~ ZHPDiag v2015.8.31.131 Par Nicolas Coolman (2015/08/31)
~ Démarré par Alizée P (Administrator)  (2015/09/01 21:13:43)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version:  Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Alizée P\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Alizée P\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows 8.1 Connected, 64-bit  (Build 9600)

---\\ Navigateurs Internet (3) - 0s
GCIE: Google Chrome v44.0.2403.157
MFIE: Mozilla Firefox 39.0 (x86 fr) v39.0
MSIE: Internet Explorer v11.0.9600.17937

---\\ Informations sur les produits Windows (4) - 20s
~ Windows Server License Manager Script : OK
System - VBScript Engine not found
Windows Automatic Updates : OK (Demand)
Windows Activation Technologies : OK

---\\ Logiciels de protection (2) - 9s
Avast Free Antivirus v10.3.2225
Windows Defender  (Deactivate)

---\\ Logiciels d'optimisation (1) - 10s
CCleaner v5.08

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 55 Stepping 8, GenuineIntel
~ Operating System:  64-bit 
~ Boot mode: Normal (Normal boot)
Total RAM: 4074.708 MB (31% free)
~ System Restore: Activé (Enable)
~ System drive C: has 369 GB free of 433 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: ALIZÉEPETIT
~ User Name: Alizée P
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 369 GB free of 433 GB  (System)
~ Drive D: has 23 GB free of 25 GB

---\\ Etat du Centre de Sécurité Windows (11) - 1s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (23) - 1s
[MD5.C10A66189DC8C090E7C84873EDCEBC88] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\WINDOWS\Explorer.exe [2501368] ©
[MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\WINDOWS\System32\rundll32.exe [54784] ©
[MD5.A570A64292214C43E0BA50E6A72A6380] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\WINDOWS\System32\Wininit.exe [145920] ©
[MD5.C555B5C8142844DED9E3BD94E6313000] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\WINDOWS\System32\wininet.dll [2427904] ©
[MD5.EC498BAE1F0D3E0E401C963F8D76C437] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\WINDOWS\System32\Winlogon.exe [572416] ©
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\WINDOWS\System32\sppcomapi.dll [447488] ©
[MD5.E37F897ED7B5AFF79B1398258DB96BD9] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19456] ©
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) () -- C:\WINDOWS\System32\drivers\AFD.sys [563200] ©
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\WINDOWS\System32\drivers\atapi.sys [26464] ©
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\WINDOWS\System32\drivers\Cdfs.sys [88576] ©
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\WINDOWS\System32\drivers\Cdrom.sys [164352] ©
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\WINDOWS\System32\drivers\DfsC.sys [134144] ©
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\WINDOWS\System32\drivers\HDAudBus.sys [76800] ©
[MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\WINDOWS\System32\drivers\i8042prt.sys [108544] ©
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\WINDOWS\System32\drivers\IpNat.sys [142848] ©
[MD5.6FBDF2B1B025A8E6E069234362FFFFB7] - (.Microsoft Corporation - Minirdr SMB Windows NT.) () -- C:\WINDOWS\System32\drivers\MRxSmb.sys [401408] ©
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\WINDOWS\System32\drivers\netBT.sys [282624] ©
[MD5.7F68063A5A0461E02BC860CE0E6BFDDC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\WINDOWS\System32\drivers\ntfs.sys [2025792] ©
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\WINDOWS\System32\drivers\Parport.sys [94208] ©
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [120832] ©
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) () -- C:\WINDOWS\System32\drivers\rdpdr.sys [195584] ©
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\WINDOWS\System32\drivers\tdx.sys [107520] ©
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\WINDOWS\System32\drivers\volsnap.sys [310080] ©

---\\ Processus lancés (58) - 28s
[MD5.9CD9723D813232FFFFFBC82BC8EDA77E] - (.Intel Corporation - igfxCUIService Module.) -- C:\WINDOWS\system32\igfxCUIService.exe [282096] [PID.404] ©
[MD5.4956380A54B1C9E6BFDF3D80DACB9698] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600] [PID.1180] ©
[MD5.13E89F4239C9549849341593D3732DE8] - (.Windows (R) Win 7 DDK provider - Windows Setup API.) -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [317568] [PID.1544] ©
[MD5.7211C6C78756A61713170301089083A1] - (...) -- C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe [112560] [PID.1580]  =>PUP.Optional.SearchDonkey
[MD5.4E6337DE03F36BCE168110E6B59F6A5B] - (.Conexant Systems Inc. - Conexant Audio Message Service.) -- C:\WINDOWS\system32\CxAudMsg64.exe [206552] [PID.1632] ©
[MD5.91D1015685F88C5CB8938F6D1F7A8A11] - (.SIEN S.A. - IMGUpdater.) -- C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe [378152] [PID.1696]  =>PUP.Optional.IMGUpdater
[MD5.5B96F9ABAC14B0694BBAF213C4C7078A] - (.Iminent - Iminent Service.) -- C:\Program Files (x86)\Common Files\Umbrella\Umbrella224.exe [5325464] [PID.1864]  =>PUP.Optional.IMBooster
[MD5.B8A6A8CD80546AD470C731132708331F] - (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2781936] [PID.1500] ©
[MD5.556A0BC312FA42F8E2D99E10E84F4242] - (.MyBrowser 1.0.2V01.09 - MyBrowser 1.0.2V01.09 exe.) -- C:\Program Files (x86)\MyBrowser 1.0.2V01.09\df57f450-e39f-4e2d-8b26-91826c57140a-1-6.exe [1327696] [PID.2116]  =>PUP.Optional.CrossRider
[MD5.768DD5CB66952BC4A3BD474757AEE34F] - (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) -- C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696] [PID.2176] ©
[MD5.1C079F496D757794605D393335B38C9C] - (.LENOVO INCORPORATED. - Lenovo System Agent Service.) -- C:\Program Files\Lenovo\iMController\SystemAgentService.exe [584632] [PID.2292]
[MD5.031199B929009F268A478F0283E1CE32] - (.Lenovo(beijing) Limited - Lenovo WiFiHotspot.) -- C:\Windows\System32\LenovoWiFiHotspotSvr.exe [198192] [PID.2508] ©
[MD5.02CF33AD83CB69A7CF8598B1CDBC11B6] - (.Lenovo(beijing) Limited - Lenovo Updates Service.) -- C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe [38896] [PID.2580] ©
[MD5.BF7F7C792E22F00290B37515554BA167] - (.Maxthon - .) -- C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe [1844024] [PID.2888] ©
[MD5.6100842E7E178DF7185433D6B16EEF2F] - (...) -- C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077\upgmsd_fr_005010077.exe [3311248] [PID.2108]  =>PUP.Optional.CrossRider
[MD5.9C8383AD4E946209DEFF75424DCDFEEB] - (...) -- C:\Program Files (x86)\4B3388FF-1441112486-11E4-A961-68F7285F0905\knssC8E1.tmpfs [1329664] [PID.1900]  =>PUP.Optional.CrossRider
[MD5.02E736F9861F1A6134736CF7473C513F] - (.Nitro PDF Software - Nitro PDF Spool Service.) -- C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe [230920] [PID.2816] ©
[MD5.CD2C0C25ECFCF816306126D3C208614B] - (.Nalpeiron Ltd. - This service enables products that use the.) -- C:\Windows\SysWOW64\NLSSRV32.EXE [69640] [PID.3152] ©
[MD5.97DB32ACBE84B955C89C2DF41B549DFC] - (.Lenovo - PhoneCompanionPusher.) -- C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe [288240] [PID.3240] ©
[MD5.FBA61BB4C484A01A655AFB18FF86C417] - (.Copyright 2004 - RichVideo Module.) -- C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632] [PID.3316]
[MD5.07D58D5F7839ABA76118BC037C2C63BD] - (.Conexant Systems, Inc. - SmartAudio Service Application.) -- C:\Windows\SysWOW64\SASrv.exe [447104] [PID.3480] ©
[MD5.C049C40CAEE8900130BD5F80B594CC7B] - (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [95192] [PID.3880] ©
[MD5.671F8E8A20173FC72989B4B205979C8B] - (...) -- C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe [67856] [PID.1156]
[MD5.4E7B91EC801E7883D46BA4BFA86C37B2] - (.Lenovo - Lenovo Solution Center Notifications.) -- C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [852768] [PID.2628] ©
[MD5.86B8B1F5C1189D68B07666784BE882FE] - (.Atheros - Atheros Coex Service Application.) -- C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584] [PID.1620] ©
[MD5.08D7D9387A2721C34B366D20472C8013] - (.MyBrowser 1.0.2V01.09 - MyBrowser 1.0.2V01.09 exe.) -- C:\Program Files (x86)\MyBrowser 1.0.2V01.09\df57f450-e39f-4e2d-8b26-91826c57140a-64.exe [1847376] [PID.1992]  =>PUP.Optional.CrossRider
[MD5.1FDB0912430F13CCA3C4DA4B631542B7] - (.Intel Corporation - igfxEM Module.) -- C:\WINDOWS\system32\igfxEM.exe [501744] [PID.4600] ©
[MD5.3D05E43093E13C2ACB23DB376E783800] - (.Intel Corporation - igfxHK Module.) -- C:\WINDOWS\system32\igfxHK.exe [243696] [PID.4616] ©
[MD5.F6164597DC1BE8056629498C4F637507] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxTray.exe [440816] [PID.4660] ©
[MD5.6DAE39C97570E36939D72E909C99D7D4] - (...) -- C:\Program Files\shopperz240820151333\Ooteeotoor.exe [2044280] [PID.4676]  =>PUP.Optional.Shopperz
[MD5.6F44625B49621DDABC93E207B1A462C1] - (.Qualcomm®Atheros® - Extension Core.) -- C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736] [PID.2644] ©
[MD5.24D51923E0EF2FF71231A39226FCCFDD] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [182000] [PID.2432] ©
[MD5.7C3CD9D9B2C1336D5FEABD6EC06316F5] - (.Conexant Systems, Inc. - Conexant High Definition Audio Filter Agent.) -- C:\Program Files\CONEXANT\cAudioFilterAgent\CAudioFilterAgent64.exe [907480] [PID.2320] ©
[MD5.42361B4BD80768E82B80285851037665] - (.Copyright (C) 2010 - FMAPP Application.) -- C:\Program Files\CONEXANT\ForteConfig\fmapp.exe [49056] [PID.3836]
[MD5.D8D5B053190EBB6358985640DFF0132E] - (...) -- C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe [12928] [PID.6152]
[MD5.54F2BB3E323D45D88B220041F1821388] - (.Realtek semiconductor - RTFTrack.) -- C:\Windows\RTFTrack.exe [6340312] [PID.6616] ©
[MD5.6627F2373B1AA6CF0EF9C5C9AD587C35] - (.Lenovo - Lenovo Phone Companion.) -- C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe [836592] [PID.6736] ©
[MD5.6DB938E782F688C788441AB389B9FC78] - (.Lenovo(beijing) Limited - Lenovo Energy Manager.) -- C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe [16094704] [PID.6768] ©
[MD5.E3D9352D2EE0A4343FE2A4A99FCBCB06] - (.Lenovo(beijing) Limited - Lenovo Utility.) -- C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe [10841584] [PID.6928] ©
[MD5.5F828793490C5B1AE67F91FBB7E564C0] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [53661824] [PID.6244] ©
[MD5.5787E5DF1A68E7AFEA82D58E5F0D6549] - (...) -- C:\Program Files\Lenovo PhoneCompanion\adb.exe [815104] [PID.6944]
[MD5.47DBCC66CF9A3DCEF2D42051431160D3] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [8418584] [PID.548] ©
[MD5.22817081C475BA9506C34BBECC99279B] - (.CyberLink - CyberLink MediaLibrary Service.) -- C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe [110344] [PID.7544] ©
[MD5.4F9DD96AECDC12373D4203253D665C6D] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896] [PID.7872] ©
[MD5.CD8555D48A8067A8A31FF5D962C2471F] - (...) -- C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe [592880] [PID.7004]
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.6972] ©
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.1772] ©
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.7136] ©
[MD5.AD24274F3E6EB5C91A80A473AF78FC06] - (.Oracle Corporation - Java Update Checker.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe [1058352] [PID.2388] ©
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.7808] ©
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.6124] ©
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.5688] ©
[MD5.2F4E1E2F3630243C76BE815FDDCBBFA8] - (.Xplode - AdwCleaner.) -- C:\Users\Alizée P\Downloads\AdwCleaner-5.005.exe [1654272] [PID.7920] ©
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.5204] ©
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.3008] ©
[MD5.AF1D955DDA10108A843040ABE19E28BD] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [863560] [PID.7524] ©
[MD5.FE4DD1A2E417A772052A142AEAFE5EDD] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Alizée P\Downloads\ZHPDiag3.exe [1915392] [PID.5912] ©
[MD5.D6FE9E0F705794A86F87A01B222290EF] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776] [PID.1340] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (7) - 0s
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__
G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security
G2 - GCE: Preference [User Data\Default] [lccekmodgklaepjeofjdjpbminllajkg] Chrome Hotword Shared Module
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest  =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [ocifcklkibdehekfnmflempfgjhbedch] __MSG_name__

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (23) - 12s
P2 - EXT FILE: (...) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\extensions\minibar@go.im.xpi  =>PUP.Optional.Minibar
P2 - EXT FILE: (...) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\extensions\{08bb51e3-c574-4084-ba55-644318a4596c}.xpi
P2 - EXT FILE: (...) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\extensions\{e601126b-77d8-467e-9da5-216e25b869f4}.xpi
P2 - EXT FILE: (...) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\extensions\{f7e304f3-4970-4bfd-a2b9-d14e5d9e512a}.xpi
P2 - EXT FILE: (...) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\searchplugins\bingcom.xml
P2 - EXT FILE: (...) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\searchplugins\StartWeb.xml  =>PUP.Optional.IMBooster
P2 - EXT FILE: (...) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\searchplugins\trovi.xml  =>PUP.Optional.TroviCom
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazon-france.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\ddg.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\mystartsearch.xml  =>PUP.Optional.StartSearch
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\oursurfing.xml  =>PUP.Optional.OurSurfing
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml
P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-france.xml
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - EXT: (.MyBrowser 1.0.2V01.09 - MyBrowser 1.0.2V01.09.) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com
P2 - EXT: (.ObjectB - Object Browser.) -- C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com  =>PUP.Optional.CrossRider
P2 - FPN: [HKLM] [@nitropdf.com/NitroPDF] - (.Nitro PDF.) -- C:\Program Files (x86)\Nitro\Pro 9\npnitromozilla.dll
P2 - FPN: [HKLM] [@staging.google.com/globalUpdate Update;version=10] - (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll  =>PUP.Optional.GlobalUpdate
P2 - FPN: [HKLM] [@staging.google.com/globalUpdate Update;version=4] - (.globalUpdate.) -- C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll  =>PUP.Optional.GlobalUpdate

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (22) - 2s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.iminent.com/  =>PUP.Optional.IMBooster
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://mystart.lenovo.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean  =>.Microsoft Internet Explorer
R3 - URLSearchHook: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} Orphean
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1

---\\ Internet Explorer,Proxy Management (6) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.)
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.)

