~ ZHPDiag v2015.7.14.89 Par Nicolas Coolman (2015/07/14) ~ Démarré par CLAUDE (Administrator) (2015/07/15 08:44:18) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\CLAUDE\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\CLAUDE\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Deactivate ~ Démarrage du système: Normal (Normal boot) ~ Windows 7, 64-bit (Build 7600) ---\\ Navigateurs Internet (1) - 0s MSIE: Internet Explorer v9.0.8112.16421 ---\\ Logiciels de protection (2) - 2s Avast Free Antivirus v10.2.2218 Malwarebytes Anti-Malware version 2.1.8.1057 ---\\ Logiciels d'optimisation (1) - 3s CCleaner v5.06 ---\\ Surveillance de Logiciels (1) - 3s Adobe Reader XI ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 15 Stepping 2, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) ~ Total physical RAM (KB): 3144184 ~ System Restore: Activé (Enable) ~ System drive C: has 67 GB free of 140 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: CLAUDE-PC ~ User Name: CLAUDE ~ Logged in as Administrator ---\\ Enumération des unités disques (7) - 0s ~ Drive C: has 67 GB free of 140 GB (System) ~ Drive D: has 14 GB free of 20 GB ~ Drive I: has 64 GB free of 77 GB ~ Drive J: has 60 GB free of 70 GB ~ Drive K: has 73 GB free of 75 GB ~ Drive L: has 71 GB free of 80 GB ~ Drive M: has 67 GB free of 80 GB ---\\ Recherche particulière de fichiers génériques (23) - 1s [MD5.9AAAEC8DAC27AA17B053E6352AD233AE] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2870272] [MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568] [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024] [MD5.A4F6142CABA82FB7293ECE5FF864B440] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1392128] [MD5.DA3E2A6FA9660CC75B471530CE88453A] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [389632] [MD5.F2521C3173E6027B3FBD5E44272BDF6C] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [19968] [MD5.DB9D6C6B2CD95A9CA414D045B627422E] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [499200] [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128] [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160] [MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456] [MD5.9C253CE7311CA60FC11C774692A13208] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400] [MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368] [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472] [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224] [MD5.040D62A9D8AD28922632137ACDD984F2] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [157696] [MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [259072] [MD5.9A6089B056EA1B83B36424FC9D0A300E] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1653096] [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280] [MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [130048] [MD5.9706B84DBABFC4B4CA46C5A82B14DFA3] - (.Microsoft Corporation - Microsoft RDP Device redirector.) () -- C:\Windows\System32\drivers\rdpdr.sys [165376] [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184] [MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [99840] [MD5.9E425AC5C9A5A973273D169F43B4F5E1] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295792] ---\\ Processus lancés (3) - 1s [MD5.54236E79A44F909612391C8A2D70D512] - (.Avast Software s.r.o. - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336] [PID.1220] [MD5.0A62A2153A8D8C6EB00AB969764A90D6] - (.TomTom - Windows Service for TomTom HOME.) -- J:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe [93040] [PID.1920] [MD5.65C6AA484AD2287D20541C7735989437] - (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496] [PID.2604] ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (21) - 0s G0 - GCSP: Preferences [User Data\Default][HomePage] http://localhost:18821/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://localhost:27275/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://localhost:7754/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://ui.ff.avast.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://clients2.google.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://extensionanalytics.net/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.google-analytics.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com/ G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr/ G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.msn.com/ G2 - GCE: Extension [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Docs G2 - GCE: Extension [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Extension [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Extension [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__ G2 - GCE: Extension [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc. G2 - GCE: Extension [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security G2 - GCE: Extension [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Extension [User Data\Default] [ocifcklkibdehekfnmflempfgjhbedch] __MSG_name__ G2 - GCE: Extension [User Data\Default] [pdnkcidphdcakpkheohlhocaicfamjie] Google Chrome manifest =>.Google Inc. G2 - GCE: Extension [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (6) - 1s P2 - FPN: [HKCU] [@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf] - (.Tracker Software Products Ltd..) -- J:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- J:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll P2 - FPN: [HKLM] [@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf] - (.Tracker Software Products Ltd..) -- J:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf] - (.Foxit Corporation.) -- J:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll P2 - FPN: [HKLM] [@tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf] - (.Tracker Software Products Ltd..) -- J:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll P2 - FPN: [HKLM] [@videolan.org/vlc,version=1.1.11] - (.the VideoLAN Team.) -- J:\Program Files (x86)\VideoLAN\VLC\npvlc.dll ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (21) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ ---\\ Internet Explorer, Proxy Management (R5) (3) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ---\\ Hosts file redirection (O1) (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (0) ---\\ Browser Helper Object de navigateur (BHO) (O2) (3) - 0s O2 - BHO: HP Print Enhancer [64Bits] - {0347C33E-8762-4905-BF09-768834316C61} (Orphean) O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.Avast Software s.r.o. - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll O2 - BHO: HP Smart BHO Class [64Bits] - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} (Orphean) ---\\ Applications lancées au démarrage du sytème (O4) (14) - 1s O4 - HKCU\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\CLAUDE\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKCU\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- J:\Program Files (x86)\Glary Utilities 5\StartupManager.exe O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.Avast Software s.r.o. - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe O4 - HKUS\S-1-5-21-288991301-3345944795-3614865115-1001\..