) -- C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe =>.BlackBerry Ltd.®
O4 - HKLM\..\Wow6432Node\Run: [DelaypluginInstall] . (. - .) -- C:\ProgramData\Wondershare\Player\DelayPluginI.exe (.Not File.) =>.SUP.Orphan
O4 - HKLM\..\Wow6432Node\Run: [Dropbox] . (.Dropbox, Inc. - Dropbox.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc®
O4 - HKUS\S-1-5-21-2136093658-2293275512-771046554-1001\..\Run: [AdobeBridge] . (. - .) -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5\Bridge.exe (.Not File.) =>.SUP.Orphan
O4 - HKUS\S-1-5-21-2136093658-2293275512-771046554-1001\..\Run: [hsG&ç9rN-O.exe] . (...) -- C:\Program Files\Windows Sidebar\ZHPV0N8VVDJ6PYQUXY05Z2P6EFV1I2DMVPUU8NIULEF\hsG&ç9rN-O.exe
O4 - HKUS\S-1-5-21-2136093658-2293275512-771046554-1001\..\Run: [rgmoybvf] . (. - .) -- C:\Users\Evarisse\gxqtanzy.exe (.Not File.) =>.SUP.Orphan

---\\ PROCESSUS LANCÉS (34) - 73s
[MD5.6BF0147A7A924E5A3AE049A95ECC9B34] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [246784] [PID.956] =>.AMD
[MD5.B7CC6DB515E9347EEC2FC19D4C09A962] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [672768] [PID.748] =>.AMD
[MD5.760CE443E09282AC4C0B67D67BA5E7FA] - (.The Within Network, LLC - Unsigned themes service executable.) -- C:\Windows\unsignedthemes.exe [13824] [PID.552] =>.The Within Network, LLC
[MD5.944A2A650A29B896864A8696BF207605] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [306944] [PID.1112] =>.Realtek Semiconductor Corp®
[MD5.1A04DBAAC95E0505A6FBCB750F61AE19] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1403136] [PID.1176] =>.Realtek Semiconductor Corp®
[MD5.CCD65DBB759949457259599F7F3E8056] - (.Andrea Electronics Corporation - Andrea filters APO access service (64-bit).) -- C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe [106952] [PID.1588] =>.Andrea Electronics®
[MD5.679F7A03AD0AA955D7779636D55E4C52] - (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) -- C:\Program Files (x86)\SMADAV\SMΔRTP.exe [2010192] [PID.1844] =>.SmadSoft
[MD5.293B7936B6D06903351F7C00B7455540] - (. - ExtManager.) -- C:\ProgramData\Logic Cramble\set.exe [3780096] [PID.1860] =>.SUP.Linkury
[MD5.8BCE5437B62FD6061C9D5E738561B0DF] - (.Dropbox, Inc. - Dropbox Service.) -- C:\Windows\System32\DbxSvc.exe [51024] [PID.2028] =>.Dropbox, Inc.
[MD5.EFDBDA6D4B3AAB6A8F8070F4DFFB907F] - (.SEIKO EPSON CORPORATION - Epson USB Display Ver.1.63.) -- C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.7\EMP_UDSA.exe [166504] [PID.1872] =>.SEIKO EPSON CORPORATION®
[MD5.0417C188DA81AA5564B152CA4E00458A] - (...) -- C:\ProgramData\MobileBrServ\mbbservice.exe [239696] [PID.1936] =>.Huawei Technologies Co., Ltd.®
[MD5.19191153EAB5AC769770420B5FD61122] - (.Synaptics Incorporated - 64-bit Synaptics Pointing Enhance Service.) -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [237736] [PID.2308] =>.Synaptics Incorporated®
[MD5.0B04C81D9AB025C19BEEE6191CF75185] - (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3935400] [PID.2356] =>.Synaptics Incorporated®
[MD5.3DA773181EFBCEBEE30FA629513BE0CE] - (.AVG Secure Search - ToolbarU Application.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\190.7.0\ToolbarUpdater.exe [1277512] [PID.2368] =>.AVG Technologies CZ, s.r.o.®
[MD5.E43B5F4FB1B872F4705179B32F5AB23F] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe [292648] [PID.2620] =>.Google Inc®
[MD5.32D5589FB273DCE6422F56E4DB2DE367] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe [369960] [PID.2628] =>.Google Inc®
[MD5.98FE69A9E7C28C626A65177E3C58810C] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [201384] [PID.3244] =>.Synaptics Incorporated®
[MD5.690EB331346D7ADFDA18E50042DEA4B4] - (.IvoSoft - Classic Start Menu.) -- C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984] [PID.3896] =>.IvoSoft
[MD5.8672D1F115A5F52CB4A75A91AF28A3BC] - (. - VProtect Application.) -- C:\Program Files (x86)\AVG Secure Search\vprot.exe [1707080] [PID.4436] =>.AVG Technologies CZ, s.r.o.®
[MD5.D658AB1B55127D18DCFBCAC8CAAEA522] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.4460] =>.Hewlett-Packard Company®
[MD5.19C5087C1B1F24B0C94E628C4AA0006F] - (.Smadav Software - Smadav Whitelisting Protection.) -- C:\Program Files (x86)\SMADAV\SmadavProtect64.exe [85616] [PID.2644] =>.Zainuddin Nafarin®
[MD5.BE312805BE40747F348360CDCCA565BB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [516560] [PID.1284] =>.Mozilla Corporation®
[MD5.BE312805BE40747F348360CDCCA565BB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [516560] [PID.3852] =>.Mozilla Corporation®
[MD5.BE312805BE40747F348360CDCCA565BB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [516560] [PID.4332] =>.Mozilla Corporation®
[MD5.BE312805BE40747F348360CDCCA565BB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [516560] [PID.5268] =>.Mozilla Corporation®
[MD5.BE312805BE40747F348360CDCCA565BB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [516560] [PID.5708] =>.Mozilla Corporation®
[MD5.BE312805BE40747F348360CDCCA565BB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [516560] [PID.5932] =>.Mozilla Corporation®
[MD5.46B217B22CA5D4FB530352B18D163D0A] - (. - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] [PID.3996] =>.SUP.Microleaves
[MD5.46B217B22CA5D4FB530352B18D163D0A] - (. - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] [PID.5476] =>.SUP.Microleaves
[MD5.46B217B22CA5D4FB530352B18D163D0A] - (. - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] [PID.5308] =>.SUP.Microleaves
[MD5.BE312805BE40747F348360CDCCA565BB] - (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe [516560] [PID.4912] =>.Mozilla Corporation®
[MD5.E45CA6209FAAE333F11B44A7401746D4] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Evarisse\AppData\Roaming\ZHP\ZHPDiag3.exe [3187584] [PID.5728] =>.Nicolas Coolman
[MD5.46B217B22CA5D4FB530352B18D163D0A] - (. - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] [PID.1244] =>.SUP.Microleaves
[MD5.46B217B22CA5D4FB530352B18D163D0A] - (. - Application.) -- C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe [199864] [PID.5044] =>.SUP.Microleaves

---\\ CHROME, Démarrage, Recherche, Extensions (9) - 10s
G2 - GCE: Preference [Evarisse][User Data\Default] [aocmfdnfakeeghklenaccingkboiglif] http://atavi.com/ =>.atavi.com
G2 - GCE: Preference [Evarisse][User Data\Default] [aohghmighlieiainnegkcijnfilokake] =>.Google Inc. {Docs}
G2 - GCE: Preference [Evarisse][User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] http://drive.google.com/ =>.Google Inc. {Drive}
G2 - GCE: Preference [Evarisse][User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] http://www.youtube.com =>.Youtube {Youtube}
G2 - GCE: Preference [Evarisse][User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] http://www.google.com/ =>.Google Inc. {Hidden Chrome extensions}
G2 - GCE: Preference [Evarisse][User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] =>.Google Inc. {Docs hors connexion}
G2 - GCE: Preference [Evarisse][User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] =>.Google Inc. {Wallet}
G2 - GCE: Preference [Evarisse][User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] http://mail.google.com/ =>.Google Inc. {Gmail}
G2 - GCE: Preference [Evarisse][User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc.

---\\ FIREFOX, Plugins,Démarrage,Recherche,Extensions (8) - 14s
P2 - EXT FILE: (.FF Helper Tool - FF Helper Tool.) -- C:\Users\Evarisse\AppData\Roaming\Mozilla\Firefox\Profiles\lhm460eq.default\extensions\{01f409a5-d617-47be-a574-d54325fe05d1}.xpi
P2 - EXT FILE: (.Microsoft Corporation - The plugin allows you to have a better expe.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npMeetingJoinPluginOC.dll =>.Microsoft Corporation®
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi =>.Mozilla Corporation
P2 - EXT FILE: (.webcompat.com.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi =>.webcompat.com
P2 - EXT FILE: (.webcompat.com.) -- C:\Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi =>.webcompat.com
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_101.dll =>.Adobe Systems Incorporated
P2 - FPN: [HKLM] [@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] - (...) -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\190.7.0\\npsitesafety.dll =>.AVG Software

---\\ INTERNET EXPLORER,Démarrage,Recherche,URLSearchHook (20) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snohulxyvrud5wqh1slaqk2lb1dlh9onnbp2zb3mntx6mka-euxxa3ja8jga8by8i0a3zwolzrjj3kcnblak8ldsv4b_a7vnrjzqhgfdkbh4nue6qgx49wn9ntjdoc7ww5br7gmo7wmli_yuae773zz9innyd4uwvsa53ogs3b52z_&q={searchterms} =>.SUP.Linkury
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snohulxyvrud5wqh1slaqk2lb1dlh9onnbp2zb3mntx6mka-euxxa3ja8jga8by8i0a3zwolzrjj3kcnblak8ldsv4b_a7vnrjzqhgfdkbh4nue6qgx49wn9ntjdoc7ww5br7gmo7wmli_yuae773zz9innyd4uwvsa53ogs3b52z_&q={searchterms} =>.SUP.Linkury
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snohulxyvrud5wqh1slaqk2lb1dlh9onnbp2zb3mntx6mka-euxxa3ja8jga8by8i0a3zwolzrjj3kcnblak8ldsv4b_a7vnrjzqhgfdkbh4nue6qgx49wn9ntjdoc7ww5br7gmo7wmli_yuae773zz9innyd4uwvsa53ogs3b52z_&q={searchterms} =>.SUP.Linkury
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snohulxyvrud5wqh1slaqk2lb1dlh9onnbp2zb3mntx6mka-euxxa3ja8jga8by8i0a3zwolzrjj3kcnblak8ldsv4b_a7vnrjzqhgfdkbh4nue6qgx49wn9ntjdoc7ww5br7gmo7wmli_yuae773zz9innyd4uwvsa53ogs3b52z_&q={searchterms} =>.SUP.Linkury
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation
R1 - HKEY_USERS\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbrgnclvs1ac6snohulxyvrud5wqh1slaqk2lb1dlh9onnbp2zb3mntx6mka-euxxa3ja8jga8by8i0a3zwolzrjj3kcnblak8ldsv4b_a7vnrjzqhgfdkbh4nue6qgx49wn9ntjdoc7ww5br7gmo7wmli_yuae773zz9innyd4uwvsa53ogs3b52z_&q={searchterms} =>.SUP.Linkury
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17031 (winblue_gdr.140221-1952)) -- C:\Windows\System32\ieframe.dll =>.Microsoft Corporation
R4 - HKLM\Software\WOW6432Node\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 =>Default.Value

---\\ INTERNET EXPLORER, Site de confiance et site sensible (2) - 0s
~ Microsoft Internet Explorer Restricted Site(s) Domains: 0(Good) / 0(Bad)
~ Microsoft Internet Explorer Restricted Site(s) EscDomains: 0(Good) / 0(Bad)

---\\ INTERNET EXPLORER,Proxy Management (5) - 1s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft

---\\ INTERNET EXPLORER,IniFiles, Autoloading Programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ ÉTUDE DU FICHIER HOSTS (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (25)

---\\ BROWSER HELPER OBJECT DE NAVIGATEUR (BHO) (7) - 10s
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files\Microsoft Office\Office15\OCHelper.dll =>.Microsoft Corporation®
O2 - BHO: ExplorerBHO Class [64Bits] - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} . (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer64.dll =>.IvoSoft
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL =>.Microsoft Corporation®
O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll =>.Oracle America, Inc.®
O2 - BHO: ClassicIEBHO Class [64Bits] - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} . (.IvoSoft - Customizations for the title bar and status.) -- C:\Program Files\Classic Shell\ClassicIEDLL_64.dll =>.IvoSoft

---\\ RACCOURCIS GLOBAL STARTUP (108) - 82s
O4 - GS\Desktop [Administrateur]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe /home =>.Dropbox, Inc®
O4 - GS\Desktop [Administrateur]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe =>.Free Time
O4 - GS\Desktop [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Administrateur]: HelpNDoc 5.lnk . (.IBE Software - HelpNDoc help authoring environment.) C:\Program Files (x86)\IBE Software\HelpNDoc 5\hnd5.exe =>.IBE Software®
O4 - GS\Desktop [Administrateur]: Internet Download Accelerator.lnk . (.WestByte - Internet Download Accelerator.) C:\Program Files (x86)\IDA\ida.exe =>.Download Master®
O4 - GS\Desktop [Administrateur]: ireport.lnk . (...) C:\iReport-5.6.0\bin\ireport.exe
O4 - GS\Desktop [Administrateur]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) C:\Program Files (x86)\Notepad++\notepad++.exe =>.Don HO don.h@free.fr
O4 - GS\Desktop [Administrateur]: sqldeveloper - Raccourci.lnk . (.Oracle - .) H:\secure donnees\Dossier brulant\disk\sqldeveloper-4.1.5.21.78-x64\sqldeveloper\sqldeveloper.exe =>.Oracle
O4 - GS\Desktop [Administrateur]: WampServer.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Evarisse\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Administrateur]: Avast Secure Browser.lnk . (...) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe --check-run=src=quicklaunch
O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Administrateur]: Internet Download Accelerator.lnk . (.WestByte - Internet Download Accelerator.) C:\Program Files (x86)\IDA\ida.exe =>.Download Master®
O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrateur]: Microsoft Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE /recycle =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Administrateur]: Oracle VM VirtualBox.lnk . (.Oracle Corporation - Oracle VM VirtualBox.) C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe =>.Oracle Corporation
O4 - GS\Quicklaunch [Administrateur]: WampServer.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software
O4 - GS\Quicklaunch [Administrateur]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation®
O4 - GS\sendTo [Administrateur]: Dropbox.lnk . (...) C:\Users\Evarisse\Dropbox
O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Administrateur]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe =>.Free Time
O4 - GS\TaskBar [Administrateur]: Android Studio.lnk . (.JetBrains s.r.o. - Android Studio.) C:\Program Files\Android\Android Studio\bin\studio64.exe =>.Google Inc®
O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe %SNF% =>.Mozilla Corporation®
O4 - GS\TaskBar [Administrateur]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: On-Screen Keyboard.lnk . (.Microsoft Corporation - Accessibilité au Clavier visuel.) C:\Windows\system32\osk.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Administrateur]: Outlook 2013.lnk . (...) C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\outicon.exe =>.Microsoft Corporation®
O4 - GS\TaskBar [Administrateur]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files\Sublime Text 3\sublime_text.exe =>.Sublime HQ Pty Ltd®
O4 - GS\TaskBar [Administrateur]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Administrateur]: Documents.lnk . (...) C:\Users\Evarisse\Documents
O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Administrateur]: Pictures.lnk . (...) C:\Users\Evarisse\Pictures =>.Microsoft Corporation
O4 - GS\Desktop [Evarisse]: Dropbox.lnk . (.Dropbox, Inc. - Dropbox.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe /home =>.Dropbox, Inc®
O4 - GS\Desktop [Evarisse]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe =>.Free Time
O4 - GS\Desktop [Evarisse]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Desktop [Evarisse]: HelpNDoc 5.lnk . (.IBE Software - HelpNDoc help authoring environment.) C:\Program Files (x86)\IBE Software\HelpNDoc 5\hnd5.exe =>.IBE Software®
O4 - GS\Desktop [Evarisse]: Internet Download Accelerator.lnk . (.WestByte - Internet Download Accelerator.) C:\Program Files (x86)\IDA\ida.exe =>.Download Master®
O4 - GS\Desktop [Evarisse]: ireport.lnk . (...) C:\iReport-5.6.0\bin\ireport.exe
O4 - GS\Desktop [Evarisse]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) C:\Program Files (x86)\Notepad++\notepad++.exe =>.Don HO don.h@free.fr
O4 - GS\Desktop [Evarisse]: sqldeveloper - Raccourci.lnk . (.Oracle - .) H:\secure donnees\Dossier brulant\disk\sqldeveloper-4.1.5.21.78-x64\sqldeveloper\sqldeveloper.exe =>.Oracle
O4 - GS\Desktop [Evarisse]: WampServer.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software
O4 - GS\Desktop [Evarisse]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Evarisse\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\Quicklaunch [Evarisse]: Avast Secure Browser.lnk . (...) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe --check-run=src=quicklaunch
O4 - GS\Quicklaunch [Evarisse]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\Quicklaunch [Evarisse]: Internet Download Accelerator.lnk . (.WestByte - Internet Download Accelerator.) C:\Program Files (x86)\IDA\ida.exe =>.Download Master®
O4 - GS\Quicklaunch [Evarisse]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Evarisse]: Microsoft Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\Office15\OUTLOOK.EXE /recycle =>.Microsoft Corporation®
O4 - GS\Quicklaunch [Evarisse]: Oracle VM VirtualBox.lnk . (.Oracle Corporation - Oracle VM VirtualBox.) C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe =>.Oracle Corporation
O4 - GS\Quicklaunch [Evarisse]: WampServer.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software
O4 - GS\Quicklaunch [Evarisse]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation®
O4 - GS\sendTo [Evarisse]: Dropbox.lnk . (...) C:\Users\Evarisse\Dropbox
O4 - GS\sendTo [Evarisse]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation
O4 - GS\sendTo [Evarisse]: Format Factory.lnk . (.Free Time - FormatFactory.) C:\Program Files (x86)\FreeTime\FormatFactory\FormatFactory.exe =>.Free Time
O4 - GS\TaskBar [Evarisse]: Android Studio.lnk . (.JetBrains s.r.o. - Android Studio.) C:\Program Files\Android\Android Studio\bin\studio64.exe =>.Google Inc®
O4 - GS\TaskBar [Evarisse]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O4 - GS\TaskBar [Evarisse]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe %SNF% =>.Mozilla Corporation®
O4 - GS\TaskBar [Evarisse]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Evarisse]: On-Screen Keyboard.lnk . (.Microsoft Corporation - Accessibilité au Clavier visuel.) C:\Windows\system32\osk.exe =>.Microsoft Corporation
O4 - GS\TaskBar [Evarisse]: Outlook 2013.lnk . (...) C:\WINDOWS\Installer\{91150000-0011-0000-0000-0000000FF1CE}\outicon.exe =>.Microsoft Corporation®
O4 - GS\TaskBar [Evarisse]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files\Sublime Text 3\sublime_text.exe =>.Sublime HQ Pty Ltd®
O4 - GS\TaskBar [Evarisse]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Programs [Evarisse]: Documents.lnk . (...) C:\Users\Evarisse\Documents
O4 - GS\Programs [Evarisse]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Evarisse]: Pictures.lnk . (...) C:\Users\Evarisse\Pictures =>.Microsoft Corporation
O4 - GS\CommonDesktop [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: GanttProject.lnk . (...) C:\Program Files (x86)\GanttProject-2.8\ganttproject.exe
O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe https://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\CommonDesktop [Public]: GRASS GIS 7.0.4.lnk . (...) C:\Program Files\QGIS 2.14.4\bin\grass70.bat -gui
O4 - GS\CommonDesktop [Public]: MyGed.lnk . (.SAS HSCI - MyGed - Logiciel de gestion de document.) C:\Program Files (x86)\MyGed\MyGed.exe
O4 - GS\CommonDesktop [Public]: NetBeans IDE 8.2.lnk . (.Oracle Corporation - The Smarter Way to Code.) C:\Program Files (x86)\NetBeans 8.2\bin\netbeans64.exe =>.Oracle Corporation
O4 - GS\CommonDesktop [Public]: Oracle VM VirtualBox.lnk . (.Oracle Corporation - Oracle VM VirtualBox.) C:\Program Files (x86)\Oracle\VirtualBox\VirtualBox.exe =>.Oracle Corporation
O4 - GS\CommonDesktop [Public]: OSGeo4W Shell.lnk . (...) C:\Program Files\QGIS 2.14.4\OSGeo4W.bat
O4 - GS\CommonDesktop [Public]: PowerISO.lnk . (.Power Software Ltd - PowerISO.) C:\Program Files\PowerISO\PowerISO.exe =>.Power Software Limited®
O4 - GS\CommonDesktop [Public]: SMADΔV.lnk . (.Smadsoft - Smadav USB Antivirus & Additional Protectio.) C:\Program Files (x86)\SMADAV\SMΔRTP.exe =>.SmadSoft
O4 - GS\CommonDesktop [Public]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation®
O4 - GS\Programs [Public]: Documents.lnk . (...) C:\Users\Evarisse\Documents
O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O4 - GS\Programs [Public]: Pictures.lnk . (...) C:\Users\Evarisse\Pictures =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\Windows\system32\psr.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation
O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Outil de Suppression des malwares.lnk . (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) C:\WINDOWS\system32\MRT.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Adobe Help.lnk . (...) C:\Program Files (x86)\Adobe\Adobe Help\Adobe Help.exe =>.Adobe Inc.
O4 - GS\ProgramsCommon [Public]: Adobe Widget Browser.lnk . (...) C:\Program Files (x86)\Adobe\Adobe Widget Browser\Adobe Widget Browser.exe =>.Adobe Inc.
O4 - GS\ProgramsCommon [Public]: Browser Choice.lnk . (...) C:\Windows\BrowserChoice\html\default.html
O4 - GS\ProgramsCommon [Public]: Camera.lnk . (.Microsoft Corporation - Camera.) C:\Windows\Camera\Camera.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Enregistrement OCR I.R.I.S..lnk . (.I.R.I.S. Image Recognition Integarted Systems - Registration Wizard.) C:\Program Files (x86)\HP\Digital Imaging\DocProc\regipe.exe =>.IMAGE RECOGNITION INTEGRATED SYSTEMS SA®
O4 - GS\ProgramsCommon [Public]: FileManager.lnk . (.Microsoft Corporation - OneDrive.) C:\Windows\FileManager\FileManager.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe https://feed.helperbar.com =>PUP.Optional.Salus
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\Windows\System32\Control.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Microsoft Web Platform Installer.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Microsoft\Web Platform Installer\WebPlatformInstaller.exe =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: PhotosApp.lnk . (.Microsoft Corporation - Photos.) C:\Windows\FileManager\PhotosApp.exe =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Search.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\rundll32.exe -sta {C90FB8CA-3295-4462-A721-2935E83694BA} =>..Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Sublime Text 3.lnk . (.Sublime HQ Pty Ltd - Sublime Text.) C:\Program Files\Sublime Text 3\sublime_text.exe =>.Sublime HQ Pty Ltd®
O4 - GS\ProgramsCommon [Public]: Windows Store.lnk . (...) C:\Windows\WinStore\WinStore.htm =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation®

---\\ MODIFICATION DOMAINE/ADRESSES (DNS) (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = cilss.bf
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 206.82.130.195 206.82.130.196 83.229.88.30
O17 - HKLM\System\CCS\Services\Tcpip\..\{606C4C11-069D-4577-8377-D33147828ADA}: DhcpNameServer = 206.82.130.195 206.82.130.196 83.229.88.30
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2111B21-13B4-4226-91F9-13B22D1CB6E6}: DhcpNameServer = 206.82.130.195 206.82.130.196 83.229.88.30
O17 - HKLM\System\CCS\Services\Tcpip\..\{606C4C11-069D-4577-8377-D33147828ADA}: DhcpDomain = cilss.bf
O17 - HKLM\System\CCS\Services\Tcpip\..\{D2111B21-13B4-4226-91F9-13B22D1CB6E6}: DhcpDomain = cilss.bf

---\\ PROTOCOLE ADDITIONNEL (21) - 4s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ REGISTRE AppInit_DLLs et Winlogon Notify (2) - 0s
O20 - AppInit_DLLs: . (...) - C:\ProgramData\Quoteex\Tintax.dll =>PUP.Optional.Graftor
O20 - Winlogon : UserInit . (.Microsoft Corporation - Application d’ouverture de session Userinit.) - C:\Windows\system32\userinit.exe =>.Microsoft Corporation