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (2) - 0s
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll ©
O2 - BHO: IMinent WebBooster [64Bits] - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} . (...) -- C:\Program Files (x86)\Iminent\Minibar.InternetExplorer.BHOx64.dll (.not file.)  =>PUP.Optional.IMBooster

---\\ Applications lancées au démarrage du système (25) - 1s
O4 - HKLM\..\Run: [cAudioFilterAgent] . (.Conexant Systems, Inc. - Conexant High Definition Audio Filter Agent.) -- C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe ©
O4 - HKLM\..\Run: [ForteConfig] . (.Copyright (C) 2010 - FMAPP Application.) -- C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
O4 - HKLM\..\Run: [SmartAudio] . (.Conexant Systems, Inc. - SmartAudio CPL (32bit).) -- C:\Program Files\CONEXANT\SAII\SACpl.exe ©
O4 - HKLM\..\Run: [RtsFT] . (.Realtek semiconductor - RTFTrack.) -- C:\WINDOWS\RTFTrack.exe ©
O4 - HKLM\..\Run: [PhoneCompanion] . (.Lenovo - Lenovo Phone Companion.) -- C:\Program Files\Lenovo PhoneCompanion\Phone Companion.exe ©
O4 - HKLM\..\Run: [Energy Manager] . (.Lenovo(beijing) Limited - Lenovo Energy Manager.) -- C:\Program Files (x86)\Lenovo\Energy Manager\Energy Manager.exe ©
O4 - HKLM\..\Run: [Lenovo Utility] . (.Lenovo(beijing) Limited - Lenovo Utility.) -- C:\Program Files (x86)\Lenovo\Energy Manager\utility.exe ©
O4 - HKLM\..\Run: [3D BubbleSound] C:\Program Files\BubbleSound\3D BubbleSound.exe (.not file.)  =>PUP.Optional.BubbleSound
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe ©
O4 - HKCU\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe ©
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe ©
O4 - HKCU\..\Run: [YTDownloader] C:\Program Files (x86)\YTDownloader\YTDownloader.exe (.not file.)  =>PUP.Optional.YTDownloader
O4 - HKLM\..\Wow6432Node\Run: [CLMLServer_For_P2G8] . (.CyberLink - CyberLink MediaLibrary Service.) -- C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvc_P2G8.exe ©
O4 - HKLM\..\Wow6432Node\Run: [CLVirtualDrive] . (.CyberLink Corp. - CyberLink Virtual Drive.) -- C:\Program Files (x86)\Lenovo\Power2Go\VirtualDrive.exe ©
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ©
O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_002010042]  (Orphean)  =>PUP.Optional.CrossRider
O4 - HKLM\..\Wow6432Node\Run: [SmartWeb] C:\Users\Alizée P\AppData\Local\SmartWeb\SmartWebHelper.exe (.not file.)  =>PUP.Optional.SmartWebSearch
O4 - HKLM\..\Wow6432Node\Run: [YTDownloader] C:\Program Files (x86)\YTDownloader\YTDownloader.exe (.not file.)  =>PUP.Optional.YTDownloader
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe ©
O4 - HKLM\..\Wow6432Node\RunOnce: [upgmsd_fr_005010077.exe] . (...) -- C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077\upgmsd_fr_005010077.exe  =>PUP.Optional.CrossRider
O4 - HKLM\..\policies\Explorer\Run: [BtvStack] . (.Qualcomm®Atheros® - Extension Core.) -- C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe ©
O4 - HKUS\S-1-5-21-1952828977-576085348-507956990-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe ©
O4 - HKUS\S-1-5-21-1952828977-576085348-507956990-1001\..\Run: [msnmsgr] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe ©
O4 - HKUS\S-1-5-21-1952828977-576085348-507956990-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe ©
O4 - HKUS\S-1-5-21-1952828977-576085348-507956990-1001\..\Run: [YTDownloader] C:\Program Files (x86)\YTDownloader\YTDownloader.exe (.not file.)  =>PUP.Optional.YTDownloader

---\\ Raccourcis Global Startup (4) - 4s
O4 - GS\TaskBar [Administrateur]: Crossbrowse.lnk . (...) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe  =>PUP.Optional.CrossBrowse
O4 - GS\TaskBar [Alizée P]: Crossbrowse.lnk . (...) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe  =>PUP.Optional.CrossBrowse
O4 - GS\TaskBar [Invité]: Crossbrowse.lnk . (...) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe  =>PUP.Optional.CrossBrowse
O4 - GS\TaskBar [Sebastien Petit]: Crossbrowse.lnk . (...) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe  =>PUP.Optional.CrossBrowse

---\\ Winsock hijacker (Layered Service Provider) (10) - 0s
O10 - WLSP:\Catalog_Entries\000000000001\Winsock LSP File . (...) -- C:\Windows\System32\Ooteeotoor.dll (Not File)  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000002\Winsock LSP File . (...) -- C:\Windows\System32\Ooteeotoor.dll (Not File)  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000003\Winsock LSP File . (...) -- C:\Windows\System32\Ooteeotoor.dll (Not File)  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000004\Winsock LSP File . (...) -- C:\Windows\System32\Ooteeotoor.dll (Not File)  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries\000000000016\Winsock LSP File . (...) -- C:\Windows\System32\Ooteeotoor.dll (Not File)  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000001\Winsock LSP File . (...) -- C:\WINDOWS\system32\Ooteeotoor64.dll  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000002\Winsock LSP File . (...) -- C:\WINDOWS\system32\Ooteeotoor64.dll  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000003\Winsock LSP File . (...) -- C:\WINDOWS\system32\Ooteeotoor64.dll  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000004\Winsock LSP File . (...) -- C:\WINDOWS\system32\Ooteeotoor64.dll  =>Hijacker.Winsock
O10 - WLSP:\Catalog_Entries64\000000000016\Winsock LSP File . (...) -- C:\WINDOWS\system32\Ooteeotoor64.dll  =>Hijacker.Winsock

---\\ Modification Domaine/Adresses DNS (6) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 150.209.1.3
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = 150.209.1.3
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 150.209.1.3
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = 150.209.1.3

---\\ Protocole additionnel (20) - 0s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll ©

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll C:\PROGRA~2\LENOVO~1\LENOVO~1\bin\SPVC64~1.DLL  (.not file.)  =>PUP.Optional.SearchProtect

---\\ Liste des services NT non Microsoft et non désactivés (26) - 3s
O23 - Service: McAfee Application Installer Cleanup (0039831439229571) (0039831439229571mcinstcleanup) . (...) - C:\Users\ALIZEP~1\AppData\Local\Temp\003983~1.EXE (.not file.)
O23 - Service: AtherosSvc (AtherosSvc) . (.Windows (R) Win 7 DDK provider - Windows Setup API.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe ©
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ©
O23 - Service:  (BrsHelper) . (...) - C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe  =>PUP.Optional.YTDownloader
O23 - Service: CCSDK (CCSDK) . (...) - C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
O23 - Service: Search Protect Service (CltMngSvc) . (...) - C:\Program Files (x86)\SearchProtect\Main\bin\CltMngSvc.exe (.not file.)  =>PUP.Optional.SearchProtect
O23 - Service: @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) . (.Conexant Systems Inc. - Conexant Audio Message Service.) - C:\WINDOWS\system32\CxAudMsg64.exe ©
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) . (...) - C:\Program Files (x86)\globalUpdate\Update\globalupdate.exe (.not file.)  =>PUP.Optional.GlobalUpdate
O23 - Service: GlobalUpdater (GlobalUpdater) . (.SIEN S.A. - IMGUpdater.) - C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe  =>PUP.Optional.GlobalUpdate
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\WINDOWS\system32\igfxCUIService.exe ©
O23 - Service: IMService (IMService) . (.Iminent - Iminent Service.) - C:\Program Files (x86)\Common Files\Umbrella\Umbrella224.exe  =>PUP.Optional.IMBooster
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe ©
O23 - Service: Lenovo System Agent Service (Lenovo System Agent Service) . (.LENOVO INCORPORATED. - Lenovo System Agent Service.) - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
O23 - Service: Lenovo WiFiHotspot Service (LenovoWiFiHotspotSvr) . (.Lenovo(beijing) Limited - Lenovo WiFiHotspot.) - C:\Windows\System32\LenovoWiFiHotspotSvr.exe ©
O23 - Service: LUService (LUService) . (.Lenovo(beijing) Limited - Lenovo Updates Service.) - C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe ©
O23 - Service: Maxthon Core Update Service (MaxthonUpdateSvc) . (.Maxthon - .) - C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe ©
O23 - Service: Pre-formatted Flat Panel Monitor (misetufy) . (...) - C:\Program Files (x86)\4B3388FF-1441112486-11E4-A961-68F7285F0905\knssC8E1.tmpfs  =>PUP.Optional.CrossRider
O23 - Service: NitroPDFDriverCreatorReadSpool9 (NitroDriverReadSpool9) . (.Nitro PDF Software - Nitro PDF Spool Service.) - C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe ©
O23 - Service: Nalpeiron Licensing Service (nlsX86cc) . (.Nalpeiron Ltd. - This service enables products that use the.) - C:\Windows\SysWOW64\NLSSRV32.EXE ©
O23 - Service: Lenovo PhoneCompanionPusher Service (PhoneCompanionPusher) . (.Lenovo - PhoneCompanionPusher.) - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe ©
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.Copyright 2004 - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: Conexant SmartAudio service (SAService) . (...) - C:\Windows\System32\SASrv.exe (.not file.)
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
O23 - Service: VeriFaceSrv (VeriFaceSrv) . (...) - C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
O23 - Service: ZAtheros Bt and Wlan Coex Agent (ZAtheros Bt and Wlan Coex Agent) . (.Atheros - Atheros Coex Service Application.) - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe ©

---\\ Enumère les données de BootExecute (1) - 0s
O34 - HKLM BootExecute: (aswBoot.exe /M:218920a9 /wow /dir:"C:\Program Files\AVAST Software\Avast")

---\\ Logiciels installés (88) - 19s
O42 - Logiciel: Package de pilotes Windows - Lenovo (WUDFRd) LenovoVhid  (07/25/2013 10.30. - (.Lenovo.) [HKLM][64Bits] -- 6BCA401E9CBEED970D75F55FA5320F60D11984E9 ©
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner ©
O42 - Logiciel: Conexant HD Audio - (.Conexant.) [HKLM][64Bits] -- CNXT_AUDIO_HDA ©
O42 - Logiciel: Package de pilotes Windows - Lenovo (ACPIVPC) System  (09/24/2013 19.29.2.3 - (.Lenovo.) [HKLM][64Bits] -- EE9B1F2037C580F36D92FA431CC02BFF04C31F15 ©
O42 - Logiciel: Lenovo Dependency Package - (.Lenovo Group Limited.) [HKLM][64Bits] -- Lenovo Dependency Package_is1
O42 - Logiciel: Lenovo VeriFace Pro - (.Lenovo.) [HKLM][64Bits] -- Lenovo VeriFace ©
O42 - Logiciel: Lenovo Experience Improvement - (.Lenovo.) [HKLM][64Bits] -- LenovoExperienceImprovement ©
O42 - Logiciel: MediaCoder x64 0.8.36.5757 - (.Mediatronic.) [HKLM][64Bits] -- MediaCoder x64
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey ©
O42 - Logiciel: WinRAR 5.21 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Inc..) [HKLM][64Bits] -- {0788641D-D31A-478D-BB34-C41564AE9F93}
O42 - Logiciel: Lenovo Solution Center - (.Lenovo Group Limited.) [HKLM][64Bits] -- {13BD494D-9ACD-420B-A291-E145DED92EF6}
O42 - Logiciel: Intel(R) Trusted Execution Engine - (.Intel Corporation.) [HKLM][64Bits] -- {176E2755-0A17-42C6-88E2-192AB2131278} ©
O42 - Logiciel: Intel(R) Trusted Execution Engine - (.Intel Corporation.) [HKLM][64Bits] -- {2D6248C0-4693-4CAB-9922-F05E4015F62A} ©
O42 - Logiciel: Lenovo OneKey Recovery - (.CyberLink Corp..) [HKLM][64Bits] -- {46F4D124-20E5-4D12-BE52-EC177A7A4B42} ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Inc..) [HKLM][64Bits] -- {5252431C-288E-409D-ADCF-24407E0E6F70}
O42 - Logiciel: Intel(R) Trusted Execution Engine Driver - (.Intel Corporation.) [HKLM][64Bits] -- {6307E820-0317-4DCE-AAE0-7B6CAD867055} ©
O42 - Logiciel: Nitro Pro 9 - (.Nitro.) [HKLM][64Bits] -- {7D914F94-B2BC-44EA-9260-D7EE9F20C0A8} ©
O42 - Logiciel: Qualcomm Atheros Bluetooth Suite (64) - (.Qualcomm Atheros Communications.) [HKLM][64Bits] -- {A84A4FB1-D703-48DB-89E0-68B6499D2801}
O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {B0B4F6D2-F2AE-451A-9496-6F2F6A897B32} ©
O42 - Logiciel: Dolby Digital Plus Advanced Audio - (.Dolby Laboratories Inc.) [HKLM][64Bits] -- {B0BFC63F-EA07-419E-960B-3FB2ED5DD0B2}
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Inc..) [HKLM][64Bits] -- {FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR ©
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast ©
O42 - Logiciel: Intel(R) Sideband Fabric Device Driver - (.Intel Corporation.) [HKLM][64Bits] -- C5A8BC6E-723A-4C0F-96E1-C426D1A4BCA9 ©
O42 - Logiciel: Ditto - (.Scott Brogden.) [HKLM][64Bits] -- Ditto_is1
O42 - Logiciel: FormatFactory 3.7.0.0 - (.Format Factory.) [HKLM][64Bits] -- FormatFactory ©
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome ©
O42 - Logiciel: Lenovo PhoneCompanion - (.Lenovo.) [HKLM][64Bits] -- InstallShield_{0F82EA83-B0C5-4AB9-9695-DFE92C5FD57B} ©
O42 - Logiciel: CyberLink Power2Go 8 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2} ©
O42 - Logiciel: Lenovo OneKey Recovery - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42} ©
O42 - Logiciel: Lenovo Updates - (.Lenovo.) [HKLM][64Bits] -- InstallShield_{A2E1E9F0-0B68-4166-8C7F-85B563B84DF4} ©
O42 - Logiciel: Energy Manager - (.Lenovo.) [HKLM][64Bits] -- InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE} ©
O42 - Logiciel: CyberLink PowerDirector 10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32} ©
O42 - Logiciel: Lenovo Photo Master - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{BC94C56A-3649-420C-8756-2ADEBE399D33} ©
O42 - Logiciel: Lenovo PowerDVD10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B} ©
O42 - Logiciel: Lenovo Mobile Phone Wireless Import - (.Lenovo.) [HKLM][64Bits] -- InstallShield_{DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6} ©
O42 - Logiciel: User Manuals - (.Lenovo.) [HKLM][64Bits] -- InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88} ©
O42 - Logiciel: Lenovo FusionEngine  - (.Lenovo, Inc..) [HKLM][64Bits] -- Lenovo FusionEngine
O42 - Logiciel: Maxthon Cloud Browser - (.Maxthon International Limited.) [HKLM][64Bits] -- Maxthon3
O42 - Logiciel: Mozilla Firefox 39.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 39.0 (x86 fr) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService ©
O42 - Logiciel: PaintTool SAI Ver.1 - (...) [HKLM][64Bits] -- PaintToolSAI
O42 - Logiciel: PhotoScape - (...) [HKLM][64Bits] -- PhotoScape
O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM][64Bits] -- Revo Uninstaller ©
O42 - Logiciel: SHAREit - (.Lenovo Group Limited.) [HKLM][64Bits] -- SHAREit_is1
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player ©
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79} ©
O42 - Logiciel: Lenovo PhoneCompanion - (.Lenovo.) [HKLM][64Bits] -- {0F82EA83-B0C5-4AB9-9695-DFE92C5FD57B} ©
O42 - Logiciel: OpenOffice 4.1.1 - (.Apache Software Foundation.) [HKLM][64Bits] -- {121727D5-FDF3-4723-BA57-EB383440ED72} ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {1D2682EA-75DD-44B6-BF2D-CD3C49EAD012}
O42 - Logiciel: Skype™ 7.7 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} ©
O42 - Logiciel: Java 8 Update 51 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218051F0} ©
O42 - Logiciel: Qualcomm Atheros Client Installation Program - (.Qualcomm Atheros.) [HKLM][64Bits] -- {28006915-2739-4EBE-B5E8-49B25D32EB33} ©
O42 - Logiciel: CyberLink Power2Go 8 - (.CyberLink Corp..) [HKLM][64Bits] -- {2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2} ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {3117B53D-A409-4D99-A0DE-11A1A40696FA}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {31B9D218-FED2-4C6C-B19F-7294FFC130B0} ©
O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {439B34FF-F74E-4807-B5E2-4B758551DA6B} ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {4AF6C9BC-D8DB-4286-94D9-474CE54ADAA2}
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {503B47A9-E34A-4841-ADD7-417191D5DB5E}
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {546FF45D-2467-4950-AAFB-0A06ACBB6B2C}
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {5BEFE1E1-F597-4B79-913B-15FFDB25B744}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {63DE35C9-B080-4D03-B110-99E14FD35BCE}
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {65316098-0220-4D5C-B37A-6136083A0897}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} ©
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} ©
O42 - Logiciel: Lenovo Updates - (.Lenovo.) [HKLM][64Bits] -- {A2E1E9F0-0B68-4166-8C7F-85B563B84DF4} ©
O42 - Logiciel: globalupdate Helper - (.globalupdate Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}  =>PUP.Optional.GlobalUpdate
O42 - Logiciel: Energy Manager - (.Lenovo.) [HKLM][64Bits] -- {AC768037-7079-4658-AC24-2897650E0ABE} ©
O42 - Logiciel: CCSDK - (.Lenovo.) [HKLM][64Bits] -- {AE75190B-11B4-4F90-8254-DAB275CF2557}_is1 ©
O42 - Logiciel: Lenovo Photo Master - (.CyberLink Corp..) [HKLM][64Bits] -- {BC94C56A-3649-420C-8756-2ADEBE399D33} ©
O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM][64Bits] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} ©
O42 - Logiciel: Lenovo PowerDVD10 - (.CyberLink Corp..) [HKLM][64Bits] -- {DEC235ED-58A4-4517-A278-C41E8DAEAB3B} ©
O42 - Logiciel: Lenovo Mobile Phone Wireless Import - (.Lenovo.) [HKLM][64Bits] -- {DFB2E0D6-8DDE-49A4-B8F7-03C14DACCBA6} ©
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} ©
O42 - Logiciel: Lenovo EasyCamera - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {E0A7ED39-8CD6-4351-93C3-69CCA00D12B4} ©
O42 - Logiciel: Dependency Package Update - (.Lenovo Group Limited.) [HKLM][64Bits] -- {E966DBE4-5075-465E-BA81-BC9A3A3204B3}
O42 - Logiciel: UESDK - (.Lenovo.) [HKLM][64Bits] -- {EB3F6640-58AE-4886-B8BA-466B6939A933}_is1 ©
O42 - Logiciel: Manuels d'utilisateur - (.Lenovo.) [HKLM][64Bits] -- {F07C2CF8-4C53-4EC3-8162-A6221E36EB88} ©
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} ©
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe ©
O42 - Logiciel: PhotoFiltre - (...) [HKCU][64Bits] -- PhotoFiltre
O42 - Logiciel: PhotoFiltre 7 - (...) [HKCU][64Bits] -- PhotoFiltre 7