\Run: [RESTART_STICKY_NOTES] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe O4 - HKUS\S-1-5-21-288991301-3345944795-3614865115-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O4 - HKUS\S-1-5-21-288991301-3345944795-3614865115-1001\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\CLAUDE\AppData\Local\Google\Update\GoogleUpdate.exe O4 - HKUS\S-1-5-21-288991301-3345944795-3614865115-1001\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- J:\Program Files (x86)\Glary Utilities 5\StartupManager.exe ---\\ Modification Domaine/Adresses DNS (O17) (3) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Liste des services NT non Microsoft et non désactivés (O23) (9) - 1s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe O23 - Service: Apple Mobile Device (Apple Mobile Device) . (.Apple Inc. - YSLoader.exe.) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o. - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe O23 - Service: HOSTS Anti-PUPs (HOSTS Anti-PUPs) . (...) - C:\Program Files (x86)\Hosts_Anti_Adwares_PUPs\HOSTS_Anti-Adware.exe (.not file.) O23 - Service: Process Monitor (LVPrcS64) . (.Logitech Inc. - Logitech LVPrcSrv Module..) - C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - J:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe O23 - Service: TomTomHOMEService (TomTomHOMEService) . (.TomTom - Windows Service for TomTom HOME.) - J:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe ---\\ Tâches planifiées en automatique (O39) (42) - 6s [MD5.00000000000000000000000000000000] [APT] [Ad-Aware Update (Weekly)] (...) -- C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe (.not file.) [0] [MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104] [MD5.00000000000000000000000000000000] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_18_0_0_203_pepper.exe (.not file.) [0] [MD5.C50B830CA9BCD63754928CD6C0E2B114] [APT] [avast! Emergency Update] (.Avast Software s.r.o..) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1298688] [MD5.EE526B0428581B57FFC571FF57309E28] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6369048] [MD5.7C6D524C78A1722AD987B9E47AC1FEE2] [APT] [DropboxUpdateTaskUserS-1-5-21-288991301-3345944795-3614865115-1001Core] (.Dropbox, Inc..) -- C:\Users\CLAUDE\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512] [MD5.7C6D524C78A1722AD987B9E47AC1FEE2] [APT] [DropboxUpdateTaskUserS-1-5-21-288991301-3345944795-3614865115-1001UA] (.Dropbox, Inc..) -- C:\Users\CLAUDE\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512] [MD5.19FE5E2AA8C95076E2C8E9942937C933] [APT] [GlaryInitialize 5] (.Glarysoft Ltd.) -- J:\Program Files (x86)\Glary Utilities 5\Initialize.exe [118048] [MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107912] [MD5.51508F0C2476177E50C31B0BBFBF1BDB] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107912] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-288991301-3345944795-3614865115-1001Core] (.Google Inc..) -- C:\Users\CLAUDE\AppData\Local\Google\Update\GoogleUpdate.exe [116648] [MD5.506708142BC63DABA64F2D3AD1DCD5BF] [APT] [GoogleUpdateTaskUserS-1-5-21-288991301-3345944795-3614865115-1001UA] (.Google Inc..) -- C:\Users\CLAUDE\AppData\Local\Google\Update\GoogleUpdate.exe [116648] [MD5.264654DCBEAFF4C79723484DCD1107F4] [APT] [SyncBack M‚dion J] (.2BrightSparks.) -- J:\Program Files (x86)\2BrightSparks\SyncBack\SyncBack.exe [2721536] [MD5.264654DCBEAFF4C79723484DCD1107F4] [APT] [SyncBack M‚dion K] (.2BrightSparks.) -- J:\Program Files (x86)\2BrightSparks\SyncBack\SyncBack.exe [2721536] [MD5.264654DCBEAFF4C79723484DCD1107F4] [APT] [SyncBack M‚dion L] (.2BrightSparks.) -- J:\Program Files (x86)\2BrightSparks\SyncBack\SyncBack.exe [2721536] [MD5.264654DCBEAFF4C79723484DCD1107F4] [APT] [SyncBack M‚dion M] (.2BrightSparks.) -- J:\Program Files (x86)\2BrightSparks\SyncBack\SyncBack.exe [2721536] [MD5.00000000000000000000000000000000] [APT] [{17F3D7CE-94D5-43B5-BF02-768100288E54}] (.2BrightSparks.) -- C:\Users\CLAUDE\Desktop\simple_keyfinder.exe (.not file.) [0] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\SyncBack J,K,L,M.job [450] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\SyncBack Médion J.job [452] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\SyncBack Médion K.job [452] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\SyncBack Médion L.job [452] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\Tasks\SyncBack Médion M.job [452] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\7701728723537177192621681831917319888172832.ico [285478] O39 - APT: Ad-Aware Update (Weekly) - (..) -- C:\Windows\System32\Tasks\Ad-Aware Update (Weekly) [3622] O39 - APT: avast! Emergency Update - (.Avast Software s.r.o..) -- C:\Windows\System32\Tasks\avast! Emergency Update [4182] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\CreateChoiceProcessTask [3540] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\desktop.ini [133] O39 - APT: GlaryInitialize 5 - (.Glarysoft Ltd.) -- C:\Windows\System32\Tasks\GlaryInitialize 5 [3316] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe [3040] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\SyncBack J,K,L,M [3892] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\SyncBack Médion J [3894] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\SyncBack Médion K [3894] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\SyncBack Médion L [3894] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\SyncBack Médion M [3894] O39 - APT: {17F3D7CE-94D5-43B5-BF02-768100288E54} - (.2BrightSparks.) -- C:\Windows\System32\Tasks\{17F3D7CE-94D5-43B5-BF02-768100288E54} [2958] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{2D9F72EA-7EB0-4685-95C1-E41B0CC65711} [3188] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{52EC0834-E1D5-43C7-A7C5-4D248B3D1158} [2990] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{5620B53B-8007-4303-90A5-2B9EF268B0EA} [3052] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{77BFEF49-D642-44FA-B4A8-9CF5D73B5F29} [3206] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{A8AEF7CA-9F8B-4C72-AB61-87FA5F38B130} [3060] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{BE70EFF9-C1F1-4C68-A9B4-68E552B4D835} [3206] O39 - APT:Automatic Planified Task - (...) -- C:\Windows\System32\Tasks\{DAE578AD-1507-4504-8775-302978DFBBCB} [2944] ---\\ Logiciels installés (O42) (95) - 16s O42 - Logiciel: Canon SELPHY CP780 - (...) [HKLM][64Bits] -- Canon SELPHY CP780 O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner O42 - Logiciel: CPUID HWMonitor 1.24 - (...) [HKLM][64Bits] -- CPUID HWMonitor_is1 O42 - Logiciel: HP Imaging Device Functions 14.0 - (.HP.) [HKLM][64Bits] -- HP Imaging Device Functions O42 - Logiciel: HP Smart Web Printing 4.60 - (.HP.) [HKLM][64Bits] -- HP Smart Web Printing O42 - Logiciel: HP Solution Center 14.0 - (.HP.) [HKLM][64Bits] -- HP Solution Center & Imaging Support Tools O42 - Logiciel: HP Customer Participation Program 14.0 - (.HP.) [HKLM][64Bits] -- HPExtendedCapabilities O42 - Logiciel: Recuva - (.Piriform.) [HKLM][64Bits] -- Recuva O42 - Logiciel: Shop for HP Supplies - (.HP.) [HKLM][64Bits] -- Shop for HP Supplies O42 - Logiciel: Speccy - (.Piriform.) [HKLM][64Bits] -- Speccy O42 - Logiciel: WhoCrashed 3.00 - (.Resplendence Software Projects Sp..) [HKLM][64Bits] -- WhoCrashed_is1 O42 - Logiciel: HP