~ ZHPDiag v2015.7.12.88 Par Nicolas Coolman (2015/07/12)
~ Démarré par Karima (Administrator)  (2015/07/14 11:51:28)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version:  Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Karima\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Karima\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
~ Windows 8.1, 64-bit  (Build 9600)

---\\ Navigateurs Internet (2) - 0s
MFIE: Mozilla Firefox 39.0 (x86 fr) v39.0
MSIE: Internet Explorer v11.0.9600.16663

---\\ Informations sur les produits Windows (3) - 2s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Activation Technologies : KO

---\\ Logiciels d'optimisation (1) - 2s
CCleaner v4.03

---\\ Surveillance de Logiciels (2) - 2s
Adobe Flash Player 9 ActiveX
Adobe Reader XI

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel
~ Operating System:  64-bit 
~ Boot mode: Normal (Normal boot)
~ Total physical RAM (KB): 3857100
~ System Restore: Activé (Enable)
~ System drive C: has 72 GB free of 476 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PC-SUCCESS2I
~ User Name: Karima
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 72 GB free of 476 GB  (System)

---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.63DC38C3E4564B2405D562855643ABA2] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\WINDOWS\Explorer.exe [2328872]
[MD5.6E0BDFBEEED65B017F2E4C2C910B0520] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\WINDOWS\System32\rundll32.exe [52736]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\WINDOWS\System32\Wininit.exe [144384]
[MD5.DF79CE9B950C62677D232154E93A81C7] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\WINDOWS\System32\wininet.dll [2334208]
[MD5.7C94FDA3809015B8F2208D2E1C221F17] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\WINDOWS\System32\Winlogon.exe [564736]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\WINDOWS\System32\sppcomapi.dll [447488]
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19456]
[MD5.239268BAB58EAE9A3FF4E08334C00451] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\WINDOWS\System32\drivers\AFD.sys [567296]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\WINDOWS\System32\drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\WINDOWS\System32\drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\WINDOWS\System32\drivers\Cdrom.sys [164352]
[MD5.5DB26D7E0216D0BF364A81D3829AD7B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\WINDOWS\System32\drivers\DfsC.sys [134656]
[MD5.03909BDBFF0DCACCABF2B2D4ADEE44DC] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\WINDOWS\System32\drivers\HDAudBus.sys [78336]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\WINDOWS\System32\drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\WINDOWS\System32\drivers\IpNat.sys [142848]
[MD5.79B6F3DF7CDFD12159871FF71464F0CE] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\WINDOWS\System32\drivers\MRxSmb.sys [403456]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\WINDOWS\System32\drivers\netBT.sys [282624]
[MD5.725EF69B2DBEB7B33280019A556201BC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\WINDOWS\System32\drivers\ntfs.sys [2008408]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\WINDOWS\System32\drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\WINDOWS\System32\drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\WINDOWS\System32\drivers\tdx.sys [107520]
[MD5.C85C075DE5B6D0FE116043054DE8EE02] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\WINDOWS\System32\drivers\volsnap.sys [311640]

---\\ Processus lancés (2) - 2s
[MD5.51EAF4196C82D2118131838C428736F6] - (...) -- C:\Program Files (x86)\Amiable Meal\Amiable Meal.exe [8016182] [PID.1356]
[MD5.1F9D6BB3D93BD59285BED8BE26757C7C] - (. - Viber.) -- C:\Users\Karima\AppData\Local\Viber\Viber.exe [80035536] [PID.2892]

---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (19) - 1s
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] "http://istart.webssearches.com/?type=hp&ts=1405687412&from=amt&uid=ST9500325AS_S2WGHW6ZXXXXS2WGHW6Z"  =>PUP.Optional.IsStart
G0 - GCSP: Secure Preferences [User Data\Default][HomePage] "http://www.mystartsearch.com/?type=hp&ts=1430050112&from=wpc&uid=ST1000LM024XHN-M101MBB_S314J90FA68771A68771"  =>PUP.Optional.StartSearch
G2 - GCE: Extension [User Data\Default] [aiahmijlpehemcpleichkcokhegllfjl] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [dajedkncpodkggklbegccjpmnglmnflm] __MSG_extensionName__
G2 - GCE: Extension [User Data\Default] [hnfeekfpnjbdmelcapngdgkjnhgijjkh] Music Player for Google Drive
G2 - GCE: Extension [User Data\Default] [hnkkehjnlfplmdnallbjjdnokolhblgb] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [hpioniioecjjbhbnnbhcifmgmoiibalo] WAV Player for Gmail™
G2 - GCE: Extension [User Data\Default] [ifjdgcbahemgdkfjihbcoidnmnjjnhoo] WAV Player for GMail™
G2 - GCE: Extension [User Data\Default] [jopdpbolklklaiookikgmdinfbooiipj] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [kneloppijbcidgidihgdjnooihjcdbij] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [knipolnnllmklapflnccelgolnpehhpl] __MSG_CHROME_EXT_SHORT_NAME__
G2 - GCE: Extension [User Data\Default] [mihcahmgecmbnbcchbopgniflfhgnkff] __MSG_gmailcheck_name__
G2 - GCE: Extension [User Data\Default] [mjcnijlhddpbdemagnpefmlkjdagkogk] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [nckgahadagoaajjgafhacjanaoiihapd] __MSG_CHROME_EXT_SHORT_NAME__
G2 - GCE: Extension [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Extension [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest  =>.Google Inc.

---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3) (16) - 2s
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
P2 - FPN: [HKCU] [@citrixonline.com/appdetectorplugin] - (.Citrix Online.) -- C:\Users\Karima\AppData\Local\Citrix\Plugins\104\npappdetector.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_246.dll
P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=10.21.2] - (.Oracle Corporation.) -- C:\Windows\SysWOW64\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=10.21.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.0.6] - (.VideoLAN.) -- C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.5] - (.VideoLAN.) -- C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (16) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=38268&tid=77&st=bs&q=  =>PUP.Optional.CertifiedToolbar
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qvo6.com/  =>PUP.Optional.Qvo6
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean  =>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer, Proxy Management (R5) (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;192.168.*.*
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Hosts file redirection (O1) (2) - 0s
194.98
~ Le fichier hôte est sain (The hosts file is clean) (25)

---\\ Browser Helper Object de navigateur (BHO) (O2) (4) - 1s
O2 - BHO: FinuDBeestDeal [64Bits] - {8122A533-5CDA-4BDA-9164-8DCCBCC6A522} . (...) -- C:\Program Files (x86)\FinuDBeestDeal\FQ5MJBDjSXXuID.x64.dll  =>PUP.Optional.Multiplug
O2 - BHO: RobOeSaver [64Bits] - {9FD98115-4E21-403D-B8E6-D1359B5A96DA} . (...) -- C:\Program Files (x86)\RobOeSaver\tsbjo1A5Wmdy5P.x64.dll  =>PUP.Optional.Multiplug
O2 - BHO: RobboiSaver [64Bits] - {AEE6B3FA-5CC6-480B-ACB3-42965BEC4163} . (...) -- C:\Program Files (x86)\RobboiSaver\ipmWg4zQ5Or0MQ.x64.dll  =>PUP.Optional.Multiplug
O2 - BHO: FainddBeStDeal [64Bits] - {CB602FE8-DB6D-46D0-A753-7C086C7ECBB5} . (...) -- C:\Program Files (x86)\FainddBeStDeal\t9gsoUZZDLpt13.x64.dll  =>PUP.Optional.Multiplug

---\\ Internet Explorer Toolbars (O3) (1) - 0s
O3 - Toolbar: 0x1AB9EE05F7AE8A4F978FFB83E7B03F8E - [HKCU]{05EEB91A-AEF7-4F8A-978F-FB83E7B03F8E} . (...) --  (.not file.)

---\\ Applications lancées au démarrage du sytème (O4) (14) - 0s
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\WINDOWS\PixArt\PAC7302\Monitor.exe (.not file.)
O4 - HKLM\..\Run: [InstallerLauncher] C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe (.not file.)
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKCU\..\Run: [Viber] . (. - Viber.) -- C:\Users\Karima\AppData\Local\Viber\Viber.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O4 - HKLM\..\Wow6432Node\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
O4 - HKLM\..\Wow6432Node\Run: [Acrobat Assistant 8.0] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files (x86)\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
O4 - HKUS\S-1-5-21-2555469070-903122708-2179019198-1001\..\Run: [Viber] . (. - Viber.) -- C:\Users\Karima\AppData\Local\Viber\Viber.exe

---\\ Modification Domaine/Adresses DNS (O17) (8) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 4.2.2.2 4.4.2.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.171.249
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = router880ae6.com
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 8.8.8.8 4.2.2.2 4.4.2.2
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 172.20.10.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.171.249
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = router880ae6.com

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) (1) - 0s
O20 - AppInit_DLLs: . (.Auteurs - .) - C:\WINDOWS\System32\ 

---\\ Liste des services NT non Microsoft et non désactivés (O23) (5) - 0s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Amiable Meal (Amiable Meal) . (...) - C:\Program Files (x86)\Amiable Meal\Amiable Meal.exe
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (...) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.)
O23 - Service: TeamViewer 10 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 10.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

---\\ Tâches planifiées en automatique (O39) (32) - 1s
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job   [1002]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001Core.job   [936]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001UA.job   [958]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore1cfed485c37291f.job   [1098]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA1cfed485edcfe4b.job   [1102]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001Core.job   [1056]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001Core1cfee9efc75d27c.job   [1056]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001UA.job   [1108]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001UA1cfee9efdeb2c3e.job   [1108]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater   [3892]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\Apple Diagnostics   [3432]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC   [2776]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\Desk 365 RunAsStdUser   [3396]  =>PUP.Optional.22Find
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\EPUpdater   [3402]  =>PUP.Optional.BabSolution
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001Core   [3460]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001UA   [3810]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\GoforFilesUpdate   [3088]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\Google Updater and Installer   [3850]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore1cfed485c37291f   [3840]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA1cfed485edcfe4b   [4076]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001Core   [3678]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001Core1cfee9efc75d27c   [3678]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001UA   [4058]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2555469070-903122708-2179019198-1001UA1cfee9efdeb2c3e   [4058]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\LaunchApp   [4038]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\Omiga Plus RunAsStdUser   [3420]  =>PUP.Optional.OmigaPlus
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\RunAsStdUser   [3324]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\YourFile DownloaderUpdate   [3130]  =>PUP.Optional.YourFileDownloader
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\{21D7ED70-9386-4997-9B11-9F6BE7AD1EE6}   [3168]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\{44CE4B13-447B-4627-BEC5-429CA97D73B6}   [3112]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\{7831803C-A45A-4184-9998-A3898856BEA5}   [3168]
O39 - APT:Automatic Planified Task - (...) -- C:\WINDOWS\System32\Tasks\{C2C44EDA-4C66-469C-AAF3-17C8834B77D2}   [3172]

