~ ZHPDiag v2015.8.10.115 Par Nicolas Coolman (2015/08/10) ~ Démarré par user (Administrator) (2015/08/11 01:33:13) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\user\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\user\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 8.1 Single Language, 64-bit (Build 9600) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v44.0.2403.125 MSIE: Internet Explorer v11.0.9600.16384 ---\\ Informations sur les produits Windows (4) - 1s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK (Auto) Windows Activation Technologies : OK ---\\ Logiciels de protection (1) - 0s Kaspersky Internet Security v15.0.0.463 ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 69 Stepping 1, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 8269.272 MB (67% free) ~ System Restore: Activé (Enable) ~ System drive C: has 422 GB free of 477 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: ASUS ~ User Name: user ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 422 GB free of 477 GB (System) ~ Drive F: has 471 GB free of 475 GB ---\\ Etat du Centre de Sécurité Windows (10) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Recherche particulière de fichiers génériques (23) - 1s [MD5.8479DC46E9A09015C0777A16BC22A15D] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2328880] [MD5.6E0BDFBEEED65B017F2E4C2C910B0520] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [52736] [MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [144384] [MD5.CE76481B886D891F1ECF11939DF16938] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [2328064] [MD5.7C94FDA3809015B8F2208D2E1C221F17] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [564736] [MD5.2F18065618E39AA2E656EE737B71E791] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [447488] [MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [19456] [MD5.239268BAB58EAE9A3FF4E08334C00451] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [567296] [MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [26464] [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [88576] [MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [164352] [MD5.5DB26D7E0216D0BF364A81D3829AD7B9] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [134656] [MD5.03909BDBFF0DCACCABF2B2D4ADEE44DC] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [78336] [MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [107520] [MD5.0063040EFD7C5B81D67CF985BA35388A] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [141824] [MD5.405A2E5754DF76663CF0522B87D7929F] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\Windows\System32\drivers\MRxSmb.sys [402432] [MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [282624] [MD5.4412D565C0278C401575E11072C7DCE3] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [2011488] [MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [94208] [MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [120832] [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\Windows\System32\drivers\rdpdr.sys [195584] [MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [107520] [MD5.9F9CE33B50611A1C61A46B8911E0B30B] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [312160] ---\\ Processus lancés (37) - 4s [MD5.DBC598E47E7A382E60E2A4745D41FEF9] - (.ASUS - GFNEXSrv.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896] [PID.1508] [MD5.6A122B4F0E5293CACFA8A5F2CBA9B356] - (.ASUS - ASUS InstantOn Program.) -- C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120] [PID.1784] [MD5.058734C95991F6BEBF3D3075B8776234] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe [233552] [PID.1800] [MD5.7B9ED6E90100A6EBD9759CB7D2ED7BAE] - (.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1619704] [PID.1828] [MD5.0417C188DA81AA5564B152CA4E00458A] - (.Copyright (C) 2013 - .) -- C:\ProgramData\MobileBrServ\mbbservice.exe [239696] [PID.1208] [MD5.8652491CA4E651B4AB7F11B9E6B29733] - (.ShopperPro - ShopperPro Update Service.) -- C:\Program Files\Common Files\ShopperPro\spbiu.exe [2346880] [PID.2124] =>PUP.Optional.ShopperPro [MD5.D0252B2CD35DF5C0D552398D2E390B77] - (...) -- C:\Program Files (x86)\Common Files\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\updater.exe [1065184] [PID.2304] =>PUP.Optional.CrossRider [MD5.0B485584F43ABC41895BC32C8E52339A] - (.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752] [PID.2936] [MD5.F98BFE8634197144D5A8E18DFADE53E8] - (.ASUS - ASUS InstantOn Program.) -- C:\Program Files\ASUS\P4G\InsOnWMI.exe [594744] [PID.2092] [MD5.A446F3898F1CE9989ACB3F6E758E179B] - (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avpui.exe [192160] [PID.2788] [MD5.61F674D54CD71FBF9B9631BFB608464A] - (.ASUS - Power4Gear Hybrid.) -- C:\Program Files\ASUS\P4G\BatteryLife.exe [1036088] [PID.4008] [MD5.E7958D045E81BA3952E15E6985EBF62A] - (.Cinema Plus - CinemaP-1.3c exe.) -- C:\Program Files (x86)\CinemaP-1.3c\03028fde-b6ef-4928-878a-0e9ddec76e17-6.exe [1366936] [PID.4228] =>PUP.Optional.CrossRider [MD5.9DDFDE6F9D6316B9191884FF62ABE55F] - (.Object Browser - Sense exe.) -- C:\Program Files (x86)\Sense\80e8d410-b2f7-435c-82bd-72d5842bedfd-6.exe [1254816] [PID.4392] [MD5.E85B26F20AD64B0D6C6B63EDBFCEE81D] - (.iWebar - iWebar exe.) -- C:\Program Files (x86)\iWebar\8b41f82b-0f18-4f5d-9626-96e37d948ed4-6.exe [1253280] [PID.4428] =>PUP.Optional.CrossRider [MD5.EAFB798E13C296281878E70BCFE41A69] - (...) -- C:\Program Files (x86)\Big Phat Sports\big_phat_sports_helper_service.exe [191696] [PID.4452] [MD5.2DD6EF4919B49E7DE92DD05E0FE3689C] - (.Object Browser - Object Browser exe.) -- C:\Program Files (x86)\Object Browser\5c6c93c5-f845-49dd-a422-09ff1a8de928-6.exe [1254816] [PID.4476] =>PUP.Optional.ObjectBrowser [MD5.2086AE9CA42D3902FFB324A90AD3EFE2] - (.Cinema Plus - CinemaP-1.3c exe.) -- C:\Program Files (x86)\CinemaP-1.3c\dfc00529-3a2c-483f-9afd-ec4fabc47dbd.exe [340376] [PID.4488] =>PUP.Optional.CrossRider [MD5.0DABDA56F6F678E05DC9AC15D0316B22] - (.AsusTek - ASUS Smart Gesture Loader.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe [199992] [PID.4984] [MD5.70F253680AFC7269AA30831EECD4048E] - (.AsusTek - ASUS Smart Gesture Center.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe [283960] [PID.1040] [MD5.DD5AD873EA9A93C9DE30B2B8A92A9EE8] - (.AsusTek - ASUS Smart Gesture Helper.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe [170296] [PID.5616] [MD5.BAF49F90F6F5C212F16A3953335ED8A6] - (...) -- C:\Program Files (x86)\Le Robert\Le Petit Robert\PRHYPER.EXE [22560] [PID.5960] [MD5.D21D821D48AEDC08C58C17C10FC33CB2] - (.slowthanwrote.com - VinSolutions.) -- C:\Users\user\AppData\Roaming\obvqumnjfb.exe [77230080] [PID.5984] [MD5.BD9B0E544F4D70E20781A00A27FF98E5] - (.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [379904] [PID.6024] [MD5.F4346AFCA70349EB65F0ACF5CDBE2DD3] - (.slowthanwrote.com - VinSolutions.) -- C:\Users\user\AppData\Roaming\obbtxpgplu.exe [84168704] [PID.6040] [MD5.C106CC72B37814CCFA1A337DBA2F25B3] - (.slowthanwrote.com - VinSolutions.) -- C:\Users\user\AppData\Roaming\obnqvzrudz.exe [71352320] [PID.6072] [MD5.F1F5E9B8DFDCF50E3A8716EA7BC4D929] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugincontainer.exe [1139936] [PID.5544] =>PUP.Optional.CrossRider [MD5.47405064D5B5B2C9ABF60D74CB6B82A5] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\6\Plugin.exe [1134304] [PID.6068] =>PUP.Optional.CrossRider [MD5.F3224BEB8BD106B43BB2D70CAD3B512D] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\10\Plugin.exe [1036512] [PID.3148] =>PUP.Optional.CrossRider [MD5.17ABD27C344E113187625CFA06C2820C] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\7\Plugin.exe [922848] [PID.3672] =>PUP.Optional.CrossRider [MD5.B2AF6BD3EB210E0B387DFA0AEBEC6FE6] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\8\Plugin.exe [1224416] [PID.648] =>PUP.Optional.CrossRider [MD5.F699E373969D11BE083E7A502344CCCD] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\5\Plugin.exe [1291488] [PID.2276] =>PUP.Optional.CrossRider [MD5.28EF889B62CFC610E3DB1B8E84DBBF90] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\2\Plugin.exe [1764064] [PID.5788] =>PUP.Optional.CrossRider [MD5.619146B01947F7C41CC24A0BF05F1D8B] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\3\Plugin.exe [1169120] [PID.5740] =>PUP.Optional.CrossRider [MD5.17ABD27C344E113187625CFA06C2820C] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\7\Plugin.exe [922848] [PID.6348] =>PUP.Optional.CrossRider [MD5.619146B01947F7C41CC24A0BF05F1D8B] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\3\Plugin.exe [1169120] [PID.6424] =>PUP.Optional.CrossRider [MD5.BCD61E909A54A57BE18CD7DC4790A356] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\12\Plugin.exe [690912] [PID.6512] =>PUP.Optional.CrossRider [MD5.BCD61E909A54A57BE18CD7DC4790A356] - (...) -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\12\Plugin.exe [690912] [PID.6608] =>PUP.Optional.CrossRider ---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2) (16) - 0s G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.sweet-page.com/ =>PUP.Optional.SweetPage G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] __MSG_ExtensionName__ G2 - GCE: Preference [User Data\Default] [fcjmbgoamdpbndikpbaoeoidaabejfmd] fcjmbgoamdpbndikpbaoeoidaabejfmd G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [fpdfodicipdpgboaibeobfmbphjfedea] {background:{scripts:[background.js]}content_scrip G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module G2 - GCE: Preference [User Data\Default] [lifbcibllhkdhoafpjfnlhfpfgnpldfl] Skype Click to Call G2 - GCE: Preference [User Data\Default] [mipnjnddbpbdmbpjafflemfdefjlibod] mipnjnddbpbdmbpjafflemfdefjlibod G2 - GCE: Preference [User Data\Default] [ndlpkmaeinmnbiadacenijnhlolneopm] __MSG_themeName__ G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pdnfnkhpgegpcingjbfihlkjeighnddk] pdnfnkhpgegpcingjbfihlkjeighnddk G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3) (16) - 1s P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazon-france.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\ddg.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-france.xml P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} P2 - FPN: [HKLM] [@divx.com/DivX Browser Plugin,version=1.0.0] - (.DivX,Inc..) -- C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll P2 - FPN: [HKLM] [@divx.com/DivX Player Plugin,version=1.0.0] - (.DivX, Inc.) -- C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll P2 - FPN: [HKLM] [@kaspersky.com/content_blocker] - (.kaspersky.com.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\content_blocker@kaspersky.com P2 - FPN: [HKLM] [@kaspersky.com/online_banking] - (.kaspersky.com.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\online_banking@kaspersky.com P2 - FPN: [HKLM] [@kaspersky.com/virtual_keyboard] - (.kaspersky.com.