Photosmart Wireless B110 All-In-One Driver Software 14.0 Rel. 7 - (.HP.) [HKLM][64Bits] -- {59C83C08-63F4-4AEC-81D6-392C5E23B843} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM][64Bits] -- {987FE247-4E69-4A2E-A961-D14F901FDBF6} O42 - Logiciel: Folder Colorizer version 1.3.3 - (.Softorino.) [HKLM][64Bits] -- {A133E9CD-2879-4F30-87D4-1604AFD5C5CC}_is1 O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {B678797F-DF38-4556-8A31-8B818E261868} O42 - Logiciel: Microsoft Fix it Center - (.Microsoft Corporation.) [HKLM][64Bits] -- {B7588D45-AFDC-4C93-9E2E-A100F3554B64} O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {F46AA0F1-E284-4878-A462-5F11B9166C0E} O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {FF21C3E6-97FD-474F-9518-8DCBE94C2854} O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- avast O42 - Logiciel: Glary Utilities 5.28 - (.Glarysoft Ltd.) [HKLM][64Bits] -- Glary Utilities 5 O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- KB931906 O42 - Logiciel: Logitech Vid HD - (.Logitech Inc...) [HKLM][64Bits] -- Logitech Vid O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 O42 - Logiciel: Picasa 3 - (.Google, Inc..) [HKLM][64Bits] -- Picasa 3 O42 - Logiciel: Canon Utilities SELPHY Photo Print - (.Canon Inc..) [HKLM][64Bits] -- SELPHY Photo Print O42 - Logiciel: Canon Utilities SELPHY Print Contents 1.0.0 - (.Canon Inc..) [HKLM][64Bits] -- SELPHY Print Contents 100 O42 - Logiciel: SFR - Kit de connexion - (.SFR.) [HKLM][64Bits] -- SFR_Kit O42 - Logiciel: Shockwave - (...) [HKLM][64Bits] -- Shockwave O42 - Logiciel: SpeedFan (remove only) - (...) [HKLM][64Bits] -- SpeedFan O42 - Logiciel: WinMend Folder Hidden 1.4.9 - (.WinMend.com.) [HKLM][64Bits] -- WinMend Folder Hidden_is1 O42 - Logiciel: Archiveur WinRAR - (...) [HKLM][64Bits] -- WinRAR archiver O42 - Logiciel: YoWindow - (.RepkaSoft.) [HKLM][64Bits] -- yowindow O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPFix_is1 O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM][64Bits] -- {0E09BE17-EDEA-42CA-8974-42A587F51510} O42 - Logiciel: Windows Media Center Add-in for Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EDBEB2B-7C8D-42E6-8312-0F84394A3223} O42 - Logiciel: Security Update for CAPICOM (KB931906) - (.Microsoft Corporation.) [HKLM][64Bits] -- {0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {18455581-E099-4BA8-BC6B-F34B2F06600C} O42 - Logiciel: Nero MediaHub 10 - (.Nero AG.) [HKLM][64Bits] -- {1F7FB68F-52F6-46A3-B42F-38CE46295AE5} O42 - Logiciel: Google Toolbar for Internet Explorer - (.Google Inc..) [HKLM][64Bits] -- {2318C2B1-4965-11d4-9B18-009027A5CD4F} O42 - Logiciel: PIF DESIGNER2.1 - (...) [HKLM][64Bits] -- {23B59B9F-C360-11D7-875B-0090CC005647} O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM][64Bits] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F} O42 - Logiciel: Nero DiscSpeed 10 - (.Nero AG.) [HKLM][64Bits] -- {34490F4E-48D0-492E-8249-B48BECF0537C} O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {400C31E4-796F-4E86-8FDC-C3C4FACC6847} O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {446CC8CE-0E90-44F7-ADD0-774B243EF090} O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E} O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A} O42 - Logiciel: Nero BurnRights 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {555868C6-49FB-484F-BB43-8980651A1B00} O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A} O42 - Logiciel: Nero InfoTool 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {66049135-9659-4AAD-9169-9CCA269EBB3E} O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM][64Bits] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38} O42 - Logiciel: Hewlett-Packard ACLM.NET v1.1.0.0 - (.Hewlett-Packard.) [HKLM][64Bits] -- {6F340107-F9AA-47C6-B54C-C3A19F11553F} O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {758C8301-2696-4855-AF45-534B1200980A} O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {78002155-F025-4070-85B3-7C0453561701} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM][64Bits] -- {7A2BB1C8-903D-4585-9F3B-CADD67D07D37} O42 - Logiciel: Nero 7 Essentials - (.Nero AG.) [HKLM][64Bits] -- {81AB1374-098A-43CB-BE57-31CEB5EB1036} O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM][64Bits] -- {846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE} O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..) [HKLM][64Bits] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533} O42 - Logiciel: Compatibility Pack for the 2007 Office system - (.Microsoft Corporation.) [HKLM][64Bits] -- {90120000-0020-0409-0000-0000000FF1CE} O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} O42 - Logiciel: Nero Multimedia Suite 10 Essentials - (.Nero AG.) [HKLM][64Bits] -- {93C987F5-6563-4D29-A7C0-7DC85471D7C3} O42 - Logiciel: Nero BurnRights 10 - (.Nero AG.) [HKLM][64Bits] -- {943CFD7D-5336-47AF-9418-E02473A5A517} O42 - Logiciel: Internet TV pour Windows Media Center - (.Microsoft Corporation.) [HKLM][64Bits] -- {9D318C86-AF4C-409F-A6AC-7183FF4CF424} O42 - Logiciel: Google+ Auto Backup - (.Google.) [HKLM][64Bits] -- {A50DE037-B5C0-4C8A-8049-B0C576B313D1} O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824147215} O42 - Logiciel: Adobe Reader XI (11.0.12) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM][64Bits] -- {BB05590A-6602-43F3-A400-77EA0976BC0A} O42 - Logiciel: Nero DiscSpeed 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C18A0418-442A-4186-AF98-D08F5054A2FC} O42 - Logiciel: Microsoft AutoRoute 2010 - (.Microsoft Corporation.) [HKLM][64Bits] -- {C82185E8-C27B-4EF4-2010-3333BC2C2B6D} O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} O42 - Logiciel: CANAL+ pour Windows Media Center - (.Microsoft Corporation.) [HKLM][64Bits] -- {E2A6B1A0-C1E3-4311-BF86-EAF18841FD67} O42 - Logiciel: ScanToWeb - (...) [HKLM][64Bits] -- {EBAE381B-60A6-4863-AA9F-FCAB755BC9E5} O42 - Logiciel: PL-2303 USB-to-Serial - (.Prolific Technology INC.) [HKLM][64Bits] -- {ECC3713C-08A4-40E3-95F1-7D0704F1CE5E} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27} O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01 O42 - Logiciel: Nero InfoTool 10 - (.Nero AG.) [HKLM][64Bits] -- {F412B4AF-388C-4FF5-9B2F-33DB1C536953} O42 - Logiciel: Nero MediaHub 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F467862A-D9CA-47ED-8D81-B4B3C9399272} O42 - Logiciel: Nero 10 Movie ThemePack Basic - (.Nero AG.) [HKLM][64Bits] -- {F5CB822F-B365-43D1-BCC0-4FDA1A2017A7} O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702} O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM][64Bits] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65} O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} O42 - Logiciel: Realtek AC'97 Audio - (...) [HKLM][64Bits] -- {FB08F381-6533-4108-B7DD-039E11FBC27E} O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKCU][64Bits] -- Dropbox O42 - Logiciel: Google Chrome - (.Google Inc..) [HKCU][64Bits] -- Google Chrome O42 - Logiciel: Google+ Auto Backup - (.Google, Inc..) [HKCU][64Bits] -- Google+ Auto Backup O42 - Logiciel: Microsoft SkyDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- SkyDriveSetup.exe ---\\ HKCU & HKLM Software Keys (114) - 16s HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\AdwCleaner HKLM\SOFTWARE\Wow6432Node\Ahead