---\\ Logiciels installés (O42) (215) - 17s
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner
O42 - Logiciel: Service Pack 1 for SQL Server 2012 (KB2674319) (64-bit) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB2674319
O42 - Logiciel: Microsoft SQL Server 2008 R2 (64 bits) - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft SQL Server 10
O42 - Logiciel: Microsoft SQL Server 2008 R2 (64 bits) - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft SQL Server 2008 R2
O42 - Logiciel: Microsoft Windows SDK for Windows 7 (7.1) - (.Microsoft Corporation.) [HKLM][64Bits] -- SDKSetup_7.1.7600.0.30514
O42 - Logiciel: WinRAR 4.20 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {0DF7096B-715A-4233-8633-C7A16ED6D616}
O42 - Logiciel: Visual Studio 2012 Prerequisites - ENU Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {13417784-A359-3CDD-8DE1-B7108707D647}
O42 - Logiciel: SQL Server 2008 R2 Database Engine Shared - (.Microsoft Corporation.) [HKLM][64Bits] -- {15330009-F590-4069-A5A6-B11145E6B7CB}
O42 - Logiciel: SQL Server 2008 R2 Reporting Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {2453DBC8-ACC4-4711-BD03-0C15353AA3D8}
O42 - Logiciel: Java 7 Update 10 (64-bit) - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86417010FF}
O42 - Logiciel: Windows Software Development Kit for Windows Store Apps DirectX x64 Remote - (.Microsoft Corporation.) [HKLM][64Bits] -- {27EF252D-800C-ED42-9904-459FE0046225}
O42 - Logiciel: SQL Server 2008 R2 BI Development Studio - (.Microsoft Corporation.) [HKLM][64Bits] -- {312E8540-0799-45D5-A02E-DFB8FCA93CCA}
O42 - Logiciel: SQL Server 2008 R2 Reporting Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {31C80157-966E-43D9-9D8B-B0F9BAD6538E}
O42 - Logiciel: SQL Server 2008 R2 Common Files - (.Microsoft Corporation.) [HKLM][64Bits] -- {36F70DEE-1EBF-4707-AFA2-E035EEAEBAA1}
O42 - Logiciel: Windows App Certification Kit Native Components - (.Microsoft Corporation.) [HKLM][64Bits] -- {3FA063D7-EDC1-AFA8-54AF-0563C7DEE070}
O42 - Logiciel: Microsoft Web Platform Installer 4.5 - (.Microsoft Corporation.) [HKLM][64Bits] -- {458707CD-9D7A-477F-B925-02242A29673B}
O42 - Logiciel: Microsoft Sync Framework Runtime v1.0 (x64) fr - (.Microsoft Corporation.) [HKLM][64Bits] -- {5D0FE842-2D9B-487B-B3F6-9EE8D3E75060}
O42 - Logiciel: SQL Server 2008 R2 Client Tools - (.Microsoft Corporation.) [HKLM][64Bits] -- {5D9EDFE6-85AD-4C43-9131-4473FF2E79B0}
O42 - Logiciel: Windows Software Development Kit DirectX x64 Remote - (.Microsoft Corporation.) [HKLM][64Bits] -- {5FB4C443-6BD6-1514-2717-3827D65AE6FB}
O42 - Logiciel: Visual Studio 2012 Prerequisites - (.Microsoft Corporation.) [HKLM][64Bits] -- {61862D7C-CDBC-48D5-8AE1-3B8BD1E23BC5}
O42 - Logiciel: SQL Server 2008 R2 Integration Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {62E51021-89FC-47F2-8BBB-0FCB660FF0A2}
O42 - Logiciel: SQL Server 2008 R2 BI Development Studio - (.Microsoft Corporation.) [HKLM][64Bits] -- {6370EFB7-C732-4F6C-AF40-0E5D86A884FE}
O42 - Logiciel: Visual Studio 2010 Prerequisites - English - (.Microsoft Corporation.) [HKLM][64Bits] -- {662014D2-0450-37ED-ABAE-157C88127BEB}
O42 - Logiciel: SQL Server 2008 R2 Analysis Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {6E2EE862-FEF9-408A-90BB-F5B4EC129C8E}
O42 - Logiciel: SQL Server 2008 R2 Management Studio - (.Microsoft Corporation.) [HKLM][64Bits] -- {72AB7E6F-BC24-481E-8C45-1AB5B3DD795D}
O42 - Logiciel: Application Verifier x64 External Package - (.Microsoft.) [HKLM][64Bits] -- {7346C35D-942D-3CCE-94CB-7008BA8D63CB}
O42 - Logiciel: IIS 8.0 Express - (.Microsoft Corporation.) [HKLM][64Bits] -- {7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7}
O42 - Logiciel: Visual Studio 2012 Prerequisites - FRA Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {859877AC-0C89-30A7-B7FE-1709CA48855A}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: SQL Server 2012 SSIS 64Bit For SSDTBI VS2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8F882A28-F74E-4AFC-A737-37BC1ADE768B}
O42 - Logiciel: SQL Server 2008 R2 Full text search - (.Microsoft Corporation.) [HKLM][64Bits] -- {9DFA5914-C275-42E0-810E-C88E46A7F9EA}
O42 - Logiciel: SQL Server 2008 R2 Database Engine Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {A05A03B9-CCDC-4F13-B819-2C9B16A527D0}
O42 - Logiciel: SQL Server 2008 R2 Database Engine Shared - (.Microsoft Corporation.) [HKLM][64Bits] -- {A2122A9C-A699-4365-ADF8-68FEAC125D61}
O42 - Logiciel: SQL Server 2008 R2 Integration Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {A4E14A4D-EA7B-4914-9BBF-504401F3D4F7}
O42 - Logiciel: Microsoft Web Deploy 3.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {AA72C306-30BE-4BB1-9E42-59552BAD2CDF}
O42 - Logiciel: SQL Server 2008 R2 Analysis Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {AA8E4B40-EE7F-45AF-8F3E-C0C1DE749894}
O42 - Logiciel: SQL Server 2008 R2 Management Studio - (.Microsoft Corporation.) [HKLM][64Bits] -- {B2A5C91E-5194-47B4-98A4-33B0F23AA4D9}
O42 - Logiciel: SQL Server 2008 R2 Client Tools - (.Microsoft Corporation.) [HKLM][64Bits] -- {B5FE23CC-0151-4595-84C3-F1DE6F44FE9B}
O42 - Logiciel: SQL Server 2008 R2 Common Files - (.Microsoft Corporation.) [HKLM][64Bits] -- {C066EDB1-1056-40D5-A893-E808DFAC367D}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {C4123106-B685-48E6-B9BD-E4F911841EB4}
O42 - Logiciel: Microsoft Sync Services for ADO.NET v2.0 (x64) fr - (.Microsoft Corporation.) [HKLM][64Bits] -- {CB761A24-9535-4841-A966-A569377E7EE6}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {D227565A-0033-40AD-89BA-653A205CDC11}
O42 - Logiciel: Microsoft System CLR Types pour SQL Server 2012 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {D83F1047-B5E4-49DE-B8CF-3AC6121B27C2}
O42 - Logiciel: Sql Server Customer Experience Improvement Program - (.Microsoft Corporation.) [HKLM][64Bits] -- {F31183CF-E10F-4DE1-BB59-6C0FF38E481E}
O42 - Logiciel: SQL Server 2008 R2 Database Engine Services - (.Microsoft Corporation.) [HKLM][64Bits] -- {FBD367D1-642F-47CF-B79B-9BE48FB34007}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe Flash Player 15 Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player Plugin
O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM][64Bits] -- Adobe Shockwave Player
O42 - Logiciel: Ajouter ou supprimer Adobe Creative Suite 3 Master Collection - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe_b5d5789539ea1f004a4defceea74312
O42 - Logiciel: Advanced Port Scanner v1.3 - (...) [HKLM][64Bits] -- Advanced Port Scanner v1.3
O42 - Logiciel: Battle.net - (.Blizzard Entertainment.) [HKLM][64Bits] -- Battle.net
O42 - Logiciel: Microsoft Expression Blend 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- Blend_4.0.20621.0
O42 - Logiciel: Microsoft Expression Design 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- Design_7.0.20516.0
O42 - Logiciel: Carambis Driver Updater - (.MEDIA FOG LTD.) [HKLM][64Bits] -- Driver Updater
O42 - Logiciel: Microsoft Expression Encoder 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- Encoder_4.0.1651.0
O42 - Logiciel: Microsoft Expression Studio 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- ExpressionStudio_4.0.20705.0
O42 - Logiciel: FastStone Capture 6.6 - (.FastStone Soft.) [HKLM][64Bits] -- FastStone Capture
O42 - Logiciel: FileZilla Client 3.7.3 - (.Tim Kosse.) [HKLM][64Bits] -- FileZilla Client
O42 - Logiciel: Hearthstone - (.Blizzard Entertainment.) [HKLM][64Bits] -- Hearthstone
O42 - Logiciel: Service Pack 2 pour SQL Server 2008 R2 (KB2630458) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB2630458
O42 - Logiciel: Service Pack 1 pour SQL Server 2012 (KB2674319) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB2674319
O42 - Logiciel: GDR 3128 pour SQL Server 2012 (KB2793634) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB2793634
O42 - Logiciel: Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA
O42 - Logiciel: Mozilla Firefox 39.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 39.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++
O42 - Logiciel: Microsoft Visio Professionnel 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- Office14.VISIOR
O42 - Logiciel: Microsoft Project Professionnel 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- Office15.PRJPROR
O42 - Logiciel: SWF & FLV Player 3.0 (build 3.0.33.5106) - (.Eltima Software.) [HKLM][64Bits] -- SWF & FLV Player_is1
O42 - Logiciel: TeamViewer 10 - (.TeamViewer.) [HKLM][64Bits] -- TeamViewer
O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM][64Bits] -- VirtualCloneDrive
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player
O42 - Logiciel: Microsoft Expression Web 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- Web_4.0.1303.0
O42 - Logiciel: WinRAR 4.20 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Microsoft NuGet - Visual Studio 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {00EC8ABC-3C5A-40F8-A8CB-E7DCD5ABFA05}
O42 - Logiciel: Windows App Certification Kit x64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {02213A81-CB13-7262-5ABE-1FFA2C75559F}
O42 - Logiciel: Adobe XMP DVA Panels CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0224CACC-994D-45F8-B973-D65056EA9C2F}
O42 - Logiciel: Adobe Soundbooth CS3 Codecs - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0327FA9D-975C-448C-A086-577D57BB25B8}
O42 - Logiciel: Adobe Bridge Start Meeting - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {08B32819-6EEF-4057-AEDA-5AB681A36A23}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0A3925EA-5B0E-401B-A189-7419149747B2}
O42 - Logiciel: WCF Data Services 5.0 (for OData v3) Primary Components - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BCC836F-0B28-4090-B58A-64883BAA3B2F}
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {111EE7DF-FC45-40C7-98A7-753AC46B12FB}
O42 - Logiciel: PragmaInstance - (.Software Publisher.) [HKLM][64Bits] -- {12DA0E6F-5543-440C-BAA2-28BF01070AFA}{7eb89871}  =>PUP.Optional.Graftor
O42 - Logiciel: Adobe Setup - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {1628F6BD-5ED1-4FD1-B90F-C106AF4E00F0}
O42 - Logiciel: Tools for .Net 3.5 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1690CE56-2231-4E59-9006-A0876D949EA8}
O42 - Logiciel: Adobe WinSoft Linguistics Plugin - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {184CE391-7E0E-4C63-9935-D7A10EDFD3C6}
O42 - Logiciel: LocalESPCui for fr-fr - (.Microsoft.) [HKLM][64Bits] -- {19237788-1FD2-E24E-8B1F-AED171DC45D1}
O42 - Logiciel: Adobe After Effects CS3 Presets - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {193EAFD0-1BAF-4FB4-B18F-79D5D6A4B285}
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {196467F1-C11F-4F76-858B-5812ADC83B94}
O42 - Logiciel: Adobe Flash Video Encoder - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {1B0BCA28-1F11-4D60-8A2F-DEBE04B5341E}
O42 - Logiciel: Microsoft Portable Library Multi-Targeting Pack Language Pack - fra - (.Microsoft Corporation.) [HKLM][64Bits] -- {1B65CF1B-3637-3A82-958C-EE0E4C2838BF}
O42 - Logiciel: Adobe Version Cue CS3 Server - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {1D58229F-C505-45CA-8223-F35F3A34B963}
O42 - Logiciel: Microsoft Report Viewer Add-On for Visual Studio 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {1DB43E5A-2F24-4F51-92B0-A2C0EBF5C742}
O42 - Logiciel: Microsoft Silverlight 3 SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {2012098D-EEE9-4769-8DD3-B038050854D4}
O42 - Logiciel: Adobe Fireworks CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {21C4D775-368A-46C4-8DC3-4207165B7115}
O42 - Logiciel: Windows Software Development Kit DirectX x86 Remote - (.Microsoft Corporation.) [HKLM][64Bits] -- {23176E97-26CB-C72A-19EB-BFB21AC1D15A}
O42 - Logiciel: Java 7 Update 21 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217021FF}
O42 - Logiciel: Adobe Stock Photos CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {29E5EA97-5F74-4A57-B8B2-D4F169117183}
O42 - Logiciel: PreEmptive Analytics Visual Studio Components - (.PreEmptive Solutions.) [HKLM][64Bits] -- {2C76E3DA-BA76-4FAD-B1B1-72B46D639028}
O42 - Logiciel: Java SE Development Kit 7 Update 10 - (.Oracle.) [HKLM][64Bits] -- {32A3A4F4-B792-11D6-A78A-00B0D0170100}
O42 - Logiciel: Windows Software Development Kit - (.Microsoft Corporation.) [HKLM][64Bits] -- {363a2c1e-637f-45ce-933b-5a5463efd945}
O42 - Logiciel: Dotfuscator and Analytics Community Edition - (.PreEmptive Solutions.) [HKLM][64Bits] -- {372D17F6-A54E-4A01-B264-1314890FFE61}
O42 - Logiciel: WCF RIA Services V1.0 SP2 - (.Microsoft Corporation.) [HKLM][64Bits] -- {3A523AF9-D32F-4C85-8388-0335731F3405}
O42 - Logiciel: Windows Software Development Kit for Windows Store Apps DirectX x86 Remote - (.Microsoft Corporation.) [HKLM][64Bits] -- {42F61556-29ED-8122-F39E-6F04EA5FF279}
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {447CDCE5-F555-429B-BFA6-642C3C6D684F}
O42 - Logiciel: Adobe Premiere Pro CS3 Third Party Content - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {485ACF57-F364-440A-8496-E1E81C8FA1AA}
O42 - Logiciel: Module linguistique de Dotfuscator and Analytics Community Edition - (.PreEmptive Solutions.) [HKLM][64Bits] -- {4B9F673F-EBCA-4E5B-ADD7-FB1138862C44}
O42 - Logiciel: Adobe Dreamweaver CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {4BDB76C6-902E-41D5-9064-68768E02886B}
O42 - Logiciel: Adobe Premiere Pro CS3 Functional Content - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {50F102CA-4BE2-41A9-9810-5BB05EB91B9A}
O42 - Logiciel: Microsoft Expression Encoder 4 Screen Capture Codec - (.Microsoft Corporation.) [HKLM][64Bits] -- {510D6833-AD19-4376-ADD2-167AE5AD2732}
O42 - Logiciel: Windows Software Development Kit Redistributables - (.Microsoft Corporation.) [HKLM][64Bits] -- {512957F0-B211-C50A-C1FC-6867FC3348A1}
O42 - Logiciel: Adobe Linguistics CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {54793AA1-5001-42F4-ABB6-C364617C6078}
O42 - Logiciel: Adobe Encore CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {54B2EAD9-A110-43F7-B010-2859A1BD2AFE}
O42 - Logiciel: Blend for Visual Studio 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {57F20F04-014D-453F-B6A3-AE9485C4DFAB}
O42 - Logiciel: Adobe Premiere Pro CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {58DCEEE5-532E-44F4-B1D7-A146EF9E9FDA}
O42 - Logiciel: Adobe Creative Suite 3 Master Collection - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {5D2398DF-3022-4820-93BA-F1175FBEA9CA}
O42 - Logiciel: SQL Server 2012 Data Tools - BI for Visual Studio 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5F1C0FD3-A92C-4A91-B817-2EE086186A89}
O42 - Logiciel: Windows Software Development Kit - (.Microsoft Corporation.) [HKLM][64Bits] -- {60D5EF2A-4E0C-2C30-38F6-59C26E134F4A}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM][64Bits] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}
O42 - Logiciel: Adobe Fonts All - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6ABE0BEE-D572-4FE8-B434-9E72A289431B}
O42 - Logiciel: Adobe MotionPicture Color Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6B708481-748A-4EB4-97C1-CD386244FF77}
O42 - Logiciel: AHV content for Acrobat and Flash - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6BBAA81D-6A7E-43AD-8889-2F002DCAAFDD}
O42 - Logiciel: Adobe Illustrator CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6E08CE13-C2AB-4749-9335-5900B958929E}
O42 - Logiciel: Adobe Asset Services CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}
O42 - Logiciel: Microsoft Expression Encoder 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {707C8430-DE9D-4385-BA80-91415748009B}
O42 - Logiciel: WCF Data Services Tools for Visual Studio 11 FRA Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {73105938-42A2-457F-9E9D-DB9514BE89E2}
O42 - Logiciel: Adobe Color EU Recommended Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {73B5D990-04EA-4751-B10F-5534770B91F2}
O42 - Logiciel: Microsoft LightSwitch for Visual Studio 2012 Core - (.Microsoft Corporation.) [HKLM][64Bits] -- {7437A4B9-314F-3B8F-827B-22909146E471}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
O42 - Logiciel: Types CLR du système Microsoft pour SQL Server 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7927D9E5-963C-4AE1-8419-544D0D454435}
O42 - Logiciel: Entity Framework Designer pour Visual Studio 2012 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {7A1D7D34-8463-4261-8B97-425385649EF3}
O42 - Logiciel: Skype™ 6.16 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}
O42 - Logiciel: Adobe Help Viewer CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {7ACFB90E-8FD0-4397-AD3A-5195412623A3}
O42 - Logiciel: Microsoft Expression Blend SDK for .NET 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {7B6B35D5-404D-498E-95D0-3CCB2B2FC6F9}
O42 - Logiciel: SQL Server 2012 Common Files - (.Microsoft Corporation.) [HKLM][64Bits] -- {7D29ED63-84F9-4EC7-B49F-994A3A3195B2}
O42 - Logiciel: Microsoft Silverlight 5 SDK - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {80125E8C-304D-4637-974A-2547049B0E24}
O42 - Logiciel: Adobe Flash CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {80FD3971-8482-49C8-BA8C-B6464A15882F}
O42 - Logiciel: Adobe Video Profiles - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {845A8DB9-8802-4FD3-9FE3-938A6C46A2EC}
O42 - Logiciel: Visual Studio Extensions for Windows Library for JavaScript - (.Microsoft Corporation.) [HKLM][64Bits] -- {89B4532E-19CE-4FA9-9692-10BFD5A38532}
O42 - Logiciel: Adobe Device Central CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8D2BA474-F406-4710-9AE4-D4F22D21F0DD}
O42 - Logiciel: Module linguistique de la visionneuse d'aide Microsoft 2.0 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {8E2132F6-071A-3768-8691-B7D12FD7531D}
O42 - Logiciel: Adobe Type Support - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {8E6808E2-613D-4FCD-81A2-6C8FA8E03312}
O42 - Logiciel: Microsoft Project MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00B4-040C-0000-0000000FF1CE}
O42 - Logiciel: Adobe Anchor Service CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {90176341-0A8B-4CCC-A78D-F862228A6B95}
O42 - Logiciel: Microsoft Project Professional 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {91150000-003B-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Expression Blend 3 SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {9264F4F8-0EE9-4531-BFB3-0332406C2D76}
O42 - Logiciel: Microsoft Expression Web 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {92A08133-4E7E-4B09-8A08-E18726345D28}
O42 - Logiciel: WPTx64 - (.Microsoft.) [HKLM][64Bits] -- {986EABFC-92F6-CECD-9E5A-B13CAC40BB1D}
O42 - Logiciel: Adobe Bridge CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {9C9824D9-9000-4373-A6A5-D0E5D4831394}
O42 - Logiciel: Microsoft LightSwitch pour Visual Studio 2012 CoreRes - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {A0D887F7-79CA-39C7-9B12-346AF8CC4A89}
O42 - Logiciel: Adobe CMaps - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2B242BD-FF8D-4840-9DAA-9170EABEC59C}
O42 - Logiciel: Adobe Color - Photoshop Specific - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A2D81E70-2A98-4A08-A628-94388B063C5E}
O42 - Logiciel: WPT Redistributables - (.Microsoft.) [HKLM][64Bits] -- {A5D42D71-4036-5F88-5085-657C9DF9F1DD}
O42 - Logiciel: Adobe Soundbooth CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {A6B23EFA-6590-482C-A11F-5ACE1B91F5B9}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: PreEmptive Analytics Client French Language Pack - (.PreEmptive Solutions.) [HKLM][64Bits] -- {A9514D8B-004D-4685-A1CF-ACFD30EBD238}
O42 - Logiciel: SQL Server 2012 SQL Data Quality Common - (.Microsoft Corporation.) [HKLM][64Bits] -- {A9CA25A2-4171-4289-B9D3-78A012A3A340}
O42 - Logiciel: PDF Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}
O42 - Logiciel: Adobe Reader XI (11.0.11) - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1033-7B44-AB0000000001}
O42 - Logiciel: Composants requis pour SSDT  - (.Microsoft Corporation.) [HKLM][64Bits] -- {ACFCFF42-CA92-499C-8549-CC7A05CBEC34}
O42 - Logiciel: Adobe Camera Raw 4.0 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}
O42 - Logiciel: Microsoft Report Viewer 2012 Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {B4A23593-B575-421D-96B4-4B71231DBB8E}
O42 - Logiciel: League of Legends Events - (."".) [HKLM][64Bits] -- {B5DB572D-EA87-D3B0-08F6-4D153EA6A783}
O42 - Logiciel: Adobe SING CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B671CBFD-4109-4D35-9252-3062D3CCB7B2}
O42 - Logiciel: Adobe BridgeTalk Plugin CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B73CFB12-C814-4638-AFFD-7E3AAFAF0B4E}
O42 - Logiciel: Adobe Encore CS3 Codecs - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B8B7A4D8-80E1-4DAE-BD33-7FD535BA3931}
O42 - Logiciel: Microsoft Web Developer Tools - Visual Studio 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {B96FCD4F-6EDD-4258-8A6D-0FCEA8445E3E}
O42 - Logiciel: Adobe Default Language CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {B9B35331-B7E4-4E5C-BF4C-7BC87856124D}
O42 - Logiciel: Module Microsoft Report Viewer pour Visual Studio 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BAD4734F-5B17-49A5-AE47-DB474B0D224F}
O42 - Logiciel: Adobe Flash Player 9 ActiveX - (.Adobe Systems, Inc..) [HKLM][64Bits] -- {BC4F8E84-5E29-49EC-B4E7-E6F9CB50986C}
O42 - Logiciel: LocalESPC - (.Microsoft Corporation.) [HKLM][64Bits] -- {BDBE5D2A-AAB7-77BD-7A0E-5006665CE7C6}
O42 - Logiciel: Microsoft Web Developer Tools - Visual Studio 2012 - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {BDDC6A0A-2DBF-482A-97E4-90B82708DED5}
O42 - Logiciel: RobOeSaver - (."".) [HKLM][64Bits] -- {BE360B8B-0F10-CA89-FC84-A5EAB71A6AF8}  =>PUP.Optional.Multiplug
O42 - Logiciel: Adobe Extension Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {BE5F3842-8309-4754-92D5-83E02E6077A3}
O42 - Logiciel: Windows Runtime Intellisense Content - fr-fr - (.Microsoft Corporation.) [HKLM][64Bits] -- {BECE69E4-6664-3C4F-DDBF-A4E226B8957C}
O42 - Logiciel: WCF Data Services 5.0 (for OData v3) FRA Language Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {BF9DC8DC-0891-405A-9AFC-21F1D10FBDB0}
O42 - Logiciel: Blend for Visual Studio 2012 FRA resources - (.Microsoft Corporation.) [HKLM][64Bits] -- {C0AD26D9-8705-42E7-BD41-BE7E95A7DC31}
O42 - Logiciel: Microsoft Expression Blend 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C1F0912F-1AD1-45FD-9F00-B1191AC43464}
O42 - Logiciel: Adobe Photoshop CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C1FA4B3B-1625-4922-9C9D-780E8FCE161A}
O42 - Logiciel: Adobe ExtendScript Toolkit 2 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C2D69781-F392-4118-A5A7-C7E9C38DBFC2}
O42 - Logiciel: Tools for .Net 3.5 - FRA Lang Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {C37962EE-EE24-4E9F-8A41-514ACD79177C}
O42 - Logiciel: Microsoft Portable Library Multi-Targeting Pack - (.Microsoft Corporation.) [HKLM][64Bits] -- {C4CAD994-6EA2-3121-8352-DA593150B322}
O42 - Logiciel: Adobe WAS CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {C5BD220A-EFE8-48A5-B70E-9503D535FACE}
O42 - Logiciel: Microsoft Web Deploy dbSqlPackage Provider - FRA - (.Microsoft Corporation.) [HKLM][64Bits] -- {C76D761C-FF45-442C-A3BA-601C4E1167FD}
O42 - Logiciel: Safari - (.Apple Inc..) [HKLM][64Bits] -- {C779648B-410E-4BBA-B75B-5815BCEFE71D}
O42 - Logiciel: Microsoft Silverlight 4 SDK - Français - (.Microsoft Corporation.) [HKLM][64Bits] -- {C7954680-C2B0-4DA7-B0D6-3E2F69D663D7}
O42 - Logiciel: SQL Server 2012 Data Tools - BI for Visual Studio 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C79A857B-495E-49B0-887D-AFEA43D356D1}
O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM][64Bits] -- {CBC9F5FD-5CFA-4A33-81CD-369EAB77E3A6}
O42 - Logiciel: Microsoft Expression Studio 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF9B732A-61D5-411B-AEF5-6D493F11FDDF}
O42 - Logiciel: Adobe Version Cue CS3 Client - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D0DFF92A-492E-4C40-B862-A74A173C25C5}
O42 - Logiciel: Windows Software Development Kit for Windows Store Apps - (.Microsoft Corporation.) [HKLM][64Bits] -- {D11F66FF-82B3-DDB8-1146-525370552BE1}
O42 - Logiciel: Adobe PDF Library Files - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D2559B88-CC9D-4B48-81BB-F492BAA9C48C}
O42 - Logiciel: Windows Software Development Kit EULA - (.Microsoft Corporations.) [HKLM][64Bits] -- {D4F102C5-EEA1-CAE1-8E67-1A7FCE27F673}
O42 - Logiciel: Adobe XMP Panels CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D5A31AB1-345D-47C7-A87B-036A669F6DF1}
O42 - Logiciel: Microsoft Expression Blend SDK for Silverlight 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {D6A19188-24AD-4FC8-BB78-9A2FB9D8B041}
O42 - Logiciel: Adobe Color Common Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}
O42 - Logiciel: SQL Server 2012 Common Files - (.Microsoft Corporation.) [HKLM][64Bits] -- {DD19198C-2AA0-4755-B61E-2C4ACEB49226}
O42 - Logiciel: Adobe Color JA Extra Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}
O42 - Logiciel: Microsoft Expression Design 4 - (.Microsoft Corporation.) [HKLM][64Bits] -- {E12D7154-BBCC-4784-B02C-015F16EC49A0}
O42 - Logiciel: Kits Configuration Installer - (.Microsoft.) [HKLM][64Bits] -- {E14DDED2-919B-FCCB-84AC-5ABB6D182D46}
O42 - Logiciel: SDK Debuggers - (.Microsoft Corporation.) [HKLM][64Bits] -- {E63A3353-003C-E4C2-230B-F155212D1479}
O42 - Logiciel: Adobe Update Manager CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {E69AE897-9E0B-485C-8552-7841F48D42D8}
O42 - Logiciel: Adobe InDesign CS3 Icon Handler - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {EA7B3CC4-366D-4CF6-8350-FD7A7034116E}
O42 - Logiciel: Adobe After Effects CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {EB0202F7-016A-410C-ADE4-40F848CCC661}
O42 - Logiciel: Microsoft Expression Web 4 Service Pack 2 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F5993FCC-DF5D-4879-B70D-AA1F379C5C6B}
O42 - Logiciel: Adobe Contribute CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {F84ADE4E-9220-4324-994D-801EDD9DD251}
O42 - Logiciel: Adobe InDesign CS3 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FE8327F9-3AC1-4586-8C7E-3DEE2BC92441}
O42 - Logiciel: Adobe Color NA Extra Settings - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}
O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox
O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKCU][64Bits] -- TeamSpeak 3 Client
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent
O42 - Logiciel: Viber - (.Viber Media Inc.) [HKCU][64Bits] -- Viber