---\\ HKCU & HKLM Software Keys (136) - 19s
HKLM\SOFTWARE\Wow6432Node\379edbbb-dc68-4be3-87aa-34660f4c0bb2  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\43e0fe39-4400-4ecb-9420-230a77957f5d  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\79c6fdef-7b00-413e-a3f3-95c2a8916018  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\ArenaHD  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Atheros
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\Boxore  =>PUP.Optional.Boxore
HKLM\SOFTWARE\Wow6432Node\Clara  =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\Conexant
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\EA GAMES
HKLM\SOFTWARE\Wow6432Node\Electronic Arts
HKLM\SOFTWARE\Wow6432Node\FusionEngine
HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP  =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\GlobalUpdate  =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\HighDefAction  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\IMGUpdater  =>PUP.Optional.IMGUpdater
HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions  =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Lake
HKLM\SOFTWARE\Wow6432Node\Lenovo
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\MaxPower
HKLM\SOFTWARE\Wow6432Node\Maxthon3
HKLM\SOFTWARE\Wow6432Node\Mooii
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\mozilla.org
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\MYBESTOFFERSTODAY  =>PUP.Optional.MyBestOffersToday
HKLM\SOFTWARE\Wow6432Node\MyBrowser 1.0.2V01.09-nv  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\MyBrowser 1.0.2V01.09-nv-ie  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\mystartsearchSoftware  =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Wow6432Node\Nalpeiron
HKLM\SOFTWARE\Wow6432Node\Network Associates
HKLM\SOFTWARE\Wow6432Node\Nitro
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\Object Browser-nv  =>PUP.Optional.ObjectBrowser
HKLM\SOFTWARE\Wow6432Node\Object Browser-nv-ie  =>PUP.Optional.ObjectBrowser
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OpenOffice
HKLM\SOFTWARE\Wow6432Node\oursurfingSoftware  =>PUP.Optional.OurSurfing
HKLM\SOFTWARE\Wow6432Node\Piriform
HKLM\SOFTWARE\Wow6432Node\PlayGem
HKLM\SOFTWARE\Wow6432Node\Qualcomm Atheros
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\SearchProtect  =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Software
HKLM\SOFTWARE\Wow6432Node\SPPDCOM  =>PUP.Optional.PCSpeedUp
HKLM\SOFTWARE\Wow6432Node\SuppHelpDir
HKLM\SOFTWARE\Wow6432Node\TermCoach_1.10.0.21  =>PUP.Optional.TermCoach
HKLM\SOFTWARE\Wow6432Node\Tutorials  =>PUP.Optional.AgenceExclusive
HKLM\SOFTWARE\Wow6432Node\Umbrella  =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WdsManPro  =>PUP.Optional.WdsManPro
HKLM\SOFTWARE\Wow6432Node\YorkNewCin  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\ArenaHD  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Atheros
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\Boxore  =>PUP.Optional.Boxore
HKCU\SOFTWARE\BugSplat
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Clubic
HKCU\SOFTWARE\Conexant
HKCU\SOFTWARE\CrossBrowser  =>PUP.Optional.CrossBrowser
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\DailyPcClean  =>PUP.Optional.DailyPCClean
HKCU\SOFTWARE\Disc Soft
HKCU\SOFTWARE\Ditto
HKCU\SOFTWARE\EasyPlus
HKCU\SOFTWARE\Enigma Protector
HKCU\SOFTWARE\FreeTime
HKCU\SOFTWARE\gamesdesktop  =>PUP.Optional.GamesDesktop
HKCU\SOFTWARE\globalUpdate  =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\HighDefAction  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Iminent  =>PUP.Optional.IMBooster
HKCU\SOFTWARE\InstalledBrowserExtensions  =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\InstallPath
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\IvoSoft
HKCU\SOFTWARE\iWebar-nv-ie  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Leapic Software
HKCU\SOFTWARE\Lenovo
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\Mooii
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\MyBrowser 1.0.2V01.09  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\MyBrowser 1.0.2V01.09-nv  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\MyBrowser 1.0.2V01.09-nv-ie  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Nitro
HKCU\SOFTWARE\Nosibay  =>PUP.Optional.SPointer
HKCU\SOFTWARE\Object Browser-nv  =>PUP.Optional.ObjectBrowser
HKCU\SOFTWARE\Object Browser-nv-ie  =>PUP.Optional.ObjectBrowser
HKCU\SOFTWARE\OpenOffice
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\PhotoFiltre
HKCU\SOFTWARE\PhotoFiltre 7
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\QGifer
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\Spoon
HKCU\SOFTWARE\Store  =>PUP.Optional.Generic
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\SYSTEMAX Software Development
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Tutorials  =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\TutoTag  =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\VSRevoGroup
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\WTools
HKCU\SOFTWARE\YorkNewCin  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Crossrider  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programmes (227) - 16s
O43 - CFD: 2015/09/01 19:41:41 - [] D -- C:\Program Files (x86)\4B3388FF-1441112486-11E4-A961-68F7285F0905  =>PUP.Optional.CrossRider
O43 - CFD: 2015/01/20 10:37:25 - [] D -- C:\Program Files (x86)\Adobe
O43 - CFD: 2015/01/20 09:30:00 - [] D -- C:\Program Files (x86)\Bluetooth Suite
O43 - CFD: 2015/09/01 18:33:18 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 2015/01/20 10:34:41 - [] D -- C:\Program Files (x86)\Cyberlink
O43 - CFD: 2015/08/14 18:56:10 - [] D -- C:\Program Files (x86)\Disc Soft
O43 - CFD: 2015/08/28 14:08:14 - [] D -- C:\Program Files (x86)\Ditto
O43 - CFD: 2015/07/30 21:20:42 - [] D -- C:\Program Files (x86)\FormatFactory
O43 - CFD: 2015/07/20 13:38:46 - [0] D -- C:\Program Files (x86)\FreeTime
O43 - CFD: 2015/07/14 20:34:21 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 2015/07/20 16:49:22 - [] HD -- C:\Program Files (x86)\InstallJammer Registry
O43 - CFD: 2015/01/20 10:50:08 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 2015/01/20 09:25:08 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 2015/08/15 17:18:31 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 2015/07/18 18:09:54 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 2015/07/14 19:52:26 - [] D -- C:\Program Files (x86)\Lenovo
O43 - CFD: 2015/01/20 10:26:05 - [] D -- C:\Program Files (x86)\Maxthon
O43 - CFD: 2015/07/31 22:17:18 - [] D -- C:\Program Files (x86)\McAfee
O43 - CFD: 2015/01/20 10:29:45 - [] D -- C:\Program Files (x86)\mcafee.com
O43 - CFD: 2015/07/13 22:15:22 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 2015/07/20 15:37:51 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 2015/07/13 22:15:22 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 2015/07/27 22:18:42 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 2015/07/18 17:30:10 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 2015/07/13 22:13:39 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 2015/09/01 20:58:11 - [] D -- C:\Program Files (x86)\MyBrowser 1.0.2V01.09  =>PUP.Optional.CrossRider
O43 - CFD: 2015/01/20 10:42:45 - [0] D -- C:\Program Files (x86)\New Folder
O43 - CFD: 2015/01/20 10:23:47 - [] D -- C:\Program Files (x86)\Nitro
O43 - CFD: 2015/09/01 20:52:03 - [0] D -- C:\Program Files (x86)\Oasis Space
O43 - CFD: 2015/09/01 20:52:03 - [0] D -- C:\Program Files (x86)\Object Browser  =>PUP.Optional.ObjectBrowser
O43 - CFD: 2015/07/20 21:01:19 - [] D -- C:\Program Files (x86)\OpenOffice 4
O43 - CFD: 2015/07/13 21:27:35 - [] D -- C:\Program Files (x86)\PhotoFiltre
O43 - CFD: 2015/07/13 18:22:51 - [] D -- C:\Program Files (x86)\PhotoFiltre 7
O43 - CFD: 2015/07/13 20:55:07 - [] D -- C:\Program Files (x86)\PhotoScape
O43 - CFD: 2015/01/20 09:35:46 - [] D -- C:\Program Files (x86)\Qualcomm Atheros
O43 - CFD: 2015/01/20 09:38:51 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 2014/04/02 18:49:05 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 2015/09/01 20:54:32 - [] D -- C:\Program Files (x86)\SFK  =>PUP.Optional.MyWebSearch
O43 - CFD: 2015/07/15 18:17:16 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 2015/07/20 21:23:14 - [] D -- C:\Program Files (x86)\Video to GIF Converter
O43 - CFD: 2015/07/19 17:04:29 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 2015/07/27 20:21:13 - [] D -- C:\Program Files (x86)\VS Revo Group
O43 - CFD: 2015/08/15 17:18:29 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 2015/07/20 15:37:44 - [] D -- C:\Program Files (x86)\Windows Live
O43 - CFD: 2015/01/20 09:05:13 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 2015/01/20 09:05:13 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 2015/01/20 09:05:13 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 2015/01/20 09:05:13 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 2015/01/20 09:05:13 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 2013/08/22 17:36:30 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 2013/08/22 17:36:30 - [] D -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 2015/07/14 19:33:54 - [0] D -- C:\Program Files (x86)\WinRAR
O43 - CFD: 2015/09/01 19:09:33 - [] D -- C:\Program Files (x86)\YTDownloader  =>PUP.Optional.YTDownloader
O43 - CFD: 2015/01/20 09:06:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/07/14 19:25:05 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/01/20 09:06:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/09/01 19:22:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 2015/07/27 20:25:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 2015/01/20 10:36:19 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
O43 - CFD: 2015/01/20 10:34:44 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 10
O43 - CFD: 2015/08/28 14:08:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ditto
O43 - CFD: 2015/01/20 09:27:58 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby
O43 - CFD: 2015/08/09 14:29:51 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 2015/09/01 18:56:58 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP  =>PUP.Optional.GamesDesktop
O43 - CFD: 2015/09/01 18:35:06 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 2015/07/18 18:10:11 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 2015/07/14 19:52:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo
O43 - CFD: 2015/01/20 10:48:37 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo Photo Master
O43 - CFD: 2013/08/22 17:36:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/01/20 10:26:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxthon Cloud Browser
O43 - CFD: 2015/09/01 18:33:41 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY  =>PUP.Optional.MyBestOffersToday
O43 - CFD: 2015/07/20 21:07:34 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
O43 - CFD: 2015/07/13 21:27:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
O43 - CFD: 2015/07/13 18:22:52 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 2015/07/13 20:55:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape
O43 - CFD: 2015/08/15 15:58:30 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor1911
O43 - CFD: 2015/07/15 18:17:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 2015/08/07 14:22:20 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 2015/01/20 09:06:27 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2014/03/18 11:38:02 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 2015/07/19 17:06:35 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 2015/07/20 15:40:42 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 2015/07/13 17:18:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 2015/08/09 14:23:53 - [] D -- C:\ProgramData\1WinManPro1
O43 - CFD: 2015/01/20 10:37:25 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 2015/07/25 13:54:56 - [] D -- C:\ProgramData\Atheros
O43 - CFD: 2015/09/01 19:14:13 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 2015/07/13 01:39:18 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 2015/08/16 16:58:57 - [] D -- C:\ProgramData\Caphyon
O43 - CFD: 2015/08/09 17:30:53 - [] D -- C:\ProgramData\ClassicShell
O43 - CFD: 2015/01/20 09:25:11 - [] D -- C:\ProgramData\Conexant
O43 - CFD: 2015/09/01 18:33:04 - [] D -- C:\ProgramData\cWdsManProc  =>PUP.Optional.WdsManPro
O43 - CFD: 2015/07/13 14:16:46 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 2015/08/14 18:50:54 - [] D -- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 2015/01/20 10:49:33 - [] D -- C:\ProgramData\Downloaded Installations
O43 - CFD: 2015/01/20 10:50:22 - [] D -- C:\ProgramData\Energy Manager
O43 - CFD: 2015/01/20 10:46:35 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 2015/01/20 09:24:56 - [] D -- C:\ProgramData\Intel
O43 - CFD: 2015/07/15 14:14:30 - [] D -- C:\ProgramData\Lenovo
O43 - CFD: 2015/09/01 21:03:24 - [] D -- C:\ProgramData\LU
O43 - CFD: 2015/08/10 20:04:26 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 2015/07/13 01:39:18 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 2015/09/01 15:10:50 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 2015/07/13 22:15:44 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 2015/07/20 15:30:44 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 2015/07/13 01:39:18 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 2015/09/01 17:13:44 - [] D -- C:\ProgramData\MovieDeaConfig  =>PUP.Optional.MovieDea
O43 - CFD: 2015/07/18 17:30:09 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 2015/01/20 10:23:47 - [] D -- C:\ProgramData\Nitro
O43 - CFD: 2015/01/20 10:49:17 - [] D -- C:\ProgramData\Office2013
O43 - CFD: 2015/01/20 10:27:12 - [] D -- C:\ProgramData\OneKey Recovery
O43 - CFD: 2015/07/18 18:10:55 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 2015/08/15 15:39:57 - [] D -- C:\ProgramData\Origin
O43 - CFD: 2015/01/20 10:47:19 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 2015/09/01 17:15:03 - [] D -- C:\ProgramData\PlayGemConfig
O43 - CFD: 2015/01/20 09:35:38 - [] D -- C:\ProgramData\Qualcomm Atheros
O43 - CFD: 2015/09/01 13:33:00 - [] D -- C:\ProgramData\QWdsManProQ  =>PUP.Optional.WdsManPro
O43 - CFD: 2015/01/20 10:24:40 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 2015/08/15 17:29:20 - [] D -- C:\ProgramData\Skype
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 2015/07/14 20:48:16 - [] D -- C:\ProgramData\Sun
O43 - CFD: 2015/07/25 22:44:54 - [] D -- C:\ProgramData\SYSTEMAX Software Development
O43 - CFD: 2015/01/20 10:46:36 - [] D -- C:\ProgramData\Temp
O43 - CFD: 2013/08/22 16:45:52 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 2015/07/14 15:58:38 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 2015/01/20 09:29:57 - [] D -- C:\Program Files (x86)\Common Files\Atheros
O43 - CFD: 2015/01/20 10:36:18 - [] D -- C:\Program Files (x86)\Common Files\CyberLink
O43 - CFD: 2015/09/01 18:33:18 - [] D -- C:\Program Files (x86)\Common Files\IMGUpdater  =>PUP.Optional.IMGUpdater
O43 - CFD: 2015/01/20 09:20:20 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 2015/07/18 18:10:35 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 2015/01/20 10:25:46 - [] D -- C:\Program Files (x86)\Common Files\LENOVO
O43 - CFD: 2015/08/15 17:21:46 - [] D -- C:\Program Files (x86)\Common Files\McAfee
O43 - CFD: 2015/07/14 19:24:52 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 2015/01/20 10:48:37 - [] D -- C:\Program Files (x86)\Common Files\Nikon
O43 - CFD: 2015/01/20 10:23:47 - [] D -- C:\Program Files (x86)\Common Files\Nitro
O43 - CFD: 2013/08/22 17:36:33 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 2015/07/15 18:17:16 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 2015/07/13 21:27:27 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 2015/09/01 18:33:18 - [] D -- C:\Program Files (x86)\Common Files\Umbrella  =>PUP.Optional.IMBooster
O43 - CFD: 2015/07/20 15:10:58 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 2015/07/13 01:51:32 - [] D -- C:\Users\Alizée P\AppData\Roaming\Adobe
O43 - CFD: 2015/09/01 18:39:22 - [] SHD -- C:\Users\Alizée P\AppData\Roaming\AnyProtectEx  =>PUP.Optional.AnyProtect
O43 - CFD: 2015/07/13 01:48:53 - [] D -- C:\Users\Alizée P\AppData\Roaming\Atheros
O43 - CFD: 2015/09/01 20:18:30 - [] D -- C:\Users\Alizée P\AppData\Roaming\AVAST Software
O43 - CFD: 2015/07/12 19:03:28 - [0] D -- C:\Users\Alizée P\AppData\Roaming\CyberLink
O43 - CFD: 2015/08/16 17:18:55 - [] D -- C:\Users\Alizée P\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 2015/08/29 22:55:18 - [] D -- C:\Users\Alizée P\AppData\Roaming\Ditto
O43 - CFD: 2015/07/30 19:18:54 - [] D -- C:\Users\Alizée P\AppData\Roaming\dvdcss
O43 - CFD: 2015/07/28 12:38:16 - [] D -- C:\Users\Alizée P\AppData\Roaming\Identities
O43 - CFD: 2015/08/15 15:34:46 - [] D -- C:\Users\Alizée P\AppData\Roaming\install
O43 - CFD: 2015/07/14 17:40:08 - [] D -- C:\Users\Alizée P\AppData\Roaming\LSC
O43 - CFD: 2015/01/20 10:37:25 - [] D -- C:\Users\Alizée P\AppData\Roaming\Macromedia
O43 - CFD: 2015/07/30 21:18:59 - [] D -- C:\Users\Alizée P\AppData\Roaming\Mediatronic
O43 - CFD: 2015/09/01 15:05:28 - [] SD -- C:\Users\Alizée P\AppData\Roaming\Microsoft
O43 - CFD: 2015/07/18 17:31:35 - [] D -- C:\Users\Alizée P\AppData\Roaming\Mozilla
O43 - CFD: 2015/09/01 20:57:09 - [0] D -- C:\Users\Alizée P\AppData\Roaming\mystartsearch  =>PUP.Optional.StartSearch
O43 - CFD: 2015/07/12 19:00:58 - [] D -- C:\Users\Alizée P\AppData\Roaming\Nitro
O43 - CFD: 2015/09/01 20:58:41 - [] D -- C:\Users\Alizée P\AppData\Roaming\Nitro PDF
O43 - CFD: 2015/09/01 18:20:04 - [0] D -- C:\Users\Alizée P\AppData\Roaming\Nosibay  =>PUP.Optional.BubbleDock
O43 - CFD: 2015/07/19 20:36:49 - [] D -- C:\Users\Alizée P\AppData\Roaming\OpenOffice
O43 - CFD: 2015/07/13 21:28:15 - [] D -- C:\Users\Alizée P\AppData\Roaming\PhotoFiltre
O43 - CFD: 2015/07/13 18:23:25 - [] D -- C:\Users\Alizée P\AppData\Roaming\PhotoFiltre 7
O43 - CFD: 2015/08/30 20:13:46 - [0] D -- C:\Users\Alizée P\AppData\Roaming\PhotoScape
O43 - CFD: 2015/08/15 15:19:28 - [] D -- C:\Users\Alizée P\AppData\Roaming\SimCity
O43 - CFD: 2015/09/01 20:56:30 - [] D -- C:\Users\Alizée P\AppData\Roaming\Skype
O43 - CFD: 2015/09/01 17:06:44 - [0] D -- C:\Users\Alizée P\AppData\Roaming\Store  =>PUP.Optional.Nosibay
O43 - CFD: 2015/07/25 22:44:39 - [] D -- C:\Users\Alizée P\AppData\Roaming\SYSTEMAX Software Development
O43 - CFD: 2015/08/26 00:18:52 - [] D -- C:\Users\Alizée P\AppData\Roaming\vlc
O43 - CFD: 2015/07/13 17:19:49 - [] D -- C:\Users\Alizée P\AppData\Roaming\WinRAR
O43 - CFD: 2015/09/01 17:13:19 - [0] D -- C:\Users\Alizée P\AppData\Roaming\WTools
O43 - CFD: 2015/09/01 21:14:57 - [] D -- C:\Users\Alizée P\AppData\Roaming\ZHP
O43 - CFD: 2015/07/29 16:24:00 - [] D -- C:\Users\Alizée P\AppData\Local\Adobe
O43 - CFD: 2015/07/13 01:47:30 - [0] SHD -- C:\Users\Alizée P\AppData\Local\Application Data
O43 - CFD: 2015/07/14 20:28:38 - [] D -- C:\Users\Alizée P\AppData\Local\Apps
O43 - CFD: 2015/07/13 01:49:23 - [] D -- C:\Users\Alizée P\AppData\Local\BMExplorer
O43 - CFD: 2015/09/01 15:10:04 - [] D -- C:\Users\Alizée P\AppData\Local\BoBrowser  =>PUP.Optional.BoBrowser
O43 - CFD: 2015/09/01 13:33:54 - [] D -- C:\Users\Alizée P\AppData\Local\Boxore  =>PUP.Optional.Boxore
O43 - CFD: 2015/09/01 19:00:16 - [] D -- C:\Users\Alizée P\AppData\Local\BrowserHelper  =>PUP.Optional.BrowserHelper
O43 - CFD: 2015/09/01 18:49:46 - [] D -- C:\Users\Alizée P\AppData\Local\CrashDumps
O43 - CFD: 2015/09/01 18:29:19 - [] D -- C:\Users\Alizée P\AppData\Local\CrashRpt  =>.Superfluous.CrashReports
O43 - CFD: 2015/09/01 18:36:45 - [] D -- C:\Users\Alizée P\AppData\Local\Crossbrowse  =>PUP.Optional.CrossBrowse
O43 - CFD: 2015/07/13 14:16:49 - [] D -- C:\Users\Alizée P\AppData\Local\CyberLink
O43 - CFD: 2015/07/14 20:29:20 - [0] D -- C:\Users\Alizée P\AppData\Local\Deployment
O43 - CFD: 2015/08/15 15:30:20 - [] D -- C:\Users\Alizée P\AppData\Local\Diagnostics
O43 - CFD: 2015/08/15 14:00:02 - [] D -- C:\Users\Alizée P\AppData\Local\Disc_Soft_Ltd
O43 - CFD: 2015/08/27 18:15:23 - [0] D -- C:\Users\Alizée P\AppData\Local\ElevatedDiagnostics
O43 - CFD: 2015/07/14 20:25:33 - [0] SHD -- C:\Users\Alizée P\AppData\Local\EmieBrowserModeList
O43 - CFD: 2015/07/14 20:25:32 - [0] SHD -- C:\Users\Alizée P\AppData\Local\EmieSiteList
O43 - CFD: 2015/07/14 20:25:32 - [0] SHD -- C:\Users\Alizée P\AppData\Local\EmieUserList
O43 - CFD: 2015/09/01 18:34:53 - [] D -- C:\Users\Alizée P\AppData\Local\globalUpdate  =>PUP.Optional.GlobalUpdate
O43 - CFD: 2015/09/01 20:56:07 - [] D -- C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077  =>PUP.Optional.CrossRider
O43 - CFD: 2015/07/12 19:02:48 - [] D -- C:\Users\Alizée P\AppData\Local\Google
O43 - CFD: 2015/07/13 01:47:30 - [0] SHD -- C:\Users\Alizée P\AppData\Local\Historique
O43 - CFD: 2015/09/01 18:29:32 - [] D -- C:\Users\Alizée P\AppData\Local\Installer  =>PUP.Optional.InstallPedia
O43 - CFD: 2015/07/12 19:23:10 - [] D -- C:\Users\Alizée P\AppData\Local\Lenovo
O43 - CFD: 2015/09/01 15:50:38 - [] D -- C:\Users\Alizée P\AppData\Local\mbot_fr_014010076  =>PUP.Optional.CrossRider
O43 - CFD: 2015/09/01 20:27:01 - [] D -- C:\Users\Alizée P\AppData\Local\Microsoft
O43 - CFD: 2015/07/13 21:26:09 - [0] D -- C:\Users\Alizée P\AppData\Local\Microsoft Help
O43 - CFD: 2015/07/18 17:38:15 - [] D -- C:\Users\Alizée P\AppData\Local\Mozilla
O43 - CFD: 2015/08/08 21:40:23 - [] D -- C:\Users\Alizée P\AppData\Local\Packages
O43 - CFD: 2015/07/13 01:49:04 - [] D -- C:\Users\Alizée P\AppData\Local\Power2Go8
O43 - CFD: 2015/07/13 22:00:53 - [] D -- C:\Users\Alizée P\AppData\Local\Programs
O43 - CFD: 2015/07/20 01:40:53 - [] D -- C:\Users\Alizée P\AppData\Local\sade
O43 - CFD: 2015/07/15 18:18:02 - [] D -- C:\Users\Alizée P\AppData\Local\Skype
O43 - CFD: 2015/07/20 20:54:32 - [] D -- C:\Users\Alizée P\AppData\Local\Spoon
O43 - CFD: 2015/09/01 21:14:46 - [] D -- C:\Users\Alizée P\AppData\Local\Temp
O43 - CFD: 2015/07/13 01:47:30 - [0] SHD -- C:\Users\Alizée P\AppData\Local\Temporary Internet Files
O43 - CFD: 2015/07/14 15:38:02 - [] D -- C:\Users\Alizée P\AppData\Local\VirtualStore
O43 - CFD: 2015/07/29 23:16:27 - [] D -- C:\Users\Alizée P\AppData\Local\Windows Live
O43 - CFD: 2015/01/20 09:06:27 - [] RD -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 2015/01/20 09:06:27 - [] RD -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 2015/09/01 19:12:25 - [] RD -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 2015/09/01 18:52:39 - [] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0  =>PUP.Optional.BubbleSound
O43 - CFD: 2015/08/09 16:14:45 - [] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
O43 - CFD: 2015/07/13 01:49:01 - [] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Lenovo
O43 - CFD: 2013/08/22 17:36:32 - [] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 2015/08/09 16:14:45 - [] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaCoder x64
O43 - CFD: 2015/07/13 21:27:35 - [0] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre
O43 - CFD: 2015/07/13 18:22:51 - [0] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 2015/08/09 16:14:45 - [] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
O43 - CFD: 2015/09/01 19:12:25 - [] RD -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 2015/01/20 09:06:27 - [] RD -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 2015/07/13 17:18:55 - [] D -- C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