HKLM\SOFTWARE\Wow6432Node\Apache Software Foundation HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc. HKLM\SOFTWARE\Wow6432Node\Apple Inc. HKLM\SOFTWARE\Wow6432Node\AVAST Software HKLM\SOFTWARE\Wow6432Node\Canon HKLM\SOFTWARE\Wow6432Node\Canon_Inc_IC HKLM\SOFTWARE\Wow6432Node\Crystal Dew World HKLM\SOFTWARE\Wow6432Node\DivXNetworks HKLM\SOFTWARE\Wow6432Node\EPSON HKLM\SOFTWARE\Wow6432Node\EverStrike HKLM\SOFTWARE\Wow6432Node\Foxit Software HKLM\SOFTWARE\Wow6432Node\GlarySoft HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard HKLM\SOFTWARE\Wow6432Node\iColorFolder HKLM\SOFTWARE\Wow6432Node\InstallShield HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\LogiShrd HKLM\SOFTWARE\Wow6432Node\Logitech HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\NCH Software HKLM\SOFTWARE\Wow6432Node\NCH Swift Sound HKLM\SOFTWARE\Wow6432Node\Nero HKLM\SOFTWARE\Wow6432Node\Neuf HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\Opera Software HKLM\SOFTWARE\Wow6432Node\Realtek HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\repkasoft HKLM\SOFTWARE\Wow6432Node\Revenger inc. HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SpeedFan HKLM\SOFTWARE\Wow6432Node\SSC Service Utility HKLM\SOFTWARE\Wow6432Node\TomTom HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WebSupergoo HKLM\SOFTWARE\Wow6432Node\Windows HKLM\SOFTWARE\Wow6432Node\Winmend HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\Ahead HKCU\SOFTWARE\ALWIL Software HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\ASProtect HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\Baixaki HKCU\SOFTWARE\BitDefender HKCU\SOFTWARE\Canon HKCU\SOFTWARE\coverXP HKCU\SOFTWARE\Digital Photo Software HKCU\SOFTWARE\Dropbox HKCU\SOFTWARE\DropboxUpdate HKCU\SOFTWARE\EasyVideoSoft HKCU\SOFTWARE\Foxit Software HKCU\SOFTWARE\GlarySoft HKCU\SOFTWARE\Google HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\HP HKCU\SOFTWARE\iColorFolder HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\ImgBurn HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\JEDI-VCL HKCU\SOFTWARE\Keseling HKCU\SOFTWARE\LAMBERT Jérôme HKCU\SOFTWARE\Lavalys HKCU\SOFTWARE\Leadertech HKCU\SOFTWARE\LogiShrd HKCU\SOFTWARE\Logitech HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Malwarebytes' Anti-Malware HKCU\SOFTWARE\MJLSoftware HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\MyDefrag HKCU\SOFTWARE\NCH Software HKCU\SOFTWARE\NCH Swift Sound HKCU\SOFTWARE\Nero HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Novell HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\PC SOFT HKCU\SOFTWARE\PhotoFiltre HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\repkasoft HKCU\SOFTWARE\Resplendence Sp HKCU\SOFTWARE\Revenger inc. HKCU\SOFTWARE\Samsung HKCU\SOFTWARE\SDP HKCU\SOFTWARE\Skype HKCU\SOFTWARE\Softorino HKCU\SOFTWARE\SpeedFan HKCU\SOFTWARE\Sysinternals HKCU\SOFTWARE\TomTom HKCU\SOFTWARE\Tracker Software HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software ---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43) (238) - 14s O43 - CFD: 2014/10/12 14:33:30 - [] RD -- C:\Program Files (x86)\Adobe O43 - CFD: 2014/09/27 18:30:14 - [] D -- C:\Program Files (x86)\Apple Software Update O43 - CFD: 2014/09/27 18:29:43 - [] D -- C:\Program Files (x86)\Bonjour O43 - CFD: 2013/02/07 09:53:48 - [] RD -- C:\Program Files (x86)\Canon O43 - CFD: 2014/09/27 18:29:19 - [] RD -- C:\Program Files (x86)\Common Files O43 - CFD: 2013/02/09 11:56:16 - [] RD -- C:\Program Files (x86)\Dipisoft O43 - CFD: 2013/04/01 10:02:51 - [] RD -- C:\Program Files (x86)\Google O43 - CFD: 2013/02/09 23:19:22 - [] RD -- C:\Program Files (x86)\Hewlett-Packard O43 - CFD: 2014/11/26 22:56:15 - [] RD -- C:\Program Files (x86)\HP O43 - CFD: 2013/02/10 16:12:57 - [] RD -- C:\Program Files (x86)\INFORAD_DRIVERS O43 - CFD: 2015/04/17 11:27:23 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 2013/10/31 10:39:37 - [] RD -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 2013/10/22 14:48:09 - [] RD -- C:\Program Files (x86)\Java O43 - CFD: 2014/07/21 18:45:11 - [] RD -- C:\Program Files (x86)\Lavasoft O43 - CFD: 2013/02/11 12:51:27 - [] RD -- C:\Program Files (x86)\Logitech O43 - CFD: 2013/02/11 12:51:58 - [] RD -- C:\Program Files (x86)\MarkAny O43 - CFD: 2013/02/11 15:53:18 - [] RD -- C:\Program Files (x86)\Microsoft O43 - CFD: 2013/02/11 15:53:53 - [] RD -- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2 O43 - CFD: 2013/02/11 17:33:10 - [] RD -- C:\Program Files (x86)\Microsoft Office O43 - CFD: 2013/02/11 17:33:19 - [] RD -- C:\Program Files (x86)\Microsoft Picture It! PhotoPub O43 - CFD: 2015/05/16 18:35:40 - [] RD -- C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 2013/02/11 19:40:12 - [] RD -- C:\Program Files (x86)\Microsoft SkyDrive O43 - CFD: 2013/02/11 19:41:24 - [] RD -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 2013/02/11 19:41:58 - [] RD -- C:\Program Files (x86)\Microsoft Works O43 - CFD: 2013/02/11 19:42:26 - [] RD -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 2013/02/11 19:42:55 - [] RD -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 2013/02/11 19:43:37 - [] RD -- C:\Program Files (x86)\MSBuild O43 - CFD: 2014/01/07 20:13:11 - [] D -- C:\Program Files (x86)\MSECache O43 - CFD: 2013/02/12 09:21:18 - [] RD -- C:\Program Files (x86)\MSN Toolbar O43 - CFD: 2013/02/12 09:22:30 - [] RD -- C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 2013/02/13 16:01:49 - [] RD -- C:\Program Files (x86)\Nero O43 - CFD: 2015/05/11 12:08:21 - [] D -- C:\Program Files (x86)\Opera O43 - CFD: 2013/02/13 16:02:19 - [] RD -- C:\Program Files (x86)\Prolific Technology INC O43 - CFD: 2014/11/28 17:19:16 - [] RD -- C:\Program Files (x86)\Realtek O43 - CFD: 2013/02/13 17:22:53 - [] RD -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 2013/02/13 17:24:44 - [] RD -- C:\Program Files (x86)\SFR O43 - CFD: 2014/03/17 16:44:26 - [] RD -- C:\Program Files (x86)\SpeedFan O43 - CFD: 2013/02/13 17:25:15 - [] RD -- C:\Program Files (x86)\SSC Service Utility O43 - CFD: 2014/11/27 20:08:20 - [0] HD -- C:\Program Files (x86)\Temp O43 - CFD: 2013/02/13 17:25:25 - [] RD -- C:\Program Files (x86)\TomTom DesktopSuite O43 - CFD: 2013/02/13 17:25:50 - [] RD -- C:\Program Files (x86)\TomTom International B.V O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 2013/02/13 17:26:40 - [] RD -- C:\Program Files (x86)\VIA O43 - CFD: 2013/02/13 17:27:02 - [] RD -- C:\Program Files (x86)\Windows Defender O43 - CFD: 2014/11/27 19:39:20 - [] RD -- C:\Program Files (x86)\Windows Live O43 - CFD: 2013/02/13 20:19:04 - [] RD -- C:\Program Files (x86)\Windows Mail O43 - CFD: 2014/11/28 17:19:17 - [] RD -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 2013/02/13 20:21:23 - [] RD -- C:\Program Files (x86)\Windows NT O43 - CFD: 2013/02/13 20:21:41 - [] RD -- C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 2013/02/13 20:21:56 - [] RD -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 2013/02/14 10:14:30 - [] RD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 2013/02/14 10:14:54 - [] RD -- C:\Program Files (x86)\WinRAR O43 - CFD: 2013/02/14 10:15:10 - [] RD -- C:\Program Files (x86)\YoWindow O43 - CFD: 2012/11/05 18:07:53 - [] HD -- C:\Program Files (x86)\Zero G Registry