~ ZHPDiag v2015.9.28.146 Par Nicolas Coolman (2015/09/28) ~ Démarré par NKOGHE REGIS (Administrator) (2015/09/29 11:54:08) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Pas de fichier réseau ~ Mode: Scanner ~ Rapport: C:\Users\NKOGHE REGIS\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\NKOGHE REGIS\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 8 Pro N, 32-bit (Build 9200) ---\\ Navigateurs Internet (2) - 2s GCIE: Google Chrome v43.0.2357.130 MSIE: Internet Explorer v10.0.9200.17377 ---\\ Informations sur les produits Windows (3) - 3s ~ Windows Server License Manager Script : OK System - VBScript Engine not found Windows Automatic Updates : OK ---\\ Logiciels de protection (3) - 200s avast! Free Antivirus v5.0.418.0 SMADAV version 9.7.1 v9.7.1 Windows Defender W8 (Deactivate) ---\\ Surveillance de Logiciels (2) - 233s Adobe Flash Player 11 ActiveX & Plugin Adobe Reader XI ---\\ Informations sur le système (6) - 1s ~ Operating System: x86 Family 20 Model 2 Stepping 0, AuthenticAMD ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 3655.024 MB (40% free) ~ System Restore: Activé (Enable) ~ System drive C: has 6 GB free of 149 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: NKRP ~ User Name: NKOGHE REGIS ~ Logged in as Administrator ---\\ Enumération des unités disques (6) - 1s ~ Drive C: has 6 GB free of 149 GB (System) ~ Drive D: has 101 GB free of 155 GB ~ Drive F: has 2 GB free of 3 GB ~ Drive G: has 289 GB free of 476 GB ~ Drive H: has 5 GB free of 7 GB ~ Drive I: has GB free of 0 GB ---\\ Etat du Centre de Sécurité Windows (11) - 4s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: Modified [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (24) - 21s [MD5.EAFE46B0292D2BD2467835E2ACF717CC] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2106176] © [MD5.224F6B374852153C8C24BED141AE3A20] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [48640] © [MD5.7109FF769FFF962869C50D720F7AA7D7] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [101376] © [MD5.B35C734515AA416DA9DDA96082694B00] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [1763328] © [MD5.89D6AFD5B257049375008BAA512910EE] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [429056] © [MD5.FAB11E1AC62579A9BE21593319F8E464] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [246784] © [MD5.0BE9606A1175C7400ED862991453A847] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\System32\dnsapi.dll [458240] © [MD5.65AA2DE8787146679BB8A7D14BFFB6A3] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [18944] © [MD5.B92C9A8C3CAE22129CC5B4A920B00608] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [439296] © [MD5.48D8C3F2006698691F5AE0BB595FDCC8] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [22768] © [MD5.00B4FA77732C7823D292ECD672660882] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [89088] © [MD5.4E707EC5071DD8F5C29A7410780BD4C3] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [135680] © [MD5.E608E26B536A42B5ACC145D25CB9F2AC] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [92160] © [MD5.6BFEBBA25AD34E5922E60349C721B1DD] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [62464] © [MD5.11EDC37780E8A2F8E311D73F7658A4D7] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [89600] © [MD5.57B0C0D982013C72911A3F5CBA795034] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [126976] © [MD5.1A04B8E0C9156FB742BA41DD71C40F28] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\Windows\System32\drivers\MRxSmb.sys [340992] © [MD5.303A053C25E468B9925C22288BEF8484] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [254464] © [MD5.6C816842AC5E2B0E033ED0BD1058E077] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1618264] © [MD5.8BCE63AF5B52642E832630F862DE96EF] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [90624] © [MD5.6E0649D7325D85C47C844EB3267E4625] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [88064] © [MD5.2CAD2A13569741C67CD9C52F97E0F992] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\Windows\System32\drivers\rdpdr.sys [156160] © [MD5.0886D9F1B5A5334FBB143A260E4BFB5C] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [97792] © [MD5.BF079843E272759BAE587FB980163293] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [281408] © ---\\ Processus lancés (40) - 207s [MD5.BC8C942A1E94BCFED3AABAC04E12FC84] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [219136] [PID.868] © [MD5.61D3B90C1600165110470502835FB646] - (.ALWIL Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [40384] [PID.1392] © [MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [81088] [PID.1840] © [MD5.F431DC5D94F4B2FDBC927655D8A9B10E] - (.Autodesk, Inc. - Content Service.) -- C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [19232] [PID.1880] © [MD5.ADA5425CF8DB24B151A2E5B7F0500C30] - (.Solid Documents, LLC - Solid Spool Service.) -- C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe [164136] [PID.416] [MD5.9DA3B55B17B54789AFB8C657D4ACE4D7] - (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) -- C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688] [PID.760] © [MD5.F1D29D9C5DB9C144769F5CD7212BE555] - (.VMware, Inc. - VMware NAT Service.) -- C:\Windows\System32\vmnat.exe [435864] [PID.1080] © [MD5.03A7980C30E9F00F1EAC752612DC80CE] - (.VMware, Inc. - VMware VMnet DHCP service.) -- C:\Windows\System32\vmnetdhcp.exe [357016] [PID.1268] © [MD5.A77A76DD2773616651121B7EFA5948C1] - (.VMware, Inc. - VMware USB Arbitration Service.) -- C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe [719512] [PID.1756] © [MD5.341D98E20B8D859075AE94B1E0B25788] - (.Connectify - Connectify Service Stub.) -- C:\Program Files\Connectify\ConnectifyService.exe [487936] [PID.1936] © [MD5.68C9FB18EC34AC508C097412E5A797F5] - (.Connectify - Connectify Daemon Service.) -- C:\Program Files\Connectify\ConnectifyD.exe [3358456] [PID.2240] © [MD5.7171B884DA8BFB1CE5C8BAE46D993CB1] - (.VMware, Inc. - VMware Authorization Service.) -- C:\Program Files\VMware\VMware Workstation\vmware-authd.exe [79872] [PID.2340] © [MD5.5C6121C09B35B01705EEF7B948B92338] - (...) -- C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe [15680000] [PID.2660] [MD5.8715A0D10CFFC8DEE923957F07DAA042] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.27.5\GoogleCrashHandler.exe [244040] [PID.4040] © [MD5.2583F9A2B7309D586F8E8AD81C3F7C51] - (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files\VMware\VMware Workstation\vmware-tray.exe [104088] [PID.1224] © [MD5.9F9F7AE92A2BC837DE65FB563580ABDE] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [11951176] [PID.2116] © [MD5.413B0C83F1D03F44CEF8DDE1B73B5C40] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2428656] [PID.932] © [MD5.567EA8020BA66BFA8C5C542B23E95D11] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [143088] [PID.828] © [MD5.9CDE2ABE882552237FD5B6A0C4543543] - (.Connectify - Connectify Dispatch.) -- C:\Program Files\Connectify\DispatchUI.exe [2383608] [PID.56] © [MD5.1DBDD460D61A2A447E55D3D9901BB912] - (.Connectify - Connectify Hotspot.) -- C:\Program Files\Connectify\Connectify.exe [4314360] [PID.2800] © [MD5.31B522014FC560C122CDFA72D47CA940] - (.Ask - Ask Updater.) -- C:\Program Files\Ask.com\Updater\Updater.exe [1391272] [PID.3964] =>Toolbar.Ask [MD5.318270684C812E88FE63DC4C3021FC2B] - (.ALWIL Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2756488] [PID.688] © [MD5.1DB3300FE6EF0D52ECABBB903FCA6A41] - (.DriverPack Solution - DRP Su Updater.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\DRPSu\DrvUpdater.exe [195256] [PID.4504] [MD5.D312C6D1DBBE666A9F3481CC85D3D493] - (.