---\\ COMPOSANTS ACTIVESETUP INSTALLÉS (ASIC) (6) - 8s
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe =>.Microsoft Corporation
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll =>.Microsoft Corporation®
O40 - ASIC: Google Chrome [64Bits] - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Google Inc. - Google Chrome Installer.) -- C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe =>.Google Inc®

---\\ LOGICIELS INSTALLÉS (208) - 236s
O42 - Logiciel: 1.0.1.16 - (.Laetjr.com.) [HKLM][64Bits] -- {DF547229-1227-461B-B527-6846EFBE0C54}_is1 =>.Laetjr.com
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FE23D063-934D-4829-A0D8-00634CE79B4A} =>.Adobe Systems Incorporated (Hidden)
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 32 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AF37176A-78CA-545B-34EF-8B6A21514DD1} =>.Adobe Systems Incorporated (Hidden)
O42 - Logiciel: Adobe Help Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Widget Browser - (.Adobe Systems Incorporated..) [HKLM][64Bits] -- {EFBE6DD5-B224-96E5-72B9-68D328CB12A6} =>.Adobe Systems Incorporated. (Hidden)
O42 - Logiciel: Adobe Widget Browser - (.Adobe Systems Incorporated..) [HKLM][64Bits] -- com.adobe.WidgetBrowser =>.Adobe Systems Incorporated.
O42 - Logiciel: Android Studio - (.Google Inc..) [HKLM][64Bits] -- Android Studio =>.Google Inc®
O42 - Logiciel: Avast Update Helper - (.AVAST Software.) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>.AVAST Software (Hidden)
O42 - Logiciel: AVG Security Toolbar - (.AVG Technologies.) [HKLM][64Bits] -- AVG Secure Search =>.AVG Technologies CZ, s.r.o.®
O42 - Logiciel: BlackBerry Device Manager 8.0 - (.BlackBerry Ltd..) [HKLM][64Bits] -- {35724492-A89F-40BD-9CB0-51C3FFDE9035} =>.BlackBerry Ltd. (Hidden)
O42 - Logiciel: BlackBerry Device Manager 8.0 - (.BlackBerry Ltd..) [HKLM][64Bits] -- BlackBerry_HandheldManager =>.BlackBerry Ltd.
O42 - Logiciel: BufferChm - (.Hewlett-Packard.) [HKLM][64Bits] -- {2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C} =>.Hewlett-Packard (Hidden)
O42 - Logiciel: Classic Shell - (.IvoSoft.) [HKLM][64Bits] -- {840C85B7-D3D6-4143-9AF9-DAE80FD54CFC} =>.IvoSoft
O42 - Logiciel: Composants requis pour SSDT - (.Microsoft Corporation.) [HKLM][64Bits] -- {ACFCFF42-CA92-499C-8549-CC7A05CBEC34} =>.Microsoft Corporation
O42 - Logiciel: Definition Update for Microsoft Office 2013 (KB3115404) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{96903939-431D-4BD1-ADCD-B578900397D7} =>.Microsoft Corporation®
O42 - Logiciel: Destinations - (.Hewlett-Packard.) [HKLM][64Bits] -- {D0DFDFA8-1C04-407B-9CB2-A25AB20DD54D} =>.Hewlett-Packard (Hidden)
O42 - Logiciel: DocProc - (.Hewlett-Packard.) [HKLM][64Bits] -- {9B362566-EC1B-4700-BB9C-EC661BDE2175} =>.Hewlett-Packard (Hidden)
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKLM][64Bits] -- Dropbox =>.Dropbox, Inc®
O42 - Logiciel: Dropbox Update Helper - (.Dropbox, Inc..) [HKLM][64Bits] -- {099218A5-A723-43DC-8DB5-6173656A1E94} =>.Dropbox, Inc. (Hidden)
O42 - Logiciel: Entity Framework Designer pour Visual Studio 2012 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {7A1D7D34-8463-4261-8B97-425385649EF3} =>.Microsoft Corporation
O42 - Logiciel: Epson USB Display - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {7650F538-6274-44EA-8F50-843479073333} =>.SEIKO EPSON CORPORATION®
O42 - Logiciel: Fichiers de support d'installation de Microsoft SQL Server 2008 - (.Microsoft Corporation.) [HKLM][64Bits] -- {4947948E-4188-4DB5-9358-10240A122071} =>.Microsoft Corporation
O42 - Logiciel: FormatFactory 3.3.1.0 - (.Format Factory.) [HKLM][64Bits] -- FormatFactory =>.Format Factory
O42 - Logiciel: GanttProject - (.GanttProject.) [HKLM][64Bits] -- GanttProject =>.GanttProject
O42 - Logiciel: GlassFish Server Open Source Edition 4.1 - (.Sun Microsystems.) [HKLM][64Bits] -- nbi-glassfish-mod-4.1.0.13.0 =>.Sun Microsystems
O42 - Logiciel: GlassFish Server Open Source Edition 4.1.1 - (.Sun Microsystems.) [HKLM][64Bits] -- nbi-glassfish-mod-4.1.1.0.1 =>.Sun Microsystems
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc®
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. (Hidden)
O42 - Logiciel: HelpNDoc 5.2.0.265 Personal Edition - (.IBE Software.) [HKLM][64Bits] -- hnd5_is1 =>.IBE Software
O42 - Logiciel: HP Imaging Device Functions 14.5 - (.HP.) [HKLM][64Bits] -- HP Imaging Device Functions =>.Hewlett Packard®
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE} =>.Hewlett-Packard
O42 - Logiciel: IIS 8.0 Express - (.Microsoft Corporation.) [HKLM][64Bits] -- {7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7} =>.Microsoft Corporation
O42 - Logiciel: IIS Express Application Compatibility Database for x64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9f4f4a9b-eec5-4906-92fe-d1f43ccf5c8d}.sdb =>.Microsoft Corporation
O42 - Logiciel: IIS Express Application Compatibility Database for x86 - (.Microsoft Corporation.) [HKLM][64Bits] -- {fdfba1f3-74ae-4255-9c10-a0f552b4610f}.sdb =>.Microsoft Corporation
O42 - Logiciel: Install - (.SAS HSCI.) [HKLM][64Bits] -- MYGED
O42 - Logiciel: Installation de Microsoft SQL Server 2008 R2 (Français) - (.Microsoft Corporation.) [HKLM][64Bits] -- {FBA2C7DB-DEB7-4A58-8AB7-6A4EDAF3B294} =>.Microsoft Corporation
O42 - Logiciel: Internet Download Accelerator version 6.14 - (.WestByte.) [HKLM][64Bits] -- Internet Download Accelerator_is1 =>.WestByte
O42 - Logiciel: iReport 5.6.0 - (.Jaspersoft Corp..) [HKLM][64Bits] -- iReport-5.6.0.exe
O42 - Logiciel: Java 7 Update 45 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417045FF} =>.Oracle
O42 - Logiciel: Java 8 Update 144 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F64180144F0} =>.Oracle Corporation
O42 - Logiciel: Java 8 Update 77 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86418077F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation (Hidden)
O42 - Logiciel: Java SE Development Kit 7 Update 45 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {64A3A4F4-B792-11D6-A78A-00B0D0170450} =>.Oracle
O42 - Logiciel: Java SE Development Kit 8 Update 144 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {64A3A4F4-B792-11D6-A78A-00B0D0180144} =>.Oracle Corporation
O42 - Logiciel: Java SE Development Kit 8 Update 77 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {64A3A4F4-B792-11D6-A78A-00B0D0180770} =>.Oracle Corporation
O42 - Logiciel: Logiciel d'archivage WinRAR - (.RarLab.) [HKLM][64Bits] -- WinRAR archiver =>.RarLab
O42 - Logiciel: Microsoft .NET Framework 4 Multi-Targeting Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft .NET Framework 4.5 Multi-Targeting Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D} =>.Microsoft Corporation
O42 - Logiciel: Microsoft .NET Framework 4.5 SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {1948E039-EC79-4591-951D-9867A8C14C90} =>.Microsoft Corporation
O42 - Logiciel: Microsoft .NET Framework 4.5 SDK - Module linguistique FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {4FAE80E1-52F1-4935-A6E8-8DE86015405E} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft ASP.NET MVC 3 - (.Microsoft Corporation.) [HKLM][64Bits] -- {DCDEC776-BADD-48B9-8F9A-DFF513C3D7FA} =>.Microsoft Corporation
O42 - Logiciel: Microsoft ASP.NET MVC 3 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {5089FF2D-0F04-419B-AFC2-480D6FC7F432} =>.Microsoft Corporation
O42 - Logiciel: Microsoft ASP.NET MVC 4 Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {3FE312D5-B862-40CE-8E4E-A6D8ABF62736} =>.Microsoft Corporation
O42 - Logiciel: Microsoft ASP.NET Web Pages - (.Microsoft Corporation.) [HKLM][64Bits] -- {631471BE-DEAB-454B-A9AC-CE3EB42C28B3} =>.Microsoft Corporation
O42 - Logiciel: Microsoft ASP.NET Web Pages - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {388504F3-64E3-47DC-9F31-C77E44422C53} =>.Microsoft Corporation
O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Help Viewer 2.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {FEB375AB-6EEC-3929-8FAF-188ED81DD8B5} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Help Viewer 2.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Help Viewer 2.0 =>.Microsoft Corporation
O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office 64-bit Components 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-002A-0000-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Korrekturhilfen 2013 - Deutsch - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001F-0407-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office OSM MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00E1-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office OSM UX MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00E2-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Professional Plus 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Professionnel Plus 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- Office15.PROPLUSR =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Office Proofing (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-002C-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proofing Tools 2013 - English - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001F-0409-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proofing Tools 2013 - Español - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001F-0C0A-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proofing Tools 2013 - Nederlands - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001F-0413-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Proofing Tools 2013 - اللغة العربية - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001F-0401-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Shared 64-bit MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-002A-040C-1000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Office Shared MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-006E-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Silverlight 4 SDK - Français - (.Microsoft Corporation.) [HKLM][64Bits] -- {C7954680-C2B0-4DA7-B0D6-3E2F69D663D7} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Silverlight 5 SDK - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {80125E8C-304D-4637-974A-2547049B0E24} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2008 R2 Native Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {8B62417B-606D-4C21-85D1-01D8E1047257} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2008 R2 RsFx Driver - (.Microsoft Corporation.) [HKLM][64Bits] -- {3BDEDA44-E016-4643-A740-68618D8CCFA2} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft SQL Server 2012 Data-Tier App Framework - (.Microsoft Corporation.) [HKLM][64Bits] -- {36E619BC-A234-4EC3-849B-779A7C865A45} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2012 Data-Tier App Framework - (.Microsoft Corporation.) [HKLM][64Bits] -- {FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server Browser - (.Microsoft Corporation.) [HKLM][64Bits] -- {1141FF5B-5750-4583-AB0A-F893B1D90364} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server Compact 4.0 SP1 x64 FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {0D4447E0-A261-43A4-AEBC-F76E983901F0} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server Data Tools - FRA (11.1.20627.00) - (.Microsoft Corporation.) [HKLM][64Bits] -- {355E0B27-5793-4EA0-BA60-FF5063F5D548} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server Data Tools Build Utilities - FRA (11.1.20627.00) - (.Microsoft Corporation.) [HKLM][64Bits] -- {6B113D3D-9A56-4512-99A9-E4E162A42600} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server System CLR Types - (.Microsoft Corporation.) [HKLM][64Bits] -- {BA8F11CD-E097-41EA-978B-8AA92C9257DF} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server System CLR Types (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {219B85B1-DC23-4688-9A74-CA0B04CF8E06} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server VSS Writer - (.Microsoft Corporation.) [HKLM][64Bits] -- {74AF6D20-B0B5-4DA0-9857-57CA74261170} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2008 R2 - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft SQL Server 10 =>.Microsoft Corporation® (Hidden)
O42 - Logiciel: Microsoft SQL Server 2008 R2 - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft SQL Server 2008 R2 =>.Microsoft Corporation®
O42 - Logiciel: Microsoft SQL Server 2012 Transact-SQL Compiler Service - (.Microsoft Corporation.) [HKLM][64Bits] -- {7ED75AD8-67AD-45FC-BE11-DE363DA14F71} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2012 Transact-SQL ScriptDom - (.Microsoft Corporation.) [HKLM][64Bits] -- {BECA0B13-6542-4D6B-AB50-C06AD0E3C7A9} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2012 Express LocalDB - (.Microsoft Corporation.) [HKLM][64Bits] -- {8E644828-091F-46AF-A2A0-350962A5C585} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2012 Management Objects - (.Microsoft Corporation.) [HKLM][64Bits] -- {9AE5C049-78D8-49C9-99AD-21AEA2E66940} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2012 Management Objects (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {72A76BA4-FB83-4204-A322-AA1ED7E09856} =>.Microsoft Corporation
O42 - Logiciel: Microsoft SQL Server 2012 Native Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {67F01854-264E-44E4-9434-1107741573AA} =>.Microsoft Corporation
O42 - Logiciel: Microsoft System CLR Types pour SQL Server 2012 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {D83F1047-B5E4-49DE-B8CF-3AC6121B27C2} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8220EEFE-38CD-377E-8595-13398D740ACE} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1D8E6291-B0D5-35EC-8441-6616F567A0F7} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0C3E5D1-1ADE-321E-8167-68EF0DE699A5} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7f51bdb9-ee21-49ee-94d6-90afc321780e} =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {929FBD26-9020-399B-9A7A-751D61F0B942} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM][64Bits] -- {A749D8E6-B613-3BE3-8F5F-045C84EBA29B} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual J# 2.0 Redistributable Package - (.Microsoft Corporation.) [HKLM][64Bits] -- {68A35043-C55A-4237-88C9-37EE1C63ED71} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual J# 2.0 Redistributable Package - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Visual J# 2.0 Redistributable Package =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {24C3AEE0-4BCE-3190-8EE0-BBA0BF72CAC1} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual Studio 2010 Tools for Office Runtime (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Visual Studio 2010 Tools for Office Runtime (x64) =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - - (.Microsoft Corporation.) [HKLM][64Bits] -- {C6630DED-F15D-3536-BD88-82B532A491F9} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Web Deploy dbSqlPackage Provider - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {C76D761C-FF45-442C-A3BA-601C4E1167FD} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Web Platform Installer 4.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {E2B8249D-895C-4685-8C83-00F3B1A13028} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft_VC80_ATL_x86 - (.Adobe.) [HKLM][64Bits] -- {0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC80_ATL_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {925D058B-564A-443A-B4B2-7E90C6432E55} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC80_CRT_x86 - (.Adobe.) [HKLM][64Bits] -- {92D58719-BBC1-4CC3-A08B-56C9E884CC2C} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC80_CRT_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {4569AD91-47F4-4D9E-8FC9-717EC32D7AE1} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC80_MFC_x86 - (.Adobe.) [HKLM][64Bits] -- {D1A19B02-817E-4296-A45B-07853FD74D57} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC80_MFC_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {C8C1BAD5-54E6-4146-AD07-3A8AD36569C3} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC80_MFCLOC_x86 - (.Adobe.) [HKLM][64Bits] -- {D92BBB52-82FF-42ED-8A3C-4E062F944AB7} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC80_MFCLOC_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {1E9FC118-651D-4934-97BE-E53CAE5C7D45} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC90_ATL_x86 - (.Adobe.) [HKLM][64Bits] -- {033E378E-6AD3-4AD5-BDEB-CBD69B31046C} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC90_ATL_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {8557397C-A42D-486F-97B3-A2CBC2372593} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC90_CRT_x86 - (.Adobe.) [HKLM][64Bits] -- {08D2E121-7F6A-43EB-97FD-629B44903403} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC90_CRT_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {92A3CA0D-55CD-4C5D-BA95-5C2600C20F26} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC90_MFC_x86 - (.Adobe.) [HKLM][64Bits] -- {635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A} =>.Adobe (Hidden)
O42 - Logiciel: Microsoft_VC90_MFC_x86_x64 - (.Adobe.) [HKLM][64Bits] -- {A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB} =>.Adobe (Hidden)
O42 - Logiciel: Mobile Broadband HL Service - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- Mobile Broadband HL Service =>.Huawei Technologies Co., Ltd.®
O42 - Logiciel: Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {8E2132F6-071A-3768-8691-B7D12FD7531D} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA =>.Microsoft Corporation
O42 - Logiciel: Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA =>.Microsoft Corporation®
O42 - Logiciel: Mozilla Firefox 64.0 (x64 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 64.0 (x64 fr) =>.Mozilla Corporation®
O42 - Logiciel: MySQL Connector/ODBC 5.1 - (.Oracle Corporation.) [HKLM][64Bits] -- {EDB9F166-FA9B-4F71-B2C8-BECD561BD77F} =>.Oracle Corporation
O42 - Logiciel: NetBeans IDE 8.2 - (.NetBeans.org.) [HKLM][64Bits] -- nbi-nb-base-8.2.0.0.201610071157 =>.NetBeans.org
O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++ =>.Notepad++ Team
O42 - Logiciel: OCR Software by I.R.I.S. 14.5 - (.HP.) [HKLM][64Bits] -- HPOCR =>.Hewlett Packard®
O42 - Logiciel: Online Application - (.Microleaves.) [HKLM][64Bits] -- {5266F634-7B7D-4537-BDDC-98DD6CFCBAA1} =>.SUP.Microleaves (Hidden)
O42 - Logiciel: Oracle VM VirtualBox 5.0.14 - (.Oracle Corporation.) [HKLM][64Bits] -- {82022940-639B-48A3-86D9-B139864105F7} =>.Oracle Corporation
O42 - Logiciel: Outils de vérification linguistique 2013 de Microsoft Office - Français - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001F-040C-0000-0000000FF1CE} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: PowerISO - (.Power Software Ltd.) [HKLM][64Bits] -- PowerISO =>.Power Software Ltd
O42 - Logiciel: QGIS 2.14.4 2.14.4 Essen - (.QGIS Development Team.) [HKLM][64Bits] -- QGIS 2.14.4 =>.QGIS Development Team
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp®
O42 - Logiciel: SafeFinder - (.Linkury.) [HKLM][64Bits] -- {E78A9F0C-6526-4391-BE76-A8046824ADDA} =>PUP.Optional.SmartBar
O42 - Logiciel: Security Update for Microsoft Office 2013 (KB2768005) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-006E-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{963A2607-3F2E-4A3D-8D8F-60BFE7E71420} =>.Microsoft Corporation®
O42 - Logiciel: Security Update for Microsoft Office 2013 (KB2910941) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{E0434175-7133-45D2-B53A-78700C2F8BC4} =>.Microsoft Corporation®
O42 - Logiciel: Service de langage T-SQL Microsoft SQL Server 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ED52EFE2-8820-41FD-B66A-FD14C2DEAE0D} =>.Microsoft Corporation
O42 - Logiciel: Service Pack 2 pour SQL Server 2008 R2 (KB2630458) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB2630458 =>.Microsoft Corporation®
O42 - Logiciel: SMADAV version 12.4.1 - (.Smadsoft.) [HKLM][64Bits] -- {8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1 =>.SmadSoft
O42 - Logiciel: SQL Server 2008 R2 SP2 Common Files - (.Microsoft Corporation.) [HKLM][64Bits] -- {062A0D4A-75F6-4E9C-8A38-DFE95662D81B} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: SQL Server 2008 R2 SP2 Common Files - (.Microsoft Corporation.) [HKLM][64Bits] -- {CACEA8C8-3D38-4F51-953D-1E6FC3346FEF} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: SQL Server 2008 R2 SP2 Database Engine Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {23D448C7-7DC7-4C15-B47D-C99364501F07} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: SQL Server 2008 R2 SP2 Database Engine Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: SQL Server 2008 R2 SP2 Database Engine Shared - (.Microsoft Corporation.) [HKLM][64Bits] -- {4C9D82EB-9001-4E59-8F64-0BEEE5F4A30A} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: SQL Server 2008 R2 SP2 Database Engine Shared - (.Microsoft Corporation.) [HKLM][64Bits] -- {F0494EE7-650A-4AC2-8B50-0968FC47EFA6} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Sql Server Customer Experience Improvement Program - (.Microsoft Corporation.) [HKLM][64Bits] -- {93998800-1608-403F-9A51-420A77D23C25} =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Sublime Text Build 3176 - (.Sublime HQ Pty Ltd.) [HKLM][64Bits] -- Sublime Text 3_is1 =>.Sublime HQ Pty Ltd®
O42 - Logiciel: Sybase PowerAMC 15.1 - (.Sybase Inc..) [HKLM][64Bits] -- {48B0BE4A-EDC9-44C4-A3DB-67D62D75961F}
O42 - Logiciel: Synaptics TouchPad Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated
O42 - Logiciel: TAP-Windows 9.9.2 - (.OpenVPN Technologie.) [HKLM][64Bits] -- TAP-Windows =>.OpenVPN Technologie
O42 - Logiciel: Types CLR du système Microsoft pour SQL Server 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7927D9E5-963C-4AE1-8419-544D0D454435} =>.Microsoft Corporation
O42 - Logiciel: Update for Microsoft Office 2013 (KB2760249) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{8C07AD38-38EB-4332-BCB3-F55A77C927DF} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{AD7045B8-1D75-4B4C-8120-12F045D206C7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB2863843) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{AD7045B8-1D75-4B4C-8120-12F045D206C7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB2880478) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7C5CEE0F-6823-4BB7-A28F-76FEC14EB6AC} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB2920754) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-006E-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{6EEF6E8E-9854-4DCD-862F-422DF2F984F7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB2920754) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6EEF6E8E-9854-4DCD-862F-422DF2F984F7} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB2920769) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{D2A7B64F-1BE1-4381-A555-FE49708BF92F} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0015-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0016-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0018-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0019-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-001A-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-001B-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-001F-0401-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-001F-0407-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-001F-0409-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-001F-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-001F-0413-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-001F-0C0A-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-002A-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-002C-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0044-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-006E-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0090-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00A1-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00BA-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00E1-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00E2-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Update for Microsoft Office 2013 (KB3039720) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{16F64A9D-6561-4378-98F2-BD2095B78511} =>.Microsoft Corporation®
O42 - Logiciel: Utilitaires ligne de comm. Microsoft SQL Server 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9DD91EA7-B148-4059-8152-BD4605EECBC6} =>.Microsoft Corporation
O42 - Logiciel: UxStyle - (.The Within Network, LLC.) [HKLM][64Bits] -- {05560347-3a9b-4644-a8ed-8b64cc947189} =>.The Within Network, LLC
O42 - Logiciel: UxStyle - (.The Within Network, LLC.) [HKLM][64Bits] -- {86D24646-DAF6-4F5E-BCAD-CF7EF8E362E1} =>.The Within Network, LLC (Hidden)
O42 - Logiciel: WampServer 2.2 - (.Hervé Leclerc (HeL).) [HKLM][64Bits] -- WampServer 2_is1 =>.Hervé Leclerc (HeL)
O42 - Logiciel: WCF RIA Services V1.0 SP2 - (.Microsoft Corporation.) [HKLM][64Bits] -- {3A523AF9-D32F-4C85-8388-0335731F3405} =>.Microsoft Corporation
O42 - Logiciel: WinPcap 4.1.3 - (.Riverbed Technology, Inc..) [HKLM][64Bits] -- WinPcapInst =>.Riverbed Technology, Inc.
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH
O42 - Logiciel: Wireshark 1.12.2 (32-bit) - (.The Wireshark developer community, http://www.wireshark.org.) [HKLM][64Bits] -- Wireshark =>.Wireshark Foundation®