O43 - CFD: 2011/01/16 20:13:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks O43 - CFD: 2010/11/30 17:19:16 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2011/02/28 16:32:00 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2015/07/01 19:15:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software O43 - CFD: 2012/04/12 09:09:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Free O43 - CFD: 2010/12/26 17:40:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon SELPHY CP780 O43 - CFD: 2010/12/26 17:41:00 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities O43 - CFD: 2015/06/08 08:16:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 2011/06/22 14:43:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\coverXP O43 - CFD: 2014/01/14 10:29:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID O43 - CFD: 2011/01/11 10:29:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo O43 - CFD: 2011/12/25 19:19:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Digital Photo Software O43 - CFD: 2012/10/31 17:11:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dipisoft O43 - CFD: 2010/12/09 20:41:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Genius Professional Edition O43 - CFD: 2015/02/10 15:03:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folder Colorizer O43 - CFD: 2011/11/29 10:55:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader 5.0 O43 - CFD: 2010/11/30 17:19:05 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2015/06/28 08:20:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 O43 - CFD: 2013/12/18 09:30:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth O43 - CFD: 2014/11/26 23:08:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 2013/01/04 18:32:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iColorFolder O43 - CFD: 2011/07/27 12:13:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\INFORAD O43 - CFD: 2014/09/27 18:31:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 2010/11/30 17:49:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech O43 - CFD: 2009/07/14 06:57:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/07/05 08:40:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 2013/02/01 19:40:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 2015/05/13 09:38:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 2011/03/26 18:42:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mon-logiciel-gratuit.com O43 - CFD: 2012/02/19 11:45:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyDefrag v4.3.1 O43 - CFD: 2011/01/08 13:32:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero O43 - CFD: 2012/04/24 20:24:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 7 Essentials O43 - CFD: 2011/11/28 19:00:19 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer O43 - CFD: 2011/11/04 19:15:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre O43 - CFD: 2010/12/18 19:49:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3 O43 - CFD: 2012/01/03 19:20:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PosteRazor O43 - CFD: 2014/01/26 10:00:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva O43 - CFD: 2012/03/30 10:32:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung O43 - CFD: 2012/02/10 10:53:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SFR O43 - CFD: 2011/01/26 18:45:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Souris Microsoft O43 - CFD: 2014/01/26 10:03:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy O43 - CFD: 2010/12/01 13:31:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan O43 - CFD: 2014/11/26 23:04:07 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2009/07/14 17:35:02 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 2015/06/08 14:48:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom O43 - CFD: 2013/01/06 20:22:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 2013/01/02 16:33:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoRotator O43 - CFD: 2014/07/29 09:29:51 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed O43 - CFD: 2013/02/02 09:43:31 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 2013/12/11 10:20:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMend O43 - CFD: 2010/12/08 20:42:03 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2014/10/12 10:49:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YoWindow O43 - CFD: 2015/07/14 20:03:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP O43 - CFD: 2014/09/27 18:31:28 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 2014/10/12 14:33:33 - [] D -- C:\ProgramData\Adobe O43 - CFD: 2014/11/27 19:39:36 - [] D -- C:\ProgramData\albumphoto O43 - CFD: 2010/11/30 17:52:34 - [] D -- C:\ProgramData\Alwil Software O43 - CFD: 2014/11/27 19:39:34 - [] D -- C:\ProgramData\Apple O43 - CFD: 2014/09/27 18:31:00 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 2014/10/02 15:53:25 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 2010/11/30 17:34:54 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 2010/12/26 17:40:38 - [] D -- C:\ProgramData\CanonCP O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 2015/06/16 12:13:51 - [] D -- C:\ProgramData\Dropbox O43 - CFD: 2014/11/27 19:39:35 - [] D -- C:\ProgramData\EPSON O43 - CFD: 2010/11/30 17:34:54 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 2015/06/28 08:27:12 - [] D -- C:\ProgramData\GlarySoft O43 - CFD: 2014/11/27 19:39:35 - [] D -- C:\ProgramData\Google O43 - CFD: 2014/11/26 22:57:31 - [] D -- C:\ProgramData\HP O43 - CFD: 2014/11/26 22:57:00 - [] D -- C:\ProgramData\HP Product Assistant O43 - CFD: 2014/07/21 18:44:54 - [] D -- C:\ProgramData\Lavasoft O43 - CFD: 2010/11/30 17:47:14 - [] D -- C:\ProgramData\LogiShrd O43 - CFD: 2014/06/22 08:35:00 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 2010/11/30 17:34:54 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 2015/07/08 17:02:29 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 2015/07/15 07:57:13 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 2010/11/30 17:34:54 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 2012/04/24 20:21:25 - [] D -- C:\ProgramData\Nero O43 - CFD: 2010/12/08 21:06:35 - [] D -- C:\ProgramData\NVIDIA Corporation O43 - CFD: 2014/11/27 19:39:36 - [] D -- C:\ProgramData\Samsung O43 - CFD: 2014/11/27 19:39:36 - [] D -- C:\ProgramData\Skype O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 2011/02/06 21:02:14 - [] D -- C:\ProgramData\Sun O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 2012/03/23 19:17:59 - [] D -- C:\ProgramData\TomTom O43 - CFD: 2010/12/01 12:31:27 - [] D -- C:\ProgramData\UDL O43 - CFD: 2011/10/08 09:02:57 - [] D -- C:\ProgramData\WEBREG O43 - CFD: 2014/10/12 10:49:08 - [] D -- C:\ProgramData\YoWindow O43 - CFD: 2014/10/12 14:33:32 - [] RD -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 2013/02/07 13:16:48 - [] RD -- C:\Program Files (x86)\Common Files\Ahead O43 - CFD: 2014/09/27 18:31:00 - [] D -- C:\Program Files (x86)\Common Files\Apple O43 - CFD: 2013/02/07 13:17:28 - [] RD -- C:\Program Files (x86)\Common Files\Canon O43 - CFD: 2014/05/14 08:12:52 - [] RD -- C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 2013/05/15 10:10:15 - [] D -- C:\Program Files (x86)\Common Files\Everstrike