~ Rapport de ZHPDiag v2015.6.16.57 - Nicolas Coolman (16/06/2015) ~ Lancé par Nathan (24/06/2015 22:10:06) ~ Facebook : https://www.facebook.com/nicolascoolman1 ~ Adresse du Forum http://www.forum.nicolascoolman.fr ~ Traduit par Nicolas Coolman ~ Etat de la version : Version à jour. ~ Liste blanche : Désactivée par l'utilisateur ~ Elévation des Privilèges : OK ~ User Account Control (UAC): Deactivate by program ---\\ Navigateurs Internet MSIE: Internet Explorer v11.0.9600.17126 MFIE: Mozilla Firefox 26.0 OBIE: Safari v5.34.57.2 ---\\ Informations sur les produits Windows ~ Langage: Français Windows Server License Manager Script : OK ~ Windows Operating System - Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 7QJB7 Windows License : OK ~ Windows Remaining Initializations Number : 2 Software Protection Service (Protection logicielle) : OK Windows Automatic Updates : OK Windows Activation Technologies : OK Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) ---\\ Logiciels de protection du système avast! Free Antivirus v9.0.2006 Microsoft Security Client FR-FR Language Pack v2.1.1116.0 Windows Defender W7 (Deactivate) ---\\ Logiciels d'optimisation du système CCleaner v5.00 ---\\ Logiciels de partage PeerToPeer ---\\ Surveillance de Logiciels Adobe Flash Player 17 NPAPI Adobe Reader XI ---\\ Informations sur le système ~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64 Bits Boot mode: Normal (Normal boot) Total RAM: 3947 MB (35% free) System Restore: Activé (Enable) System drive C: has 46 GB (10%) free of 446 GB ---\\ Mode de connexion au système ~ Computer Name: NATHAN-PC ~ User Name: Nathan ~ All Users Names: Nathan, HomeGroupUser$, Administrateur, ~ Unselected Option: None Logged in as Administrator ---\\ Variables d'environnement ~ System Unit : C:\ ~ %AppZHP% : C:\Users\Nathan\AppData\Roaming\ZHP\ ~ %AppData% : C:\Users\Nathan\AppData\Roaming\ ~ %Desktop% : C:\Users\Nathan\Desktop\ ~ %Favorites% : C:\Users\Nathan\Favorites\ ~ %LocalAppData% : C:\Users\Nathan\AppData\Local\ ~ %StartMenu% : C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\ ~ %Windir% : C:\Windows\ ~ %System% : C:\Windows\System32\ ---\\ Enumération des unités disques C: Hard drive, Flash drive, Thumb drive (Free 46 Go of 446 Go) D: CD-ROM drive (Not Inserted) E: CD-ROM drive (Free 0 Go of 1 Go) ---\\ Etat du Centre de Sécurité Windows [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : Out Of Date ~ Security Center: 41 Scanned in 00mn 00s ---\\ Recherche particulière de fichiers génériques [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024] [MD5.40BFD9D6EC8E174145F012246CA73CCD] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.30/05/2014 - 08:56:56.) -- C:\Windows\System32\wininet.dll [2266112] [MD5.88AB9B72B4BF3963A0DE0820B4B0B06C] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.04/03/2014 - 10:43:50.) -- C:\Windows\System32\Winlogon.exe [455168] [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448] [MD5.79059559E89D06E8B80CE2944BE20228] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.28/09/2013 - 02:09:10.) -- C:\Windows\system32\Drivers\AFD.sys [497152] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160] [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456] [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400] [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224] [MD5.A5D9106A73DC88564C825D317CAC68AC] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.27/04/2011 - 03:40:40.) -- C:\Windows\system32\Drivers\MRxSmb.sys [158208] [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632] [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280] [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184] [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - (.Microsoft Corporation - TDI Translation Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\tdx.sys [119296] [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808] ~ Generic Processes: Scanned in 00mn 00s ---\\ Etat des fichiers cachés (Caché/Total) ~ Mes images (My Pictures) : 2/2043 ~ Mes musiques (My Musics) : 4/1599 ~ Mes Videos (My Videos) : 1/126 ~ Mes Favoris (My Favorites) : 1/19 ~ Mes Documents (My Documents) : 34/8770 ~ Mon Bureau (My Desktop) : 5/11 ~ Menu demarrer (Programs) : 1/63 ~ Hidden Files: Scanned in 00mn 38s ---\\ Processus lancés [MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\chrome.exe [813896] [PID.6216] [MD5.E7B58CE9BD61BF575E2880088F4E5447] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8218112] [PID.5300] [MD5.4AB2A58816CC6BE771F1D8C768B804C5] - (.Dritek System Inc. - Dritek WMI Service.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe [352336] [PID.1984] [MD5.424E19980318AE562FFE3948649AFD65] - (.Dritek System Inc. - Launch Manager utility process.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe [414800] [PID.2056] [MD5.84E58FEA8B1A7537696A20C59CB9B0C9] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [29696] [PID.2184] [MD5.B705C7097F9A0EC941D02DCE7C7D426C] - (.Acer Incorporated - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624] [PID.2212] [MD5.6CC09D2F0BA4A09BABC3C41B8FD888F7] - (.NTI Corporation - Backup Manager Module.) -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [257344] [PID.2416] [MD5.83FF82FE209E7997067B375DAD6CF23D] - (.Intel Corporation - Intel(R) Integrated Clock Controller Servic.) -- C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [169752] [PID.3948] [MD5.6241810294275CEA59EBA9733080E5EE] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720] [PID.5856] [MD5.9C30978597D52AD8EA319BABE6112AAE] - (.Intel Corporation - Intel(R) Local Management Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [405976] [PID.4780] [MD5.A542C712794FB8FBD27E37271C730F36] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82112] [PID.6456] ~ Processes Running: Scanned in 00mn 01s ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\Default\Preferences ---\\ Liste des dossiers d'extension Google Chrome ~ Google Lines Browser: 0 Scanned in 00mn 00s ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) C:\Users\Nathan\AppData\Roaming\Mozilla\Firefox\Profiles\7g4n9md2.default\prefs.js M2 - MFEP: RegExtension {B64D9B05-48E1-4CEB-BF58-E0643994E900} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ (.not file.) P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazon-france.xml P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml P2 - FPN:Firefox Plugin Navigator . (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-france.xml P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_190.dll P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.25.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Windows\system32\npDeployJava1.dll P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll P2 - FPN: [HKCU] [@Skype Limited.com/Facebook Video Calling Plugin] - (.Skype Limited - Facebook Video Calling Plugin.) -- C:\Users\Nathan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\Nathan\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\Nathan\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll P2 - FPN: [HKCU] [@unity3d.com/UnityPlayer,version=1.0] - (.Unity Technologies ApS - Unity Player 4.5.2f1.) -- C:\Users\Nathan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll ~ Firefox Browser: 23 Scanned in 00mn 01s ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://packardbell.msn.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17041 (winblue_gdr.140305-1710)) -- C:\Windows\SysWOW64\ieframe.dll R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1 ~ IE Browser: 19 Scanned in 00mn 00s ---\\ Internet Explorer, Proxy Management (R5) R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ~ Proxy management: Scanned in 00mn 00s ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe, F2 - REG:system.ini: Shell=C:\Windows\explorer.exe F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe ~ Keys: Scanned in 00mn 00s ---\\ Hosts file redirection (O1) ~ Le fichier hôte est sain (The hosts file is clean) (21) ~ Hosts File: Scanned in 00mn 00s ---\\ Browser Helper Objects de navigateur (O2) O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.dll O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll O2 - BHO: Programme d’aide de l’Assistant de connexion au compte Microsoft [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Logitech SetPoint [64Bits] - {AF949550-9094-4807-95EC-D1C317803333} . (.Logitech, Inc. - Logitech SetPoint.) -- C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll ~ BHO: 10 Scanned in 00mn 00s ---\\ Applications lancées au démarrage du système (O4) O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) O4 - HKLM\..\Run: [Power Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech, Inc. - Logitech Download Assistant.) -- C:\Windows\System32\LogiLDA.dll O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe O4 - HKLM\..\Run: [XeroxEndeavorBackgroundTask] rundll32.exe xrWCbgnd.dll,LaunchBgTask 1 O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe O4 - HKLM\..\Run: [EvtMgr6] . (.Logitech, Inc. - Logitech SetPoint Event Manager (UNICODE).) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd O4 - HKCU\..\Run: [ShowBatteryBar] . (...) -- C:\Program Files\BatteryBar\ShowBatteryBar.exe O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd O4 - HKCU\..\Run: [HP Officejet 6600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Nathan\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyWebHelper.exe O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NTI Corporation - Packard Bell MyBackup.) -- C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe =>.Advanced Micro Devices, Inc O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-2388083021-516882657-3821574491-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd O4 - HKUS\S-1-5-21-2388083021-516882657-3821574491-1001\..\Run: [ShowBatteryBar] . (...) -- C:\Program Files\BatteryBar\ShowBatteryBar.exe O4 - HKUS\S-1-5-21-2388083021-516882657-3821574491-1001\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd O4 - HKUS\S-1-5-21-2388083021-516882657-3821574491-1001\..\Run: [HP Officejet 6600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co O4 - HKUS\S-1-5-21-2388083021-516882657-3821574491-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Nathan\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O4 - HKUS\S-1-5-21-2388083021-516882657-3821574491-1001\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyWebHelper.exe ~ Application: Scanned in 00mn 02s ---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5) O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no ~ IE Control Panel: 1 Scanned in 00mn 00s ---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9) O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} -- C:\Program Files (x86)\MICROS~2\Office14\ONBttnIE.dll (.not file.) O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} -- C:\Program Files (x86)\MICROS~2\Office14\ONBTTN~1.dll (.not file.) O9 - Extra button: Free YouTube Download [64Bits] - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} . (...) -- C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\dvdvideosoft.ico ~ IE Extra Buttons: Scanned in 00mn 00s ---\\ Winsock hijacker (Layered Service Provider) (O10) O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll O10 - WLSP:\000000000007\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation O10 - WLSP:\000000000009\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.dll =>.Microsoft Corporation ~ Winsock: 9 Scanned in 00mn 00s ---\\ Objets ActiveX (Downloaded Program Files)(O16) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} ((no name)) - http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab ~ Objets ActiveX: Scanned in 00mn 00s ---\\ Modification Domaine/Adresses DNS (O17) O17 - HKLM\System\CCS\Services\Tcpip\..\{269FCB89-4ECD-4376-9B7A-A6991BC777B0}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\..\{33C9C4FD-156C-42E7-BDB7-AAAB206C8D4C}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\..\{569B8BA3-B0CB-488F-8490-BFBF38A83A65}: DhcpNameServer = 172.20.10.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{63FCE860-B6A4-45FE-A480-2F1393A832A3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{9035FA42-9672-47A1-A179-98C7ABA89DE8}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\..\{269FCB89-4ECD-4376-9B7A-A6991BC777B0}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS1\Services\Tcpip\..\{33C9C4FD-156C-42E7-BDB7-AAAB206C8D4C}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS1\Services\Tcpip\..\{569B8BA3-B0CB-488F-8490-BFBF38A83A65}: DhcpNameServer = 172.20.10.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{63FCE860-B6A4-45FE-A480-2F1393A832A3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\..\{9035FA42-9672-47A1-A179-98C7ABA89DE8}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\..\{269FCB89-4ECD-4376-9B7A-A6991BC777B0}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS2\Services\Tcpip\..