---\\ Derniers fichiers créés dans Windows Prefetcher (58) - 54s
O45 - LFCP:[MD5.8471052051529648894BB8BC59E544B7] 2015/09/01 18:17:30 A -- C:\WINDOWS\Prefetch\3D BUBBLESOUND.EXE-0711FD62.pf  =>PUP.Optional.BubbleSound
O45 - LFCP:[MD5.D2F2E235FEC07A2EBE914523CEC6E217] 2015/09/01 17:14:28 A -- C:\WINDOWS\Prefetch\3DBUBBLESOUND.EXE-E4C60AC2.pf  =>PUP.Optional.BubbleSound
O45 - LFCP:[MD5.4FF67784EF09F419C1C86CA3FE505F78] 2015/09/01 15:07:08 A -- C:\WINDOWS\Prefetch\62793.WINDAPP.MON001.NO.EXE-07860DCB.pf  =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.2DF8FE1A010D413A8981F0B86F3BD398] 2015/09/01 17:12:54 A -- C:\WINDOWS\Prefetch\AIRWEBBAR_SOFT_PARTNER.EXE-AB75E768.pf  =>PUP.Optional.WebBar
O45 - LFCP:[MD5.D62C91AD418FCEAA080F13B121814477] 2015/09/01 17:12:57 A -- C:\WINDOWS\Prefetch\AIRWEBBAR_SOFT_PARTNER.TMP-2E640739.pf  =>PUP.Optional.WebBar
O45 - LFCP:[MD5.65ECF93F54EFFF4CF44EF09A2B267EA8] 2015/09/01 13:32:04 A -- C:\WINDOWS\Prefetch\AMT_OURSURFING.EXE-0A598EC5.pf  =>PUP.Optional.OurSurfing
O45 - LFCP:[MD5.4A254646AED4181131B623779E8F202D] 2015/09/01 18:44:27 A -- C:\WINDOWS\Prefetch\ANYPROTECT.EXE-7064871B.pf  =>PUP.Optional.AnyProtect
O45 - LFCP:[MD5.2AFDEDA1D54E04B3215A36DCACBCE403] 2015/09/01 16:53:12 A -- C:\WINDOWS\Prefetch\ASPACKAGE.EXE-AABAF2EA.pf  =>PUP.Optional.ASPackage
O45 - LFCP:[MD5.D64F28353219A420108A216D40BDAE73] 2015/09/01 13:34:08 A -- C:\WINDOWS\Prefetch\BOBROWSER.EXE-0BB00155.pf  =>PUP.Optional.BoBrowser
O45 - LFCP:[MD5.3C0035EF27538136849FC84DCD71F829] 2015/09/01 15:05:40 A -- C:\WINDOWS\Prefetch\BOBROWSER.EXE-4BAC1A02.pf  =>PUP.Optional.BoBrowser
O45 - LFCP:[MD5.B633D0DDA86C5E4A1B9A5AAB6F203C60] 2015/09/01 13:33:55 A -- C:\WINDOWS\Prefetch\BOXORE.EXE-A21182E0.pf  =>PUP.Optional.Boxore
O45 - LFCP:[MD5.80128A730955AB2A1AA5585DABD7A402] 2015/09/01 17:13:49 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK BSETUP.EXE-41E4CC21.pf  =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.BEC02CE5935060297B908E00A42AC46F] 2015/09/01 15:04:40 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK BSETUP.EXE-4CBD86E4.pf  =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.848674CA88ECA50AA656F7D08062C4CF] 2015/09/01 18:18:09 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-4AD38C0B.pf  =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.11E0F985297073D7B32008CC48D73C4F] 2015/09/01 18:18:19 A -- C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-8B6D460D.pf  =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.30FE342D1AC8478E7DCF7B55675CD5B8] 2015/09/01 19:00:58 A -- C:\WINDOWS\Prefetch\CROSSBROWSE.EXE-3A672F00.pf  =>PUP.Optional.CrossBrowse
O45 - LFCP:[MD5.0A0CB335F1838AFD628EDF844B9F5F0C] 2015/09/01 18:35:26 A -- C:\WINDOWS\Prefetch\DAILYPCCLEAN.EXE-8CEDC54B.pf  =>PUP.Optional.DailyPCClean
O45 - LFCP:[MD5.6A5FC80C528839287C08261D3D54636D] 2015/09/01 18:35:26 A -- C:\WINDOWS\Prefetch\DAILYPCCLEAN.TMP-1BA831DF.pf  =>PUP.Optional.DailyPCClean
O45 - LFCP:[MD5.C88DF63939CF726B697D541FAF9F0451] 2015/09/01 18:30:12 A -- C:\WINDOWS\Prefetch\DCYTDOWNLOADER.EXE-26D14E65.pf  =>PUP.Optional.YTDownloader
O45 - LFCP:[MD5.6B1F3BABC4EFDC389D21A3CF1A3F6823] 2015/07/27 20:01:24 A -- C:\WINDOWS\Prefetch\GAMESDESKTOP-FRINSTALLER.TMP-AC81C558.pf  =>PUP.Optional.GamesDesktop
O45 - LFCP:[MD5.114291724479CEDEB6DC8D710C5DA110] 2015/09/01 19:14:09 A -- C:\WINDOWS\Prefetch\GLOBALUPDATE.EXE-A3071C5B.pf  =>PUP.Optional.GlobalUpdate
O45 - LFCP:[MD5.4EDBF4426637E08ADAC19E6EEA859613] 2015/09/01 18:39:43 A -- C:\WINDOWS\Prefetch\GLOBALUPDATE.EXE-C622A94D.pf  =>PUP.Optional.GlobalUpdate
O45 - LFCP:[MD5.4C42C76C5991DF1C5D8E4320B67D944A] 2015/09/01 19:14:09 A -- C:\WINDOWS\Prefetch\GLOBALUPDATECRASHHANDLER.EXE-DFFDC96B.pf  =>PUP.Optional.GlobalUpdate
O45 - LFCP:[MD5.F2013CD5EDD23FF56FCA5685E3953303] 2015/09/01 18:37:33 A -- C:\WINDOWS\Prefetch\GMSD_FR_005010077.EXE-E1949E3A.pf  =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.85DD467F78E1590513166BADE4F2A7C8] 2015/09/01 15:04:33 A -- C:\WINDOWS\Prefetch\INSTALL_BUBBLEDOCK.EXE-073C7A63.pf  =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.30D34C32DF9919C66693F7C0E31C364B] 2015/09/01 18:30:12 A -- C:\WINDOWS\Prefetch\INS_IWEBAR.EXE-AC558DEE.pf  =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.4BE87A76A82B6880F47040BB98D02C28] 2015/09/01 18:32:16 A -- C:\WINDOWS\Prefetch\INS_SHOPPERPRO.EXE-AB3EE0CE.pf  =>PUP.Optional.ShopperPro
O45 - LFCP:[MD5.3026656DEACE2957D73CBCA414C6B650] 2015/09/01 17:02:20 A -- C:\WINDOWS\Prefetch\LBUBBLE DOCK.EXE-BF2BCF55.pf  =>PUP.Optional.BubbleDock
O45 - LFCP:[MD5.D50487743A42741085487228B9BA8810] 2015/09/01 13:31:54 A -- C:\WINDOWS\Prefetch\MBOT_FR_014010076.EXE-58D315D6.pf  =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.A79CC8E7C2023EEFFE214D610F0974DC] 2015/09/01 17:13:46 A -- C:\WINDOWS\Prefetch\MOVIEDEA.EXE-A437378C.pf  =>PUP.Optional.MovieDea
O45 - LFCP:[MD5.340FEAE691958C427E6F06ADBA096771] 2015/09/01 17:12:37 A -- C:\WINDOWS\Prefetch\PACKAGE_AIRWEBBAR_INSTALLER_M-646668E7.pf  =>PUP.Optional.WebBar
O45 - LFCP:[MD5.C4975EFA13C74AAC25905907C2805B6D] 2015/09/01 17:12:37 A -- C:\WINDOWS\Prefetch\PACKAGE_AIRWEBBAR_INSTALLER_M-DF0900C1.pf  =>PUP.Optional.WebBar
O45 - LFCP:[MD5.E90DF69CC6AADBD268E1DACF83CDDE03] 2015/09/01 18:53:28 A -- C:\WINDOWS\Prefetch\PACKAGE_BUBBLESOUND_INSTALLER-402FD984.pf  =>PUP.Optional.BubbleSound
O45 - LFCP:[MD5.E564C13FF8F9BD173E9AC32CEFF2EBCA] 2015/09/01 17:13:15 A -- C:\WINDOWS\Prefetch\PACKAGE_BUBBLESOUND_INSTALLER-6D03940F.pf  =>PUP.Optional.BubbleSound
O45 - LFCP:[MD5.1C720361E63B87BBBABE0DF455FD4095] 2015/09/01 17:13:15 A -- C:\WINDOWS\Prefetch\PACKAGE_BUBBLESOUND_INSTALLER-C1D3DE50.pf  =>PUP.Optional.BubbleSound
O45 - LFCP:[MD5.C97BE6F0D36783E73C8D134113113513] 2015/09/01 15:12:32 A -- C:\WINDOWS\Prefetch\PCSULAUNCHER.EXE-DBB42F7E.pf  =>PUP.Optional.PCSpeedUp
O45 - LFCP:[MD5.57D431292BFD5DF437EE807DC6F2DE80] 2015/09/01 19:17:36 A -- C:\WINDOWS\Prefetch\PCSUNOTIFIER.EXE-FEAA7AA4.pf  =>PUP.Optional.PCSpeedUp
O45 - LFCP:[MD5.A7065EFE16FE4BEC6B5548CBAFFC621C] 2015/09/01 20:26:43 A -- C:\WINDOWS\Prefetch\PCSUSD.EXE-3ACE13C7.pf  =>PUP.Optional.PCSpeedUp
O45 - LFCP:[MD5.AF657D873B279133C542C73123116280] 2015/09/01 20:26:43 A -- C:\WINDOWS\Prefetch\PCSUSERVICE.EXE-F8C2A551.pf  =>PUP.Optional.PCSpeedUp
O45 - LFCP:[MD5.5C8A3AFA20C833780A48E680F9128529] 2015/09/01 20:26:43 A -- C:\WINDOWS\Prefetch\PCSUUCC.EXE-FD613CAB.pf  =>PUP.Optional.PCSpeedUp
O45 - LFCP:[MD5.A02C909088842DDC537061CD01FAECB2] 2015/09/01 18:50:01 A -- C:\WINDOWS\Prefetch\PREDM.EXE-4BE64711.pf  =>PUP.Optional.Downware
O45 - LFCP:[MD5.F47C51F7E6A318F49429E5B41CAD3888] 2015/09/01 18:46:57 A -- C:\WINDOWS\Prefetch\PREDM.EXE-9CF16E46.pf  =>PUP.Optional.Downware
O45 - LFCP:[MD5.B68FEE9C6B3D59E52B52CCAFBBE0A5B2] 2015/09/01 18:50:01 A -- C:\WINDOWS\Prefetch\PREDM.TMP-681B9AE5.pf  =>PUP.Optional.Downware
O45 - LFCP:[MD5.101C6B5DDC08BDEF2D33F3BB4A3B53BD] 2015/09/01 18:44:59 A -- C:\WINDOWS\Prefetch\PREDM.TMP-C057C79E.pf  =>PUP.Optional.Downware
O45 - LFCP:[MD5.996214D678984C6198B18471C2FC4FD9] 2015/09/01 18:46:57 A -- C:\WINDOWS\Prefetch\PREDM.TMP-D6112406.pf  =>PUP.Optional.Downware
O45 - LFCP:[MD5.DA3FD96EEF3CA93C1E4856CB18CFA04B] 2015/09/01 17:10:36 A -- C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-2A35CA98.pf  =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.06F77340FB7320D93EAD23C4B79AA3EF] 2015/09/01 17:02:20 A -- C:\WINDOWS\Prefetch\SELECTION TOOLS.EXE-AD0DD5E4.pf  =>PUP.Optional.Nosibay
O45 - LFCP:[MD5.C8DCC47C6899AD322D4A99C352FD1ED9] 2015/09/01 19:08:14 A -- C:\WINDOWS\Prefetch\SMARTWEBAPP.EXE-45DB071F.pf  =>PUP.Optional.SmartWebSearch
O45 - LFCP:[MD5.B9EFFD9C91E268B7E530CE83728AD494] 2015/09/01 18:31:54 A -- C:\WINDOWS\Prefetch\SMARTWEBHELPER.EXE-ED9EB332.pf  =>PUP.Optional.SmartWebSearch
O45 - LFCP:[MD5.368CB8B22167B21334A708B87CE35A9D] 2015/09/01 20:27:01 A -- C:\WINDOWS\Prefetch\SPEEDCHECKERSERVICE.EXE-F35A4BE8.pf  =>PUP.Optional.InternetSpeedChecker
O45 - LFCP:[MD5.17888BD5881926D382F7130158644BC3] 2015/09/01 18:38:43 A -- C:\WINDOWS\Prefetch\UMBRELLA224.EXE-9D3AEA48.pf  =>PUP.Optional.IMBooster
O45 - LFCP:[MD5.AA8D3F46A3425EBEACB09C191F313055] 2015/09/01 20:56:07 A -- C:\WINDOWS\Prefetch\UPGMSD_FR_005010077.EXE-C65F298B.pf  =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.6DA308955699ADBD5A1AA685D64054BE] 2015/09/01 13:35:06 A -- C:\WINDOWS\Prefetch\UPMBOT_FR_014010076.EXE-3AE37947.pf  =>PUP.Optional.CrossRider
O45 - LFCP:[MD5.1C940A1BB1091859FBBD01C833903F28] 2015/09/01 18:01:03 A -- C:\WINDOWS\Prefetch\WDSMANPRO.EXE-2932C298.pf  =>PUP.Optional.WdsManPro
O45 - LFCP:[MD5.FE2D44F44A22C673767E3DF1AEC91873] 2015/09/01 18:35:05 A -- C:\WINDOWS\Prefetch\WDSMANPRO.EXE-35BDD9AC.pf  =>PUP.Optional.WdsManPro
O45 - LFCP:[MD5.68C8B0E0FE2A2AA28A918885CA1D98CB] 2015/09/01 18:35:05 A -- C:\WINDOWS\Prefetch\WPM_V20.0.0.2298.EXE-AD657288.pf  =>PUP.Optional.WpManager
O45 - LFCP:[MD5.BD55AE982A0CFF5075591B1AC429BCC6] 2015/09/01 13:32:52 A -- C:\WINDOWS\Prefetch\WPM_V20.0.0.2298.EXE-B1B642D6.pf  =>PUP.Optional.WpManager
O45 - LFCP:[MD5.285DC3390C5F48F5F71E54AF25E8124E] 2015/09/01 18:29:43 A -- C:\WINDOWS\Prefetch\YTDOWNLOADER.EXE-84EA474D.pf  =>PUP.Optional.YTDownloader