---\\ CLÉ DE REGISTRE SOFTWARE HKCU & HKLM (254) - 237s
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B} =>.SUP.AdvancedSystemCare
HKLM\SOFTWARE\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\IObit\RealTimeProtector =>.SUP.AdvancedSystemCare
HKLM\SOFTWARE\Iobit\ASC =>.SUP.AdvancedSystemCare
HKLM\SOFTWARE\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B} =>.SUP.AdvancedSystemCare
HKLM\SOFTWARE\AMD =>.AMD
HKLM\SOFTWARE\Android Studio =>.Android Studio
HKLM\SOFTWARE\ATI Technologies =>.ATI Technologies
HKLM\SOFTWARE\AVG Secure Search =>.AVG Secure Search
HKLM\SOFTWARE\Common Toolkit Suite =>.SPAMfighter ApS
HKLM\SOFTWARE\ej-technologies =>.ej-technologies
HKLM\SOFTWARE\Foldershare =>.Foldershare
HKLM\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\InstalledOptions =>.Installed Options
HKLM\SOFTWARE\Intel =>.Intel
HKLM\SOFTWARE\IvoSoft =>.IvoSoft
HKLM\SOFTWARE\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\JreMetrics =>.JreMetrics
HKLM\SOFTWARE\Khronos =>.Khronos
HKLM\SOFTWARE\Macromedia =>.Macromedia
HKLM\SOFTWARE\McAfee =>.McAfee Inc.
HKLM\SOFTWARE\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\Mozilla =>.Mozilla
HKLM\SOFTWARE\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\NeoSmart Technologies =>.NeoSmart Technologies
HKLM\SOFTWARE\Nuance =>.Nuance
HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\Oracle =>.Oracle
HKLM\SOFTWARE\PDF Architect 6 =>.pdfforge GmbH
HKLM\SOFTWARE\QGIS 2.14.4
HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKLM\SOFTWARE\Scanner_bot
HKLM\SOFTWARE\SRS Labs =>.SRS Labs
HKLM\SOFTWARE\Synaptics =>.Synaptics
HKLM\SOFTWARE\TAP-Windows
HKLM\SOFTWARE\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\WinRAR =>.WinRAR
HKLM\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\Adobe =>.Adobe
HKLM\SOFTWARE\WOW6432Node\AMD =>.AMD
HKLM\SOFTWARE\WOW6432Node\Apple Computer, Inc. =>.Apple Computer, Inc.
HKLM\SOFTWARE\WOW6432Node\ATI =>.ATI
HKLM\SOFTWARE\WOW6432Node\Avast =>.Avast Software s.r.o
HKLM\SOFTWARE\WOW6432Node\AVAST Software =>.AVAST Software
HKLM\SOFTWARE\WOW6432Node\AVG Secure Search =>.AVG Secure Search
HKLM\SOFTWARE\WOW6432Node\AVG Security Toolbar =>.AVG Software
HKLM\SOFTWARE\WOW6432Node\AviSynth =>.Ben Rudiak-Gold
HKLM\SOFTWARE\WOW6432Node\Caphyon =>.Caphyon
HKLM\SOFTWARE\WOW6432Node\DivXNetworks =>.DivXNetworks
HKLM\SOFTWARE\WOW6432Node\Dropbox =>.Dropbox
HKLM\SOFTWARE\WOW6432Node\DropboxUpdate =>.Dropbox Inc.
HKLM\SOFTWARE\WOW6432Node\ej-technologies =>.ej-technologies
HKLM\SOFTWARE\WOW6432Node\GanttProject =>.GanttProject
HKLM\SOFTWARE\WOW6432Node\GNU =>.GNU
HKLM\SOFTWARE\WOW6432Node\Google =>.Google
HKLM\SOFTWARE\WOW6432Node\HaaliMkx =>.Haali Media
HKLM\SOFTWARE\WOW6432Node\Hewlett-Packard =>.Hewlett-Packard
HKLM\SOFTWARE\WOW6432Node\IM Providers =>.IM Providers
HKLM\SOFTWARE\WOW6432Node\Intel =>.Intel
HKLM\SOFTWARE\WOW6432Node\IObit =>.IObit
HKLM\SOFTWARE\WOW6432Node\JavaSoft =>.JavaSoft
HKLM\SOFTWARE\WOW6432Node\Khronos =>.Khronos
HKLM\SOFTWARE\WOW6432Node\Lavasoft =>.Lavasoft
HKLM\SOFTWARE\WOW6432Node\Macromedia =>.Macromedia
HKLM\SOFTWARE\WOW6432Node\mcafeeupdater =>.McAfee Inc.
HKLM\SOFTWARE\WOW6432Node\Microleaves =>.SUP.Microleaves
HKLM\SOFTWARE\WOW6432Node\Mozilla =>.Mozilla
HKLM\SOFTWARE\WOW6432Node\mozilla.org =>.mozilla.org
HKLM\SOFTWARE\WOW6432Node\MozillaPlugins =>.MozillaPlugins
HKLM\SOFTWARE\WOW6432Node\mtQuoteex =>PUP.Optional.Graftor
HKLM\SOFTWARE\WOW6432Node\MySQL AB =>.MySQL AB
HKLM\SOFTWARE\WOW6432Node\NeoSmart Technologies =>.NeoSmart Technologies
HKLM\SOFTWARE\WOW6432Node\Notepad++ =>.Don Ho
HKLM\SOFTWARE\WOW6432Node\Nuance =>.Nuance
HKLM\SOFTWARE\WOW6432Node\NuGet =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\ODBC =>.DB Connectivity Solutions
HKLM\SOFTWARE\WOW6432Node\ORACLE =>.Oracle
HKLM\SOFTWARE\WOW6432Node\PDF Architect 6 =>.pdfforge GmbH
HKLM\SOFTWARE\WOW6432Node\PowerISO =>.PowerISO Computing
HKLM\SOFTWARE\WOW6432Node\Research In Motion =>.Research In Motion
HKLM\SOFTWARE\WOW6432Node\SEIKO EPSON CORPORATION =>.Epson/Seico
HKLM\SOFTWARE\WOW6432Node\Sybase
HKLM\SOFTWARE\WOW6432Node\Volatile =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\WinPcap =>.Riverbed Technology
HKLM\SOFTWARE\WOW6432Node\WinRAR =>.WinRAR
HKLM\SOFTWARE\WOW6432Node\Wondershare =>.Wondershare
HKLM\SOFTWARE\WOW6432Node\Wow6432Node =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\2VG
HKCU\SOFTWARE\Adobe =>.Adobe
HKCU\SOFTWARE\Affinix =>.Affinix Software
HKCU\SOFTWARE\Akeo Consulting =>.Akeo Consulting
HKCU\SOFTWARE\Altaruine
HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKCU\SOFTWARE\ATI =>.ATI
HKCU\SOFTWARE\AVAST Software =>.AVAST Software
HKCU\SOFTWARE\AVG Secure Search =>.AVG Secure Search
HKCU\SOFTWARE\BCGSoft
HKCU\SOFTWARE\BitTorrent =>.BitTorrent (P2P)
HKCU\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
HKCU\SOFTWARE\Chromium =>.Chromium
HKCU\SOFTWARE\Dropbox =>.Dropbox
HKCU\SOFTWARE\DropboxUpdate =>.Dropbox Inc.
HKCU\SOFTWARE\drpsu =>.SUP.DriverPack
HKCU\SOFTWARE\DuoDianApp =>.DuoDianApp
HKCU\SOFTWARE\Eidos =>.Eidos
HKCU\SOFTWARE\ej-technologies =>.ej-technologies
HKCU\SOFTWARE\Embarcadero =>.Embarcadero
HKCU\SOFTWARE\ERDAS =>.Erdas Inc
HKCU\SOFTWARE\EXECryptorTestKeys
HKCU\SOFTWARE\Extensoft =>.Extensoft
HKCU\SOFTWARE\FastDataX =>Adware.FastDataX
HKCU\SOFTWARE\FreeTime =>.FreeTime Inc
HKCU\SOFTWARE\Gabest =>.Gabest
HKCU\SOFTWARE\Gaijin =>.Gaijin Entertainment
HKCU\SOFTWARE\GNU =>.GNU
HKCU\SOFTWARE\Google =>.Google
HKCU\SOFTWARE\Haali =>.Haali Media
HKCU\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKCU\SOFTWARE\IBE Software =>.IBE Software
HKCU\SOFTWARE\IM Providers =>.IM Providers
HKCU\SOFTWARE\Intel Corporation =>.Intel Corporation
HKCU\SOFTWARE\IvoSoft =>.IvoSoft
HKCU\SOFTWARE\JavaSoft =>.JavaSoft
HKCU\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKCU\SOFTWARE\Macromedia =>.Macromedia
HKCU\SOFTWARE\Mine =>.Microsoft Corporation
HKCU\SOFTWARE\MiniTool Solution Ltd. =>.MiniTool Solution Ltd.
HKCU\SOFTWARE\Mozilla =>.Mozilla
HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKCU\SOFTWARE\Netscape =>.Netscape
HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKCU\SOFTWARE\OneSystemCare =>PUP.Optional.OneSystemCare
HKCU\SOFTWARE\Opera Software =>.Opera Software
HKCU\SOFTWARE\Oracle =>.Oracle
HKCU\SOFTWARE\Pablo Software Solutions =>.Pablo Software Solutions
HKCU\SOFTWARE\Parisprog
HKCU\SOFTWARE\PC SOFT =>.PC SOFT
HKCU\SOFTWARE\PDF Architect 6 =>.pdfforge GmbH
HKCU\SOFTWARE\PowerISO =>.PowerISO Computing
HKCU\SOFTWARE\ProtectedStorage =>.Microsoft Corporation
HKCU\SOFTWARE\QGIS
HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKCU\SOFTWARE\Research In Motion =>.Research In Motion
HKCU\SOFTWARE\Rtp =>.RTP Software
HKCU\SOFTWARE\SAS HSCI
HKCU\SOFTWARE\SIR 2 Samurai
HKCU\SOFTWARE\skype =>.Skype
HKCU\SOFTWARE\skypeapp-ee779f3e0b5d =>.Skype Technologies
HKCU\SOFTWARE\SMADΔV
HKCU\SOFTWARE\SSH Communications Security
HKCU\SOFTWARE\StackDocklet
HKCU\SOFTWARE\SWiSHzone.com =>.SWiSHzone.com
HKCU\SOFTWARE\Sybase
HKCU\SOFTWARE\Synaptics =>.Synaptics
HKCU\SOFTWARE\Trolltech =>.Trolltech
HKCU\SOFTWARE\UnPas2Asp.exe
HKCU\SOFTWARE\WinRAR =>.WinRAR
HKCU\SOFTWARE\WinRAR SFX =>.RarLab
HKCU\SOFTWARE\Wireshark =>.Wireshark
HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft =>.JavaSoft
HKU\.DEFAULT\SOFTWARE\ATI =>.ATI
HKU\.DEFAULT\SOFTWARE\Avast Software =>.AVAST Software
HKU\.DEFAULT\SOFTWARE\Caphyon =>.Caphyon
HKU\.DEFAULT\SOFTWARE\Dropbox =>.Dropbox
HKU\.DEFAULT\SOFTWARE\Google =>.Google
HKU\.DEFAULT\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKU\.DEFAULT\SOFTWARE\JavaSoft =>.JavaSoft
HKU\.DEFAULT\SOFTWARE\Macromedia =>.Macromedia
HKU\.DEFAULT\SOFTWARE\Mozilla =>.Mozilla
HKU\.DEFAULT\SOFTWARE\Opera Software =>.Opera Software
HKU\.DEFAULT\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\2VG
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Adobe =>.Adobe
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Affinix =>.Affinix Software
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Akeo Consulting =>.Akeo Consulting
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Altaruine
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\AppDataLow =>.Microsoft Corporation
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\ATI =>.ATI
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\AVAST Software =>.AVAST Software
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\AVG Secure Search =>.AVG Secure Search
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\BCGSoft
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\BitTorrent =>.BitTorrent (P2P)
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Browser Cleanup =>.Avast Software s.r.o
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Chromium =>.Chromium
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Dropbox =>.Dropbox
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\DropboxUpdate =>.Dropbox Inc.
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\drpsu =>.SUP.DriverPack
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\DuoDianApp =>.DuoDianApp
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Eidos =>.Eidos
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\ej-technologies =>.ej-technologies
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Embarcadero =>.Embarcadero
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\ERDAS =>.Erdas Inc
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\EXECryptorTestKeys
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Extensoft =>.Extensoft
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\FastDataX =>Adware.FastDataX
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\FreeTime =>.FreeTime Inc
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Gabest =>.Gabest
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Gaijin =>.Gaijin Entertainment
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\GNU =>.GNU
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Google =>.Google
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Haali =>.Haali Media
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Hewlett-Packard =>.Hewlett-Packard
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\IBE Software =>.IBE Software
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\IM Providers =>.IM Providers
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Intel Corporation =>.Intel Corporation
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\IvoSoft =>.IvoSoft
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\JavaSoft =>.JavaSoft
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Local AppWizard-Generated Applications =>.ZWCAD
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Macromedia =>.Macromedia
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Mine =>.Microsoft Corporation
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\MiniTool Solution Ltd. =>.MiniTool Solution Ltd.
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Mozilla =>.Mozilla
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\MozillaPlugins =>.MozillaPlugins
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Netscape =>.Netscape
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\ODBC =>.DB Connectivity Solutions
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\OneSystemCare =>PUP.Optional.OneSystemCare
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Opera Software =>.Opera Software
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Oracle =>.Oracle
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Pablo Software Solutions =>.Pablo Software Solutions
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Parisprog
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\PC SOFT =>.PC SOFT
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\PDF Architect 6 =>.pdfforge GmbH
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\PowerISO =>.PowerISO Computing
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\ProtectedStorage =>.Microsoft Corporation
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\QGIS
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Realtek =>.Realtek Semiconductor Corp.
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\RegisteredApplications =>.Microsoft Corporation
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Research In Motion =>.Research In Motion
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Rtp =>.RTP Software
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\SAS HSCI
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\SIR 2 Samurai
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\skype =>.Skype
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\skypeapp-ee779f3e0b5d =>.Skype Technologies
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\SMADΔV
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\SSH Communications Security
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\StackDocklet
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\SWiSHzone.com =>.SWiSHzone.com
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Sybase
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Synaptics =>.Synaptics
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Trolltech =>.Trolltech
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\UnPas2Asp.exe
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\WinRAR =>.WinRAR
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\WinRAR SFX =>.RarLab
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Wireshark =>.Wireshark
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\Wow6432Node =>.Microsoft Corporation
HKU\S-1-5-21-2136093658-2293275512-771046554-1001\SOFTWARE\ZHP =>.Nicolas Coolman