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\FFExt\virtual_keyboard@kaspersky.com P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll ---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4) (19) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/ =>PUP.Optional.Qvo6 R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/ =>PUP.Optional.Qvo6 R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.sweet-page.com/ =>PUP.Optional.SweetPage R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer, Proxy Management (R5) (4) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8118 =>Hijacker.Proxy R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ---\\ Hosts file redirection (O1) (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (O2) (11) - 0s O2 - BHO: 07462cf09e3b013003f40973f5b3301f0032850 [64Bits] - {11111111-1111-1111-1111-110311281150} . (...) -- C:\Program Files (x86)\Object Browser\Object Browser-bho64.dll =>PUP.Optional.ObjectBrowser O2 - BHO: cb53b500f3e90131a6091fb939dcadf40061915 [64Bits] - {11111111-1111-1111-1111-110611191115} . (...) -- C:\Program Files (x86)\Sense\Sense-bho64.dll O2 - BHO: 68671f62832e4803b34065d441f9a2210065123 [64Bits] - {11111111-1111-1111-1111-110611511123} . (...) -- C:\Program Files (x86)\iWebar\iWebar-bho64.dll =>PUP.Optional.CrossRider O2 - BHO: (no name) [64Bits] - {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} (Orphean) O2 - BHO: ContentBlockerBrowserHelperObject [64Bits] - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} . (.Kaspersky Lab ZAO - Content Blocker Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll O2 - BHO: VirtualKeyboardBrowserHelperObject [64Bits] - {73455575-E40C-433C-9784-C78DC7761455} . (.Kaspersky Lab ZAO - Virtual Keyboard Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll O2 - BHO: DLSecure Toolbar [64Bits] - {7bcc228a-c730-4004-93f9-72cbb7033a62} . (...) -- C:\Program Files (x86)\dlsecuretb\dlsecureDx64.dll O2 - BHO: Safe Money Plugin [64Bits] - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} . (.Kaspersky Lab ZAO - Safe Money Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\OnlineBanking\online_banking_bho.dll O2 - BHO: Sale Clipper [64Bits] - {b18906df-1dfa-4d50-8a1f-7d076a8c87b7} (Orphean) =>PUP.Optional.SaleClipper O2 - BHO: SecureWebBHO [64Bits] - {D3C24E2B-C820-4492-9B69-11BF7163F998} (Orphean) =>PUP.Optional.SecureSoft O2 - BHO: link filter bho [64Bits] - {E33CF602-D945-461A-83F0-819F76A199F8} . (.Kaspersky Lab ZAO - URL Advisor Plugin.) -- C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll ---\\ Internet Explorer Toolbars (O3) (2) - 0s O3 - Toolbar: DLSecure Toolbar - [HKLM]{7bcc228a-c730-4004-93f9-72cbb7033a62} . (...) -- C:\Program Files (x86)\dlsecuretb\dlsecureDx.dll O3 - Toolbar: Web Protector Toolbar - [HKLM]{CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D} . (...) -- C:\Program Files (x86)\WebProtector\WebProtector.dll =>PUP.Optional.WebProtector ---\\ Applications lancées au démarrage du sytème (O4) (14) - 1s O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [DptfPolicyLpmServiceHelper] . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\system32\DptfPolicyLpmServiceHelper.exe O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - HKCU\..\Run: [Le Petit Robert Hyperappel] . (...) -- C:\Program Files (x86)\Le Robert\Le Petit Robert\PRHYPER.EXE O4 - HKLM\..\Wow6432Node\Run: [BtTray] . (.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe O4 - HKLM\..\Wow6432Node\Run: [UCam_Menu] . (.CyberLink Corp. - MUI StartMenu Application.) -- C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe O4 - HKLM\..\Wow6432Node\Run: [YouCam Mirror Tray icon] . (.CyberLink Corp. - CyberLink YouCam Tray.) -- C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe O4 - HKUS\S-1-5-21-2224265590-2659732515-3375065286-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\user\AppData\Local\Facebook\Update\FacebookUpdate.exe O4 - HKUS\S-1-5-21-2224265590-2659732515-3375065286-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe O4 - HKUS\S-1-5-21-2224265590-2659732515-3375065286-1001\..\Run: [Le Petit Robert Hyperappel] . (...) -- C:\Program Files (x86)\Le Robert\Le Petit Robert\PRHYPER.EXE ---\\ Modification Domaine/Adresses DNS (O17) (6) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 193.95.57.20 193.95.59.20 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = hi.link O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 193.95.57.20 193.95.59.20 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = hi.link ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20) (1) - 0s O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 334.) - C:\Windows\system32\nvinitx.dll ---\\ Liste des services NT non Microsoft et non désactivés (O23) (23) - 4s O23 - Service: ASLDR Service (ASLDRService) . (.ASUSTek Computer Inc. - ASLDR Service.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe O23 - Service: ASUS InstantOn Service (ASUS InstantOn) . (.ASUS - ASUS InstantOn Program.) - C:\Program Files\ASUS\P4G\InsOnSrv.exe O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe O23 - Service: Kaspersky Anti-Virus Service 15.0.0 (AVP15.0.0) . (.Kaspersky Lab ZAO - Kaspersky Anti-Virus.) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.0\avp.exe O23 - Service: BlueSoleilCS (BlueSoleilCS) . (.IVT Corporation - Bluetooth Application.) - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe O23 - Service: @oem31.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAM (DptfParticipantProcessorService) . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) - C:\Windows\system32\DptfParticipantProcessorService.exe O23 - Service: @oem31.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME (DptfPolicyCriticalService) . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) - C:\Windows\system32\DptfPolicyCriticalService.exe O23 - Service: @oem31.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Int (DptfPolicyLpmService) . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) - C:\Windows\system32\DptfPolicyLpmService.exe O23 - Service: Service Google Update (gupdate) (gupdate) . (...) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.) O23 - Service: YAC Service (iSafeService) . (...) - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>PUP.Optional.YetAnotherCleaner O23 - Service: Live Malware Protection (Live Malware Protection) . (...) - C:\Windows\mlwps.exe O23 - Service: LiveUpdateWPP Manager (LiveUpdateWPP Manager) . (...) - C:\Program Files (x86)\LiveUpdateWPP\LiveUpdateWPP.exe =>PUP.Optional.WebProtector O23 - Service: Mobile Broadband HL Service (Mobile Broadband HL Service) . (.Copyright (C) 2013 - .) - C:\ProgramData\MobileBrServ\mbbservice.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 334.8.) - C:\Windows\system32\nvvsvc.exe O23 - Service: PicexaService (PicexaService) . (...) - C:\Program Files (x86)\Picexa\PicexaSvc.exe =>PUP.Optional.Picexa O23 - Service: Privoxy (PrivoxyService) (PrivoxyService) . (...) - C:\Program Files (x86)\Megasoft Security\privoxy.exe =>PUP.Optional.Privoxy O23 - Service: Service KMSELDI (Service KMSELDI) . (. - Service_KMS.) - C:\Program Files\KMSpico\Service_KMS.exe =>PUA.KMSpico O23 - Service: Service Mgr SaleClipper (Service Mgr SaleClipper) . (...) - C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugincontainer.exe =>PUP.Optional.SaleClipper O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe O23 - Service: ShopperPro Update (SPBIUpd) . (.ShopperPro - ShopperPro Update Service.) - C:\Program Files\Common Files\ShopperPro\spbiu.exe =>PUP.Optional.ShopperPro O23 - Service: (syshost32) . (...) - C:\Windows\Installer\{75B66D64-7B5C-2268-D631-C707B4C68ABD}\syshost.exe O23 - Service: Update Mgr SaleClipper (Update Mgr SaleClipper) . (...) - C:\Program Files (x86)\Common Files\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\updater.exe =>PUP.Optional.SaleClipper O23 - Service: WA 1.10.0.19 Client Service (wasvc_1.10.0.19) . (...) - C:\Program Files (x86)\WordAnchor_1.10.0.19\Service\wasvc.exe =>PUP.Optional.Generic ---\\ Tâches planifiées en automatique (O39) (107) - 12s O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-1.job [3102] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-11.job [5174] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-2.job [2100] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-3.job [4148] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-4.job [4148] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-5.job [2436] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-5_user.job [2436] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-6.job [5508] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-7.job [5172] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\48_dresses_notification_service.job [1226] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-1.job [3446] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-11.job [5178] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-2.job [2104] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-3.job [3464] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-4.job [4488] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-5.job [2440] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-5_user.job [2440] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-6.job [4152] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-7.job [3808] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-1.job [3754] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-11.job [5496] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-2.job [2422] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-3.job [4134] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-4.job [4470] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-5.job [2766] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-5_user.job [2766] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-6.job [4470] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-7.job [4134] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-1.job [3758] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-11.job [5498] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-2.job [2424] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-4.job [4472] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-5.job [2768] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-5_user.job [2768] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-6.job [4472] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-7.job [4136] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\Tasks\big_phat_sports_helper_service.job [540] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\Chromium.job [334] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\dfc00529-3a2c-483f-9afd-ec4fabc47dbd.job [1424] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\disco_savings_notification_service.job [1244] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\f54d621c-c49b-4c91-a145-74209856bbf2.job [620] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2224265590-2659732515-3375065286-1001Core.job [912] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2224265590-2659732515-3375065286-1001UA.job [934] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\fun4u_notification_service.job [1196] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job [942] =>PUP.Optional.GlobalUpdate O39 - APT: Orphean - (...) -- C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job [946] =>PUP.Optional.GlobalUpdate O39 - APT: Orphean - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1082] O39 - APT: Orphean - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1086] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-11 [8178] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-2 [5104] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-3 [7152] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-4 [7152] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-5 [5440] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-5_user [5426] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-6 [8512] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\48_dresses_notification_service [3334] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-1 [6450] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-11 [8182] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-3 [6468] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-4 [7492] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-5 [5444] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-5_user [5430] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-6 [7156] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-7 [6812] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-1 [6758] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-11 [8500] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-3 [7138] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-4 [7474] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-5 [5770] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-5_user [5756] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-6 [7474] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-7 [7138] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-1 [6762] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-11 [8502] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-2 [5428] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-4 [7476] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-5 [5772] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-5_user [5758] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-6 [7476] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-7 [7140] =>PUP.Optional.CrossRider O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\ASUS InstantOn Config [2968] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\ASUS P4G [3056] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\ASUS Smart Gesture Launcher [3538] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\AutoPico Daily Restart [3702] =>PUA.KMSpico O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\avabvexvac [3444] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\big_phat_sports_helper_service [3460] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Chromium [2672] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\dfc00529-3a2c-483f-9afd-ec4fabc47dbd [4428] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\disco_savings_notification_service [3352] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\f54d621c-c49b-4c91-a145-74209856bbf2 [3610] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2224265590-2659732515-3375065286-1001Core [3430] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2224265590-2659732515-3375065286-1001UA [3780] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\fun4u_notification_service [3304] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore [3682] =>PUP.Optional.GlobalUpdate O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA [3918] =>PUP.Optional.GlobalUpdate O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3822] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4058] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\LaunchSignup [4016] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Malware Cleaner [3320] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Megasoft Security Uninstaller [3264] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Personal Computer Software Uninstaller [3652] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_34303638333339332d784a234157344a2a416c505a [4222] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\Windows Installer [3258] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{1094EEEA-6E28-48EC-ACDC-C460033D5C05} [3138] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{165564D9-CE16-4C3F-A62F-7DA36E669F6D} [2970] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{258A2E8C-46E3-464B-8A32-A41086C463E3} [3158] O39 - APT: Orphean - (...) -- C:\Windows\System32\Tasks\{62EE09D8-32DD-4783-9955-026C9D945BC0} [3208] ---\\ Logiciels installés (O42) (67) - 7s O42 - Logiciel: Package de pilotes Windows - ASUS (ATP) Mouse (05/09/2013 1.0.0.173) - (.ASUS.) [HKLM][64Bits] -- 1016059FBF327ED9E3BAE758BD08CF10D3C6252D O42 - Logiciel: KMSpico v9.1.3 - (...) [HKLM][64Bits] -- KMSpico_is1 =>PUA.KMSpico O42 - Logiciel: R for Windows 3.0.2 - (.R Core Team.) [HKLM][64Bits] -- R for Windows 3.0.2_is1 O42 - Logiciel: R for Windows 3.1.3 - (.R Core Team.) [HKLM][64Bits] -- R for Windows 3.1.3_is1 O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey O42 - Logiciel: TAP-Windows 9.9.2 - (...) [HKLM][64Bits] -- TAP-Windows O42 - Logiciel: WinRAR 5.21 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver O42 - Logiciel: Ralink Bluetooth Stack64 - (.Mediatek.) [HKLM][64Bits] -- {307AA214-8490-9119-DA81-C8E875AD1C94} O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {9B6239BF-4E85-4590-8D72-51E30DB1A9AA} O42 - Logiciel: NVIDIA Pilote graphique 334.89 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver O42 - Logiciel: Mises à jour NVIDIA 11.10.13 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR O42 - Logiciel: AMCap - (.Noël Danjou.) [HKLM][64Bits] -- AMCap O42 - Logiciel: CinemaP-1.3c - (.Cinema Plus.) [HKLM][64Bits] -- CinemaP-1.3c =>PUP.Optional.CrossRider O42 - Logiciel: DivX Plus DirectShow Filters - (.DivX, Inc..) [HKLM][64Bits] -- DivX Plus DirectShow Filters O42 - Logiciel: DLSecure Toolbar - (.Visicom Media Inc..) [HKLM][64Bits] -- dlsecuretb O42 - Logiciel: Intel(R) Dynamic Platform and Thermal Framework - (.Intel Corporation.) [HKLM][64Bits] -- FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C O42 - Logiciel: GOM Player - (...) [HKLM][64Bits] -- GOM Player O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: Kaspersky Internet Security - (.Kaspersky Lab.) [HKLM][64Bits] -- InstallWIX_{653C1B5A-3287-47B1-8613-0745D4E771C4} O42 - Logiciel: YAC(Yet Another Cleaner!) - (.ELEX DO BRASIL PARTICIPAÇÕES LTDA.) [HKLM][64Bits] -- iSafe =>PUP.Optional.Elex O42 - Logiciel: iWebar - (.iWebar.) [HKLM][64Bits] -- iWebar =>PUP.Optional.CrossRider O42 - Logiciel: Désinstaller Le Petit Robert de la langue française - (...) [HKLM][64Bits] -- Le Petit Robert O42 - Logiciel: LiveUpdateWPP - (.Anti-phishing database updater for Web Protector Plus. This service keeps your computer updated with the newest database of known Internet threats..) [HKLM][64Bits] -- LiveUpdateWPP =>PUP.Optional.WebProtector O42 - Logiciel: Mobile Broadband HL Service - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- Mobile Broadband HL Service O42 - Logiciel: Object Browser - (.Object Browser.) [HKLM][64Bits] -- Object Browser =>PUP.Optional.ObjectBrowser O42 - Logiciel: Picexa - (.Taiwan Shui Mu Chih Ching Technology Limited.) [HKLM][64Bits] -- Picexa =>PUP.Optional.Picexa O42 - Logiciel: RStudio - (.RStudio.) [HKLM][64Bits] -- RStudio O42 - Logiciel: Rtools 3.1 - (.The R Foundation.) [HKLM][64Bits] -- Rtools_is1 O42 - Logiciel: Ayat - (.UNKNOWN.) [HKLM][64Bits] -- sa.edu.ksa.ayat O42 - Logiciel: Sale Clipper - (.Sale Clipper.) [HKLM][64Bits] -- Sale Clipper =>PUP.Optional.SaleClipper O42 - Logiciel: Search Protect - (.Client Connect LTD.) [HKLM][64Bits] -- SearchProtect =>PUP.Optional.SearchProtect O42 - Logiciel: Sense - (.Object Browser.) [HKLM][64Bits] -- Sense O42 - Logiciel: Shopper-Pro - (...) [HKLM][64Bits] -- ShopperPro =>PUP.Optional.ShopperPro O42 - Logiciel: SLD Codec Pack - (...) [HKLM][64Bits] -- SLD Codec Pack O42 - Logiciel: sweet-page uninstall - (.sweet-page.) [HKLM][64Bits] -- sweet-page uninstall =>PUP.Optional.SweetPage O42 - Logiciel: VLC media player 1.0.0-rc3 - (.VideoLAN Team.) [HKLM][64Bits] -- VLC media player O42 - Logiciel: Web Protector IE - (.WebProtector.) [HKLM][64Bits] -- WebProtector =>PUP.Optional.WebProtector O42 - Logiciel: webssearches uninstall - (.webssearches.) [HKLM][64Bits] -- webssearches uninstall =>PUP.Optional.WebsSearches O42 - Logiciel: WindowsMangerProtect20.0.0.1064 - (.WindowsProtect LIMITED.) [HKLM][64Bits] -- WindowsMangerProtect =>PUP.Optional.Fuyu O42 - Logiciel: WordAnchor 1.10.0.19 - (.WordAnchor.) [HKLM][64Bits] -- WordAnchor_1.10.0.19 =>PUP.Optional.WordAnchor O42 - Logiciel: YTDownloader - (.YTDownloader.) [HKLM][64Bits] -- YTDownloader =>PUP.Optional.YTDownloader O42 - Logiciel: CyberLink YouCam - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} O42 - Logiciel: IBM SPSS Statistics 19 - (.SPSS Inc., an IBM Company.) [HKLM][64Bits] -- {06C43FAA-7226-41EF-A05E-9AE0AA849FFE} O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0A3925EA-5B0E-401B-A189-7419149747B2} O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} O42 - Logiciel: Skype™ 6.21 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} O42 - Logiciel: Sybase PowerAMC 15.1 - (.Sybase Inc..) [HKLM][64Bits] -- {48B0BE4A-EDC9-44C4-A3DB-67D62D75961F} O42 - Logiciel: ASUS Smart Gesture - (.ASUS.) [HKLM][64Bits] -- {4D3286A6-F6AB-498A-82A4-E4F040529F3D} O42 - Logiciel: Stata 12 - (.StataCorp LP.) [HKLM][64Bits] -- {5006A0E8-B9B0-48DF-981A-41D005B3E937} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} O42 - Logiciel: Kaspersky Internet Security - (.Kaspersky Lab.) [HKLM][64Bits] -- {653C1B5A-3287-47B1-8613-0745D4E771C4} O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM][64Bits] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} O42 - Logiciel: VC80CRTRedist - 8.0.50727.762 - (.DivX, Inc.) [HKLM][64Bits] -- {767CC44C-9BBC-438D-BAD3-FD4595DD148B} O42 - Logiciel: DivX Codec - (.DivX, Inc..) [HKLM][64Bits] -- {7B63B2922B174135AFC0E1377DD81EC2} O42 - Logiciel: DivX Player - (.DivX, Inc..) [HKLM][64Bits] -- {8ADFC4160D694100B5B8A22DE9DCABD9} O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} O42 - Logiciel: ATK Package - (.ASUS.) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B314-9C83A49B94BE} O42 - Logiciel: DivX Converter - (.DivX, Inc..) [HKLM][64Bits] -- {B13A7C41581B411290FBC0395694E2A9} O42 - Logiciel: DivX Web Player - (.DivX,Inc..) [HKLM][64Bits] -- {B7050CBDB2504B34BC2A9CA0A692CC29} O42 - Logiciel: Ayat - (.UNKNOWN.) [HKLM][64Bits] -- {D1566597-887B-6FAB-A761-018A5D75D6EC} O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} O42 - Logiciel: CodeBlocks - (.The Code::Blocks Team.) [HKCU][64Bits] -- CodeBlocks O42 - Logiciel: InetStat - (.InetStat.) [HKCU][64Bits] -- InetStat =>PUP.Optional.InetStat O42 - Logiciel: Form Cooking - (.Browser Bus corp.) [HKCU][64Bits] -- {9563BC59-9556-4805-8CD4-886781779D8D} ---\\ HKCU & HKLM Software Keys (125) - 7s HKLM\SOFTWARE\Wow6432Node\000ac3b4-5ea6-4a3b-9f11-30dc3ce3ee7f =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\7b395e1e-ab35-4592-94df-4dd315ccc2bd =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\a3726d6e-1d0a-4fed-996f-ad27e1082d8e =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\AsLdr HKLM\SOFTWARE\Wow6432Node\ASUS HKLM\SOFTWARE\Wow6432Node\b2ee8ba1-5b1f-4333-9c46-818e525c3964 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\BSPACode HKLM\SOFTWARE\Wow6432Node\BSShellFolderCache HKLM\SOFTWARE\Wow6432Node\c6646b42-24e1-409d-9113-5ef8c4e599fe =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\CinemaP-1.3c =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\CinemaP-1.3c-nv =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\CLSYSTEM HKLM\SOFTWARE\Wow6432Node\CyberLink HKLM\SOFTWARE\Wow6432Node\delta-homesSoftware =>PUP.Optional.DeltaHomes HKLM\SOFTWARE\Wow6432Node\DivXNetworks HKLM\SOFTWARE\Wow6432Node\dlsecuretb HKLM\SOFTWARE\Wow6432Node\Elex-tech HKLM\SOFTWARE\Wow6432Node\Email Notifier HKLM\SOFTWARE\Wow6432Node\ErrorLists-crcodedownloader =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\f0f07bc1-28b9-4b67-99eb-cb0a483b004d =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\f580f8fc-3cc6-4e06-8425-f973bdb6aa2b =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\ff47689d-df81-4df6-9b46-8333d485d937 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\GRETECH HKLM\SOFTWARE\Wow6432Node\hdcode HKLM\SOFTWARE\Wow6432Node\IBM HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\IVT Corporation HKLM\SOFTWARE\Wow6432Node\iWebar =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\iWebar-nv =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\KasperskyLab HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Le Robert HKLM\SOFTWARE\Wow6432Node\LiveUpdateWPP =>PUP.Optional.WebProtector HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\Ntpad HKLM\SOFTWARE\Wow6432Node\Nuance HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation HKLM\SOFTWARE\Wow6432Node\Object Browser =>PUP.Optional.ObjectBrowser HKLM\SOFTWARE\Wow6432Node\Object Browser-nv =>PUP.Optional.ObjectBrowser HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\Opera Software HKLM\SOFTWARE\Wow6432Node\PegasusImaging HKLM\SOFTWARE\Wow6432Node\Picexa =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\PicexaSvc =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\R-core HKLM\SOFTWARE\Wow6432Node\R-TT HKLM\SOFTWARE\Wow6432Node\Rainbow Technologies HKLM\SOFTWARE\Wow6432Node\Ralink Corporation HKLM\SOFTWARE\Wow6432Node\RStudio HKLM\SOFTWARE\Wow6432Node\SaleClipper =>PUP.Optional.SaleClipper HKLM\SOFTWARE\Wow6432Node\SearchProtect =>PUP.Optional.SearchProtect HKLM\SOFTWARE\Wow6432Node\SecureWebChannel =>PUP.Optional.SecureSoft HKLM\SOFTWARE\Wow6432Node\Sense HKLM\SOFTWARE\Wow6432Node\Sense-nv =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SLD HKLM\SOFTWARE\Wow6432Node\SPPDCOM =>PUP.Optional.PCSpeedUp HKLM\SOFTWARE\Wow6432Node\Stata HKLM\SOFTWARE\Wow6432Node\sweet-pageSoftware =>PUP.Optional.SweetPage HKLM\SOFTWARE\Wow6432Node\Sybase HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WebProtector =>PUP.Optional.BProtector HKLM\SOFTWARE\Wow6432Node\webssearchesSoftware =>PUP.Optional.WebsSearches HKLM\SOFTWARE\Wow6432Node\WordAnchor_1.10.0.19 =>PUP.Optional.WordAnchor HKLM\SOFTWARE\Wow6432Node\YTDownloader =>PUP.Optional.YTDownloader HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\AC3Filter HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\ASUS HKCU\SOFTWARE\CodeBlocks HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\DivXNetworks HKCU\SOFTWARE\DownLite HKCU\SOFTWARE\drpsu HKCU\SOFTWARE\Facebook HKCU\SOFTWARE\ForumerIT =>Toolbar.Forumer HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\Google HKCU\SOFTWARE\GRETECH HKCU\SOFTWARE\GSpot Appliance Corp HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\InetStat =>PUP.Optional.InetStat HKCU\SOFTWARE\Intel HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\KasperskyLab HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MEDASYS HKCU\SOFTWARE\Mine HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\NVIDIA Corporation HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\PegasusImaging HKCU\SOFTWARE\ProductSetup =>PUP.Optional.InstallCore HKCU\SOFTWARE\R-TT HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\Screentime Media HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SkypeRS HKCU\SOFTWARE\Stata HKCU\SOFTWARE\SupHpUISoft =>PUP.Optional.CrossRider HKCU\SOFTWARE\Sybase HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\V9 =>PUP.Optional.V9Software HKCU\SOFTWARE\Vittalia =>PUP.Optional.Vittalia HKCU\SOFTWARE\Waves Audio HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\YTDownloader =>PUP.Optional.YTDownloader HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\CinemaP-1.3c =>PUP.Optional.CrossRider HKCU\SOFTWARE\AppDataLow\Software\iWebar =>PUP.Optional.CrossRider HKCU\SOFTWARE\AppDataLow\Software\Object Browser =>PUP.Optional.ObjectBrowser HKCU\SOFTWARE\AppDataLow\Software\Sense ---\\ Contenu des dossiers Programmes (O43) (209) - 6s O43 - CFD: 2015/08/10 19:47:17 - [] D -- C:\Program Files (x86)\48 dresses O43 - CFD: 2015/02/05 22:24:41 - [] D -- C:\Program Files (x86)\Adobe O43 - CFD: 2014/09/30 23:12:34 - [] D -- C:\Program Files (x86)\ASUS O43 - CFD: 2015/02/05 22:24:49 - [] D -- C:\Program Files (x86)\Ayat O43 - CFD: 2015/05/31 00:34:54 - [] D -- C:\Program Files (x86)\Big Phat Sports O43 - CFD: 2015/08/10 20:05:12 - [] D -- C:\Program Files (x86)\CinemaP-1.3c =>PUP.Optional.CrossRider O43 - CFD: 2014/11/04 13:54:55 - [] D -- C:\Program Files (x86)\CodeBlocks O43 - CFD: 2015/08/10 19:37:44 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 2014/10/01 00:20:59 - [] D -- C:\Program Files (x86)\CyberLink O43 - CFD: 2015/08/10 19:47:17 - [] D -- C:\Program Files (x86)\disco savings O43 - CFD: 2014/09/30 21:56:35 - [] D -- C:\Program Files (x86)\DivX O43 - CFD: 2015/08/10 19:48:50 - [] D -- C:\Program Files (x86)\dlsecuretb O43 - CFD: 2014/10/31 01:14:44 - [] D -- C:\Program Files (x86)\DownLite O43 - CFD: 2015/08/10 19:47:17 - [] D -- C:\Program Files (x86)\e253af97-89b9-4831-8b49-6c20bab475d2 =>PUP.Optional.CrossRider O43 - CFD: 2015/08/10 19:37:46 - [] D -- C:\Program Files (x86)\Elex-tech =>PUP.Optional.Elex O43 - CFD: 2015/08/10 19:47:17 - [] D -- C:\Program Files (x86)\fun4u O43 - CFD: 2015/08/02 22:46:27 - [] D -- C:\Program Files (x86)\Google O43 - CFD: 2014/09/30 21:57:02 - [] D -- C:\Program Files (x86)\GRETECH O43 - CFD: 2015/07/07 09:56:40 - [] D -- C:\Program Files (x86)\IBM O43 - CFD: 2015/02/05 22:24:55 - [] HD -- C:\Program Files (x86)\InstallJammer Registry O43 - CFD: 2015/04/16 12:11:55 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 2014/09/30 23:10:44 - [] D -- C:\Program Files (x86)\Intel O43 - CFD: 2015/07/03 16:05:31 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 2015/08/10 19:48:50 - [] D -- C:\Program Files (x86)\iWebar =>PUP.Optional.CrossRider O43 - CFD: 2014/10/01 00:37:32 - [] D -- C:\Program Files (x86)\Kaspersky Lab O43 - CFD: 2014/11/15 17:39:15 - [] D -- C:\Program Files (x86)\Le Robert O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Program Files (x86)\LiveUpdateWPP =>PUP.Optional.WebProtector O43 - CFD: 2015/08/10 19:48:49 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Program Files (x86)\Megasoft Security O43 - CFD: 2014/09/30 22:03:44 - [] D -- C:\Program Files (x86)\Microsoft Office O43 - CFD: 2014/09/30 22:03:43 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio O43 - CFD: 2014/09/30 22:03:51 - [] D -- C:\Program Files (x86)\Microsoft Works O43 - CFD: 2013/08/22 16:36:30 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 2015/08/10 19:53:14 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 2014/10/31 00:59:13 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 2014/09/30 21:57:27 - [] D -- C:\Program Files (x86)\Noel Danjou O43 - CFD: 2014/09/30 22:52:18 - [] D -- C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 2015/08/10 19:58:06 - [] D -- C:\Program Files (x86)\Object Browser =>PUP.Optional.ObjectBrowser O43 - CFD: 2015/08/01 00:57:31 - [] D -- C:\Program Files (x86)\Opera O43 - CFD: 2015/08/05 23:29:36 - [] D -- C:\Program Files (x86)\Personal Computer Software O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Program Files (x86)\Picexa =>PUP.Optional.Picexa O43 - CFD: 2015/03/01 15:42:48 - [] D -- C:\Program Files (x86)\R-Studio O43 - CFD: 2014/09/30 23:05:11 - [] D -- C:\Program Files (x86)\Ralink Corporation O43 - CFD: 2014/10/31 00:59:13 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Program Files (x86)\Sale Clipper =>PUP.Optional.SaleClipper O43 - CFD: 2015/08/10 19:37:56 - [] D -- C:\Program Files (x86)\SearchProtect =>PUP.Optional.SearchProtect O43 - CFD: 2015/08/10 19:59:41 - [] D -- C:\Program Files (x86)\Sense O43 - CFD: 2014/10/31 01:17:49 - [] D -- C:\Program Files (x86)\ShopperPro =>PUP.Optional.ShopperPro O43 - CFD: 2015/07/04 18:39:24 - [] RD -- C:\Program Files (x86)\Skype O43 - CFD: 2014/09/30 21:59:31 - [] D -- C:\Program Files (x86)\SLD Codec Pack O43 - CFD: 2015/03/09 19:36:23 - [] D -- C:\Program Files (x86)\Stata12 O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Program Files (x86)\SupTab =>PUP.Optional.SupTab O43 - CFD: 2015/04/16 12:11:36 - [] D -- C:\Program Files (x86)\Sybase O43 - CFD: 2014/09/30 21:59:52 - [] D -- C:\Program Files (x86)\VideoLAN O43 - CFD: 2015/08/10 19:48:50 - [] D -- C:\Program Files (x86)\WebProtector =>PUP.Optional.WebProtect O43 - CFD: 2013/08/22 23:25:40 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 2013/08/22 23:25:40 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 2013/08/22 23:25:40 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 2013/08/22 16:36:33 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 2013/08/22 16:36:30 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 2013/08/22 23:25:40 - [] D -- C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 2013/08/22 16:36:33 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 2013/08/22 16:36:30 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 2013/08/22 16:36:30 - [] D -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Program Files (x86)\WordAnchor_1.10.0.19 =>PUP.Optional.WordAnchor O43 - CFD: 2014/10/31 01:51:50 - [] D -- C:\Program Files (x86)\YTDownloader =>PUP.Optional.YTDownloader O43 - CFD: 2015/07/07 10:00:58 - [] HD -- C:\Program Files (x86)\Zero G Registry O43 - CFD: 2013/08/22 16:36:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 2013/08/22 23:27:43 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2013/08/22 16:36:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2014/09/30 23:18:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS O43 - CFD: 2014/10/02 21:33:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks O43 - CFD: 2014/09/30 21:56:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX O43 - CFD: 2014/09/30 21:57:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 2015/07/07 09:58:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IBM SPSS Statistics O43 - CFD: 2014/10/01 00:37:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security O43 - CFD: 2014/10/01 00:16:39 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>PUA.KMSpico O43 - CFD: 2014/11/15 17:41:13 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Le Petit Robert O43 - CFD: 2013/08/22 16:36:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2014/09/30 22:04:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa =>PUP.Optional.Picexa O43 - CFD: 2015/07/11 16:27:32 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R O43 - CFD: 2015/05/04 20:53:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RStudio O43 - CFD: 2014/10/19 16:43:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 2014/09/30 21:59:31 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SLD Codec Pack O43 - CFD: 2015/05/12 17:36:45 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 2015/03/09 19:32:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stata 12 O43 - CFD: 2015/04/16 12:13:02 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sybase O43 - CFD: 2013/08/22 16:36:33 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 2013/08/22 23:27:43 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 2014/09/30 21:59:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 2015/07/01 00:17:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2015/02/05 22:24:42 - [] D -- C:\ProgramData\Adobe O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 2015/08/10 17:22:00 - [] D -- C:\ProgramData\boost_interprocess O43 - CFD: 2014/09/30 21:45:06 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 2015/01/04 17:32:54 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 2014/11/15 22:49:43 - [] D -- C:\ProgramData\EmailNotifier =>PUP.Optional.EmailNotifier O43 - CFD: 2015/08/11 01:29:31 - [] D -- C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b O43 - CFD: 2015/08/11 01:24:54 - [] D -- C:\ProgramData\Kaspersky Lab O43 - CFD: 2015/08/10 18:09:14 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 2014/09/30 21:45:06 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 2014/10/01 15:46:37 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 2014/09/30 22:04:16 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 2014/10/02 22:53:07 - [] D -- C:\ProgramData\MobileBrServ O43 - CFD: 2014/09/30 21:45:06 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 2015/08/10 17:56:10 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 2014/09/30 22:53:23 - [] D -- C:\ProgramData\NVIDIA O43 - CFD: 2014/09/30 22:52:20 - [] D -- C:\ProgramData\NVIDIA Corporation O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\ProgramData\P4G O43 - CFD: 2015/04/16 12:14:19 - [] D -- C:\ProgramData\PowerAMC 15 O43 - CFD: 2014/09/30 23:05:13 - [] D -- C:\ProgramData\Ralink Bluetooth Stack O43 - CFD: 2013/08/22 23:27:43 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 