\{33C9C4FD-156C-42E7-BDB7-AAAB206C8D4C}: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS2\Services\Tcpip\..\{569B8BA3-B0CB-488F-8490-BFBF38A83A65}: DhcpNameServer = 172.20.10.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{63FCE860-B6A4-45FE-A480-2F1393A832A3}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\..\{9035FA42-9672-47A1-A179-98C7ABA89DE8}: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ~ Domain: Scanned in 00mn 00s ---\\ Protocole additionnel (O18) O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -- O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation ~ Protocole Additionnel: Scanned in 00mn 00s ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll O20 - Winlogon Notify: LBTWlgn . (.Logitech, Inc. - Logitech Bluetooth Service.) -- c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll ~ Winlogon: Scanned in 00mn 00s ---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. ~ SSODL: 1 Scanned in 00mn 00s ---\\ Liste des services NT non Microsoft et non désactivés (O23) O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: Acer ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe O23 - Service: GREGService (GREGService) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: Live Updater Service (Live Updater Service) . (.Acer Incorporated - Updater Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe O23 - Service: Ma-Config Agent (MaConfigAgent) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\MaConfigAgent.exe O23 - Service: NTI IScheduleSvc (NTI IScheduleSvc) . (.NTI Corporation - Backup Manager Module.) - C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ~ Services: 12 Scanned in 00mn 07s ---\\ Enumération Active Desktop & MHTML Editor (O24) O24 - Default MHTML Editor: Last - .(...) - (.not file.) ~ Desktop Component: 4 Scanned in 00mn 00s ---\\ Enumère les données de BootExecute (BEX) (O34) O34 - HKLM BootExecute: (autocheck autochk *) - File not found ~ BEX: 1 Scanned in 00mn 00s ---\\ Tâches planifiées en automatique (O39) [MD5.70685AC6E02E9C2DFB88D4851954F5B4] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998088] [MD5.6259A5B669AE018A5E53247259A101C3] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [268464] [MD5.00000000000000000000000000000000] [APT] [avast! Emergency Update] (...) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe (.not file.) [0] [MD5.2E4EE47FBD9BB663A5220DBC38579986] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [5282584] [MD5.D9CC0F4209F14515DCCD95ABCBD233A0] [APT] [DeviceDetector] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [988456] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [116648] [MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001Core] (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Update\GoogleUpdate.exe [107912] [MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001UA] (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Update\GoogleUpdate.exe [107912] [MD5.98FA788238E71D9563D4BF177A4FC22C] [APT] [{660200F5-8192-4572-BBD3-81B47664AD08}] (.Google Inc..) -- c:\users\Nathan\appdata\local\google\chrome\application\chrome.exe [813896] [MD5.3E6786059721B2CD79665D5FBBED6A7C] [APT] [{66416837-68CF-4879-85ED-51D0980B8D36}] (.InstallShield Software Corporation.) -- E:\French\Setup\SETUP.exe [60416] [MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1066] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1066] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1070] O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1070] O39 - APT: GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001Core - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001Core.job [1030] O39 - APT: GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001Core - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001Core [1030] O39 - APT: GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001UA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001UA.job [1082] O39 - APT: GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001UA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2388083021-516882657-3821574491-1001UA [1082] ~ Scheduled Task: 20 Scanned in 00mn 02s ---\\ Composants installés (ActiveSetup Installed Components) (O40) O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe =>.Microsoft Corporation O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll ~ Active Setup: 10 Scanned in 00mn 00s ---\\ Pilotes lancés au démarrage du système (O41) O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\drivers\blbdrive.sys O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\System32\DRIVERS\cdrom.sys O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) - C:\Windows\System32\DRIVERS\dtsoftbus01.sys O41 - Driver: (HWiNFO32) . (.REALiX(tm) - HWiNFO AMD64 Kernel Driver.) - C:\Program Files\HWiNFO64\HWiNFO64A.sys O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys O41 - Driver: (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys ~ Drivers: 66 Scanned in 00mn 02s ---\\ Logiciels installés (O42) O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {8F2415FA-72F2-F029-0450-4EB2FAE484C5} O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F2A7CE36-57BF-5C86-952D-90DBF3746D82} O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C61E9002-8DFC-1566-6CD6-7C0BAFC98470} O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {426582A8-202F-D13C-8BD5-F00551BAFC93} O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4CAE37F5-A8AD-8863-C158-1484B5D807E5} O42 - Logiciel: AVI ReComp 1.5.6 - (.Mateusz Gola (aka Prozac).) [HKLM][64Bits] -- AVI ReComp O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40} O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: Adobe AIR - (.Adobe Systems Inc..) [HKLM][64Bits] -- {A2BCA9F1-566C-4805-97D1-7FDC93386723} O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {F302F4F0-588D-6501-1ACF-BE3FDCC9135D} O42 - Logiciel: Adobe Flash Player 17 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX O42 - Logiciel: Adobe Flash Player 17 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI O42 - Logiciel: Adobe Reader XI (11.0.11) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824144531} O42 - Logiciel: Adobe Shockwave Player 12.1 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player O42 - Logiciel: Agatha Christie - 4:50 from Paddington - (.WildTangent.) [HKLM][64Bits] -- WTA-2a206660-dc0b-48b7-8496-c427c3873c1a =>.WildTangent O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {2FE00055-C4F3-4F7A-AEDD-E198D54CF12F} O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {28791292-D18D-42FA-AE66-3D3D20AA8618} O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {5ED7462B-EF58-4757-B609-53755021EC34} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc O42 - Logiciel: Argazki Galeria - (.Microsoft Corporation.) [HKLM][64Bits] -- {950A1CCB-A4CA-4170-8BF7-BE52D05CB29A} O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} O42 - Logiciel: AudioBox version 1.2 - (.PreSonus.) [HKLM][64Bits] -- {554BB593-3543-4AEB-A192-2AC87EC3FF31}_is1 O42 - Logiciel: AviSynth 2.5 - (...) [HKLM][64Bits] -- Avisynth O42 - Logiciel: BSC Cleanitol TM - (...) [HKCU][64Bits] -- BSC Cleanitol TM O42 - Logiciel: Backup Manager V3 - (.NTI Corporation.) [HKLM][64Bits] -- {0B61BBD5-DA3C-409A-8730-0C3DC3B0F270} O42 - Logiciel: Batman: Arkham Asylum GOTY Edition - (.Rocksteady Studios.) [HKLM][64Bits] -- Steam App 35140 O42 - Logiciel: Batman: Arkham City GOTY - (.Rocksteady Studios.) [HKLM][64Bits] -- Steam App 200260 O42 - Logiciel: BatteryBar (remove only) - (...) [HKLM][64Bits] -- BatteryBar O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-dbf4d14e-1b8b-4b38-8b45-8fc60d0f04d9 =>.WildTangent O42 - Logiciel: Blender - (.Blender Foundation.) [HKLM][64Bits] -- Blender O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: Caesar IV - (.Tilted Mill Entertainment.) [HKLM][64Bits] -- {B7666229-351B-47D9-AA6F-DF777CF04BBF} O42 - Logiciel: Canon Inkjet Printer Driver Add-On Module - (...) [HKLM][64Bits] -- CANONIJINBOXADDON100 O42 - Logiciel: Canon MP Navigator 2.0 - (...) [HKLM][64Bits] -- MP Navigator 2.0 O42 - Logiciel: Canon MP170 - (...) [HKLM][64Bits] -- {91175441-4E5D-4e13-B116-828FD352CDB2} O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (...) [HKLM][64Bits] -- Easy-PhotoPrint EX O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {11087D24-567D-7D88-69C6-D7A08B5F4C47} O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-ee4b8618-49b0-4ca1-9dde-8281696f8f25 =>.WildTangent O42 - Logiciel: Conseiller de mise à niveau vers Windows 7 - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D10CB57-B085-44c3-B435-2D193BA153F0} O42 - Logiciel: Crazy Chicken Kart 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-58822e99-1a55-467a-80d7-d4cafdb54b72 =>.WildTangent O42 - Logiciel: CyberLink MediaEspresso - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384} O42 - Logiciel: CyberLink MediaEspresso - (.CyberLink Corp..) [HKLM][64Bits] -- {E3739848-5329-48E3-8D28-5BBD6E8BE384} O42 - Logiciel: D-Fend Reloaded 1.2.1 (Désinstaller) - (.Alexander Herzog.) [HKLM][64Bits] -- D-Fend Reloaded O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.DT Soft Ltd O42 - Logiciel: DarthMod: Shogun II - (...) [HKLM][64Bits] -- DarthMod: Shogun II O42 - Logiciel: Dead Space™ - (.Electronic Arts.) [HKLM][64Bits] -- {6E6F22D7-8AD6-4A87-9A47-733E6E996F50} O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM][64Bits] -- WTA-0d653228-8c68-483a-b555-4d96f39331c2 =>.WildTangent O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM][64Bits] -- EVEREST Home Edition_is1 O42 - Logiciel: Empire of Sports - (.F4.) [HKCU][64Bits] -- EoS-{5CCCD423-F673-4CD8-9464-9D950F49BBC3} O42 - Logiciel: Euro Truck Simulator 2 - (.SCS Software.) [HKLM][64Bits] -- {1B705E8F-9893-4486-B5D7-4F7FEB9C871E}_is1 O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WTA-60b0e68b-e64b-4131-be47-65222162347f =>.WildTangent O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} O42 - Logiciel: Flight Deck 4 - (.Micro Application.) [HKLM][64Bits] -- {5AAC1952-66D7-4B54-95C0-23B907E51116} O42 - Logiciel: Fotogalerie - (.Microsoft Corporation.) [HKLM][64Bits] -- {0FD66C6F-4023-4C74-AF8E-9B8B2053868E} O42 - Logiciel: Fotogalerie - (.Microsoft Corporation.) [HKLM][64Bits] -- {AEA7CE08-09DC-4186-99FD-66A26F3B8B21} O42 - Logiciel: Fotogalerija - (.Microsoft Corporation.) [HKLM][64Bits] -- {BE2DE42A-6696-4EE7-9E59-B9385F339DD3} O42 - Logiciel: Fotogalleri - (.Microsoft Corporation.) [HKLM][64Bits] -- {92E22997-3614-4ED9-9D53-C6C09B105BE9} O42 - Logiciel: Fotogalleriet - (.Microsoft Corporation.) [HKLM][64Bits] -- {F38BCC33-D42A-44EB-B62F-B3BB89B29FAF} O42 - Logiciel: Fotogaléria - (.Microsoft Corporation.) [HKLM][64Bits] -- {08466673-3905-4437-93E8-34A221B7CA4E} O42 - Logiciel: Fotoğraf Galerisi - (.Microsoft Corporation.) [HKLM][64Bits] -- {06738361-EB60-40D7-84BC-7807ED7EF282} O42 - Logiciel: Fotótár - (.Microsoft Corporation.) [HKLM][64Bits] -- {8D977EAA-DF3E-4054-A98D-F27AEB0248DD} O42 - Logiciel: Free Studio version 2014 - (.DVDVideoSoft Ltd..) [HKLM][64Bits] -- Free Studio_is1 O42 - Logiciel: Free YouTube to MP3 Converter version 3.12.42.716 - (.DVDVideoSoft Ltd..) [HKLM][64Bits] -- Free YouTube to MP3 Converter_is1 O42 - Logiciel: GIMP 2.6.11 - (.The GIMP Team.) [HKLM][64Bits] -- WinGimp-2.0_is1 O42 - Logiciel: Galeria de Fotografias - (.Microsoft Corporation.) [HKLM][64Bits] -- {6DFF6F1B-F876-4007-AC82-42D5DDF0E090} O42 - Logiciel: Galeria de Fotos - (.Microsoft Corporation.) [HKLM][64Bits] -- {1998BD95-54C6-4F31-8D85-FE9FCF5DE51D} O42 - Logiciel: Galeria fotografii - (.Microsoft Corporation.) [HKLM][64Bits] -- {207DA277-6A6D-4863-B535-129931D2BB21} O42 - Logiciel: Galeria fotogràfica - (.Microsoft Corporation.) [HKLM][64Bits] -- {0942F310-B35F-4E01-BA7C-75055AAEC710} O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {F4D99A13-F63A-4FC1-8799-CFFDB78DDFB3} O42 - Logiciel: Galerie foto - (.Microsoft Corporation.) [HKLM][64Bits] -- {FCF46EBE-4637-4A0D-8CE2-C39897A2D7E1} O42 - Logiciel: Galerija fotografija - (.Microsoft Corporation.) [HKLM][64Bits] -- {FD5D64EB-DC61-4026-AF47-585B39F19341} O42 - Logiciel: Galería de fotos - (.Microsoft Corporation.) [HKLM][64Bits] -- {F7314CA2-F900-46D7-9EA1-FBDD9D73F765} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU][64Bits] -- Google Chrome O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {817750FA-EC6A-485D-9901-0683AE6FFDF1} =>.Google Inc O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: Grec avec clavier français — Michael Langlois — 1.2 - (.Michael Langlois.) [HKLM][64Bits] -- {DA8041CD-904C-4FB6-8EAB-C390663F0046} O42 - Logiciel: HP FWUpdateEDO2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {415FA9AD-DA10-4ABE-97B6-5051D4795C90} O42 - Logiciel: HP Officejet 6600 Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {2FA81482-5570-4CF0-9A10-D61D2F164916} =>.Hewlett-Packard Co O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM][64Bits] -- {B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D} O42 - Logiciel: HWiNFO64 Version 3.96 - (.Martin Malík - REALiX.) [HKLM][64Bits] -- HWiNFO64_is1 