---\\ CONTENU DES DOSSIERS PROGRAMMES (316) - 160s
O43 - CFD: 28/12/2018 - [0] D -- C:\Program Files\Adobe =>.Adobe
O43 - CFD: 24/05/2016 - [] D -- C:\Program Files\AMD =>.AMD
O43 - CFD: 05/10/2018 - [] D -- C:\Program Files\Android =>.Android
O43 - CFD: 18/07/2017 - [] D -- C:\Program Files\AVG Secure Search =>.AVG Secure Search
O43 - CFD: 02/12/2016 - [] D -- C:\Program Files\Classic Shell =>.Ivo Beltchev
O43 - CFD: 07/12/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation
O43 - CFD: 24/05/2016 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation
O43 - CFD: 03/02/2017 - [] D -- C:\Program Files\glassfish-4.1 =>.Sun Microsystems
O43 - CFD: 07/07/2017 - [] D -- C:\Program Files\glassfish-4.1.1 =>.Sun Microsystems
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files\IIS Express =>.Microsoft Corporation®
O43 - CFD: 21/06/2014 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 25/08/2018 - [] D -- C:\Program Files\Java =>.Oracle
O43 - CFD: 26/06/2018 - [] D -- C:\Program Files\KMSpico =>HackTool.KMSpico
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files\Microsoft =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files\Microsoft SQL Server =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 18/12/2018 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla
O43 - CFD: 26/05/2017 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation
O43 - CFD: 09/12/2018 - [] D -- C:\Program Files\NetBeans 8.2 =>.NetBeans
O43 - CFD: 14/03/2017 - [] D -- C:\Program Files\Oracle =>.Oracle
O43 - CFD: 07/01/2017 - [] D -- C:\Program Files\PowerISO =>.PowerISO Computing
O43 - CFD: 01/12/2018 - [] D -- C:\Program Files\QGIS 2.14.4
O43 - CFD: 24/05/2016 - [] D -- C:\Program Files\Realtek =>.Realtek
O43 - CFD: 21/06/2014 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 19/11/2018 - [] D -- C:\Program Files\Sublime Text 3 =>.Sublime HQ Pty Ltd®
O43 - CFD: 24/05/2016 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated®
O43 - CFD: 06/10/2016 - [] D -- C:\Program Files\TAP-Windows =>.OpenVPN Technologie
O43 - CFD: 19/10/2018 - [0] D -- C:\Program Files\VideoLAN =>.VideoLan Team
O43 - CFD: 21/06/2014 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 24/05/2016 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 27/12/2018 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 06/10/2018 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files\WinRAR =>.WinRAR
O43 - CFD: 28/12/2018 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 18/07/2017 - [] D -- C:\Program Files (x86)\AVG Secure Search =>.AVG Technologies CZ, s.r.o.®
O43 - CFD: 08/03/2017 - [] D -- C:\Program Files (x86)\Balabolka =>.FunnyWords
O43 - CFD: 27/12/2018 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation
O43 - CFD: 14/12/2018 - [] D -- C:\Program Files (x86)\Dropbox =>.Dropbox, Inc®
O43 - CFD: 10/03/2017 - [] D -- C:\Program Files (x86)\EPSON Projector =>.Epson/Seico
O43 - CFD: 14/06/2016 - [] D -- C:\Program Files (x86)\FreeTime =>.FreeTime
O43 - CFD: 30/07/2018 - [] D -- C:\Program Files (x86)\GanttProject-2.8
O43 - CFD: 14/12/2017 - [] D -- C:\Program Files (x86)\Google =>.Google Inc®
O43 - CFD: 08/12/2017 - [] D -- C:\Program Files (x86)\HP =>.Hewlett-Packard
O43 - CFD: 18/07/2017 - [] D -- C:\Program Files (x86)\IBE Software =>.IBE Software®
O43 - CFD: 07/12/2017 - [] D -- C:\Program Files (x86)\IDA
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\IIS Express =>.Microsoft Corporation®
O43 - CFD: 21/06/2014 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation
O43 - CFD: 01/08/2016 - [] D -- C:\Program Files (x86)\IObit =>.IObit
O43 - CFD: 12/12/2017 - [] D -- C:\Program Files (x86)\Jaspersoft
O43 - CFD: 24/09/2018 - [] D -- C:\Program Files (x86)\laetjr =>.laetjr
O43 - CFD: 19/10/2018 - [] D -- C:\Program Files (x86)\Microleaves =>.SUP.Microleaves
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation
O43 - CFD: 21/01/2018 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Microsoft Help Viewer =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation
O43 - CFD: 26/05/2017 - [] D -- C:\Program Files (x86)\Microsoft SDKs =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 30/05/2016 - [] D -- C:\Program Files (x86)\Microsoft SQL Server =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition =>.Microsoft Corporation
O43 - CFD: 26/05/2017 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 11.0 =>.Pinnacle Systems, Inc.
O43 - CFD: 30/05/2016 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 9.0 =>.Pinnacle Systems, Inc.
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation
O43 - CFD: 22/06/2017 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla
O43 - CFD: 26/05/2017 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation
O43 - CFD: 17/12/2018 - [] D -- C:\Program Files (x86)\MyGed
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\MySQL =>.MySQL AB
O43 - CFD: 03/06/2018 - [0] D -- C:\Program Files (x86)\NeoSmart Technologies =>.NeoSmart Technologies
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Notepad++ =>.Don Ho
O43 - CFD: 21/06/2014 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation
O43 - CFD: 05/07/2017 - [] D -- C:\Program Files (x86)\Research In Motion =>.Research In Motion
O43 - CFD: 28/12/2018 - [] D -- C:\Program Files (x86)\SMADAV =>.SmadAV
O43 - CFD: 06/08/2016 - [] D -- C:\Program Files (x86)\Sybase
O43 - CFD: 21/06/2014 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Windows Kits =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\WinPcap =>.Riverbed Technology
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\WinRAR =>.WinRAR
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Wireshark =>.Wireshark
O43 - CFD: 28/12/2018 - [0] D -- C:\Program Files (x86)\Wondershare =>.Wondershare
O43 - CFD: 22/08/2013 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 21/06/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 12/07/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio =>.Google Inc.
O43 - CFD: 05/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlackBerry =>.Research In Motion Ltd
O43 - CFD: 02/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell =>.Ivo Beltchev
O43 - CFD: 29/05/2018 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks =>.CodeBlocks Team
O43 - CFD: 14/12/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox =>.Dropbox
O43 - CFD: 10/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Projector =>.Epson/Seico
O43 - CFD: 30/07/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GanttProject =>.GanttProject Team
O43 - CFD: 18/07/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HelpNDoc
O43 - CFD: 04/01/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP =>.Hewlett-Packard
O43 - CFD: 07/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Accelerator
O43 - CFD: 25/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jargon Informatique =>.tuxfamily.org
O43 - CFD: 12/12/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Jaspersoft
O43 - CFD: 25/08/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle
O43 - CFD: 25/08/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit =>.Oracle
O43 - CFD: 26/06/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
O43 - CFD: 24/09/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\laetjr =>.laetjr
O43 - CFD: 22/08/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 30/07/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 4 SDK - Français =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK - Français =>.Microsoft Corporation
O43 - CFD: 30/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 =>.Microsoft Corporation
O43 - CFD: 30/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 R2 =>.Microsoft Corporation
O43 - CFD: 25/08/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NetBeans =>.NetBeans.org
O43 - CFD: 25/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ =>.Don Ho
O43 - CFD: 14/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox =>.Oracle
O43 - CFD: 07/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO =>.PowerISO Computing
O43 - CFD: 01/12/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QGIS 2.14.4
O43 - CFD: 05/07/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkinPack =>.SkinPack
O43 - CFD: 28/12/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMADAV Antivirus =>.SmadAV
O43 - CFD: 28/12/2018 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation
O43 - CFD: 28/11/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sybase
O43 - CFD: 18/03/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WampServer =>.WAMP Server
O43 - CFD: 25/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap =>.Riverbed Technology
O43 - CFD: 25/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 28/12/2018 - [] D -- C:\ProgramData\Adobe =>.Adobe
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation
O43 - CFD: 25/09/2018 - [] D -- C:\ProgramData\BlueStacksSetup =>.BlueStack Systems, Inc.
O43 - CFD: 17/12/2016 - [] ASHD -- C:\ProgramData\Boot
O43 - CFD: 24/05/2016 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation
O43 - CFD: 14/07/2018 - [] D -- C:\ProgramData\Dropbox =>.Dropbox
O43 - CFD: 27/12/2018 - [] D -- C:\ProgramData\Lavasoft =>.Lavasoft
O43 - CFD: 27/12/2018 - [] D -- C:\ProgramData\Logic Cramble =>PUP.Optional.LogicHandler
O43 - CFD: 18/12/2018 - [] D -- C:\ProgramData\McAfee =>.McAfee
O43 - CFD: 24/05/2016 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation
O43 - CFD: 26/05/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation
O43 - CFD: 30/07/2018 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 17/11/2016 - [] D -- C:\ProgramData\MobileBrServ =>.Huawei Technologies Co.,Ltd
O43 - CFD: 24/05/2016 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation
O43 - CFD: 17/12/2018 - [] D -- C:\ProgramData\MyGed
O43 - CFD: 29/07/2018 - [] D -- C:\ProgramData\Oracle =>.Oracle
O43 - CFD: 01/12/2018 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation
O43 - CFD: 28/11/2018 - [] D -- C:\ProgramData\PowerAMC 15
O43 - CFD: 28/12/2018 - [] D -- C:\ProgramData\Quoteex =>PUP.Optional.Graftor
O43 - CFD: 27/12/2018 - [] D -- C:\ProgramData\Quoteexs =>PUP.Optional.Graftor
O43 - CFD: 27/12/2018 - [] D -- C:\ProgramData\regid.1986-12.com.adobe =>.Adobe Inc.
O43 - CFD: 30/07/2018 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation
O43 - CFD: 19/10/2018 - [] D -- C:\ProgramData\StarUML =>.Stellar Information Systems Ltd
O43 - CFD: 14/07/2018 - [] D -- C:\ProgramData\Synaptics =>.Synaptics
O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation
O43 - CFD: 28/12/2018 - [] D -- C:\ProgramData\Wondershare Player =>.Wondershare
O43 - CFD: 27/12/2018 - [] D -- C:\ProgramData\{81100836-033F-CC7B-471E-F84047F9A111}
O43 - CFD: 27/12/2018 - [] D -- C:\ProgramData\{ADF05305-580C-E09B-7445-186C74A2413D}
O43 - CFD: 28/12/2018 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe
O43 - CFD: 21/12/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR =>.Adobe Inc.
O43 - CFD: 18/07/2017 - [] D -- C:\Program Files (x86)\Common Files\AVG Secure Search =>.AVG Secure Search
O43 - CFD: 26/05/2017 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER =>.Designer
O43 - CFD: 08/12/2017 - [] D -- C:\Program Files (x86)\Common Files\Hewlett-Packard =>.Hewlett-Packard
O43 - CFD: 08/12/2017 - [] D -- C:\Program Files (x86)\Common Files\HP =>.Hewlett-Packard
O43 - CFD: 25/08/2018 - [] D -- C:\Program Files (x86)\Common Files\Java =>.Oracle
O43 - CFD: 27/12/2018 - [] D -- C:\Program Files (x86)\Common Files\Kintrax
O43 - CFD: 26/05/2017 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation
O43 - CFD: 05/07/2017 - [] D -- C:\Program Files (x86)\Common Files\Research In Motion =>.Research In Motion
O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation
O43 - CFD: 03/08/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\AchrafCherti
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\Adobe =>.Adobe
O43 - CFD: 16/02/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\AMD =>.AMD
O43 - CFD: 01/08/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Apple Computer =>.Apple Inc.
O43 - CFD: 15/06/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Artisteer
O43 - CFD: 08/03/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\Balabolka =>.FunnyWords
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\ClassicShell =>.SourceForge
O43 - CFD: 20/04/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\CodeBlocks =>.CodeBlocks Team
O43 - CFD: 20/07/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\Dropbox =>.Dropbox
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\EpicNet Inc =>Adware.MSIL
O43 - CFD: 08/12/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\HP =>.Hewlett-Packard
O43 - CFD: 12/11/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\HpUpdate =>.Hewlett-Packard
O43 - CFD: 28/11/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\InstallShield =>.InstallShield
O43 - CFD: 11/08/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Internet Download Accelerator
O43 - CFD: 01/08/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\IObit =>.IObit
O43 - CFD: 11/09/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\java =>.Oracle
O43 - CFD: 12/07/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\JetBrains =>.JetBrains Inc
O43 - CFD: 16/12/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Macromedia =>.Macromedia
O43 - CFD: 19/10/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\Microleaves =>.SUP.Microleaves
O43 - CFD: 23/03/2018 - [] SD -- C:\Users\Evarisse\AppData\Roaming\Microsoft =>.Microsoft Corporation
O43 - CFD: 23/03/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\Microsoft FxCop =>.Microsoft Corporation
O43 - CFD: 20/11/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\Mozilla =>.Mozilla Corporation
O43 - CFD: 18/12/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\MyGed
O43 - CFD: 27/08/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\NetBeans =>.NetBeans.org
O43 - CFD: 25/05/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Notepad++ =>.Don Ho
O43 - CFD: 27/12/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\One System Care =>PUP.Optional.OneSystemCare
O43 - CFD: 05/12/2017 - [0] D -- C:\Users\Evarisse\AppData\Roaming\Opera Software =>.Opera Software
O43 - CFD: 07/01/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\PowerISO =>.PowerISO Computing
O43 - CFD: 22/11/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\Skype =>.Skype
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\Smadav =>.SmadAV
O43 - CFD: 23/11/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\Solvusoft =>.SUP.Solvusoft
O43 - CFD: 19/12/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\SQL Developer
O43 - CFD: 06/12/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\sqldeveloper
O43 - CFD: 29/11/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\SSH
O43 - CFD: 19/10/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\StarUML =>.Stellar Information Systems Ltd
O43 - CFD: 21/03/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\Sublime Text 2
O43 - CFD: 19/11/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\Sublime Text 3
O43 - CFD: 03/02/2017 - [] D -- C:\Users\Evarisse\AppData\Roaming\Sun =>.Oracle
O43 - CFD: 25/05/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Synaptics =>.Synaptics
O43 - CFD: 04/08/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\uTorrent
O43 - CFD: 11/09/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\VisualParadigm
O43 - CFD: 25/05/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\WinRAR =>.WinRAR
O43 - CFD: 04/06/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Wireshark =>.Wireshark
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Local\Adobe =>.Adobe
O43 - CFD: 19/10/2018 - [] D -- C:\Users\Evarisse\AppData\Local\AdvinstAnalytics =>.SUP.Various
O43 - CFD: 12/08/2018 - [0] D -- C:\Users\Evarisse\AppData\Local\Android =>.Android
O43 - CFD: 15/06/2016 - [] D -- C:\Users\Evarisse\AppData\Local\Apple Computer =>.Apple Inc.
O43 - CFD: 24/05/2016 - [0] SHD -- C:\Users\Evarisse\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Users\Evarisse\AppData\Local\Apps =>.Microsoft Corporation
O43 - CFD: 19/07/2017 - [] D -- C:\Users\Evarisse\AppData\Local\AVG Secure Search =>.AVG Secure Search
O43 - CFD: 13/06/2017 - [] D -- C:\Users\Evarisse\AppData\Local\CEF =>.CEF
O43 - CFD: 29/07/2018 - [] D -- C:\Users\Evarisse\AppData\Local\Chromium =>.Chromium
O43 - CFD: 05/12/2017 - [] D -- C:\Users\Evarisse\AppData\Local\Crossout
O43 - CFD: 01/08/2016 - [0] D -- C:\Users\Evarisse\AppData\Local\Deployment =>.Microsoft Corporation
O43 - CFD: 06/12/2018 - [] D -- C:\Users\Evarisse\AppData\Local\Diagnostics =>.Microsoft Corporation
O43 - CFD: 20/07/2017 - [] D -- C:\Users\Evarisse\AppData\Local\Dropbox =>.Dropbox
O43 - CFD: 29/08/2018 - [0] D -- C:\Users\Evarisse\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation
O43 - CFD: 27/05/2016 - [] SHD -- C:\Users\Evarisse\AppData\Local\EmieSiteList =>.Enterprise mode Site List Mgr
O43 - CFD: 27/05/2016 - [] SHD -- C:\Users\Evarisse\AppData\Local\EmieUserList =>.Enterprise mode Site List Mgr
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Local\EpicNet Inc =>Adware.MSIL
O43 - CFD: 22/06/2017 - [] D -- C:\Users\Evarisse\AppData\Local\Google =>.Google
O43 - CFD: 24/05/2016 - [0] SHD -- C:\Users\Evarisse\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 08/12/2017 - [] D -- C:\Users\Evarisse\AppData\Local\HP =>.Hewlett-Packard
O43 - CFD: 11/09/2018 - [] D -- C:\Users\Evarisse\AppData\Local\JxBrowser
O43 - CFD: 16/10/2018 - [] D -- C:\Users\Evarisse\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [0] D -- C:\Users\Evarisse\AppData\Local\Microsoft Help =>.Microsoft Corporation
O43 - CFD: 30/05/2016 - [] D -- C:\Users\Evarisse\AppData\Local\Microsoft_Corporation =>.Microsoft Corporation
O43 - CFD: 21/06/2016 - [] D -- C:\Users\Evarisse\AppData\Local\Mozilla =>.Mozilla Corporation
O43 - CFD: 26/12/2018 - [] D -- C:\Users\Evarisse\AppData\Local\MSfree Inc =>HackTool.WinActivator
O43 - CFD: 13/07/2018 - [] D -- C:\Users\Evarisse\AppData\Local\MultiPlayerManager
O43 - CFD: 17/12/2016 - [] D -- C:\Users\Evarisse\AppData\Local\NeoSmart_Technologies =>.NeoSmart Technologies
O43 - CFD: 03/02/2017 - [] D -- C:\Users\Evarisse\AppData\Local\NetBeans =>.NetBeans.org
O43 - CFD: 25/09/2018 - [] D -- C:\Users\Evarisse\AppData\Local\Nox =>.FFmpeg Project
O43 - CFD: 05/12/2017 - [0] D -- C:\Users\Evarisse\AppData\Local\Opera Software =>.Opera Software
O43 - CFD: 19/12/2018 - [] D -- C:\Users\Evarisse\AppData\Local\Packages =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Users\Evarisse\AppData\Local\Programs =>.Microsoft Corporation
O43 - CFD: 19/11/2018 - [] D -- C:\Users\Evarisse\AppData\Local\Sublime Text 3
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 24/05/2016 - [0] SHD -- C:\Users\Evarisse\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 03/05/2018 - [] D -- C:\Users\Evarisse\AppData\Local\VirtualStore =>.Microsoft Corporation
O43 - CFD: 17/12/2018 - [] D -- C:\Users\Evarisse\AppData\Local\WDSetup =>.WDSetup
O43 - CFD: 27/05/2016 - [] D -- C:\Users\Evarisse\AppData\Local\Wondershare =>.Wondershare
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\Local\ZHP =>.Nicolas Coolman
O43 - CFD: 25/05/2016 - [0] D -- C:\Users\Evarisse\AppData\Local\Programs\Common =>.Microsoft Corporation
O43 - CFD: 10/05/2017 - [] D -- C:\Users\Evarisse\AppData\LocalLow\Adobe =>.Adobe
O43 - CFD: 25/05/2016 - [] D -- C:\Users\Evarisse\AppData\LocalLow\AVG Secure Search =>.AVG Secure Search
O43 - CFD: 05/06/2016 - [] SHD -- C:\Users\Evarisse\AppData\LocalLow\EmieSiteList =>.Enterprise mode Site List Mgr
O43 - CFD: 05/06/2016 - [] SHD -- C:\Users\Evarisse\AppData\LocalLow\EmieUserList =>.Enterprise mode Site List Mgr
O43 - CFD: 01/08/2016 - [] D -- C:\Users\Evarisse\AppData\LocalLow\IObit =>.IObit
O43 - CFD: 25/06/2016 - [] D -- C:\Users\Evarisse\AppData\LocalLow\Microsoft =>.Microsoft Corporation
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\AppData\LocalLow\Mozilla =>.Mozilla Corporation
O43 - CFD: 03/02/2017 - [] D -- C:\Users\Evarisse\AppData\LocalLow\Oracle =>.Oracle
O43 - CFD: 03/02/2017 - [] D -- C:\Users\Evarisse\AppData\LocalLow\Sun =>.Oracle
O43 - CFD: 03/10/2016 - [] D -- C:\Users\Evarisse\AppData\LocalLow\Temp =>.Microsoft Corporation
O43 - CFD: 16/11/2018 - [] D -- C:\Users\Evarisse\Desktop\Agrictrade newsletters
O43 - CFD: 13/12/2018 - [] D -- C:\Users\Evarisse\Desktop\BIKIENGA
O43 - CFD: 26/12/2018 - [] D -- C:\Users\Evarisse\Desktop\Bureau =>.Microsoft Corporation
O43 - CFD: 31/08/2018 - [] D -- C:\Users\Evarisse\Desktop\Categorie
O43 - CFD: 03/12/2018 - [] D -- C:\Users\Evarisse\Desktop\cetaacafrique
O43 - CFD: 27/12/2018 - [] D -- C:\Users\Evarisse\Desktop\Excel 2013 Fichier
O43 - CFD: 21/12/2018 - [] D -- C:\Users\Evarisse\Desktop\Flyers
O43 - CFD: 29/11/2018 - [] D -- C:\Users\Evarisse\Desktop\Formalisme GED
O43 - CFD: 06/10/2018 - [] D -- C:\Users\Evarisse\Desktop\GestionZoo
O43 - CFD: 13/12/2018 - [] D -- C:\Users\Evarisse\Desktop\gohou
O43 - CFD: 22/12/2018 - [] D -- C:\Users\Evarisse\Desktop\Groupe anok
O43 - CFD: 25/10/2018 - [] D -- C:\Users\Evarisse\Desktop\Ib
O43 - CFD: 24/11/2018 - [] D -- C:\Users\Evarisse\Desktop\image Bulletin
O43 - CFD: 29/08/2018 - [] D -- C:\Users\Evarisse\Desktop\Inputs
O43 - CFD: 13/12/2018 - [] D -- C:\Users\Evarisse\Desktop\issa
O43 - CFD: 17/12/2018 - [] D -- C:\Users\Evarisse\Desktop\Java =>.Oracle
O43 - CFD: 17/12/2018 - [] D -- C:\Users\Evarisse\Desktop\JSF
O43 - CFD: 28/12/2018 - [] D -- C:\Users\Evarisse\Desktop\Mes codes Php
O43 - CFD: 21/11/2018 - [] D -- C:\Users\Evarisse\Desktop\Point Focaux
O43 - CFD: 26/12/2018 - [] D -- C:\Users\Evarisse\Desktop\visio
O43 - CFD: 01/12/2018 - [] D -- C:\Users\Public\Desktop\QGIS 2.14.4
O43 - CFD: 18/03/2014 - [] RD -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [] RD -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] RD -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools
O43 - CFD: 14/06/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory =>.FormatFactory
O43 - CFD: 22/08/2013 - [] D -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [0] D -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ =>.Don Ho
O43 - CFD: 27/12/2018 - [] RD -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation
O43 - CFD: 21/06/2014 - [] RD -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation
O43 - CFD: 25/05/2016 - [] D -- C:\Users\Evarisse\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 24/05/2016 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation
O43 - CFD: 24/05/2016 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation
O43 - CFD: 18/03/2014 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation
O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation
O43 - CFD: 13/08/2018 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\Dropbox =>.Dropbox
O43 - CFD: 25/09/2018 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation
O43 - CFD: 21/08/2017 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Dropbox =>.Dropbox
O43 - CFD: 25/09/2018 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation

---\\ DERNIERS FICHIERS CRÉÉS DANS WINDOWS Prefetcher (13) - 140s
O45 - LFCP:[MD5.CDCA4225442725F4DB15FA60BD919B8B] 21/12/2018 A -- C:\Windows\Prefetch\KMSAUTO NET 1.5.1.EXE-30B5D86A.pf =>HackTool.WinActivator
O45 - LFCP:[MD5.A90C411EBC924CCC238CC7BECE136FC7] 26/12/2018 A -- C:\Windows\Prefetch\KMSAUTO NET 1.5.1.EXE-525A3CA5.pf =>HackTool.WinActivator
O45 - LFCP:[MD5.9392C1C142784DDAF2475205FF3FF1A0] 21/12/2018 A -- C:\Windows\Prefetch\KMSAUTO NET 1.5.1.EXE-ADABABE3.pf =>HackTool.WinActivator
O45 - LFCP:[MD5.890329C736A8421D4810F2AF57D5BF3B] 26/12/2018 A -- C:\Windows\Prefetch\KMSAUTO NET.EXE-70FC7659.pf =>HackTool.WinActivator
O45 - LFCP:[MD5.BD304E78DDECF3963AF911AF4D0E224B] 21/12/2018 A -- C:\Windows\Prefetch\KMSAUTO NET.EXE-A68B90E7.pf =>HackTool.WinActivator
O45 - LFCP:[MD5.F7188FAD4BFAA041E11AE89A364364B1] 23/11/2018 A -- C:\Windows\Prefetch\KMSAUTO NET.EXE-AA33C5B6.pf =>HackTool.WinActivator
O45 - LFCP:[MD5.85F1648A24C68251A2224F656F0B69AC] 26/12/2018 A -- C:\Windows\Prefetch\KMSAUTO NET.EXE-BB028387.pf =>HackTool.WinActivator
O45 - LFCP:[MD5.BC19467700E08E5807E7B4C22DFBB8B1] 26/12/2018 A -- C:\Windows\Prefetch\KMSPICO 10.2.1.EXE-05056594.pf =>HackTool.KMSpico
O45 - LFCP:[MD5.B3DCB3AA09D82B5ACC7AD0511DB1140F] 27/12/2018 A -- C:\Windows\Prefetch\KMSPICO 10.2.1.EXE-80ED434C.pf =>HackTool.KMSpico
O45 - LFCP:[MD5.6906FCA947CF54F3FBBB9F85F9D446FC] 27/12/2018 A -- C:\Windows\Prefetch\KMSPICOACTIVATOR.EXE-2D43DEF0.pf =>HackTool.KMSpico
O45 - LFCP:[MD5.68D58BFB796BCC9541395F47445213DF] 27/12/2018 A -- C:\Windows\Prefetch\ONESYSTEMCARE.EXE-67D04563.pf =>PUP.Optional.OneSystemCare
O45 - LFCP:[MD5.5811DBD89F3CF1C88C0CBC67EE82A233] 27/12/2018 A -- C:\Windows\Prefetch\ONESYSTEMCARE.TMP-AC821E28.pf =>PUP.Optional.OneSystemCare
O45 - LFCP:[MD5.D96847DF46849D9A7D7B142C69B1C17C] 28/12/2018 A -- C:\Windows\Prefetch\QUOTEEX.EXE-8DEA0167.pf =>PUP.Optional.Graftor

---\\ ShellIconOverlayIdentifiers (SIOI) (16) - 5s
O106 - SIOI: DropboxExt1 Class [ DropboxExt01] - {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt7 Class [ DropboxExt02] - {FB314EDF-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt9 Class [ DropboxExt03] - {FB314EE1-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt3 Class [ DropboxExt04] - {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt2 Class [ DropboxExt05] - {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt4 Class [ DropboxExt06] - {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt5 Class [ DropboxExt07] - {FB314EDD-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt8 Class [ DropboxExt08] - {FB314EE0-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt10 Class [ DropboxExt09] - {FB314EE2-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: DropboxExt6 Class [ DropboxExt10] - {FB314EDE-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation
O106 - SIOI: ShareOverlay Class [ShareOverlay] - {594D4122-1F87-41E2-96C7-825FB4796516}. (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer64.dll =>.IvoSoft

---\\ RACCOURCIS DES MENUS CONCEPTUELS (SCMH) (39) - 40s
O108 - CMH1: ANotepad++64 [64Bits] - {B298D29A-A6ED-11DE-BA8C-A68E55D89593} . (. - ShellHandler for Notepad++ (64 bit).) -- C:\Program Files (x86)\Notepad++\NppShell_06.dll =>.Don Ho
O108 - CMH1: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Microsoft Corporation - Porte-documents Windows.) -- C:\Windows\System32\syncui.dll =>.Microsoft Corporation
O108 - CMH1: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH1: PowerISO [64Bits] - {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} . (.Power Software Ltd - PowerISOShell DLL.) -- C:\Program Files\PowerISO\PWRISOSH.DLL =>.Power Software Limited®
O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH1: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (...) -- C:\Program Files\WinRAR\RarExt.dll
O108 - CMH1: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH2: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH2: StartMenuExt [64Bits] - {E595F05F-903F-4318-8B0A-7F633B520D2B} . (.IvoSoft - Start Menu Helper Extension.) -- C:\Windows\system32\StartMenuHelper64.dll =>.IvoSoft
O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH3: SmadExt [64Bits] - {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} . (.Smadsoft - Smadav Shell Extension for 64-bit.) -- C:\Program Files (x86)\SMADAV\SmadExtc64.dll =>.Zainuddin Nafarin®
O108 - CMH4: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH4: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation
O108 - CMH4: PowerISO [64Bits] - {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} . (.Power Software Ltd - PowerISOShell DLL.) -- C:\Program Files\PowerISO\PWRISOSH.DLL =>.Power Software Limited®
O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH4: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (...) -- C:\Program Files\WinRAR\RarExt.dll
O108 - CMH4: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH5: DropboxExt [64Bits] - {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} . (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll =>.Dropbox, Inc®
O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation
O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll =>.Microsoft Corporation
O108 - CMH6: BriefcaseMenu [64Bits] - {85BBD920-42A0-1069-A2E4-08002B30309D} . (.Microsoft Corporation - Porte-documents Windows.) -- C:\Windows\System32\syncui.dll =>.Microsoft Corporation
O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH6: Offline Files [64Bits] - {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} . (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation
O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll =>.Microsoft Corporation®
O108 - CMH6: PowerISO [64Bits] - {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} . (.Power Software Ltd - PowerISOShell DLL.) -- C:\Program Files\PowerISO\PWRISOSH.DLL =>.Power Software Limited®
O108 - CMH6: SmadExt [64Bits] - {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} . (.Smadsoft - Smadav Shell Extension for 64-bit.) -- C:\Program Files (x86)\SMADAV\SmadExtc64.dll =>.Zainuddin Nafarin®
O108 - CMH6: StartMenuExt [64Bits] - {E595F05F-903F-4318-8B0A-7F633B520D2B} . (.IvoSoft - Start Menu Helper Extension.) -- C:\Windows\system32\StartMenuHelper64.dll =>.IvoSoft
O108 - CMH6: WinRAR [64Bits] - {B41DB860-64E4-11D2-9906-E49FADC173CA} . (...) -- C:\Program Files\WinRAR\RarExt.dll
O108 - CMH6: WinRAR32 [64Bits] - {B41DB860-8EE4-11D2-9906-E49FADC173CA} . (.Orphan.)
O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ IMAGE FILE EXECUTION OPTIONS (IFEO) (16) - 2s
O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation®
O50 - IFEO:C:\Windows\System32\drvinst.exe - (.Microsoft Corporation - Module d’installation de pilotes.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - Microsoft Management Console.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\rundll32.exe - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation

---\\ LISTE DES PILOTES DU SYSTÈME (345) - 140s
O58 - SDL:2013/08/22 11:38:15 AC . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\Windows\System32\drivers\1394ohci.sys [231424] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [108896] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\Windows\System32\drivers\acpi.sys [539992] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:49:54 A . (.Microsoft Corporation - ACPIEx Driver.) -- C:\Windows\System32\drivers\acpiex.sys [79712] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:38:48 AC . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\Windows\System32\drivers\acpipagr.sys [10240] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:53 AC . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\Windows\System32\drivers\acpipmi.sys [12288] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:58 AC . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\Windows\System32\drivers\acpitime.sys [10752] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [782176] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:08:23 A . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\afd.sys [563200] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:10:37 A . (.Microsoft Corporation - RAS Agile Vpn Miniport Call Manager.) -- C:\Windows\System32\drivers\agilevpn.sys [96768] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:40 AC . (.Microsoft Corporation - Filtre AGP 440 NT.) -- C:\Windows\System32\drivers\AGP440.sys [62304] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:54 A . (.Microsoft Corporation - Application Compatibility Cache.) -- C:\Windows\System32\drivers\ahcache.sys [76800] =>.Microsoft Corporation
O58 - SDL:2015/07/16 02:09:00 A . (.Advanced Micro Devices - AMD ACP Binaries.) -- C:\Windows\System32\drivers\amdacpksd.sys [297672] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2013/08/22 08:46:34 AC . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\drivers\amdk8.sys [95744] =>.Microsoft Corporation
O58 - SDL:2013/08/22 08:46:35 AC . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\drivers\amdppm.sys [98816] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79200] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [25952] =>.Microsoft Corporation®
O58 - SDL:2015/03/30 01:38:36 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amd_sata.sys [85704] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2015/03/30 01:38:36 A . (.Advanced Micro Devices - Stor Filter Driver.) -- C:\Windows\System32\drivers\amd_xata.sys [43720] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2014/03/18 10:23:30 A . (.Microsoft Corporation - AppID Driver.) -- C:\Windows\System32\drivers\appid.sys [83456] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [114016] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:38:53 A . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\Windows\System32\drivers\asyncmac.sys [26624] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:41 AC . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [26464] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:41 AC . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\Windows\System32\drivers\ataport.sys [199520] =>.Microsoft Corporation®
O58 - SDL:2015/07/16 02:06:36 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [21622272] =>.Advanced Micro Devices, Inc.
O58 - SDL:2015/07/16 01:13:26 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [665088] =>.Advanced Micro Devices, Inc.
O58 - SDL:2013/08/22 11:39:31 AC . (.Microsoft Corporation - Microsoft Basic Display Driver.) -- C:\Windows\System32\drivers\BasicDisplay.sys [50688] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - Microsoft Basic Render Driver.) -- C:\Windows\System32\drivers\BasicRender.sys [33280] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:49:53 AC . (.Microsoft Corporation - Battery Class Driver.) -- C:\Windows\System32\drivers\battc.sys [35168] =>.Microsoft Corporation®
O58 - SDL:2013/08/12 23:25:46 A . (. - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [17624] =>.Broadcom Corporation®
O58 - SDL:2013/08/22 11:40:24 A . (.Microsoft Corporation - BEEP Driver.) -- C:\Windows\System32\drivers\beep.sys [7680] =>.Microsoft Corporation
O58 - SDL:2015/01/23 11:49:10 A . (.BlackBerry Limited - BlackBerry CDC/NCM Driver.) -- C:\Windows\System32\drivers\blackberryncm6_AMD64.sys [25600] =>.BlackBerry Limited
O58 - SDL:2013/08/22 11:38:38 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\Windows\System32\drivers\bowser.sys [102912] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:35:50 A . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\Windows\System32\drivers\bridge.sys [115712] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) -- C:\Windows\System32\drivers\BtaMPM.sys [19456] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:39 AC . (.Microsoft Corporation - HID de contrôle à distance audio/vidéo Blue.) -- C:\Windows\System32\drivers\BthAvrcpTg.sys [36992] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:37:42 AC . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) -- C:\Windows\System32\drivers\bthhfenum.sys [57856] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:16 AC . (.Microsoft Corporation - Minipilote HID mains libres Bluetooth.) -- C:\Windows\System32\drivers\BthhfHid.sys [30720] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\Windows\System32\drivers\bthmodem.sys [64000] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:40:15 A . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\cdfs.sys [88576] =>.Microsoft Corporation
O58 - SDL:2013/08/22 08:46:35 AC . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\cdrom.sys [164352] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:25 AC . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\Windows\System32\drivers\circlass.sys [44032] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:08:23 A . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\Windows\System32\drivers\Classpnp.sys [337240] =>.Microsoft Corporation®
O58 - SDL:2015/03/04 10:25:11 A . (.Microsoft Corporation - Common Log File System Driver.) -- C:\Windows\System32\drivers\clfs.sys [377152] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:43 AC . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\Windows\System32\drivers\CmBatt.sys [25472] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:01:57 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\Windows\System32\drivers\cng.sys [565536] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:38:48 AC . (.Microsoft Corporation - Multi-Transport Composite Bus Enumerator.) -- C:\Windows\System32\drivers\CompositeBus.sys [36352] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:40 A . (.Microsoft Corporation - Console Driver.) -- C:\Windows\System32\drivers\condrv.sys [43008] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:41 A . (.Microsoft Corporation - Crash Dump Driver.) -- C:\Windows\System32\drivers\crashdmp.sys [68960] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 09:43:07 A . (.Microsoft Corporation - Windows Client Side Caching Driver.) -- C:\Windows\System32\drivers\csc.sys [559616] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:50:19 A . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\Windows\System32\drivers\dam.sys [57696] =>.Microsoft Corporation®
O58 - SDL:2018/12/13 05:12:48 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\Windows\System32\drivers\dbx-canary.sys [47800] =>.Microsoft Corporation®
O58 - SDL:2018/12/13 05:12:48 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\Windows\System32\drivers\dbx-dev.sys [47800] =>.Microsoft Corporation®
O58 - SDL:2018/12/13 05:12:48 A . (.Dropbox, Inc. - Dropbox Filter Driver.) -- C:\Windows\System32\drivers\dbx-stable.sys [47800] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:04:19 A . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\dfsc.sys [134144] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:39:44 AC . (.Microsoft Corporation - PnP Disk Driver.) -- C:\Windows\System32\drivers\disk.sys [100192] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:40 A . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\Windows\System32\drivers\Diskdump.sys [36192] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:40:38 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\Windows\System32\drivers\Dmpusbstor.sys [13312] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:37:14 A . (.Microsoft Corporation - Dynamic Memory.) -- C:\Windows\System32\drivers\dmvsc.sys [29696] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:24 AC . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\drivers\drmk.sys [88576] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:40:31 AC . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\Windows\System32\drivers\drmkaud.sys [14560] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:39:46 A . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\Windows\System32\drivers\Dumpata.sys [33632] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:24:25 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\Windows\System32\drivers\dumpfve.sys [71888] =>.Microsoft Corporation®
O58 - SDL:2015/03/13 04:03:30 AC . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\Windows\System32\drivers\dumpsd.sys [154432] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:04:19 A . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\Windows\System32\drivers\dxgkrnl.sys [1557848] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:04:19 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\Windows\System32\drivers\dxgmms1.sys [379224] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:40 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) -- C:\Windows\System32\drivers\EhStorClass.sys [82784] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:40 AC . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) -- C:\Windows\System32\drivers\EhStorTcgDrv.sys [114016] =>.Microsoft Corporation®
O58 - SDL:2014/04/23 14:21:30 A . (.SEIKO EPSON CORPORATION - EPSON Projector Virtual Audio Device.) -- C:\Windows\System32\drivers\EMP_UDAU.sys [23040] =>.Seiko Epson Corporation
O58 - SDL:2013/08/22 11:38:45 AC . (.Microsoft Corporation - Error Device Driver.) -- C:\Windows\System32\drivers\errdev.sys [10240] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3357024] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:40:18 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\Windows\System32\drivers\exfat.sys [200704] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:49:30 A . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\Windows\System32\drivers\fastfat.sys [217952] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:40:18 AC . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\Windows\System32\drivers\fdc.sys [30720] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:21 A . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\Windows\System32\drivers\fileinfo.sys [79192] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:41 A . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\Windows\System32\drivers\filetrace.sys [34816] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:18 AC . (.Microsoft Corporation - Floppy Driver.) -- C:\Windows\System32\drivers\flpydisk.sys [25088] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:08:23 A . (.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) -- C:\Windows\System32\drivers\fltMgr.sys [360792] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:49:30 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) -- C:\Windows\System32\drivers\fsdepends.sys [56672] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 13:25:40 A . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\Windows\System32\drivers\fs_rec.sys [30048] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:08:23 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\Windows\System32\drivers\fvevol.sys [589656] =>.Microsoft Corporation®
O58 - SDL:2015/06/11 20:12:56 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\Windows\System32\drivers\FWPKCLNT.SYS [428888] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 08:46:33 AC . (.Microsoft Corporation - Processor Driver.) -- C:\Windows\System32\drivers\fxppm.sys [27136] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:45 A . (.Microsoft Corporation - Filtre AGPv3.0 générique Microsoft pour pla.) -- C:\Windows\System32\drivers\GAGP30KX.SYS [65888] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:08:23 AC . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\hdaudbus.sys [77312] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:01 AC . (.Microsoft Corporation - Hid Battery Driver.) -- C:\Windows\System32\drivers\hidbatt.sys [26624] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:39 AC . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\Windows\System32\drivers\hidbth.sys [96768] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:04:19 AC . (.Microsoft Corporation - Bibliothèque Hid Class.) -- C:\Windows\System32\drivers\hidclass.sys [111616] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:37:28 AC . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\Windows\System32\drivers\hidi2c.sys [41472] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:16 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\Windows\System32\drivers\hidir.sys [45568] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:26 AC . (.Microsoft Corporation - Hid Parsing Library.) -- C:\Windows\System32\drivers\hidparse.sys [32512] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:04:19 AC . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\Windows\System32\drivers\hidusb.sys [33280] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:14 A . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\Windows\System32\drivers\http.sys [994136] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:39:47 A . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\Windows\System32\drivers\hwpolicy.sys [24416] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:37:49 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\Windows\System32\drivers\hyperkbd.sys [13824] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:20 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) -- C:\Windows\System32\drivers\HyperVideo.sys [22016] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:15 AC . (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [107520] =>.Microsoft Corporation
O58 - SDL:2013/07/30 18:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568] =>.Intel Corporation - Software and Firmware Products®
O58 - SDL:2013/07/25 19:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320] =>.Intel Corporation - Software and Firmware Products®
O58 - SDL:2013/08/10 00:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [651248] =>.Intel Corporation - Intel® Rapid Storage Technology®
O58 - SDL:2013/08/22 12:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:44 A . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\Windows\System32\drivers\intelide.sys [18272] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - Intel Power Engine Plugin.) -- C:\Windows\System32\drivers\intelpep.sys [39768] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 08:46:35 AC . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\drivers\intelppm.sys [98816] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:35:51 A . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\Windows\System32\drivers\ipfltdrv.sys [84992] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:04:19 A . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\Windows\System32\drivers\IPMIDrv.sys [79360] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:34 A . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\ipnat.sys [142848] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:37:35 A . (.Microsoft Corporation - IRDA Protocol Driver.) -- C:\Windows\System32\drivers\irda.sys [118784] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:30 A . (.Microsoft Corporation - Infra-Red Bus Enumerator.) -- C:\Windows\System32\drivers\irenum.sys [17920] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:45 AC . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\Windows\System32\drivers\isapnp.sys [21856] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:45 AC . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\Windows\System32\drivers\kbdclass.sys [58208] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:13 AC . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\Windows\System32\drivers\kbdhid.sys [32256] =>.Microsoft Corporation
O58 - SDL:2014/03/18 09:43:14 A . (.Microsoft Corporation - Keyboard Lockdown Subsystem.) -- C:\Windows\System32\drivers\kbldfltr.sys [22272] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:38:26 AC . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\Windows\System32\drivers\kdnic.sys [19456] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:12:25 A . (.Microsoft Corporation - Kernel CSA Library.) -- C:\Windows\System32\drivers\ks.sys [295424] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:03 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\drivers\ksecdd.sys [101208] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:01:57 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\Windows\System32\drivers\ksecpkg.sys [180056] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:31 A . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) -- C:\Windows\System32\drivers\ksthunk.sys [21248] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:18 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\Windows\System32\drivers\lltdio.sys [59392] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109408] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [93536] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [81760] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:24 A . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) -- C:\Windows\System32\drivers\luafv.sys [124416] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:38 A . (.Microsoft Corporation - Medium changer class driver.) -- C:\Windows\System32\drivers\mcd.sys [22016] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [56672] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:40:15 A . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\Windows\System32\drivers\modem.sys [40960] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:37 AC . (.Microsoft Corporation - Monitor Driver.) -- C:\Windows\System32\drivers\monitor.sys [30208] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:45 AC . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\Windows\System32\drivers\mouclass.sys [51040] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:13 AC . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\Windows\System32\drivers\mouhid.sys [30208] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:40 A . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\Windows\System32\drivers\mountmgr.sys [101728] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:36:06 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\Windows\System32\drivers\mpsdrv.sys [74240] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:04:19 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\Windows\System32\drivers\mrxdav.sys [140288] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:10:37 A . (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\mrxsmb.sys [402432] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:04:19 A . (.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) -- C:\Windows\System32\drivers\mrxsmb10.sys [283648] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:13:12 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\Windows\System32\drivers\mrxsmb20.sys [206848] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:41 A . (.Microsoft Corporation - Mailslot driver.) -- C:\Windows\System32\drivers\msfs.sys [30208] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:26 A . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\Windows\System32\drivers\msgpioclx.sys [146776] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:48 AC . (.Microsoft Corporation - GPIO Button Driver.) -- C:\Windows\System32\drivers\msgpiowin32.sys [41824] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:06 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\Windows\System32\drivers\mshidkmdf.sys [8192] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:06 A . (.Microsoft Corporation - Pilote direct pour interface HID-UMDF.) -- C:\Windows\System32\drivers\mshidumdf.sys [9728] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:49 AC . (.Microsoft Corporation - ISA Driver.) -- C:\Windows\System32\drivers\msisadrv.sys [17248] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:08:23 AC . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\Windows\System32\drivers\msiscsi.sys [275800] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:31 A . (.Microsoft Corporation - MS KS Server.) -- C:\Windows\System32\drivers\mskssrv.sys [10624] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:07 A . (.Microsoft Corporation - Pilote de protocole LLDP (Link Layer Discov.) -- C:\Windows\System32\drivers\mslldp.sys [66560] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:30 A . (.Microsoft Corporation - MS Proxy Clock.) -- C:\Windows\System32\drivers\mspclock.sys [7040] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:31 A . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\Windows\System32\drivers\mspqm.sys [6784] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:35 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\Windows\System32\drivers\msrpc.sys [366432] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:49:29 AC . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\Windows\System32\drivers\mssmbios.sys [37728] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:38:38 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\Windows\System32\drivers\mstee.sys [7936] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:37:36 AC . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\Windows\System32\drivers\MTConfig.sys [13312] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:49:29 A . (.Microsoft Corporation - Multiple UNC Provider Driver.) -- C:\Windows\System32\drivers\mup.sys [78688] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840] =>.Microsoft Corporation®
O58 - SDL:2015/07/14 21:59:47 A . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) -- C:\Windows\System32\drivers\ndis.sys [1113944] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:38:06 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\Windows\System32\drivers\ndiscap.sys [43008] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:11:38 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\Windows\System32\drivers\NdisImPlatform.sys [126464] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:16 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\Windows\System32\drivers\ndistapi.sys [24576] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:37:34 A . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\Windows\System32\drivers\ndisuio.sys [60416] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:25 A . (.Microsoft Corporation - Énumérateur de cartes réseau virtuelles Mic.) -- C:\Windows\System32\drivers\NdisVirtualBus.sys [16384] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:35:56 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\Windows\System32\drivers\ndiswan.sys [220672] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:16 A . (.Microsoft Corporation - NDIS Proxy.) -- C:\Windows\System32\drivers\ndproxy.sys [72192] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:35:42 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) -- C:\Windows\System32\drivers\Ndu.sys [103424] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:58 A . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\Windows\System32\drivers\netbios.sys [48128] =>.Microsoft Corporation
O58 - SDL:2016/05/13 23:07:20 A . (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netbt.sys [281088] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:35 A . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\Windows\System32\drivers\netio.sys [478048] =>.Microsoft Corporation®
O58 - SDL:2015/04/20 02:21:30 A . (.MediaTek Inc. - MediaTek 802.11 Wireless Adapter Driver.) -- C:\Windows\System32\drivers\netr28x.sys [2543760] =>.MEDIATEK INC.®
O58 - SDL:2013/08/22 11:36:43 A . (.Microsoft Corporation - Virtual NDIS6.3 Miniport.) -- C:\Windows\System32\drivers\netvsc63.sys [87040] =>.Microsoft Corporation
O58 - SDL:2013/03/01 01:49:12 A . (.Riverbed Technology, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [36600] =>.Riverbed Technology, Inc.®
O58 - SDL:2013/08/22 13:25:41 A . (.Microsoft Corporation - NPFS Driver.) -- C:\Windows\System32\drivers\npfs.sys [58880] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:22 AC . (.Microsoft Corporation - Named pipe service triggers.) -- C:\Windows\System32\drivers\npsvctrig.sys [23040] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:35 A . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\drivers\nsiproxy.sys [39936] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:10:57 A . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [2013528] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 13:25:41 A . (.Microsoft Corporation - NULL Driver.) -- C:\Windows\System32\drivers\null.sys [5632] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [168288] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:32 A . (.Microsoft Corporation - Filtre AGP NForce NT.) -- C:\Windows\System32\drivers\NV_AGP.SYS [124768] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:08:23 A . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\Windows\System32\drivers\nwifi.sys [443904] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:07 A . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\Windows\System32\drivers\pacer.sys [151552] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:02 AC . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\parport.sys [94208] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:03:19 A . (.Microsoft Corporation - Partition Management Driver.) -- C:\Windows\System32\drivers\partmgr.sys [88920] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\Windows\System32\drivers\pci.sys [280920] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:31 AC . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\pciide.sys [14688] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:32 AC . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\Windows\System32\drivers\pciidex.sys [48992] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:49:30 AC . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\Windows\System32\drivers\pcmcia.sys [114528] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:39:15 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\Windows\System32\drivers\pcw.sys [50016] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:01 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\Windows\System32\drivers\pdc.sys [86872] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:30 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\Windows\System32\drivers\PEAuth.sys [663040] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\Windows\System32\drivers\portcls.sys [272896] =>.Microsoft Corporation
O58 - SDL:2013/08/22 08:46:34 AC . (.Microsoft Corporation - Processor Device Driver.) -- C:\Windows\System32\drivers\processr.sys [92160] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:27 A . (.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) -- C:\Windows\System32\drivers\qwavedrv.sys [47104] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:01 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\Windows\System32\drivers\rasacd.sys [17408] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:35:51 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\rasl2tp.sys [120832] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:37 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\Windows\System32\drivers\raspppoe.sys [84992] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:35:51 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\Windows\System32\drivers\raspptp.sys [107520] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:11 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\Windows\System32\drivers\rassstp.sys [96256] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:05 A . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) -- C:\Windows\System32\drivers\rdbss.sys [408576] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:52 AC . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\Windows\System32\drivers\rdpbus.sys [22528] =>.Microsoft Corporation
O58 - SDL:2014/03/18 09:43:10 A . (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [195584] =>.Microsoft Corporation
O58 - SDL:2014/03/18 09:43:12 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\Windows\System32\drivers\rdpvideominiport.sys [27488] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:18 A . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\Windows\System32\drivers\rdyboost.sys [249688] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:32 A . (.Microsoft Corporation - Pilote du système de fichiers ReFS NT.) -- C:\Windows\System32\drivers\refs.sys [924504] =>.Microsoft Corporation®
O58 - SDL:2012/12/10 15:48:02 A . (.Research in Motion Ltd - RIM Virtual Serial Driver.) -- C:\Windows\System32\drivers\RimSerial_AMD64.sys [44544] =>.Research in Motion Ltd
O58 - SDL:2015/01/14 09:47:20 A . (.BlackBerry Limited - BlackBerry Device Driver.) -- C:\Windows\System32\drivers\RimUsb_AMD64.sys [80384] =>.BlackBerry Limited
O58 - SDL:2013/08/22 11:36:23 A . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\Windows\System32\drivers\rmcast.sys [144384] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:44 A . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\Windows\System32\drivers\RNDISMP.sys [32256] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:44 AC . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\Windows\System32\drivers\rndismpx.sys [32256] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:26 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\Windows\System32\drivers\rootmdm.sys [11776] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:34 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\Windows\System32\drivers\rspndr.sys [80384] =>.Microsoft Corporation
O58 - SDL:2015/05/20 07:38:28 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\Windows\System32\drivers\Rt630x64.sys [890112] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/07/30 04:02:52 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [4577024] =>.Realtek Semiconductor Corp®
O58 - SDL:2013/06/18 14:46:24 A . (.Realtek Semiconductor Corporation - Realtek RTL8192S USB NDIS Driver.) -- C:\Windows\System32\drivers\RTL8192su.sys [694856] =>.Realtek Semiconductor Corp®
O58 - SDL:2015/06/02 15:04:20 A . (.Realtek Semiconductor Corp. - Realtek Pcie CardReader Driver for 2K/XP/Vi.) -- C:\Windows\System32\drivers\RtsPStor.sys [365272] =>.Realtek Semiconductor Corp®
O58 - SDL:2013/08/22 12:39:15 AC . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\Windows\System32\drivers\sbp2port.sys [107872] =>.Microsoft Corporation®
O58 - SDL:2015/02/28 03:26:36 A . (.Power Software Ltd - PowerISO Virtual Drive.) -- C:\Windows\System32\drivers\scdemu.sys [127760] =>.Power Software Limited®
O58 - SDL:2013/08/22 11:38:07 A . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce.) -- C:\Windows\System32\drivers\scfilter.sys [40960] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:32 A . (.Microsoft Corporation - SCSI Port Driver.) -- C:\Windows\System32\drivers\scsiport.sys [170848] =>.Microsoft Corporation®
O58 - SDL:2015/03/13 04:03:31 AC . (.Microsoft Corporation - Pilote du bus numérique sécurisé (SD).) -- C:\Windows\System32\drivers\sdbus.sys [239424] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - Pilote de classe de stockage SD.) -- C:\Windows\System32\drivers\sdstor.sys [79192] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 15:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Rovi Corporation
O58 - SDL:2013/08/22 12:43:31 A . (.Microsoft Corporation - Serial Class Extension.) -- C:\Windows\System32\drivers\SerCx.sys [69472] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:26 A . (.Microsoft Corporation - Serial Class Extension V2.) -- C:\Windows\System32\drivers\SerCx2.sys [146776] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:40:17 AC . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\Windows\System32\drivers\serenum.sys [23040] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:08 AC . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\Windows\System32\drivers\serial.sys [83456] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:02 AC . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\drivers\sermouse.sys [26112] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:00 AC . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\Windows\System32\drivers\sfloppy.sys [17408] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760] =>.Microsoft Corporation®
O58 - SDL:2015/07/06 09:16:00 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_AMDASF_Aux.sys [33448] =>.Synaptics Incorporated®
O58 - SDL:2015/07/06 09:16:02 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_Intel_Aux.sys [33960] =>.Synaptics Incorporated®
O58 - SDL:2013/08/22 11:40:16 A . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\Windows\System32\drivers\smclib.sys [19968] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:08:23 AC . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\Windows\System32\drivers\spaceport.sys [384856] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:31 A . (.Microsoft Corporation - SPB Class Extension.) -- C:\Windows\System32\drivers\SpbCx.sys [72032] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:05 A . (.Microsoft Corporation - Server driver.) -- C:\Windows\System32\drivers\srv.sys [454656] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:08:23 A . (.Microsoft Corporation - Pilote de serveur SMB 2.0.) -- C:\Windows\System32\drivers\srv2.sys [677376] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:08:23 A . (.Microsoft Corporation - Server Network driver.) -- C:\Windows\System32\drivers\srvnet.sys [246272] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:31 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\Windows\System32\drivers\storahci.sys [107872] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:22:59 AC . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) -- C:\Windows\System32\drivers\stornvme.sys [57176] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:12:30 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\Windows\System32\drivers\storport.sys [373080] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:36:48 A . (.Microsoft Corporation - Storage VSC Driver.) -- C:\Windows\System32\drivers\storvsc.sys [45888] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 09:43:01 A . (.Microsoft Corporation - Storage vsp Driver.) -- C:\Windows\System32\drivers\storvsp.sys [68608] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:26 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\Windows\System32\drivers\stream.sys [67584] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:33 AC . (.Microsoft Corporation - Plug and Play Software Device Enumerator.) -- C:\Windows\System32\drivers\swenum.sys [14176] =>.Microsoft Corporation®
O58 - SDL:2015/07/06 09:15:56 A . (.Synaptics Incorporated - Synaptics Touchpad Win64 Driver.) -- C:\Windows\System32\drivers\SynTP.sys [605352] =>.Synaptics Incorporated®
O58 - SDL:2013/08/22 12:40:24 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\drivers\tap0901.sys [40664] =>.OpenVPN Technologies, Inc.®
O58 - SDL:2013/08/22 11:39:50 A . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\Windows\System32\drivers\tape.sys [29696] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:49:33 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\Windows\System32\drivers\tbs.sys [21856] =>.Microsoft Corporation®
O58 - SDL:2016/03/12 00:49:26 A . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\Windows\System32\drivers\tcpip.sys [2466136] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:04:19 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\Windows\System32\drivers\tcpipreg.sys [49152] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:35 A . (.Microsoft Corporation - TDI Wrapper.) -- C:\Windows\System32\drivers\tdi.sys [30208] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:35 A . (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [107520] =>.Microsoft Corporation
O58 - SDL:2014/03/18 09:43:02 AC . (.Microsoft Corporation - Terminal Server Input Driver.) -- C:\Windows\System32\drivers\terminpt.sys [37216] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:39:14 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) -- C:\Windows\System32\drivers\tm.sys [121184] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:49:33 AC . (.Microsoft Corporation - Pilote de périphérique TPM.) -- C:\Windows\System32\drivers\tpm.sys [159584] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:37:28 A . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\Windows\System32\drivers\TsUsbFlt.sys [56320] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:37:46 AC . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\Windows\System32\drivers\TsUsbGD.sys [29696] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:35:45 A . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\Windows\System32\drivers\tunnel.sys [154112] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:33 A . (.Microsoft Corporation - Filtre MS AGPv3.5.) -- C:\Windows\System32\drivers\UAGP35.SYS [64864] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:33 AC . (.Microsoft Corporation - Microsoft Uasp Driver.) -- C:\Windows\System32\drivers\uaspstor.sys [74080] =>.Microsoft Corporation®
O58 - SDL:2014/10/07 06:54:45 AC . (.Microsoft Corporation - USB Controller Extension.) -- C:\Windows\System32\drivers\UCX01000.SYS [189248] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:40:20 A . (.Microsoft Corporation - UDF File System Driver.) -- C:\Windows\System32\drivers\udfs.sys [316928] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:39:15 AC . (.Microsoft Corporation - UEFI Driver for NT.) -- C:\Windows\System32\drivers\uefi.sys [26976] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:33 A . (.Microsoft Corporation - Filtre ULi AGPv3.0 pour plateformes à proce.) -- C:\Windows\System32\drivers\ULIAGPKX.SYS [65888] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:38:59 AC . (.Microsoft Corporation - User-Mode Bus Enumerator.) -- C:\Windows\System32\drivers\umbus.sys [46080] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:58 AC . (.Microsoft Corporation - Generic pass-through driver.) -- C:\Windows\System32\drivers\umpass.sys [11776] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:16 A . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\Windows\System32\drivers\usb8023.sys [20992] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:17 AC . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\Windows\System32\drivers\usb8023x.sys [20992] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:01 AC . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\Windows\System32\drivers\USBAUDIO.sys [121088] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:27 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\Windows\System32\drivers\USBCAMD2.sys [32512] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:22:59 AC . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\Windows\System32\drivers\usbccgp.sys [155480] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:38:26 AC . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\Windows\System32\drivers\usbcir.sys [98304] =>.Microsoft Corporation
O58 - SDL:2015/10/11 06:34:30 AC . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\Windows\System32\drivers\usbd.sys [27992] =>.Microsoft Corporation®
O58 - SDL:2015/10/11 06:34:30 AC . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\Windows\System32\drivers\usbehci.sys [92504] =>.Microsoft Corporation®
O58 - SDL:2015/10/11 06:34:30 AC . (.Microsoft Corporation - Pilote de concentrateur USB par défaut.) -- C:\Windows\System32\drivers\usbhub.sys [462168] =>.Microsoft Corporation®
O58 - SDL:2015/10/11 06:34:30 AC . (.Microsoft Corporation - Pilote de concentrateur USB3.) -- C:\Windows\System32\drivers\USBHUB3.SYS [468824] =>.Microsoft Corporation®
O58 - SDL:2015/10/10 18:41:14 AC . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\Windows\System32\drivers\usbohci.sys [30208] =>.Microsoft Corporation
O58 - SDL:2015/10/11 06:34:30 AC . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\Windows\System32\drivers\usbport.sys [443224] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:36:33 AC . (.Microsoft Corporation - USB Printer driver.) -- C:\Windows\System32\drivers\usbprint.sys [26112] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:39 A . (.Microsoft Corporation - Gestionnaire de stratégie de redirection US.) -- C:\Windows\System32\drivers\usbrpm.sys [30720] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:58 A . (.Microsoft Corporation - USB Scanner Driver.) -- C:\Windows\System32\drivers\usbscan.sys [44544] =>.Microsoft Corporation
O58 - SDL:2016/01/31 19:16:21 AC . (.Microsoft Corporation - Pilote de classe de stockage de masse USB.) -- C:\Windows\System32\drivers\USBSTOR.SYS [148832] =>.Microsoft Corporation®
O58 - SDL:2015/10/10 18:41:17 AC . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\Windows\System32\drivers\usbuhci.sys [37376] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:00 AC . (.Microsoft Corporation - USB Video Class Driver.) -- C:\Windows\System32\drivers\usbvideo.sys [212224] =>.Microsoft Corporation
O58 - SDL:2015/04/16 06:17:07 AC . (.Microsoft Corporation - Pilote XHCI USB.) -- C:\Windows\System32\drivers\USBXHCI.SYS [325464] =>.Microsoft Corporation®
O58 - SDL:2013/09/23 04:19:04 A . (.The Within Network, LLC - UxStyle Kernel Driver.) -- C:\Windows\System32\drivers\uxstyle.sys [31440] =>.The Within Network, LLC®
O58 - SDL:2016/01/19 17:40:50 A . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\System32\drivers\VBoxDrv.sys [965440] =>.Oracle Corporation®
O58 - SDL:2016/01/19 17:40:20 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Host-Only Network Adapt.) -- C:\Windows\System32\drivers\VBoxNetAdp6.sys [117768] =>.Oracle Corporation®
O58 - SDL:2016/01/19 17:40:20 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Lightweight Filter Driv.) -- C:\Windows\System32\drivers\VBoxNetLwf.sys [194976] =>.Oracle Corporation®
O58 - SDL:2016/01/19 17:40:20 A . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\Windows\System32\drivers\VBoxUSBMon.sys [138904] =>.Oracle Corporation®
O58 - SDL:2013/08/22 12:37:27 AC . (.Microsoft Corporation - Virtual Drive Root Enumerator.) -- C:\Windows\System32\drivers\vdrvroot.sys [37728] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:03 A . (.Microsoft Corporation - Driver Verifier Extension.) -- C:\Windows\System32\drivers\VerifierExt.sys [175960] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 10:23:00 AC . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\Windows\System32\drivers\vhdmp.sys [551256] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [19808] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 09:43:01 A . (.Microsoft Corporation - Pilote d’infrastructure de virtualisation M.) -- C:\Windows\System32\drivers\Vid.sys [220672] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:31 A . (.Microsoft Corporation - Video Port Driver.) -- C:\Windows\System32\drivers\videoprt.sys [49152] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:36:48 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) -- C:\Windows\System32\drivers\vmbkmcl.sys [90944] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 09:43:01 A . (.Microsoft Corporation - Hyper-V VMBus Root KMCL.) -- C:\Windows\System32\drivers\vmbkmclr.sys [77312] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:36:51 A . (.Microsoft Corporation - Microsoft Hyper-V Virtual Machine Bus Child.) -- C:\Windows\System32\drivers\vmbus.sys [97088] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:37:50 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\Windows\System32\drivers\VMBusHID.sys [21760] =>.Microsoft Corporation
O58 - SDL:2014/03/18 09:43:01 A . (.Microsoft Corporation - Microsoft Hyper-V Virtual Machine Bus Root.) -- C:\Windows\System32\drivers\vmbusr.sys [129536] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:23 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) -- C:\Windows\System32\drivers\vmgencounter.sys [11264] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:38:37 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\Windows\System32\drivers\vms3cap.sys [7168] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:36:48 A . (.Microsoft Corporation - Virtual Storage Filter Driver.) -- C:\Windows\System32\drivers\vmstorfl.sys [49984] =>.Microsoft Corporation®
O58 - SDL:2016/04/11 06:21:51 AC . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\drivers\volmgr.sys [74584] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:39:15 A . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) -- C:\Windows\System32\drivers\volmgrx.sys [377696] =>.Microsoft Corporation®
O58 - SDL:2016/03/14 16:50:13 AC . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [316760] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:37:27 A . (.Microsoft Corporation - Virtual PCI Bus.) -- C:\Windows\System32\drivers\vpci.sys [69472] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 09:43:01 A . (.Microsoft Corporation - Virtual PCI VSP Driver.) -- C:\Windows\System32\drivers\vpcivsp.sys [65536] =>.Microsoft Corporation
O58 - SDL:2013/08/22 12:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [168800] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:39:00 AC . (.Microsoft Corporation - Pilote de bus WiFi virtuel.) -- C:\Windows\System32\drivers\vwifibus.sys [24576] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:10:37 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\Windows\System32\drivers\vwififlt.sys [71680] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:10:37 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\Windows\System32\drivers\vwifimp.sys [38912] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:15 AC . (.Microsoft Corporation - Wacom Serial Pen Tablet HID Driver.) -- C:\Windows\System32\drivers\wacompen.sys [26752] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:35:46 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\Windows\System32\drivers\wanarp.sys [79872] =>.Microsoft Corporation
O58 - SDL:2014/03/18 10:23:47 A . (.Microsoft Corporation - Watchdog Driver.) -- C:\Windows\System32\drivers\watchdog.sys [54272] =>.Microsoft Corporation
O58 - SDL:2014/06/21 13:07:15 A . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\Windows\System32\drivers\WdBoot.sys [35856] =>.Microsoft Windows Early Launch Anti-malware Publisher®
O58 - SDL:2013/08/22 13:25:41 A . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) -- C:\Windows\System32\drivers\Wdf01000.sys [839488] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:07:15 A . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\Windows\System32\drivers\WdFilter.sys [257880] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 13:25:41 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\Windows\System32\drivers\WdfLdr.sys [60224] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:07:15 A . (.Microsoft Corporation - Microsoft Network Realtime Inspection Drive.) -- C:\Windows\System32\drivers\WdNisDrv.sys [123224] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:39:04 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) -- C:\Windows\System32\drivers\werkernel.sys [38240] =>.Microsoft Corporation®
O58 - SDL:2014/11/10 18:06:59 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) -- C:\Windows\System32\drivers\wfplwfs.sys [136512] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:45:37 A . (.Microsoft Corporation - Wim file system Driver.) -- C:\Windows\System32\drivers\wimmount.sys [33632] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:36:48 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\Windows\System32\drivers\winhv.sys [61248] =>.Microsoft Corporation®
O58 - SDL:2014/03/18 09:43:01 A . (.Microsoft Corporation - Windows Hypervisor Root Interface Driver.) -- C:\Windows\System32\drivers\winhvr.sys [48128] =>.Microsoft Corporation
O58 - SDL:2015/10/10 18:40:25 AC . (.Microsoft Corporation - Windows WinUSB Class Driver.) -- C:\Windows\System32\drivers\winusb.sys [78848] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:40:04 AC . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\Windows\System32\drivers\wmiacpi.sys [16384] =>.Microsoft Corporation
O58 - SDL:2013/08/22 13:25:41 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\Windows\System32\drivers\wmilib.sys [18272] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:04:19 A . (.Microsoft Corporation - Windows Overlay Filter.) -- C:\Windows\System32\drivers\wof.sys [157016] =>.Microsoft Corporation®
O58 - SDL:2014/06/21 13:11:31 A . (.Microsoft Corporation - Family Safety Filter Driver.) -- C:\Windows\System32\drivers\wpcfltr.sys [55328] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 12:36:12 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) -- C:\Windows\System32\drivers\WpdUpFltr.sys [26976] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 13:25:41 A . (.Microsoft Corporation - WPP Trace Recorder.) -- C:\Windows\System32\drivers\WppRecorder.sys [23392] =>.Microsoft Corporation®
O58 - SDL:2013/08/22 11:40:03 A . (.Microsoft Corporation - Couche IFS Winsock2.) -- C:\Windows\System32\drivers\ws2ifsl.sys [21504] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:58 AC . (.Microsoft Corporation - Web Services Print Device Driver.) -- C:\Windows\System32\drivers\WSDPrint.sys [20992] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:39:50 A . (.Microsoft Corporation - Web Service Based Scan Device Driver.) -- C:\Windows\System32\drivers\WSDScan.sys [23040] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:37:21 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\Windows\System32\drivers\WUDFPf.sys [117760] =>.Microsoft Corporation
O58 - SDL:2013/08/22 11:36:50 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\Windows\System32\drivers\WUDFRd.sys [230912] =>.Microsoft Corporation
O58 - SDL:2012/08/20 14:48:50 N . (...) -- C:\Windows\System32\pwdrvio.sys [19032] =>.MiniTool Solution Ltd®
O58 - SDL:2012/08/20 14:48:48 N . (...) -- C:\Windows\System32\pwdspio.sys [12384] =>.MiniTool Solution Ltd®
O58 - SDL:2014/06/21 13:10:37 A . (.Microsoft Corporation - Pilote Win32 multi-utilisateurs.) -- C:\Windows\System32\win32k.sys [4190208] =>.Microsoft Corporation