2015/07/03 17:40:25 - [] D -- C:\ProgramData\SafeNet Sentinel O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\ProgramData\ShopperPro =>PUP.Optional.ShopperPro O43 - CFD: 2014/10/19 16:43:27 - [] D -- C:\ProgramData\Skype O43 - CFD: 2015/07/07 09:58:25 - [] D -- C:\ProgramData\SPSS O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 2014/10/01 00:18:44 - [] D -- C:\ProgramData\Temp O43 - CFD: 2013/08/22 15:45:52 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 2015/02/05 22:24:41 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 2014/09/30 22:03:43 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 2014/09/30 21:56:26 - [] D -- C:\Program Files (x86)\Common Files\DivX Shared O43 - CFD: 2015/08/11 01:22:27 - [] D -- C:\Program Files (x86)\Common Files\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b O43 - CFD: 2015/07/07 09:57:12 - [] D -- C:\Program Files (x86)\Common Files\IBM O43 - CFD: 2014/09/30 22:50:44 - [] D -- C:\Program Files (x86)\Common Files\Intel O43 - CFD: 2014/09/30 23:04:23 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 2014/09/30 21:56:32 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine O43 - CFD: 2013/08/22 16:36:33 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 2014/10/19 16:43:26 - [] D -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 2015/07/05 01:30:54 - [] D -- C:\Program Files (x86)\Common Files\SPSS O43 - CFD: 2014/09/30 22:01:38 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 2015/02/05 22:24:42 - [] D -- C:\Users\user\AppData\Roaming\Adobe O43 - CFD: 2015/08/11 01:00:51 - [] D -- C:\Users\user\AppData\Roaming\codeblocks O43 - CFD: 2014/10/01 00:23:07 - [] D -- C:\Users\user\AppData\Roaming\CyberLink O43 - CFD: 2014/11/28 14:44:39 - [] D -- C:\Users\user\AppData\Roaming\DivX O43 - CFD: 2014/10/31 01:13:50 - [] D -- C:\Users\user\AppData\Roaming\DownLite O43 - CFD: 2015/07/07 10:13:49 - [] D -- C:\Users\user\AppData\Roaming\Eclipse O43 - CFD: 2015/08/10 19:41:43 - [] D -- C:\Users\user\AppData\Roaming\Elex-tech =>PUP.Optional.Elex O43 - CFD: 2014/10/02 21:09:50 - [] D -- C:\Users\user\AppData\Roaming\GRETECH O43 - CFD: 2014/10/02 22:07:38 - [] D -- C:\Users\user\AppData\Roaming\Identities O43 - CFD: 2015/08/10 19:47:30 - [] D -- C:\Users\user\AppData\Roaming\InetStat =>PUP.Optional.InetStat O43 - CFD: 2015/04/16 12:11:16 - [] D -- C:\Users\user\AppData\Roaming\InstallShield O43 - CFD: 2015/07/10 12:59:45 - [] D -- C:\Users\user\AppData\Roaming\LaunchPad O43 - CFD: 2014/11/30 03:55:51 - [] D -- C:\Users\user\AppData\Roaming\Macromedia O43 - CFD: 2015/07/12 13:56:54 - [] SD -- C:\Users\user\AppData\Roaming\Microsoft O43 - CFD: 2015/08/10 19:41:54 - [] D -- C:\Users\user\AppData\Roaming\Mozilla O43 - CFD: 2015/08/05 18:27:32 - [] D -- C:\Users\user\AppData\Roaming\Notepad++ O43 - CFD: 2015/08/10 19:41:56 - [] D -- C:\Users\user\AppData\Roaming\Opera Software O43 - CFD: 2015/08/10 19:47:31 - [] D -- C:\Users\user\AppData\Roaming\Picexa Viewer =>PUP.Optional.Picexa O43 - CFD: 2015/02/22 19:35:02 - [] D -- C:\Users\user\AppData\Roaming\R-TT O43 - CFD: 2015/04/30 11:49:00 - [] D -- C:\Users\user\AppData\Roaming\RStudio O43 - CFD: 2015/02/05 22:26:37 - [] D -- C:\Users\user\AppData\Roaming\sa.edu.ksa.ayat O43 - CFD: 2015/07/03 17:17:25 - [] D -- C:\Users\user\AppData\Roaming\Shortcut O43 - CFD: 2015/08/11 01:25:44 - [] D -- C:\Users\user\AppData\Roaming\Skype O43 - CFD: 2015/03/01 15:23:48 - [0] D -- C:\Users\user\AppData\Roaming\Stata10 O43 - CFD: 2015/08/10 19:47:31 - [] D -- C:\Users\user\AppData\Roaming\sweet-page =>PUP.Optional.SweetPage O43 - CFD: 2015/05/12 17:36:46 - [] D -- C:\Users\user\AppData\Roaming\Temp O43 - CFD: 2014/10/31 00:15:49 - [] D -- C:\Users\user\AppData\Roaming\Thinstall O43 - CFD: 2015/08/10 19:47:31 - [] D -- C:\Users\user\AppData\Roaming\Updater O43 - CFD: 2015/05/04 17:29:48 - [] D -- C:\Users\user\AppData\Roaming\vlc O43 - CFD: 2015/08/10 19:47:31 - [] D -- C:\Users\user\AppData\Roaming\webssearches =>PUP.Optional.WebsSearches O43 - CFD: 2015/07/01 00:17:30 - [] D -- C:\Users\user\AppData\Roaming\WinRAR O43 - CFD: 2015/08/11 01:33:27 - [] D -- C:\Users\user\AppData\Roaming\ZHP O43 - CFD: 2015/02/05 22:24:35 - [] D -- C:\Users\user\AppData\Local\Adobe O43 - CFD: 2014/09/30 21:52:18 - [0] SHD -- C:\Users\user\AppData\Local\Application Data O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Users\user\AppData\Local\ASUS O43 - CFD: 2015/08/10 19:53:02 - [] D -- C:\Users\user\AppData\Local\avabvexvac O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Users\user\AppData\Local\bluesoleil O43 - CFD: 2015/08/10 15:36:08 - [0] D -- C:\Users\user\AppData\Local\Browser Bus O43 - CFD: 2015/08/01 00:51:45 - [] D -- C:\Users\user\AppData\Local\Chromium O43 - CFD: 2014/10/31 01:02:15 - [] D -- C:\Users\user\AppData\Local\CrashRpt =>.Legitimate.CrashReports O43 - CFD: 2014/10/01 00:22:59 - [] D -- C:\Users\user\AppData\Local\CyberLink O43 - CFD: 2015/08/03 01:16:34 - [] D -- C:\Users\user\AppData\Local\Diagnostics O43 - CFD: 2015/06/07 18:49:40 - [0] D -- C:\Users\user\AppData\Local\ElevatedDiagnostics O43 - CFD: 2014/10/12 22:29:59 - [] D -- C:\Users\user\AppData\Local\Facebook O43 - CFD: 2015/08/10 19:47:18 - [] D -- C:\Users\user\AppData\Local\Form Cooking O43 - CFD: 2014/10/31 01:07:16 - [] D -- C:\Users\user\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate O43 - CFD: 2014/10/01 15:51:02 - [] D -- C:\Users\user\AppData\Local\Google O43 - CFD: 2014/09/30 21:52:18 - [0] SHD -- C:\Users\user\AppData\Local\Historique O43 - CFD: 2015/08/10 19:38:13 - [] D -- C:\Users\user\AppData\Local\Installer =>PUP.Optional.InstallPedia O43 - CFD: 2014/10/28 20:58:31 - [] D -- C:\Users\user\AppData\Local\Intel_Corporation O43 - CFD: 2015/07/07 10:13:40 - [] D -- C:\Users\user\AppData\Local\javasharedresources O43 - CFD: 2015/07/12 13:47:48 - [] D -- C:\Users\user\AppData\Local\Microsoft O43 - CFD: 2015/01/02 22:39:38 - [] D -- C:\Users\user\AppData\Local\Microsoft Help O43 - CFD: 2015/08/10 17:56:19 - [] D -- C:\Users\user\AppData\Local\Mozilla O43 - CFD: 2015/07/03 17:17:17 - [] D -- C:\Users\user\AppData\Local\Opera Software O43 - CFD: 2014/10/19 16:29:04 - [] D -- C:\Users\user\AppData\Local\Packages O43 - CFD: 2014/10/01 00:16:24 - [] D -- C:\Users\user\AppData\Local\Programs O43 - CFD: 2015/08/11 01:00:30 - [] D -- C:\Users\user\AppData\Local\RStudio-Desktop O43 - CFD: 2014/10/19 16:43:32 - [] D -- C:\Users\user\AppData\Local\Skype O43 - CFD: 2015/08/11 01:33:42 - [] D -- C:\Users\user\AppData\Local\Temp O43 - CFD: 2014/09/30 21:52:18 - [0] SHD -- C:\Users\user\AppData\Local\Temporary Internet Files O43 - CFD: 2014/10/31 00:15:49 - [] D -- C:\Users\user\AppData\Local\Thinstall O43 - CFD: 2014/11/15 17:42:25 - [] D -- C:\Users\user\AppData\Local\VirtualStore O43 - CFD: 2013/08/22 16:36:32 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 2013/08/22 16:36:32 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2014/09/30 21:52:30 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2014/11/04 13:54:28 - [0] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CodeBlocks O43 - CFD: 2014/10/01 00:21:02 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam O43 - CFD: 2015/08/05 18:26:21 - [0] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat =>PUP.Optional.InetStat O43 - CFD: 2013/08/22 16:36:32 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/08/01 01:01:24 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2013/08/22 16:36:32 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 2015/07/01 00:17:06 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2014/10/31 01:38:12 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader =>PUP.Optional.YTDownloader ---\\ Derniers fichiers créés dans Windows Prefetcher (O45) (18) - 23s O45 - LFCP:[MD5.9B462130EB1F8628E2206AC5AEE15DCF] 2015/08/01 00:55:56 A -- C:\Windows\Prefetch\BACKUPSTACK.EXE-0A0E71E8.pf =>PUP.Optional.MyPCBackup O45 - LFCP:[MD5.0C96977A7757F2FCEF7451D9BBE0AE7A] 2015/08/06 01:24:29 A -- C:\Windows\Prefetch\CINEMAP-1.3C-BG.EXE-D8D5C4ED.pf =>PUP.Optional.CrossRider O45 - LFCP:[MD5.5721FF044E3E9A607FD1D3E7D4BC4231] 2015/08/10 00:29:00 A -- C:\Windows\Prefetch\CINEMAP-1.3C-CODEDOWNLOADER.E-85255D32.pf =>PUP.Optional.CrossRider O45 - LFCP:[MD5.69716CD17FEACD295CBC1342F3AFB325] 2015/08/06 01:13:02 A -- C:\Windows\Prefetch\INETSTAT.EXE-95D92388.pf =>PUP.Optional.InetStat O45 - LFCP:[MD5.858A08396AF7A6BAC8842D64C2E4E4AA] 2015/08/06 01:24:30 A -- C:\Windows\Prefetch\IWEBAR-BG.EXE-ADBB5123.pf =>PUP.Optional.CrossRider O45 - LFCP:[MD5.71E974139A71E5C00BE089E12978BCEB] 2015/08/06 01:24:20 A -- C:\Windows\Prefetch\IWEBAR-BUTTONUTIL64.EXE-2A0498E2.pf =>PUP.Optional.CrossRider O45 - LFCP:[MD5.F5F7E30277A45EAE8C26F2133EF909F9] 2015/08/11 01:07:00 A -- C:\Windows\Prefetch\IWEBAR-CODEDOWNLOADER.EXE-EDFC6328.pf =>PUP.Optional.CrossRider O45 - LFCP:[MD5.C6BDD151B8D24ACEC43A755576F6E1FE] 2015/07/03 16:04:46 A -- C:\Windows\Prefetch\JUNE15_3936_CORNL_SWEET-PAGE.-DD6F58C5.pf =>PUP.Optional.SweetPage O45 - LFCP:[MD5.92857D2360C332A08560330A738530CE] 2015/07/03 16:05:09 A -- C:\Windows\Prefetch\LIVEUPDATEWPP.EXE-BAACD31D.pf =>PUP.Optional.WebProtector O45 - LFCP:[MD5.BCD063CC05FF4B453C4741EBEA2F08BA] 2015/08/01 00:59:34 A -- C:\Windows\Prefetch\MYPC BACKUP.EXE-98FB306F.pf =>PUP.Optional.MyPCBackup O45 - LFCP:[MD5.80911062AA5C234B03E676A15E78F8E4] 2015/08/06 01:24:30 A -- C:\Windows\Prefetch\OBJECT BROWSER-BG.EXE-92CFBB55.pf =>PUP.Optional.ObjectBrowser O45 - LFCP:[MD5.FE90D612D72C6709BDC409ED3BCA1A25] 2015/08/06 01:24:20 A -- C:\Windows\Prefetch\OBJECT BROWSER-BUTTONUTIL64.E-F21D7174.pf =>PUP.Optional.ObjectBrowser O45 - LFCP:[MD5.0E69D93E4AAA83595CA5E4CF6C08C317] 2015/08/11 01:08:01 A -- C:\Windows\Prefetch\OBJECT BROWSER-CODEDOWNLOADER-BDEEF49A.pf =>PUP.Optional.ObjectBrowser O45 - LFCP:[MD5.E70D0D7CB8B46AE63B71F09B6AD92B6F] 2015/08/11 00:53:46 A -- C:\Windows\Prefetch\PICEXA.EXE-2C49876D.pf =>PUP.Optional.Picexa O45 - LFCP:[MD5.13DC5712D9B0E7F0B67EC574C22EBF6B] 2015/06/25 10:35:05 A -- C:\Windows\Prefetch\PICEXASVC.EXE-BE57AC91.pf =>PUP.Optional.Picexa O45 - LFCP:[MD5.97E26A692A23FBE46E8E5AF819A0745B] 2015/08/02 22:44:44 A -- C:\Windows\Prefetch\PRIVOXY.EXE-397FB0DC.pf =>PUP.Optional.Privoxy O45 - LFCP:[MD5.937AB4EA555B679192B81D6DE4354A65] 2015/08/01 00:59:47 A -- C:\Windows\Prefetch\SIGNUP WIZARD.EXE-CEFD4E77.pf =>PUP.Optional.MyPCBackup O45 - LFCP:[MD5.6568C6C3D39FEC1EAD61AB921B230710] 2015/07/03 16:04:47 A -- C:\Windows\Prefetch\WORDANCHOR-SETUP-1.10.0.19.EX-E28E87F7.pf =>PUP.Optional.WordAnchor ---\\ Liste des pilotes du système (SDL) (O58) (77) - 2s O58 - SDL:2015/07/31 22:46:31 A . (...) -- C:\Windows\System32\drivers\28fd9db5cf0b046.sys [94680] O58 - SDL:2013/08/22 13:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [108896] O58 - SDL:2013/08/22 13:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [782176] O58 - SDL:2013/08/22 13:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79200] O58 - SDL:2013/08/22 13:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424] O58 - SDL:2013/08/22 13:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [25952] O58 - SDL:2013/08/22 13:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [114016] O58 - SDL:2013/10/09 06:52:16 A . (.ASUS - HID driver for ASUS Wireless Radio Control.) -- C:\Windows\System32\drivers\AsHIDSwitch64.sys [20280] O58 - SDL:2013/05/28 17:03:26 A . (.ASUS Corporation - Asus TP Filter Driver.) -- C:\Windows\System32\drivers\AsusTP.sys [65784] O58 - SDL:2013/08/13 00:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [17624] O58 - SDL:2012/12/19 20:57:44 A . (.IVT Corporation - Bluelet Audio Adapter Driver.) -- C:\Windows\System32\drivers\blueletaudio.sys [33968] O58 - SDL:2012/06/15 10:22:02 A . (.IVT Corporation - Bluetooth Audio Bus Driver.) -- C:\Windows\System32\drivers\BtAudioBus.sys [23136] O58 - SDL:2012/07/19 16:47:40 A . (.Ralink Corporation - Bluetooth L2CAP_SCO Interface Profile Drive.) -- C:\Windows\System32\drivers\BtL2caScoIf.sys [56904] O58 - SDL:2013/08/22 13:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296] O58 - SDL:2013/04/22 03:13:30 A . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\System32\drivers\DptfDevPch.sys [57216] O58 - SDL:2013/04/22 03:13:30 A . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\System32\drivers\DptfDevProc.sys [120256] O58 - SDL:2013/04/22 03:13:30 A . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal Frame.) -- C:\Windows\System32\drivers\DptfManager.sys [200808] O58 - SDL:2013/08/22 13:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3357024] O58 - SDL:2014/11/03 22:46:41 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys [117248] O58 - SDL:2014/11/03 22:46:41 A . (.Huawei Technologies Co., Ltd. - ew_jubusenum Driver.) -- C:\Windows\System32\drivers\ew_jubusenum.sys [87040] O58 - SDL:2014/11/03 22:46:41 A . (.Huawei Technologies Co., Ltd. - ew_jucdcacm Driver.) -- C:\Windows\System32\drivers\ew_jucdcacm.sys [98304] O58 - SDL:2014/11/03 22:46:41 A . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\drivers\ew_jucdcecm.sys [72192] O58 - SDL:2014/11/03 22:46:41 A . (.Huawei Technologies Co., Ltd. - ew_juextctrl Driver.) -- C:\Windows\System32\drivers\ew_juextctrl.sys [28672] O58 - SDL:2014/11/03 22:46:41 A . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys [13952] O58 - SDL:2013/08/22 13:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352] O58 - SDL:2013/07/30 19:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568] O58 - SDL:2013/07/25 20:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320] O58 - SDL:2013/11/16 04:59:44 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStorA.sys [632168] O58 - SDL:2013/08/10 01:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [651248] O58 - SDL:2013/08/22 13:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000] O58 - SDL:2013/10/01 12:02:30 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [4177920] O58 - SDL:2014/02/11 18:24:36 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [450520] O58 - SDL:2014/02/07 03:25:47 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\intelaud.sys [38296] O58 - SDL:2015/05/06 04:27:33 A . (.Elex do Brasil Participações Ltda - iSafe Kernel Boot Driver.) -- C:\Windows\System32\drivers\iSafeKrnlBoot.sys [53568] =>PUP.Optional.YetAnotherCleaner O58 - SDL:2015/04/17 03:43:55 A . (...) -- C:\Windows\System32\drivers\iSafeNetFilter.sys [52392] =>PUP.Optional.YetAnotherCleaner O58 - SDL:2013/03/25 10:03:44 A . (.Ralink Corporation - Bluetooth Filter Driver.) -- C:\Windows\System32\drivers\IvtUrbBtFlt.sys [49584] O58 - SDL:2013/08/22 23:51:12 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\iwdbus.sys [26008] O58 - SDL:2012/08/02 04:22:48 A . (. - Keyboard Filter Driver.) -- C:\Windows\System32\drivers\kbfiltr.sys [14992] O58 - SDL:2014/02/20 11:59:04 A . (.Kaspersky Lab ZAO - Kaspersky Unified Driver.) -- C:\Windows\System32\drivers\kl1.sys [457824] O58 - SDL:2012/07/27 17:38:24 A . (.Kaspersky Lab - Klelam Mini-Filter [fre_win8_x64].) -- C:\Windows\System32\drivers\klelam.sys [29616] O58 - SDL:2014/10/04 23:25:44 A . (.Kaspersky Lab ZAO - Filter Core [fre_win8_x64].) -- C:\Windows\System32\drivers\klflt.sys [141376] O58 - SDL:2014/04/10 16:25:32 A . (.Kaspersky Lab ZAO - KLHK [fre_win8_x64].) -- C:\Windows\System32\drivers\klhk.sys [243808] O58 - SDL:2014/10/04 23:25:44 A . (.Kaspersky Lab ZAO - Klif Mini-Filter [fre_win8_x64].) -- C:\Windows\System32\drivers\klif.sys [769600] O58 - SDL:2014/02/25 12:09:02 A . (.Kaspersky Lab ZAO - Kaspersky Lab Intermediate Network Driver.) -- C:\Windows\System32\drivers\klim6.sys [30304] O58 - SDL:2014/03/28 16:51:02 A . (.Kaspersky Lab ZAO - KLKBDFLT Keyboard Device Filter [fre_win8_x.) -- C:\Windows\System32\drivers\klkbdflt.sys [28768] O58 - SDL:2013/08/08 16:11:00 A . (.Kaspersky Lab ZAO - KLMOUFLT Mouse Device Filter [fre_win8_x64].) -- C:\Windows\System32\drivers\klmouflt.sys [29280] O58 - SDL:2013/04/12 14:34:48 A . (.Kaspersky Lab ZAO - KLPD [fre_wnet_x64].) -- C:\Windows\System32\drivers\klpd.sys [15456] O58 - SDL:2014/03/19 16:00:38 A . (.Kaspersky Lab ZAO - Network filtering component [fre_win8_x64].) -- C:\Windows\System32\drivers\klwfp.sys [67680] O58 - SDL:2014/03/26 16:05:28 A . (.Kaspersky Lab ZAO - KNEPS Power [fre_wnet_amd64].) -- C:\Windows\System32\drivers\kneps.sys [179296] O58 - SDL:2013/08/22 13:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109408] O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [93536] O58 - SDL:2013/08/22 13:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [81760] O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784] O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [56672] O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840] O58 - SDL:2013/08/22 13:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840] O58 - SDL:2014/01/01 17:22:16 A . (.Ralink Technology, Corp. - Ralink 802.11 Wireless Adapter Driver.) -- C:\Windows\System32\drivers\netr28x.sys [2499248] O58 - SDL:2014/02/08 19:34:51 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [12324640] O58 - SDL:2014/02/08 19:34:51 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvpciflt.sys [32544] O58 - SDL:2013/08/22 13:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368] O58 - SDL:2013/08/22 13:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [168288] O58 - SDL:2014/01/08 14:24:10 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\Windows\System32\drivers\Rt630x64.sys [848088] O58 - SDL:2013/12/27 10:34:44 A . (.Ralink Technology, Corp. - Ralink Bluetooth Adapter.) -- C:\Windows\System32\drivers\rtbth.sys [1205448] O58 - SDL:2014/02/18 21:43:42 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [3867224] O58 - SDL:2014/01/03 13:34:28 A . (.Realsil Semiconductor Corporation - RTS PCIE READER Driver.) -- C:\Windows\System32\drivers\RtsPer.sys [465624] O58 - SDL:2013/08/22 16:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] O58 - SDL:2013/08/22 13:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896] O58 - SDL:2013/08/22 13:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760] O58 - SDL:2013/12/12 11:07:06 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_Intel.sys [33592] O58 - SDL:2013/08/22 13:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072] O58 - SDL:2013/01/10 19:41:06 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [468720] O58 - SDL:2013/08/22 13:40:24 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\drivers\tap0901.sys [40664] O58 - SDL:2013/12/10 07:27:54 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverx64.sys [100312] O58 - SDL:2013/08/22 13:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [19808] O58 - SDL:2013/08/22 13:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [168800] O58 - SDL:2013/08/22 13:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504] O58 - SDL:2015/06/15 23:21:46 A . (.WA - WA WFP Driver x64.) -- C:\Windows\System32\drivers\wafd_1_10_0_19.sys [57728] =>PUP.Optional.WordAnchor ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61) (6) - 23s O61 - LFC: 2015/08/04 20:12:38 A . (..) -- C:\Users\user\AppData\Roaming\InetStat\inetstat.exe [840206] =>PUP.Optional.InetStat O61 - LFC: 2015/08/05 18:11:34 A . (.Eclipse Foundation.) -- C:\Users\user\AppData\Roaming\Eclipse\com.ibm.spss.statistics.help_19\configuration\nl\fr_FR\org.eclipse.osgi\bundles\62\1\.cp\swt-win32-3448.dll [335872] O61 - LFC: 2015/08/10 19:32:19 A . (..) -- C:\Users\user\AppData\Local\Microsoft\Windows\Sqm\Manifest\Sqm10248.bin [269992] O61 - LFC: 2015/08/09 21:56:11 A . (..) -- C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OO12G1KY\run[1].exe [6656] O61 - LFC: 2015/08/10 20:30:22 A . (..) -- C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\LCVI87XQ\run[1].exe [6656] O61 - LFC: 2015/08/11 01:26:30 A . (..) -- C:\Users\user\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849] ---\\ Associations Shell Spawning (O67) (10) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (SMI) (O68) (8) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69) (5) - 0s O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} - (Trovi search) - http://do-search.com/ =>PUP.Optional.DoSearches O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://do-search.com/ =>PUP.Optional.DoSearches O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} [DefaultScope] - (e) - http://do-search.com/ =>PUP.Optional.DoSearches O69 - SBI: SearchScopes [HKCU] {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} - (Search The Web) - http://do-search.com/ =>PUP.Optional.DoSearches O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://do-search.com/ =>PUP.Optional.DoSearches ---\\ Enumère les services démarrés par Svchost (SSS) (O83) (34) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [207360] O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [155136] O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [155136] O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [324608] O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1311744] O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [1102336] O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [903168] O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [109568] O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [150528] O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [107008] O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1212416] O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [220672] O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [70656] O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [134144] O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [220672] O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [326656] O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [81408] O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [97792] O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [336896] O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [491520] O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\system32\wlidsvc.dll [1563136] O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [50688] O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [201728] O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\ncasvc.dll [164352] O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [101376] O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [534016] O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [223744] O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\sens.dll [71680] O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [433152] O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [306688] O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [3524096] O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1017856] O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [629760] ---\\ Liste des exceptions du parefeu (FirewallRules) (O87) (37) - 1s O87 - FAEL: "{87F55787-00FB-4977-93F7-3D5CD2219ED5}" [In-None-P6-TRUE] .(.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe O87 - FAEL: "{DC10A609-5C7C-4959-BB5B-887CF68F53CD}" [In-None-P17-TRUE] .(.