---\\ Liste des pilotes du système (66) - 23s
O58 - SDL:2013/08/22 14:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys   [108896] ©
O58 - SDL:2015/01/20 10:49:42 A . (.Lenovo Corporation - ACPI Virtual Power Controller Driver.) -- C:\WINDOWS\System32\drivers\AcpiVpc.sys   [35576]
O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra - PMC-Sierra Storport  Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys   [782176] ©
O58 - SDL:2013/08/22 14:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys   [79200] ©
O58 - SDL:2013/08/22 14:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys   [259424] ©
O58 - SDL:2013/08/22 14:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys   [25952] ©
O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys   [114016] ©
O58 - SDL:2015/09/01 19:21:25 A . (.AVAST Software - avast! HWID.) -- C:\WINDOWS\System32\drivers\aswHwid.sys   [28656] ©
O58 - SDL:2015/09/01 19:21:25 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys   [90968] ©
O58 - SDL:2015/09/01 19:21:25 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr2.sys   [93528] ©
O58 - SDL:2015/09/01 19:21:25 A . (.AVAST Software - avast! Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt.sys   [65224] ©
O58 - SDL:2015/09/01 21:13:30 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswsnx.sys   [1048344] ©
O58 - SDL:2015/09/01 19:21:25 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys   [447944] ©
O58 - SDL:2015/09/01 19:21:25 A . (.AVAST Software - Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStm.sys   [150672] ©
O58 - SDL:2015/09/01 19:21:25 A . (.AVAST Software - avast! VM Monitor.) -- C:\WINDOWS\System32\drivers\aswVmm.sys   [274808] ©
O58 - SDL:2014/07/11 03:21:10 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\drivers\athwbx.sys   [3903488] ©
O58 - SDL:2013/08/13 01:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2  Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys   [17624] ©
O58 - SDL:2013/10/29 23:01:34 A . (.Qualcomm Atheros - Qualcomm Atheros A2DP driver.) -- C:\WINDOWS\System32\drivers\btath_a2dp.sys   [338120] ©
O58 - SDL:2013/10/29 23:01:34 A . (.Qualcomm Atheros - Qualcomm Atheros Bluetooth AVDT driver.) -- C:\WINDOWS\System32\drivers\btath_avdt.sys   [116424] ©
O58 - SDL:2013/10/29 23:01:34 A . (.Qualcomm Atheros - Qualcomm Atheros BUS driver.) -- C:\WINDOWS\System32\drivers\btath_bus.sys   [34384] ©
O58 - SDL:2013/10/29 23:01:34 A . (.Qualcomm Atheros - Qualcomm Atheros FILTER driver.) -- C:\WINDOWS\System32\drivers\btath_flt.sys   [89800] ©
O58 - SDL:2013/10/29 23:01:34 A . (.Qualcomm Atheros - Qualcomm Atheros HCRP driver.) -- C:\WINDOWS\System32\drivers\btath_hcrp.sys   [179432] ©
O58 - SDL:2013/10/29 23:01:34 A . (.Qualcomm Atheros - Qualcomm Atheros FILTER driver.) -- C:\WINDOWS\System32\drivers\btath_lwflt.sys   [77464] ©
O58 - SDL:2013/10/29 23:01:34 A . (.Qualcomm Atheros - Qualcomm Atheros AVRCP driver.) -- C:\WINDOWS\System32\drivers\btath_rcp.sys   [137928] ©
O58 - SDL:2013/10/29 23:01:34 A . (.Qualcomm Atheros - Qualcomm Atheros BtFilter Driver.) -- C:\WINDOWS\System32\drivers\btfilter.sys   [596168] ©
O58 - SDL:2013/08/22 14:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys   [531296] ©
O58 - SDL:2014/01/27 10:23:56 A . (.Conexant Systems Inc. - 64-bit High Definition Audio Function Drive.) -- C:\WINDOWS\System32\drivers\CHDRT64.sys   [1474240] ©
O58 - SDL:2013/11/12 15:25:22 A . (.CyberLink - It is a virtual device driver which could c.) -- C:\WINDOWS\System32\drivers\CLVirtualDrive.sys   [91912] ©
O58 - SDL:2015/08/14 18:57:16 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual SCSI Bus Driver.) -- C:\WINDOWS\System32\drivers\dtlitescsibus.sys   [30264] ©
O58 - SDL:2013/06/18 16:45:26 A . (.Intel Corporation - Intel(R) Gigabit Adapter NDIS 6.x driver.) -- C:\WINDOWS\System32\drivers\e1i63x64.sys   [460288] ©
O58 - SDL:2013/08/22 14:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys   [3357024] ©
O58 - SDL:2013/08/22 14:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys   [64352] ©
O58 - SDL:2013/07/30 20:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys   [24568] ©
O58 - SDL:2013/07/25 21:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys   [99320] ©
O58 - SDL:2013/08/10 02:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys   [651248] ©
O58 - SDL:2013/08/22 14:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys   [412000] ©
O58 - SDL:2014/03/07 18:18:24 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys   [3729920] ©
O58 - SDL:2014/03/07 18:26:44 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys   [450520] ©
O58 - SDL:2014/03/01 22:32:31 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\intelaud.sys   [38296] ©
O58 - SDL:2014/03/01 22:32:31 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\WINDOWS\System32\drivers\iwdbus.sys   [27032] ©
O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys   [109408] ©
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2.sys   [93536] ©
O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3.sys   [81760] ©
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys   [82784] ©
O58 - SDL:2013/10/10 02:44:38 A . (.Intel Corporation - MBI driver.) -- C:\WINDOWS\System32\drivers\MBI.sys   [29464] ©
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys   [56672] ©
O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys   [575840] ©
O58 - SDL:2013/08/22 14:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys   [63840] ©
O58 - SDL:2013/06/18 16:45:43 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\WINDOWS\System32\drivers\NETwew02.sys   [4649440] ©
O58 - SDL:2013/08/22 14:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys   [150368] ©
O58 - SDL:2013/08/22 14:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys   [168288] ©
O58 - SDL:2013/08/15 08:28:42 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\WINDOWS\System32\drivers\Rt630x64.sys   [830680] ©
O58 - SDL:2014/02/27 13:29:22 A . (.Realtek Semiconductor Corp. - Realtek UVC Driver for XP/Vista/Win7/Win8.) -- C:\WINDOWS\System32\drivers\rtsuvc.sys   [9109720] ©
O58 - SDL:2013/09/24 11:23:30 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\WINDOWS\System32\drivers\RtsUVStor.sys   [329944] ©
O58 - SDL:2013/08/22 17:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys   [23040] ©
O58 - SDL:2013/08/22 14:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys   [44896] ©
O58 - SDL:2013/08/22 14:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys   [81760] ©
O58 - SDL:2013/12/24 03:14:44 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys   [34544] ©
O58 - SDL:2013/08/22 14:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys   [31072] ©
O58 - SDL:2013/12/24 03:14:50 A . (.Synaptics Incorporated - Synaptics Touchpad 64-bit Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys   [532720] ©
O58 - SDL:2014/01/15 15:21:46 A . (.Intel Corporation - Intel(R) Trusted Execution Engine Interface.) -- C:\WINDOWS\System32\drivers\TXEIx64.sys   [88592] ©
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\viaide.sys   [19808] ©
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys   [168800] ©
O58 - SDL:2013/08/22 14:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS   [305504] ©
O58 - SDL:2012/06/13 18:10:32 A . (."CyberLink - Cyberlink Virtual Disk Driver.) -- C:\WINDOWS\System32\drivers\wsvd.sys   [102376] ©
O58 - SDL:2014/07/11 03:21:10 N . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\WINDOWS\System32\athwbx.sys   [3903488] ©