---\\ DERNIERS FICHIERS MODIFIÉS OU CRÉÉS (Utilisateur) (9) - 830s
O61 - LFC: 2018/12/27 18:10:45 A . (..) -- C:\ProgramData\Logic Cramble\set.exe [3780096] =>.SUP.Linkury
O61 - LFC: 2018/12/27 18:33:48 A . (..) -- C:\ProgramData\Quoteex\Donstring.dll [460800] =>PUP.Optional.Graftor
O61 - LFC: 2018/12/27 18:33:48 A . (..) -- C:\ProgramData\Quoteex\Movelab.exe [114688] =>PUP.Optional.Graftor
O61 - LFC: 2018/12/27 18:33:48 A . (..) -- C:\ProgramData\Quoteex\Tintax.dll [342528] =>PUP.Optional.Graftor
O61 - LFC: 2018/12/27 18:33:48 A . (..) -- C:\ProgramData\Quoteex\Yearlab.exe [149504] =>PUP.Optional.Graftor
O61 - LFC: 2018/12/27 18:27:49 A . (..) -- C:\Users\Evarisse\AppData\Local\Medsing.exe [3622912]
O61 - LFC: 2018/12/27 18:30:02 A . (..) -- C:\Users\Evarisse\AppData\Local\Temp\2blvwf3v.oxy\OneSystemCare.exe [5604656] =>PUP.Optional.OneSystemCare
O61 - LFC: 2018/12/25 12:43:34 A . (..) -- C:\Users\Evarisse\AppData\Local\Temp\is-NIH5M.tmp\npfkg.dll [1770640] =>PUP.Optional.OneSystemCare
O61 - LFC: 2018/12/27 18:27:49 A . (..) -- C:\Users\Evarisse\AppData\Local\Voltrax.exe [3622912]

---\\ ASSOCIATION Shell Spawning (10) - 3s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* =>.Default.Value
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %* =>.Default.Value
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S =>.Default.Value

---\\ MENU DE DÉMARRAGE INTERNET (12) - 1s
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O68 - StartMenuInternet: [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc.
O68 - StartMenuInternet: [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation

---\\ RECHERCHE D'INFECTION SUR LES NAVIGATEURS (4) - 156s
O69 - SBI: SearchScopes [HKCU] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ =>.Bing.com
O69 - SBI: SearchScopes [HKCU] [64Bits]{95B7759C-8C7F-4BF1-B163-73684A933233} - (AVG Secure Search) - http://isearch.avg.com/ =>.AVG Software
O69 - SBI: SearchScopes [HKCU] [64Bits]{ielnksrch} [DefaultScope] - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRGNclVS1AC6sNoHulxyVRUd5wQh1Slaqk2LB1DLh9onNbP2zB3mnTX6MKa-euXxa3ja8Jga8By8i0a3zWOlzRJj3KCnBlaK8LDSv4B_a7vNRJZQhGFdkBh4NUE6qgx49wN9NtJDOc7Ww5BR7gMo7Wmli_Yuae773zz9InNYD4UWVsA53ogS3B52z_&q={searchTerms} =>.SUP.Linkury
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com

---\\ ÉNUMÈRE LES SERVICES DÉMARRÉS PAR Svchost (36) - 3s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [208896] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [155136] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [155136] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [323072] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1308160] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [1083904] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [906240] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [30720] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [109568] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [150528] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [107008] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1265152] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [220672] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [70656] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [134144] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [228864] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [324096] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [81408] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [97792] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [339456] =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [491520] =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1576960] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [50688] =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [201728] =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [164352] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [101376] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [534528] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [223744] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [71680] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [433664] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [306688] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [3678720] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1017856] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [629760] =>.Microsoft Corporation
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [183296] =>.Microsoft Corporation
O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [90464] =>.Microsoft Corporation®

---\\ LISTE DES EXCEPTIONS DU PAREFEU WINDOWS (85) - 30s
O87 - FAEL: "{7D890FA5-8ED2-491A-90AB-CBF7561BBCCF}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{E5575AD0-C601-418E-A4FA-5B404B487847}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{EDDF9221-8AB7-42FE-A2DF-816F7EC2B540}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe =>.Mozilla Corporation
O87 - FAEL: "TCP Query User{8960A8BE-045F-4CCF-B8AA-DC1E0A9D652D}C:\wamp\bin\apache\apache2.4.2\bin\httpd.exe" [In-None-P6-TRUE] .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.4.2\bin\httpd.exe =>.Apache Software Foundation
O87 - FAEL: "UDP Query User{DEEA7AC8-2DB1-483E-9114-517E56589E1B}C:\wamp\bin\apache\apache2.4.2\bin\httpd.exe" [In-None-P17-TRUE] .(.Apache Software Foundation - Apache HTTP Server.) -- C:\wamp\bin\apache\apache2.4.2\bin\httpd.exe =>.Apache Software Foundation
O87 - FAEL: "TCP Query User{7361DBDF-E302-4857-BED3-EC02E8CC60C7}C:\program files (x86)\cisco packet tracer 6.1.1sv\bin\packettracer6.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\cisco packet tracer 6.1.1sv\bin\packettracer6.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{E3C84258-967C-44CD-B92A-DA6C66855A1B}C:\program files (x86)\cisco packet tracer 6.1.1sv\bin\packettracer6.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\cisco packet tracer 6.1.1sv\bin\packettracer6.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{E263B01D-B9CD-4AB8-8F52-8C6FCC7DFE48}" [In-None-P6-TRUE] .(...) -- C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{D3A7B318-7A0D-4B27-B710-6A88AC67A8CD}" [In-None-P17-TRUE] .(...) -- C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{FBABB84F-37C0-456D-80E4-D57BB93456E4}C:\users\evarisse\appdata\local\temp\orainstall2016-11-20_01-34-57pm\jre\1.4.2\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2016-11-20_01-34-57pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "UDP Query User{0713B03A-1C2F-46DA-9920-3CC103911C49}C:\users\evarisse\appdata\local\temp\orainstall2016-11-20_01-34-57pm\jre\1.4.2\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2016-11-20_01-34-57pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{D826FFAE-39E7-4667-996F-9B79D7427022}" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2016-11-20_01-34-57pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{2849F09C-1CE2-44B7-8A75-4D861A5504EC}" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2016-11-20_01-34-57pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "TCP Query User{9A2DA70B-A00D-4DB1-84AE-D02577BE6A38}C:\oracle2\product\10.2.0\db_2\jdk\jre\bin\java.exe" [In-None-P6-TRUE] .(...) -- C:\oracle2\product\10.2.0\db_2\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{3E8E2A1F-D03C-4C1F-A1DA-134009ED3B2A}C:\oracle2\product\10.2.0\db_2\jdk\jre\bin\java.exe" [In-None-P17-TRUE] .(...) -- C:\oracle2\product\10.2.0\db_2\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{184B6EE0-5575-4BC5-9186-E0E7DB366F9C}" [In-None-P17-TRUE] .(...) -- C:\oracle2\product\10.2.0\db_2\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{3283A48E-267C-45E8-B90A-86F900EC4805}" [In-None-P6-TRUE] .(...) -- C:\oracle2\product\10.2.0\db_2\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{C4ED18E0-5F95-4455-8952-10EB0CBA343A}C:\users\evarisse\appdata\local\temp\orainstall2016-12-07_03-01-01pm\jre\1.4.2\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2016-12-07_03-01-01pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "UDP Query User{B3216335-4661-452F-8DE9-69B0B789ED93}C:\users\evarisse\appdata\local\temp\orainstall2016-12-07_03-01-01pm\jre\1.4.2\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2016-12-07_03-01-01pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{B329DC62-D13C-4A25-82E4-0B1E0DF54558}" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2016-12-07_03-01-01pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{6A74CC30-F0D5-463C-9F96-8DD8F96E50B4}" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2016-12-07_03-01-01pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "TCP Query User{D4D0DF95-B46F-401A-A1D0-5CF8189B2255}C:\oracle8.1\product\10.2.0\db_1\jdk\jre\bin\java.exe" [In-None-P6-TRUE] .(...) -- C:\oracle8.1\product\10.2.0\db_1\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{527B487F-6C76-417E-B12F-DCCFDDCF10F4}C:\oracle8.1\product\10.2.0\db_1\jdk\jre\bin\java.exe" [In-None-P17-TRUE] .(...) -- C:\oracle8.1\product\10.2.0\db_1\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{D0BBEAD2-33FE-44C2-85AB-D1A5113F02E8}" [In-None-P17-TRUE] .(...) -- C:\oracle8.1\product\10.2.0\db_1\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{15D8EECF-C928-4A8E-BD2C-22BC79609D99}" [In-None-P6-TRUE] .(...) -- C:\oracle8.1\product\10.2.0\db_1\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{1266C690-D868-4FD3-99A4-A2BC63D968B6}C:\program files (x86)\adobe\adobe flash cs5\flash.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\adobe\adobe flash cs5\flash.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{86068B07-64AE-40E3-997E-637500465F06}C:\program files (x86)\adobe\adobe flash cs5\flash.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\adobe\adobe flash cs5\flash.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{30232AE7-5199-4893-A799-958170F2A983}" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\adobe\adobe flash cs5\flash.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{33D31C1E-C89D-4700-B211-6254F51A018E}" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\adobe\adobe flash cs5\flash.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{7A2527FE-52FF-4D83-8B5D-F193C11CAD38}" [In-None-P6-TRUE] .(.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O87 - FAEL: "{591AE268-859F-4DF9-8FD1-F7E5476E6D8D}" [In-None-P17-TRUE] .(.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®
O87 - FAEL: "{8201D537-F733-488A-88E9-A9E95672B251}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{A97CF11E-8090-4C87-9971-AADA7F079941}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe (.not file.) =>HackTool.KMSpico
O87 - FAEL: "{7EF02082-E82A-402F-80CC-478094730E2C}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "{053C19AD-7221-49D4-9CFB-C51CF4E9A0C5}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "{4732585E-968F-419A-BF4D-A810FC5E824E}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "{43817FD5-646A-497C-846B-1CCDE3A9748E}" [In-None-P17-TRUE] .(.Hewlett-Packard - HP Update Client.) -- C:\Program Files (x86)\HP\hp software update\hpwucli.exe =>.Hewlett-Packard Company®
O87 - FAEL: "{FCF77112-10C6-43F8-8F6E-BB2EDF6BA8BA}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\common files\hp\digital imaging\bin\hpqphotocrm.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "{23BCBBFD-F7A4-4566-977D-1A91F874865E}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqsudi.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "{1591CC27-A791-4EA7-86BD-7ED42A7FFCD2}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpsapp.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "{1665131D-611F-4316-83EB-4D0614EB29F7}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqpse.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "{FFE59AF0-15CE-47E5-B87A-CFAAD9972DE6}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "{61F7F73C-29A5-4A71-B4E5-E8535A5CB7F5}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe (.not file.) =>.Hewlett-Packard
O87 - FAEL: "TCP Query User{72ADC315-E6B0-419A-8A4B-638C1F3C73CF}C:\users\evarisse\appdata\local\temp\orainstall2018-02-13_10-17-33am\jre\1.4.2\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-02-13_10-17-33am\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "UDP Query User{32ADBFC2-A4AC-49EB-9279-A2A5EEE03EEB}C:\users\evarisse\appdata\local\temp\orainstall2018-02-13_10-17-33am\jre\1.4.2\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-02-13_10-17-33am\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{EF65AA61-0766-496D-847B-9E5F663E8866}" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-02-13_10-17-33am\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{E3266999-3B45-46D8-941C-4C8BF34E5071}" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-02-13_10-17-33am\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "TCP Query User{1656656D-094D-4CF7-8A87-FDC5928EA420}C:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe" [In-None-P6-TRUE] .(...) -- C:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{21FEE856-1640-4A37-87B8-74BD8C6EAEC3}C:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe" [In-None-P17-TRUE] .(...) -- C:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{FE01B0CA-7055-4BCA-99BB-CFBEBB454A53}" [In-None-P17-TRUE] .(...) -- C:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{AA077E48-F28D-4FA6-9AB3-A9AD9FE30426}" [In-None-P6-TRUE] .(...) -- C:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{AF746933-0A15-422A-BAC0-340134093AB3}C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_10-07-42am\jre\1.4.2\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_10-07-42am\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "UDP Query User{A3CC760C-B7DE-4D01-B692-1A56767E5E9F}C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_10-07-42am\jre\1.4.2\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_10-07-42am\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{EC80294B-83D0-4BC2-9D58-DDB4FD33BA01}" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_10-07-42am\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{7B746364-9153-4DA8-8135-71F214D01E38}" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_10-07-42am\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "TCP Query User{1A4C84BF-79B0-43B0-8231-A1C48EC4E38A}C:\oracle\product\10.2.0\db_2\jdk\jre\bin\java.exe" [In-None-P6-TRUE] .(...) -- C:\oracle\product\10.2.0\db_2\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{0FBDCB99-FCC8-46B2-8E25-86F2B6538AEC}C:\oracle\product\10.2.0\db_2\jdk\jre\bin\java.exe" [In-None-P17-TRUE] .(...) -- C:\oracle\product\10.2.0\db_2\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{002DBE4D-E88F-4EC1-A453-7B730F0237A1}" [In-None-P17-TRUE] .(...) -- C:\oracle\product\10.2.0\db_2\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{CAE0265C-EECE-47C1-AB8C-C2B2014D779D}" [In-None-P6-TRUE] .(...) -- C:\oracle\product\10.2.0\db_2\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{F4561C94-96BE-42E1-97E4-A8B6FD3477ED}C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_04-13-58pm\jre\1.4.2\bin\javaw.exe" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_04-13-58pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "UDP Query User{551E7C55-1CA6-41D2-A8AC-696EF55C7BE8}C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_04-13-58pm\jre\1.4.2\bin\javaw.exe" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_04-13-58pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{86A60192-F23C-4085-9DFF-6EF4C93A9FD6}" [In-None-P17-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_04-13-58pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "{EF67E68B-5931-479C-BD9A-FE8E886A004C}" [In-None-P6-TRUE] .(...) -- C:\users\evarisse\appdata\local\temp\orainstall2018-03-01_04-13-58pm\jre\1.4.2\bin\javaw.exe (.not file.) =>.Temporary file not necessary
O87 - FAEL: "TCP Query User{6C4AD5C6-AE48-4359-BD79-F5FE2C277184}C:\oracle\product\10.2.0\db_3\jdk\jre\bin\java.exe" [In-None-P6-TRUE] .(...) -- C:\oracle\product\10.2.0\db_3\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "UDP Query User{676EA54D-4293-4A10-A772-25B0DE360C17}C:\oracle\product\10.2.0\db_3\jdk\jre\bin\java.exe" [In-None-P17-TRUE] .(...) -- C:\oracle\product\10.2.0\db_3\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{AEC44865-CA9A-4DC0-A950-6BCB8A9F9275}" [In-None-P17-TRUE] .(...) -- C:\oracle\product\10.2.0\db_3\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{6BDC66E7-FA8E-4DA4-B8F4-41A8CC5C28D6}" [In-None-P6-TRUE] .(...) -- C:\oracle\product\10.2.0\db_3\jdk\jre\bin\java.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{FD8094C6-BDCD-4ECF-8AFF-3B4955136A37}C:\program files\android\android studio\jre\bin\java.exe" [In-None-P6-TRUE] .(.N/A - OpenJDK Platform binary.) -- C:\program files\android\android studio\jre\bin\java.exe
O87 - FAEL: "UDP Query User{65D39305-D9A7-4AF3-AE59-FEB79148DC9B}C:\program files\android\android studio\jre\bin\java.exe" [In-None-P17-TRUE] .(.N/A - OpenJDK Platform binary.) -- C:\program files\android\android studio\jre\bin\java.exe
O87 - FAEL: "{FA1ACE3C-3B33-48EF-9D51-07BE276BBE8C}" [In-None-P17-TRUE] .(.N/A - OpenJDK Platform binary.) -- C:\program files\android\android studio\jre\bin\java.exe
O87 - FAEL: "{B68FB217-2BD4-48A5-A557-5FF14506F606}" [In-None-P6-TRUE] .(.N/A - OpenJDK Platform binary.) -- C:\program files\android\android studio\jre\bin\java.exe
O87 - FAEL: "TCP Query User{879914CB-72A1-4CAA-81C7-C8F84240F9C4}C:\program files\java\jdk1.8.0_77\bin\java.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jdk1.8.0_77\bin\java.exe =>.Oracle America, Inc.®
O87 - FAEL: "UDP Query User{F7092552-02D9-4AFA-A6AC-D9FC50D3A85D}C:\program files\java\jdk1.8.0_77\bin\java.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jdk1.8.0_77\bin\java.exe =>.Oracle America, Inc.®
O87 - FAEL: "{2A957685-27CA-40BD-99F5-9FFC12BD54EF}" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jdk1.8.0_77\bin\java.exe =>.Oracle America, Inc.®
O87 - FAEL: "{B47E91F4-6FCD-4662-B7AB-4DEF735D68A5}" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jdk1.8.0_77\bin\java.exe =>.Oracle America, Inc.®
O87 - FAEL: "TCP Query User{7C9BDCB5-898E-4A6D-B88B-412C12E05282}C:\program files\java\jdk1.8.0_144\bin\java.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jdk1.8.0_144\bin\java.exe =>.Oracle America, Inc.®
O87 - FAEL: "UDP Query User{A9EE8CB9-8B56-40A7-98C2-E57450207C5E}C:\program files\java\jdk1.8.0_144\bin\java.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jdk1.8.0_144\bin\java.exe =>.Oracle America, Inc.®
O87 - FAEL: "{5791062A-77D2-4530-9857-94F74466B771}" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jdk1.8.0_144\bin\java.exe =>.Oracle America, Inc.®
O87 - FAEL: "{18C11B41-C1DF-42AB-8B4F-35DD9DA3E8ED}" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jdk1.8.0_144\bin\java.exe =>.Oracle America, Inc.®
O87 - FAEL: "{E52A089D-B47F-481E-8E17-734AB763CEEE}" [In-None-P6-TRUE] .(...) -- D:\Program Files\Nox\bin\Nox.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "{21EC947F-5050-4B6B-86BD-E630A22CB4F6}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe (.not file.) =>.SUP.Orphan
O87 - FAEL: "TCP Query User{E8A767F2-285F-4832-8890-68EDBFE60EE7}C:\program files\mozilla firefox\firefox.exe" [In-None-P6-TRUE] .(.Mozilla Corporation - Firefox.) -- C:\program files\mozilla firefox\firefox.exe =>.Mozilla Corporation®
O87 - FAEL: "UDP Query User{C3CD9CF2-1F55-44AE-9519-555F8C695AEC}C:\program files\mozilla firefox\firefox.exe" [In-None-P17-TRUE] .(.Mozilla Corporation - Firefox.) -- C:\program files\mozilla firefox\firefox.exe =>.Mozilla Corporation®
O87 - FAEL: "{5BF84EA1-D7E8-4C72-92A2-B6BB11CD2D6B}" [In-None-P17-TRUE] .(.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc®
O87 - FAEL: "{076700B2-56F3-48EF-9AB6-A48D8E1933D8}" [In-None-P17-TRUE] .(.Dropbox, Inc. - Dropbox.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc®