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\Program Files\Le Robert\Le Petit Robert 2014\PetitRobertHA.exe [729088] [PID.4524] [MD5.275F70AF9857755E0440137FB3A6D2C8] - (.FreeDownloadManager.ORG - Free Download Manager.) -- C:\Program Files\Free Download Manager\fdm.exe [6983168] [PID.4544] © [MD5.302794AB66901121BD0D4F877A68CE20] - (...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe [561664] [PID.4552] [MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.5484] © [MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.5156] © [MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.5084] © [MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.4820] © [MD5.98FA788238E71D9563D4BF177A4FC22C] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [813896] [PID.4100] © [MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.1456] © [MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.3484] © [MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.4564] © [MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.4112] © [MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.4280] © [MD5.AEFACF5A751FBC514A40CBB456034E4E] - (.Adobe Systems Incorporated - Adobe Reader.) -- C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe [1533160] [PID.3960] © [MD5.BEB274EF932F3AD40F15AE7DCD1F53DA] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\ZHP\ZHPDiag3.exe [1939968] [PID.7348] © [MD5.BEB274EF932F3AD40F15AE7DCD1F53DA] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\ZHP\ZHPDiag3.exe [1939968] [PID.5152] © [MD5.E1B44A75947137F4143308D566889837] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [107848] [PID.2748] © ---\\ Google Chrome, Démarrage,Recherche,Extensions (9) - 28s G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 26s P2 - FPN: [HKLM] [@adobe.com/AuthorwarePlayer] - (.Macromedia, Inc..) -- C:\Windows\System32\Macromed\AUTHORWA\np32asw.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_224.dll © ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (11) - 42s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R3 - URLSearchHook: (no name) - {00000000-6E41-4FD3-8538-502F5495E5FC} Orphean R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer,Proxy Management (5) - 9s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = di-isa:8080 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (4) - 4s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) © F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) © F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) © F3 - REG:win.ini: load=C:\ProgramData\mspnri.exe ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (5) - 18s O2 - BHO: Skype for Business Click to Call BHO - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files\Microsoft Office\Office15\OCHelper.dll © O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL © O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} . (.FreeDownloadManager.ORG - .) -- C:\Program Files\Free Download Manager\iefdm2.dll © O2 - BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL © O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll =>Toolbar.AsktBar ---\\ Internet Explorer, Barre d'outil (1) - 23s O3 - Toolbar: 0x00 - [HKLM]{D4027C7F-154A-4066-A1AD-4243D8127440} . (.Ask - Ask Toolbar.) -- C:\Program Files\Ask.com\GenericAskToolbar.dll =>Toolbar.Ask ---\\ Applications lancées au démarrage du système (17) - 128s O4 - HKLM\..\Run: [vmware-tray.exe] . (.VMware, Inc. - VMware Tray Process.) -- C:\Program Files\VMware\VMware Workstation\vmware-tray.exe © O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe © O4 - HKLM\..\Run: [fspuip] . (.Sentelic Corporation - Finger-sensing Pad User Interactive Program.) -- C:\Program Files\FSP\FspUip.exe O4 - HKLM\..\Run: [SynTPEnh] . (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe © O4 - HKLM\..\Run: [Autodesk Sync] . (.Autodesk, Inc. - Autodesk Sync.) -- C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe © O4 - HKLM\..\Run: [Connectify Dispatch] . (.Connectify - Connectify Dispatch.) -- C:\Program Files\Connectify\DispatchUI.exe © O4 - HKLM\..\Run: [Connectify Hotspot] . (.Connectify - Connectify Hotspot.) -- C:\Program Files\Connectify\Connectify.exe © O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe © O4 - HKCU\..\Run: [DrvUpdater] . (.DriverPack Solution - DRP Su Updater.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\DRPSu\DrvUpdater.exe O4 - HKCU\..\Run: [Le Petit Robert V4 Hyperappel] . (.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\Program Files\Le Robert\Le Petit Robert 2014\PetitRobertHA.exe O4 - HKCU\..\Run: [Free Download Manager] . (.FreeDownloadManager.ORG - Free Download Manager.) -- C:\Program Files\Free Download Manager\fdm.exe © O4 - HKCU\..\Run: [d5a38e9b5f206c41f8851bf04a251d26] . (...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe © O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [DrvUpdater] . (.DriverPack Solution - DRP Su Updater.) -- C:\Users\NKOGHE REGIS\AppData\Roaming\DRPSu\DrvUpdater.exe O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [Le Petit Robert V4 Hyperappel] . (.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\Program Files\Le Robert\Le Petit Robert 2014\PetitRobertHA.exe O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [Free Download Manager] . (.FreeDownloadManager.ORG - Free Download Manager.) -- C:\Program Files\Free Download Manager\fdm.exe © O4 - HKUS\S-1-5-21-3463741277-1932354388-1444126525-1001\..\Run: [d5a38e9b5f206c41f8851bf04a251d26] . (...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe ---\\ Protocole additionnel (24) - 27s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll © O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll © O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll © O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll © O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL © O18 - Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files\Microsoft Office\Office15\MSOSB.DLL © O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll © O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll © O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: text/xml - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL © ---\\ Liste des services NT non Microsoft et non désactivés (13) - 48s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe © O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe © O23 - Service: Autodesk Content Service (Autodesk Content Service) . (.Autodesk, Inc. - Content Service.) - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe © O23 - Service: avast! Antivirus (avast! Antivirus) . (.ALWIL Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe © O23 - Service: Connectify (Connectify) . (.Connectify - Connectify Service Stub.) - C:\Program Files\Connectify\ConnectifyService.exe © O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe © O23 - Service: SolidPDFCreatorReadSpool (SPDFCreatorReadSpool) . (.Solid Documents, LLC - Solid Spool Service.) - C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe © O23 - Service: VMware Authorization Service (VMAuthdService) . (.VMware, Inc. - VMware Authorization Service.) - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe © O23 - Service: VMware DHCP Service (VMnetDHCP) . (.VMware, Inc. - VMware VMnet DHCP service.) - C:\Windows\System32\vmnetdhcp.exe © O23 - Service: VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc. - VMware USB Arbitration Service.) - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe © O23 - Service: VMware NAT Service (VMware NAT Service) . (.VMware, Inc. - VMware NAT Service.) - C:\Windows\System32\vmnat.exe © O23 - Service: VMware Workstation Server (VMwareHostd) . (...) - C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe ---\\ Logiciels installés (95) - 2268s O42 - Logiciel: Adobe Flash Player 11 ActiveX & Plugin - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX © O42 - Logiciel: Adobe Shockwave Player + Authorware Web Player - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player + Authorware Web Player © O42 - Logiciel: AIMP3 - (.AIMP DevTeam.) [HKLM] -- AIMP3 © O42 - Logiciel: AutoCAD Electrical 2013 - Français (French) - (.Autodesk.) [HKLM] -- AutoCAD Electrical 2013 - Français (French) © O42 - Logiciel: Autodesk Content Service - (.Autodesk.) [HKLM] -- Autodesk Content Service © O42 - Logiciel: Autodesk Design Review 2013 - (.Autodesk, Inc..) [HKLM] -- Autodesk Design Review 2013 © O42 - Logiciel: Autodesk Inventor Fusion 2013 - (.Autodesk, Inc..) [HKLM] -- Autodesk Inventor Fusion 2013 © O42 - Logiciel: Autodesk Inventor View 2013 Français (French) - (.Autodesk.) [HKLM] -- Autodesk Inventor View 2013 © O42 - Logiciel: Autodesk Vault Basic 2013 (Client) - (.Autodesk.) [HKLM] -- Autodesk Vault Basic 2013 (Client) © O42 - Logiciel: avast! Free Antivirus v5.0.418.0 - (.Alwil Software.) [HKLM] -- avast5 © O42 - Logiciel: BurnAware Free 6.3 - (.Burnaware Technologies.) [HKLM] -- BurnAware Free O42 - Logiciel: Connectify - (.Connectify.) [HKLM] -- Connectify © O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM] -- DAEMON Tools Lite © O42 - Logiciel: DWG TrueView 2013 - (.Autodesk.) [HKLM] -- DWG TrueView 2013 © O42 - Logiciel: Foxit Reader 6.0.3.524 - (.oszone.net.) [HKLM] -- Foxit Reader O42 - Logiciel: Free Download Manager 3.9.4 - (.FreeDownloadManager.ORG.) [HKLM] -- Free Download Manager_is1 © O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome © O42 - Logiciel: Pixia 6 English Edition - (.Isao Maruoka / Soldier.) [HKLM] -- InstallShield_{D31DBA6A-7212-42EF-82F2-336F3D2BF7E9} O42 - Logiciel: Intel Android Device USB driver - (.Intel.) [HKLM] -- Intel Android Device USB driver © O42 - Logiciel: MAGIX Photo Designer 7 - (.MAGIX AG.) [HKLM] -- MAGIX_{EFC6F303-00C1-45CC-BD98-FCA1C3127F9B} © O42 - Logiciel: Microsoft Project Professionnel 2010 - (.Microsoft Corporation.) [HKLM] -- Office14.PRJPRO © O42 - Logiciel: Autodesk Inventor Fusion plug-in for AutoCAD 2013 - (.Autodesk.) [HKLM] -- Plug-in Autodesk Inventor Fusion pour AutoCAD 2013 © O42 - Logiciel: Le Petit Robert 2014 - (.Le Robert.) [HKLM] -- PR1CD2014 © O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller © O42 - Logiciel: SAM CoDeC Pack - (.www.SamLab.ws.) [HKLM] -- SAM CoDeC Pack O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey © O42 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM] -- Usbfix O42 - Logiciel: Ut Video Codec Suite - (.UMEZAWA Takeshi.) [HKLM] -- utvideo_is1 O42 - Logiciel: VLC media player 2.0.3 - (.VideoLAN.) [HKLM] -- VLC media player © O42 - Logiciel: VMware Workstation - (.VMware, Inc.) [HKLM] -- VMware_Workstation © O42 - Logiciel: Windows 8 Activator 380 day 2.00 - (.© 2012 Microsoft.) [HKLM] -- Windows 8 Activator 380 day 2.00 O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM] -- WinPcapInst © O42 - Logiciel: WinRAR archiver - (...) [HKLM] -- WinRAR archiver O42 - Logiciel: x264vfw - H.264/MPEG-4 AVC codec (remove only) - (...) [HKLM] -- x264vfw O42 - Logiciel: Xvid MPEG-4 Video Codec - (...) [HKLM] -- Xvid_is1 O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} © O42 - Logiciel: tools-freebsd - (.VMware, Inc..) [HKLM] -- {003BFBBD-6C67-419E-A24D-0DCAFC3A5249} © O42 - Logiciel: VMware Workstation - (.VMware, Inc..) [HKLM] -- {0D94F75A-0EA6-4951-B3AF-B145FA9E05C6} © O42 - Logiciel: Autodesk Material Library 2013 - (.Autodesk.) [HKLM] -- {117EBEEB-5DB0-43C8-9FD6-DD583DB152DD} © O42 - Logiciel: tools-netware - (.VMware, Inc..) [HKLM] -- {197597A7-AD33-4898-9D8E-73066818B464} © O42 - Logiciel: 7-Zip 9.30 - (.Igor Pavlov.) [HKLM] -- {23170F69-40C1-2701-0930-000001000000} © O42 - Logiciel: Module linguistique d'Autodesk Vault Basic 2013 (Client) - Français - (.Autodesk.) [HKLM] -- {266597A9-1732-0000-0100-DCBF2B69166B} © O42 - Logiciel: Solid Converter v8 - (.Solid Documents.) [HKLM] -- {2E809338-A85B-45D8-AFAB-57019D929445}_is1 © O42 - Logiciel: Google Earth Pro - (.Google.) [HKLM] -- {35DAA04C-1720-4BE3-A920-A03731EC6A1D} © O42 - Logiciel: Video Download Capture version 4.9.1 - (.APOWERSOFT LIMITED.) [HKLM] -- {3C9D008D-3716-4C3F-90CD-38ED57568FAB}_is1 © O42 - Logiciel: AutoCAD Electrical 2013 - Français (French) - (.Autodesk.) [HKLM] -- {5783F2D7-B007-040C-0002-0060B0CE6BBA} © O42 - Logiciel: Autodesk Material Library Base Resolution Image Library 2013 - (.Autodesk.) [HKLM] -- {606E12B9-641F-4644-A22A-FF38AE980AFD} © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} © O42 - Logiciel: Autodesk Content Service Language Pack - (.Autodesk.) [HKLM] -- {62F029AB-85F2-0001-866A-9FC0DD99DDBC} © O42 - Logiciel: Autodesk Inventor View 2013 - (.Autodesk.) [HKLM] -- {7F4DD591-1732-0004-0000-7107D70F3DB4} © O42 - Logiciel: Module linguistique d' Autodesk Inventor View 2013 - Français (French) - (.Autodesk.) [HKLM] -- {7F4DD591-1732-0004-1036-7107D70F3DB4} © O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {817750FA-EC6A-485D-9901-0683AE6FFDF1} © O42 - Logiciel: Plug-in Autodesk Inventor Fusion pour AutoCAD 2013 - (.Autodesk.) [HKLM] -- {82C1E6E4-6718-4EFD-9DCC-E276D690EF46} © O42 - Logiciel: Ask Toolbar - (.Ask.com.) [HKLM] -- {86D4B82A-ABED-442A-BE86-96357B70F4FE} =>Toolbar.AsktBar O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} © O42 - Logiciel: SMADAV version 9.7.1 - (.SmadSoft.) [HKLM] -- {8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1 O42 - Logiciel: Update for Skype for Business 2015 (KB3054791) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{04ADDEC1-208F-4295-AA61-16789EA56814} © O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0015-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0016-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0018-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0019-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-001A-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-001B-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0044-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-0090-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-00A1-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-00BA-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM] -- {90150000-012B-040C-0000-0000000FF1CE} © O42 - Logiciel: Update for Skype for Business 2015 (KB3054791) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{04ADDEC1-208F-4295-AA61-16789EA56814} © O42 - Logiciel: Update for Skype for Business 2015 (KB2889853) 32-Bit Edition - (.Microsoft.) [HKLM] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{AE1BB975-11D1-49A0-82E8-1D26DD62AFE7} © O42 - Logiciel: FARO LS 1.1.406.58 - (.FARO Scanner Production.) [HKLM] -- {951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C} © O42 - Logiciel: Realtek WLAN Driver - (.REALTEK Semiconductor Corp..) [HKLM] -- {9D3D8C60-A55F-4fed-B2B9-173001290E16} © O42 - Logiciel: tools-solaris - (.VMware, Inc..) [HKLM] -- {AB1C87CB-1807-4CF0-B4C2-CEE14C18CDB4} © O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001802114130} © O42 - Logiciel: Adobe Reader XI (11.0.11) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} © O42 - Logiciel: tools-winPre2k - (.VMware, Inc..) [HKLM] -- {AE0F62A7-A1A2-407F-9F4C-48939BD9AD8D} © O42 - Logiciel: simplitec simplicheck - (.simplitec GmbH.) [HKLM] -- {C4EE86B9-8D74-4689-B6F6-B94FBC55AF02} O42 - Logiciel: Autodesk Vault Basic 2013 (Client) - (.Autodesk.) [HKLM] -- {CF526A26-1732-0000-0000-02E95019B628} © O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} © O42 - Logiciel: tools-linux - (.VMware, Inc..) [HKLM] -- {D102611A-6466-4101-A51D-51069303AC65} © O42 - Logiciel: Pixia 6 English Edition - (.Isao Maruoka / Soldier.) [HKLM] -- {D31DBA6A-7212-42EF-82F2-336F3D2BF7E9} O42 - Logiciel: SolidPDFCreator - (.SolidDocuments.) [HKLM] -- {DFE70CCC-0ACB-45B7-94F4-9DC6F01B7928} © O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13} © O42 - Logiciel: Finger Sensing Pad Driver - (.Sentelic.) [HKLM] -- {E86906FF-C63D-4EAF-ACE7-5F8D55FBEA9A} © O42 - Logiciel: Autodesk Sync - (.Autodesk, Inc..) [HKLM] -- {EE5F74BC-5CD5-4EF2-86BA-81E6CF46A18F} © O42 - Logiciel: MAGIX Photo Designer 7 - (.MAGIX AG.) [HKLM] -- {EFC6F303-00C1-45CC-BD98-FCA1C3127F9B} © O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} © O42 - Logiciel: Lagarith Lossless Codec (1.3.27) - (...) [HKLM] -- {F59AC46C-10C3-4023-882C-4212A92283B3}_is1 O42 - Logiciel: Ecodial Advance Calculation INT V4.2 - (.Schneider Electric.) [HKLM] -- {FC7661BD-7CE8-4EAC-B80C-440C2E483A32} © O42 - Logiciel: Module linguistique du plug-in Autodesk Inventor Fusion pour AutoCAD 2013 - (.Autodesk.) [HKLM] -- {FE2F4875-095C-427C-9A97-4F8DE05ACF22} © O42 - Logiciel: tools-windows - (.VMware, Inc..) [HKLM] -- {FFD9383C-01D5-4897-A954-43AF599AED30} © O42 - Logiciel: Autodesk Inventor Fusion 2013 - (.Autodesk, Inc..) [HKLM] -- {FFF5619F-2013-0032-A85E-9994F70A9E5D} © O42 - Logiciel: DriverPack Solution Updater - (.DriverPack Solution.) [HKCU] -- DRPSu Updater O42 - Logiciel: PhotoFiltre Studio X - (...) [HKCU] -- PhotoFiltre Studio X O42 - Logiciel: Ask Toolbar Updater - (.Ask.com.) [HKCU] -- {79A765E1-C399-405B-85AF-466F52E918B0} =>Toolbar.AsktBar ---\\ HKCU & HKLM Software Keys (114) - 2278s HKLM\SOFTWARE\7-Zip HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\ALWIL Software HKLM\SOFTWARE\AMD HKLM\SOFTWARE\APN =>Toolbar.Ask HKLM\SOFTWARE\AskToolbar =>Toolbar.Ask HKLM\SOFTWARE\ATI HKLM\SOFTWARE\ATI Technologies HKLM\SOFTWARE\Autodesk HKLM\SOFTWARE\AVC HKLM\SOFTWARE\Avg HKLM\SOFTWARE\Connectify HKLM\SOFTWARE\Disc Soft HKLM\SOFTWARE\Dolby HKLM\SOFTWARE\DTS HKLM\SOFTWARE\Foxit Software HKLM\SOFTWARE\FreeDownloadManager.ORG HKLM\SOFTWARE\GetGo Software HKLM\SOFTWARE\GNU HKLM\SOFTWARE\Google HKLM\SOFTWARE\IM Providers HKLM\SOFTWARE\InstalledOptions HKLM\SOFTWARE\Intel HKLM\SOFTWARE\IsaoMaruoka HKLM\SOFTWARE\Khronos HKLM\SOFTWARE\Knowles HKLM\SOFTWARE\Licenses HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Macrovision HKLM\SOFTWARE\MAGIX HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\Nuance HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\PDFCreator HKLM\SOFTWARE\RealNetworks HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\REALTEK Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\RTLSetup HKLM\SOFTWARE\SAMSUNG HKLM\SOFTWARE\simplitec HKLM\SOFTWARE\SolidDocuments HKLM\SOFTWARE\SonicFocus HKLM\SOFTWARE\SRS Labs HKLM\SOFTWARE\Synaptics HKLM\SOFTWARE\ThinPrint HKLM\SOFTWARE\TOSHIBA HKLM\SOFTWARE\VideoLAN HKLM\SOFTWARE\VMware, Inc. HKLM\SOFTWARE\Volatile HKLM\SOFTWARE\Waves Audio HKLM\SOFTWARE\WinPcap HKLM\SOFTWARE\Wow6432Node HKCU\SOFTWARE\7-Zip HKCU\SOFTWARE\AC3Filter HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\ALWIL Software HKCU\SOFTWARE\APN =>Toolbar.Ask HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Ask.com =>Toolbar.Ask HKCU\SOFTWARE\ATI HKCU\SOFTWARE\Autodesk HKCU\SOFTWARE\Autodesk, Inc. HKCU\SOFTWARE\Bytescout HKCU\SOFTWARE\Cineform HKCU\SOFTWARE\d5a38e9b5f206c41f8851bf04a251d26 =>PUP.Optional.CrossRider HKCU\SOFTWARE\Disc Soft HKCU\SOFTWARE\DownloadManager HKCU\SOFTWARE\drpsu HKCU\SOFTWARE\DRPSu Updater HKCU\SOFTWARE\Foxit Software HKCU\SOFTWARE\FreeDownloadManager.ORG HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\GetGo Software HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Magix HKCU\SOFTWARE\MediaInfo HKCU\SOFTWARE\Mine HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\PDFCreator HKCU\SOFTWARE\PhotoFiltre Studio X HKCU\SOFTWARE\RealNetworks HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\Revenger inc. HKCU\SOFTWARE\SamLab.ws HKCU\SOFTWARE\SMADΔV HKCU\SOFTWARE\SolidDocuments HKCU\SOFTWARE\Sony HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\UsbFix HKCU\SOFTWARE\Ut Video Codec Suite HKCU\SOFTWARE\Video Download Capture HKCU\SOFTWARE\VMware, Inc. HKCU\SOFTWARE\VSRevoGroup HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\Adobe HKCU\SOFTWARE\AppDataLow\Software\AskToolbar =>Toolbar.Ask HKCU\SOFTWARE\AppDataLow\Software\Autodesk HKCU\SOFTWARE\AppDataLow\Software\GetGo Software HKCU\SOFTWARE\AppDataLow\Software\ThinPrint ---\\ Contenu des dossiers Programmes (192) - 1066s O43 - CFD: 2014/08/01 16:58:48 - [] D -- C:\Program Files\7-Zip O43 - CFD: 2014/08/01 15:47:29 - [] D -- C:\Program Files\Adobe O43 - CFD: 2014/08/01 17:00:18 - [] D -- C:\Program Files\AIMP3 O43 - CFD: 2015/09/23 15:18:58 - [] D -- C:\Program Files\Alwil Software O43 - CFD: 2014/09/09 17:54:31 - [] D -- C:\Program Files\Apowersoft O43 - CFD: 2014/11/25 09:21:30 - [] D -- C:\Program Files\Ask.com =>Toolbar.Ask O43 - CFD: 2014/08/20 19:42:41 - [] D -- C:\Program Files\Autodesk O43 - CFD: 2014/08/01 16:59:58 - [] D -- C:\Program Files\BurnAware Free O43 - CFD: 2014/11/25 09:21:47 - [] D -- C:\Program Files\Common Files O43 - CFD: 2014/09/26 16:00:55 - [] D -- C:\Program Files\Connectify O43 - CFD: 2014/08/01 12:56:31 - [] D -- C:\Program Files\DAEMON Tools Lite O43 - CFD: 2014/08/01 11:21:46 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 2014/08/01 16:59:04 - [] D -- C:\Program Files\Foxit Software O43 - CFD: 2014/09/09 17:15:41 - [] D -- C:\Program Files\Free Download Manager O43 - CFD: 2014/08/01 16:45:12 - [] D -- C:\Program Files\FSP O43 - CFD: 2014/09/09 17:59:59 - [0] D -- C:\Program Files\GetGo Software O43 - CFD: 2015/06/08 08:01:34 - [] D -- C:\Program Files\Google O43 - CFD: 2015/09/23 18:18:32 - [] HD -- C:\Program Files\InstallShield Installation Information O43 - CFD: 2015/04/14 20:00:53 - [] D -- C:\Program Files\Intel Android Device USB driver O43 - CFD: 2015/06/14 21:34:21 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 2014/08/04 09:51:05 - [] D -- C:\Program Files\Le Robert O43 - CFD: 2014/11/25 09:21:48 - [] D -- C:\Program Files\MAGIX O43 - CFD: 2014/08/01 15:42:11 - [] D -- C:\Program Files\Microsoft Analysis Services O43 - CFD: 2014/08/04 09:37:01 - [] D -- C:\Program Files\Microsoft Office O43 - CFD: 2014/08/04 09:39:11 - [] D -- C:\Program Files\Microsoft SQL Server O43 - CFD: 2014/08/20 19:31:31 - [] D -- C:\Program Files\Microsoft WSE O43 - CFD: 2014/09/09 18:37:35 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 2015/05/30 12:00:10 - [] D -- C:\Program Files\Mozilla Firefox O43 - CFD: 2014/08/01 12:14:09 - [] D -- C:\Program Files\MSBuild O43 - CFD: 2014/08/01 15:50:47 - [] D -- C:\Program Files\PDFCreator O43 - CFD: 2014/11/25 09:22:58 - [] D -- C:\Program Files\PhotoFiltre Studio X O43 - CFD: 2014/11/24 13:06:43 - [] D -- C:\Program Files\Pixia ver. 6 O43 - CFD: 2015/09/15 18:31:03 - [] D -- C:\Program Files\Realtek O43 - CFD: 2015/09/23 18:20:02 - [] D -- C:\Program Files\Realtek WLAN Driver O43 - CFD: 2014/08/01 12:14:10 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 2014/08/01 16:56:18 - [] D -- C:\Program Files\SAM CoDeC Pack O43 - CFD: 2015/04/14 19:28:43 - [] D -- C:\Program Files\SAMSUNG O43 - CFD: 2014/08/01 12:46:54 - [] D -- C:\Program Files\Schneider Electric O43 - CFD: 2014/11/25 09:21:35 - [] D -- C:\Program Files\simplitec O43 - CFD: 2015/09/24 17:45:48 - [] D -- C:\Program Files\SMADAV O43 - CFD: 2014/08/01 16:22:36 - [] D -- C:\Program Files\SolidDocuments O43 - CFD: 2014/08/01 16:48:26 - [] D -- C:\Program Files\Synaptics O43 - CFD: 2012/07/26 08:04:04 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 2014/08/01 16:55:02 - [] D -- C:\Program