Software O43 - CFD: 2013/02/07 13:18:09 - [] RD -- C:\Program Files (x86)\Common Files\Hewlett-Packard O43 - CFD: 2013/02/07 13:18:47 - [] RD -- C:\Program Files (x86)\Common Files\HP O43 - CFD: 2013/02/07 15:46:56 - [] RD -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 2013/02/07 15:47:21 - [] RD -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 2013/02/07 15:48:58 - [] RD -- C:\Program Files (x86)\Common Files\LogiShrd O43 - CFD: 2014/01/07 20:15:39 - [] RD -- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 2013/02/09 09:43:15 - [] RD -- C:\Program Files (x86)\Common Files\Nero O43 - CFD: 2013/02/09 09:43:25 - [] RD -- C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 2013/02/09 09:43:35 - [] RD -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 2013/02/09 09:45:13 - [] RD -- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 2013/02/09 09:47:22 - [] RD -- C:\Program Files (x86)\Common Files\System O43 - CFD: 2013/02/09 09:47:35 - [] RD -- C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 2011/06/22 14:10:05 - [] D -- C:\Users\CLAUDE\AppData\Roaming\ Preferences Gifour O43 - CFD: 2015/04/02 14:53:18 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Adobe O43 - CFD: 2012/12/28 20:59:09 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Ahead O43 - CFD: 2014/09/27 18:32:46 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Apple Computer O43 - CFD: 2014/10/08 15:40:44 - [] D -- C:\Users\CLAUDE\AppData\Roaming\AVAST Software O43 - CFD: 2011/01/25 16:33:25 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Canon O43 - CFD: 2012/01/03 19:20:48 - [] D -- C:\Users\CLAUDE\AppData\Roaming\CasaPortale.de O43 - CFD: 2014/09/12 12:31:15 - [] D -- C:\Users\CLAUDE\AppData\Roaming\DiskDefrag O43 - CFD: 2015/07/11 12:21:27 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Dropbox O43 - CFD: 2012/04/22 12:14:43 - [] D -- C:\Users\CLAUDE\AppData\Roaming\FolderColorize O43 - CFD: 2014/11/27 20:16:52 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Foxit Software O43 - CFD: 2014/11/27 19:40:51 - [] D -- C:\Users\CLAUDE\AppData\Roaming\FreeVideoConverter O43 - CFD: 2015/06/28 08:20:24 - [] D -- C:\Users\CLAUDE\AppData\Roaming\GlarySoft O43 - CFD: 2011/10/08 09:03:17 - [] D -- C:\Users\CLAUDE\AppData\Roaming\HP O43 - CFD: 2015/01/08 20:55:06 - [] D -- C:\Users\CLAUDE\AppData\Roaming\HpUpdate O43 - CFD: 2012/02/28 09:21:20 - [] D -- C:\Users\CLAUDE\AppData\Roaming\ImgBurn O43 - CFD: 2010/11/30 17:46:38 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Leadertech O43 - CFD: 2010/12/01 10:42:31 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Macromedia O43 - CFD: 2010/12/12 11:14:36 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Malwarebytes O43 - CFD: 2015/05/29 09:20:17 - [] SD -- C:\Users\CLAUDE\AppData\Roaming\Microsoft O43 - CFD: 2015/03/28 10:25:25 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Mozilla O43 - CFD: 2011/01/23 17:44:36 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Nero O43 - CFD: 2015/05/11 12:08:14 - [0] D -- C:\Users\CLAUDE\AppData\Roaming\Opera Software O43 - CFD: 2011/11/04 19:31:44 - [] D -- C:\Users\CLAUDE\AppData\Roaming\PhotoFiltre O43 - CFD: 2014/07/17 20:53:02 - [] D -- C:\Users\CLAUDE\AppData\Roaming\QuickScan O43 - CFD: 2012/03/30 10:36:42 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Samsung O43 - CFD: 2014/11/27 19:40:53 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Skype O43 - CFD: 2011/03/15 17:09:50 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Template O43 - CFD: 2012/03/23 19:17:37 - [] D -- C:\Users\CLAUDE\AppData\Roaming\TomTom O43 - CFD: 2014/11/27 19:40:54 - [] D -- C:\Users\CLAUDE\AppData\Roaming\vlc O43 - CFD: 2012/03/13 10:11:34 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Winamp O43 - CFD: 2013/02/14 09:37:23 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Windows Live Writer O43 - CFD: 2014/10/12 11:29:36 - [] D -- C:\Users\CLAUDE\AppData\Roaming\YoWindow O43 - CFD: 2015/07/15 08:44:18 - [] D -- C:\Users\CLAUDE\AppData\Roaming\ZHP O43 - CFD: 2015/07/11 12:07:05 - [] D -- C:\Users\CLAUDE\AppData\Local\Adobe O43 - CFD: 2012/04/24 20:26:21 - [] D -- C:\Users\CLAUDE\AppData\Local\Ahead O43 - CFD: 2014/09/27 18:31:56 - [] D -- C:\Users\CLAUDE\AppData\Local\Apple Computer O43 - CFD: 2010/11/30 17:35:09 - [0] SHD -- C:\Users\CLAUDE\AppData\Local\Application Data O43 - CFD: 2014/11/27 19:39:53 - [] D -- C:\Users\CLAUDE\AppData\Local\cache O43 - CFD: 2015/06/08 14:46:06 - [] D -- C:\Users\CLAUDE\AppData\Local\Downloaded Installations O43 - CFD: 2015/06/16 12:13:51 - [] D -- C:\Users\CLAUDE\AppData\Local\Dropbox O43 - CFD: 2015/06/14 14:23:06 - [] D -- C:\Users\CLAUDE\AppData\Local\ElevatedDiagnostics O43 - CFD: 2014/11/27 19:39:53 - [] D -- C:\Users\CLAUDE\AppData\Local\eMule O43 - CFD: 2010/12/13 19:57:58 - [] D -- C:\Users\CLAUDE\AppData\Local\FixItCenter O43 - CFD: 2014/11/27 19:57:01 - [] D -- C:\Users\CLAUDE\AppData\Local\Google O43 - CFD: 2010/11/30 17:35:09 - [0] SHD -- C:\Users\CLAUDE\AppData\Local\Historique O43 - CFD: 2011/10/08 09:02:25 - [] D -- C:\Users\CLAUDE\AppData\Local\HP O43 - CFD: 2010/11/30 17:46:51 - [] D -- C:\Users\CLAUDE\AppData\Local\LogiShrd O43 - CFD: 2015/07/14 10:23:55 - [] D -- C:\Users\CLAUDE\AppData\Local\Microsoft O43 - CFD: 2011/03/25 18:34:31 - [] D -- C:\Users\CLAUDE\AppData\Local\Microsoft Games O43 - CFD: 2015/02/11 09:40:19 - [0] D -- C:\Users\CLAUDE\AppData\Local\Microsoft Help O43 - CFD: 2015/05/27 10:55:33 - [] D -- C:\Users\CLAUDE\AppData\Local\Nero O43 - CFD: 2011/01/17 11:44:32 - [] D -- C:\Users\CLAUDE\AppData\Local\Nero_AG O43 - CFD: 2015/05/11 12:08:14 - [0] D -- C:\Users\CLAUDE\AppData\Local\Opera Software O43 - CFD: 2015/01/16 10:17:14 - [] D -- C:\Users\CLAUDE\AppData\Local\Package Cache O43 - CFD: 2014/12/07 10:11:41 - [] D -- C:\Users\CLAUDE\AppData\Local\Programs O43 - CFD: 2012/04/08 08:19:59 - [] D -- C:\Users\CLAUDE\AppData\Local\Samsung O43 - CFD: 2015/02/12 09:49:08 - [0] D -- C:\Users\CLAUDE\AppData\Local\SoftorinoUpdates O43 - CFD: 2015/07/15 08:44:08 - [] D -- C:\Users\CLAUDE\AppData\Local\Temp O43 - CFD: 2010/11/30 17:35:09 - [0] SHD -- C:\Users\CLAUDE\AppData\Local\Temporary Internet Files O43 - CFD: 2012/03/23 19:17:37 - [] D -- C:\Users\CLAUDE\AppData\Local\TomTom O43 - CFD: 2015/01/15 12:56:42 - [] D -- C:\Users\CLAUDE\AppData\Local\UpSafe O43 - CFD: 2014/03/04 19:37:05 - [] D -- C:\Users\CLAUDE\AppData\Local\Windows Live O43 - CFD: 2013/02/01 19:54:31 - [] D -- C:\Users\CLAUDE\AppData\Local\Windows Live Writer O43 - CFD: 2009/07/14 06:54:32 - [] RD -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2012/07/11 15:18:06 - [] RD -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2011/06/22 14:43:50 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\coverXP O43 - CFD: 2015/07/11 12:21:17 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 2014/06/17 09:25:53 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 2014/02/09 20:42:55 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google+ Auto Backup O43 - CFD: 2009/07/14 06:49:38 - [] RD -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/06/24 17:07:12 - [] RD -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2015/06/24 17:07:13 - [] HD -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup-Disabled O43 - CFD: 2012/03/23 19:17:35 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TomTom O43 - CFD: 2012/11/28 20:31:37 - [] D -- C:\Users\CLAUDE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ViewPower2.10 SP1 ---\\ Enumération des clés de registre StartupReg (SMSR) (O53) (17) - 2s O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe O53 - SMSR:HKLM\...