O42 - Logiciel: HomeMedia - (.CyberLink Corporation.) [HKLM][64Bits] -- {AA4BF92B-2AAF-11DA-9D78-000129760D75} O42 - Logiciel: Hébreu avec clavier français — Michael Langlois — 1.3 - (.Michael Langlois.) [HKLM][64Bits] -- {23D0BEFD-26D3-4700-A012-1277B591C1E1} O42 - Logiciel: I.R.I.S. OCR - (.HP.) [HKLM][64Bits] -- {CA6BCA2F-EDEB-408F-850B-31404BE16A61} O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM][64Bits] -- Identity Card O42 - Logiciel: Intel(R) ME UninstallLegacy - (.Intel Corporation.) [HKLM][64Bits] -- {F43C7651-A7CB-49EF-8AF4-40630849FF29} O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {1CEAC85D-2590-4760-800F-8DE5E91F3700} O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {243B5B47-6A9C-4D51-8CA4-8D9C0308D02F} O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {BB193400-CE40-4598-8391-FE63EC46BFF4} O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {27DEA29A-222C-45F8-B70D-0A7B303FC71B} O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140} O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573} O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {1B444AF9-1DBE-4884-8F35-969BEFCF69A8} O42 - Logiciel: Java 8 Update 31 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218031F0} O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM][64Bits] -- WTA-b710d369-03e1-4c57-a332-b4326ddc135b =>.WildTangent O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM][64Bits] -- WTA-cae679f6-45b3-4b4a-ac90-307517f9977e =>.WildTangent O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {F6F30C28-38AA-4DBA-AE0B-7E30238E61BB} O42 - Logiciel: Just Cause 2 Demo - (.Avalanche Studios.) [HKLM][64Bits] -- Steam App 35110 O42 - Logiciel: La Bible Online E-M 12.06 - (...) [HKCU][64Bits] -- OnlineBible O42 - Logiciel: Launch Manager - (.Packard Bell.) [HKLM][64Bits] -- LManager O42 - Logiciel: Logiciel de base du périphérique HP Officejet 6600 - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {82250F8E-6AD5-4F72-9BB0-76F13BFBBD7B} =>.Hewlett-Packard Co O42 - Logiciel: Logitech SetPoint 6.65 - (.Logitech.) [HKLM][64Bits] -- sp6 O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: MSXML4 Parser - (.Microsoft Game Studios.) [HKLM][64Bits] -- {01501EBA-EC35-4F9F-8889-3BE346E5DA13} O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {E1322B8A-6F66-44ED-95D5-7FEBC50AC814} O42 - Logiciel: Microsoft Antimalware Service FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {32E9C1A5-0FDA-4483-987D-DBABF9CC1DD8} O42 - Logiciel: Microsoft Flight Simulator 2004 Un siècle d'aviation - (.Microsoft.) [HKLM][64Bits] -- Flight Simulator 9.0 O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F} O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C} O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM][64Bits] -- {BFAE8D5B-F918-486F-B74E-90762DF11C5C} O42 - Logiciel: Microsoft Security Client FR-FR Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {DC911ADF-7B60-40F2-A112-FB1EB6402D07} O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Security Client O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Microsoft SkyDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- SkyDriveSetup.exe =>.Microsoft Corporation O42 - Logiciel: Mozilla Firefox 26.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 26.0 (x86 fr) O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService O42 - Logiciel: Mystery P.I. - The London Caper - (.WildTangent.) [HKLM][64Bits] -- WTA-137dd3cf-9c53-409c-bf57-49a2f363acf2 =>.WildTangent O42 - Logiciel: NAM Hotfix Package 301 (13 April 2012) - (.The NAM Team.) [HKCU][64Bits] -- NAM Hotfix Package O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA} O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM][64Bits] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38} O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A} O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM][64Bits] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F} O42 - Logiciel: Nero DiscSpeed 10 - (.Nero AG.) [HKLM][64Bits] -- {34490F4E-48D0-492E-8249-B48BECF0537C} O42 - Logiciel: Nero DiscSpeed 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C18A0418-442A-4186-AF98-D08F5054A2FC} O42 - Logiciel: Nero Express 10 - (.Nero AG.) [HKLM][64Bits] -- {70550193-1C22-445C-8FA4-564E155DB1A7} O42 - Logiciel: Nero Express 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {33643918-7957-4839-92C7-EA96CB621A98} O42 - Logiciel: Nero Multimedia Suite 10 Essentials - (.Nero AG.) [HKLM][64Bits] -- {62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86} O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM][64Bits] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65} O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702} O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A} O42 - Logiciel: Network Addon Mod - (.The NAM Team.) [HKCU][64Bits] -- Network Addon Mod O42 - Logiciel: Network Widening Mod Version 2.0.0 - (.The NAM Team.) [HKCU][64Bits] -- Network Widening Mod O42 - Logiciel: Norton Online Backup - (.Symantec Corporation.) [HKLM][64Bits] -- {40A66DF6-22D3-44B5-A7D3-83B118A2C0DC} =>.Symantec Corporation O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin O42 - Logiciel: Packard Bell Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent packardbell Master Uninstall =>.WildTangent O42 - Logiciel: Packard Bell MyBackup - (.NTI Corporation.) [HKLM][64Bits] -- InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270} O42 - Logiciel: Packard Bell Power Management - (.Packard Bell.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964} O42 - Logiciel: Packard Bell Recovery Management - (.Packard Bell.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9} O42 - Logiciel: Packard Bell Registration - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Registration O42 - Logiciel: Packard Bell ScreenSaver - (.Packard Bell .) [HKLM][64Bits] -- Packard Bell Screensaver O42 - Logiciel: Packard Bell Social Networks - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9} O42 - Logiciel: Packard Bell Social Networks - (.CyberLink Corp..) [HKLM][64Bits] -- {64EF903E-D00A-414C-94A4-FBA368FFCDC9} O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WTA-2b2d48bf-cd68-4c7a-85b4-03f8f7fc4995 =>.WildTangent O42 - Logiciel: Pixel Trouble - (.Epic Games, Inc..) [HKLM][64Bits] -- UDK-7cd54b32-b59f-4c57-97b6-3f8a5e7a8ab5 O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-f682afe0-0226-4bc4-9223-ee73638e41c4 =>.WildTangent O42 - Logiciel: PlayStation(R)Network Downloader - (.Sony Computer Entertainment Inc..) [HKLM][64Bits] -- {B6659DD8-00A7-4A24-BBFB-C1F6982E5D66} O42 - Logiciel: PlayStation(R)Store - (.Sony Computer Entertainment Inc..) [HKLM][64Bits] -- {0E532C84-4275-41B3-9D81-D4A1A20D8EE7} O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-c50239f8-8180-49e3-bb2e-ab50446ac51c =>.WildTangent O42 - Logiciel: Portal - (.Valve.) [HKLM][64Bits] -- Steam App 400 O42 - Logiciel: Portal 2 - (.Valve.) [HKLM][64Bits] -- Steam App 620 O42 - Logiciel: Portal: First Slice - (.Valve.) [HKLM][64Bits] -- Steam App 410 O42 - Logiciel: PreSonus Studio One 2 - (.PreSonus Audio Electronics.) [HKLM][64Bits] -- PreSonus Studio One 2 O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E} O42 - Logiciel: Raccolta foto - (.Microsoft Corporation.) [HKLM][64Bits] -- {FA6BC7A5-85B3-4DC2-825C-D508E386151A} O42 - Logiciel: Raptr - (...) [HKLM][64Bits] -- Raptr O42 - Logiciel: RealHighway Mod Version 5.0.0 - (.The NAM Team.) [HKCU][64Bits] -- RealHighway Mod O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} O42 - Logiciel: Rise of Nations - (.Microsoft.) [HKLM][64Bits] -- RiseOfNationsExpansion 1.0 O42 - Logiciel: Robin Hood - (.Spellbound.) [HKLM][64Bits] -- Steam App 46560 O42 - Logiciel: Robin Hood - The Legend of Sherwood (Demo) - (.Wanadoo Edition.) [HKLM][64Bits] -- Robin Hood - The Legend of Sherwood (Demo) O42 - Logiciel: SC4 Mapper 2013 - (...) [HKCU][64Bits] -- SC4 Mapper 2013 O42 - Logiciel: SC4Tool v2.2.7 - (...) [HKLM][64Bits] -- SC4Tool v2.2.7 O42 - Logiciel: SONAR LE - (.Cakewalk Music Software.) [HKLM][64Bits] -- SONAR85LE_is1 O42 - Logiciel: SPORE™ L’atelier des Créatures – version d’essai - (.Electronic Arts.) [HKLM][64Bits] -- {ECEE0279-785F-4CB3-9F28-E69813234BF8} O42 - Logiciel: Safari - (.Apple Inc..) [HKLM][64Bits] -- {FA4C2D53-205F-4245-9717-F3761154824D} O42 - Logiciel: Sibelius Scorch (Firefox, Opera, Netscape, Chrome only) - (.Sibelius Software, a division of Avid Technology, Inc..) [HKLM][64Bits] -- {41626CC0-A854-4402-AD06-D7939515C282} O42 - Logiciel: SimCity 4 Deluxe - (.Maxis.) [HKLM][64Bits] -- Steam App 24780 O42 - Logiciel: Skype Click to Call - (.Skype Technologies S.A..) [HKLM][64Bits] -- {B6CF2967-C81E-40C0-9815-C05774FEF120} O42 - Logiciel: Skype™ 6.11 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {4E76FF7E-AEBA-4C87-B788-CD47E5425B9D} O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-607389e4-1972-48e3-827d-16497157680e =>.WildTangent O42 - Logiciel: Sniper Elite V2 - (.Rebellion.) [HKLM][64Bits] -- Steam App 63380 O42 - Logiciel: SopCast 3.9.3 - (.www.sopcast.com.) [HKLM][64Bits] -- SopCast O42 - Logiciel: Spec Ops: The Line - (.YAGER.) [HKLM][64Bits] -- Steam App 50300 O42 - Logiciel: Spotify - (.Spotify AB.) [HKCU][64Bits] -- Spotify O42 - Logiciel: Steam - (.Valve.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9-AB023A9238F3} O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey O42 - Logiciel: The Sims 2: Ultimate Collection - (.Electronic Arts.) [HKLM][64Bits] -- {04450C18-F039-4B81-A621-70C3B0F523D5} O42 - Logiciel: The Sims(TM) 3 - (.The Sims Studio.) [HKLM][64Bits] -- Steam App 47890 O42 - Logiciel: The Witcher 2: Assassins of Kings Enhanced Edition - (.CD Projekt RED.) [HKLM][64Bits] -- Steam App 20920 O42 - Logiciel: The Witcher: Enhanced Edition - (.CD Projekt RED.) [HKLM][64Bits] -- Steam App 20900 O42 - Logiciel: Theme Park World - (...) [HKLM][64Bits] -- Theme Park World O42 - Logiciel: Theme Park World Fix - (.Adam Hearn.) [HKLM][64Bits] -- {42082D6A-7C60-4CD9-B6FC-81E6F1FA96EF} O42 - Logiciel: Torchlight - (.WildTangent.) [HKLM][64Bits] -- WTA-3c111aff-fbd7-4ddd-8791-24c9ae8e8958 =>.WildTangent O42 - Logiciel: Total War: SHOGUN 2 - (.The Creative Assembly.) [HKLM][64Bits] -- Steam App 34330 O42 - Logiciel: Traffic Simulator Configuration Tool - (...) [HKCU][64Bits] -- Traffic Simulator Configuration Tool O42 - Logiciel: Tropico 3 - Steam Special Edition - (.Haemimont Games.) [HKLM][64Bits] -- Steam App 23490 O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: Valokuvavalikoima - (.Microsoft Corporation.) [HKLM][64Bits] -- {245C4CCD-8829-469C-9278-2BA330BEB8F4} O42 - Logiciel: Viber - (.Viber Media Inc.) [HKCU][64Bits] -- Viber O42 - Logiciel: Video Web Camera - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: Video Web Camera - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM][64Bits] -- WTA-47f5720e-ef49-4ccd-8da7-2625befd0f3a =>.WildTangent O42 - Logiciel: VobSub 2.23 - (.Gabest.) [HKLM][64Bits] -- VobSub O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WTA-909c1eb1-e701-483f-838a-2e430f2de39a =>.WildTangent O42 - Logiciel: Welcome Center - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Welcome Center O42 - Logiciel: WildTangent Games App (Packard Bell Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-packardbell =>.WildTangent O42 - Logiciel: WinRAR 4.01 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} =>.Microsoft Corporation O42 - Logiciel: Xvid Video Codec - (.Xvid Team.) [HKLM][64Bits] -- Xvid Video Codec 1.3.2 O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-af8cd63f-d090-4d2f-ae91-2a3d5ee88f32 =>.WildTangent O42 - Logiciel: avast! Free Antivirus v9.0.2006 - (.Avast Software.) [HKLM][64Bits] -- Avast O42 - Logiciel: eBay Worldwide - (.OEM.) [HKLM][64Bits] -- {D3E5A972-9A15-427D-AE78-8181A5FD943C} O42 - Logiciel: gedit 2.30.1 - (.GNOME.) [HKLM][64Bits] -- gedit_is1 O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {7B8D4E8A-EA2B-4A71-BFEB-A4AAAB87C5D0} O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} O42 - Logiciel: Συλλογή φωτογραφιών - (.Microsoft Corporation.) [HKLM][64Bits] -- {032CB0D7-FDBF-4CA9-901B-A4C1B01B1777} O42 - Logiciel: Фотоальбом - (.Microsoft Corporation.) [HKLM][64Bits] -- {CE4EEFE0-85E0-436E-95C5-BCB2EE30C976} O42 - Logiciel: Фотогалерия - (.Microsoft Corporation.) [HKLM][64Bits] -- {87E79A55-EBF1-472F-BCAD-4A631B9A69A5} O42 - Logiciel: Фотографии (общедоступная версия) - (.Microsoft Corporation.) [HKLM][64Bits] -- {234BD64C-99F4-42B5-837F-82F00E37A7E1} O42 - Logiciel: גלריית התמונות - (.Microsoft Corporation.) [HKLM][64Bits] -- {B1AC8AF0-2979-4DF8-AE26-B1D543F3543F} O42 - Logiciel: معرض الصور - (.Microsoft Corporation.) [HKLM][64Bits] -- {6F77C156-7660-4CEC-8793-97D80D5BFEC0} O42 - Logiciel: 影像中心 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7DB15F28-5E38-476A-A773-EA07EAEAB1B3} ~ Logic: 127 Scanned in 00mn 02s ---\\ HKCU & HKLM Software Keys [HKCU\Software\AMD] [HKCU\Software\ATI] [HKCU\Software\AVAST Software] [HKCU\Software\AVI