Files\utvideo O43 - CFD: 2014/08/04 08:18:36 - [] D -- C:\Program Files\VideoLAN O43 - CFD: 2014/08/01 12:35:58 - [] D -- C:\Program Files\VMware O43 - CFD: 2014/09/09 13:58:59 - [] D -- C:\Program Files\VS Revo Group O43 - CFD: 2015/06/04 11:13:33 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 2015/06/04 11:14:07 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 2012/07/26 10:22:34 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 2014/08/01 11:21:46 - [] D -- C:\Program Files\Windows NT O43 - CFD: 2014/09/08 16:58:19 - [] D -- C:\Program Files\Windows Photo Viewer O43 - CFD: 2012/07/26 08:53:15 - [] SHD -- C:\Program Files\Windows Sidebar O43 - CFD: 2015/06/06 13:21:08 - [] HD -- C:\Program Files\WindowsApps O43 - CFD: 2014/09/09 16:56:46 - [] D -- C:\Program Files\WinPcap O43 - CFD: 2014/08/01 16:26:14 - [] D -- C:\Program Files\WinRAR O43 - CFD: 2014/08/01 16:55:07 - [] D -- C:\Program Files\x264vfw O43 - CFD: 2014/08/01 16:55:16 - [] D -- C:\Program Files\Xvid O43 - CFD: 2015/09/23 15:35:38 - [] D -- C:\Program Files\© 2012 Microsoft O43 - CFD: 2014/08/01 16:58:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip O43 - CFD: 2012/07/26 08:53:15 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 2014/11/05 14:44:11 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2014/09/20 15:10:19 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2014/08/01 17:00:25 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP3 O43 - CFD: 2014/09/09 17:55:04 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apowersoft O43 - CFD: 2014/08/20 19:46:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk O43 - CFD: 2015/09/23 15:19:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus O43 - CFD: 2014/08/01 16:59:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BurnAware Free O43 - CFD: 2014/09/26 15:53:55 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Connectify O43 - CFD: 2014/08/01 12:56:43 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite O43 - CFD: 2014/08/01 16:59:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader O43 - CFD: 2014/09/09 17:15:41 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager O43 - CFD: 2015/04/14 19:31:48 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 2015/04/14 20:00:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Android Device USB driver O43 - CFD: 2014/08/04 09:51:45 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Le Petit Robert 2014 O43 - CFD: 2014/11/25 09:22:06 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX O43 - CFD: 2012/07/26 08:53:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2014/08/01 15:53:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 2015/06/12 03:20:39 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 2014/08/01 15:50:27 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator O43 - CFD: 2014/11/25 09:22:59 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X O43 - CFD: 2014/11/24 13:00:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pixia ver. 6 O43 - CFD: 2014/08/01 16:56:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAM CoDeC Pack O43 - CFD: 2014/08/01 12:47:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Schneider Electric O43 - CFD: 2014/11/25 09:21:36 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\simplitec O43 - CFD: 2015/09/23 15:20:10 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SMADAV Antivirus O43 - CFD: 2014/08/01 16:22:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolidDocuments O43 - CFD: 2014/11/25 09:21:37 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 2014/09/20 15:09:59 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 2012/07/26 10:26:00 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 2014/08/04 08:19:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 2014/08/01 12:36:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware O43 - CFD: 2014/08/01 16:26:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2014/08/29 17:56:37 - [] D -- C:\ProgramData\Adobe O43 - CFD: 2015/09/23 15:18:58 - [] D -- C:\ProgramData\Alwil Software O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 2014/09/16 19:03:00 - [] D -- C:\ProgramData\Autodesk O43 - CFD: 2014/08/01 11:21:46 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 2015/09/15 20:10:43 - [] HD -- C:\ProgramData\Common Files O43 - CFD: 2014/09/25 12:09:18 - [] D -- C:\ProgramData\Connectify O43 - CFD: 2014/08/01 16:12:13 - [] D -- C:\ProgramData\DAEMON Tools Lite O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 2014/08/20 19:55:29 - [] D -- C:\ProgramData\FLEXnet O43 - CFD: 2014/10/09 16:34:05 - [] D -- C:\ProgramData\Free Download Manager O43 - CFD: 2014/08/29 17:56:52 - [0] D -- C:\ProgramData\IDM O43 - CFD: 2015/04/14 20:32:46 - [] D -- C:\ProgramData\Installations O43 - CFD: 2014/08/04 09:51:46 - [] D -- C:\ProgramData\Le Robert O43 - CFD: 2014/11/25 09:22:20 - [] D -- C:\ProgramData\MAGIX O43 - CFD: 2014/08/01 11:21:46 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 2015/09/15 20:12:27 - [] D -- C:\ProgramData\MFAData O43 - CFD: 2015/09/11 16:47:25 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 2015/06/12 03:22:48 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 2014/08/04 09:48:03 - [] D -- C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS O43 - CFD: 2014/08/01 11:21:46 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 2014/08/01 17:00:32 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 2014/08/01 11:26:27 - [] D -- C:\ProgramData\PRICache O43 - CFD: 2014/08/04 09:38:29 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 2015/04/14 19:27:39 - [] D -- C:\ProgramData\Samsung O43 - CFD: 2014/12/09 08:56:59 - [] D -- C:\ProgramData\simplitec O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 2014/08/20 20:03:14 - [0] AD -- C:\ProgramData\TEMP O43 - CFD: 2012/07/26 08:03:51 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 2015/09/23 15:54:53 - [] D -- C:\ProgramData\VMware O43 - CFD: 2014/08/01 15:48:13 - [] D -- C:\Program Files\Common Files\Adobe O43 - CFD: 2014/08/01 16:53:24 - [] D -- C:\Program Files\Common Files\ATI Technologies O43 - CFD: 2014/08/20 19:44:48 - [] D -- C:\Program Files\Common Files\Autodesk Shared O43 - CFD: 2014/09/25 12:36:21 - [] D -- C:\Program Files\Common Files\DESIGNER O43 - CFD: 2014/08/20 19:05:04 - [] D -- C:\Program Files\Common Files\Macrovision Shared O43 - CFD: 2014/11/25 09:21:47 - [] D -- C:\Program Files\Common Files\MAGIX Services O43 - CFD: 2014/09/09 18:48:26 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 2012/07/26 08:53:27 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 2014/09/09 18:08:56 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 2014/08/01 12:36:05 - [] D -- C:\Program Files\Common Files\VMware O43 - CFD: 2015/03/05 04:28:45 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\AdbDriverInstaller O43 - CFD: 2014/08/21 23:01:48 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Adobe O43 - CFD: 2015/08/17 21:41:38 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\AIMP3 O43 - CFD: 2014/09/09 17:54:31 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Apowersoft O43 - CFD: 2014/09/16 19:03:00 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Autodesk O43 - CFD: 2014/08/01 16:12:15 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 2014/09/09 13:45:37 - [0] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\DMCache O43 - CFD: 2014/08/01 17:02:08 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\DRPSu O43 - CFD: 2015/01/14 22:50:17 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\dvdcss O43 - CFD: 2015/06/16 22:44:09 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Free