---\\ CODES PRODUITS LOGICIELS (122) - 31s
O90 - PUC: "000021599B0090400000000000F01FEC" [HKLM] . (.Microsoft Application Error Reporting.) =>.Microsoft Corporation
O90 - PUC: "000051090900C0400000000000F01FEC" [HKLM] . (.Microsoft DCF MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "000051091A00C0400000000000F01FEC" [HKLM] . (.Microsoft OneNote MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "000051091E00C0400000000000F01FEC" [HKLM] . (.Microsoft Office OSM MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "000051092E00C0400000000000F01FEC" [HKLM] . (.Microsoft Office OSM UX MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "000051094400C0400000000000F01FEC" [HKLM] . (.Microsoft InfoPath MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "000051095100C0400000000000F01FEC" [HKLM] . (.Microsoft Access MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "000051096100C0400000000000F01FEC" [HKLM] . (.Microsoft Excel MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "000051098100C0400000000000F01FEC" [HKLM] . (.Microsoft PowerPoint MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "000051099100C0400000000000F01FEC" [HKLM] . (.Microsoft Publisher MUI (French) 2013.) =>.bl.org
O90 - PUC: "00005109A100C0400000000000F01FEC" [HKLM] . (.Microsoft Outlook MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "00005109A20000000100000000F01FEC" [HKLM] . (.Microsoft Office 64-bit Components 2013.) =>.Microsoft Corporation
O90 - PUC: "00005109A200C0400100000000F01FEC" [HKLM] . (.Microsoft Office Shared 64-bit MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "00005109AB00C0400000000000F01FEC" [HKLM] . (.Microsoft Groove MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "00005109B100C0400000000000F01FEC" [HKLM] . (.Microsoft Word MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "00005109B210C0400000000000F01FEC" [HKLM] . (.Microsoft Lync MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "00005109C200C0400000000000F01FEC" [HKLM] . (.Microsoft Office Proofing (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "00005109E600C0400000000000F01FEC" [HKLM] . (.Microsoft Office Shared MUI (French) 2013.) =>.Microsoft Corporation
O90 - PUC: "00005109F10010400000000000F01FEC" [HKLM] . (.Microsoft Office Proofing Tools 2013 - اللغة العربية.) -- C:\WINDOWS\Installer\{90150000-001F-0401-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00005109F10031400000000000F01FEC" [HKLM] . (.Microsoft Office Proofing Tools 2013 - Nederlands.) -- C:\WINDOWS\Installer\{90150000-001F-0413-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00005109F10070400000000000F01FEC" [HKLM] . (.Microsoft Office Korrekturhilfen 2013 - Deutsch.) -- C:\WINDOWS\Installer\{90150000-001F-0407-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00005109F10090400000000000F01FEC" [HKLM] . (.Microsoft Office Proofing Tools 2013 - English.) -- C:\WINDOWS\Installer\{90150000-001F-0409-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00005109F100A0C00000000000F01FEC" [HKLM] . (.Microsoft Office Proofing Tools 2013 - Español.) -- C:\WINDOWS\Installer\{90150000-001F-0C0A-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00005109F100C0400000000000F01FEC" [HKLM] . (.Outils de vérification linguistique 2013 de Microsoft Office - Français.) -- C:\WINDOWS\Installer\{90150000-001F-040C-0000-0000000FF1CE}\misc.exe,6 =>.Microsoft Corporation
O90 - PUC: "00005119110000000000000000F01FEC" [HKLM] . (.Microsoft Office Professional Plus 2013.) =>.Microsoft Corporation
O90 - PUC: "008899398061F304A91524A0772DC352" [HKLM] . (.Sql Server Customer Experience Improvement Program.) -- c:\WINDOWS\Installer\{93998800-1608-403F-9A51-420A77D23C25}\ARPIco =>.Microsoft Corporation
O90 - PUC: "02D6FA475B0B0AD4897575AC47621107" [HKLM] . (.Microsoft SQL Server VSS Writer.) -- c:\WINDOWS\Installer\{74AF6D20-B0B5-4DA0-9857-57CA74261170}\ARPIco =>.Microsoft Corporation
O90 - PUC: "04922028B9363A84689D1B936814507F" [HKLM] . (.Oracle VM VirtualBox 5.0.14.) -- C:\Windows\Installer\{82022940-639B-48A3-86D9-B139864105F7}\IconVirtualBox =>.Oracle
O90 - PUC: "0864597C0B2C7AD40B6DE3F2966D367D" [HKLM] . (.Microsoft Silverlight 4 SDK - Français.) -- C:\WINDOWS\Installer\{C7954680-C2B0-4DA7-B0D6-3E2F69D663D7}\ARPICON =>.Microsoft Corporation
O90 - PUC: "0E7444D0162A4A34EACB7FE68993100F" [HKLM] . (.Microsoft SQL Server Compact 4.0 SP1 x64 FRA.) -- C:\WINDOWS\Installer\{0D4447E0-A261-43A4-AEBC-F76E983901F0}\ProductIcon =>.Microsoft Corporation
O90 - PUC: "0EEA3C42ECB40913E80EBB0AFB27AC1C" [HKLM] . (.Microsoft Visual Studio 2010 Tools for Office Runtime (x64).) =>.Microsoft Corporation
O90 - PUC: "121E2D80A6F7BE3479DF26B944094330" [HKLM] . (.Microsoft_VC90_CRT_x86.) -- C:\Windows\Installer\{08D2E121-7F6A-43EB-97FD-629B44903403}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "1926E8D15D0BCE53481466615F760A7F" [HKLM] . (.Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219.) =>.bl.org
O90 - PUC: "19DA96544F74E9D4F89C17E73CD2A71E" [HKLM] . (.Microsoft_VC80_CRT_x86_x64.) -- C:\Windows\Installer\{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "1B58B91232CD8864A947ACB040FCE860" [HKLM] . (.Microsoft SQL Server System CLR Types (x64).) -- C:\WINDOWS\Installer\{219B85B1-DC23-4688-9A74-CA0B04CF8E06}\ARPIco =>.Microsoft Corporation
O90 - PUC: "1D5E3C0FEDA1E123187686FED06E995A" [HKLM] . (.Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219.) =>.bl.org
O90 - PUC: "1E08EAF41F2553946A8ED88E065104E5" [HKLM] . (.Microsoft .NET Framework 4.5 SDK - Module linguistique FRA.) =>.Microsoft Corporation
O90 - PUC: "20B91A1DE71869244AB57058F37DD475" [HKLM] . (.Microsoft_VC80_MFC_x86.) -- C:\Windows\Installer\{D1A19B02-817E-4296-A45B-07853FD74D57}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "24FFCFCA29ACC9945894CCA750BCCE43" [HKLM] . (.Composants requis pour SSDT .) -- C:\WINDOWS\Installer\{ACFCFF42-CA92-499C-8549-CC7A05CBEC34}\ARPIco
O90 - PUC: "25BBB29DFF28DE24A8C3E460F249A47B" [HKLM] . (.Microsoft_VC80_MFCLOC_x86.) -- C:\Windows\Installer\{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "29442753F98ADB04C90B153CFFED0953" [HKLM] . (.BlackBerry Device Manager 8.0.) -- C:\Windows\Installer\{35724492-A89F-40BD-9CB0-51C3FFDE9035}\ARPPRODUCTICON.exe =>.bl.org
O90 - PUC: "2EFE25DE0288DF146BA6DF412CEDEAD0" [HKLM] . (.Service de langage T-SQL Microsoft SQL Server 2012 .) -- C:\WINDOWS\Installer\{ED52EFE2-8820-41FD-B66A-FD14C2DEAE0D}\ARPIco =>.Microsoft Corporation
O90 - PUC: "31B0ACEB2456B6D4BA050CA60D3E7C9A" [HKLM] . (.Microsoft SQL Server 2012 Transact-SQL ScriptDom .) -- C:\WINDOWS\Installer\{BECA0B13-6542-4D6B-AB50-C06AD0E3C7A9}\ARPIco =>.Microsoft Corporation
O90 - PUC: "3323515BEEA94DC4D9C2F4AA8C07BD2E" [HKLM] . (.SQL Server 2008 R2 SP2 Database Engine Services.) =>.Microsoft Corporation
O90 - PUC: "34053A86A55C7324889C73EEC136DE17" [HKLM] . (.Microsoft Visual J# 2.0 Redistributable Package.) =>.bl.org
O90 - PUC: "360D32EFD43992840A8D0036C47EB9A4" [HKLM] . (.Adobe AIR.) =>.Adobe Inc.
O90 - PUC: "3F3FFBC504D2EE43CB5A9AB51CE904D0" [HKLM] . (.Microsoft .NET Framework 4.5 Multi-Targeting Pack.) =>.Microsoft Corporation
O90 - PUC: "3F4058833E46CD74F9137CE74424C235" [HKLM] . (.Microsoft ASP.NET Web Pages - FRA.) =>.Microsoft Corporation
O90 - PUC: "436F6625D7B77354DBCD89DDC6CFAB1A" [HKLM] . (.Online Application.) -- C:\Windows\Installer\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}\online.exe =>.SUP.Microleaves
O90 - PUC: "43D7D1A736481624B87924355846E93F" [HKLM] . (.Entity Framework Designer pour Visual Studio 2012 - FRA.) -- C:\WINDOWS\Installer\{7A1D7D34-8463-4261-8B97-425385649EF3}\setup.ico =>.Microsoft Corporation
O90 - PUC: "44ADEDB3610E34647A048616D8C8FC2A" [HKLM] . (.Microsoft SQL Server 2008 R2 RsFx Driver.) -- c:\WINDOWS\Installer\{3BDEDA44-E016-4643-A740-68618D8CCFA2}\ARPIco =>.Microsoft Corporation
O90 - PUC: "45810F76E4624E4449431170475137AA" [HKLM] . (.Microsoft SQL Server 2012 Native Client .) -- C:\WINDOWS\Installer\{67F01854-264E-44E4-9434-1107741573AA}\ARPIco =>.Microsoft Corporation
O90 - PUC: "4AA7AEE2302C09b43AF491BFE71F8CC1" [HKLM] . (.BufferChm.) =>.Hewlett-Packard
O90 - PUC: "4AB67A2738BF40243A22AAE17D0E8965" [HKLM] . (.Microsoft SQL Server 2012 Management Objects (x64).) -- C:\WINDOWS\Installer\{72A76BA4-FB83-4204-A322-AA1ED7E09856}\ARPIco =>.Microsoft Corporation
O90 - PUC: "4E9B274AFFA0B7F42BD56FF4E829A8BA" [HKLM] . (.Microsoft_VC90_MFC_x86_x64.) -- C:\Windows\Installer\{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "4EA42A62D9304AC4784BF2468110440F" [HKLM] . (.Java 8 Update 144 (64-bit).) -- C:\Program Files\Java\jre1.8.0_144\\bin\javaws.exe =>.Sun Microsystems
O90 - PUC: "4EA42A62D9304AC4784BF268140754FF" [HKLM] . (.Java 7 Update 45 (64-bit).) =>.Sun Microsystems
O90 - PUC: "4EA42A62D9304AC4784BF2681408770F" [HKLM] . (.Java 8 Update 77 (64-bit).) -- C:\Program Files\Java\jre1.8.0_77\\bin\javaws.exe =>.Sun Microsystems
O90 - PUC: "4F4A3A46297B6D117AA8000B0D714005" [HKLM] . (.Java SE Development Kit 7 Update 45 (64-bit).) =>.Sun Microsystems
O90 - PUC: "4F4A3A46297B6D117AA8000B0D811044" [HKLM] . (.Java SE Development Kit 8 Update 144 (64-bit).) -- C:\Program Files\Java\jdk1.8.0_144\\bin\javaws.exe =>.Sun Microsystems
O90 - PUC: "4F4A3A46297B6D117AA8000B0D817007" [HKLM] . (.Java SE Development Kit 8 Update 77 (64-bit).) -- C:\Program Files\Java\jdk1.8.0_77\\bin\javaws.exe =>.Sun Microsystems
O90 - PUC: "5A812990327ACD34D85B163756A6E149" [HKLM] . (.Dropbox Update Helper.) =>.WINSE
O90 - PUC: "5D213EF3268BEC04E8E46A8DBA6F7263" [HKLM] . (.Microsoft ASP.NET MVC 4 Runtime.) =>.Microsoft Corporation
O90 - PUC: "5DAB1C8C6E456414DA70A3A83D56963C" [HKLM] . (.Microsoft_VC80_MFC_x86_x64.) -- C:\Windows\Installer\{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "5DD6EBFE422B5E69279B863D82BC216A" [HKLM] . (.Adobe Widget Browser.) =>.Adobe Inc.
O90 - PUC: "5E9D7297C3691EA4489145D4D0544453" [HKLM] . (.Types CLR du système Microsoft pour SQL Server 2012.) -- C:\WINDOWS\Installer\{7927D9E5-963C-4AE1-8419-544D0D454435}\ARPIco =>.Microsoft Corporation
O90 - PUC: "62DBF9290209B993A9A757D1160F9B24" [HKLM] . (.Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005.) =>.Microsoft Corporation
O90 - PUC: "64642D686FADE5F4CBDAFCE78F3E261E" [HKLM] . (.UxStyle.)
O90 - PUC: "661F9BDEB9AF17F42B8CEBDC65B17DF7" [HKLM] . (.MySQL Connector/ODBC 5.1.) -- C:\WINDOWS\Installer\{EDB9F166-FA9B-4F71-B2C8-BECD561BD77F}\MySQLConnector.ico =>.MySQL AB
O90 - PUC: "665263B9B1CE0074BBC9CE66B1ED1257" [HKLM] . (.DocProc.) =>.I.R.I.S.
O90 - PUC: "677CEDCDDDAB9B84F8A9FD5F313C7DAF" [HKLM] . (.Microsoft ASP.NET MVC 3.) =>.Microsoft Corporation
O90 - PUC: "6E8D947A316B3EB3F8F540C548BE2AB9" [HKLM] . (.Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005.) =>.Microsoft Corporation
O90 - PUC: "6F2312E8A170867368197B1DF27D35D1" [HKLM] . (.Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA.) =>.Microsoft Corporation
O90 - PUC: "72B0E55339750AE4AB06FF05365F5D84" [HKLM] . (.Microsoft SQL Server Data Tools - FRA (11.1.20627.00).) -- C:\WINDOWS\Installer\{355E0B27-5793-4EA0-BA60-FF5063F5D548}\setup.ico =>.Microsoft Corporation
O90 - PUC: "7401F38D4E5BED948BFCA36C21B1722C" [HKLM] . (.Microsoft System CLR Types pour SQL Server 2012 (x64).) -- C:\WINDOWS\Installer\{D83F1047-B5E4-49DE-B8CF-3AC6121B27C2}\ARPIco =>.Microsoft Corporation
O90 - PUC: "7AE19DD9841B95041825DB6450EEBC6C" [HKLM] . (.Utilitaires ligne de comm. Microsoft SQL Server 2012 .) -- C:\WINDOWS\Installer\{9DD91EA7-B148-4059-8152-BD4605EECBC6}\ARPIco =>.Microsoft Corporation
O90 - PUC: "7B58C0486D3D3414A99FAD8EF05DC4CF" [HKLM] . (.Classic Shell.) -- C:\Windows\Installer\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}\icon.ico =>.Legitimate
O90 - PUC: "7C844D327CD751C44BD79C394605F170" [HKLM] . (.SQL Server 2008 R2 SP2 Database Engine Services.) =>.Microsoft Corporation
O90 - PUC: "7EE4940FA0562CA4B8059086CF74FE6A" [HKLM] . (.SQL Server 2008 R2 SP2 Database Engine Shared.) =>.Microsoft Corporation
O90 - PUC: "811CF9E1D156439479EB5EC3EAC5D754" [HKLM] . (.Microsoft_VC80_MFCLOC_x86_x64.) -- C:\Windows\Installer\{1E9FC118-651D-4934-97BE-E53CAE5C7D45}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "828446E8F190FA642A0A5390265A5C58" [HKLM] . (.Microsoft SQL Server 2012 Express LocalDB .) -- C:\WINDOWS\Installer\{8E644828-091F-46AF-A2A0-350962A5C585}\ARPIco =>.Microsoft Corporation
O90 - PUC: "8A84FEFC8BFBCAE3B85AEDF4A82A76EC" [HKLM] . (.Microsoft .NET Framework 4 Multi-Targeting Pack.) =>.Microsoft Corporation
O90 - PUC: "8AFDFD0D40C1B704C92B2AA52BD05DD4" [HKLM] . (.Destinations.) =>.Micro-Star International Co
O90 - PUC: "8C8AECAC83D315F459D3E1F63C43F6FE" [HKLM] . (.SQL Server 2008 R2 SP2 Common Files.) =>.Microsoft Corporation
O90 - PUC: "8DA57DE7DA76CF54EB11ED63D31AF417" [HKLM] . (.Microsoft SQL Server 2012 Transact-SQL Compiler Service .) -- C:\WINDOWS\Installer\{7ED75AD8-67AD-45FC-BE11-DE363DA14F71}\ARPIco =>.Microsoft Corporation
O90 - PUC: "8F7463F0D15ECCF48826A9D8C0A5FC52" [HKLM] . (.Microsoft_VC80_ATL_x86.) -- C:\Windows\Installer\{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "91785D291CBB3CC40AB8659C8E48CCC2" [HKLM] . (.Microsoft_VC80_CRT_x86.) -- C:\Windows\Installer\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "930E849197CE195459D189768A1CC409" [HKLM] . (.Microsoft .NET Framework 4.5 SDK.) =>.Microsoft Corporation
O90 - PUC: "93BAD29AC2E44034A96BCB446EB8552E" [HKLM] . (.Avast Update Helper.) =>.Avast Software s.r.o
O90 - PUC: "940C5EA98D879C9499DA12EA2A6E9604" [HKLM] . (.Microsoft SQL Server 2012 Management Objects .) -- C:\WINDOWS\Installer\{9AE5C049-78D8-49C9-99AD-21AEA2E66940}\ARPIco =>.Microsoft Corporation
O90 - PUC: "9AF16FB7BFDB365489DACF0BAD82CC7C" [HKLM] . (.IIS 8.0 Express.) -- C:\WINDOWS\Installer\{7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}\Icon_IisExpress =>.Legitimate
O90 - PUC: "9FA325A3F23D58C43888305337F14350" [HKLM] . (.WCF RIA Services V1.0 SP2.) -- C:\WINDOWS\Installer\{3A523AF9-D32F-4C85-8388-0335731F3405}\icon.ico =>.Microsoft Corporation
O90 - PUC: "A089CE062ADB6BC44A720BA745894BAC" [HKLM] . (.Google Update Helper.) =>.Google Inc.
O90 - PUC: "A4D0A2606F57C9E4A883FD9E65268DB1" [HKLM] . (.SQL Server 2008 R2 SP2 Common Files.) =>.Microsoft Corporation
O90 - PUC: "A67173FAAC87B54543FEB8A61215D41D" [HKLM] . (.Adobe Help Manager.) =>.Western Digital Technologies
O90 - PUC: "AFC9600B9BB530C41B6C98EC92E0A5EF" [HKLM] . (.HP Update.) =>.Hewlett-Packard
O90 - PUC: "B5DEF536D6C2EB94786EA7F6DC22CBA5" [HKLM] . (.Microsoft_VC90_MFC_x86.) -- C:\Windows\Installer\{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "B5FF141105753854BAA08F391B9D3046" [HKLM] . (.Microsoft SQL Server Browser.) -- c:\WINDOWS\Installer\{1141FF5B-5750-4583-AB0A-F893B1D90364}\ARPIco =>.Microsoft Corporation
O90 - PUC: "B71426B8D60612C4581D108D1E402775" [HKLM] . (.Microsoft SQL Server 2008 R2 Native Client.) -- c:\WINDOWS\Installer\{8B62417B-606D-4C21-85D1-01D8E1047257}\ARPIco =>.Microsoft Corporation
O90 - PUC: "B850D529A465A3444B2BE7096C34E255" [HKLM] . (.Microsoft_VC80_ATL_x86_x64.) -- C:\Windows\Installer\{925D058B-564A-443A-B4B2-7E90C6432E55}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "BA573BEFCEE69293F8FA81E88DD18D5B" [HKLM] . (.Microsoft Help Viewer 2.0.) =>.Microsoft Corporation
O90 - PUC: "BD7C2ABF7BED85A4A87BA6E4AD3F2B49" [HKLM] . (.Installation de Microsoft SQL Server 2008 R2 (Français).) -- c:\WINDOWS\Installer\{FBA2C7DB-DEB7-4A58-8AB7-6A4EDAF3B294}\ARPIco =>.Microsoft Corporation
O90 - PUC: "BE28D9C4100995E4F846B0EE5E4F3AA0" [HKLM] . (.SQL Server 2008 R2 SP2 Database Engine Shared.) =>.Microsoft Corporation
O90 - PUC: "C167D67C54FFC2443AAB06C1E41176DF" [HKLM] . (.Microsoft Web Deploy dbSqlPackage Provider - FRA.) -- C:\WINDOWS\Installer\{C76D761C-FF45-442C-A3BA-601C4E1167FD}\setup.ico =>.Microsoft Corporation
O90 - PUC: "c1c4f01781cc94c4c8fb1542c0981a2a" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable.) =>.bl.org
O90 - PUC: "C7937558D24AF684793B2ABC2C735239" [HKLM] . (.Microsoft_VC90_ATL_x86_x64.) -- C:\Windows\Installer\{8557397C-A42D-486F-97B3-A2CBC2372593}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "C8E52108D403736479A4527440B9E042" [HKLM] . (.Microsoft Silverlight 5 SDK - FRA.) -- C:\WINDOWS\Installer\{80125E8C-304D-4637-974A-2547049B0E24}\ARPICON =>.Microsoft Corporation
O90 - PUC: "CB916E63432A3CE448B977A9C768A554" [HKLM] . (.Microsoft SQL Server 2012 Data-Tier App Framework .) -- C:\WINDOWS\Installer\{36E619BC-A234-4EC3-849B-779A7C865A45}\ARPIco =>.Microsoft Corporation
O90 - PUC: "CFD2C1F142D260E3CB8B271543DA9F98" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148.) =>.bl.org
O90 - PUC: "D0AC3A29DC55D5C4AB59C562002CF062" [HKLM] . (.Microsoft_VC90_CRT_x86_x64.) -- C:\Windows\Installer\{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "D2FF980540F0B914FA2C84D0F67C4F23" [HKLM] . (.Microsoft ASP.NET MVC 3 - FRA.) =>.Microsoft Corporation
O90 - PUC: "D3D311B665A92154999A4E1E264A6200" [HKLM] . (.Microsoft SQL Server Data Tools Build Utilities - FRA (11.1.20627.00).) -- C:\WINDOWS\Installer\{6B113D3D-9A56-4512-99A9-E4E162A42600}\setup.ico =>.Microsoft Corporation
O90 - PUC: "D7314F9862C648A4DB8BE2A5B47BE100" [HKLM] . (.Microsoft Silverlight.) -- c:\WINDOWS\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}\ARPIcon =>.Microsoft Corporation
O90 - PUC: "D9428B2EC5985864C838003F1B1A0382" [HKLM] . (.Microsoft Web Platform Installer 4.0.) -- C:\WINDOWS\Installer\{E2B8249D-895C-4685-8C83-00F3B1A13028}\WebPlatformInstaller.exe =>.Legitimate
O90 - PUC: "DC11F8AB790EAE1479B8A89AC22975FD" [HKLM] . (.Microsoft SQL Server System CLR Types.) -- C:\WINDOWS\Installer\{BA8F11CD-E097-41EA-978B-8AA92C9257DF}\ARPIco =>.Microsoft Corporation
O90 - PUC: "DED0366CD51F6353DB88285B234A199F" [HKLM] . (.Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA.) =>.Microsoft Corporation
O90 - PUC: "E09F6ABFCE639CF4B95283433EDB648A" [HKLM] . (.Microsoft SQL Server 2012 Data-Tier App Framework .) -- C:\WINDOWS\Installer\{FBA6F90E-36EC-4FC9-9B25-3834E3BD46A8}\ARPIco =>.Microsoft Corporation
O90 - PUC: "E849749488145BD439850142A0210217" [HKLM] . (.Fichiers de support d'installation de Microsoft SQL Server 2008.) -- c:\WINDOWS\Installer\{4947948E-4188-4DB5-9358-10240A122071}\ARPIco =>.Microsoft Corporation
O90 - PUC: "E873E3303DA65DA4DBBEBC6DB91340C6" [HKLM] . (.Microsoft_VC90_ATL_x86.) -- C:\Windows\Installer\{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}\ARPPRODUCTICON.exe =>.Microsoft Corporation
O90 - PUC: "EB174136BAEDB4549ACAECE34BC2823B" [HKLM] . (.Microsoft ASP.NET Web Pages.) =>.Microsoft Corporation
O90 - PUC: "EFEE0228DC83E77358593193D847A0EC" [HKLM] . (.Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17.) =>.bl.org
O90 - PUC: "F60730A4A66673047777F5728467D401" [HKLM] . (.Java Auto Updater.) =>.Sun Microsystems