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (11) - 16s
O61 - LFC: 2015/08/28 14:06:42 A . (.Scott Brogden.) -- C:\Users\Alizée P\Downloads\ditto_3-20-74-0_fr_17799.exe   [10405291]
O61 - LFC: 2015/09/01 18:52:47 A . (.Client Connect LTD.) -- C:\Users\Alizée P\AppData\Local\Microsoft\Windows\INetCache\IE\NCW6ZQF2\Setup[1].exe   [8785488]
O61 - LFC: 2015/09/01 18:52:01 A . (.ClientConnect.) -- C:\Users\Alizée P\AppData\Local\Microsoft\Windows\INetCache\IE\NCW6ZQF2\Stub[1].exe   [177760]
O61 - LFC: 2015/09/01 20:57:01 A . (.EVXHJ.) -- C:\Users\Alizée P\AppData\Local\Microsoft\Windows\INetCache\IE\N1Y8HJQW\Reimage[1].exe   [717824]  =>PUP.Optional.ReImageRepair
O61 - LFC: 2015/09/01 14:56:07 A . (..) -- C:\Users\Alizée P\AppData\Local\mbot_fr_014010076\Download\myoffergroup_fr.exe   [1146880]  =>PUP.Optional.CrossRider
O61 - LFC: 2015/09/01 18:29:18 A . (.Copyright (C) 2014.) -- C:\Users\Alizée P\AppData\Local\Installer\Install_8126\DCYTDownloader.exe   [1446912]  =>PUP.Optional.YTDownloader
O61 - LFC: 2015/09/01 21:09:53 A . (..) -- C:\Users\Alizée P\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin   [674082]
O61 - LFC: 2015/08/28 15:16:32 A . (..) -- C:\Users\Alizée P\AppData\Local\Google\Chrome\User Data\EVWhitelist\7\_platform_specific\all\ev_hashes_whitelist.bin   [674082]
O61 - LFC: 2015/09/01 10:53:37 A . (..) -- C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077\upgmsd_fr_005010077.exe   [3311248]  =>PUP.Optional.CrossRider
O61 - LFC: 2015/09/01 17:08:34 A . (..) -- C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077\Download\myoffergroup_fr.exe   [5165224]  =>PUP.Optional.CrossRider
O61 - LFC: 2015/09/01 19:15:00 A . (..) -- C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077\Download\oasis.exe   [385181]  =>PUP.Optional.CrossRider

---\\ Associations Shell Spawning (10) - 1s
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (16) - 0s
O68 - StartMenuInternet: <Crossbrowse> <Crossbrowse>[HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe   =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (...) -- firefox.exe 
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.mystartsearch.com/ ©
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (...) -- iexplore.exe 
O68 - StartMenuInternet: <Crossbrowse> <Crossbrowse>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (.not file.)  =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: <Crossbrowse> <Crossbrowse>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (.not file.)  =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: <Crossbrowse> <Crossbrowse>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe (.not file.)  =>PUP.Optional.CrossBrowse
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ©
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (27) - 45s
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("extensions.a6a1a03975fde4c8690f6b883c36bc17d88519bfe704d8cae3851239com74253.74253.internaldb.monetization_plugin_bundle[...]  =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("extensions.a6a1a03975fde4c8690f6b883c36bc17d88519bfe704d8cae3851239com74253.74253.internaldb.monetization_plugin_notBun[...]  =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("extensions.a6a1a03975fde4c8690f6b883c36bc17d88519bfe704d8cae3851239com74253.74253.internaldb.monetization_plugin_regBun[...]  =>PUP.Optional.Monetization
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("extensions.a6a1a03975fde4c8690f6b883c36bc17d88519bfe704d8cae3851239com74253.74253.name", "MyBrowser 1.0.2V01.09");  =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("extensions.a6a1a03975fde4c8690f6b883c36bc17d88519bfe704d8cae3851239com74253.74253.publisher", "MyBrowser 1.0.2V01.09");  =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("extensions.a9321b2762c2e4c5fbd04b8118e512707c0c8a2d632754caca0b252e936311db9com32850.32850.name", "Object Browser");  =>PUP.Optional.ObjectBrowser
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("extensions.crossrider.bic", "14f89d117b235e5c5dff8c97f89d1006");  =>PUP.Optional.CrossRider
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("extensions.enabledAddons", "minibar%40go.im:9.30.5.1,9321b276-2c2e-4c5f-bd04-b8118e512707%40c0c8a2d6-3275-4cac-a0b2-52e[...]  =>PUP.Optional.Minibar
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.BirthDate", "1441125198");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.LayoutId", "1");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent._oaZGabJJ8Q_", "{\"cpt\":0,\"cpr\":0,\"s\":0,\"es\":1}");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.adapters", "{\"start.iminent.com\":{\"CountryCode\":\"FR\",\"NoAds\":false,\"Status\":1,\"AdapterKey\":\"iminen[...]  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.cifs", "0");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.enableToolbar", "false");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.enabledAds", "obsolete");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.externalScripts", "{\"value\":[{\"addonUid\":\"10bb6277-6b2b-413e-8d82-ad9398543254\",\"name\":\"Dealply\",\"ad[...]  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.newtabredirect", "true");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.registerToolbarEvent102", "1441126902699");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.searchindex", "1");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.version", "9.30.5.1");  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("iminent.versioning", "{\"CurrentVersion\":\"9.30.5.1\",\"InstallEventCTime\":1441134463930,\"InstallEvent\":\"True\"}")[...]  =>PUP.Optional.IMBooster
O69 - SBI: prefs.js [Alizée P - ynlzrll5.default] user_pref("{0420BEC0-F2C1-4578-8F19-471B9E5C63A5}.ScriptData_product_name", "shopperz240820151333");  =>PUP.Optional.Shopperz
O69 - SBI: SearchScopes [HKCU] {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} - (Trovi) - http://www.trovi.com/  =>PUP.Optional.Trovigo
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {3C100595-7FAC-4898-8388-D1A3824ED3E7} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {460C3D19-B3D4-4964-A550-77D263B0CCCB} - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {82EECC30-A59E-4F74-B976-FE40C92B9763} - (Bing.com) - http://www.trovi.com/  =>PUP.Optional.Trovigo

---\\ Enumère les services démarrés par Svchost (34) - 3s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\WINDOWS\System32\aelupsvc.dll   [214528] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll   [156160] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll   [156160] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll   [329216] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll   [1360896] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll   [1084416] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll   [926208] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll   [31744] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll   [110080] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll   [151040] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll   [110592] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll   [1265152] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll   [230400] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\WINDOWS\system32\mmcss.dll   [71168] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll   [135168] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll   [227328] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll   [339968] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll   [84992] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll   [101376] ©
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll   [348672] ©
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll   [522240] ©
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll   [1639424] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll   [59392] ©
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll   [206848] ©
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll   [166400] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll   [102912] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\WINDOWS\System32\rasmans.dll   [542208] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [226816] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll   [73728] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll   [452608] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll   [313344] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll   [3704320] ©
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll   [933376] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [640000] ©

---\\ Liste des exceptions du parefeu Windows (8) - 7s
O87 - FAEL: "{7527C641-8DF2-404E-A942-9B773E1799F3}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoPlus.exe (.not file.)
O87 - FAEL: "{28F6D47E-6D1A-486B-86E1-0EB23F279BBE}" [In-None-P17-TRUE] .(...) -- C:\Users\Alizée P\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (.not file.)
O87 - FAEL: "{654922AC-B862-410B-B4F8-0792BB80CE17}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Sim City\SimCity.exe (.not file.)
O87 - FAEL: "{E95F03E0-9555-45F3-A99B-D82DB81F8728}" [In-None-P17-TRUE] .(...) -- C:\Program Files\Sim City\SimCity.exe (.not file.)
O87 - FAEL: "{7146C57A-E7DA-4DBD-B7CC-051409E26618}" [In-None-P6-TRUE] .(...) -- F:\Crack\SimCity.exe (.not file.)
O87 - FAEL: "{79744FE9-72B7-486D-8E9D-D9DE33EC66CA}" [In-None-P17-TRUE] .(...) -- F:\Crack\SimCity.exe (.not file.)
O87 - FAEL: "{136FBD1A-7E73-4A3A-B3A5-475ADE7F24C1}" [In-None-P6-TRUE] .(...) -- C:\Program Files\SimCityUserData\SimCity.exe (.not file.)
O87 - FAEL: "{6B607CB6-DC7B-407F-B9EA-63DD97775E69}" [In-None-P17-TRUE] .(...) -- C:\Program Files\SimCityUserData\SimCity.exe (.not file.)