---\\ HKCU & HKLM Software Keys (231) - 17s
HKLM\SOFTWARE\Wow6432Node\5122abdd-ef4f-6f1f-57d8-f7b9d1747156  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\83942101-a292-374e-c35e-7f4dbce37659  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\ACD Systems
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\anset
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc.
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\Babylon  =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Big Fish Games
HKLM\SOFTWARE\Wow6432Node\Blizzard Entertainment
HKLM\SOFTWARE\Wow6432Node\Bunndle
HKLM\SOFTWARE\Wow6432Node\Canon
HKLM\SOFTWARE\Wow6432Node\Chromium
HKLM\SOFTWARE\Wow6432Node\Citrix
HKLM\SOFTWARE\Wow6432Node\Client
HKLM\SOFTWARE\Wow6432Node\Common Desktop Agent
HKLM\SOFTWARE\Wow6432Node\Comodo
HKLM\SOFTWARE\Wow6432Node\ComodoGroup
HKLM\SOFTWARE\Wow6432Node\Conduit  =>PUP.Optional.Conduit
HKLM\SOFTWARE\Wow6432Node\Core Services
HKLM\SOFTWARE\Wow6432Node\CounterPath Corporation
HKLM\SOFTWARE\Wow6432Node\Cygwin
HKLM\SOFTWARE\Wow6432Node\DataMngr  =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Delta  =>Toolbar.DeltaSearch
HKLM\SOFTWARE\Wow6432Node\deskSvc  =>PUP.Optional.22Find
HKLM\SOFTWARE\Wow6432Node\Elaborate Bytes
HKLM\SOFTWARE\Wow6432Node\FileZilla 3
HKLM\SOFTWARE\Wow6432Node\FileZilla Client
HKLM\SOFTWARE\Wow6432Node\GoforFiles
HKLM\SOFTWARE\Wow6432Node\Goobzo  =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\hdcode
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Laszlo Systems, Inc.
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\Macrovision
HKLM\SOFTWARE\Wow6432Node\Martin Prikryl
HKLM\SOFTWARE\Wow6432Node\MAXSOFT-OCRON
HKLM\SOFTWARE\Wow6432Node\McAfee.com
HKLM\SOFTWARE\Wow6432Node\Minnetonka Audio Software
HKLM\SOFTWARE\Wow6432Node\Mirage Computer Systems
HKLM\SOFTWARE\Wow6432Node\Motorola
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\NCH Software
HKLM\SOFTWARE\Wow6432Node\NCH Swift Sound
HKLM\SOFTWARE\Wow6432Node\NLTechno
HKLM\SOFTWARE\Wow6432Node\Notepad++
HKLM\SOFTWARE\Wow6432Node\NuGet
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OKitSpace  =>PUP.Optional.Onekit
HKLM\SOFTWARE\Wow6432Node\omigaplusSvc  =>PUP.Optional.OmigaPlus
HKLM\SOFTWARE\Wow6432Node\Overwolf
HKLM\SOFTWARE\Wow6432Node\PCDataApp
HKLM\SOFTWARE\Wow6432Node\PixArt
HKLM\SOFTWARE\Wow6432Node\PreEmptive Solutions
HKLM\SOFTWARE\Wow6432Node\QtypeSvc
HKLM\SOFTWARE\Wow6432Node\qvo6Software  =>PUP.Optional.Qvo6
HKLM\SOFTWARE\Wow6432Node\RSSBus
HKLM\SOFTWARE\Wow6432Node\Salesforce.com
HKLM\SOFTWARE\Wow6432Node\Samsung
HKLM\SOFTWARE\Wow6432Node\SimplyGen  =>PUP.Optional.PredictAd
HKLM\SOFTWARE\Wow6432Node\SK.Enhancer
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Soda PDF 5
HKLM\SOFTWARE\Wow6432Node\SoftwareUpdater
HKLM\SOFTWARE\Wow6432Node\SSDIAG
HKLM\SOFTWARE\Wow6432Node\SSPrint
HKLM\SOFTWARE\Wow6432Node\SSScan
HKLM\SOFTWARE\Wow6432Node\SuppHelpDir
HKLM\SOFTWARE\Wow6432Node\Symantec
HKLM\SOFTWARE\Wow6432Node\Systweak  =>PUP.Optional.Systweak
HKLM\SOFTWARE\Wow6432Node\Talend Open Studio
HKLM\SOFTWARE\Wow6432Node\Taronja
HKLM\SOFTWARE\Wow6432Node\TeamViewer
HKLM\SOFTWARE\Wow6432Node\Torch  =>PUP.Optional.Torch
HKLM\SOFTWARE\Wow6432Node\TuneUp
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Vittalia  =>PUP.Optional.Vittalia
HKLM\SOFTWARE\Wow6432Node\VMware, Inc.
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\VSO
HKLM\SOFTWARE\Wow6432Node\WebConnect  =>PUP.Optional.Sambreel
HKLM\SOFTWARE\Wow6432Node\webssearchesSoftware  =>PUP.Optional.WebsSearches
HKLM\SOFTWARE\Wow6432Node\WinRAR
HKLM\SOFTWARE\Wow6432Node\Wondershare
HKLM\SOFTWARE\Wow6432Node\YourFileDownloader  =>PUP.Optional.YourFileDownloader
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\1ClickDownload  =>PUP.Optional.1ClickDownloader
HKCU\SOFTWARE\5868bdb
HKCU\SOFTWARE\5868bdbe669e849
HKCU\SOFTWARE\8322898
HKCU\SOFTWARE\ABTOLLC
HKCU\SOFTWARE\ACD Systems
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\Aiseesoft Studio
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ArcSoft
HKCU\SOFTWARE\ASProtect
HKCU\SOFTWARE\BabSolution  =>PUP.Optional.BabSolution
HKCU\SOFTWARE\BI
HKCU\SOFTWARE\BitComet
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Blizzard Entertainment
HKCU\SOFTWARE\Camrivox Ltd
HKCU\SOFTWARE\Canon
HKCU\SOFTWARE\Carambis
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Citrix
HKCU\SOFTWARE\Conduit  =>PUP.Optional.Conduit
HKCU\SOFTWARE\Convar
HKCU\SOFTWARE\Core Services
HKCU\SOFTWARE\CosmoCom
HKCU\SOFTWARE\CounterPath
HKCU\SOFTWARE\CounterPath Corporation
HKCU\SOFTWARE\Cygwin
HKCU\SOFTWARE\Dashlane_profiles
HKCU\SOFTWARE\DataMngr  =>PUP.Optional.Datamngr
HKCU\SOFTWARE\DataMngr_Toolbar  =>PUP.Optional.Datamngr
HKCU\SOFTWARE\Delta  =>Toolbar.DeltaSearch
HKCU\SOFTWARE\DigiDNA
HKCU\SOFTWARE\Doubango
HKCU\SOFTWARE\DownloadAstro
HKCU\SOFTWARE\DriverToolkit
HKCU\SOFTWARE\Dropbox
HKCU\SOFTWARE\e-academy Inc.
HKCU\SOFTWARE\EBInstaller
HKCU\SOFTWARE\Elaborate Bytes
HKCU\SOFTWARE\Etiam
HKCU\SOFTWARE\Evernote
HKCU\SOFTWARE\Facebook
HKCU\SOFTWARE\Famatech
HKCU\SOFTWARE\FileScout  =>PUP.Optional.FileScout
HKCU\SOFTWARE\globalUpdate  =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\GoforFiles
HKCU\SOFTWARE\Goobzo  =>PUP.Optional.Goobzo
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Haali
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\iMacsoft
HKCU\SOFTWARE\InGenius
HKCU\SOFTWARE\InstallCore  =>PUP.Optional.InstallCore
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\kde.org
HKCU\SOFTWARE\Kryterion
HKCU\SOFTWARE\Laventure
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\LtdStrInfo
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\MainConcept (Adobe2)
HKCU\SOFTWARE\Martin Prikryl
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\Minnetonka Audio Software
HKCU\SOFTWARE\Mirage
HKCU\SOFTWARE\Mirage Computer Systems
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\NCH Software
HKCU\SOFTWARE\NCH Swift Sound
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opensource
HKCU\SOFTWARE\OVH
HKCU\SOFTWARE\PCDataApp
HKCU\SOFTWARE\PDFEdit
HKCU\SOFTWARE\PerformerSoft LLC  =>PUP.Optional.PerformerSoft
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\QlikTech
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\RatioMaster.NET
HKCU\SOFTWARE\Redemption
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Salesforce.com
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\SCC
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\sms.at
HKCU\SOFTWARE\SNMP
HKCU\SOFTWARE\Soda PDF 5
HKCU\SOFTWARE\Softonic  =>PUP.Optional.Softonic
HKCU\SOFTWARE\SourceForge
HKCU\SOFTWARE\SSPrint
HKCU\SOFTWARE\StudioV5
HKCU\SOFTWARE\SubSystems
HKCU\SOFTWARE\SweetIM  =>PUP.Optional.SweetIM
HKCU\SOFTWARE\Sysinternals
HKCU\SOFTWARE\TeamSpeak 3 Client
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\TeleCharger
HKCU\SOFTWARE\TeleCharger_v2
HKCU\SOFTWARE\Torch  =>PUP.Optional.Torch
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\TuneUp
HKCU\SOFTWARE\Twitter
HKCU\SOFTWARE\Unity
HKCU\SOFTWARE\V9
HKCU\SOFTWARE\Viber
HKCU\SOFTWARE\VidSoft
HKCU\SOFTWARE\VSO
HKCU\SOFTWARE\WebApp
HKCU\SOFTWARE\Webex
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wondershare
HKCU\SOFTWARE\XtenNetworksInc
HKCU\SOFTWARE\YourFileDownloader  =>PUP.Optional.YourFileDownloader
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\COMODO
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Adobe
HKCU\SOFTWARE\AppDataLow\Software\Conduit  =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow\Software\Crossrider  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft
HKCU\SOFTWARE\AppDataLow\Software\Macromedia
HKCU\SOFTWARE\AppDataLow\Software\MarkAny
HKCU\SOFTWARE\AppDataLow\Software\PasswordBox
HKCU\SOFTWARE\AppDataLow\Software\PriceGong  =>PUP.Optional.PriceGong
HKCU\SOFTWARE\AppDataLow\Software\Simplytech  =>PUP.Optional.SimplyTech
HKCU\SOFTWARE\AppDataLow\Software\Smartbar  =>PUP.Optional.SmartBar