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe O87 - FAEL: "{BC0E1779-15AF-4D42-A8E5-16083BE35915}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe =>PUA.KMSpico O87 - FAEL: "{948B7FE9-FABA-4E17-A3E6-E4B8EE233906}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe =>PUA.KMSpico O87 - FAEL: "{1FBBAF2A-07AF-4D53-ABB6-523BDE4C2CF1}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>PUA.KMSpico O87 - FAEL: "{16E11293-A784-4E35-8110-2E2555AE7F75}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>PUA.KMSpico O87 - FAEL: "{21497696-F36A-410C-AC73-9201B13559C6}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>PUA.KMSpico O87 - FAEL: "{2966A823-A74D-46EF-81E3-7A7DD5E81C74}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>PUA.KMSpico O87 - FAEL: "{9B63300E-5202-463D-9C32-94E9BD52E721}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\dlsecuretb\dtUser.exe O87 - FAEL: "{C831FAAF-E74D-479A-894D-28222BD46E62}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\dlsecuretb\dtUser.exe O87 - FAEL: "{E01C1549-8D7B-4222-A99C-F0CB3AE904C1}" [In-None-P6-TRUE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe O87 - FAEL: "{42E35640-C388-4638-8B80-3BAF45F20CD8}" [In-None-P17-TRUE] .(...) -- C:\ProgramData\EmailNotifier\EmailNotifier.exe O87 - FAEL: "{86D0AF74-6F3A-473A-9FBD-3719FBFFEDB9}" [In-None-P6-TRUE] .(.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe O87 - FAEL: "{86BC28A8-423E-46B7-A0F6-2F67A2B69F46}" [In-None-P17-TRUE] .(.IVT Corporation - Bluetooth Application.) -- C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe O87 - FAEL: "{0D1BEFFD-8A26-4962-8452-CD965B6F4A62}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>PUA.KMSpico O87 - FAEL: "{0FA3CA0B-32AB-40EB-A3A8-F794684ADDF9}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>PUA.KMSpico O87 - FAEL: "{70A4FF28-D299-4E90-A33E-270C78C1B21C}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>PUA.KMSpico O87 - FAEL: "{C84B5D37-9DC1-4B7D-8335-03DF630AAB11}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\Service_KMS.exe =>PUA.KMSpico O87 - FAEL: "{2BC0143D-B440-423C-A189-AE70C8BE2010}" [In-None-P17-TRUE] .(...) -- C:\Users\user\AppData\Local\Chromium\Application\chrome.exe (.not file.) O87 - FAEL: "{9B0D10A8-15F3-4EE3-9000-807AE62E86D7}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\SPSSWinWrapIDE.exe (.not file.) O87 - FAEL: "{50D8B695-E454-4F88-AE2D-F5E0D476BB77}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\SPSSWinWrapIDE.exe (.not file.) O87 - FAEL: "{547A527F-14B9-4AB7-AE50-4F93F2A1AD05}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\statistics.com (.not file.) O87 - FAEL: "{85196ABC-C16B-4D3F-9E34-BD017674E6A4}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\statistics.com (.not file.) O87 - FAEL: "{47FE7A42-FE85-48DB-8813-B6BCA48F9073}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\statistics.exe (.not file.) O87 - FAEL: "{477687CB-7B1D-4FB1-856A-53D414D59F93}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\statistics.exe (.not file.) O87 - FAEL: "{9384B228-F280-417A-9C7B-7016B82CE0F3}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\SPSSWinWrapIDE.exe (.not file.) O87 - FAEL: "{DA4858BF-9076-4D7D-AF69-9BB7913912DD}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\SPSSWinWrapIDE.exe (.not file.) O87 - FAEL: "{702638FC-889C-4E7B-AC99-FC05CB0C6CBF}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\statistics.com (.not file.) O87 - FAEL: "{1A75B54F-C1F9-4C27-B540-F5A4E06F9ED5}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\statistics.com (.not file.) O87 - FAEL: "{D678C5B5-FCF6-498F-A65A-BC54B76CCA01}" [In-None-P6-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\statistics.exe (.not file.) O87 - FAEL: "{94F900BC-55B2-4A8E-A6E8-5A98A6E981CC}" [In-None-P17-FALSE] .(...) -- C:\Program Files (x86)\SPSSInc\Statistics17\statistics.exe (.not file.) O87 - FAEL: "{6B66FD8B-7F74-4360-BA83-A265BD0F2608}" [In-None-P6-FALSE] .(.SPSS Inc. - IBM SPSS Statistics 19 Command.) -- C:\Program Files (x86)\IBM\SPSS\Statistics\19\stats.com O87 - FAEL: "{AF9E21AA-33D7-4079-966B-B9BFBA5C95F1}" [In-None-P17-FALSE] .(.SPSS Inc. - IBM SPSS Statistics 19 Command.) -- C:\Program Files (x86)\IBM\SPSS\Statistics\19\stats.com O87 - FAEL: "{1E3A7D07-5303-4E5E-BFA3-60A404DADBAF}" [In-None-P6-FALSE] .(.SPSS Inc. - IBM SPSS Statistics 19.) -- C:\Program Files (x86)\IBM\SPSS\Statistics\19\stats.exe O87 - FAEL: "{1C47D203-7220-4F41-A54C-74E356439D73}" [In-None-P17-FALSE] .(.SPSS Inc. - IBM SPSS Statistics 19.) -- C:\Program Files (x86)\IBM\SPSS\Statistics\19\stats.exe O87 - FAEL: "{453B33F8-80E2-491B-80F7-A20C98555D2E}" [In-None-P6-FALSE] .(.SPSS Inc. - IBM SPSS Statistics 19 WinWrap Basic IDE.) -- C:\Program Files (x86)\IBM\SPSS\Statistics\19\WinWrapIDE.exe O87 - FAEL: "{2DCE3C9A-BAE4-4876-9214-D4302E92BC94}" [In-None-P17-FALSE] .(.SPSS Inc. - IBM SPSS Statistics 19 WinWrap Basic IDE.) -- C:\Program Files (x86)\IBM\SPSS\Statistics\19\WinWrapIDE.exe ---\\ Recherche de clés de registre Tracing (O100) (2) - 0s HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.Optional.MyPCBackup HKLM\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.Optional.MyPCBackup ---\\ Scan Additionnel (O88) (224) - 0s C:\Program Files\Common Files\ShopperPro\spbiu.exe =>PUP.Optional.ShopperPro C:\Program Files (x86)\Common Files\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\updater.exe =>PUP.Optional.CrossRider C:\Program Files (x86)\CinemaP-1.3c\03028fde-b6ef-4928-878a-0e9ddec76e17-6.exe =>PUP.Optional.CrossRider C:\Program Files (x86)\iWebar\8b41f82b-0f18-4f5d-9626-96e37d948ed4-6.exe =>PUP.Optional.CrossRider C:\Program Files (x86)\Object Browser\5c6c93c5-f845-49dd-a422-09ff1a8de928-6.exe =>PUP.Optional.ObjectBrowser C:\Program Files (x86)\CinemaP-1.3c\dfc00529-3a2c-483f-9afd-ec4fabc47dbd.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugincontainer.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\6\Plugin.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\10\Plugin.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\7\Plugin.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\8\Plugin.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\5\Plugin.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\2\Plugin.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\3\Plugin.exe =>PUP.Optional.CrossRider C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugins\12\Plugin.exe =>PUP.Optional.CrossRider C:\Program Files (x86)\Object Browser\Object Browser-bho64.dll =>PUP.Optional.ObjectBrowser HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311281150} =>PUP.Optional.ObjectBrowser C:\Program Files (x86)\iWebar\iWebar-bho64.dll =>PUP.Optional.CrossRider HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611511123} =>PUP.Optional.CrossRider HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b18906df-1dfa-4d50-8a1f-7d076a8c87b7} =>PUP.Optional.SaleClipper HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D3C24E2B-C820-4492-9B69-11BF7163F998} =>PUP.Optional.SecureSoft C:\Program Files (x86)\WebProtector\WebProtector.dll =>PUP.Optional.WebProtector HKLM\SYSTEM\CurrentControlSet\Services\iSafeService =>PUP.Optional.YetAnotherCleaner C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>PUP.Optional.YetAnotherCleaner HKLM\SYSTEM\CurrentControlSet\Services\LiveUpdateWPP Manager =>PUP.Optional.WebProtector C:\Program Files (x86)\LiveUpdateWPP\LiveUpdateWPP.exe =>PUP.Optional.WebProtector HKLM\SYSTEM\CurrentControlSet\Services\PicexaService =>PUP.Optional.Picexa C:\Program Files (x86)\Picexa\PicexaSvc.exe =>PUP.Optional.Picexa HKLM\SYSTEM\CurrentControlSet\Services\PrivoxyService =>PUP.Optional.Privoxy C:\Program Files (x86)\Megasoft Security\privoxy.exe =>PUP.Optional.Privoxy HKLM\SYSTEM\CurrentControlSet\Services\Service KMSELDI =>PUA.KMSpico C:\Program Files\KMSpico\Service_KMS.exe =>PUA.KMSpico HKLM\SYSTEM\CurrentControlSet\Services\Service Mgr SaleClipper =>PUP.Optional.SaleClipper C:\ProgramData\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\plugincontainer.exe =>PUP.Optional.SaleClipper HKLM\SYSTEM\CurrentControlSet\Services\SPBIUpd =>PUP.Optional.ShopperPro HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr SaleClipper =>PUP.Optional.SaleClipper C:\Program Files (x86)\Common Files\f43a0a22-b5b9-43e4-9c6f-705bf4e40c7b\updater.exe =>PUP.Optional.SaleClipper HKLM\SYSTEM\CurrentControlSet\Services\wasvc_1.10.0.19 =>PUP.Optional.Generic C:\Program Files (x86)\WordAnchor_1.10.0.19\Service\wasvc.exe =>PUP.Optional.Generic C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-1.job =>PUP.Optional.CrossRider C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-11.job =>PUP.Optional.CrossRider C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-2.job =>PUP.Optional.CrossRider C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-3.job =>PUP.Optional.CrossRider C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-4.job =>PUP.Optional.CrossRider C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-5.job =>PUP.Optional.CrossRider C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-5_user.job =>PUP.Optional.CrossRider C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-6.job =>PUP.Optional.CrossRider C:\Windows\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-7.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-1.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-11.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-2.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-3.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-4.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-5.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-5_user.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-6.job =>PUP.Optional.CrossRider C:\Windows\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-7.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-1.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-11.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-2.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-3.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-4.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-5.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-5_user.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-6.job =>PUP.Optional.CrossRider C:\Windows\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-7.job =>PUP.Optional.CrossRider C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-1.job =>PUP.Optional.CrossRider C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-11.job =>PUP.Optional.CrossRider C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-2.job =>PUP.Optional.CrossRider C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-4.job =>PUP.Optional.CrossRider C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-5.job =>PUP.Optional.CrossRider C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-5_user.job =>PUP.Optional.CrossRider C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-6.job =>PUP.Optional.CrossRider C:\Windows\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-7.job =>PUP.Optional.CrossRider C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job =>PUP.Optional.GlobalUpdate C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job =>PUP.Optional.GlobalUpdate C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-11 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-2 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-3 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-4 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-5 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-5_user =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\03028fde-b6ef-4928-878a-0e9ddec76e17-6 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-1 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-11 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-3 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-4 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-5 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-5_user =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-6 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\5c6c93c5-f845-49dd-a422-09ff1a8de928-7 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-1 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-11 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-3 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-4 