~ ZHPDiag v2015.10.10.148 Par Nicolas Coolman (2015/10/10) ~ Démarré par Maison (User) (2015/10/13 14:09:00) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\Maison\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Maison\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Deactivate ~ Démarrage du système: Normal (Normal boot) Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) ---\\ Navigateurs Internet (2) - 0s MFIE: Mozilla Firefox 39.0 (x86 fr) v39.0 MSIE: Internet Explorer v11.0.9600.18015 ---\\ Informations sur les produits Windows (10) - 0s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows Operating System - Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : 3Q6C9 Windows License : OK ~ Windows Remaining Initializations Number : 1 Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection (3) - 7s Avast Free Antivirus v10.3.2225 Malwarebytes Anti-Malware version 2.1.8.1057 Windows Defender W7 (Deactivate) ---\\ Logiciels de protection et autres (Superflus) (2) - 8s Ad-Aware Antivirus v11.7.485.8398 Spybot - Search & Destroy v2.4.40 ---\\ Logiciels d'optimisation (1) - 9s CCleaner v5.02 ---\\ Surveillance de Logiciels (2) - 9s Adobe Flash Player 19 NPAPI Adobe Reader XI ---\\ Logiciels de partage P2P (1) - 9s eMule ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 6271.904 MB (25% free) ~ System Restore: Activé (Enable) ~ System drive C: has 456 GB free of 1418 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: MAISON-HP ~ User Name: Maison ~ Logged in as Non administrator ---\\ Enumération des unités disques (4) - 0s ~ Drive C: has 456 GB free of 1418 GB (System) ~ Drive D: has 1 GB free of 12 GB ~ Drive I: has 337 GB free of 953 GB ~ Drive J: has 0 GB free of 1 GB ---\\ Etat du Centre de Sécurité Windows (11) - 1s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 0s [MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) () -- C:\Windows\Explorer.exe [2871808] © [MD5.DD81D91FF3B0763C392422865C9AC12E] - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) () -- C:\Windows\System32\rundll32.exe [45568] © [MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) () -- C:\Windows\System32\Wininit.exe [129024] © [MD5.A55305B1CACD38EAC176CC532B2053AC] - (.Microsoft Corporation - Extensions Internet pour Win32.) () -- C:\Windows\System32\wininet.dll [2427392] © [MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) () -- C:\Windows\System32\Winlogon.exe [455168] © [MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) () -- C:\Windows\System32\sppcomapi.dll [232448] © [MD5.492D07D79E7024CA310867B526D9636D] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\System32\dnsapi.dll [357888] © [MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - (.Microsoft Corporation - DNS DLL de l’API Client.) () -- C:\Windows\Syswow64\dnsapi.dll [270336] © [MD5.0D57D091E06BB1E58E72E5D08479FDDF] - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) () -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] © [MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) () -- C:\Windows\System32\drivers\AFD.sys [497152] © [MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) () -- C:\Windows\System32\drivers\atapi.sys [24128] © [MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) () -- C:\Windows\System32\drivers\Cdfs.sys [92160] © [MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) () -- C:\Windows\System32\drivers\Cdrom.sys [147456] © [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) () -- C:\Windows\System32\drivers\DfsC.sys [102400] © [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) () -- C:\Windows\System32\drivers\HDAudBus.sys [122368] © [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) () -- C:\Windows\System32\drivers\i8042prt.sys [105472] © [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) () -- C:\Windows\System32\drivers\IpNat.sys [116224] © [MD5.43E1F4B0EFDC244D2A83995CCD7846F7] - (.Microsoft Corporation - Windows NT SMB Minirdr.) () -- C:\Windows\System32\drivers\MRxSmb.sys [159232] © [MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) () -- C:\Windows\System32\drivers\netBT.sys [261632] © [MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) () -- C:\Windows\System32\drivers\ntfs.sys [1684928] © [MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) () -- C:\Windows\System32\drivers\Parport.sys [97280] © [MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) () -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] © [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) () -- C:\Windows\System32\drivers\smb.sys [93184] © [MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) () -- C:\Windows\System32\drivers\tdx.sys [119296] © [MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) () -- C:\Windows\System32\drivers\volsnap.sys [295808] © ---\\ Processus lancés (21) - 2s [MD5.35F97E7C110FC49D4FFB290D5FD8A0DE] - (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 8\Programmes32\AgentAntidote.exe [1130280] [PID.1532] © [MD5.AF9E13D30AB921EE12A907909598CBF9] - (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 8\Programmes64\AgentAntidote.exe [1275176] [PID.1628] © [MD5.076B3EE149E01ADBAC2DC529554A3FD9] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [169768] [PID.1592] © [MD5.8750F7255EC06C5D6F40DECEE99DD794] - (...) -- C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.7.485.8398\AdAwareTray.exe [9549808] [PID.1588] [MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.1684] [MD5.54404B13D73BDCDD1A5AD261A9FD6310] - (.AMD - HydraDM.) -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM.exe [393216] [PID.1640] © [MD5.059C2F55E82C8EDB20E8F26B2A7D2B19] - (.Ruiware LLC - WinPatrol Background Change Monitor.) -- C:\Program Files (x86)\Ruiware\WinPatrol\WinPatrol.exe [1154112] [PID.2116] [MD5.A29FF473281777DBC8E7993D6E1B0DB6] - (.AMD - HydraDMH64.) -- C:\Program Files (x86)\ATI Technologies\HydraVision\HydraDM64.exe [282624] [PID.2164] © [MD5.5B6E8E09BE6401A7E022F52FDFCB2FF8] - (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336] [PID.2580] © [MD5.7EE68A122ED08E4AAD8DA551E34D2515] - (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576] [PID.2616] © [MD5.BADF6C22FBAA3ED3E2413A60411425AC] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299520] [PID.2624] © [MD5.F66203AF9C159E2CBD54DF981654F499] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [6111824] [PID.2792] © [MD5.ABFF2B3A80AA5348BE5E43EFD6B415D1] - (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [6554424] [PID.3620] © [MD5.883B2E1341E5BE906A7507308A6636DF] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285240] [PID.4020] © [MD5.319313BD72F82F4B6C70523CB618CA97] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299520] [PID.4388] © [MD5.FC3782F90C014C2D3C920A727D323776] - (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe [367016] [PID.6060] [MD5.312707A513F86ED20642F43F8EF4DD14] - (.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe [264616] [PID.4544] [MD5.7F7D795E8197E56C68939E7C18B33E5F] - (.Albu Cristian - Advanced Onion Router.) -- C:\Program Files (x86)\AdvOR\AdvOR.exe [7939584] [PID.1376] [MD5.C6B70BFEAAB9FF1D6AEA58516EBC1BD6] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\Maison\AppData\Roaming\uTorrent\uTorrent.exe [1996896] [PID.4396] [MD5.1CE7982AA6A983F4C49A32C8D624237B] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] [PID.6892] © [MD5.1D45319619579DDA7DE8DE9BB1E3079E] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Maison\Downloads\ZHPDiag3.exe [1943040] [PID.9152] © ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (21) - 2s P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.FRA P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\QuickTimePlugin.class P2 - EXT FILE: (...) -- C:\Users\Maison\AppData\Roaming\Mozilla\Firefox\Profiles\65pd17os.default-1380316427771\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi P2 - EXT FILE: (...) -- C:\Users\Maison\AppData\Roaming\Mozilla\Firefox\Profiles\65pd17os.default-1380316427771\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\amazon-france.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\bing.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\cnrtl-tlfi-fr.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\ddg.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\eBay-france.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\google.