---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (463) - 21s
O43 - CFD: 2013/05/21 09:56:00 - [] D -- C:\Program Files (x86)\ABCTI
O43 - CFD: 2013/01/03 13:08:55 - [0] D -- C:\Program Files (x86)\Abto, LLC
O43 - CFD: 2014/05/09 06:51:15 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2013/03/27 08:55:34 - [] D -- C:\Program Files (x86)\Advanced Port Scanner
O43 - CFD: 2015/07/08 17:27:26 - [] D -- C:\Program Files (x86)\Amiable Meal
O43 - CFD: 2015/05/26 19:37:18 - [] D -- C:\Program Files (x86)\Android Data Recovery
O43 - CFD: 2013/12/02 13:02:41 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 2012/12/26 12:55:08 - [] D -- C:\Program Files (x86)\Application Verifier
O43 - CFD: 2015/06/29 20:06:35 - [] D -- C:\Program Files (x86)\Battle.net
O43 - CFD: 2015/06/19 17:28:19 - [] D -- C:\Program Files (x86)\Bonjour
O43 - CFD: 2013/03/07 10:46:22 - [] D -- C:\Program Files (x86)\Camrivox
O43 - CFD: 2013/12/28 14:52:22 - [] D -- C:\Program Files (x86)\Carambis
O43 - CFD: 2013/08/07 15:13:15 - [] D -- C:\Program Files (x86)\Citrix
O43 - CFD: 2015/06/19 17:35:16 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2012/12/09 12:31:55 - [] D -- C:\Program Files (x86)\Conduit
O43 - CFD: 2013/08/30 18:33:18 - [] D -- C:\Program Files (x86)\Convar
O43 - CFD: 2013/12/28 12:07:12 - [] D -- C:\Program Files (x86)\Core Services
O43 - CFD: 2012/12/31 13:40:42 - [] D -- C:\Program Files (x86)\CounterPath
O43 - CFD: 2013/05/21 08:43:16 - [] D -- C:\Program Files (x86)\CTI Data Connector for Salesforce 4.0
O43 - CFD: 2013/05/21 09:56:25 - [] D -- C:\Program Files (x86)\DDLManager setup
O43 - CFD: 2013/05/21 09:31:07 - [] D -- C:\Program Files (x86)\Desk 365  =>PUP.Optional.22Find
O43 - CFD: 2015/05/26 20:11:52 - [0] D -- C:\Program Files (x86)\DowNloAad keeperr
O43 - CFD: 2014/07/27 10:42:30 - [] HD -- C:\Program Files (x86)\Dr.Fone_Temp
O43 - CFD: 2014/02/10 09:31:28 - [] D -- C:\Program Files (x86)\DriverToolkit
O43 - CFD: 2013/04/01 10:41:43 - [] D -- C:\Program Files (x86)\Elaborate Bytes
O43 - CFD: 2013/02/17 13:59:17 - [] D -- C:\Program Files (x86)\Eltima Software
O43 - CFD: 2015/06/19 18:53:11 - [] D -- C:\Program Files (x86)\FainddBeStDeal  =>PUP.Optional.Multiplug
O43 - CFD: 2013/03/31 10:40:14 - [] D -- C:\Program Files (x86)\FastStone Capture
O43 - CFD: 2014/04/21 15:18:59 - [0] D -- C:\Program Files (x86)\File Scout  =>PUP.Optional.FileScout
O43 - CFD: 2014/03/09 08:46:26 - [] D -- C:\Program Files (x86)\FileZilla FTP Client
O43 - CFD: 2015/06/19 18:53:03 - [] D -- C:\Program Files (x86)\FiNdBeestDEal  =>PUP.Optional.Multiplug
O43 - CFD: 2015/06/19 18:53:17 - [] D -- C:\Program Files (x86)\FinuDBeestDeal  =>PUP.Optional.Multiplug
O43 - CFD: 2014/02/10 09:20:55 - [] D -- C:\Program Files (x86)\Free PDF to Word Converter
O43 - CFD: 2014/07/19 01:53:23 - [] D -- C:\Program Files (x86)\globalUpdate  =>PUP.Optional.GlobalUpdate
O43 - CFD: 2015/05/26 19:17:35 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/06/15 20:25:05 - [] D -- C:\Program Files (x86)\Hearthstone
O43 - CFD: 2013/03/17 11:58:33 - [] D -- C:\Program Files (x86)\HTML Help Workshop
O43 - CFD: 2013/03/17 12:06:25 - [] D -- C:\Program Files (x86)\IIS
O43 - CFD: 2013/03/17 12:08:10 - [] D -- C:\Program Files (x86)\IIS Express
O43 - CFD: 2015/06/19 17:29:46 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2012/12/09 09:18:48 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/05/15 20:11:54 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2013/09/12 11:28:06 - [] D -- C:\Program Files (x86)\Investintech.com Inc
O43 - CFD: 2015/03/12 13:38:11 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 2013/04/23 14:28:39 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2015/06/19 17:44:05 - [] D -- C:\Program Files (x86)\Jitterbit Cloud Data Loader
O43 - CFD: 2015/06/19 18:54:31 - [] D -- C:\Program Files (x86)\League of Legends Events
O43 - CFD: 2012/12/09 10:40:57 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 2013/03/17 12:10:55 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET
O43 - CFD: 2012/12/24 08:53:21 - [] D -- C:\Program Files (x86)\Microsoft Expression
O43 - CFD: 2013/03/17 11:57:54 - [] D -- C:\Program Files (x86)\Microsoft Help Viewer
O43 - CFD: 2013/11/13 13:29:39 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2013/03/17 12:15:40 - [] D -- C:\Program Files (x86)\Microsoft SDKs
O43 - CFD: 2014/10/25 20:31:47 - [] D -- C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 2013/11/18 10:45:21 - [] D -- C:\Program Files (x86)\Microsoft SQL Server
O43 - CFD: 2013/11/07 12:01:13 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2012/12/09 10:43:16 - [] D -- C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 2013/11/07 12:01:21 - [] D -- C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 2013/11/07 11:40:45 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 10.0
O43 - CFD: 2013/11/07 15:46:35 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 11.0
O43 - CFD: 2012/12/09 10:41:52 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 2013/11/13 13:10:11 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 9.0
O43 - CFD: 2013/03/17 12:06:33 - [] D -- C:\Program Files (x86)\Microsoft WCF Data Services
O43 - CFD: 2013/03/17 12:09:06 - [] D -- C:\Program Files (x86)\Microsoft Web Tools
O43 - CFD: 2013/12/11 09:19:27 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2014/04/09 12:05:30 - [] D -- C:\Program Files (x86)\Motorola
O43 - CFD: 2014/04/09 11:51:43 - [] D -- C:\Program Files (x86)\Motorola Android USB Drivers
O43 - CFD: 2015/07/09 02:14:11 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/07/09 02:14:11 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2014/04/09 12:05:11 - [] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 2015/06/19 17:42:29 - [0] D -- C:\Program Files (x86)\MyFree Codec
O43 - CFD: 2013/07/24 11:05:45 - [] D -- C:\Program Files (x86)\NCH Software
O43 - CFD: 2013/04/10 11:41:19 - [] D -- C:\Program Files (x86)\Nightly
O43 - CFD: 2013/04/28 09:32:21 - [] D -- C:\Program Files (x86)\Notepad++
O43 - CFD: 2013/03/17 12:06:46 - [] D -- C:\Program Files (x86)\NuGet
O43 - CFD: 2013/05/21 10:08:41 - [] D -- C:\Program Files (x86)\Omiga Plus  =>PUP.Optional.OmigaPlus
O43 - CFD: 2014/04/23 09:42:09 - [] D -- C:\Program Files (x86)\OpenVPN Technologies
O43 - CFD: 2015/06/19 17:44:26 - [] D -- C:\Program Files (x86)\PragmaInstance
O43 - CFD: 2014/07/18 13:45:16 - [] D -- C:\Program Files (x86)\QuickTime
O43 - CFD: 2013/12/11 08:29:18 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/07/09 10:27:31 - [] D -- C:\Program Files (x86)\Ripple Emulator Beta
O43 - CFD: 2015/07/09 10:26:56 - [] D -- C:\Program Files (x86)\RobboiSaver  =>PUP.Optional.Multiplug
O43 - CFD: 2015/07/09 10:27:44 - [] D -- C:\Program Files (x86)\RobOeSaver  =>PUP.Optional.Multiplug
O43 - CFD: 2015/07/09 10:27:33 - [] D -- C:\Program Files (x86)\RoOubboSaver  =>PUP.Optional.Multiplug
O43 - CFD: 2013/12/28 11:57:13 - [] D -- C:\Program Files (x86)\Safari
O43 - CFD: 2013/08/12 08:58:16 - [] D -- C:\Program Files (x86)\salesforce.com
O43 - CFD: 2015/06/19 17:36:55 - [] D -- C:\Program Files (x86)\Samsung
O43 - CFD: 2015/05/26 20:12:04 - [0] D -- C:\Program Files (x86)\SearchNewTab  =>PUP.Optional.FastSaveApp
O43 - CFD: 2013/12/02 13:30:46 - [0] D -- C:\Program Files (x86)\SimilarSites  =>PUP.Optional.SimilarSites
O43 - CFD: 2014/05/21 13:54:58 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2014/03/03 10:15:18 - [] D -- C:\Program Files (x86)\SoftwareUpdater
O43 - CFD: 2015/05/26 20:11:47 - [0] D -- C:\Program Files (x86)\suRf and kEep  =>PUP.Optional.SurfAndKeep
O43 - CFD: 2015/06/29 17:54:59 - [] D -- C:\Program Files (x86)\TeamViewer
O43 - CFD: 2013/01/06 08:46:07 - [] D -- C:\Program Files (x86)\TekSIP
O43 - CFD: 2015/05/22 11:39:16 - [] D -- C:\Program Files (x86)\uTorrent
O43 - CFD: 2013/02/12 08:30:35 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 2014/04/19 21:41:16 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2012/12/26 12:52:52 - [] D -- C:\Program Files (x86)\Windows Kits
O43 - CFD: 2013/09/30 04:56:46 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2013/12/11 09:19:38 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2013/08/22 16:36:33 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2013/08/22 16:36:30 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2013/09/30 04:56:46 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2013/08/22 16:36:33 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2013/12/11 09:19:38 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2013/08/22 16:36:30 - [] D -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 2013/04/20 15:14:19 - [] D -- C:\Program Files (x86)\WinRAR
O43 - CFD: 2015/01/18 16:04:02 - [] D -- C:\Program Files (x86)\World of Warcraft
O43 - CFD: 2012/12/20 11:12:36 - [] D -- C:\Program Files (x86)\Wowza Media Systems
O43 - CFD: 2015/05/26 20:11:50 - [0] D -- C:\Program Files (x86)\YoutubeAdblocker  =>PUP.Optional.YouTubeAdBlock
O43 - CFD: 2013/02/07 14:18:25 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABCTI
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Able2Extract
O43 - CFD: 2013/08/22 16:36:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2013/09/30 05:00:11 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2013/09/30 05:17:46 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2014/05/09 06:52:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS3
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Port Scanner
O43 - CFD: 2015/05/26 20:10:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aptana
O43 - CFD: 2013/02/07 10:54:22 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AstCTIClient
O43 - CFD: 2013/12/11 09:19:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AstCTIServer
O43 - CFD: 2014/04/17 13:15:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
O43 - CFD: 2013/12/28 14:52:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Carambis
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/06/19 17:23:41 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\continnuetosavve  =>PUP.Optional.Multiplug
O43 - CFD: 2013/12/11 09:19:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
O43 - CFD: 2013/12/11 09:19:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eltima Software
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
O43 - CFD: 2014/03/09 08:46:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
O43 - CFD: 2013/01/06 08:40:11 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2013/04/25 10:50:11 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GanttProject
O43 - CFD: 2015/03/04 11:51:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2015/06/05 01:07:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
O43 - CFD: 2014/07/18 00:02:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
O43 - CFD: 2014/09/18 15:04:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
O43 - CFD: 2015/03/12 13:39:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 2013/02/10 10:12:41 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kiax
O43 - CFD: 2013/08/22 16:36:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression
O43 - CFD: 2015/05/26 20:21:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 2014/09/09 11:46:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
O43 - CFD: 2014/10/22 09:21:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 2013/12/11 09:19:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 3 SDK
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 4 SDK - Français
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK - Français
O43 - CFD: 2013/12/11 09:19:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 R2
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2012
O43 - CFD: 2014/05/25 09:33:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2008
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Windows SDK v7.1
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenLaszlo Server
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Editor 3.3
O43 - CFD: 2014/07/18 13:45:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 2013/12/11 09:19:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\salesforce.com
O43 - CFD: 2015/05/26 19:24:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SearchNewTab  =>PUP.Optional.FastSaveApp
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 2014/04/07 16:54:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ssafe, seaave  =>PUP.Optional.Multiplug
O43 - CFD: 2015/06/19 17:46:01 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2013/08/22 16:36:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2013/09/30 05:00:10 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOS_DI-Win32-r110020-V5.4.0
O43 - CFD: 2014/09/23 16:59:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOS_DI-Win32-r118616-V5.5.1
O43 - CFD: 2015/04/06 13:55:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2013/12/11 09:19:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits
O43 - CFD: 2013/12/11 09:25:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/06/19 17:23:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
O43 - CFD: 2015/05/26 20:12:04 - [] D -- C:\ProgramData\21bb50122535cd42
O43 - CFD: 2015/07/09 10:27:44 - [] D -- C:\ProgramData\2430624462760430914
O43 - CFD: 2014/12/07 13:19:25 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
O43 - CFD: 2015/05/26 20:27:31 - [0] D -- C:\ProgramData\a3bf06e000000b56
O43 - CFD: 2015/06/19 17:44:40 - [0] D -- C:\ProgramData\ab70b24000005c5e
O43 - CFD: 2014/04/29 20:47:35 - [] D -- C:\ProgramData\ACD Systems
O43 - CFD: 2014/05/09 08:07:05 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2014/05/09 06:46:55 - [0] D -- C:\ProgramData\ALM
O43 - CFD: 2014/07/18 13:52:41 - [] D -- C:\ProgramData\Apple