---\\ Enumère les codes produits des logiciels (1) - 3s
O90 - PUC: "93BAD29AC2E44034A96BCB446EB8552E" . (.globalupdate Helper.)  =>PUP.Optional.GlobalUpdate

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (32) - 89s

SR - Auto   [2013/10/29 23:26:38] [  317568]  AtherosSvc (AtherosSvc) . (.Windows (R) Win 7 DDK provider.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe ©
SR - Auto   [2015/09/01 19:21:23] [  146600]  Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe ©
SR - Auto   [2015/08/26 11:57:04] [  112560]   (BrsHelper) . (...) - C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe  =>PUP.Optional.YTDownloader
SR - Auto   [2014/07/09 18:19:20] [  592880]  CCSDK (CCSDK) . (...) - C:\Program Files (x86)\Lenovo\CCSDK\CCSDK.exe
SS - Demand [2014/03/12 03:16:06] [  279024]  Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe ©
SR - Auto   [2013/07/25 08:39:26] [  206552]  @C:\WINDOWS\system32\CxAudMsg64.exe,-100 (CxAudMsg) . (.Conexant Systems Inc..) - C:\WINDOWS\system32\CxAudMsg64.exe ©
SR - Auto   [2015/08/21 10:41:32] [  378152]  GlobalUpdater (GlobalUpdater) . (.SIEN S.A..) - C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe  =>PUP.Optional.GlobalUpdate
SS - Auto   [2015/07/14 20:29:20] [  107848]  Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2015/07/14 20:29:20] [  107848]  Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ©
SS - Demand [2012/04/24 15:37:56] [  169752]  Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe ©
SR - Auto   [2014/03/12 03:16:02] [  282096]  Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation.) - C:\WINDOWS\system32\igfxCUIService.exe ©
SR - Auto   [2015/08/21 10:41:32] [ 5325464]  IMService (IMService) . (.Iminent.) - C:\Program Files (x86)\Common Files\Umbrella\Umbrella224.exe  =>PUP.Optional.IMBooster
SR - Auto   [2013/07/01 21:08:32] [  733696]  Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe ©
SS - Demand [2013/07/01 21:08:48] [  822232]  Intel(R) Capability Licensing Service TCP IP Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe ©
SS - Demand [2014/09/22 17:36:36] [  561408]  Lenovo EasyPlus Hotspot (Lenovo EasyPlus Hotspot) . (.Lenovo.) - C:\Program Files (x86)\Common Files\LENOVO\easyplussdk\bin\EPHotspot64.exe ©
SR - Auto   [2015/03/06 20:53:44] [  584632]  Lenovo System Agent Service (Lenovo System Agent Service) . (.LENOVO INCORPORATED..) - C:\Program Files\Lenovo\iMController\SystemAgentService.exe
SR - Auto   [2015/01/20 10:48:46] [  198192]  Lenovo WiFiHotspot Service (LenovoWiFiHotspotSvr) . (.Lenovo(beijing) Limited.) - C:\Windows\System32\LenovoWiFiHotspotSvr.exe ©
SS - Demand [2014/09/03 19:08:16] [  272776]  LSCWinService (LSCWinService) . (.Copyright ©  2013.) - C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe
SR - Auto   [2014/02/17 22:47:34] [   38896]  LUService (LUService) . (.Lenovo(beijing) Limited.) - C:\Program Files (x86)\Lenovo\Lenovo Updates\LUService.exe ©
SR - Auto   [2014/08/01 12:02:44] [ 1844024]  Maxthon Core Update Service (MaxthonUpdateSvc) . (.Maxthon.) - C:\Program Files (x86)\Maxthon\Modules\Service\Update\MaxthonUpdateSvc.exe ©
SR - Auto   [2015/09/01 11:23:40] [ 1329664]  Pre-formatted Flat Panel Monitor (misetufy) . (...) - C:\Program Files (x86)\4B3388FF-1441112486-11E4-A961-68F7285F0905\knssC8E1.tmpfs  =>PUP.Optional.CrossRider
SS - Demand [2015/07/01 04:30:36] [  148136]  Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe ©
SR - Auto   [2013/12/12 19:57:44] [  230920]  NitroPDFDriverCreatorReadSpool9 (NitroDriverReadSpool9) . (.Nitro PDF Software.) - C:\Program Files\Common Files\Nitro\Pro\9.0\NitroPDFDriverService9x64.exe ©
SR - Auto   [2013/12/12 19:57:54] [   69640]  Nalpeiron Licensing Service (nlsX86cc) . (.Nalpeiron Ltd..) - C:\Windows\SysWOW64\NLSSRV32.EXE ©
SR - Demand [2015/08/24 12:35:56] [ 2044280]  Ooteeotoor (Ooteeotoor) . (...) - C:\Program Files\shopperz240820151333\Ooteeotoor.exe  =>PUP.Optional.Shopperz
SR - Auto   [2015/01/20 10:42:10] [  288240]  Lenovo PhoneCompanionPusher Service (PhoneCompanionPusher) . (.Lenovo.) - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionPusher.exe ©
SS - Demand [2015/01/20 10:42:10] [  305136]  Lenovo PhoneCompanionVap Service (PhoneCompanionVap) . (.Lenovo.) - C:\Program Files\Lenovo PhoneCompanion\PhoneCompanionVap.exe ©
SR - Auto   [2012/04/24 12:43:50] [  390632]  Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.Copyright 2004.) - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
SS - Auto   [2015/06/25 20:09:34] [  327296]  Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe ©
SR - Auto   [2015/01/20 10:42:48] [   67856]  VeriFaceSrv (VeriFaceSrv) . (...) - C:\Program Files (x86)\Lenovo\Lenovo VeriFace Pro\VfConnectorService.exe
SR - Auto   [2013/10/29 22:59:36] [  323584]  ZAtheros Bt and Wlan Coex Agent (ZAtheros Bt and Wlan Coex Agent) . (.Atheros.) - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe ©

---\\ Recherche de clés de registre Tracing (2) - 3s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedCheckerService_RASAPI32  =>PUP.Optional.InternetSpeedChecker
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedCheckerService_RASMANCS  =>PUP.Optional.InternetSpeedChecker