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-5 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-5_user =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-6 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\80e8d410-b2f7-435c-82bd-72d5842bedfd-7 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-1 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-11 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-2 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-4 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-5 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-5_user =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-6 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\8b41f82b-0f18-4f5d-9626-96e37d948ed4-7 =>PUP.Optional.CrossRider C:\Windows\System32\Tasks\AutoPico Daily Restart =>PUA.KMSpico C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore =>PUP.Optional.GlobalUpdate C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA =>PUP.Optional.GlobalUpdate HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico_is1 =>PUA.KMSpico HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.3c =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iSafe =>PUP.Optional.Elex HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iWebar =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\LiveUpdateWPP =>PUP.Optional.WebProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Object Browser =>PUP.Optional.ObjectBrowser HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Picexa =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Sale Clipper =>PUP.Optional.SaleClipper HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect =>PUP.Optional.SearchProtect HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro =>PUP.Optional.ShopperPro HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\sweet-page uninstall =>PUP.Optional.SweetPage HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WebProtector =>PUP.Optional.WebProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\webssearches uninstall =>PUP.Optional.WebsSearches HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WindowsMangerProtect =>PUP.Optional.Fuyu HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\WordAnchor_1.10.0.19 =>PUP.Optional.WordAnchor HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\YTDownloader =>PUP.Optional.YTDownloader HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InetStat =>PUP.Optional.InetStat HKLM\SOFTWARE\Wow6432Node\000ac3b4-5ea6-4a3b-9f11-30dc3ce3ee7f =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\7b395e1e-ab35-4592-94df-4dd315ccc2bd =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\a3726d6e-1d0a-4fed-996f-ad27e1082d8e =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\b2ee8ba1-5b1f-4333-9c46-818e525c3964 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\c6646b42-24e1-409d-9113-5ef8c4e599fe =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\CinemaP-1.3c =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\CinemaP-1.3c-nv =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\delta-homesSoftware =>PUP.Optional.DeltaHomes HKLM\SOFTWARE\Wow6432Node\ErrorLists-crcodedownloader =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\f0f07bc1-28b9-4b67-99eb-cb0a483b004d =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\f580f8fc-3cc6-4e06-8425-f973bdb6aa2b =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\ff47689d-df81-4df6-9b46-8333d485d937 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\iWebar =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\iWebar-nv =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\LiveUpdateWPP =>PUP.Optional.WebProtector HKLM\SOFTWARE\Wow6432Node\Object Browser =>PUP.Optional.ObjectBrowser HKLM\SOFTWARE\Wow6432Node\Object Browser-nv =>PUP.Optional.ObjectBrowser HKLM\SOFTWARE\Wow6432Node\Picexa =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\PicexaSvc =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\SaleClipper =>PUP.Optional.SaleClipper HKLM\SOFTWARE\Wow6432Node\SearchProtect =>PUP.Optional.SearchProtect HKLM\SOFTWARE\Wow6432Node\SecureWebChannel =>PUP.Optional.SecureSoft HKLM\SOFTWARE\Wow6432Node\Sense-nv =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\SPPDCOM =>PUP.Optional.PCSpeedUp HKLM\SOFTWARE\Wow6432Node\sweet-pageSoftware =>PUP.Optional.SweetPage HKLM\SOFTWARE\Wow6432Node\WebProtector =>PUP.Optional.BProtector HKLM\SOFTWARE\Wow6432Node\webssearchesSoftware =>PUP.Optional.WebsSearches HKLM\SOFTWARE\Wow6432Node\WordAnchor_1.10.0.19 =>PUP.Optional.WordAnchor HKLM\SOFTWARE\Wow6432Node\YTDownloader =>PUP.Optional.YTDownloader HKCU\SOFTWARE\ForumerIT =>Toolbar.Forumer HKCU\SOFTWARE\InetStat =>PUP.Optional.InetStat HKCU\SOFTWARE\ProductSetup =>PUP.Optional.InstallCore HKCU\SOFTWARE\SupHpUISoft =>PUP.Optional.CrossRider HKCU\SOFTWARE\V9 =>PUP.Optional.V9Software HKCU\SOFTWARE\Vittalia =>PUP.Optional.Vittalia HKCU\SOFTWARE\YTDownloader =>PUP.Optional.YTDownloader HKCU\SOFTWARE\AppDataLow\Software\CinemaP-1.3c =>PUP.Optional.CrossRider HKCU\SOFTWARE\AppDataLow\Software\iWebar =>PUP.Optional.CrossRider HKCU\SOFTWARE\AppDataLow\Software\Object Browser =>PUP.Optional.ObjectBrowser C:\Program Files (x86)\CinemaP-1.3c =>PUP.Optional.CrossRider C:\Program Files (x86)\e253af97-89b9-4831-8b49-6c20bab475d2 =>PUP.Optional.CrossRider C:\Program Files (x86)\Elex-tech =>PUP.Optional.Elex C:\Program Files (x86)\iWebar =>PUP.Optional.CrossRider C:\Program Files (x86)\LiveUpdateWPP =>PUP.Optional.WebProtector C:\Program Files (x86)\Object Browser =>PUP.Optional.ObjectBrowser C:\Program Files (x86)\Picexa =>PUP.Optional.Picexa C:\Program Files (x86)\Sale Clipper =>PUP.Optional.SaleClipper C:\Program Files (x86)\SearchProtect =>PUP.Optional.SearchProtect C:\Program Files (x86)\ShopperPro =>PUP.Optional.ShopperPro C:\Program Files (x86)\SupTab =>PUP.Optional.SupTab C:\Program Files (x86)\WebProtector =>PUP.Optional.WebProtect C:\Program Files (x86)\WordAnchor_1.10.0.19 =>PUP.Optional.WordAnchor C:\Program Files (x86)\YTDownloader =>PUP.Optional.YTDownloader C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>PUA.KMSpico C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picexa =>PUP.Optional.Picexa C:\ProgramData\EmailNotifier =>PUP.Optional.EmailNotifier C:\ProgramData\ShopperPro =>PUP.Optional.ShopperPro C:\Users\user\AppData\Roaming\Elex-tech =>PUP.Optional.Elex C:\Users\user\AppData\Roaming\InetStat =>PUP.Optional.InetStat C:\Users\user\AppData\Roaming\Picexa Viewer =>PUP.Optional.Picexa C:\Users\user\AppData\Roaming\sweet-page =>PUP.Optional.SweetPage C:\Users\user\AppData\Roaming\webssearches =>PUP.Optional.WebsSearches C:\Users\user\AppData\Local\CrashRpt =>.Legitimate.CrashReports C:\Users\user\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate C:\Users\user\AppData\Local\Installer =>PUP.Optional.InstallPedia C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InetStat =>PUP.Optional.InetStat C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader =>PUP.Optional.YTDownloader C:\Windows\Prefetch\BACKUPSTACK.EXE-0A0E71E8.pf =>PUP.Optional.MyPCBackup C:\Windows\Prefetch\CINEMAP-1.3C-BG.EXE-D8D5C4ED.pf =>PUP.Optional.CrossRider C:\Windows\Prefetch\CINEMAP-1.3C-CODEDOWNLOADER.E-85255D32.pf =>PUP.Optional.CrossRider C:\Windows\Prefetch\INETSTAT.EXE-95D92388.pf =>PUP.Optional.InetStat C:\Windows\Prefetch\IWEBAR-BG.EXE-ADBB5123.pf =>PUP.Optional.CrossRider C:\Windows\Prefetch\IWEBAR-BUTTONUTIL64.EXE-2A0498E2.pf =>PUP.Optional.CrossRider C:\Windows\Prefetch\IWEBAR-CODEDOWNLOADER.EXE-EDFC6328.pf =>PUP.Optional.CrossRider C:\Windows\Prefetch\JUNE15_3936_CORNL_SWEET-PAGE.-DD6F58C5.pf =>PUP.Optional.SweetPage C:\Windows\Prefetch\LIVEUPDATEWPP.EXE-BAACD31D.pf =>PUP.Optional.WebProtector C:\Windows\Prefetch\MYPC BACKUP.EXE-98FB306F.pf =>PUP.Optional.MyPCBackup C:\Windows\Prefetch\OBJECT BROWSER-BG.EXE-92CFBB55.pf =>PUP.Optional.ObjectBrowser C:\Windows\Prefetch\OBJECT BROWSER-BUTTONUTIL64.E-F21D7174.pf =>PUP.Optional.ObjectBrowser C:\Windows\Prefetch\OBJECT BROWSER-CODEDOWNLOADER-BDEEF49A.pf =>PUP.Optional.ObjectBrowser C:\Windows\Prefetch\PICEXA.EXE-2C49876D.pf =>PUP.Optional.Picexa C:\Windows\Prefetch\PICEXASVC.EXE-BE57AC91.pf =>PUP.Optional.Picexa C:\Windows\Prefetch\PRIVOXY.EXE-397FB0DC.pf =>PUP.Optional.Privoxy C:\Windows\Prefetch\SIGNUP WIZARD.EXE-CEFD4E77.pf =>PUP.Optional.MyPCBackup C:\Windows\Prefetch\WORDANCHOR-SETUP-1.10.0.19.EX-E28E87F7.pf =>PUP.Optional.WordAnchor C:\Windows\System32\drivers\iSafeKrnlBoot.sys =>PUP.Optional.YetAnotherCleaner C:\Windows\System32\drivers\iSafeNetFilter.sys =>PUP.Optional.YetAnotherCleaner C:\Windows\System32\drivers\wafd_1_10_0_19.sys =>PUP.Optional.WordAnchor C:\Users\user\AppData\Roaming\InetStat\inetstat.exe =>PUP.Optional.InetStat C:\Program Files\KMSpico\KMSELDI.exe =>PUA.KMSpico C:\Program Files\KMSpico\AutoPico.exe =>PUA.KMSpico HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc =>PUP.Optional.SearchProtect C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe =>PUP.Optional.SearchProtect HKLM\SYSTEM\CurrentControlSet\Services\wasvc_1.10.0.19 =>PUP.Optional.WordAnchor C:\Program Files (x86)\WordAnchor_1.10.0.19\Service\wasvc.exe =>PUP.Optional.WordAnchor HKLM64\SOFTWARE\Microsoft\Tracing\BackupStack_RASAPI32 =>PUP.Optional.MyPCBackup HKLM64\SOFTWARE\Microsoft\Tracing\BackupStack_RASMANCS =>PUP.Optional.MyPCBackup ---\\ Récapitulatif des éléments trouvées sur votre station (35) - 0s http://www.nicolascoolman.fr/pup-shopperpro/ =>PUP.Optional.ShopperPro http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/pup-objectbrowser/ =>PUP.Optional.ObjectBrowser http://www.nicolascoolman.fr/pup-sweetpage/ =>PUP.Optional.SweetPage http://www.nicolascoolman.fr/hijacker-qvo6/ =>PUP.Optional.Qvo6 http://www.nicolascoolman.fr/pup-optional-saleclipper/ =>PUP.Optional.SaleClipper http://www.nicolascoolman.fr/blog =>PUP.Optional.SecureSoft http://www.nicolascoolman.fr/blog =>PUP.Optional.WebProtector http://www.nicolascoolman.fr/blog =>PUP.Optional.YetAnotherCleaner http://www.nicolascoolman.fr/blog =>PUP.Optional.Picexa http://www.nicolascoolman.fr/blog =>PUP.Optional.Privoxy http://www.nicolascoolman.fr/pup-kmspico/ =>PUA.KMSpico http://www.nicolascoolman.fr/blog =>PUP.Optional.Generic http://www.nicolascoolman.fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate http://www.nicolascoolman.fr/pup-elex/ =>PUP.Optional.Elex http://www.nicolascoolman.fr/pup-searchprotect/ =>PUP.Optional.SearchProtect http://www.nicolascoolman.fr/hijacker-webssearches/ =>PUP.Optional.WebsSearches http://www.nicolascoolman.fr/trojan-fuyu/ =>PUP.Optional.Fuyu http://www.nicolascoolman.fr/pup-wordanchor/ =>PUP.Optional.WordAnchor http://www.nicolascoolman.fr/pup-ytdownloader/ =>PUP.Optional.YTDownloader http://www.nicolascoolman.fr/pup-inetstat// =>PUP.Optional.InetStat http://www.nicolascoolman.fr/blog =>PUP.Optional.DeltaHomes http://www.nicolascoolman.fr/rogue-pcspeedup/ =>PUP.Optional.PCSpeedUp http://www.nicolascoolman.fr/pup-bprotector/ =>PUP.Optional.BProtector http://www.nicolascoolman.fr/toolbar-forumer/ =>Toolbar.Forumer http://www.nicolascoolman.fr/adware-installcore/ =>PUP.Optional.InstallCore http://www.nicolascoolman.fr/pup-v9software/ =>PUP.Optional.V9Software http://www.nicolascoolman.fr/pup-vittalia/ =>PUP.Optional.Vittalia http://www.nicolascoolman.fr/pup-suptab/ =>PUP.Optional.SupTab http://www.nicolascoolman.fr/blog =>PUP.Optional.WebProtect http://www.nicolascoolman.fr/blog =>PUP.Optional.EmailNotifier http://www.nicolascoolman.fr/blog =>.Legitimate.CrashReports http://www.nicolascoolman.fr/adware-installpedia/ =>PUP.Optional.InstallPedia http://www.nicolascoolman.fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup http://www.nicolascoolman.fr/pup-dosearches/ =>PUP.Optional.DoSearches ~ End of the scan, 20210 items in 165 seconds (1204)(0)()