O43 - CFD: 2014/07/18 13:17:20 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2014/09/09 17:16:07 - [0] D -- C:\ProgramData\Assistant
O43 - CFD: 2013/02/12 09:14:13 - [0] D -- C:\ProgramData\Babylon  =>PUP.Optional.Babylon
O43 - CFD: 2015/04/02 15:55:04 - [] D -- C:\ProgramData\bajloianonoblgmjpjlkgcplammhdbhf
O43 - CFD: 2014/04/27 19:56:10 - [] D -- C:\ProgramData\Battle.net
O43 - CFD: 2013/07/24 10:00:15 - [] D -- C:\ProgramData\BBrroWse2seaveo  =>PUP.Optional.Multiplug
O43 - CFD: 2013/07/24 09:58:05 - [] D -- C:\ProgramData\BBrrowsse2SaavE  =>PUP.Optional.Multiplug
O43 - CFD: 2014/09/09 17:00:06 - [] D -- C:\ProgramData\BDLogging
O43 - CFD: 2013/01/06 08:40:26 - [0] D -- C:\ProgramData\Big Fish Games
O43 - CFD: 2014/04/17 13:15:28 - [] D -- C:\ProgramData\Blizzard Entertainment
O43 - CFD: 2013/01/13 10:40:13 - [] D -- C:\ProgramData\BlueStacksSetup
O43 - CFD: 2015/04/14 13:18:36 - [] D -- C:\ProgramData\boost_interprocess
O43 - CFD: 2012/12/09 21:59:36 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2013/04/11 11:56:56 - [] D -- C:\ProgramData\Caphyon
O43 - CFD: 2014/03/22 11:45:08 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 2015/05/26 20:11:58 - [] D -- C:\ProgramData\continnuetosavve  =>PUP.Optional.Multiplug
O43 - CFD: 2012/12/18 11:47:19 - [] D -- C:\ProgramData\CosmoCom
O43 - CFD: 2012/12/31 13:40:58 - [] D -- C:\ProgramData\CounterPath
O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/05/26 20:23:33 - [0] D -- C:\ProgramData\DowNloAad keeperr
O43 - CFD: 2015/03/12 13:39:52 - [] D -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
O43 - CFD: 2013/11/25 19:14:09 - [0] D -- C:\ProgramData\eSafe
O43 - CFD: 2014/04/08 19:43:20 - [] D -- C:\ProgramData\Etiam
O43 - CFD: 2015/02/24 11:34:47 - [] D -- C:\ProgramData\ffodbcdobllhkdlbgdkplkpkiipfchdc
O43 - CFD: 2014/12/27 20:02:03 - [] D -- C:\ProgramData\FLEXnet
O43 - CFD: 2013/10/28 07:52:02 - [] D -- C:\ProgramData\IBUpdaterService  =>PUP.Optional.InstallBrain
O43 - CFD: 2013/01/28 09:51:06 - [] D -- C:\ProgramData\InGenius
O43 - CFD: 2013/01/02 09:04:14 - [] D -- C:\ProgramData\InGenius_Software_Inc
O43 - CFD: 2013/11/21 13:12:52 - [] D -- C:\ProgramData\InstallMate
O43 - CFD: 2012/12/26 09:39:24 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2012/12/09 21:59:36 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2014/09/09 14:33:59 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/05/26 20:21:43 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2014/09/09 11:10:38 - [] D -- C:\ProgramData\Microsoft Toolkit
O43 - CFD: 2013/04/21 09:00:15 - [] D -- C:\ProgramData\Mirage Computer Systems
O43 - CFD: 2013/01/02 09:04:15 - [0] D -- C:\ProgramData\Mitel53xxApp
O43 - CFD: 2012/12/09 21:59:36 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2012/12/09 14:07:42 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2013/07/24 10:01:25 - [] D -- C:\ProgramData\NCH Software
O43 - CFD: 2013/07/24 10:05:18 - [] D -- C:\ProgramData\Norton
O43 - CFD: 2013/02/17 12:08:45 - [] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 2012/12/25 13:19:35 - [] D -- C:\ProgramData\OfficeSIP
O43 - CFD: 2013/11/07 15:57:16 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2013/03/17 12:11:59 - [] D -- C:\ProgramData\PreEmptive Solutions
O43 - CFD: 2013/12/11 09:19:57 - [] D -- C:\ProgramData\PRICache
O43 - CFD: 2015/05/26 19:36:16 - [] D -- C:\ProgramData\QlikTech
O43 - CFD: 2014/02/03 13:45:14 - [] D -- C:\ProgramData\Qualcomm Atheros
O43 - CFD: 2013/11/21 13:12:53 - [] D -- C:\ProgramData\QuickSet
O43 - CFD: 2014/09/09 11:46:32 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2013/08/12 10:58:22 - [] D -- C:\ProgramData\salesforce.com
O43 - CFD: 2015/05/26 20:20:41 - [] D -- C:\ProgramData\Samsung
O43 - CFD: 2015/05/26 20:23:33 - [0] D -- C:\ProgramData\SearchNewTab  =>PUP.Optional.FastSaveApp
O43 - CFD: 2014/05/21 13:55:04 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2013/03/04 09:50:23 - [] D -- C:\ProgramData\SoftSafe
O43 - CFD: 2015/05/26 20:11:54 - [] D -- C:\ProgramData\ssafe, seaave  =>PUP.Optional.Multiplug
O43 - CFD: 2015/04/05 12:38:54 - [] D -- C:\ProgramData\SSScan
O43 - CFD: 2013/05/05 12:41:30 - [] D -- C:\ProgramData\StarApp
O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2012/12/09 11:37:42 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2015/05/26 20:23:33 - [0] D -- C:\ProgramData\suRf and kEep  =>PUP.Optional.SurfAndKeep
O43 - CFD: 2013/02/17 12:09:31 - [] D -- C:\ProgramData\Symantec
O43 - CFD: 2013/05/21 08:50:45 - [] D -- C:\ProgramData\Tarma Installer  =>PUP.Optional.Tarma
O43 - CFD: 2015/03/28 00:02:27 - [0] AD -- C:\ProgramData\TEMP
O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2014/07/27 10:54:10 - [] D -- C:\ProgramData\TenorShare
O43 - CFD: 2014/05/22 07:18:36 - [] D -- C:\ProgramData\TuneUp Software
O43 - CFD: 2015/06/19 17:35:04 - [] D -- C:\ProgramData\VMware
O43 - CFD: 2012/12/26 12:56:04 - [] D -- C:\ProgramData\Windows App Certification Kit
O43 - CFD: 2014/07/20 12:27:48 - [] D -- C:\ProgramData\WindSolutions
O43 - CFD: 2013/10/28 07:39:05 - [] D -- C:\ProgramData\WinterSoft
O43 - CFD: 2015/04/17 16:47:28 - [] D -- C:\ProgramData\Wondershare
O43 - CFD: 2015/05/26 20:23:33 - [0] D -- C:\ProgramData\YoutubeAdblocker  =>PUP.Optional.YouTubeAdBlock
O43 - CFD: 2015/02/24 18:34:27 - [] D -- C:\ProgramData\{3be439ac-e1f6-b62d-3be4-439ace1fe6b3}
O43 - CFD: 2015/06/12 23:19:24 - [] D -- C:\ProgramData\{4606f85c-3ae9-916c-4606-6f85c3aee170}
O43 - CFD: 2015/04/19 20:13:52 - [] D -- C:\ProgramData\{547131f2-59a8-9a21-5471-131f259ac7c9}
O43 - CFD: 2015/04/19 20:13:53 - [] D -- C:\ProgramData\{c4c369da-1677-3417-c4c3-369da167a768}
O43 - CFD: 2014/03/22 15:41:43 - [0] SHD -- C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 2013/04/01 10:50:53 - [] D -- C:\Program Files (x86)\Common Files\337
O43 - CFD: 2014/05/17 22:09:49 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 2014/06/04 08:00:35 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2015/03/12 13:36:56 - [] D -- C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 2014/07/18 00:02:41 - [] D -- C:\Program Files (x86)\Common Files\Blizzard Entertainment
O43 - CFD: 2014/07/18 13:50:48 - [] D -- C:\Program Files (x86)\Common Files\Config
O43 - CFD: 2014/05/09 06:49:41 - [] D -- C:\Program Files (x86)\Common Files\Control Panels
O43 - CFD: 2014/05/25 09:49:47 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 2013/02/27 10:19:47 - [] D -- C:\Program Files (x86)\Common Files\InGenius
O43 - CFD: 2015/06/19 17:29:52 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 2013/04/23 14:51:15 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2014/05/08 12:17:43 - [] D -- C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 2013/03/17 11:54:04 - [] D -- C:\Program Files (x86)\Common Files\Merge Modules
O43 - CFD: 2012/12/26 12:52:52 - [] D -- C:\Program Files (x86)\Common Files\Microsoft
O43 - CFD: 2014/09/09 14:34:02 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2013/01/28 09:47:35 - [] D -- C:\Program Files (x86)\Common Files\Outlook Security Manager
O43 - CFD: 2013/08/22 16:36:33 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2014/05/21 13:54:58 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2013/05/12 14:30:28 - [] D -- C:\Program Files (x86)\Common Files\Soda PDF 5
O43 - CFD: 2013/07/23 12:13:23 - [0] D -- C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 2013/12/11 09:19:22 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2014/07/27 10:21:43 - [] D -- C:\Program Files (x86)\Common Files\Wondershare
O43 - CFD: 2013/01/27 10:19:07 - [] D -- C:\Users\Karima\AppData\Roaming\.salesforce.com
O43 - CFD: 2013/05/21 09:32:46 - [] D -- C:\Users\Karima\AppData\Roaming\337
O43 - CFD: 2013/05/21 09:52:19 - [] D -- C:\Users\Karima\AppData\Roaming\337 Wallpaper
O43 - CFD: 2013/02/07 14:25:19 - [] D -- C:\Users\Karima\AppData\Roaming\abcti
O43 - CFD: 2014/05/13 21:46:53 - [] D -- C:\Users\Karima\AppData\Roaming\ACD Systems
O43 - CFD: 2014/05/09 08:06:52 - [] D -- C:\Users\Karima\AppData\Roaming\Adobe
O43 - CFD: 2013/12/28 14:07:26 - [0] D -- C:\Users\Karima\AppData\Roaming\AdobeUM
O43 - CFD: 2014/12/15 15:59:27 - [] D -- C:\Users\Karima\AppData\Roaming\Apple Computer
O43 - CFD: 2013/12/28 14:25:19 - [] D -- C:\Users\Karima\AppData\Roaming\ArcSoft
O43 - CFD: 2013/05/28 11:54:59 - [] D -- C:\Users\Karima\AppData\Roaming\BabSolution  =>PUP.Optional.BabSolution
O43 - CFD: 2013/02/12 09:14:13 - [] D -- C:\Users\Karima\AppData\Roaming\Babylon  =>PUP.Optional.Babylon
O43 - CFD: 2014/07/18 14:47:29 - [] D -- C:\Users\Karima\AppData\Roaming\BackupTrans
O43 - CFD: 2014/04/17 13:20:21 - [] D -- C:\Users\Karima\AppData\Roaming\Battle.net
O43 - CFD: 2014/05/12 11:10:53 - [] D -- C:\Users\Karima\AppData\Roaming\BitComet
O43 - CFD: 2013/08/06 11:57:20 - [] D -- C:\Users\Karima\AppData\Roaming\CAD-KAS
O43 - CFD: 2013/12/28 14:52:34 - [] D -- C:\Users\Karima\AppData\Roaming\Carambis
O43 - CFD: 2013/04/15 08:04:48 - [] D -- C:\Users\Karima\AppData\Roaming\cdcsfe
O43 - CFD: 2013/05/21 07:49:32 - [] D -- C:\Users\Karima\AppData\Roaming\CloudCallCommunicator
O43 - CFD: 2013/01/03 08:56:44 - [] D -- C:\Users\Karima\AppData\Roaming\conaito_Technologies
O43 - CFD: 2013/05/05 08:03:47 - [] D -- C:\Users\Karima\AppData\Roaming\Desk 365  =>PUP.Optional.22Find
O43 - CFD: 2014/07/17 18:14:05 - [] D -- C:\Users\Karima\AppData\Roaming\DiskAid
O43 - CFD: 2013/05/21 09:56:07 - [0] D -- C:\Users\Karima\AppData\Roaming\dll-files.com  =>PUP.Optional.DllFilesFixer
O43 - CFD: 2012/12/30 14:50:49 - [] D -- C:\Users\Karima\AppData\Roaming\Doubango
O43 - CFD: 2014/12/31 21:48:52 - [] D -- C:\Users\Karima\AppData\Roaming\Dropbox
O43 - CFD: 2015/04/12 19:15:33 - [] D -- C:\Users\Karima\AppData\Roaming\dvdcss
O43 - CFD: 2013/01/07 10:34:39 - [] D -- C:\Users\Karima\AppData\Roaming\e-academy Inc
O43 - CFD: 2014/02/03 13:31:55 - [] D -- C:\Users\Karima\AppData\Roaming\Easeware
O43 - CFD: 2013/05/06 08:21:45 - [] D -- C:\Users\Karima\AppData\Roaming\eIntaller
O43 - CFD: 2013/02/17 13:59:45 - [] D -- C:\Users\Karima\AppData\Roaming\Eltima Software
O43 - CFD: 2013/03/31 10:40:49 - [] D -- C:\Users\Karima\AppData\Roaming\FastStone
O43 - CFD: 2014/06/02 10:03:19 - [] D -- C:\Users\Karima\AppData\Roaming\Feedreader
O43 - CFD: 2015/06/28 02:24:07 - [] D -- C:\Users\Karima\AppData\Roaming\FileZilla
O43 - CFD: 2014/02/10 09:18:27 - [] D -- C:\Users\Karima\AppData\Roaming\Free-PDF-to-Word.com
O43 - CFD: 2013/05/28 11:55:58 - [] D -- C:\Users\Karima\AppData\Roaming\GoforFiles
O43 - CFD: 2015/05/26 20:08:23 - [0] D -- C:\Users\Karima\AppData\Roaming\Google
O43 - CFD: 2013/12/11 09:44:11 - [] D -- C:\Users\Karima\AppData\Roaming\Identities
O43 - CFD: 2013/01/02 09:04:13 - [] D -- C:\Users\Karima\AppData\Roaming\InGenius_Software_Inc
O43 - CFD: 2014/05/11 23:47:53 - [] D -- C:\Users\Karima\AppData\Roaming\inkscape
O43 - CFD: 2013/02/27 14:48:39 - [] D -- C:\Users\Karima\AppData\Roaming\Jitsi
O43 - CFD: 2015/05/26 19:23:54 - [0] D -- C:\Users\Karima\AppData\Roaming\Learnpulse
O43 - CFD: 2014/11/27 11:32:03 - [] D -- C:\Users\Karima\AppData\Roaming\LibreOffice
O43 - CFD: 2014/06/26 17:26:10 - [] D -- C:\Users\Karima\AppData\Roaming\log
O43 - CFD: 2012/12/24 09:37:48 - [] D -- C:\Users\Karima\AppData\Roaming\LogoMaker
O43 - CFD: 2012/12/09 09:23:04 - [] D -- C:\Users\Karima\AppData\Roaming\Macromedia
O43 - CFD: 2013/04/22 10:24:38 - [] D -- C:\Users\Karima\AppData\Roaming\MetroTwit
O43 - CFD: 2015/06/19 17:46:31 - [] SD -- C:\Users\Karima\AppData\Roaming\Microsoft
O43 - CFD: 2013/11/12 11:38:43 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft Corporation
O43 - CFD: 2013/03/18 10:02:45 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft FxCop
O43 - CFD: 2013/04/11 11:55:45 - [] D -- C:\Users\Karima\AppData\Roaming\Mirage Computer Systems
O43 - CFD: 2014/04/09 12:03:32 - [] D -- C:\Users\Karima\AppData\Roaming\Motorola
O43 - CFD: 2014/04/09 12:05:44 - [] D -- C:\Users\Karima\AppData\Roaming\Motorola Mobility
O43 - CFD: 2015/05/26 19:36:09 - [] D -- C:\Users\Karima\AppData\Roaming\Mozilla
O43 - CFD: 2013/01/31 10:54:48 - [] D -- C:\Users\Karima\AppData\Roaming\NCH Software
O43 - CFD: 2012/12/10 12:42:31 - [] D -- C:\Users\Karima\AppData\Roaming\Notepad++
O43 - CFD: 2014/01/28 16:21:21 - [] D -- C:\Users\Karima\AppData\Roaming\NuGet
O43 - CFD: 2014/02/24 20:30:02 - [] D -- C:\Users\Karima\AppData\Roaming\okitspace  =>PUP.Optional.Onekit
O43 - CFD: 2013/05/21 09:32:51 - [] D -- C:\Users\Karima\AppData\Roaming\Omiga Plus  =>PUP.Optional.OmigaPlus
O43 - CFD: 2013/05/12 14:30:59 - [] D -- C:\Users\Karima\AppData\Roaming\PDF Software
O43 - CFD: 2013/10/31 07:54:46 - [0] D -- C:\Users\Karima\AppData\Roaming\PerformerSoft  =>PUP.Optional.PerformerSoft
O43 - CFD: 2014/04/13 16:00:18 - [] D -- C:\Users\Karima\AppData\Roaming\QlikTech
O43 - CFD: 2014/09/09 16:44:30 - [0] D -- C:\Users\Karima\AppData\Roaming\QuickScan
O43 - CFD: 2013/02/13 09:45:35 - [] D -- C:\Users\Karima\AppData\Roaming\QuteCom
O43 - CFD: 2013/11/12 14:25:27 - [0] D -- C:\Users\Karima\AppData\Roaming\RSSBus
O43 - CFD: 2015/05/26 20:20:56 - [] D -- C:\Users\Karima\AppData\Roaming\Samsung
O43 - CFD: 2013/12/02 13:30:39 - [0] D -- C:\Users\Karima\AppData\Roaming\SimilarSites  =>PUP.Optional.SimilarSites
O43 - CFD: 2015/07/13 05:18:37 - [] D -- C:\Users\Karima\AppData\Roaming\Skype
O43 - CFD: 2013/11/21 13:17:57 - [] D -- C:\Users\Karima\AppData\Roaming\SkypEmoticons
O43 - CFD: 2015/04/21 11:14:21 - [] D -- C:\Users\Karima\AppData\Roaming\Slack
O43 - CFD: 2013/10/28 07:52:11 - [] D -- C:\Users\Karima\AppData\Roaming\SpeedAnalysis3  =>PUP.Optional.SpeedAnalysis
O43 - CFD: 2012/12/10 12:42:45 - [] D -- C:\Users\Karima\AppData\Roaming\StatusWinks  =>Toolbar.StatusWinks
O43 - CFD: 2014/06/04 08:00:54 - [] D -- C:\Users\Karima\AppData\Roaming\Statuzer