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\wikipedia-fr.xml P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\yahoo-france.xml P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} © P2 - EXT: (.Druide informatique inc. - Module d'Antidote.) -- C:\Users\Maison\AppData\Roaming\Mozilla\Firefox\Profiles\65pd17os.default-1380316427771\extensions\antidote7_win_firefox_103@druide.com © P2 - EXT: (...) -- C:\Users\Maison\AppData\Roaming\Mozilla\Firefox\Profiles\65pd17os.default-1380316427771\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} P2 - EXT: (...) -- C:\Users\Maison\AppData\Roaming\Mozilla\Firefox\Profiles\65pd17os.default-1380316427771\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} P2 - EXT: (.Echipa R&D Bitdefender - Bitdefender QuickScan.) -- C:\Users\Maison\AppData\Roaming\Mozilla\Firefox\Profiles\65pd17os.default-1380316427771\extensions\{e001c731-5e37-4538-a5cb-8168736a2360} P2 - FPN: [HKCU] [@hola.org/vlc,version=1.8.369] - (...) -- C:\Users\Maison\AppData\Local\Hola\firefox\app\vlc P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (...) -- C:\Program Files (x86)\Ubisoft\Trials Evolution Gold Edition\datapack\orbit\npuplaypc.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll © P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll © ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (14) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (4) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) © F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) © F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) © ---\\ Etude du fichier hosts (2) - 0s 74.208 ~ Le fichier hôte est sain (The hosts file is clean) (23) ---\\ Browser Helper Object de navigateur (BHO) (5) - 0s O2 - BHO: Skype for Business Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll © O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll © O2 - BHO: (no name) [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} (Orphean) O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL © O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL © ---\\ Applications lancées au démarrage du système (15) - 0s O4 - HKLM\..\Run: [AgentAntidote32] . (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 8\Programmes32\AgentAntidote.exe © O4 - HKLM\..\Run: [AgentAntidote64] . (.Druide informatique inc. - AgentAntidote.) -- C:\Program Files (x86)\Druide\Antidote 8\Programmes64\AgentAntidote.exe © O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe © O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe O4 - HKLM\..\Wow6432Node\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe © O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe © O4 - HKLM\..\Wow6432Node\Run: [Magic Desktop for HP notification] . (.Easybits - Software update notification.) -- C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe © O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java(TM) Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe © O4 - HKLM\..\Wow6432Node\Run: [SDTray] . (.Safer-Networking Ltd. - Spybot - Search & Destroy tray access.) -- C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe © O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe © O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe © O4 - HKLM\..\Wow6432Node\RunOnce: [20150107] . (.AVAST Software - avast! Emergency Update.) -- C:\Program Files\AVAST Software\Avast\Setup\emupdate\b187ddc4-eca3-4480-9d2d-4cf641351eff.exe © O4 - HKUS\S-1-5-21-1463436539-226736790-3776651664-1001\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-21-1463436539-226736790-3776651664-1001\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe ---\\ Modification Domaine/Adresses DNS (9) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 208.67.222.222,208.67.220.220 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel (27) - 0s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll © O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll © O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll © O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll © O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll © O18 - Handler: osf [64Bits] - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL © O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll © O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll © O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll © O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll © O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL © ---\\ Liste des services NT non Microsoft et non désactivés (18) - 1s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe © O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\system32\atiesrxx.exe © O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe © O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe © O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe © O23 - Service: Technologie de stockage Intel(R) Rapid (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe © O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe © O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe © O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) . (...) - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.7.485.8398\AdAwareService.exe O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe © O23 - Service: (MBAMScheduler) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe © O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe © O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\System32\PnkBstrA.exe (.not file.) O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Scanner Service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe © O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd. - Spybot-S&D 2 Background update service.) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe © O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd. - Windows Security Center integration..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe © O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe © O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe © ---\\ Enumère les données de BootExecute (1) - 0s O34 - HKLM BootExecute: (sdnclean64.exe) ---\\ Tâches planifiées en automatique (11) - 4s [MD5.E3FB05F33E1404AD606B1E1FE7C323C3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104] © [MD5.1CE7982AA6A983F4C49A32C8D624237B] [APT] [avastBCLRestart_firefox.exe] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [377000] © [MD5.9A1F3AEA8D61AA67D90F1B336C00984E] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [5496600] © [MD5.00000000000000000000000000000000] [APT] [iToolsDaemon] (...) -- C:\Program Files (x86)\ThinkSky\iTools 2.0\iToolsDaemon.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [RealDownloaderDownloaderScheduledTaskS-1-5-21-1463436539-226736790-3776651664-1001] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [RealDownloaderRealUpgradeLogonTaskS-1-5-21-1463436539-226736790-3776651664-1001] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1463436539-226736790-3776651664-1001] (...) -- C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [{61A6DD24-FCB8-4646-8BAE-254B0D0CF85D}] (...) -- F:\Setup.exe (.not file.) [0] [MD5.1CE7982AA6A983F4C49A32C8D624237B] [APT] [{7E4BDC28-3A74-4EF8-BF58-6E73DBEF19EB}] (.Mozilla Corporation.) -- c:\program files (x86)\mozilla firefox\firefox.exe [377000] © [MD5.00000000000000000000000000000000] [APT] [{D5F72BA8-B1C0-4080-B49E-67A04ACA394D}] (...) -- F:\Setup.exe (.not file.) [0] O39 - APT: iToolsDaemon - (...) -- C:\Windows\Tasks\iToolsDaemon.job [324] ---\\ Logiciels installés (164) - 10s O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner © O42 - Logiciel: WinRAR 5.21 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver © O42 - Logiciel: PeerBlock 1.2 (r693) - (.PeerBlock, LLC.) [HKLM][64Bits] -- {015C5B35-B678-451C-9AEE-821E8D69621C}_is1 © O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7-E5B51E5530A2} © O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} © O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {5AE0838D-19B1-5D12-5FE8-E6503B2C8716} © O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {602C9E30-F838-4AD2-8DC2-265C192D4AAC} © O42 - Logiciel: WinPatrol - (.Ruiware.) [HKLM][64Bits] -- {6A206A04-6BC1-411B-AA04-4E52EDEEADF2} O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D} © O42 - Logiciel: AntimalwareEngine - (.Lavasoft.) [HKLM][64Bits] -- {6E5FAEC8-C3C1-44E8-B8DE-CE3F9568BF85} © O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} © O42 - Logiciel: AdAwareInstaller - (.Lavasoft.) [HKLM][64Bits] -- {8C334A6E-504A-4C88-9C53-3AEF9FB5D20A} © O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {93F2A022-6C37-48B8-B241-FFABD9F60C30} © O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {977D1ABF-4089-4CA7-BA33-CC75808B7ACE} © O42 - Logiciel: AdAwareUpdater - (.Lavasoft.) [HKLM][64Bits] -- {A041066D-37EF-46FC-9DF7-465A07F1C5CF} © O42 - Logiciel: Ad-Aware Antivirus - (.Lavasoft.) [HKLM][64Bits] -- {A041066D-37EF-46FC-9DF7-465A07F1C5CF}_AdAwareUpdater © O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A44D35BC-F2DF-00E9-79BF-34967DF0E4E8} © O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {ADCB5F9E-EF88-6D61-EE2F-99F51DF1B6EF} © O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BCA9334F-B6C9-4F65-9A73-AC5A329A4D04} © O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {C4123106-B685-48E6-B9BD-E4F911841EB4} © O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B-8734-ABCD75BCF4F1} © O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {D7B824DE-DA32-4772-9E5E-39C5158136A7} © O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E57289A3-B314-F00A-F0D0-7CB63E588CFF} © O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR © O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX © O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI © O42 - Logiciel: Applian FLV Player - (.Applian Technologies Inc..) [HKLM][64Bits] -- Applian FLV Player2.0.25 O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- avast © O42 - Logiciel: Brink - (...) [HKLM][64Bits] -- Brink_is1 O42 - Logiciel: Call of Duty Advanced Warfare - (.Релиз от R.G. Steamgames.) [HKLM][64Bits] -- Call of Duty Advanced Warfare_is1 O42 - Logiciel: CDex extraction audio - (...) [HKLM][64Bits] -- CDex O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite © O42 - Logiciel: Dead Rising 3 v.1.0 - (...) [HKLM][64Bits] -- Dead Rising 3_is1 O42 - Logiciel: eMule - (...) [HKLM][64Bits] -- eMule O42 - Logiciel: FormatFactory 3.5.0.0 - (.Format Factory.) [HKLM][64Bits] -- FormatFactory © O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM][64Bits] -- IncrediMail O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658} © O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243} © O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1 © O42 - Logiciel: Mozilla Firefox 39.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 39.0 (x86 fr) © O42 - Logiciel: Murdered - Soul Suspect - (...) [HKLM][64Bits] -- Murdered - Soul Suspect_is1 O42 - Logiciel: PPÖúÊÖ PC°æ 1.1.2.0 - (.¹ãÖÝÌúÈËÍøÂç¿Æ¼¼ÓÐÏÞ¹«Ë¾.) [HKLM][64Bits] -- PPÖúÊÖ PC°æ O42 - Logiciel: Call of Duty Ghosts - (...) [HKLM][64Bits] -- Q2FsbG9mRHV0eUdob3N0cw==_is1 O42 - Logiciel: Real Hide IP - (...) [HKLM][64Bits] -- RealHideIP O42 - Logiciel: F1 2014 - (...) [HKLM][64Bits] -- RjEyMDE0_is1 O42 - Logiciel: RocketDock 1.3.5 - (.Punk Software.) [HKLM][64Bits] -- RocketDock_is1 © O42 - Logiciel: Rockstar Games Social Club - (.Rockstar Games.) [HKLM][64Bits] -- Rockstar Games Social Club © O42 - Logiciel: Sleeping Dogs - (...) [HKLM][64Bits] -- Sleeping Dogs_is1 O42 - Logiciel: Sniper Elite V2 - (...) [HKLM][64Bits] -- Sniper Elite V2_is1 O42 - Logiciel: Spec Ops The Line - (...) [HKLM][64Bits] -- Spec Ops The Line_is1 O42 - Logiciel: State Of Decay version 1.0.0.009 - (.WaLMaRT.) [HKLM][64Bits] -- State Of Decay_is1 O42 - Logiciel: NBA 2K15 - (...) [HKLM][64Bits] -- TkJBMksxNQ==_is1 O42 - Logiciel: Tombraider - (...) [HKLM][64Bits] -- Tombraider_is1 O42 - Logiciel: Metro: Last Light (c) Deep Silver version 1 - (...) [HKLM][64Bits] -- TWV0cm9MYXN0TGlnaHQ=_is1 O42 - Logiciel: Sniper Elite 3 - (...) [HKLM][64Bits] -- U25pcGVyRWxpdGUz_is1 O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM][64Bits] -- Uplay © O42 - Logiciel: WATCH_DOGS - (.Ubisoft.) [HKLM][64Bits] -- Uplay Install 274 © O42 - Logiciel: WATCH_DOGS Hotfix - (...) [HKLM][64Bits] -- V0FUQ0hfRE9HUw==_is1 O42 - Logiciel: WRC 4 FIA World Rally Championship - (...) [HKLM][64Bits] -- V1JDNEZJQVdvcmxkUmFsbHlDaGFtcGlvbnNoaXA=_is1 O42 - Logiciel: Wolfenstein: The New Order - (...) [HKLM][64Bits] -- V29sZmVuc3RlaW5UaGVOZXdPcmRlcg==_is1 O42 - Logiciel: The Sims 4 - (...) [HKLM][64Bits] -- VGhlU2ltczQ=_is1 O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player © O42 - Logiciel: VShare 2.0.5.1 - (.ShangHai ShengRi Information Technology Co.,Ltd..) [HKLM][64Bits] -- VShare O42 - Logiciel: WinPcap 4.1.1 - (.CACE Technologies.) [HKLM][64Bits] -- WinPcapInst © O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -- {07FA4960-B038-49EB-891B-9F95930AA544} © O42 - Logiciel: Antidote 8 - (.Druide informatique inc..) [HKLM][64Bits] -- {09AAAB09-6DBA-4DD9-9865-54597D3FBCA8} © O42 - Logiciel: Windows Installer Clean Up - (.Microsoft Corporation.) [HKLM][64Bits] -- {121634B0-2F4B-11D3-ADA3-00C04F52DD52} © O42 - Logiciel: Any Video Recorder version 1.0.4 - (.anvsoft, Inc..) [HKLM][64Bits] -- {17D86E62-4849-49BC-83D2-FA369CEEA9D9}_is1 © O42 - Logiciel: Max Payne 3 - (.Rockstar Games.) [HKLM][64Bits] -- {1AA94747-3BF6-4237-9E1A-7B3067738FE1} © O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} © O42 - Logiciel: Skype™ 7.6 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} © O42 - Logiciel: ActiveCheck component for HP Active Support Library - (.Hewlett-Packard.) [HKLM][64Bits] -- {254C37AA-6B72-4300-84F6-98A82419187E} © O42 - Logiciel: Java 7 Update 55 - (.Oracle.