Download Manager O43 - CFD: 2014/09/09 17:40:05 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\GetGo Software O43 - CFD: 2014/09/09 13:53:04 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\IDM O43 - CFD: 2014/08/20 20:05:39 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Macromedia O43 - CFD: 2014/11/25 09:22:10 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\MAGIX O43 - CFD: 2015/09/23 18:00:36 - [] SD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft O43 - CFD: 2014/08/01 15:50:26 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\pdfforge O43 - CFD: 2014/11/25 09:23:17 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\PhotoFiltre Studio X O43 - CFD: 2014/11/25 10:34:07 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\simplitec O43 - CFD: 2014/09/08 09:36:32 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\SolidDocuments O43 - CFD: 2015/09/27 08:22:14 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\vlc O43 - CFD: 2015/04/13 17:21:37 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\VMware O43 - CFD: 2015/09/15 18:08:30 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\WinBatch O43 - CFD: 2015/09/29 12:09:48 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\ZHP O43 - CFD: 2014/08/21 23:01:48 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Adobe O43 - CFD: 2014/08/01 11:22:36 - [0] SHD -- C:\Users\NKOGHE REGIS\AppData\Local\Application Data O43 - CFD: 2015/04/14 19:26:47 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Apps O43 - CFD: 2014/08/20 19:55:09 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Autodesk O43 - CFD: 2015/09/15 20:10:42 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Avg2015 O43 - CFD: 2015/04/14 19:28:09 - [0] D -- C:\Users\NKOGHE REGIS\AppData\Local\Deployment O43 - CFD: 2015/09/14 08:44:02 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Diagnostics O43 - CFD: 2015/04/14 19:50:52 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Downloaded Installations O43 - CFD: 2015/09/23 18:30:47 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\ElevatedDiagnostics O43 - CFD: 2014/09/09 17:40:20 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\GetGo O43 - CFD: 2015/04/14 19:31:52 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Google O43 - CFD: 2014/08/01 11:22:36 - [0] SHD -- C:\Users\NKOGHE REGIS\AppData\Local\Historique O43 - CFD: 2014/08/01 16:23:42 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\IsolatedStorage O43 - CFD: 2014/08/04 09:53:29 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Le_Petit_Robert O43 - CFD: 2014/11/25 09:22:08 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\MAGIX O43 - CFD: 2015/09/15 20:10:42 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\MFAData O43 - CFD: 2015/08/05 15:43:51 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Microsoft O43 - CFD: 2015/04/25 12:58:47 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Microsoft Help O43 - CFD: 2015/07/13 13:33:58 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Packages O43 - CFD: 2014/08/01 15:49:39 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Programs O43 - CFD: 2014/08/01 12:48:08 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Schneider Electric O43 - CFD: 2014/08/01 16:22:56 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\SolidDocuments O43 - CFD: 2015/09/29 12:29:50 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\Temp O43 - CFD: 2014/08/01 11:22:36 - [0] SHD -- C:\Users\NKOGHE REGIS\AppData\Local\Temporary Internet Files O43 - CFD: 2014/08/20 19:54:16 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\VirtualStore O43 - CFD: 2015/04/13 17:21:37 - [] D -- C:\Users\NKOGHE REGIS\AppData\Local\VMware O43 - CFD: 2012/07/26 08:53:15 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 2012/07/26 08:53:15 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2015/05/28 07:18:13 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2012/07/26 08:53:15 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2014/11/25 09:22:58 - [0] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X O43 - CFD: 2014/09/09 13:59:03 - [] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller O43 - CFD: 2015/09/23 15:35:53 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2012/07/26 08:53:15 - [] RD -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 2014/08/01 16:26:14 - [0] D -- C:\Users\NKOGHE REGIS\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 10s O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL © O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL © O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL © O106 - SIOI: AcSignIcon [AutoCAD Digital Signatures Icon Overlay Handler] - {36A21736-36C2-4C11-8ACB-D4136F2B57BD}. (.Autodesk, Inc. - AutoCAD component.) -- C:\Windows\System32\AcSignIcon.dll © O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll © O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll © ---\\ Liste des pilotes du système (80) - 170s O58 - SDL:2012/07/26 05:42:31 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [85232] © O58 - SDL:2012/07/26 05:42:31 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [424176] © O58 - SDL:2012/07/26 05:42:31 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [298736] © O58 - SDL:2012/07/26 05:42:31 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [147696] © O58 - SDL:2012/07/26 05:42:31 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [67312] © O58 - SDL:2012/07/26 05:42:31 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [213744] © O58 - SDL:2012/07/26 05:42:31 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22256] © O58 - SDL:2012/11/30 08:30:58 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amd_sata.sys [70312] © O58 - SDL:2012/11/30 08:31:00 A . (.Advanced Micro Devices - Stor Filter Driver.) -- C:\Windows\System32\drivers\amd_xata.sys [22184] © O58 - SDL:2012/07/26 05:42:30 A . (.PMC-Sierra, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [91888] © O58 - SDL:2012/07/26 05:42:30 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [94448] © O58 - SDL:2010/02/11 19:38:23 A . (.ALWIL Software - avast! File System Access Blocking Driver.) -- C:\Windows\System32\drivers\aswFsBlk.sys [19024] © O58 - SDL:2010/02/11 19:38:45 A . (.ALWIL Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [51792] © O58 - SDL:2010/02/11 19:39:01 A . (.ALWIL Software - avast! TDI RDR Driver.) -- C:\Windows\System32\drivers\aswRdr.sys [23376] © O58 - SDL:2010/02/11 19:42:13 A . (.ALWIL Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [162512] © O58 - SDL:2010/02/11 19:42:34 A . (.ALWIL Software - avast! TDI Filter Driver.) -- C:\Windows\System32\drivers\aswTdi.sys [46672] © O58 - SDL:2013/04/27 20:37:50 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [10288640] © O58 - SDL:2013/04/27 19:13:24 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [483328] © O58 - SDL:2014/09/26 15:53:25 A . (.Connectify - NDISRD helper driver.) -- C:\Windows\System32\drivers\cnnctfy3.sys [36008] © O58 - SDL:2014/08/01 12:56:31 A . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\drivers\dtsoftbus01.sys [242240] © O58 - SDL:2012/09/07 09:11:36 A . (.Sentelic Corporation - Finger-sensing Pad Driver.) -- C:\Windows\System32\drivers\fspad_win732.sys [55808] O58 - SDL:2012/08/01 17:10:30 A . (.VMware, Inc. - VMware USB monitor.) -- C:\Windows\System32\drivers\hcmon.sys [41496] © O58 - SDL:2012/07/26 05:42:33 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [56048] © O58 - SDL:2012/07/26 05:42:33 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [333552] © O58 - SDL:2012/07/26 05:42:33 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [42224] © O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [93424] © O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [78576] © O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [100592] © O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [68848] © O58 - SDL:2012/07/26 05:42:33 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [45296] © O58 - SDL:2012/07/26 05:42:15 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [283888] © O58 - SDL:2012/07/26 05:42:15 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [59120] © O58 - SDL:2012/07/26 05:42:15 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [45808] © O58 - SDL:2011/02/11 23:23:34 A . (.CACE Technologies, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [35088] © O58 - SDL:2012/07/26 05:42:15 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [120048] © O58 - SDL:2012/07/26 05:42:15 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [141552] © O58 - SDL:2013/06/04 21:36:08 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [2680136] © O58 - SDL:2012/05/31 17:49:12 A . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\Windows\System32\drivers\rtl8187B.sys [388240] © O58 - SDL:2012/05/02 16:48:54 A . (.Realtek Semiconductor Corporation - Realtek RTL8187S PCIE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8187Se.sys [383592] © O58 - SDL:2011/06/20 17:07:08 A . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\Windows\System32\drivers\rtl8192se.sys [1117800] © O58 - SDL:2010/12/22 16:24:00 A . (.Realtek Semiconductor Corporation - Realtek RTL819xP NDIS Driverr.) -- C:\Windows\System32\drivers\rtl819xp.sys [559208] © O58 - SDL:2013/01/15 15:37:10 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUVStor.sys [242760] © O58 - SDL:2013/03/12 18:39:18 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driverr.) -- C:\Windows\System32\drivers\rtwlane.sys [1351168] © O58 - SDL:2012/07/26 08:52:15 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] © O58 - SDL:2012/07/26 05:42:15 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [41200] © O58 - SDL:2012/07/26 05:42:16 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [79088] © O58 - SDL:2014/12/03 04:01:58 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [90008] © O58 - SDL:2014/12/03 04:01:58 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [184216] © O58 - SDL:2014/12/03 04:01:58 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (M.) -- C:\Windows\System32\drivers\ssudserd.sys [184216] © O58 - SDL:2012/07/26 05:42:15 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [26352] © O58 - SDL:2013/05/22 16:53:40 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [390256] © O58 - SDL:2013/11/01 05:02:06 A . (.Windows (R) Win 7 DDK provider - Toshiba Hotkey Driver.) -- C:\Windows\System32\drivers\Thotkey.sys [27024] © O58 - SDL:2012/07/25 14:32:50 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\Windows\System32\drivers\TVALZ_O.SYS [27200] © O58 - SDL:2012/07/26 05:42:18 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [18160] © O58 - SDL:2012/07/06 12:29:26 A . (.VMware, Inc. - VMware PCI VMCI Bus Device.) -- C:\Windows\System32\drivers\vmci.sys [71152] © O58 - SDL:2012/08/15 15:16:48 A . (.VMware, Inc. - VMware virtual network driver (32-bit).) -- C:\Windows\System32\drivers\vmnet.sys [19608] © O58 - SDL:2012/08/15 15:16:48 A . (.VMware, Inc. - VMware virtual network adapter driver (32-b.) -- C:\Windows\System32\drivers\vmnetadapter.sys [16664] © O58 - SDL:2012/08/15 15:16:50 A . (.VMware, Inc. - VMware bridge driver (32-bit).) -- C:\Windows\System32\drivers\vmnetbridge.sys [37016] © O58 - SDL:2012/08/15 15:18:28 A . (.VMware, Inc. - VMware network application interface driver.) -- C:\Windows\System32\drivers\vmnetuserif.sys [25752] © O58 - SDL:2012/08/01 17:10:24 A . (.VMware, Inc. - VMware USB driver.) -- C:\Windows\System32\drivers\vmusb.sys [31280] © O58 - SDL:2012/08/15 15:18:38 A . (.VMware, Inc. - VMware kernel driver.) -- C:\Windows\System32\drivers\vmx86.sys [61848] © O58 - SDL:2012/07/26 05:42:19 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [155376] © O58 - SDL:2012/07/06 12:29:26 A . (.VMware, Inc. - VMware vSockets Service.) -- C:\Windows\System32\drivers\vsock.sys [61296] © O58 - SDL:2011/07/12 09:36:28 A . (.VMware, Inc. - VMware Virtual Storage Volume Driver.) -- C:\Windows\System32\drivers\vstor2-mntapi10-shared.sys [22768] © O58 - SDL:2012/07/26 05:42:19 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [285424] © O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\country.sys [27097] O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] O58 - SDL:2012/07/26 00:52:52 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] O58 - SDL:2012/07/26 00:52:52 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] O58 - SDL:2012/07/26 00:52:54 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO.SYS [33968] O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO404.SYS [34688] O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO412.SYS [35552] O58 - SDL:2012/07/26 00:52:51 A . (...) -- C:\Windows\System32\NTIO804.SYS [34688] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (1) - 296s O61 - LFC: 2015/09/23 18:23:53 A . (..) -- C:\Users\NKOGHE REGIS\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [1113849] ---\\ Associations Shell Spawning (11) - 41s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe © O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe © O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe © O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe © O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.scr> [HKCU\..\open\Command] (.Microsoft Corporation - Bloc-notes.) -- C:\Windows\System32\notepad.exe © ---\\ Menu de démarrage Internet (8) - 9s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © ---\\ Recherche d'infection sur les navigateurs (2) - 108s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {F02E6E34-91BC-466F-926E-CE32F7684856} - (Ask Search) - http://websearch.ask.com/ =>Toolbar.Ask ---\\ Enumère les services démarrés par Svchost (35) - 47s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [168960] © O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [115200] © O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [115200] © O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [236544] © O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1285632] © O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [683520] © O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [87552] © O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [302080] © O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [81920] © O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49152] © O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [392192] © O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [245760] © O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [2601472] © O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [630272] © O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [506368] © O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [741376] © O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [20992] © O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [52224] © O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [115200] © O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [89088] © O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [944640] © O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [166400] © O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [60928] © O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [105472] © O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [170496] © O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [249344] © O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [59392] © O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [73216] © O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [138752] © O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [161792] © O83 - Search Svchost Services: SystemEventsBroker (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) -- C:\Windows\System32\SystemEventsBrokerServer.dll [117760] © O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [154112] © O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [33280] © O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1532928] © O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [152064] © ---\\ Liste des exceptions du parefeu Windows (18) - 199s O87 - FAEL: "{CC3C41BE-16C9-4920-99F5-9781F2E72392}" [In-None-P6-TRUE] .