O43 - CFD: 2014/06/04 08:01:30 - [] D -- C:\Users\Karima\AppData\Roaming\Statuzer.2A2E673ED8827597C8E464887790FF199DB1A06E.1
O43 - CFD: 2013/01/30 12:03:58 - [] D -- C:\Users\Karima\AppData\Roaming\Sublime Text 2
O43 - CFD: 2015/05/21 17:40:16 - [] D -- C:\Users\Karima\AppData\Roaming\TeamViewer
O43 - CFD: 2014/06/02 10:08:58 - [] D -- C:\Users\Karima\AppData\Roaming\Thunderbird
O43 - CFD: 2015/06/05 12:43:01 - [] D -- C:\Users\Karima\AppData\Roaming\TS3Client
O43 - CFD: 2014/03/22 11:48:33 - [] D -- C:\Users\Karima\AppData\Roaming\TuneUp Software
O43 - CFD: 2013/05/20 13:06:15 - [] D -- C:\Users\Karima\AppData\Roaming\Unified Remote
O43 - CFD: 2015/06/19 17:52:43 - [] D -- C:\Users\Karima\AppData\Roaming\uTorrent
O43 - CFD: 2015/07/14 11:32:42 - [] D -- C:\Users\Karima\AppData\Roaming\ViberPC
O43 - CFD: 2015/06/30 01:52:27 - [] D -- C:\Users\Karima\AppData\Roaming\vlc
O43 - CFD: 2013/04/25 14:48:20 - [] D -- C:\Users\Karima\AppData\Roaming\VMware
O43 - CFD: 2013/04/22 07:55:58 - [] D -- C:\Users\Karima\AppData\Roaming\VSO
O43 - CFD: 2013/12/31 09:04:09 - [] D -- C:\Users\Karima\AppData\Roaming\WebSentinel
O43 - CFD: 2014/07/20 12:32:29 - [] D -- C:\Users\Karima\AppData\Roaming\WindSolutions
O43 - CFD: 2012/12/09 10:33:13 - [] D -- C:\Users\Karima\AppData\Roaming\WinRAR
O43 - CFD: 2015/02/24 11:09:41 - [] D -- C:\Users\Karima\AppData\Roaming\wKarima
O43 - CFD: 2015/04/17 16:13:13 - [] D -- C:\Users\Karima\AppData\Roaming\Wondershare
O43 - CFD: 2013/02/12 08:47:46 - [] D -- C:\Users\Karima\AppData\Roaming\YourFileDownloader  =>PUP.Optional.YourFileDownloader
O43 - CFD: 2015/07/14 11:51:43 - [] D -- C:\Users\Karima\AppData\Roaming\ZHP
O43 - CFD: 2012/12/31 09:23:03 - [] D -- C:\Users\Karima\AppData\Roaming\Zoiper Web
O43 - CFD: 2013/10/28 07:52:10 - [] D -- C:\Users\Karima\AppData\Roaming\zulagames
O43 - CFD: 2012/12/25 08:14:54 - [] D -- C:\Users\Karima\AppData\Local\3CX VoIP Phone
O43 - CFD: 2014/12/15 16:01:55 - [] D -- C:\Users\Karima\AppData\Local\3E4AC6AE-DF8E-4F41-A248-1AAFDCD67192.aplzod
O43 - CFD: 2014/05/09 17:46:06 - [] D -- C:\Users\Karima\AppData\Local\Adobe
O43 - CFD: 2014/06/26 17:26:10 - [] D -- C:\Users\Karima\AppData\Local\Aiseesoft Studio
O43 - CFD: 2013/12/02 13:02:48 - [] D -- C:\Users\Karima\AppData\Local\Apple
O43 - CFD: 2014/07/18 14:08:05 - [] D -- C:\Users\Karima\AppData\Local\Apple Computer
O43 - CFD: 2014/12/15 15:59:29 - [] D -- C:\Users\Karima\AppData\Local\Apple Inc
O43 - CFD: 2013/12/11 08:49:26 - [0] SHD -- C:\Users\Karima\AppData\Local\Application Data
O43 - CFD: 2013/07/24 10:06:54 - [] D -- C:\Users\Karima\AppData\Local\Apps
O43 - CFD: 2013/07/09 09:13:43 - [] D -- C:\Users\Karima\AppData\Local\Ares Mod
O43 - CFD: 2015/07/14 11:27:42 - [] D -- C:\Users\Karima\AppData\Local\Battle.net
O43 - CFD: 2014/07/18 01:12:21 - [] D -- C:\Users\Karima\AppData\Local\Blizzard
O43 - CFD: 2014/04/17 13:15:41 - [] D -- C:\Users\Karima\AppData\Local\Blizzard Entertainment
O43 - CFD: 2014/04/29 21:29:29 - [0] D -- C:\Users\Karima\AppData\Local\cache
O43 - CFD: 2015/05/26 19:39:13 - [] D -- C:\Users\Karima\AppData\Local\Citrix
O43 - CFD: 2015/06/19 17:23:51 - [0] D -- C:\Users\Karima\AppData\Local\Comodo
O43 - CFD: 2013/01/06 08:49:54 - [0] D -- C:\Users\Karima\AppData\Local\Conduit
O43 - CFD: 2013/01/14 12:01:05 - [0] D -- C:\Users\Karima\AppData\Local\CounterPath Corporation
O43 - CFD: 2015/03/18 15:01:34 - [] D -- C:\Users\Karima\AppData\Local\CrashRpt  =>SUP.CrashReports
O43 - CFD: 2012/12/09 12:32:03 - [] D -- C:\Users\Karima\AppData\Local\CRE
O43 - CFD: 2015/06/19 17:42:42 - [0] D -- C:\Users\Karima\AppData\Local\Deployment
O43 - CFD: 2015/06/15 12:19:45 - [] D -- C:\Users\Karima\AppData\Local\Diagnostics
O43 - CFD: 2014/07/17 18:00:35 - [] D -- C:\Users\Karima\AppData\Local\DigiDNA
O43 - CFD: 2014/10/11 11:20:22 - [0] D -- C:\Users\Karima\AppData\Local\Downloaded Installations
O43 - CFD: 2014/02/03 13:55:33 - [0] D -- C:\Users\Karima\AppData\Local\DriverToolkit
O43 - CFD: 2015/03/24 17:14:17 - [] D -- C:\Users\Karima\AppData\Local\Eclipse
O43 - CFD: 2015/05/30 10:20:11 - [0] D -- C:\Users\Karima\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2013/04/28 10:45:33 - [] D -- C:\Users\Karima\AppData\Local\Evernote
O43 - CFD: 2014/09/08 15:33:18 - [] D -- C:\Users\Karima\AppData\Local\EvernoteNW
O43 - CFD: 2015/05/26 19:36:04 - [] D -- C:\Users\Karima\AppData\Local\Facebook
O43 - CFD: 2014/07/18 13:36:10 - [] D -- C:\Users\Karima\AppData\Local\globalUpdate  =>PUP.Optional.GlobalUpdate
O43 - CFD: 2015/05/26 19:36:09 - [] D -- C:\Users\Karima\AppData\Local\Google
O43 - CFD: 2013/12/11 08:49:26 - [0] SHD -- C:\Users\Karima\AppData\Local\Historique
O43 - CFD: 2013/01/28 09:51:26 - [] D -- C:\Users\Karima\AppData\Local\InGenius_Software_Inc
O43 - CFD: 2015/03/18 15:04:02 - [] D -- C:\Users\Karima\AppData\Local\Installer
O43 - CFD: 2013/09/12 11:29:58 - [] D -- C:\Users\Karima\AppData\Local\Investintech.com Inc
O43 - CFD: 2015/05/26 19:23:54 - [0] D -- C:\Users\Karima\AppData\Local\Learnpulse
O43 - CFD: 2012/12/26 09:41:53 - [] D -- C:\Users\Karima\AppData\Local\Macromedia
O43 - CFD: 2015/04/05 11:47:43 - [] D -- C:\Users\Karima\AppData\Local\Microsoft
O43 - CFD: 2015/07/13 14:14:17 - [] D -- C:\Users\Karima\AppData\Local\Microsoft Help
O43 - CFD: 2013/11/07 11:57:01 - [] D -- C:\Users\Karima\AppData\Local\Microsoft_Corporation
O43 - CFD: 2014/05/12 11:31:47 - [] D -- C:\Users\Karima\AppData\Local\Mobogenie  =>PUP.Optional.Mobogenie
O43 - CFD: 2013/10/02 09:47:26 - [] D -- C:\Users\Karima\AppData\Local\Mozilla
O43 - CFD: 2012/12/25 14:05:08 - [] D -- C:\Users\Karima\AppData\Local\OfficeSIP_Communications
O43 - CFD: 2014/09/08 06:15:52 - [] D -- C:\Users\Karima\AppData\Local\onlysearch  =>PUP.Optional.OnlySearch
O43 - CFD: 2015/04/05 12:41:21 - [] D -- C:\Users\Karima\AppData\Local\Packages
O43 - CFD: 2013/02/07 14:39:24 - [] D -- C:\Users\Karima\AppData\Local\Programs
O43 - CFD: 2014/04/13 16:49:54 - [] D -- C:\Users\Karima\AppData\Local\QlikTech
O43 - CFD: 2014/04/13 15:55:27 - [] D -- C:\Users\Karima\AppData\Local\QlikTech Installations
O43 - CFD: 2012/12/20 09:53:53 - [] D -- C:\Users\Karima\AppData\Local\S2PC
O43 - CFD: 2013/04/11 12:54:09 - [] D -- C:\Users\Karima\AppData\Local\Salesforce.com
O43 - CFD: 2015/04/05 12:33:52 - [] D -- C:\Users\Karima\AppData\Local\Samsung
O43 - CFD: 2014/04/07 16:55:10 - [] D -- C:\Users\Karima\AppData\Local\Skype
O43 - CFD: 2015/05/26 19:15:00 - [] D -- C:\Users\Karima\AppData\Local\slack
O43 - CFD: 2013/04/09 08:41:45 - [] D -- C:\Users\Karima\AppData\Local\sms.at
O43 - CFD: 2015/04/21 11:14:22 - [] D -- C:\Users\Karima\AppData\Local\SquirrelTemp
O43 - CFD: 2015/06/05 12:40:22 - [] D -- C:\Users\Karima\AppData\Local\TeamSpeak 3 Client
O43 - CFD: 2015/06/18 18:20:34 - [] D -- C:\Users\Karima\AppData\Local\TeamViewer
O43 - CFD: 2015/07/14 11:51:38 - [] D -- C:\Users\Karima\AppData\Local\Temp
O43 - CFD: 2013/12/28 14:52:34 - [] D -- C:\Users\Karima\AppData\Local\TempDIR
O43 - CFD: 2013/12/11 08:49:26 - [0] SHD -- C:\Users\Karima\AppData\Local\Temporary Internet Files
O43 - CFD: 2014/06/02 10:08:58 - [] D -- C:\Users\Karima\AppData\Local\Thunderbird
O43 - CFD: 2014/04/28 13:51:42 - [] D -- C:\Users\Karima\AppData\Local\TuneUp Software
O43 - CFD: 2012/12/09 12:10:42 - [] D -- C:\Users\Karima\AppData\Local\twitter
O43 - CFD: 2015/06/29 20:57:27 - [] D -- C:\Users\Karima\AppData\Local\Viber
O43 - CFD: 2013/12/28 14:25:35 - [] D -- C:\Users\Karima\AppData\Local\VirtualStore
O43 - CFD: 2014/07/18 13:01:18 - [] D -- C:\Users\Karima\AppData\Local\Wondershare
O43 - CFD: 2013/08/22 16:36:32 - [] RD -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2013/08/22 16:36:32 - [] RD -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2014/05/25 10:41:49 - [] RD -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2013/03/27 08:55:34 - [0] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced Port Scanner
O43 - CFD: 2015/03/04 12:00:05 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
O43 - CFD: 2013/12/11 08:51:57 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AstCTIServer
O43 - CFD: 2015/03/04 11:54:07 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
O43 - CFD: 2013/12/11 08:51:57 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar
O43 - CFD: 2014/12/14 09:47:52 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
O43 - CFD: 2013/08/22 16:36:32 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2012/12/10 12:38:22 - [0] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
O43 - CFD: 2013/02/18 11:59:19 - [0] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OpenLaszlo Server
O43 - CFD: 2013/01/02 11:38:51 - [0] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pulse
O43 - CFD: 2015/06/19 17:37:27 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Red5
O43 - CFD: 2015/05/26 20:08:11 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\salesforce.com
O43 - CFD: 2015/05/26 19:14:58 - [0] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies
O43 - CFD: 2015/05/26 19:36:37 - [] RD -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2013/12/11 08:51:58 - [] RD -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/06/05 12:40:22 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
O43 - CFD: 2013/11/20 12:01:07 - [0] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TOS_DI-Win32-r110020-V5.4.0
O43 - CFD: 2014/09/23 16:59:15 - [0] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TOS_DI-Win32-r118616-V5.5.1
O43 - CFD: 2013/12/11 09:25:09 - [] D -- C:\Users\Karima\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ Liste des pilotes du système (SDL) (O58) (42) - 8s
O58 - SDL:2013/08/22 13:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys   [108896]
O58 - SDL:2013/08/22 13:43:41 A . (.PMC-Sierra - PMC-Sierra Storport  Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys   [782176]
O58 - SDL:2013/08/22 13:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys   [79200]
O58 - SDL:2013/08/22 13:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys   [259424]
O58 - SDL:2013/08/22 13:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys   [25952]
O58 - SDL:2013/08/22 13:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys   [114016]
O58 - SDL:2013/06/18 15:45:02 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athw8x.sys   [3680256]
O58 - SDL:2013/08/13 00:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2  Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys   [17624]
O58 - SDL:2013/08/22 13:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys   [531296]
O58 - SDL:2009/06/05 02:11:55 RA . (.Samsung Electronics Co., Ltd. - Windows 2k,XP IEEE-1284 parallel class driv.) -- C:\WINDOWS\System32\drivers\DgivEcp.sys   [53816]
O58 - SDL:2010/12/16 23:58:14 A . (.Elaborate Bytes AG - ElbyCD Windows x64 I/O driver.) -- C:\WINDOWS\System32\drivers\ElbyCDIO.sys   [40816]
O58 - SDL:2013/08/22 13:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys   [3357024]
O58 - SDL:2012/08/21 13:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\System32\drivers\GEARAspiWDM.sys   [33240]
O58 - SDL:2009/09/17 19:54:54 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECIx64.sys   [56344]
O58 - SDL:2013/08/22 13:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys   [64352]
O58 - SDL:2013/07/30 19:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys   [24568]
O58 - SDL:2013/07/25 20:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys   [99320]
O58 - SDL:2013/08/10 01:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys   [651248]
O58 - SDL:2013/08/22 13:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys   [412000]
O58 - SDL:2012/11/27 00:26:12 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys   [12311776]
O58 - SDL:2013/06/18 15:45:14 A . (.Broadcom Corporation - Broadcom NetLink (TM) Gigabit Ethernet NDIS.) -- C:\WINDOWS\System32\drivers\k57nd60a.sys   [425984]
O58 - SDL:2013/08/22 13:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys   [109408]
O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2.sys   [93536]
O58 - SDL:2013/08/22 13:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3.sys   [81760]
O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys   [82784]
O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys   [56672]
O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys   [575840]
O58 - SDL:2013/08/22 13:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys   [63840]
O58 - SDL:2013/07/25 16:53:46 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\WINDOWS\System32\drivers\netaapl64.sys   [23040]
O58 - SDL:2013/08/22 13:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys   [150368]
O58 - SDL:2013/08/22 13:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys   [168288]
O58 - SDL:2013/08/22 16:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys   [23040]
O58 - SDL:2013/08/22 13:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys   [44896]
O58 - SDL:2013/08/22 13:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys   [81760]
O58 - SDL:2013/08/22 13:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys   [31072]
O58 - SDL:2013/07/15 13:22:06 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\tapoas.sys   [31232]
O58 - SDL:2014/07/28 14:52:00 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl64.sys   [54784]
O58 - SDL:2011/01/15 17:21:04 A . (.Elaborate Bytes AG - VirtualCloneCD Driver.) -- C:\WINDOWS\System32\drivers\VClone.sys   [36352]
O58 - SDL:2013/08/22 13:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\viaide.sys   [19808]
O58 - SDL:2013/08/22 13:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys   [168800]
O58 - SDL:2013/08/22 13:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS   [305504]
O58 - SDL:2015/01/27 00:23:46 A . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\WINDOWS\System32\drivers\wdcsam64.sys   [14464]