\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} [Key] . (.Nero AG - Nero Home.) -- C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe O53 - SMSR:HKLM\...\startupreg\CollaborationHost [Key] . (.Microsoft Corporation - Voisinage immédiat.) -- C:\Windows\system32\p2phost.exe O53 - SMSR:HKLM\...\startupreg\GUDelayStartup [Key] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- J:\Program Files (x86)\Glary Utilities 5\StartupManager.exe O53 - SMSR:HKLM\...\startupreg\HP Software Update [Key] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe O53 - SMSR:HKLM\...\startupreg\IntelliPoint [Key] . (.Microsoft Corporation - IPoint.exe.) -- C:\Program Files\Microsoft IntelliPoint\ipoint.exe O53 - SMSR:HKLM\...\startupreg\KiesHelper [Key] . (.Samsung - Kies.) -- J:\Program Files (x86)\Kies\KiesHelper.exe O53 - SMSR:HKLM\...\startupreg\KiesPDLR [Key] . (.Copyright © 2011 - KiesPDLR.) -- J:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe O53 - SMSR:HKLM\...\startupreg\KiesTrayAgent [Key] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- J:\Program Files (x86)\Kies\KiesTrayAgent.exe O53 - SMSR:HKLM\...\startupreg\MSN Toolbar [Key] . (...) -- C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\RESTART_STICKY_NOTES [Key] . (.Microsoft Corporation - Pense-bête.) -- C:\Windows\System32\StikyNot.exe O53 - SMSR:HKLM\...\startupreg\RtHDVCpl [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe O53 - SMSR:HKLM\...\startupreg\Sidebar [Key] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (...) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\swg [Key] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O53 - SMSR:HKLM\...\startupreg\TomTomHOME.exe [Key] . (.TomTom - System Tray application for TomTom HOME.) -- J:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe O53 - SMSR:HKLM\...\startupreg\WinampAgent [Key] . (...) -- J:\Program Files\Winamp\winampa.exe ---\\ Liste des pilotes du système (SDL) (O58) (86) - 20s O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] O58 - SDL:2005/04/19 10:44:40 N . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\Windows\System32\drivers\Alcwdm64.sys [2042368] O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] O58 - SDL:2009/07/14 03:52:21 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [106576] O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] O58 - SDL:2009/07/14 03:52:21 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [28752] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] O58 - SDL:2015/07/01 19:12:44 A . (...) -- C:\Windows\System32\drivers\aswHwid.sys [29168] O58 - SDL:2015/07/01 19:12:44 A . (.Avast Software s.r.o. - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [89944] O58 - SDL:2015/07/01 19:12:44 A . (.Avast Software s.r.o. - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [93528] O58 - SDL:2015/07/01 19:12:44 A . (...) -- C:\Windows\System32\drivers\aswRvrt.sys [65736] O58 - SDL:2015/07/01 19:11:58 A . (.Avast Software s.r.o. - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [1047320] O58 - SDL:2015/07/02 07:23:54 A . (.Avast Software s.r.o. - avast! self protection module.) -- C:\Windows\System32\drivers\aswsp.sys [442264] O58 - SDL:2015/07/01 19:12:45 A . (.Avast Software s.r.o. - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [137288] O58 - SDL:2015/07/01 19:12:45 A . (...) -- C:\Windows\System32\drivers\aswVmm.sys [272248] O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] O58 - SDL:2009/06/10 22:35:58 A . (.VIA Technologies, Inc. - NDIS 6.0 miniport driver.) -- C:\Windows\System32\drivers\fet6x64.sys [47872] O58 - SDL:2012/08/21 13:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240] O58 - SDL:2015/06/28 08:20:26 A . (.Glarysoft Ltd - The driver for the Startup Manager tool.) -- C:\Windows\System32\drivers\GUBootStartup.sys [20160] O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] O58 - SDL:2009/07/14 03:47:48 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [77888] O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410688] O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] O58 - SDL:2009/10/07 02:45:50 A . (...) -- C:\Windows\System32\drivers\LVPr2M64.sys [30232] O58 - SDL:2009/10/07 09:47:46 A . (.Logitech Inc. - Logitech Kernel Audio Improvement Filter Dr.) -- C:\Windows\System32\drivers\lvrs64.sys [327704] O58 - SDL:2009/10/07 09:49:28 A . (.Logitech Inc. - Logitech USB Video Class Driver.) -- C:\Windows\System32\drivers\lvuvc64.sys [6379288] O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [25816] O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [109272] O58 - SDL:2015/07/12 07:56:25 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [113880] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] O58 - SDL:2010/04/09 04:24:48 A . (.Generic USB smartcard reader - MultiCard reader 1.0.) -- C:\Windows\System32\drivers\MHIKEY10x64.sys [59392] O58 - SDL:2015/06/18 08:41:56 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [63704] O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] O58 - SDL:2009/06/10 22:37:25 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [11572512] O58 - SDL:2009/07/14 03:48:27 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [149056] O58 - SDL:2009/07/14 03:45:45 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [167488] O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] O58 - SDL:2009/06/10 22:35:42 A . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS 6.20 64-bit Dr.) -- C:\Windows\System32\drivers\Rt64win7.sys [187392] O58 - SDL:2010/11/02 19:33:10 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2536040] O58 - SDL:2011/06/28 19:30:50 A . (.Sunbelt Software - 64-bit Anti-Rootkit Engine.) -- C:\Windows\System32\drivers\SBREDrv.sys [55384] O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] O58 - SDL:2013/10/25 02:32:08 A . (.Prolific Technology Inc. - USB-to-Serial Cable Driver.) -- C:\Windows\System32\drivers\ser2pl64.sys [167936] O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] O58 - SDL:2011/12/08 06:22:28 A . (.Google Inc - ADB Interface.) -- C:\Windows\System32\drivers\ssadadb.sys [36328] O58 - SDL:2011/12/08 06:22:28 A . (.MCCI Corporation - SAMSUNG Android USB Composite Device Driver.) -- C:\Windows\System32\drivers\ssadbus.sys [157672] O58 - SDL:2011/12/08 06:22:28 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadcm.sys [13288] O58 - SDL:2011/12/08 06:22:28 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadcmnt.sys [13288] O58 - SDL:2011/12/08 06:22:28 A . (.MCCI Corporation - SAMSUNG Android USB Modem Filter Driver.) -- C:\Windows\System32\drivers\ssadmdfl.sys [16872] O58 - SDL:2011/12/08 06:22:28 A . (.MCCI Corporation - SAMSUNG Android USB Modem.) -- C:\Windows\System32\drivers\ssadmdm.sys [177640] O58 - SDL:2011/12/08 06:22:28 A . (.MCCI Corporation - SAMSUNG Android USB Diagnostic