ReComp] [HKCU\Software\Acer] [HKCU\Software\Adobe] [HKCU\Software\AppDataLow\Software\Adobe] [HKCU\Software\AppDataLow\Software\JavaSoft] [HKCU\Software\AppDataLow\Software\Macromedia] [HKCU\Software\AppDataLow\Software\Unity] [HKCU\Software\AppDataLow] [HKCU\Software\Apple Computer, Inc.] [HKCU\Software\Apple Inc.] [HKCU\Software\AtmaSoft] [HKCU\Software\Brother] [HKCU\Software\Bugsplat] [HKCU\Software\Bullfrog Productions Ltd] [HKCU\Software\CDDB] [HKCU\Software\Cakewalk Music Software] [HKCU\Software\Canon] [HKCU\Software\Classes] [HKCU\Software\Clients] [HKCU\Software\Crystal Dynamics] [HKCU\Software\Cyanide] [HKCU\Software\CyberLink] [HKCU\Software\DT Soft] [HKCU\Software\DVDVideoSoft] [HKCU\Software\Dritek] [HKCU\Software\EA Games] [HKCU\Software\Electronic Arts] [HKCU\Software\Epic Games] [HKCU\Software\F4] [HKCU\Software\Facebook] [HKCU\Software\Freeware] [HKCU\Software\GNU] [HKCU\Software\Gabest] [HKCU\Software\GameSpy] [HKCU\Software\Google] [HKCU\Software\HP] [HKCU\Software\HWiNFO64] [HKCU\Software\Hewlett-Packard] [HKCU\Software\IM Providers] [HKCU\Software\IncrediMail] [HKCU\Software\Intel] [HKCU\Software\JavaSoft] [HKCU\Software\Lavalys] [HKCU\Software\Licenses] [HKCU\Software\Local AppWizard-Generated Applications] [HKCU\Software\LogiShrd] [HKCU\Software\Logitech] [HKCU\Software\Macromedia] [HKCU\Software\Macrovision] [HKCU\Software\MainConcept (Broadcast)] [HKCU\Software\MainConcept] [HKCU\Software\MozillaPlugins] [HKCU\Software\Nero] [HKCU\Software\Netscape] [HKCU\Software\NeutronGames] [HKCU\Software\NewBlue] [HKCU\Software\Next Dimension Imaging] [HKCU\Software\ODBC] [HKCU\Software\OEM] [HKCU\Software\OpenAutomate] [HKCU\Software\Piriform] [HKCU\Software\Policies] [HKCU\Software\PreSonus] [HKCU\Software\QtProject] [HKCU\Software\Raptr] [HKCU\Software\Realtek] [HKCU\Software\SecuROM] [HKCU\Software\SkypeRS] [HKCU\Software\Skype] [HKCU\Software\Sony Ericsson] [HKCU\Software\Symantec] [HKCU\Software\Synaptics] [HKCU\Software\TeleCharger] [HKCU\Software\The Creative Assembly] [HKCU\Software\Trolltech] [HKCU\Software\Ubisoft] [HKCU\Software\Unity] [HKCU\Software\Valve] [HKCU\Software\WBGames] [HKCU\Software\WinLicense] [HKCU\Software\WinRAR SFX] [HKCU\Software\WinRAR] [HKCU\Software\Wow6432Node] [HKCU\Software\ZebHelpProcess Helper] [HKCU\Software\cd projekt red] [HKCU\Software\ej-technologies] [HKCU\Software\mozilla] [HKLM\Software\AGEIA Technologies] [HKLM\Software\AMD] [HKLM\Software\ASIO] [HKLM\Software\ATI Technologies] [HKLM\Software\ATI] [HKLM\Software\Acer] [HKLM\Software\Alienware] [HKLM\Software\Apple Computer, Inc.] [HKLM\Software\Apple Inc.] [HKLM\Software\BlenderFoundation] [HKLM\Software\Bullfrog Productions Ltd] [HKLM\Software\CBSTEST] [HKLM\Software\CanonBJ] [HKLM\Software\Canon] [HKLM\Software\Classes] [HKLM\Software\Clients] [HKLM\Software\Cyberlink] [HKLM\Software\DTS] [HKLM\Software\DVDVideoSoft] [HKLM\Software\Dolby] [HKLM\Software\GEAR Software] [HKLM\Software\HP] [HKLM\Software\IM Providers] [HKLM\Software\InstalledOptions] [HKLM\Software\Intel] [HKLM\Software\Khronos] [HKLM\Software\LexmarkLaser] [HKLM\Software\Logishrd] [HKLM\Software\Logitech] [HKLM\Software\Macromedia] [HKLM\Software\MozillaPlugins] [HKLM\Software\Mozilla] [HKLM\Software\ODBC] [HKLM\Software\OEM] [HKLM\Software\OOBEOffer] [HKLM\Software\OemSetup] [HKLM\Software\Piriform] [HKLM\Software\Policies] [HKLM\Software\PreSonus] [HKLM\Software\Realtek Semiconductor Corp.] [HKLM\Software\Realtek] [HKLM\Software\RegisteredApplications] [HKLM\Software\SRS Labs] [HKLM\Software\SonicFocus] [HKLM\Software\Sonic] [HKLM\Software\Symantec] [HKLM\Software\Synaptics] [HKLM\Software\Waves Audio] [HKLM\Software\WinRAR] [HKLM\Software\Wow6432Node\AGEIA Technologies] [HKLM\Software\Wow6432Node\AMD] [HKLM\Software\Wow6432Node\ASIO] [HKLM\Software\Wow6432Node\ATI Technologies] [HKLM\Software\Wow6432Node\ATI] [HKLM\Software\Wow6432Node\Abacus] [HKLM\Software\Wow6432Node\Adobe] [HKLM\Software\Wow6432Node\AdwCleaner] [HKLM\Software\Wow6432Node\AppDataLow] [HKLM\Software\Wow6432Node\Apple Computer, Inc.] [HKLM\Software\Wow6432Node\Apple Inc.] [HKLM\Software\Wow6432Node\Atheros Communications Inc.] [HKLM\Software\Wow6432Node\AtmaSoft] [HKLM\Software\Wow6432Node\AviSynth] [HKLM\Software\Wow6432Node\Bullfrog Productions Ltd] [HKLM\Software\Wow6432Node\C07ft5Y] [HKLM\Software\Wow6432Node\Cakewalk Music Software] [HKLM\Software\Wow6432Node\Canon] [HKLM\Software\Wow6432Node\Classes] [HKLM\Software\Wow6432Node\Clients] [HKLM\Software\Wow6432Node\CyberLink] [HKLM\Software\Wow6432Node\DT Soft] [HKLM\Software\Wow6432Node\DVDVideoSoft] [HKLM\Software\Wow6432Node\Dritek] [HKLM\Software\Wow6432Node\EA GAMES] [HKLM\Software\Wow6432Node\Electronic Arts] [HKLM\Software\Wow6432Node\Google] [HKLM\Software\Wow6432Node\Haemimont Games] [HKLM\Software\Wow6432Node\Hewlett-Packard] [HKLM\Software\Wow6432Node\IM Providers] [HKLM\Software\Wow6432Node\InstallShield] [HKLM\Software\Wow6432Node\Insyde] [HKLM\Software\Wow6432Node\Intel] [HKLM\Software\Wow6432Node\JavaSoft] [HKLM\Software\Wow6432Node\JreMetrics] [HKLM\Software\Wow6432Node\Khronos] [HKLM\Software\Wow6432Node\Licenses] [HKLM\Software\Wow6432Node\Logitech] [HKLM\Software\Wow6432Node\Macromedia] [HKLM\Software\Wow6432Node\Maxis] [HKLM\Software\Wow6432Node\MozillaPlugins] [HKLM\Software\Wow6432Node\Mozilla] [HKLM\Software\Wow6432Node\Nero] [HKLM\Software\Wow6432Node\NewTech Infosystems] [HKLM\Software\Wow6432Node\Next Dimension Imaging] [HKLM\Software\Wow6432Node\ODBC] [HKLM\Software\Wow6432Node\OEM] [HKLM\Software\Wow6432Node\OldTimer Tools] [HKLM\Software\Wow6432Node\Origin Games] [HKLM\Software\Wow6432Node\Packard Bell] [HKLM\Software\Wow6432Node\Policies] [HKLM\Software\Wow6432Node\PreSonus] [HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.] [HKLM\Software\Wow6432Node\Realtek] [HKLM\Software\Wow6432Node\Rebellion] [HKLM\Software\Wow6432Node\RegisteredApplications] [HKLM\Software\Wow6432Node\SCS Software] [HKLM\Software\Wow6432Node\Sierra] [HKLM\Software\Wow6432Node\Sims(Steam)] [HKLM\Software\Wow6432Node\Skype] [HKLM\Software\Wow6432Node\Sony Corporation] [HKLM\Software\Wow6432Node\Sony] [HKLM\Software\Wow6432Node\Spellbound Software] [HKLM\Software\Wow6432Node\Symantec] [HKLM\Software\Wow6432Node\TACSucAba] [HKLM\Software\Wow6432Node\Tilted Mill Entertainment] [HKLM\Software\Wow6432Node\UCAM_Upgrade] [HKLM\Software\Wow6432Node\Ubisoft] [HKLM\Software\Wow6432Node\VST] [HKLM\Software\Wow6432Node\Valve] [HKLM\Software\Wow6432Node\VideoLAN] [HKLM\Software\Wow6432Node\Volatile] [HKLM\Software\Wow6432Node\WBGames] [HKLM\Software\Wow6432Node\Warner Bros] [HKLM\Software\Wow6432Node\WildTangent] [HKLM\Software\Wow6432Node\Windows] [HKLM\Software\Wow6432Node\Wise Solutions] [HKLM\Software\Wow6432Node\Wow6432Node] [HKLM\Software\Wow6432Node\Xvid Team] [HKLM\Software\Wow6432Node\cd projekt red] [HKLM\Software\Wow6432Node\intellidownload] [HKLM\Software\Wow6432Node\mozilla.org] [HKLM\Software\Wow6432Node] [HKLM\Software\Xerox] [HKLM\Software\cybelsoft] ~ Key Software: 591 Scanned in 00mn 02s ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) O43 - CFD: 15/12/2014 - 16:15:21 - [] ----D C:\Program Files (x86)\Adobe O43 - CFD: 15/12/2014 - 16:25:24 - [] ----D C:\Program Files (x86)\AMD O43 - CFD: 25/07/2013 - 02:03:12 - [] ----D C:\Program Files (x86)\AMD APP O43 - CFD: 15/12/2014 - 16:26:57 - [] ----D C:\Program Files (x86)\AMD AVT O43 - CFD: 23/10/2011 - 20:02:16 - [] ----D C:\Program Files (x86)\Apple Software Update =>.Apple Inc O43 - CFD: 15/12/2014 - 16:25:21 - [] ----D C:\Program Files (x86)\ATI Technologies O43 - CFD: 01/08/2014 - 19:42:11 - [] ----D C:\Program Files (x86)\AVI ReComp O43 - CFD: 01/08/2014 - 19:40:32 - [] ----D C:\Program Files (x86)\AviSynth 2.5 O43 - CFD: 02/11/2013 - 19:33:07 - [] ----D C:\Program Files (x86)\Bible O43 - CFD: 23/10/2011 - 20:01:44 - [] ----D C:\Program Files (x86)\Bonjour O43 - CFD: 09/02/2013 - 00:18:56 - [] ----D C:\Program Files (x86)\BSCCleanitol O43 - CFD: 18/04/2012 - 18:51:22 - [] ----D C:\Program Files (x86)\Bullfrog O43 - CFD: 12/02/2012 - 18:24:52 - [] ----D C:\Program Files (x86)\Cakewalk O43 - CFD: 23/10/2011 - 22:36:45 - [] ----D C:\Program Files (x86)\Canon O43 - CFD: 29/06/2013 - 21:58:50 - [0] ----D C:\Program Files (x86)\Chat Republic Games O43 - CFD: 20/04/2015 - 14:35:35 - [] ----D C:\Program Files (x86)\Common Files O43 - CFD: 03/06/2011 - 06:27:09 - [] ----D C:\Program Files (x86)\CyberLink O43 - CFD: 16/04/2012 - 20:53:11 - [] ----D C:\Program Files (x86)\D-Fend Reloaded O43 - CFD: 08/12/2014 - 18:16:06 - [] ----D C:\Program Files (x86)\Dactylo O43 - CFD: 10/05/2015 - 14:01:09 - [] ----D C:\Program Files (x86)\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 06/08/2014 - 11:08:57 - [] ----D C:\Program Files (x86)\DVDVideoSoft O43 - CFD: 06/04/2013 - 18:40:04 - [] ----D C:\Program Files (x86)\Electronic Arts O43 - CFD: 29/10/2012 - 20:58:50 - [] ----D C:\Program Files (x86)\Euro Truck Simulator 2 O43 - CFD: 01/08/2014 - 19:42:08 - [] ----D C:\Program Files (x86)\Gabest O43 - CFD: 25/04/2014 - 21:09:43 - [] ----D C:\Program Files (x86)\gedit O43 - CFD: 17/01/2012 - 21:25:57 - [] ----D C:\Program Files (x86)\GIMP-2.0 O43 - CFD: 04/06/2015 - 18:45:43 - [] ----D C:\Program Files (x86)\Google O43 - CFD: 21/12/2014 - 22:10:56 - [] ----D C:\Program Files (x86)\HP O43 - CFD: 19/01/2015 - 20:13:21 - [] ----D C:\Program Files (x86)\HP Photo Creations O43 - CFD: 16/10/2014 - 21:47:46 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 29/11/2014 - 16:25:00 - [] ----D C:\Program Files (x86)\Intel O43 - CFD: 10/07/2014 - 00:47:28 - [] ----D C:\Program Files (x86)\Internet Explorer O43 - CFD: 18/02/2015 - 14:24:08 - [] ----D C:\Program Files (x86)\iTunes O43 - CFD: 08/02/2015 - 00:00:04 - [] ----D C:\Program Files (x86)\Java O43 - CFD: 12/07/2011 - 07:39:35 - [] ----D C:\Program Files (x86)\Launch Manager O43 - CFD: 23/07/2013 - 19:30:42 - [] ----D C:\Program Files (x86)\Lavalys O43 - CFD: 30/01/2015 - 15:16:36 - [] ----D C:\Program Files (x86)\Maxis O43 - CFD: 22/07/2013 - 18:51:23 - [0] ----D C:\Program Files (x86)\Microsoft O43 - CFD: 06/04/2012 - 18:30:25 - [] ----D C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 06/04/2013 - 18:11:49 - [] ----D C:\Program Files (x86)\Microsoft Games O43 - CFD: 15/03/2012 - 02:19:07 - [] ----D C:\Program Files (x86)\Microsoft Games for Windows - LIVE O43 - CFD: 06/04/2012 - 18:33:21 - [] ----D C:\Program Files (x86)\Microsoft Office O43 - CFD: 06/04/2014 - 10:58:01 - [] ----D C:\Program Files (x86)\Microsoft Security Client O43 - CFD: 25/07/2014 - 22:29:25 - [] ----D C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 19/02/2013 - 19:37:01 - [] ----D C:\Program Files (x86)\Microsoft SkyDrive =>.Microsoft Corporation O43 - CFD: 06/04/2012 - 18:33:19 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 06/04/2012 - 18:33:19 - [] ----D C:\Program Files (x86)\Microsoft Sync Framework O43 - CFD: 06/04/2012 - 18:33:49 - [] ----D C:\Program Files (x86)\Microsoft Synchronization Services O43 - CFD: 06/04/2012 - 18:31:32 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio 8 O43 - CFD: 22/07/2013 - 17:58:18 - [] ----D C:\Program Files (x86)\Microsoft Windows 7 Upgrade Advisor O43 - CFD: 06/04/2012 - 18:33:19 - [] ----D C:\Program Files (x86)\Microsoft.NET O43 - CFD: 19/02/2013 - 19:22:47 - [] ----D C:\Program Files (x86)\Movie Maker O43 - CFD: 20/06/2013 - 16:56:31 - [] ----D C:\Program Files (x86)\Movie Maker 2.6 O43 - CFD: 11/04/2014 - 07:04:51 - [] ----D C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 26/05/2014 - 16:35:50 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 06/04/2012 - 18:34:32 - [] ----D C:\Program Files (x86)\MSBuild O43 - CFD: 23/10/2011 - 22:13:38 - [0] ----D C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 03/06/2011 - 06:21:23 - [] ----D C:\Program Files (x86)\Nero O43 - CFD: 03/06/2011 - 06:02:27 - [] ----D C:\Program Files (x86)\NTI O43 - CFD: 30/08/2012 - 16:04:07 - [] ----D C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 23/10/2011 - 18:13:41 - [] ----D C:\Program Files (x86)\OEM O43 - CFD: 28/09/2013 - 11:58:57 - [] ----D C:\Program Files (x86)\OpenSong O43 - CFD: 19/04/2015 - 23:00:24 - [] ----D C:\Program Files (x86)\Origin O43 - CFD: 09/10/2014 - 21:31:47 - [] ----D C:\Program Files (x86)\Origin Games O43 - CFD: 12/07/2011 - 07:54:10 - [] ----D C:\Program Files (x86)\Packard Bell O43 - CFD: 03/06/2011 - 06:00:10 - [] ----D C:\Program Files (x86)\Packard Bell Games O43 - CFD: 02/10/2012 - 13:43:55 - [] ----D C:\Program Files (x86)\PandaPDFConverter O43 - CFD: 20/04/2015 - 14:35:26 - [] ----D C:\Program Files (x86)\PreSonus O43 - CFD: 18/12/2014 - 20:38:14 - [] ----D C:\Program Files (x86)\QuickTime O43 - CFD: 15/12/2014 - 16:28:10 - [] ----D C:\Program Files (x86)\Raptr O43 - CFD: 03/06/2011 - 05:35:02 - [] ----D C:\Program Files (x86)\Realtek O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Reference Assemblies O43 - CFD: 02/08/2012 - 19:08:20 - [] ----D C:\Program Files (x86)\Robin Hood - The Legend of Sherwood (Demo) O43 - CFD: 18/03/2014 - 22:11:04 - [] ----D C:\Program Files (x86)\Safari O43 - CFD: 24/01/2013 - 10:23:59 - [] ----D C:\Program Files (x86)\SC4 Mapper 2013 O43 - CFD: 02/02/2015 - 15:54:19 - [] ----D C:\Program Files (x86)\SC4 Utilities O43 - CFD: 02/02/2015 - 16:40:25 - [] ----D C:\Program Files (x86)\SC4Tool O43 - CFD: 13/06/2013 - 19:09:27 - [] ----D C:\Program Files (x86)\Sibelius Software O43 - CFD: 06/01/2012 - 20:51:30 - [] ----D C:\Program Files (x86)\Sierra O43 - CFD: 19/01/2015 - 20:13:21 - [] R---D C:\Program Files (x86)\Skype O43 - CFD: 03/06/2011 - 06:00:52 - [] ----D C:\Program Files (x86)\Social Networks O43 - CFD: 28/03/2014 - 12:55:13 - [] ----D C:\Program Files (x86)\Sony O43 - CFD: 18/11/2011 - 16:20:23 - [] ----D C:\Program Files (x86)\Sony Media Go Install O43 - CFD: 25/10/2014 - 18:32:25 - [] ----D C:\Program Files (x86)\SopCast O43 - CFD: 25/07/2013 - 01:26:17 - [] ----D C:\Program Files (x86)\SpeedFan O43 - CFD: 23/06/2015 - 22:49:00 - [] ----D C:\Program Files (x86)\Steam O43 - CFD: 03/06/2011 - 06:22:06 - [] ----D C:\Program Files (x86)\Symantec O43 - CFD: 03/06/2011 - 06:24:35 - [] ----D C:\Program Files (x86)\SymSilent O43 - CFD: 03/06/2011 - 05:34:28 - [0] --H-D C:\Program Files (x86)\Temp O43 - CFD: 10/05/2015 - 14:15:25 - [] ----D C:\Program Files (x86)\Theme Park World Fix O43 - CFD: 25/12/2013 - 16:49:29 - [] ----D C:\Program Files (x86)\Traffic Simulator Configuration Tool O43 - CFD: 10/07/2013 - 16:08:19 - [0] ----D C:\Program Files (x86)\Ubisoft O43 - CFD: 02/08/2012 - 00:25:27 - [] --H-D C:\Program Files (x86)\Uninstall Information O43 - CFD: 23/10/2011 - 19:25:25 - [] ----D C:\Program Files (x86)\Video Web Camera O43 - CFD: 23/10/2011 - 19:49:09 - [] ----D C:\Program Files (x86)\VideoLAN O43 - CFD: 25/12/2014 - 13:17:44 - [] ----D C:\Program Files (x86)\WildTangent Games O43 - CFD: 11/07/2013 - 10:25:33 - [] ----D C:\Program Files (x86)\Windows Defender O43 - CFD: 20/06/2013 - 17:12:21 - [] ----D C:\Program Files (x86)\Windows Live O43 - CFD: 12/07/2011 - 17:23:47 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 12/12/2013 - 19:51:52 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Windows NT O43 - CFD: 12/07/2011 - 17:23:47 - [] ----D C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - 05:31:38 - [] ----D C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 12/07/2011 - 17:23:47 - [] ----D C:\Program Files (x86)\Windows Sidebar O43 - CFD: 23/10/2011 - 22:22:53 - [0] ----D C:\Program Files (x86)\WinRAR O43 - CFD: 01/08/2014 - 19:41:49 - [] ----D C:\Program Files (x86)\Xvid O43 - CFD: 23/06/2015 - 14:33:25 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman O43 - CFD: 15/12/2014 - 16:15:23 - [] ----D C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 12/07/2011 - 07:50:05 - [] ----D C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 18/02/2015 - 14:23:54 - [] ----D C:\Program Files (x86)\Common Files\Apple O43 - CFD: 29/11/2014 - 14:00:45 - [] ----D C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 15/05/2014 - 21:08:06 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 06/08/2014 - 10:19:17 - [] ----D C:\Program Files (x86)\Common Files\DVDVideoSoft O43 - CFD: 31/07/2014 - 00:48:38 - [] --H-D C:\Program Files (x86)\Common Files\EAInstaller O43 - CFD: 03/06/2011 - 06:26:13 - [] ----D C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 29/11/2014 - 15:22:00 - [] ----D C:\Program Files (x86)\Common Files\Intel Corporation O43 - CFD: 07/02/2015 - 23:58:36 - [] ----D C:\Program Files (x86)\Common Files\Java O43 - CFD: 12/09/2013 - 21:40:41 - [] ----D C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 03/06/2011 - 06:20:36 - [] ----D C:\Program Files (x86)\Common Files\Nero O43 - CFD: 03/06/2011 - 05:32:41 - [] ----D C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 20/04/2015 - 14:35:35 - [] ----D C:\Program Files (x86)\Common Files\Propellerhead Software O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\Services O43 - CFD: 19/01/2015 - 20:13:21 - [] ----D C:\Program Files (x86)\Common Files\Skype O43 - CFD: 18/11/2011 - 16:21:59 - [] ----D C:\Program Files (x86)\Common Files\Sony Shared O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 13/06/2015 - 15:28:46 - [] ----D C:\Program Files (x86)\Common Files\Steam O43 - CFD: 31/10/2013 - 13:34:09 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared O43 - CFD: 15/11/2012 - 20:40:29 - [] ----D C:\Program Files (x86)\Common Files\System O43 - CFD: 03/06/2011 - 06:07:49 - [] ----D C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 18/12/2014 - 20:33:19 - [] ----D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 15/12/2014 - 16:15:23 - [] ----D C:\ProgramData\Adobe O43 - CFD: 15/12/2014 - 16:26:58 - [] ----D C:\ProgramData\AMD O43 - CFD: 18/03/2014 - 22:14:10 - [] ----D C:\ProgramData\Apple O43 - CFD: 23/10/2011 - 20:02:34 - [] ----D C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Application Data O43 - CFD: 15/12/2014 - 16:28:40 - [] ----D C:\ProgramData\ATI O43 - CFD: 28/10/2013 - 11:52:01 - [] ----D C:\ProgramData\AVAST Software O43 - CFD: 19/01/2015 - 20:13:21 - [] ----D C:\ProgramData\BackupManager O43 - CFD: 25/04/2014 - 23:17:47 - [] ----D C:\ProgramData\BlueStacksSetup O43 - CFD: 23/10/2011 - 18:12:30 - [] -SH-D C:\ProgramData\Bureau O43 - CFD: 12/02/2012 - 18:26:01 - [] ----D C:\ProgramData\Cakewalk O43 - CFD: 23/10/2011 - 22:02:13 - [] --H-D C:\ProgramData\CanonBJ O43 - CFD: 29/06/2013 - 21:58:50 - [0] ----D C:\ProgramData\Chat Republic Games O43 - CFD: 20/10/2012 - 22:08:52 - [] ----D C:\ProgramData\Codemasters O43 - CFD: 30/10/2011 - 22:07:21 - [] ----D C:\ProgramData\CyberLink O43 - CFD: 15/10/2012 - 14:44:28 - [] ----D C:\ProgramData\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Documents O43 - CFD: 18/02/2015 - 14:25:49 - [] ----D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 O43 - CFD: 28/03/2014 - 23:39:53 - [] ----D C:\ProgramData\Electronic Arts O43 - CFD: 16/06/2012 - 16:45:20 - [] ----D C:\ProgramData\F4 O43 - CFD: 23/10/2011 - 18:12:30 - [] -SH-D C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Favorites O43 - CFD: 16/02/2014 - 14:23:21 - [] ----D C:\ProgramData\Hewlett-Packard O43 - CFD: 21/12/2014 - 22:08:45 - [] ----D C:\ProgramData\HP O43 - CFD: 19/01/2015 - 20:13:21 - [] ----D C:\ProgramData\HP Photo Creations O43 - CFD: 12/02/2012 - 18:27:43 - [] ----D C:\ProgramData\Identities O43 - CFD: 06/01/2012 - 20:47:13 - [] ----D C:\ProgramData\InstallShield O43 - CFD: 29/11/2014 - 15:17:28 - [] ----D C:\ProgramData\Intel O43 - CFD: 29/11/2014 - 15:09:08 - [] ----D C:\ProgramData\Logishrd O43 - CFD: 29/11/2014 - 15:09:02 - [] ----D C:\ProgramData\Logitech O43 - CFD: 29/11/2014 - 13:28:05 - [] ----D C:\ProgramData\ma-config.com O43 - CFD: 23/10/2011 - 18:12:30 - [] -SH-D C:\ProgramData\Menu Démarrer O43 - CFD: 06/03/2014 - 12:31:54 - [] -S--D C:\ProgramData\Microsoft O43 - CFD: 19/08/2014 - 03:27:52 - [] ----D C:\ProgramData\Microsoft Help O43 - CFD: 19/02/2013 - 19:36:45 - [] ----D C:\ProgramData\Microsoft SkyDrive =>.Microsoft Corporation O43 - CFD: 23/10/2011 - 18:12:30 - [] -SH-D C:\ProgramData\Modèles O43 - CFD: 29/09/2013 - 20:31:34 - [] ----D C:\ProgramData\Mozilla O43 - CFD: 03/06/2011 - 06:21:23 - [] ----D C:\ProgramData\Nero O43 - CFD: 01/11/2013 - 00:43:11 - [] ----D C:\ProgramData\Norton O43 - CFD: 03/06/2011 - 06:24:06 - [] ----D C:\ProgramData\NortonInstaller O43 - CFD: 23/10/2011 - 18:15:14 - [] ----D C:\ProgramData\oem O43 - CFD: 07/02/2015 - 23:56:35 - [] ----D C:\ProgramData\Oracle O43 - CFD: 19/04/2015 - 23:00:50 - [] ----D C:\ProgramData\Origin O43 - CFD: 29/11/2014 - 13:47:29 - [] ----D C:\ProgramData\Package Cache O43 - CFD: 03/06/2011 - 06:07:09 - [] ----D C:\ProgramData\Packard Bell O43 - CFD: 20/04/2015 - 14:36:36 - [] ----D C:\ProgramData\PreSonus O43 - CFD: 09/04/2012 - 17:58:08 - [] ----D C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 19/01/2015 - 20:12:27 - [] ----D C:\ProgramData\Skype O43 - CFD: 18/11/2011 - 16:21:33 - [] ----D C:\ProgramData\Sony Corporation O43 - CFD: 28/03/2014 - 12:51:57 - [0] ----D C:\ProgramData\Sony Ericsson O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Start Menu O43 - CFD: 26/10/2011 - 00:39:37 - [] ----D C:\ProgramData\Sun O43 - CFD: 03/06/2011 - 06:22:06 - [] ----D C:\ProgramData\Symantec O43 - CFD: 12/11/2013 - 00:11:01 - [] ---AD C:\ProgramData\Temp O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Templates O43 - CFD: 26/10/2011 - 10:52:54 - [] ----D C:\ProgramData\VirtualizedApplications O43 - CFD: 25/12/2014 - 13:16:26 - [] ----D C:\ProgramData\WildTangent O43 - CFD: 12/03/2012 - 15:52:23 - [0] ----D C:\ProgramData\WinZip O43 - CFD: 23/10/2011 - 20:02:58 - [] ----D C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} O43 - CFD: 17/09/2013 - 21:16:47 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 14/07/2009 - 06:57:13 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 15/12/2014 - 16:26:21 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center O43 - CFD: 15/12/2014 - 16:28:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved O43 - CFD: 01/08/2014 - 19:40:32 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 O43 - CFD: 17/01/2012 - 21:04:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation O43 - CFD: 10/05/2015 - 14:02:29 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bullfrog O43 - CFD: 12/02/2012 - 18:27:23 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cakewalk O43 - CFD: 23/10/2011 - 22:04:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP170 O43 - CFD: 12/03/2012 - 16:00:07 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities O43 - CFD: 29/11/2014 - 14:09:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 03/06/2011 - 06:27:51 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink MediaEspresso O43 - CFD: 16/04/2012 - 20:53:12 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\D-Fend Reloaded O43 - CFD: 08/12/2014 - 18:16:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dactylo O43 - CFD: 05/06/2012 - 17:37:37 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 29/10/2014 - 19:59:39 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DarthMod Shogun II O43 - CFD: 28/03/2014 - 23:39:48 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dead Space O43 - CFD: 06/08/2014 - 11:08:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft O43 - CFD: 29/10/2012 - 20:58:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Euro Truck Simulator 2 O43 - CFD: 21/06/2015 - 22:17:16 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 17/01/2012 - 21:26:13 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP O43 - CFD: 03/06/2011 - 06:26:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeMedia O43 - CFD: 21/12/2014 - 22:10:41 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 25/07/2013 - 01:32:52 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64 O43 - CFD: 29/11/2014 - 15:20:38 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel O43 - CFD: 18/02/2015 - 14:26:01 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 07/02/2015 - 23:57:11 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 02/11/2013 - 19:19:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\La Bible Online E-M O43 - CFD: 23/07/2013 - 19:30:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys O43 - CFD: 29/11/2014 - 15:00:53 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech O43 - CFD: 29/11/2014 - 13:28:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com O43 - CFD: 14/07/2009 - 06:57:09 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 01/06/2012 - 19:15:57 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games O43 - CFD: 15/03/2012 - 02:18:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace O43 - CFD: 06/04/2012 - 18:35:20 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 25/07/2014 - 06:28:56 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 03/06/2011 - 06:20:24 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero O43 - CFD: 25/12/2013 - 16:48:57 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Network Addon Mod O43 - CFD: 03/06/2011 - 06:22:07 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Online Backup =>.Symantec Corporation O43 - CFD: 19/04/2015 - 23:00:22 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin O43 - CFD: 23/10/2011 - 18:14:30 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support O43 - CFD: 20/04/2015 - 14:15:50 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PreSonus O43 - CFD: 17/01/2014 - 14:11:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Programme de désinstal. imprimante Canon O43 - CFD: 18/12/2014 - 20:38:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O43 - CFD: 17/06/2012 - 21:43:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Robin Hood - The Legend of Sherwood (Demo) O43 - CFD: 02/02/2015 - 16:40:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SC4Tool O43 - CFD: 06/04/2012 - 18:35:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint O43 - CFD: 06/01/2012 - 20:51:29 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra O43 - CFD: 19/01/2015 - 20:13:22 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 03/06/2011 - 06:00:52 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Social Networks O43 - CFD: 25/10/2014 - 18:32:25 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SopCast O43 - CFD: 22/07/2013 - 19:09:01 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan O43 - CFD: 19/07/2012 - 19:40:57 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 20/01/2012 - 18:11:05 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam O43 - CFD: 21/11/2010 - 09:16:41 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 31/07/2014 - 00:48:48 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 2 Ultimate Collection O43 - CFD: 12/07/2011 - 07:55:09 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Web Camera O43 - CFD: 02/01/2014 - 00:46:08 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 01/08/2014 - 19:42:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VobSub O43 - CFD: 20/06/2013 - 17:34:04 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 23/10/2011 - 22:11:17 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 01/08/2014 - 19:41:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid O43 - CFD: 23/06/2015 - 14:33:26 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman O43 - CFD: 30/10/2014 - 23:52:35 - [] ----D C:\Users\Nathan\AppData\Roaming\.minecraft O43 - CFD: 07/08/2012 - 01:07:06 - [] ----D C:\Users\Nathan\AppData\Roaming\.minecraft_xray O43 - CFD: 07/03/2013 - 18:16:37 - [] ----D C:\Users\Nathan\AppData\Roaming\6Wunderkinder O43 - CFD: 22/01/2015 - 21:23:51 - [] ----D C:\Users\Nathan\AppData\Roaming\Adobe O43 - CFD: 18/12/2014 - 20:25:26 - [] ----D C:\Users\Nathan\AppData\Roaming\AMD O43 - CFD: 18/11/2011 - 19:37:27 - [] ----D C:\Users\Nathan\AppData\Roaming\Apple Computer O43 - CFD: 07/05/2012 - 23:23:29 - [] ----D C:\Users\Nathan\AppData\Roaming\Atari O43 - CFD: 23/10/2011 - 18:40:01 - [] ----D C:\Users\Nathan\AppData\Roaming\ATI O43 - CFD: 28/10/2013 - 11:57:30 - [] ----D C:\Users\Nathan\AppData\Roaming\AVAST Software O43 - CFD: 06/03/2015 - 20:17:48 - [0] ----D C:\Users\Nathan\AppData\Roaming\AVI ReComp O43 - CFD: 04/01/2015 - 23:21:27 - [] ----D C:\Users\Nathan\AppData\Roaming\BatteryBar O43 - CFD: 22/08/2012 - 22:07:32 - [] ----D C:\Users\Nathan\AppData\Roaming\BlackBean O43 - CFD: 26/10/2012 - 16:57:19 - [] ----D C:\Users\Nathan\AppData\Roaming\Blender Foundation O43 - CFD: 22/04/2015 - 13:06:04 - [] R---D C:\Users\Nathan\AppData\Roaming\Brother O43 - CFD: 18/02/2012 - 14:15:55 - [] ----D C:\Users\Nathan\AppData\Roaming\Cakewalk O43 - CFD: 15/07/2014 - 15:33:17 - [] ----D C:\Users\Nathan\AppData\Roaming\Canon O43 - CFD: 13/04/2013 - 00:13:45 - [] ----D C:\Users\Nathan\AppData\Roaming\Capcom O43 - CFD: 16/01/2012 - 19:29:48 - [] ----D C:\Users\Nathan\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 O43 - CFD: 30/10/2011 - 21:47:01 - [] ----D C:\Users\Nathan\AppData\Roaming\CyberLink O43 - CFD: 08/06/2015 - 00:02:46 - [] ----D C:\Users\Nathan\AppData\Roaming\DAEMON Tools Lite =>.DT Soft Ltd O43 - CFD: 13/04/2015 - 15:10:17 - [] ----D C:\Users\Nathan\AppData\Roaming\Dropbox O43 - CFD: 08/11/2012 - 22:36:09 - [] ----D C:\Users\Nathan\AppData\Roaming\dvdcss O43 - CFD: 20/12/2014 - 13:54:45 - [] ----D C:\Users\Nathan\AppData\Roaming\DVDVideoSoft O43 - CFD: 17/03/2012 - 20:21:07 - [] ----D C:\Users\Nathan\AppData\Roaming\eTeks O43 - CFD: 16/06/2012 - 16:45:13 - [] ----D C:\Users\Nathan\AppData\Roaming\F4 O43 - CFD: 16/11/2014 - 01:46:11 - [] ----D C:\Users\Nathan\AppData\Roaming\gedit O43 - CFD: 11/09/2012 - 19:31:38 - [] ----D C:\Users\Nathan\AppData\Roaming\Google O43 - CFD: 14/12/2014 - 09:57:01 - [] ----D C:\Users\Nathan\AppData\Roaming\gtk-2.0 O43 - CFD: 30/10/2011 - 22:07:27 - [] ----D C:\Users\Nathan\AppData\Roaming\HomeMedia O43 - CFD: 12/05/2015 - 21:43:14 - [] ----D C:\Users\Nathan\AppData\Roaming\HpUpdate O43 - CFD: 23/10/2011 - 18:14:52 - [] ----D C:\Users\Nathan\AppData\Roaming\Identities O43 - CFD: 06/01/2012 - 20:47:14 - [] ----D C:\Users\Nathan\AppData\Roaming\InstallShield O43 - CFD: 23/10/2011 - 18:15:24 - [] ----D C:\Users\Nathan\AppData\Roaming\Intel Corporation O43 - CFD: 15/12/2014 - 16:28:04 - [] ----D C:\Users\Nathan\AppData\Roaming\library_dir O43 - CFD: 29/11/2014 - 14:57:08 - [] ----D C:\Users\Nathan\AppData\Roaming\Logishrd O43 - CFD: 29/11/2014 - 15:08:57 - [] ----D C:\Users\Nathan\AppData\Roaming\Logitech O43 - CFD: 12/07/2011 - 07:50:06 - [] ----D C:\Users\Nathan\AppData\Roaming\Macromedia O43 - CFD: 21/11/2010 - 09:16:41 - [0] ----D C:\Users\Nathan\AppData\Roaming\Media Center Programs O43 - CFD: 29/10/2014 - 16:13:54 - [] -S--D C:\Users\Nathan\AppData\Roaming\Microsoft O43 - CFD: 06/01/2012 - 22:13:45 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft Games O43 - CFD: 29/09/2013 - 20:31:44 - [] ----D C:\Users\Nathan\AppData\Roaming\Mozilla O43 - CFD: 10/05/2014 - 17:34:03 - [] ----D C:\Users\Nathan\AppData\Roaming\Nero O43 - CFD: 25/07/2013 - 12:57:55 - [] ----D C:\Users\Nathan\AppData\Roaming\ooVoo Details O43 - CFD: 17/07/2013 - 02:29:57 - [] ----D C:\Users\Nathan\AppData\Roaming\OpenSong O43 - CFD: 29/10/2014 - 20:20:28 - [] ----D C:\Users\Nathan\AppData\Roaming\Oracle O43 - CFD: 10/04/2014 - 18:19:50 - [] ----D C:\Users\Nathan\AppData\Roaming\Origin O43 - CFD: 20/04/2015 - 14:36:35 - [] ----D C:\Users\Nathan\AppData\Roaming\PreSonus O43 - CFD: 24/06/2014 - 04:06:05 - [] ----D C:\Users\Nathan\AppData\Roaming\Pro Cycling Manager 2008 - Demo O43 - CFD: 20/12/2014 - 19:51:09 - [] ----D C:\Users\Nathan\AppData\Roaming\Raptr O43 - CFD: 31/07/2014 - 00:49:03 - [] R-H-D C:\Users\Nathan\AppData\Roaming\SecuROM O43 - CFD: 13/06/2013 - 19:09:32 - [] ----D C:\Users\Nathan\AppData\Roaming\Sibelius Software O43 - CFD: 19/01/2015 - 20:12:55 - [] ----D C:\Users\Nathan\AppData\Roaming\Skype O43 - CFD: 29/03/2013 - 22:08:44 - [] ----D C:\Users\Nathan\AppData\Roaming\SNS O43 - CFD: 06/04/2012 - 18:44:02 - [] ----D C:\Users\Nathan\AppData\Roaming\SoftGrid Client O43 - CFD: 18/11/2011 - 16:23:38 - [] ----D C:\Users\Nathan\AppData\Roaming\Sony O43 - CFD: 20/09/2013 - 21:04:00 - [] ----D C:\Users\Nathan\AppData\Roaming\SPORE Creature Creator O43 - CFD: 23/06/2015 - 21:49:17 - [] ----D C:\Users\Nathan\AppData\Roaming\Spotify O43 - CFD: 21/01/2012 - 02:43:51 - [] ----D C:\Users\Nathan\AppData\Roaming\The Creative Assembly O43 - CFD: 23/10/2011 - 19:29:36 - [0] ----D C:\Users\Nathan\AppData\Roaming\TP O43 - CFD: 20/04/2015 - 23:27:10 - [] ----D C:\Users\Nathan\AppData\Roaming\Tropico 3 O43 - CFD: 05/06/2012 - 23:26:28 - [] ----D C:\Users\Nathan\AppData\Roaming\TuneUpMedia O43 - CFD: 31/03/2012 - 13:36:03 - [] ----D C:\Users\Nathan\AppData\Roaming\Unity O43 - CFD: 03/06/2015 - 23:01:18 - [] ----D C:\Users\Nathan\AppData\Roaming\ViberPC O43 - CFD: 23/06/2015 - 00:15:27 - [] ----D C:\Users\Nathan\AppData\Roaming\vlc O43 - CFD: 25/12/2014 - 13:16:46 - [] ----D C:\Users\Nathan\AppData\Roaming\WildTangent O43 - CFD: 23/10/2011 - 20:33:16 - [] ----D C:\Users\Nathan\AppData\Roaming\WildTangentv1001 O43 - CFD: 20/01/2012 - 00:53:08 - [0] ----D C:\Users\Nathan\AppData\Roaming\Windows Live Writer O43 - CFD: 23/10/2011 - 19:41:34 - [] ----D C:\Users\Nathan\AppData\Roaming\WinRAR O43 - CFD: 24/06/2015 - 22:11:30 - [] ----D C:\Users\Nathan\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 30/08/2012 - 16:04:33 - [] ----D C:\Users\Nathan\AppData\Local\2K Games O43 - CFD: 11/03/2013 - 16:03:46 - [] ----D C:\Users\Nathan\AppData\Local\6_Wunderkinder_GmbH O43 - CFD: 17/03/2015 - 00:01:51 - [] ----D C:\Users\Nathan\AppData\Local\Adobe O43 - CFD: 23/10/2011 - 20:02:18 - [] ----D C:\Users\Nathan\AppData\Local\Apple O43 - CFD: 28/10/2011 - 20:32:10 - [] ----D C:\Users\Nathan\AppData\Local\Apple Computer O43 - CFD: 23/10/2011 - 18:12:53 - [] -SH-D C:\Users\Nathan\AppData\Local\Application Data O43 - CFD: 23/10/2011 - 18:18:47 - [] ----D C:\Users\Nathan\AppData\Local\Apps O43 - CFD: 23/10/2011 - 18:40:01 - [] ----D C:\Users\Nathan\AppData\Local\ATI O43 - CFD: 11/07/2014 - 17:49:55 - [0] ----D C:\Users\Nathan\AppData\Local\Canon Easy-PhotoPrint EX O43 - CFD: 29/06/2013 - 21:58:51 - [0] ----D C:\Users\Nathan\AppData\Local\Chat Republic Games O43 - CFD: 21/01/2012 - 02:50:24 - [] ----D C:\Users\Nathan\AppData\Local\Chromium O43 - CFD: 08/06/2015 - 00:02:23 - [0] ----D C:\Users\Nathan\AppData\Local\CrashDumps O43 - CFD: 30/10/2011 - 21:46:46 - [] ----D C:\Users\Nathan\AppData\Local\Cyberlink O43 - CFD: 06/04/2013 - 18:11:11 - [0] ----D C:\Users\Nathan\AppData\Local\Deployment O43 - CFD: 17/05/2015 - 20:09:57 - [] ----D C:\Users\Nathan\AppData\Local\Diagnostics O43 - CFD: 26/04/2013 - 21:00:48 - [] ----D C:\Users\Nathan\AppData\Local\Downloaded Installations O43 - CFD: 20/09/2014 - 22:45:47 - [] ----D C:\Users\Nathan\AppData\Local\DVDVideoSoft_Ltd O43 - CFD: 28/03/2014 - 23:40:04 - [] ----D C:\Users\Nathan\AppData\Local\Electronic Arts O43 - CFD: 25/10/2014 - 18:34:42 - [] -SH-D C:\Users\Nathan\AppData\Local\EmieSiteList O43 - CFD: 25/10/2014 - 18:34:42 - [] -SH-D C:\Users\Nathan\AppData\Local\EmieUserList O43 - CFD: 02/08/2012 - 16:14:47 - [] ----D C:\Users\Nathan\AppData\Local\European Bus Simulator 2012 Demo O43 - CFD: 16/06/2012 - 16:45:21 - [] ----D C:\Users\Nathan\AppData\Local\F4 O43 - CFD: 06/11/2012 - 22:25:16 - [] ----D C:\Users\Nathan\AppData\Local\Facebook O43 - CFD: 21/09/2013 - 10:10:48 - [] ----D C:\Users\Nathan\AppData\Local\Google O43 - CFD: 23/10/2011 - 18:12:53 - [] -SH-D C:\Users\Nathan\AppData\Local\Historique O43 - CFD: 21/12/2014 - 22:27:00 - [] ----D C:\Users\Nathan\AppData\Local\HP O43 - CFD: 29/09/2013 - 20:35:04 - [] ----D C:\Users\Nathan\AppData\Local\Macromedia O43 - CFD: 10/05/2015 - 09:42:56 - [] ----D C:\Users\Nathan\AppData\Local\Microsoft O43 - CFD: 22/07/2013 - 18:01:27 - [] ----D C:\Users\Nathan\AppData\Local\Microsoft Corporation O43 - CFD: 02/03/2012 - 01:42:27 - [] ----D C:\Users\Nathan\AppData\Local\Microsoft Games O43 - CFD: 19/01/2015 - 20:13:23 - [] ----D C:\Users\Nathan\AppData\Local\Microsoft Help O43 - CFD: 08/06/2015 - 00:02:25 - [0] ----D C:\Users\Nathan\AppData\Local\MigWiz O43 - CFD: 29/09/2013 - 22:39:19 - [] ----D C:\Users\Nathan\AppData\Local\Mozilla O43 - CFD: 28/03/2014 - 21:03:04 - [] ----D C:\Users\Nathan\AppData\Local\Origin O43 - CFD: 29/06/2013 - 00:40:01 - [] ----D C:\Users\Nathan\AppData\Local\Programs O43 - CFD: 10/01/2015 - 11:39:42 - [] ----D C:\Users\Nathan\AppData\Local\Skype O43 - CFD: 15/12/2014 - 16:34:30 - [] ----D C:\Users\Nathan\AppData\Local\SniperV2 O43 - CFD: 08/11/2012 - 22:36:09 - [] ----D C:\Users\Nathan\AppData\Local\SniperV2 Demo O43 - CFD: 23/10/2011 - 19:29:26 - [] ----D C:\Users\Nathan\AppData\Local\SoftGrid Client O43 - CFD: 10/04/2013 - 17:52:01 - [] ----D C:\Users\Nathan\AppData\Local\Sony O43 - CFD: 23/06/2015 - 21:49:57 - [] ----D C:\Users\Nathan\AppData\Local\Spotify O43 - CFD: 20/02/2015 - 17:51:43 - [] ----D C:\Users\Nathan\AppData\Local\Steam O43 - CFD: 24/06/2015 - 22:11:34 - [] ----D C:\Users\Nathan\AppData\Local\Temp O43 - CFD: 23/10/2011 - 18:12:53 - [] -SH-D C:\Users\Nathan\AppData\Local\Temporary Internet Files O43 - CFD: 06/10/2014 - 23:49:38 - [] ----D C:\Users\Nathan\AppData\Local\The Witcher O43 - CFD: 07/10/2014 - 17:19:49 - [] ----D C:\Users\Nathan\AppData\Local\The Witcher 2 O43 - CFD: 31/03/2012 - 13:29:01 - [] ----D C:\Users\Nathan\AppData\Local\Unity O43 - CFD: 03/06/2015 - 23:01:08 - [] ----D C:\Users\Nathan\AppData\Local\Viber O43 - CFD: 12/02/2012 - 18:42:51 - [] ----D C:\Users\Nathan\AppData\Local\VirtualStore O43 - CFD: 20/06/2013 - 18:26:41 - [] ----D C:\Users\Nathan\AppData\Local\Windows Live O43 - CFD: 20/01/2012 - 00:53:17 - [] ----D C:\Users\Nathan\AppData\Local\Windows Live Writer O43 - CFD: 20/06/2013 - 19:23:05 - [0] ----D C:\Users\Nathan\AppData\Local\WMTools Downloaded Files O43 - CFD: 29/03/2013 - 22:08:44 - [] R---D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 17/05/2014 - 22:46:26 - [] R---D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 01/08/2014 - 19:40:02 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AVI ReComp O43 - CFD: 01/08/2014 - 19:40:25 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AviSynth 2.5 O43 - CFD: 20/12/2014 - 19:23:03 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 16/06/2012 - 17:29:57 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Empire of Sports O43 - CFD: 25/10/2014 - 15:13:19 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 25/04/2014 - 21:10:29 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gedit O43 - CFD: 19/01/2015 - 20:13:26 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 14/07/2009 - 06:49:38 - [] R---D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 25/12/2013 - 16:49:29 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maxis O43 - CFD: 01/06/2012 - 19:20:58 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Micro Application O43 - CFD: 17/06/2012 - 21:42:53 - [0] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Robin Hood - The Legend of Sherwood (Demo) O43 - CFD: 02/02/2015 - 16:39:43 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SC4 Utilities O43 - CFD: 02/02/2015 - 16:40:26 - [0] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SC4Tool O43 - CFD: 25/10/2014 - 18:32:12 - [0] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast O43 - CFD: 17/05/2014 - 22:46:26 - [] R---D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 23/12/2013 - 17:55:12 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam O43 - CFD: 23/10/2011 - 22:11:17 - [] ----D C:\Users\Nathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ~ 3 Dossier CLSID vide (CLSID Empty Folder) ~ Program Folder: 396 Scanned in 00mn 03s ---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44) O44 - LFC:[MD5.A02E92EF155AC9934B3DE1D2EE8145CC] - 23/06/2015 - 13:47:50 ---A- . (...) -- C:\PhysicalDisk0_MBR.bin [512] O44 - LFC:[MD5.ADDF67C5CF0BFBB8E754E9FC2D0F82D9] - 24/06/2015 - 16:46:38 ---A- . (...) -- C:\Windows\setupact.log [1232] O44 - LFC:[MD5.54A3D2AA93E9C6A5E56A7BF70B1D18F4] - 24/06/2015 - 18:32:30 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1097470] ~ Files: 3 Scanned in 00mn 19s ---\\ Opérations et fonctions au démarrage de Windows Explorer (O46) O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL O46 - SEH:ShellExecuteHooks - Groove GFS Stub Execution Hook [64Bits] - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL ~ ShellExecuteHooks: Scanned in 00mn 00s ---\\ Déni du service (Local Security Authority) (O48) O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -- C:\Windows\System32\livessp.dll ~ LSA: 9 Scanned in 00mn 00s ---\\ Contrôle du Safe Boot (CSB) (O49) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.) O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys ~ CSB: 13 Scanned in 00mn 00s ---\\ Clé de registre Shell MountPoints2 (MPSK) (O51) O51 - MPSK:{9df25b9d-daec-11e4-8f8d-b870f4abf8c6}\AutoRun\command. (...) -- F:\LaunchU3.exe (.not file.) ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52) O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (...) -- C:\Windows\System32\xvidvfw.dll O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec" . (...) -- C:\Windows\System32\xvidvfw.dll ~ TDSD: 4 Scanned in 00mn 00s ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) O53 - SMSR:HKLM\...\startupreg\APSDaemon [Key] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe O53 - SMSR:HKLM\...\startupreg\AudioBox VSL [Key] . (...) -- C:\Program Files\PreSonus\AudioBox\AudioBox.exe O53 - SMSR:HKLM\...\startupreg\BlueStacks Agent [Key] . (...) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Lite [Key] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd O53 - SMSR:HKLM\...\startupreg\Facebook Update [Key] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Nathan\AppData\Local\Facebook\Update\FacebookUpdate.exe O53 - SMSR:HKLM\...\startupreg\Google Update [Key] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Nathan\AppData\Local\Google\Update\GoogleUpdate.exe =>.Google Inc O53 - SMSR:HKLM\...\startupreg\iTunesHelper [Key] . (...) -- C:\Program Files (x86)\iTunes\iTunesHelper.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Norton Online Backup [Key] . (.Symantec Corporation - Norton Online Backup Service.) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe =>.Symantec Corporation O53 - SMSR:HKLM\...\startupreg\QuickTime Task [Key] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe O53 - SMSR:HKLM\...\startupreg\Raptr [Key] . (.Raptr, Inc - Raptr Desktop App.) -- C:\Program Files (x86)\Raptr\raptrstub.exe O53 - SMSR:HKLM\...\startupreg\Sony PC Companion [Key] . (...) -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Spotify Web Helper [Key] . (...) -- C:\Users\Nathan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Wunderlist [Key] . (...) -- C:\Users\Nathan\AppData\Local\Apps\2.0\WYTCO86L.QPN\N6NWB5L0.3VE\wund..tion_45ec1bcecca77a53_0002.0000_764351e8af09666f\Wunderlist.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Xvid [Key] . (...) -- C:\Program Files (x86)\Xvid\CheckUpdate.exe ~ SMSR Keys: 14 Scanned in 00mn 00s ---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54) O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll ~ MSCP: 2 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55) O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5 O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3 O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1 O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0 O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1 O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1 O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0 O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0 O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0 O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1 O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0 ~ MWPS: 16 Scanned in 00mn 00s ---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56) O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1 O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0 ~ MWPE Keys: 3 Scanned in 00mn 00s ---\\ Liste des pilotes du système (SDL) (O58) O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys [491088] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\Drivers\adpahci.sys [339536] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\Drivers\adpu320.sys [182864] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\Drivers\aliide.sys [15440] O58 - SDL:21/11/2014 - 03:41:36 ---A- . (.Advanced Micro Devices - AMD ACP Binaries.) -- C:\Windows\System32\Drivers\amdacpksd.sys [294600] O58 - SDL:11/03/2011 - 07:41:12 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\Drivers\amdsata.sys [107904] O58 - SDL:14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [194128] O58 - SDL:11/03/2011 - 07:41:12 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\Drivers\amdxata.sys [27008] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\Drivers\arc.sys [87632] O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\Drivers\arcsas.sys [97856] O58 - SDL:21/11/2014 - 03:40:00 ---A- . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\Drivers\atikmdag.sys [18959360] O58 - SDL:21/11/2014 - 03:08:54 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\Drivers\atikmpag.sys [589312] O58 - SDL:10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60a.sys [270848] O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [18432] O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [8704] O58 - SDL:14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\Drivers\BrSerId.sys [286720] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [47104] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\Drivers\BrUsbMdm.sys [14976] O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\Drivers\BrUsbSer.sys [14720] O58 - SDL:10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\Drivers\bxvbda.sys [468480] O58 - SDL:20/10/2009 - 02:00:00 ----- . (.Sonic Solutions - CDR4 64-bit CD and DVD Place Holder Driver (see PxHelp).) -- C:\Windows\System32\Drivers\cdr4_xp.sys [10224] O58 - SDL:20/10/2009 - 02:00:00 ----- . (.Sonic Solutions - CDRAL 64-bit Place Holder Driver (see PxHelp).) -- C:\Windows\System32\Drivers\cdralw2k.sys [10224] O58 - SDL:14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\cmdide.sys [17488] O58 - SDL:10/05/2015 - 13:01:09 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\Drivers\dtsoftbus01.sys [283200] O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496] O58 - SDL:10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3286016] O58 - SDL:21/08/2012 - 12:01:20 ---A- . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240] O58 - SDL:18/11/2011 - 14:59:30 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver Filter.) -- C:\Windows\System32\Drivers\ggflt.sys [13352] O58 - SDL:18/11/2011 - 14:59:30 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash Driver.) -- C:\Windows\System32\Drivers\ggsemc.sys [27176] O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232] O58 - SDL:20/10/2010 - 01:34:26 ---A- . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\Drivers\HECIx64.sys [56344] O58 - SDL:21/11/2010 - 04:23:47 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [78720] O58 - SDL:13/01/2011 - 01:51:44 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStor.sys [439320] O58 - SDL:21/11/2013 - 08:31:28 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\Drivers\iaStorA.sys [632168] O58 - SDL:21/11/2013 - 08:31:28 ---A- . (.Intel Corporation - Intel Rapid Storage Technology Filter driver - x64.) -- C:\Windows\System32\Drivers\iaStorF.sys [28008] O58 - SDL:11/03/2011 - 07:41:26 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [410496] O58 - SDL:20/03/2014 - 08:40:46 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdkmd64.sys [5363520] O58 - SDL:15/04/2011 - 04:08:26 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\Drivers\igdpmd64.sys [12228128] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [44112] O58 - SDL:26/03/2014 - 10:05:30 ---A- . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\Drivers\IntcDAud.sys [342528] O58 - SDL:27/09/2010 - 08:24:44 ---A- . (.Atheros Communications, Inc. - Atheros L1c PCI-E Gigabit Ethernet Controller.) -- C:\Windows\System32\Drivers\L1C62x64.sys [76912] O58 - SDL:19/03/2014 - 01:24:34 ---A- . (.Logitech, Inc. - Logitech Equad USB Driver..) -- C:\Windows\System32\Drivers\LEqdUsb.sys [77592] O58 - SDL:19/03/2014 - 01:24:36 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\Windows\System32\Drivers\LHidEqd.sys [13080] O58 - SDL:19/03/2014 - 01:24:38 ---A- . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\Windows\System32\Drivers\LHidFilt.Sys [76568] O58 - SDL:19/03/2014 - 01:24:40 ---A- . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\Windows\System32\Drivers\LMouFilt.Sys [59160] O58 - SDL:04/04/2015 - 11:00:48 ---A- . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\Windows\System32\Drivers\LNonPnP.sys [18960] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_fc.sys [114752] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas.sys [106560] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_sas2.sys [65600] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\Drivers\lsi_scsi.sys [115776] O58 - SDL:18/01/2012 - 06:44:28 ---A- . (.Logitech Inc. - Logitech Kernel Audio Improvement Filter Driver.) -- C:\Windows\System32\Drivers\lvrs64.sys [351136] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7\Server 2008 R2 for.) -- C:\Windows\System32\Drivers\megasas.sys [35392] O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\Drivers\MegaSR.sys [284736] O58 - SDL:06/08/2013 - 15:13:30 ---A- . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\Drivers\netaapl64.sys [23040] O58 - SDL:14/07/2009 - 02:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\Drivers\nfrd960.sys [51264] O58 - SDL:17/08/2011 - 09:04:34 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -- C:\Windows\System32\Drivers\nmwcdnsux64.sys [171008] O58 - SDL:06/05/2009 - 00:46:08 ---A- . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\Drivers\NTIDrvr.sys [18432] O58 - SDL:11/03/2011 - 07:41:34 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\Drivers\nvraid.sys [148352] O58 - SDL:11/03/2011 - 07:41:34 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [166272] O58 - SDL:24/05/2012 - 12:51:10 ---A- . (.Pas de propriétaire - AudioBox DSP Plugin.) -- C:\Windows\System32\Drivers\paeusbaudiodsp_x64.sys [71544] O58 - SDL:24/05/2012 - 12:51:10 ---A- . (.Pas de propriétaire - TUSBAudio Kernel Streaming Driver.) -- C:\Windows\System32\Drivers\paeusbaudioks_x64.sys [53112] O58 - SDL:24/05/2012 - 12:51:10 ---A- . (.Pas de propriétaire - TUSBAudio Class Driver (plugin support).) -- C:\Windows\System32\Drivers\paeusbaudio_x64.sys [252280] O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1524816] O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\Drivers\ql40xx.sys [128592] O58 - SDL:14/05/2007 - 15:06:18 ---A- . (.Research In Motion Limited - BlackBerry Device Driver.) -- C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520] O58 - SDL:15/03/2011 - 11:30:06 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHD64.sys [2814952] O58 - SDL:09/03/2011 - 09:06:44 ---A- . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\Windows\System32\Drivers\rtl8192se.sys [1222248] O58 - SDL:20/07/2010 - 10:43:22 ---A- . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/Vista/Win7.) -- C:\Windows\System32\Drivers\RtsUStor.sys [247400] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 Driver.) -- C:\Windows\System32\Drivers\s1018bus.sys [113704] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\s1018cm.sys [14888] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\s1018cmnt.sys [14888] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Ericsson Mobile Platform S1018 USB WMC Extended Ethernet (WDM c.) -- C:\Windows\System32\Drivers\s1018cr.sys [13864] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Modem Filter Driver.) -- C:\Windows\System32\Drivers\s1018mdfl.sys [19496] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Modem WDM Driver.) -- C:\Windows\System32\Drivers\s1018mdm.sys [153128] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC Device Management Driver.) -- C:\Windows\System32\Drivers\s1018mgmt.sys [133160] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Ericsson Mobile Platform S1018 USB WMC Extended Ethernet (NDIS.) -- C:\Windows\System32\Drivers\s1018nd5.sys [34856] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB WMC OBEX Interface Device Driver.) -- C:\Windows\System32\Drivers\s1018obex.sys [128552] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Sony Ericsson Device 1018 USB Ethernet Emulation.) -- C:\Windows\System32\Drivers\s1018unic.sys [146472] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\s1018wh.sys [15912] O58 - SDL:25/03/2009 - 17:48:00 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\Drivers\s1018whnt.sys [15912] O58 - SDL:10/06/2009 - 21:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040] O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [43584] O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\Drivers\sisraid4.sys [80464] O58 - SDL:23/07/2014 - 22:21:16 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys [560184] O58 - SDL:11/05/2012 - 06:34:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [99384] O58 - SDL:28/10/2013 - 01:12:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys [204568] O58 - SDL:28/10/2013 - 01:12:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile OBEX Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudobex.sys [204568] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656] O58 - SDL:29/07/2010 - 14:30:48 ---A- . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\Drivers\SynTP.sys [1383472] O58 - SDL:24/06/2014 - 16:08:20 ---A- . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\Drivers\TeeDriverx64.sys [125952] O58 - SDL:06/05/2009 - 00:46:08 ---A- . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\System32\Drivers\UBHelper.sys [16896] O58 - SDL:15/08/2014 - 23:35:00 ---A- . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\Drivers\usbaapl64.sys [54784] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\Drivers\viaide.sys [17488] O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\Drivers\vsmraid.sys [161872] O58 - SDL:29/12/2012 - 21:59:38 ---A- . (.Almico Software - SpeedFan x64 Driver.) -- C:\Windows\SysWOW64\speedfan.sys [28664] ~ Drivers: 95 Scanned in 00mn 10s ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\PepperFlash\pepflashplayer.dll [15003976] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\libegl.dll [80712] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\libexif.dll [310088] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\libglesv2.dll [1281864] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\natives_blob.bin [410937] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\snapshot_blob.bin [449780] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\chrome.dll [31533896] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\chrome_child.dll [39033672] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\chrome_elf.dll [133960] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\chrome_watcher.dll [345928] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\delegate_execute.exe [692040] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\ffmpegsumo.dll [1663304] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\metro_driver.dll [478536] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\nacl64.exe [2112840] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\widevinecdmadapter.dll [189256] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\chrome.exe [813896] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Microsoft Corporation.) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\d3dcompiler_47.dll [3466856] O61 - LFC: 20/06/2015 - 22:12:16 ---A- . (.Microsoft Corporation.) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\xinput1_3.dll [81768] O61 - LFC: 20/06/2015 - 22:12:20 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.823\_platform_specific\win_x86\widevinecdmadapter.dll [189256] O61 - LFC: 20/06/2015 - 22:14:45 ---A- . (...) -- C:\Users\Nathan\AppData\Roaming\Spotify\libEGL.dll [79928] O61 - LFC: 20/06/2015 - 22:14:45 ---A- . (...) -- C:\Users\Nathan\AppData\Roaming\Spotify\libGLESv2.dll [1488440] O61 - LFC: 20/06/2015 - 22:14:45 ---A- . (...) -- C:\Users\Nathan\AppData\Roaming\Spotify\libcef.dll [41287224] O61 - LFC: 20/06/2015 - 22:14:45 ---A- . (.Microsoft Corporation.) -- C:\Users\Nathan\AppData\Roaming\Spotify\d3dcompiler_43.dll [2106424] O61 - LFC: 20/06/2015 - 22:14:45 ---A- . (.Microsoft Corporation.) -- C:\Users\Nathan\AppData\Roaming\Spotify\d3dcompiler_47.dll [3457592] O61 - LFC: 20/06/2015 - 22:14:45 ---A- . (.The Chromium Authors.) -- C:\Users\Nathan\AppData\Roaming\Spotify\ffmpegsumo.dll [968248] O61 - LFC: 20/06/2015 - 22:14:46 ---A- . (.Spotify Ltd.) -- C:\Users\Nathan\AppData\Roaming\Spotify\Spotify.exe [7415864] O61 - LFC: 20/06/2015 - 22:14:46 ---A- . (.Spotify Ltd.) -- C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyCrashService.exe [777272] O61 - LFC: 20/06/2015 - 22:14:46 ---A- . (.Spotify Ltd.) -- C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyLauncher.exe [124472] O61 - LFC: 20/06/2015 - 22:14:46 ---A- . (.Spotify Ltd.) -- C:\Users\Nathan\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2023480] O61 - LFC: 20/06/2015 - 22:14:47 ---A- . (...) -- C:\Users\Nathan\AppData\Roaming\Spotify\wow_helper.exe [73272] O61 - LFC: 22/06/2015 - 22:12:16 ---A- . (.Google Inc..) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\43.0.2357.130\Installer\setup.exe [990024] O61 - LFC: 22/06/2015 - 22:12:21 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\43.0.2357.130\43.0.2357.130_43.0.2357.124_chrome_updater.exe [1063504] O61 - LFC: 22/06/2015 - 22:12:21 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Update\Install\{3AF88B5C-71A7-496E-8C82-383F2FE7335E}\43.0.2357.130_43.0.2357.124_chrome_updater.exe [1063504] O61 - LFC: 23/06/2015 - 22:15:15 ---A- . (.Nicolas Coolman.) -- C:\Users\Nathan\Downloads\ZHPDiag2.exe [6883618] =>.Nicolas Coolman O61 - LFC: 24/06/2015 - 22:12:20 ---A- . (...) -- C:\Users\Nathan\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849] O61 - LFC: 24/06/2015 - 22:14:57 ---A- . (.OldTimer Tools.) -- C:\Users\Nathan\Downloads\TFC.exe [448512] ~ 4 Fichiers temporaires (Temporary files) ~ 928 Fichiers cookies (Cookies files) ~ Files: 36 Scanned in 03mn 02s ---\\ Liste des outils de désinfection (LATC) (O63) O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman ~ ADS: Scanned in 00mn 00s ---\\ Liste les services legacy du registre (LALS) (O64) O64 - Services: CurCS - 21/11/2014 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag) .(.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG O64 - Services: CurCS - 10/05/2012 - C:\Program Files\HWiNFO64\HWiNFO64A.sys (HWiNFO32) .(.REALiX(tm) - HWiNFO AMD64 Kernel Driver.) - LEGACY_HWINFO32 O64 - Services: CurCS - 13/01/2011 - C:\Windows\System32\drivers\iaStor.sys (iaStor) .(.Intel Corporation - Intel Rapid Storage Technology driver - x64.) - LEGACY_IASTOR O64 - Services: CurCS - 20/03/2014 - C:\Windows\System32\DRIVERS\igdkmd64.sys (igfx) .(.Intel Corporation - Intel Graphics Kernel Mode Driver.) - LEGACY_IGFX O64 - Services: CurCS - 10/06/2009 - C:\Windows\System32\Drivers\secdrv.sys (secdrv) .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV O64 - Services: CurCS - 23/07/2014 - C:\Windows\system32\Drivers\sptd.sys (sptd) .(.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) - LEGACY_SPTD ~ Legacy: 119 Scanned in 00mn 00s ---\\ Associations Shell Spawning (O67) O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\chrome.exe ~ FASS Keys: 11 Scanned in 00mn 00s ---\\ Menu de démarrage Internet (SMI) (O68) O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Nathan\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files (x86)\Safari\Safari.exe ~ Keys: Scanned in 00mn 00s ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com O69 - SBI: SearchScopes [HKCU] {80c554b9-c7f8-4a21-9471-06d606da78a2} - (Bing) - http://www.bing.com ~ Keys: Scanned in 00mn 00s ---\\ Enumère les service demarrés par Svchost (SSS) (O83) O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [680960] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2477536] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [209920] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] ~ Services: 32 Scanned in 00mn 00s ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) SS - | Demand 24/06/2015 268464 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe SS - | Disabled 19/01/2015 77128 | (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SS - | Disabled 30/08/2011 462184 | (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - | Demand 09/04/2014 279024 | (cphs) . (.Intel Corporation.) - C:\Windows\SysWow64\IntelCpHeciSvc.exe SS - | Demand 17/12/2014 347200 | (GamesAppIntegrationService) . (.WildTangent.) - C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe SS - | Demand 16/12/2014 265808 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe SS - | Auto 21/09/2013 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 21/09/2013 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - | Demand 13/05/2014 887256 | (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe SS - | Disabled 27/01/2015 643880 | (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SS - | Demand 24/03/2014 357144 | (LBTServ) . (.Logitech, Inc..) - C:\Program Files\Common Files\LogiShrd\Bluetooth\lbtserv.exe SS - | Demand 11/04/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe SS - | Disabled 04/05/2010 503080 | (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe SS - | Disabled 01/06/2010 2804568 | (NOBU) . (.Symantec Corporation.) - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe =>.Symantec Corporation SS - | Demand 19/04/2015 1931632 | (Origin Client Service) . (.Electronic Arts.) - C:\Program Files (x86)\Origin\OriginClientService.exe SS - | Auto 05/09/2013 171680 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe SS - | Demand 15/05/2015 837824 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe SR - | Auto 12/06/2015 82112 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - | Auto 21/11/2014 244736 | (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe SR - | Auto 14/03/2011 352336 | (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe SR - | Auto 10/05/2011 872552 | (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe SR - | Auto 26/05/2011 29696 | (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe SR - | Auto 21/11/2013 15720 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe SR - | Demand 24/04/2012 169752 | (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe SR - | Auto 22/04/2011 244624 | (Live Updater Service) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe SR - | Auto 24/06/2014 405976 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe SR - | Auto 15/10/2014 2820424 | (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe SR - | Auto 11/03/2014 23808 | (MsMpSvc) . (.Microsoft Corporation.) - c:\Program Files\Microsoft Security Client\MsMpEng.exe SR - | Auto 09/03/2011 257344 | (NTI IScheduleSvc) . (.NTI Corporation.) - C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe SR - | Auto 22/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe ~ Services: Scanned in 00mn 15s ---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80) Run by Nathan at 24/06/2015 22:19:11 ~ OS 64 not supported by MBR tool ~ MBR: 0 Scanned in 00mn 00s ---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80) Written by ad13, http://ad13.geekstog Run by Nathan at 24/06/2015 22:19:13 ********* Dump file Name ********* C:\PhysicalDisk0_MBR.bin ~ MBR: Scanned in 00mn 02s ---\\ Liste des émulateurs de CD/DVD (MBR Hook) O58 - SDL:23/07/2014 - 22:21:16 ---A- . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\Drivers\sptd.sys [560184] O42 - Logiciel: DAEMON Tools Lite - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.DT Soft Ltd ~ Emulateurs: Scanned in 00mn 02s ---\\ Scan Additionnel (O88) Database Version : 13008 - (16/06/2015) Clés trouvées (Keys found) : 0 Valeurs trouvées (Values found) : 0 Dossiers trouvés (Folders found) : 0 Fichiers trouvés (Files found) : 0 ~ Additionnel Scan: 528731 Items scanned in 00mn 31s ---\\ Informations complémentaires sur les modules ~ http://www.nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5) ~ http://www.nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de navigateur (O2) ~ http://www.nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au démarrage du système (O4) ~ http://www.nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.Clé de registre Shell MountPoints2 (MPSK) (O51) ~ AMI: 4 Scanned in 00mn 00s End of the scan (1735 lines in 09mn 45s)(0.11)