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (2) - 487s
O61 - LFC: 2015/07/13 18:49:02 A . (..) -- C:\Users\Karima\AppData\Roaming\appdataFr2.bin   [20]
O61 - LFC: 2015/07/14 12:00:22 A . (..) -- C:\Users\Karima\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin   [1113849]

---\\ Associations Shell Spawning (O67) (9) - 0s
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <jsfile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (SMI) (O68) (16) - 1s
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe 
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe 
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.ex http://istart.webssearches.com/  =>PUP.Optional.WebsSearches
O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\Shell\open\Command] (.Apple Inc. - Safari.) -- C:\Program Files (x86)\Safari\Safari.exe http://istart.webssearches.com/  =>PUP.Optional.WebsSearches
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\InstallInfo\ShowIconsCommand] (.Apple Inc. - Safari.) -- C:\Program Files (x86)\Safari\Safari.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\InstallInfo\ReinstallCommand] (.Apple Inc. - Safari.) -- C:\Program Files (x86)\Safari\Safari.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <Safari.exe> <Safari>[HKLM\..\InstallInfo\HideIconsCommand] (.Apple Inc. - Safari.) -- C:\Program Files (x86)\Safari\Safari.exe

---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (4) - 7s
O69 - SBI: prefs.js [Karima - 3mwxieqw.default] user_pref("extensions.crossrider.bic", "145db814dec767d266d84fc0c09b2ccb");  =>PUP.Optional.CrossRider
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (webssearches) - http://istart.webssearches.com/  =>PUP.Optional.IsStart
O69 - SBI: SearchScopes [HKCR]  [DefaultScope] - (Web Search) - http://search.certified-toolbar.com?si=38268&st=bs&tid=77&q={searchTerms}  =>PUP.Optional.CertifiedToolbar

---\\ Enumère les services démarrés par Svchost (SSS) (O83) (36) - 3s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\WINDOWS\System32\aelupsvc.dll   [207360]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll   [155136]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll   [155136]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll   [324608]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll   [1311744]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll   [1104384]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll   [903168]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll   [109568]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll   [150528]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll   [107008]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll   [1214976]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll   [220672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\WINDOWS\system32\mmcss.dll   [70656]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll   [134144]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll   [221184]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll   [326656]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll   [81408]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll   [97792]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll   [336896]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll   [491520]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll   [1555456]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll   [50688]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll   [201728]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll   [164352]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll   [101376]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\WINDOWS\System32\rasmans.dll   [534016]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [223744]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll   [71680]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll   [433664]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll   [306688]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll   [3532288]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll   [1017856]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [629760]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll   [183296]
O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\WINDOWS\System32\KeyboardFilterSvc.dll   [90464]

---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (10) - 1s
O87 - FAEL: "{26260821-B4A9-4166-B29D-02F5478E5667}" [In-None-P6-TRUE] .(.Nikolay.IT - RatioMaster.NET.) -- C:\users\karima\downloads\ratiomaster.net\ratiomaster.net.exe
O87 - FAEL: "{0E16BD01-308E-41CE-86C0-DF3FF32C9E27}" [In-None-P17-TRUE] .(.Nikolay.IT - RatioMaster.NET.) -- C:\users\karima\downloads\ratiomaster.net\ratiomaster.net.exe
O87 - FAEL: "UDP Query User{E42E0F05-E8BB-4C72-BCCE-C4FF4E5948F7}C:\users\karima\downloads\ratiomaster.net\ratiomaster.net.exe" [In-None-P17-TRUE] .(.Nikolay.IT - RatioMaster.NET.) -- C:\users\karima\downloads\ratiomaster.net\ratiomaster.net.exe
O87 - FAEL: "TCP Query User{2B0732FF-5BEE-48B8-80DB-D7A5F530DFA0}C:\users\karima\downloads\ratiomaster.net\ratiomaster.net.exe" [In-None-P6-TRUE] .(.Nikolay.IT - RatioMaster.NET.) -- C:\users\karima\downloads\ratiomaster.net\ratiomaster.net.exe
O87 - FAEL: "UDP Query User{FA978BE8-B7FA-41FD-9CDC-EECE18260AB1}C:\program files (x86)\java\jre7\bin\java.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre7\bin\java.exe
O87 - FAEL: "TCP Query User{54F65A3B-3CE4-48C7-921C-72E5552286DC}C:\program files (x86)\java\jre7\bin\java.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jre7\bin\java.exe
O87 - FAEL: "UDP Query User{0E4FFC1F-5A9E-48F6-A7FC-902C120B54ED}C:\program files\java\jre7\bin\javaw.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "TCP Query User{7AA72DA3-A9ED-4079-8CB7-D5D1DCC2FFF7}C:\program files\java\jre7\bin\javaw.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files\java\jre7\bin\javaw.exe
O87 - FAEL: "UDP Query User{C4338F8A-6CC9-441E-ACA7-84E0CF44DC5E}C:\program files (x86)\java\jdk1.7.0_10\bin\java.exe" [In-None-P17-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jdk1.7.0_10\bin\java.exe
O87 - FAEL: "TCP Query User{5F87D1F9-EBBF-4DDA-ABCE-B0E94FE2AA58}C:\program files (x86)\java\jdk1.7.0_10\bin\java.exe" [In-None-P6-TRUE] .(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\program files (x86)\java\jdk1.7.0_10\bin\java.exe

---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) (10) - 15s
SS - Demand [2007/03/20 16:41:24] [  153792]  Adobe Version Cue CS3 {fr_FR}  (Adobe Version Cue CS3) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Version Cue CS3\Server\bin\VersionCueCS3.exe
SR - Auto   [2015/05/01 19:10:42] [   81088]  Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - Demand [2014/12/09 19:19:45] [  267440]  Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - Auto   [2015/07/08 17:27:19] [ 8016182]  Amiable Meal (Amiable Meal) . (...) - C:\Program Files (x86)\Amiable Meal\Amiable Meal.exe
SR - Auto   [2015/01/19 23:30:38] [   77128]  Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
SS - Demand [2014/05/08 12:17:43] [  654848]  FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - Demand [2015/02/13 07:55:24] [  643880]  Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe
SS - Demand [2015/07/08 20:30:48] [  148136]  Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - Disabled [2013/10/23 08:15:08] [  172192]  Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - Auto   [2015/05/20 18:39:31] [ 5491984]  TeamViewer 10 (TeamViewer) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