(...) -- C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe O87 - FAEL: "{C0EEE2D4-4618-4CDF-9AD7-1B79DAD1BD5B}" [In-None-P6-TRUE] .(...) -- C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe O87 - FAEL: "TCP Query User{0C8A3FA1-BBC5-4FCD-BCCF-963F46EE114C}C:\program files\le robert\le petit robert 2014\prnet.exe" [In-None-P6-TRUE] .(.Copyright © 2013 - Le Petit Robert.) -- C:\program files\le robert\le petit robert 2014\prnet.exe O87 - FAEL: "UDP Query User{3BBBBD43-AFA8-46BC-B2D9-F15D212DC002}C:\program files\le robert\le petit robert 2014\prnet.exe" [In-None-P17-TRUE] .(.Copyright © 2013 - Le Petit Robert.) -- C:\program files\le robert\le petit robert 2014\prnet.exe O87 - FAEL: "TCP Query User{1C679BAD-1BF9-424E-A061-E8ADA746774E}C:\program files\le robert\le petit robert 2014\petitrobertha.exe" [In-None-P6-TRUE] .(.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\program files\le robert\le petit robert 2014\petitrobertha.exe O87 - FAEL: "UDP Query User{78F4FAB4-3CC9-49EC-AC0C-BC31EC7D0FC2}C:\program files\le robert\le petit robert 2014\petitrobertha.exe" [In-None-P17-TRUE] .(.Dictionnaire Le Robert - Le Petit Robert Hyperappel.) -- C:\program files\le robert\le petit robert 2014\petitrobertha.exe O87 - FAEL: "{EBFE52B2-611A-4695-BAD2-C91BD6B72607}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftSrv.dll O87 - FAEL: "{4781B858-D0C2-4600-BD67-26F7A1A7EE79}" [Out-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftSrv.dll O87 - FAEL: "{FF815760-9BBA-411F-95C7-C3C4ECE3974A}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDump.dll O87 - FAEL: "{01C7D196-CF1B-4CCA-934D-B3815A642B13}" [Out-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDump.dll O87 - FAEL: "{70EFA307-7EB8-4B58-B1DA-5F9372F5D54E}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftAC.dll O87 - FAEL: "{59DFD6AB-54EE-491C-9741-9B2D5394ADB9}" [Out-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftAC.dll O87 - FAEL: "{B7D820D2-6C95-4F25-B15D-2449156CC164}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll O87 - FAEL: "{28F3BA45-8355-49B5-A8C3-379621910E96}" [Out-None-P17-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll O87 - FAEL: "{B3DA3BAC-81B1-4C48-B19E-2B5ECA3CD925}" [In-None-P17-TRUE] .(.Copyleft GNU GPL v3 - hdsdump.) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll O87 - FAEL: "{E936BF79-F70F-4E79-9C11-D6E0538AFB54}" [Out-None-P17-TRUE] .(.Copyleft GNU GPL v3 - hdsdump.) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll O87 - FAEL: "{802F13C6-2EFB-4BD0-85AE-E8581B7974C5}" [In-None-P6-TRUE] .(...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe O87 - FAEL: "{BAE3E810-7901-4788-AC0C-8A163FF5E27B}" [In-None-P17-TRUE] .(...) -- C:\Users\NKOGHE REGIS\AppData\Local\Temp\chrome.exe ---\\ Enumère les codes produits des logiciels (1) - 236s O90 - PUC: "A28B4D68DEBAA244EB686953B7074FEF" . (.Ask Toolbar.) -- c:\program files\ask.com\fv_1229.ico =>Toolbar.AsktBar ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (18) - 633s SR - Auto [2014/12/19 08:48:18] [ 81088] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe © SR - Auto [2013/04/27 19:40:12] [ 219136] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe © SR - Auto [2012/01/31 10:46:56] [ 19232] Autodesk Content Service (Autodesk Content Service) . (.Autodesk, Inc..) - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe © SR - Auto [2010/02/11 19:53:39] [ 40384] avast! Antivirus (avast! Antivirus) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe © SR - Demand [2010/02/11 19:53:39] [ 40384] avast! Mail Scanner (avast! Mail Scanner) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe © SR - Demand [2010/02/11 19:53:39] [ 40384] avast! Web Scanner (avast! Web Scanner) . (.ALWIL Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe © SR - Auto [2014/09/10 21:56:40] [ 487936] Connectify (Connectify) . (.Connectify.) - C:\Program Files\Connectify\ConnectifyService.exe © SS - Demand [2014/08/20 19:05:05] [ 1044816] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Flexera Software, Inc..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe © SS - Auto [2015/04/14 19:28:20] [ 107848] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe © SS - Demand [2015/04/14 19:28:20] [ 107848] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe © SR - Auto [2013/03/25 18:44:36] [ 164136] SolidPDFCreatorReadSpool (SPDFCreatorReadSpool) . (.Solid Documents, LLC.) - C:\Program Files\SolidDocuments\SolidPDFCreator\SPC\SolidPdfService.exe SR - Auto [2014/12/03 04:01:58] [ 743688] SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD..) - C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe © SR - Auto [2012/08/15 13:19:58] [ 79872] VMware Authorization Service (VMAuthdService) . (.VMware, Inc..) - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe © SR - Auto [2012/08/15 15:18:40] [ 357016] VMware DHCP Service (VMnetDHCP) . (.VMware, Inc..) - C:\Windows\System32\vmnetdhcp.exe © SR - Auto [2012/08/01 17:10:26] [ 719512] VMware USB Arbitration Service (VMUSBArbService) . (.VMware, Inc..) - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe © SR - Auto [2012/08/15 15:17:26] [ 435864] VMware NAT Service (VMware NAT Service) . (.VMware, Inc..) - C:\Windows\System32\vmnat.exe © SR - Auto [2012/08/15 14:36:34] [15680000] VMware Workstation Server (VMwareHostd) . (...) - C:\Program Files\VMware\VMware Workstation\vmware-hostd.exe ---\\ Scan Additionnel (17) - 0s C:\Program Files\Ask.com\Updater\Updater.exe =>Toolbar.Ask C:\Program Files\Ask.com\GenericAskToolbar.dll =>Toolbar.AsktBar HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} =>Toolbar.AsktBar C:\Program Files\Ask.com\GenericAskToolbar.dll =>Toolbar.Ask HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} =>Toolbar.AsktBar HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{79A765E1-C399-405B-85AF-466F52E918B0} =>Toolbar.AsktBar HKLM\SOFTWARE\APN =>Toolbar.Ask HKLM\SOFTWARE\AskToolbar =>Toolbar.Ask HKCU\SOFTWARE\APN =>Toolbar.Ask HKCU\SOFTWARE\Ask.com =>Toolbar.Ask HKCU\SOFTWARE\d5a38e9b5f206c41f8851bf04a251d26 =>PUP.Optional.CrossRider HKCU\SOFTWARE\AppDataLow\Software\AskToolbar =>Toolbar.Ask C:\Program Files\Ask.com =>Toolbar.Ask C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS c:\program files\ask.com\fv_1229.ico =>Toolbar.AsktBar HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF =>Toolbar.AsktBar HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF =>Toolbar.AsktBar ---\\ Récapitulatif des éléments trouvées sur votre station (4) - 1s http://www.nicolascoolman.fr/toolbar-ask/ =>Toolbar.Ask http://www.nicolascoolman.fr/blog =>Toolbar.AsktBar http://www.nicolascoolman.fr/pup-crossrider/ =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/trojan-autokms/ =>HackTool.AutoKMS ~ End of the scan, 39786 items in 8206 seconds (830)(0)()