Serial Port.) -- C:\Windows\System32\drivers\ssadserd.sys [146920] O58 - SDL:2011/12/08 06:22:28 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadwh.sys [13800] O58 - SDL:2011/12/08 06:22:28 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadwhnt.sys [13800] O58 - SDL:2011/12/08 06:22:36 A . (.MCCI Corporation - SAMSUNG USB Composite Device Driver.) -- C:\Windows\System32\drivers\sscdbus.sys [136264] O58 - SDL:2011/12/08 06:22:36 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\sscdcm.sys [15432] O58 - SDL:2011/12/08 06:22:36 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\sscdcmnt.sys [15432] O58 - SDL:2011/12/08 06:22:36 A . (.MCCI Corporation - SAMSUNG Mobile Modem Filter Driver.) -- C:\Windows\System32\drivers\sscdmdfl.sys [19016] O58 - SDL:2011/12/08 06:22:36 A . (.MCCI Corporation - SAMSUNG Mobile Modem WDM.) -- C:\Windows\System32\drivers\sscdmdm.sys [172104] O58 - SDL:2011/12/08 06:22:36 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\sscdwh.sys [15944] O58 - SDL:2011/12/08 06:22:36 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\sscdwhnt.sys [15944] O58 - SDL:2013/10/28 02:12:10 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [107288] O58 - SDL:2013/08/20 08:02:12 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [204568] O58 - SDL:2013/08/20 08:02:12 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (M.) -- C:\Windows\System32\drivers\ssudserd.sys [204568] O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] O58 - SDL:2014/07/28 14:52:00 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [54784] O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (9) - 36s O61 - LFC: 2015/07/14 15:00:00 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Update\Install\{B26C6508-AD9D-48FB-91B5-4C35B260211F}\43.0.2357.134_43.0.2357.132_chrome_updater.exe [1080912] O61 - LFC: 2015/07/07 16:50:00 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Update\Install\{2F2CD4B0-E0EC-4462-B9AE-49C66B99A8AA}\43.0.2357.132_43.0.2357.130_chrome_updater.exe [2743376] O61 - LFC: 2015/07/14 15:00:00 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Update\Download\{4DC8B4CA-1BDA-483E-B5FA-D3C12E15B62D}\43.0.2357.134\43.0.2357.134_43.0.2357.132_chrome_updater.exe [1080912] O61 - LFC: 2015/07/15 08:22:32 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849] O61 - LFC: 2015/07/13 10:14:22 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\User Data\PepperFlash\18.0.0.209\pepflashplayer.dll [16307888] O61 - LFC: 2015/07/13 23:55:14 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\Application\43.0.2357.134\libexif.dll [310088] O61 - LFC: 2015/07/13 22:01:21 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\Application\43.0.2357.134\natives_blob.bin [410937] O61 - LFC: 2015/07/13 22:01:22 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\Application\43.0.2357.134\snapshot_blob.bin [449780] O61 - LFC: 2015/07/13 23:55:16 A . (..) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\Application\43.0.2357.134\PepperFlash\pepflashplayer.dll [16308040] ---\\ Associations Shell Spawning (O67) (9) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (SMI) (O68) (8) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files (x86)\internet explorer\iexplore.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Users\CLAUDE\AppData\Local\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (1) - 1s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (SSS) (O83) (33) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [776192] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [845824] O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [676864] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [343552] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316416] O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [706560] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2428952] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [848384] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [369664] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [565760] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [104960] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1114624] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [208384] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [193536] ---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (6) - 2s O87 - FAEL: "{BD67D015-6CE4-4227-8123-B61DEB2116E9}" [In-None-P6-TRUE] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe O87 - FAEL: "{63A117C7-85EA-4450-8D2F-F0D955353C5F}" [In-None-P17-TRUE] .(.Musiccity Co.Ltd. - MUZAoDApp Module.) -- C:\Windows\SysWOW64\muzapp.exe O87 - FAEL: "{594CB3C8-C94E-4784-AA04-6BE74D7CF2B9}" [In-None-P6-TRUE] .(.TomTom - Windows Service for TomTom HOME.) -- J:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe O87 - FAEL: "{D9A74CF2-A1EE-4894-A179-93A71176BA52}" [In-None-P17-TRUE] .(.TomTom - Windows Service for TomTom HOME.) -- J:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe O87 - FAEL: "{E8395C6C-9341-41B5-96F3-0CB2268CD740}" [In-None-P6-FALSE] .(.TomTom - Windows Service for TomTom HOME.) -- J:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe O87 - FAEL: "{96F299FB-29EE-4A0C-A89C-E36E49434EEB}" [In-None-P17-FALSE] .(.TomTom - Windows Service for TomTom HOME.) -- J:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe ---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped) (13) - 20s SR - Auto [2015/07/07 20:12:28] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe SR - Auto [2014/08/28 11:06:06] [ 43336] Apple Mobile Device (Apple Mobile Device) . (.Apple Inc..) - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe SR - Auto [2015/07/01 19:12:17] [ 343336] Avast Antivirus (avast! Antivirus) . (.Avast Software s.r.o..) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe SR - Auto [2011/08/30 23:05:32] [ 462184] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe SS - Auto [2014/10/17 22:37:14] [ 107912] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - Demand [2014/10/17 22:37:14] [ 107912] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe SS - Demand [2012/08/14 07:29:44] [ 194032] Google Software Updater (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe SS - Demand [2014/09/01 04:47:54] [ 640840] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe SR - Auto [2009/10/07 02:47:10] [ 191000] Process Monitor (LVPrcS64) . (.Logitech Inc..) - C:\Program Files\Common Files\logishrd\LVMVFM\LVPrcSrv.exe SS - Auto [2015/06/18 08:39:50] [ 1133880] (MBAMService) . (.Malwarebytes Corporation.) - J:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe SS - Demand [2010/05/04 13:07:22] [ 503080] @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe SS - Demand [2006/12/05 12:44:48] [ 774144] NBService (NBService) . (.Nero AG.) - C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe SR - Auto [2015/04/30 10:28:14] [ 93040] TomTomHOMEService (TomTomHOMEService) . (.TomTom.) - J:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe ---\\ Scan Additionnel (O88) (1) - 0s ~ Aucun élément malicieux trouvé. ---\\ Récapitulatif des éléments trouvées sur votre station (1) - 0s ~ Aucun élément malicieux trouvé. ~ End of the scan, 46277 items in 141 seconds (838)(0)()