---\\ Scan Additionnel (165) - 0s
C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe  =>PUP.Optional.SearchDonkey
C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe  =>PUP.Optional.IMGUpdater
C:\Program Files (x86)\Common Files\Umbrella\Umbrella224.exe  =>PUP.Optional.IMBooster
C:\Program Files (x86)\MyBrowser 1.0.2V01.09\df57f450-e39f-4e2d-8b26-91826c57140a-1-6.exe  =>PUP.Optional.CrossRider
C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077\upgmsd_fr_005010077.exe  =>PUP.Optional.CrossRider
C:\Program Files (x86)\4B3388FF-1441112486-11E4-A961-68F7285F0905\knssC8E1.tmpfs  =>PUP.Optional.CrossRider
C:\Program Files (x86)\MyBrowser 1.0.2V01.09\df57f450-e39f-4e2d-8b26-91826c57140a-64.exe  =>PUP.Optional.CrossRider
C:\Program Files\shopperz240820151333\Ooteeotoor.exe  =>PUP.Optional.Shopperz
C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\extensions\minibar@go.im.xpi  =>PUP.Optional.Minibar
C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\searchplugins\StartWeb.xml  =>PUP.Optional.IMBooster
C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\searchplugins\trovi.xml  =>PUP.Optional.TroviCom
C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\mystartsearch.xml  =>PUP.Optional.StartSearch
C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\oursurfing.xml  =>PUP.Optional.OurSurfing
C:\Users\Alizée P\AppData\Roaming\Mozilla\Firefox\Profiles\ynlzrll5.default\extensions\9321b276-2c2e-4c5f-bd04-b8118e512707@c0c8a2d6-3275-4cac-a0b2-52e936311db9.com  =>PUP.Optional.CrossRider
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}  =>PUP.Optional.IMBooster
C:\WINDOWS\system32\Ooteeotoor64.dll  =>Hijacker.Winsock
HKLM\SYSTEM\CurrentControlSet\Services\BrsHelper  =>PUP.Optional.YTDownloader
C:\Program Files (x86)\YTDownloader\BrowserHelperSrv.exe  =>PUP.Optional.YTDownloader
HKLM\SYSTEM\CurrentControlSet\Services\CltMngSvc  =>PUP.Optional.SearchProtect
HKLM\SYSTEM\CurrentControlSet\Services\globalUpdate  =>PUP.Optional.GlobalUpdate
HKLM\SYSTEM\CurrentControlSet\Services\GlobalUpdater  =>PUP.Optional.GlobalUpdate
C:\Program Files (x86)\Common Files\IMGUpdater\IMGUpdater.exe  =>PUP.Optional.GlobalUpdate
HKLM\SYSTEM\CurrentControlSet\Services\IMService  =>PUP.Optional.IMBooster
HKLM\SYSTEM\CurrentControlSet\Services\misetufy  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}  =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\379edbbb-dc68-4be3-87aa-34660f4c0bb2  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\43e0fe39-4400-4ecb-9420-230a77957f5d  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\79c6fdef-7b00-413e-a3f3-95c2a8916018  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\ArenaHD  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Boxore  =>PUP.Optional.Boxore
HKLM\SOFTWARE\Wow6432Node\Clara  =>PUP.Optional.SupTab
HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP  =>PUP.Optional.GamesDesktop
HKLM\SOFTWARE\Wow6432Node\GlobalUpdate  =>PUP.Optional.GlobalUpdate
HKLM\SOFTWARE\Wow6432Node\HighDefAction  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\IMGUpdater  =>PUP.Optional.IMGUpdater
HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions  =>PUP.Optional.BrowserExtensions
HKLM\SOFTWARE\Wow6432Node\MYBESTOFFERSTODAY  =>PUP.Optional.MyBestOffersToday
HKLM\SOFTWARE\Wow6432Node\MyBrowser 1.0.2V01.09-nv  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\MyBrowser 1.0.2V01.09-nv-ie  =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\mystartsearchSoftware  =>PUP.Optional.StartSearch
HKLM\SOFTWARE\Wow6432Node\Object Browser-nv  =>PUP.Optional.ObjectBrowser
HKLM\SOFTWARE\Wow6432Node\Object Browser-nv-ie  =>PUP.Optional.ObjectBrowser
HKLM\SOFTWARE\Wow6432Node\oursurfingSoftware  =>PUP.Optional.OurSurfing
HKLM\SOFTWARE\Wow6432Node\SearchProtect  =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\SPPDCOM  =>PUP.Optional.PCSpeedUp
HKLM\SOFTWARE\Wow6432Node\TermCoach_1.10.0.21  =>PUP.Optional.TermCoach
HKLM\SOFTWARE\Wow6432Node\Tutorials  =>PUP.Optional.AgenceExclusive
HKLM\SOFTWARE\Wow6432Node\Umbrella  =>PUP.Optional.IMBooster
HKLM\SOFTWARE\Wow6432Node\WdsManPro  =>PUP.Optional.WdsManPro
HKLM\SOFTWARE\Wow6432Node\YorkNewCin  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\ArenaHD  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Boxore  =>PUP.Optional.Boxore
HKCU\SOFTWARE\CrossBrowser  =>PUP.Optional.CrossBrowser
HKCU\SOFTWARE\DailyPcClean  =>PUP.Optional.DailyPCClean
HKCU\SOFTWARE\gamesdesktop  =>PUP.Optional.GamesDesktop
HKCU\SOFTWARE\globalUpdate  =>PUP.Optional.GlobalUpdate
HKCU\SOFTWARE\HighDefAction  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Iminent  =>PUP.Optional.IMBooster
HKCU\SOFTWARE\InstalledBrowserExtensions  =>PUP.Optional.BrowserExtensions
HKCU\SOFTWARE\iWebar-nv-ie  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\MyBrowser 1.0.2V01.09  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\MyBrowser 1.0.2V01.09-nv  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\MyBrowser 1.0.2V01.09-nv-ie  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Nosibay  =>PUP.Optional.SPointer
HKCU\SOFTWARE\Object Browser-nv  =>PUP.Optional.ObjectBrowser
HKCU\SOFTWARE\Object Browser-nv-ie  =>PUP.Optional.ObjectBrowser
HKCU\SOFTWARE\Store  =>PUP.Optional.Generic
HKCU\SOFTWARE\Tutorials  =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\TutoTag  =>PUP.Optional.AgenceExclusive
HKCU\SOFTWARE\YorkNewCin  =>PUP.Optional.CrossRider
HKCU\SOFTWARE\AppDataLow\Software\Crossrider  =>PUP.Optional.CrossRider
C:\Program Files (x86)\4B3388FF-1441112486-11E4-A961-68F7285F0905  =>PUP.Optional.CrossRider
C:\Program Files (x86)\MyBrowser 1.0.2V01.09  =>PUP.Optional.CrossRider
C:\Program Files (x86)\Object Browser  =>PUP.Optional.ObjectBrowser
C:\Program Files (x86)\SFK  =>PUP.Optional.MyWebSearch
C:\Program Files (x86)\YTDownloader  =>PUP.Optional.YTDownloader
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP  =>PUP.Optional.GamesDesktop
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MYBESTOFFERSTODAY  =>PUP.Optional.MyBestOffersToday
C:\ProgramData\cWdsManProc  =>PUP.Optional.WdsManPro
C:\ProgramData\MovieDeaConfig  =>PUP.Optional.MovieDea
C:\ProgramData\QWdsManProQ  =>PUP.Optional.WdsManPro
C:\Program Files (x86)\Common Files\IMGUpdater  =>PUP.Optional.IMGUpdater
C:\Program Files (x86)\Common Files\Umbrella  =>PUP.Optional.IMBooster
C:\Users\Alizée P\AppData\Roaming\AnyProtectEx  =>PUP.Optional.AnyProtect
C:\Users\Alizée P\AppData\Roaming\mystartsearch  =>PUP.Optional.StartSearch
C:\Users\Alizée P\AppData\Roaming\Nosibay  =>PUP.Optional.BubbleDock
C:\Users\Alizée P\AppData\Roaming\Store  =>PUP.Optional.Nosibay
C:\Users\Alizée P\AppData\Local\BoBrowser  =>PUP.Optional.BoBrowser
C:\Users\Alizée P\AppData\Local\Boxore  =>PUP.Optional.Boxore
C:\Users\Alizée P\AppData\Local\BrowserHelper  =>PUP.Optional.BrowserHelper
C:\Users\Alizée P\AppData\Local\CrashRpt  =>.Superfluous.CrashReports
C:\Users\Alizée P\AppData\Local\Crossbrowse  =>PUP.Optional.CrossBrowse
C:\Users\Alizée P\AppData\Local\globalUpdate  =>PUP.Optional.GlobalUpdate
C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077  =>PUP.Optional.CrossRider
C:\Users\Alizée P\AppData\Local\Installer  =>PUP.Optional.InstallPedia
C:\Users\Alizée P\AppData\Local\mbot_fr_014010076  =>PUP.Optional.CrossRider
C:\Users\Alizée P\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BubbleSound 1.0  =>PUP.Optional.BubbleSound
C:\WINDOWS\Prefetch\3D BUBBLESOUND.EXE-0711FD62.pf  =>PUP.Optional.BubbleSound
C:\WINDOWS\Prefetch\3DBUBBLESOUND.EXE-E4C60AC2.pf  =>PUP.Optional.BubbleSound
C:\WINDOWS\Prefetch\62793.WINDAPP.MON001.NO.EXE-07860DCB.pf  =>PUP.Optional.Nosibay
C:\WINDOWS\Prefetch\AIRWEBBAR_SOFT_PARTNER.EXE-AB75E768.pf  =>PUP.Optional.WebBar
C:\WINDOWS\Prefetch\AIRWEBBAR_SOFT_PARTNER.TMP-2E640739.pf  =>PUP.Optional.WebBar
C:\WINDOWS\Prefetch\AMT_OURSURFING.EXE-0A598EC5.pf  =>PUP.Optional.OurSurfing
C:\WINDOWS\Prefetch\ANYPROTECT.EXE-7064871B.pf  =>PUP.Optional.AnyProtect
C:\WINDOWS\Prefetch\ASPACKAGE.EXE-AABAF2EA.pf  =>PUP.Optional.ASPackage
C:\WINDOWS\Prefetch\BOBROWSER.EXE-0BB00155.pf  =>PUP.Optional.BoBrowser
C:\WINDOWS\Prefetch\BOBROWSER.EXE-4BAC1A02.pf  =>PUP.Optional.BoBrowser
C:\WINDOWS\Prefetch\BOXORE.EXE-A21182E0.pf  =>PUP.Optional.Boxore
C:\WINDOWS\Prefetch\BUBBLE DOCK BSETUP.EXE-41E4CC21.pf  =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\BUBBLE DOCK BSETUP.EXE-4CBD86E4.pf  =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-4AD38C0B.pf  =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\BUBBLE DOCK UNINSTALL.EXE-8B6D460D.pf  =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\CROSSBROWSE.EXE-3A672F00.pf  =>PUP.Optional.CrossBrowse
C:\WINDOWS\Prefetch\DAILYPCCLEAN.EXE-8CEDC54B.pf  =>PUP.Optional.DailyPCClean
C:\WINDOWS\Prefetch\DAILYPCCLEAN.TMP-1BA831DF.pf  =>PUP.Optional.DailyPCClean
C:\WINDOWS\Prefetch\DCYTDOWNLOADER.EXE-26D14E65.pf  =>PUP.Optional.YTDownloader
C:\WINDOWS\Prefetch\GAMESDESKTOP-FRINSTALLER.TMP-AC81C558.pf  =>PUP.Optional.GamesDesktop
C:\WINDOWS\Prefetch\GLOBALUPDATE.EXE-A3071C5B.pf  =>PUP.Optional.GlobalUpdate
C:\WINDOWS\Prefetch\GLOBALUPDATE.EXE-C622A94D.pf  =>PUP.Optional.GlobalUpdate
C:\WINDOWS\Prefetch\GLOBALUPDATECRASHHANDLER.EXE-DFFDC96B.pf  =>PUP.Optional.GlobalUpdate
C:\WINDOWS\Prefetch\GMSD_FR_005010077.EXE-E1949E3A.pf  =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\INSTALL_BUBBLEDOCK.EXE-073C7A63.pf  =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\INS_IWEBAR.EXE-AC558DEE.pf  =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\INS_SHOPPERPRO.EXE-AB3EE0CE.pf  =>PUP.Optional.ShopperPro
C:\WINDOWS\Prefetch\LBUBBLE DOCK.EXE-BF2BCF55.pf  =>PUP.Optional.BubbleDock
C:\WINDOWS\Prefetch\MBOT_FR_014010076.EXE-58D315D6.pf  =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\MOVIEDEA.EXE-A437378C.pf  =>PUP.Optional.MovieDea
C:\WINDOWS\Prefetch\PACKAGE_AIRWEBBAR_INSTALLER_M-646668E7.pf  =>PUP.Optional.WebBar
C:\WINDOWS\Prefetch\PACKAGE_AIRWEBBAR_INSTALLER_M-DF0900C1.pf  =>PUP.Optional.WebBar
C:\WINDOWS\Prefetch\PACKAGE_BUBBLESOUND_INSTALLER-402FD984.pf  =>PUP.Optional.BubbleSound
C:\WINDOWS\Prefetch\PACKAGE_BUBBLESOUND_INSTALLER-6D03940F.pf  =>PUP.Optional.BubbleSound
C:\WINDOWS\Prefetch\PACKAGE_BUBBLESOUND_INSTALLER-C1D3DE50.pf  =>PUP.Optional.BubbleSound
C:\WINDOWS\Prefetch\PCSULAUNCHER.EXE-DBB42F7E.pf  =>PUP.Optional.PCSpeedUp
C:\WINDOWS\Prefetch\PCSUNOTIFIER.EXE-FEAA7AA4.pf  =>PUP.Optional.PCSpeedUp
C:\WINDOWS\Prefetch\PCSUSD.EXE-3ACE13C7.pf  =>PUP.Optional.PCSpeedUp
C:\WINDOWS\Prefetch\PCSUSERVICE.EXE-F8C2A551.pf  =>PUP.Optional.PCSpeedUp
C:\WINDOWS\Prefetch\PCSUUCC.EXE-FD613CAB.pf  =>PUP.Optional.PCSpeedUp
C:\WINDOWS\Prefetch\PREDM.EXE-4BE64711.pf  =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\PREDM.EXE-9CF16E46.pf  =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\PREDM.TMP-681B9AE5.pf  =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\PREDM.TMP-C057C79E.pf  =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\PREDM.TMP-D6112406.pf  =>PUP.Optional.Downware
C:\WINDOWS\Prefetch\SELECTION TOOLS UNINSTALL.EXE-2A35CA98.pf  =>PUP.Optional.Nosibay
C:\WINDOWS\Prefetch\SELECTION TOOLS.EXE-AD0DD5E4.pf  =>PUP.Optional.Nosibay
C:\WINDOWS\Prefetch\SMARTWEBAPP.EXE-45DB071F.pf  =>PUP.Optional.SmartWebSearch
C:\WINDOWS\Prefetch\SMARTWEBHELPER.EXE-ED9EB332.pf  =>PUP.Optional.SmartWebSearch
C:\WINDOWS\Prefetch\SPEEDCHECKERSERVICE.EXE-F35A4BE8.pf  =>PUP.Optional.InternetSpeedChecker
C:\WINDOWS\Prefetch\UMBRELLA224.EXE-9D3AEA48.pf  =>PUP.Optional.IMBooster
C:\WINDOWS\Prefetch\UPGMSD_FR_005010077.EXE-C65F298B.pf  =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\UPMBOT_FR_014010076.EXE-3AE37947.pf  =>PUP.Optional.CrossRider
C:\WINDOWS\Prefetch\WDSMANPRO.EXE-2932C298.pf  =>PUP.Optional.WdsManPro
C:\WINDOWS\Prefetch\WDSMANPRO.EXE-35BDD9AC.pf  =>PUP.Optional.WdsManPro
C:\WINDOWS\Prefetch\WPM_V20.0.0.2298.EXE-AD657288.pf  =>PUP.Optional.WpManager
C:\WINDOWS\Prefetch\WPM_V20.0.0.2298.EXE-B1B642D6.pf  =>PUP.Optional.WpManager
C:\WINDOWS\Prefetch\YTDOWNLOADER.EXE-84EA474D.pf  =>PUP.Optional.YTDownloader
C:\Users\Alizée P\AppData\Local\Microsoft\Windows\INetCache\IE\N1Y8HJQW\Reimage[1].exe  =>PUP.Optional.ReImageRepair
C:\Users\Alizée P\AppData\Local\mbot_fr_014010076\Download\myoffergroup_fr.exe  =>PUP.Optional.CrossRider
C:\Users\Alizée P\AppData\Local\Installer\Install_8126\DCYTDownloader.exe  =>PUP.Optional.YTDownloader
C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077\Download\myoffergroup_fr.exe  =>PUP.Optional.CrossRider
C:\Users\Alizée P\AppData\Local\gmsd_fr_005010077\Download\oasis.exe  =>PUP.Optional.CrossRider
HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E  =>PUP.Optional.GlobalUpdate
HKLM\Software\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E  =>PUP.Optional.GlobalUpdate
HKLM\SYSTEM\CurrentControlSet\Services\Ooteeotoor  =>PUP.Optional.Shopperz
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedCheckerService_RASAPI32  =>PUP.Optional.InternetSpeedChecker
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpeedCheckerService_RASMANCS  =>PUP.Optional.InternetSpeedChecker

---\\ Récapitulatif des éléments trouvées sur votre station (47) - 0s
http://www.nicolascoolman.fr/pup-searchdonkey /  =>PUP.Optional.SearchDonkey
http://www.nicolascoolman.fr/pup-imgupdater/  =>PUP.Optional.IMGUpdater
http://www.nicolascoolman.fr/adware-imbooster/  =>PUP.Optional.IMBooster
http://www.nicolascoolman.fr/pup-crossrider/  =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Shopperz
http://www.nicolascoolman.fr/pup-minibar/  =>PUP.Optional.Minibar
http://www.nicolascoolman.fr/hijacker-trovicom/  =>PUP.Optional.TroviCom
http://www.nicolascoolman.fr/pup-optional-startsearch/  =>PUP.Optional.StartSearch
http://www.nicolascoolman.fr/blog  =>PUP.Optional.OurSurfing
http://www.nicolascoolman.fr/pup-globalupdate/  =>PUP.Optional.GlobalUpdate
http://www.nicolascoolman.fr/blog  =>PUP.Optional.BubbleSound
http://www.nicolascoolman.fr/pup-ytdownloader/  =>PUP.Optional.YTDownloader
http://www.nicolascoolman.fr/pup-smartwebsearch/  =>PUP.Optional.SmartWebSearch
http://www.nicolascoolman.fr/blog  =>PUP.Optional.CrossBrowse
http://www.nicolascoolman.fr/pup-searchprotect/  =>PUP.Optional.SearchProtect
http://www.nicolascoolman.fr/pup-anyprotect/  =>PUP.Optional.AnyProtect
http://www.nicolascoolman.fr/adware-boxore/  =>PUP.Optional.Boxore
http://www.nicolascoolman.fr/pup-suptab/  =>PUP.Optional.SupTab
http://www.nicolascoolman.fr/blog  =>PUP.Optional.GamesDesktop
http://www.nicolascoolman.fr/blog  =>PUP.Optional.BrowserExtensions
http://www.nicolascoolman.fr/blog  =>PUP.Optional.MyBestOffersToday
http://www.nicolascoolman.fr/pup-objectbrowser/  =>PUP.Optional.ObjectBrowser
http://www.nicolascoolman.fr/rogue-pcspeedup/  =>PUP.Optional.PCSpeedUp
http://www.nicolascoolman.fr/pup-optional-termcoach  =>PUP.Optional.TermCoach
http://www.nicolascoolman.fr/spyware-agenceexclusive/  =>PUP.Optional.AgenceExclusive
http://www.nicolascoolman.fr/blog  =>PUP.Optional.WdsManPro
http://www.nicolascoolman.fr/blog  =>PUP.Optional.CrossBrowser
http://www.nicolascoolman.fr/pup-optional-dailypcclean/  =>PUP.Optional.DailyPCClean
http://www.nicolascoolman.fr/adware-spointer/  =>PUP.Optional.SPointer
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Generic
http://www.nicolascoolman.fr/adware-mywebsearch/  =>PUP.Optional.MyWebSearch
http://www.nicolascoolman.fr/blog  =>PUP.Optional.MovieDea
http://www.nicolascoolman.fr/pup-bubbledock/  =>PUP.Optional.BubbleDock
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Nosibay
http://www.nicolascoolman.fr/blog  =>PUP.Optional.BoBrowser
http://www.nicolascoolman.fr/blog  =>PUP.Optional.BrowserHelper
http://www.nicolascoolman.fr/blog  =>.Superfluous.CrashReports
http://www.nicolascoolman.fr/adware-installpedia/  =>PUP.Optional.InstallPedia
http://www.nicolascoolman.fr/blog  =>PUP.Optional.WebBar
http://www.nicolascoolman.fr/blog  =>PUP.Optional.ASPackage
http://www.nicolascoolman.fr/pup-shopperpro/  =>PUP.Optional.ShopperPro
http://www.nicolascoolman.fr/adware-downware/  =>PUP.Optional.Downware
http://www.nicolascoolman.fr/pup-internetspeedchecker/  =>PUP.Optional.InternetSpeedChecker
http://www.nicolascoolman.fr/pup-wpmanager/  =>PUP.Optional.WpManager
http://www.nicolascoolman.fr/rogue-reimagerepair/  =>PUP.Optional.ReImageRepair
http://www.nicolascoolman.fr/blog  =>PUP.Optional.Monetization
http://www.nicolascoolman.fr/hijacker-trovigo/  =>PUP.Optional.Trovigo

~ End of the scan, 22250 items in 376 seconds (1239)(0)()