---\\ Recherche de clés de registre Tracing (O100) (8) - 1s
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32  =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS  =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PerformanceOptimizer_RASAPI32  =>PUP.Optional.BProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PerformanceOptimizer_RASMANCS  =>PUP.Optional.BProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWebConnect_RASAPI32  =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWebConnect_RASMANCS  =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilWebConnect_RASAPI32  =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilWebConnect_RASMANCS  =>PUP.WebConnect

---\\ Scan Additionnel (O88) (102) - 0s
C:\Program Files (x86)\FinuDBeestDeal\FQ5MJBDjSXXuID.x64.dll  =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8122A533-5CDA-4BDA-9164-8DCCBCC6A522}  =>PUP.Optional.Multiplug
C:\Program Files (x86)\RobOeSaver\tsbjo1A5Wmdy5P.x64.dll  =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9FD98115-4E21-403D-B8E6-D1359B5A96DA}  =>PUP.Optional.Multiplug
C:\Program Files (x86)\RobboiSaver\ipmWg4zQ5Or0MQ.x64.dll  =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AEE6B3FA-5CC6-480B-ACB3-42965BEC4163}  =>PUP.Optional.Multiplug
C:\Program Files (x86)\FainddBeStDeal\t9gsoUZZDLpt13.x64.dll  =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CB602FE8-DB6D-46D0-A753-7C086C7ECBB5}  =>PUP.Optional.Multiplug
C:\WINDOWS\System32\Tasks\Desk 365 RunAsStdUser  =>PUP.Optional.22Find
C:\WINDOWS\System32\Tasks\EPUpdater  =>PUP.Optional.BabSolution
C:\WINDOWS\System32\Tasks\Omiga Plus RunAsStdUser  =>PUP.Optional.OmigaPlus
C:\WINDOWS\System32\Tasks\YourFile DownloaderUpdate  =>PUP.Optional.YourFileDownloader
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{7eb89871}  =>PUP.Optional.Graftor
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BE360B8B-0F10-CA89-FC84-A5EAB71A6AF8}  =>PUP.Optional.Multiplug
HKLM\SOFTWARE\Wow6432Node\Babylon  =>PUP.Optional.Babylon
HKLM\SOFTWARE\Wow6432Node\Conduit  =>PUP.Optional.Conduit
HKLM\SOFTWARE\Wow6432Node\DataMngr  =>PUP.Optional.Datamngr
HKLM\SOFTWARE\Wow6432Node\Delta  =>Toolbar.DeltaSearch
HKLM\SOFTWARE\Wow6432Node\deskSvc  =>PUP.Optional.22Find
HKLM\SOFTWARE\Wow6432Node\Goobzo  =>PUP.Optional.Goobzo
HKLM\SOFTWARE\Wow6432Node\OKitSpace  =>PUP.Optional.Onekit
HKLM\SOFTWARE\Wow6432Node\omigaplusSvc  =>PUP.Optional.OmigaPlus
HKLM\SOFTWARE\Wow6432Node\qvo6Software  =>PUP.Optional.Qvo6
HKLM\SOFTWARE\Wow6432Node\SimplyGen  =>PUP.Optional.PredictAd
HKLM\SOFTWARE\Wow6432Node\Systweak  =>PUP.Optional.Systweak
HKLM\SOFTWARE\Wow6432Node\Torch  =>PUP.Optional.Torch
HKLM\SOFTWARE\Wow6432Node\Vittalia  =>PUP.Optional.Vittalia
HKLM\SOFTWARE\Wow6432Node\WebConnect  =>PUP.Optional.Sambreel
HKLM\SOFTWARE\Wow6432Node\webssearchesSoftware  =>PUP.Optional.WebsSearches
HKLM\SOFTWARE\Wow6432Node\YourFileDownloader  =>PUP.Optional.YourFileDownloader
HKCU\SOFTWARE\1ClickDownload  =>PUP.Optional.1ClickDownloader
HKCU\SOFTWARE\BabSolution  =>PUP.Optional.BabSolution
HKCU\SOFTWARE\Conduit  =>PUP.Optional.Conduit
HKCU\SOFTWARE\DataMngr  =>PUP.Optional.Datamngr
HKCU\SOFTWARE\DataMngr_Toolbar  =>PUP.Optional.Datamngr
HKCU\SOFTWARE\Delta  =>Toolbar.DeltaSearch
HKCU\SOFTWARE\FileScout  =>PUP.Optional.FileScout
HKCU\SOFTWARE\globalUpdate  =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\Goobzo  =>PUP.Optional.Goobzo
HKCU\SOFTWARE\InstallCore  =>PUP.Optional.InstallCore
HKCU\SOFTWARE\PerformerSoft LLC  =>PUP.Optional.PerformerSoft
HKCU\SOFTWARE\Softonic  =>PUP.Optional.Softonic
HKCU\SOFTWARE\SweetIM  =>PUP.Optional.SweetIM
HKCU\SOFTWARE\Torch  =>PUP.Optional.Torch
HKCU\SOFTWARE\YourFileDownloader  =>PUP.Optional.YourFileDownloader
HKCU\SOFTWARE\AppDataLow\Software\Conduit  =>PUP.Optional.Conduit  =>PUP.Optional.Conduit
HKCU\SOFTWARE\AppDataLow\Software\Crossrider  =>PUP.Optional.CrossRider  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\PriceGong  =>PUP.Optional.PriceGong  =>PUP.Optional.PriceGong
HKCU\SOFTWARE\AppDataLow\Software\Simplytech  =>PUP.Optional.SimplyTech  =>PUP.Optional.SimplyTech
HKCU\SOFTWARE\AppDataLow\Software\Smartbar  =>PUP.Optional.SmartBar  =>PUP.Optional.SmartBar
C:\Program Files (x86)\Desk 365  =>PUP.Optional.22Find
C:\Program Files (x86)\FainddBeStDeal  =>PUP.Optional.Multiplug
C:\Program Files (x86)\File Scout  =>PUP.Optional.FileScout
C:\Program Files (x86)\FiNdBeestDEal  =>PUP.Optional.Multiplug
C:\Program Files (x86)\FinuDBeestDeal  =>PUP.Optional.Multiplug
C:\Program Files (x86)\globalUpdate  =>PUP.Optional.GlobalUpdate
C:\Program Files (x86)\Omiga Plus  =>PUP.Optional.OmigaPlus
C:\Program Files (x86)\RobboiSaver  =>PUP.Optional.Multiplug
C:\Program Files (x86)\RobOeSaver  =>PUP.Optional.Multiplug
C:\Program Files (x86)\RoOubboSaver  =>PUP.Optional.Multiplug
C:\Program Files (x86)\SearchNewTab  =>PUP.Optional.FastSaveApp
C:\Program Files (x86)\SimilarSites  =>PUP.Optional.SimilarSites
C:\Program Files (x86)\suRf and kEep  =>PUP.Optional.SurfAndKeep
C:\Program Files (x86)\YoutubeAdblocker  =>PUP.Optional.YouTubeAdBlock
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\continnuetosavve  =>PUP.Optional.Multiplug
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SearchNewTab  =>PUP.Optional.FastSaveApp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ssafe, seaave  =>PUP.Optional.Multiplug
C:\ProgramData\Babylon  =>PUP.Optional.Babylon
C:\ProgramData\BBrroWse2seaveo  =>PUP.Optional.Multiplug
C:\ProgramData\BBrrowsse2SaavE  =>PUP.Optional.Multiplug
C:\ProgramData\continnuetosavve  =>PUP.Optional.Multiplug
C:\ProgramData\IBUpdaterService  =>PUP.Optional.InstallBrain
C:\ProgramData\SearchNewTab  =>PUP.Optional.FastSaveApp
C:\ProgramData\ssafe, seaave  =>PUP.Optional.Multiplug
C:\ProgramData\suRf and kEep  =>PUP.Optional.SurfAndKeep
C:\ProgramData\Tarma Installer  =>PUP.Optional.Tarma
C:\ProgramData\YoutubeAdblocker  =>PUP.Optional.YouTubeAdBlock
C:\Users\Karima\AppData\Roaming\BabSolution  =>PUP.Optional.BabSolution
C:\Users\Karima\AppData\Roaming\Babylon  =>PUP.Optional.Babylon
C:\Users\Karima\AppData\Roaming\Desk 365  =>PUP.Optional.22Find
C:\Users\Karima\AppData\Roaming\dll-files.com  =>PUP.Optional.DllFilesFixer
C:\Users\Karima\AppData\Roaming\okitspace  =>PUP.Optional.Onekit
C:\Users\Karima\AppData\Roaming\Omiga Plus  =>PUP.Optional.OmigaPlus
C:\Users\Karima\AppData\Roaming\PerformerSoft  =>PUP.Optional.PerformerSoft
C:\Users\Karima\AppData\Roaming\SimilarSites  =>PUP.Optional.SimilarSites
C:\Users\Karima\AppData\Roaming\SpeedAnalysis3  =>PUP.Optional.SpeedAnalysis
C:\Users\Karima\AppData\Roaming\StatusWinks  =>Toolbar.StatusWinks
C:\Users\Karima\AppData\Roaming\YourFileDownloader  =>PUP.Optional.YourFileDownloader
C:\Users\Karima\AppData\Local\CrashRpt  =>SUP.CrashReports
C:\Users\Karima\AppData\Local\globalUpdate  =>PUP.Optional.GlobalUpdate
C:\Users\Karima\AppData\Local\Mobogenie  =>PUP.Optional.Mobogenie
C:\Users\Karima\AppData\Local\onlysearch  =>PUP.Optional.OnlySearch
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\Open\command [Bad: C:\Program Files\Internet Explorer\iexplore.ex http://istart.webssearches.com/]  =>PUP.Optional.WebsSearches
HKLM\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\Open\command [Bad: C:\Program Files (x86)\Safari\Safari.exe http://istart.webssearches.com/]  =>PUP.Optional.WebsSearches
HKLM64\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32  =>PUP.Optional.MyPCBackup
HKLM64\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS  =>PUP.Optional.MyPCBackup
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PerformanceOptimizer_RASAPI32  =>PUP.Optional.BProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PerformanceOptimizer_RASMANCS  =>PUP.Optional.BProtector
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWebConnect_RASAPI32  =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateWebConnect_RASMANCS  =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilWebConnect_RASAPI32  =>PUP.WebConnect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilWebConnect_RASMANCS  =>PUP.WebConnect

---\\ Récapitulatif des détections trouvées sur votre station (48) - 0s
http://www.nicolascoolman.fr/pup-isstart/  =>PUP.Optional.IsStart
http://www.nicolascoolman.fr/pup-startsearch/  =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/pup-certifiedtoolbar/  =>PUP.Optional.CertifiedToolbar
http://www.nicolascoolman.fr/hijacker-qvo6/  =>PUP.Optional.Qvo6
http://www.nicolascoolman.fr/pup-mutiplug/  =>PUP.Optional.Multiplug
http://www.nicolascoolman.fr/hijacker-22find/  =>PUP.Optional.22Find
http://www.nicolascoolman.fr/hijacker-babsolution/  =>PUP.Optional.BabSolution
http://www.nicolascoolman.fr/hijacker-omigaplus/  =>PUP.Optional.OmigaPlus
http://www.nicolascoolman.fr/pup-yourfiledownloader/  =>PUP.Optional.YourFileDownloader
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Graftor
http://www.nicolascoolman.fr/pup-babylon/  =>PUP.Optional.Babylon
http://www.nicolascoolman.fr/toolbar-conduit/  =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/pup-datamngr/  =>PUP.Optional.Datamngr
http://www.nicolascoolman.fr/toolbar-deltasearch/  =>Toolbar.DeltaSearch
http://www.nicolascoolman.fr/pup-goobzo/  =>PUP.Optional.Goobzo
http://www.nicolascoolman.fr/pup-onekit/  =>PUP.Optional.Onekit
http://www.nicolascoolman.fr/adware-predictad/  =>PUP.Optional.PredictAd
http://www.nicolascoolman.fr/pup-systweak/  =>PUP.Optional.Systweak
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Torch
http://www.nicolascoolman.fr/pup-vittalia/  =>PUP.Optional.Vittalia
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Sambreel
http://www.nicolascoolman.fr/hijacker-webssearches/  =>PUP.Optional.WebsSearches
http://www.nicolascoolman.fr/pup-1clickdownloader/  =>PUP.Optional.1ClickDownloader
http://www.nicolascoolman.fr/pup-filescout/  =>PUP.Optional.FileScout
http://www.nicolascoolman.fr/pup-globalupdate/  =>PUP.Optional.GlobalUpdate
http://www.nicolascoolman.fr/adware-installcore/  =>PUP.Optional.InstallCore
http://www.nicolascoolman.fr/blog  =>PUP.Optional.PerformerSoft
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Softonic
http://www.nicolascoolman.fr/pup-sweetim/  =>PUP.Optional.SweetIM
http://www.nicolascoolman.fr/pup-crossrider/  =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/adware-pricegong/  =>PUP.Optional.PriceGong
http://www.nicolascoolman.fr/blog  =>PUP.Optional.SimplyTech
http://www.nicolascoolman.fr/hijacker-smartbar/  =>PUP.Optional.SmartBar
http://www.nicolascoolman.fr/adware-fastsaveapp/  =>PUP.Optional.FastSaveApp
http://www.nicolascoolman.fr/adware-similarsites/  =>PUP.Optional.SimilarSites
http://www.nicolascoolman.fr/adware-surfandkeep/  =>PUP.Optional.SurfAndKeep
http://www.nicolascoolman.fr/blog  =>PUP.Optional.YouTubeAdBlock
http://www.nicolascoolman.fr/adware-installbrain/  =>PUP.Optional.InstallBrain
http://www.nicolascoolman.fr/pup-tarma/  =>PUP.Optional.Tarma
http://www.nicolascoolman.fr/blog  =>PUP.Optional.DllFilesFixer
http://www.nicolascoolman.fr/pup-speedanalysis/  =>PUP.Optional.SpeedAnalysis
http://www.nicolascoolman.fr/blog  =>Toolbar.StatusWinks
http://www.nicolascoolman.fr/blog  =>SUP.CrashReports
http://www.nicolascoolman.fr/pup-mobogenie/  =>PUP.Optional.Mobogenie
http://www.nicolascoolman.fr/blog  =>PUP.Optional.OnlySearch
http://www.nicolascoolman.fr/pup-mypcbackup/  =>PUP.Optional.MyPCBackup
http://www.nicolascoolman.fr/pup-bprotector/  =>PUP.Optional.BProtector
http://www.nicolascoolman.fr/blog  =>PUP.WebConnect

~ End of the scan, 239483 items in 603 seconds (1401)(0)()