---\\ PACKAGES WINDOWS INSTALLER (37) - 40s
[MD5.E4617689D2A51DA75ECEF98CD2250F56] [WIS][2013/09/23 04:19:06] (.The Within Network, LLC - UxStyle.) -- C:\Windows\Installer\15fa0e.msi [208896] =>.The Within Network, LLC
[MD5.E922DBD009DBE5C0BDB8ABAF8E55A375] [WIS][2009/05/19 04:38:01] (. - .) -- C:\Windows\Installer\1a4cb6.msi [496640]
[MD5.DBE91F23E6767A13E5057760E1A0446F] [WIS][2014/06/20 12:08:48] (.Oracle Corporation - MySQL Connector/ODBC.) -- C:\Windows\Installer\1f27ce.msi [2797056] =>.Oracle Corporation
[MD5.1A4151D0D6EA6C940963630393B84E69] [WIS][2018/09/22 10:16:10] (.Dropbox, Inc. - Dropbox Update Helper.) -- C:\Windows\Installer\1fb381.msi [31744] =>.Dropbox, Inc.
[MD5.41F30F07BA328C77150B8FCF87025ED4] [WIS][2016/12/02 01:09:34] (.IvoSoft - Classic Shell.) -- C:\Windows\Installer\2099e4.msi [4685824] =>.IvoSoft
[MD5.78B41A323699DAF1C25265890733BE26] [WIS][2010/04/13 07:53:15] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30af87.msi [1997312] =>.Adobe
[MD5.E4AF16B0574B2598AADD353A35A3722B] [WIS][2010/04/13 07:53:14] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30af8f.msi [2211328] =>.Adobe
[MD5.8BAD3B4225E4D8C0746ED2CF02A0B249] [WIS][2010/04/13 07:53:14] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30af97.msi [725504] =>.Adobe
[MD5.E85D953AE603484B31869F1D44B53B18] [WIS][2010/04/13 07:53:15] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30af9f.msi [3670016] =>.Adobe
[MD5.5807A6A79EBF57203BA6FD68E93A676C] [WIS][2010/04/13 07:53:16] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afa7.msi [12719104] =>.Adobe
[MD5.95B5A4285B03437E4D83FB3615B9A10C] [WIS][2010/04/13 07:53:15] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afaf.msi [606208] =>.Adobe
[MD5.99B044D8CC2C9E7637AC585E6F7C33D7] [WIS][2010/04/13 07:53:14] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afb7.msi [607744] =>.Adobe
[MD5.79591E19208DC5B86BD93D4616BA05DA] [WIS][2010/04/13 07:53:15] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afbf.msi [1528320] =>.Adobe
[MD5.F156597BB08A28CEF382D400174143A1] [WIS][2010/04/13 07:53:14] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afc7.msi [1911808] =>.Adobe
[MD5.5FE7FABB34FC006A8E695768312BE6AF] [WIS][2010/04/13 07:53:14] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afcf.msi [620032] =>.Adobe
[MD5.C373839181FE00CDF257141CC2E06F66] [WIS][2010/04/13 07:53:15] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afd7.msi [3123200] =>.Adobe
[MD5.3841F694ABB9528590CE22BA4A0346D4] [WIS][2010/04/13 07:53:15] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afdf.msi [532992] =>.Adobe
[MD5.EC37C69FC4DB82A4070EB540177852C6] [WIS][2010/04/13 07:53:17] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\30afe7.msi [9998336] =>.Adobe
[MD5.30571618376BAD5A2004BBD5CFCED4BE] [WIS][2017/07/05 13:36:31] (.Research In Motion Ltd. - InstallShield® 2010 - Professional Edition .) -- C:\Windows\Installer\3ab903.msi [76942848] =>.Research In Motion Ltd.
[MD5.26194463878160C6AEF19E46936867BD] [WIS][2017/02/03 17:00:24] (.Oracle Corporation - Java SE Development Kit 8 Update 77 (64-bit.) -- C:\Windows\Installer\40939f.msi [1216512] =>.Oracle Corporation
[MD5.815076A57594A51F519E8C12F7B6B61F] [WIS][2017/02/03 17:04:13] (.Oracle Corporation - Java SE Runtime Environment 8 Update 77.) -- C:\Windows\Installer\4093a6.msi [54808576] =>.Oracle Corporation
[MD5.0D2F2897D28C01115F661FD26151DCE9] [WIS][2017/07/07 10:22:06] (.Oracle - Java SE Development Kit 7.0.) -- C:\Windows\Installer\43efb.msi [516608] =>.Oracle
[MD5.E05CB322FFF80462CC3B80A228D6DC05] [WIS][2013/10/08 06:54:16] (.Oracle - Java SE Runtime Environment 7.0.) -- C:\Windows\Installer\43efe.msi [28843008] =>.Oracle
[MD5.5CD8C6903B0A9C343BD5E686A17E4FCE] [WIS][2010/04/13 07:53:14] (.Adobe - InstallShield® 12 - Premier Edition 12.0.) -- C:\Windows\Installer\442670.msi [510976] =>.Adobe
[MD5.4168978929888E946B1CBC580181ACE2] [WIS][2017/03/14 07:38:14] (.Oracle Corporation - Oracle VM VirtualBox 5.0.14 installation pa.) -- C:\Windows\Installer\46ba9.msi [33894400] =>.Oracle Corporation
[MD5.251ECC75C4391D9378537116AA1082F8] [WIS][2016/12/21 15:57:01] (.Adobe Systems Incorporated. - Adobe Widget Browser.) -- C:\Windows\Installer\48631a.msi [23040] =>.Adobe Systems Incorporated.
[MD5.60259EEFE2C98A11E77A36F9FBC00F83] [WIS][2016/12/21 15:57:24] (.Adobe Systems Incorporated - Adobe AIR Installer.) -- C:\Windows\Installer\486332.msi [32256] =>.Adobe Systems Incorporated
[MD5.F807DED8DE95B4B546F6C5A1F4AA319F] [WIS][2016/12/21 15:57:37] (.Adobe Systems Incorporated - Adobe Help.) -- C:\Windows\Installer\486348.msi [32256] =>.Adobe Systems Incorporated
[MD5.CEA76F6BFBC0293279831413E5C8F13F] [WIS][2010/06/09 17:36:41] (.Hewlett-Packard - HP Update.) -- C:\Windows\Installer\50754e.msi [918016] =>.Hewlett-Packard
[MD5.CD7C1168F609800D5126A92A076351D2] [WIS][2012/07/10 16:28:12] (.Builds the Destinations MSI - Builds the Destinations MSI.) -- C:\Windows\Installer\7a7fb4.msi [460800] =>.Builds the Destinations MSI
[MD5.DBC3E9FEC5B6EC34BA4EC555EC22B4E0] [WIS][2011/04/29 20:44:02] (. - .) -- C:\Windows\Installer\7a7fba.msi [491008]
[MD5.245BB5ED5CDD219E3D2C91AB3F772EB1] [WIS][2018/06/03 16:13:23] (.AVAST Software - Avast Update Helper.) -- C:\Windows\Installer\cb9b5.msi [32768] =>.AVAST Software
[MD5.BAB85911E99F454B8231466E33969F7C] [WIS][2017/11/02 11:18:13] (.Microleaves - Online Application.) -- C:\Windows\Installer\d17c3.msi [2806272] =>.SUP.Microleaves
[MD5.D35B45B6EE36005243203FAC496125FB] [WIS][2018/12/21 16:58:56] (.Google Inc. - Google Update Helper.) -- C:\Windows\Installer\ee2ada.msi [40960] =>.Google Inc.
[MD5.3B8244292FB0ABAD623E415202AD79E7] [WIS][2018/08/25 01:10:18] (.Oracle Corporation - Java SE Development Kit 8 Update 144 (64-bi.) -- C:\Windows\Installer\f7ac6.msi [1212416] =>.Oracle Corporation
[MD5.EB81C40818A7B63F68D1735D48810953] [WIS][2018/08/25 01:14:08] (.Oracle Corporation - Java SE Runtime Environment 8 Update 144.) -- C:\Windows\Installer\f7acc.msi [62558208] =>.Oracle Corporation
[MD5.F5D7E9FB3B63EFE41AAA092D0A52C621] [WIS][2018/08/25 01:17:39] (.Oracle Corporation - Java Auto Updater.) -- C:\Windows\Installer\f7ad9.msi [761856] =>.Oracle Corporation

---\\ FEATURE CONTROLE. (886) - 37s
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:ida.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLOGON.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLgPad.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGuiIT.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPfewgsrv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:Scale_for_R3.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGUI.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:ieuser.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:devenv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:dexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:SPREADSHEETCOMPARE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]:msiexec.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:wm.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:cs.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:waol.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]:helppane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]:wlmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:sidebar.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:mshta.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]:communicator.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:SPREADSHEETCOMPARE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]:sllauncher.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:winmail.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:msimn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:outlook.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:SPREADSHEETCOMPARE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:infopath.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:winword.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:excel.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:powerpnt.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:SPREADSHEETCOMPARE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]:HelpPane.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]:msn.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Common.DBConnection64.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:Common.ShowHelp.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:filecompare.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:iexplore.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:prevhost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:explorer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:PresentationHost.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:wmplayer.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:VSTOInstaller.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OSE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:EQNEDT32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Setup.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:ODeploy.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Oarpmany.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OSPPREARM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:LICLUA.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:FLTLDR.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOSQM.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:CMigrate.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:protocolhandler.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:CSISYNCCLIENT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:CLVIEW.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:NAMECONTROLSERVER.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:DW20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:DWTRIG20.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOHTMED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOXMLED.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:msotd.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:msoev.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOSYNC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSOUC.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OLicenseHeartbeat.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:FIRSTRUN.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:SELFCERT.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:SETLANG.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:GRAPH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSQRY32.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:SmartTagInstall.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:SQLDumper.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:EXCEL.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:XLICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:INFOPATH.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:ACCICONS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:MSACCESS.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:GROOVE.EXE =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:AppSharingHookController.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:lync.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OcPubMgr.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:UcMapi.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:lynchtmlconv.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Common.DBConnection.exe =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:Common.DBConnection64.exe =>.Legitimate

---\\ SCAN ADDITIONNEL (67) - 51s
C:\Program Files (x86)\Microleaves\Online Application\Online Application Updater.exe =>.SUP.Microleaves
C:\Windows\System32\Tasks\Updater_Online_Application =>.SUP.Microleaves
C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online-Guardian.exe =>.SUP.Microleaves
C:\Windows\System32\Tasks\Online Application V2G6 =>.SUP.Microleaves
C:\Windows\System32\Tasks\Online Application V2G4 =>.SUP.Microleaves
C:\Windows\System32\Tasks\Online Application V2G5 =>.SUP.Microleaves
C:\Windows\System32\Tasks\Online Application V2G1 =>.SUP.Microleaves
C:\Windows\System32\Tasks\Online Application V2G3 =>.SUP.Microleaves
C:\Windows\System32\Tasks\Online Application V2G2 =>.SUP.Microleaves
C:\Program Files\Windows Sidebar\ZHPV0N8VVDJ6PYQUXY05Z2P6EFV1I2DMVPUU8NIULEF\Ujk5l0T0Dl.exe =>Adware.Wizzcaster
C:\ProgramData\Logic Cramble\set.exe =>.SUP.Linkury
[HKEY_USERS\S-1-5-18\Environment]:SNP =>PUP.Optional.Salus
C:\ProgramData\Quoteex\Tintax.dll =>PUP.Optional.Graftor
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1} =>.SUP.Microleaves
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E78A9F0C-6526-4391-BE76-A8046824ADDA} =>PUP.Optional.SmartBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1} =>.SUP.Microleaves
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{E78A9F0C-6526-4391-BE76-A8046824ADDA} =>PUP.Optional.SmartBar
C:\Program Files\KMSpico =>HackTool.KMSpico
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico
C:\ProgramData\Logic Cramble =>PUP.Optional.LogicHandler
C:\ProgramData\Quoteex =>PUP.Optional.Graftor
C:\ProgramData\Quoteexs =>PUP.Optional.Graftor
C:\Users\Evarisse\AppData\Roaming\EpicNet Inc =>Adware.MSIL
C:\Users\Evarisse\AppData\Roaming\Microleaves =>.SUP.Microleaves
C:\Users\Evarisse\AppData\Roaming\One System Care =>PUP.Optional.OneSystemCare
C:\Users\Evarisse\AppData\Roaming\Solvusoft =>.SUP.Solvusoft
C:\Users\Evarisse\AppData\Local\AdvinstAnalytics =>.SUP.Various
C:\Users\Evarisse\AppData\Local\EpicNet Inc =>Adware.MSIL
C:\Users\Evarisse\AppData\Local\MSfree Inc =>HackTool.WinActivator
C:\Windows\Prefetch\KMSAUTO NET 1.5.1.EXE-30B5D86A.pf =>HackTool.WinActivator
C:\Windows\Prefetch\KMSAUTO NET 1.5.1.EXE-525A3CA5.pf =>HackTool.WinActivator
C:\Windows\Prefetch\KMSAUTO NET 1.5.1.EXE-ADABABE3.pf =>HackTool.WinActivator
C:\Windows\Prefetch\KMSAUTO NET.EXE-70FC7659.pf =>HackTool.WinActivator
C:\Windows\Prefetch\KMSAUTO NET.EXE-A68B90E7.pf =>HackTool.WinActivator
C:\Windows\Prefetch\KMSAUTO NET.EXE-AA33C5B6.pf =>HackTool.WinActivator
C:\Windows\Prefetch\KMSAUTO NET.EXE-BB028387.pf =>HackTool.WinActivator
C:\Windows\Prefetch\KMSPICO 10.2.1.EXE-05056594.pf =>HackTool.KMSpico
C:\Windows\Prefetch\KMSPICO 10.2.1.EXE-80ED434C.pf =>HackTool.KMSpico
C:\Windows\Prefetch\KMSPICOACTIVATOR.EXE-2D43DEF0.pf =>HackTool.KMSpico
C:\Windows\Prefetch\ONESYSTEMCARE.EXE-67D04563.pf =>PUP.Optional.OneSystemCare
C:\Windows\Prefetch\ONESYSTEMCARE.TMP-AC821E28.pf =>PUP.Optional.OneSystemCare
C:\Windows\Prefetch\QUOTEEX.EXE-8DEA0167.pf =>PUP.Optional.Graftor
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>.SUP.Orphan
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 =>.SUP.Orphan
C:\ProgramData\Quoteex\Donstring.dll =>PUP.Optional.Graftor
C:\ProgramData\Quoteex\Movelab.exe =>PUP.Optional.Graftor
C:\ProgramData\Quoteex\Yearlab.exe =>PUP.Optional.Graftor
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} =>.SUP.Linkury
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{7D890FA5-8ED2-491A-90AB-CBF7561BBCCF} =>HackTool.KMSpico
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{E5575AD0-C601-418E-A4FA-5B404B487847} =>HackTool.KMSpico
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{8201D537-F733-488A-88E9-A9E95672B251} =>HackTool.KMSpico
[HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{A97CF11E-8090-4C87-9971-AADA7F079941} =>HackTool.KMSpico
C:\Windows\Installer\{5266F634-7B7D-4537-BDDC-98DD6CFCBAA1}\online.exe =>.SUP.Microleaves
HKLM\SOFTWARE\Wow6432Node\Classes\Installer\Products\436F6625D7B77354DBCD89DDC6CFAB1A =>.SUP.Microleaves
HKLM\SOFTWARE\Wow6432Node\Classes\Installer\Features\436F6625D7B77354DBCD89DDC6CFAB1A =>.SUP.Microleaves
C:\Windows\Installer\d17c3.msi =>.SUP.Microleaves
C:\Users\Evarisse\AppData\Local\Google\Chrome\User Data\Default\File System\001 =>.SUP.Temporary.Chrome
C:\Users\Evarisse\AppData\Local\Google\Chrome\User Data\Default\File System\003 =>.SUP.Temporary.Chrome
C:\Users\Evarisse\AppData\Local\Google\Chrome\User Data\Default\File System\004 =>.SUP.Temporary.Chrome
HKLM\SOFTWARE\Wow6432Node\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B} =>.SUP.AdvancedSystemCare
HKLM\SOFTWARE\Lavasoft\Web Companion =>PUP.Optional.LavasoftWebCompanion
HKLM\SOFTWARE\IObit\RealTimeProtector =>.SUP.AdvancedSystemCare
HKLM\SOFTWARE\Iobit\ASC =>.SUP.AdvancedSystemCare
HKLM\SOFTWARE\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B} =>.SUP.AdvancedSystemCare

---\\ RÉCAPITULATIF DES ÉLÉMENTS TROUVÉS SUR VOTRE STATION (19) - 0s
https://nicolascoolman.eu/2017/12/24/sup-microleaves/ =>.SUP.Microleaves
https://nicolascoolman.eu/2017/09/15/adware-wizzcaster/ =>Adware.Wizzcaster
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/ =>.SUP.Orphan
https://nicolascoolman.eu/2017/09/07/pup-optional-salus/ =>.SUP.Linkury
https://nicolascoolman.eu/2017/09/07/pup-optional-salus/ =>PUP.Optional.Salus
https://nicolascoolman.eu/2017/03/30/adware-graftor/ =>PUP.Optional.Graftor
https://nicolascoolman.eu/2017/09/09/pup-optional-smartbar/ =>PUP.Optional.SmartBar
https://nicolascoolman.eu/2017/03/12/superfluous-lavasoftwebcompanion/ =>PUP.Optional.LavasoftWebCompanion
https://nicolascoolman.eu/2017/12/26/sup-advancedsystemcare/ =>.SUP.AdvancedSystemCare
https://nicolascoolman.eu/2018/07/04/sup-driverpack/ =>.SUP.DriverPack
https://nicolascoolman.eu/2017/06/21/adware-fastdatax/ =>Adware.FastDataX
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.OneSystemCare
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/04/pup-optional-logichandler/ =>PUP.Optional.LogicHandler
https://nicolascoolman.eu/2017/09/13/adware-msil/ =>Adware.MSIL
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Solvusoft
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Various
https://nicolascoolman.eu/2017/01/13/hacktool-winactivator/ =>HackTool.WinActivator
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Temporary.Chrome

~ Unselected Options: O82,
~ End of the scan, 11984 items in 39mn55s (3070)(0)