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83217051FF} © O42 - Logiciel: Sniper Ghost Warrior 2 - (...) [HKLM][64Bits] -- {27CF7D3A-A107-441F-8B2E-B2FA2F16BAAD}_is1 O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM][64Bits] -- {2CF22C94-1369-4C04-9A5F-A4BC6D91B508} O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {31B9D218-FED2-4C6C-B19F-7294FFC130B0} © O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E} © O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} © O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C5-0009C5020658} © O42 - Logiciel: Medal of Honor (TM) - (.Electronic Arts.) [HKLM][64Bits] -- {415030B8-3E8B-462A-8C03-41D95AA3AB3B} © O42 - Logiciel: Crysis®3 - (.Electronic Arts.) [HKLM][64Bits] -- {4198AE83-A3C6-4C41-85C8-EC63E990696E} © O42 - Logiciel: Resident Evil: Operation Raccoon City - (.CAPCOM U.S.A., INC.) [HKLM][64Bits] -- {43430FA1-12BB-4D88-862E-4F1000008400} O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5} © O42 - Logiciel: Les Sims™ 4 - (.Electronic Arts Inc..) [HKLM][64Bits] -- {48EBEBBF-B9F8-4520-A3CF-89A730721917} © O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits] -- {4CB0307C-565E-4441-86BE-0DF2E4FB828C} © O42 - Logiciel: Modern Warfare 3 - (.Activision.) [HKLM][64Bits] -- {5D168A3F-ECA3-4F98-A2AC-F809B2E533F9}_is1 © O42 - Logiciel: Crysis® 2 - (.Electronic Arts.) [HKLM][64Bits] -- {6033673D-2530-4587-8AD0-EB059FC263F9} © O42 - Logiciel: Bing Rewards Client Installer - (.Microsoft Corporation.) [HKLM][64Bits] -- {61EDBE71-5D3E-4AB7-AD95-E53FEAF68C17} © O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} © O42 - Logiciel: HPAsset component for HP Active Support Library - (.Hewlett-Packard.) [HKLM][64Bits] -- {669D4A35-146B-4314-89F1-1AC3D7B88367} © O42 - Logiciel: Mass Effect™ 3 - (.Electronic Arts.) [HKLM][64Bits] -- {6A9D1594-7791-48f5-9CAA-DE9BCB968320} © O42 - Logiciel: VoiceOver Kit - (.Apple Inc..) [HKLM][64Bits] -- {6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA} © O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM][64Bits] -- {751D221F-7C37-C83F-1973-A1F92A0F4DF6} © O42 - Logiciel: Battlefield 3™ - (.Electronic Arts.) [HKLM][64Bits] -- {76285C16-411A-488A-BCE3-C83CB933D8CF} © O42 - Logiciel: Photo Notifier and Animation Creator - (.IncrediMail.) [HKLM][64Bits] -- {788A0222-5690-4212-AA9C-C48FD0E1C9AE} O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} © O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F} © O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM][64Bits] -- {83CAF0DE-8D3B-4C37-A631-2B8F16EC3031} © O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} © O42 - Logiciel: Outlast - (.Red Barrels.) [HKLM][64Bits] -- {8729C414-9935-4502-97EA-B8AB0B7F5448}_is1 O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} © O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {88B2ABCF-9C00-47C1-8FC4-369B98845DD7} © O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} © O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} © O42 - Logiciel: Security Update for Skype for Business 2015 (KB3085500) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{6A5F1709-91E6-479F-B09F-D7FC9D2404D8} © O42 - Logiciel: Microsoft Access MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Excel MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft PowerPoint MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Publisher MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Outlook MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Word MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-0000-0000000FF1CE} © O42 - Logiciel: Security Update for Skype for Business 2015 (KB3085500) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{6A5F1709-91E6-479F-B09F-D7FC9D2404D8} © O42 - Logiciel: Security Update for Skype for Business 2015 (KB3085500) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{6A5F1709-91E6-479F-B09F-D7FC9D2404D8} © O42 - Logiciel: Microsoft InfoPath MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft DCF MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft OneNote MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Groove MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Access Setup Metadata MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0117-0409-0000-0000000FF1CE} © O42 - Logiciel: Microsoft Lync MUI (English) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-0409-0000-0000000FF1CE} © O42 - Logiciel: Security Update for Skype for Business 2015 (KB3085500) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{6A5F1709-91E6-479F-B09F-D7FC9D2404D8} © O42 - Logiciel: Update for Skype for Business 2015 (KB2889853) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-0409-0000-0000000FF1CE}_Office15.PROPLUS_{BF1B3F01-93F3-4B83-93DB-132EB1AED259} © O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-0000-0000000FF1CE} © O42 - Logiciel: Security Update for Skype for Business 2015 (KB3085500) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{6A5F1709-91E6-479F-B09F-D7FC9D2404D8} © O42 - Logiciel: Update for Skype for Business 2015 (KB2889853) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{AE1BB975-11D1-49A0-82E8-1D26DD62AFE7} © O42 - Logiciel: Security Update for Skype for Business 2015 (KB3085500) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{6A5F1709-91E6-479F-B09F-D7FC9D2404D8} © O42 - Logiciel: PressReader - (. NewspaperDirect Inc..) [HKLM][64Bits] -- {912CED74-88D3-4C5B-ACB0-132318649765} O42 - Logiciel: Assistant de téléchargement - (.Druide informatique inc..) [HKLM][64Bits] -- {92154A3C-9BB7-49D7-A571-4EB6373FA5AD} © O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {9530AE42-DAE1-4619-9594-B23487285D17} © O42 - Logiciel: Tom Clancy's Splinter Cell® Blacklist™ - (.Ubisoft.) [HKLM][64Bits] -- {A6356F2F-D3E1-4D83-9AA2-72871DD0C298} © O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824147215} © O42 - Logiciel: Adobe Reader XI (11.0.12) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} © O42 - Logiciel: Spybot - Search & Destroy - (.Safer-Networking Ltd..) [HKLM][64Bits] -- {B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1 © O42 - Logiciel: USB-set 1.5 - (.Infoadom 38.) [HKLM][64Bits] -- {B92B952E-4459-480F-A500-60D87F6F527F}_is1 © O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA-0121CCFC1243} © O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} © O42 - Logiciel: BioShock Infinite version 5.1 - (.Black_Box.) [HKLM][64Bits] -- {D36F3F6C-8411-4738-AF52-90536270C65B}_is1 © O42 - Logiciel: Compex DiagnosticTool - (.Compex.) [HKLM][64Bits] -- {D65FF1A4-E2E0-4EB5-9762-26F578CE4F62} O42 - Logiciel: Visuel intégré - (.Druide informatique inc..) [HKLM][64Bits] -- {D6A48C7F-A0F8-46A5-A1ED-F45A62FE93BF} © O42 - Logiciel: JunkFilterPlus - (.IncrediMail.) [HKLM][64Bits] -- {DC754D8F-1D06-4016-BF57-8D21F97E1F0A} O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} © O42 - Logiciel: Far Cry 3 - (.Ubisoft.) [HKLM][64Bits] -- {E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88} © O42 - Logiciel: CpxRS02 Sync Service - (.DJO LLC.) [HKLM][64Bits] -- {ECFA299F-E2EC-4C1C-914E-A6F6F187F5A6} O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} © O42 - Logiciel: Visual C++ 2008 x86 Runtime - (v9.0.30729) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27} © O42 - Logiciel: Visual C++ 2008 x86 Runtime - v9.0.30729.01 - (.Microsoft Corporation.) [HKLM][64Bits] -- {F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01 © O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} © O42 - Logiciel: Intel(R) Control Center - (.Intel Corporation.) [HKLM][64Bits] -- {F8A9085D-4C7A-41a9-8A77-C8998A96C421} © O42 - Logiciel: CopyTrans Suite désinstallation uniquement - (.WindSolutions.) [HKCU][64Bits] -- CopyTrans Suite © O42 - Logiciel: Le Cloud d'Orange - Transfert de fichiers - (.Orange-France.) [HKCU][64Bits] -- Le Cloud d'Orange - Transfert de fichiers © O42 - Logiciel: Mozilla Firefox 40.0.3 (x86 fr) - (.Mozilla.) [HKCU][64Bits] -- Mozilla Firefox 40.0.3 (x86 fr) © O42 - Logiciel: Orange Inside - (.Orange.) [HKCU][64Bits] -- Orange Inside © O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent O42 - Logiciel: Freenet version 0.7.5 build 1463 - (.freenetproject.org.) [HKCU][64Bits] -- {3196C62F-9C7B-4392-88B4-05C037D05518}_is1 O42 - Logiciel: Vistaprint Livres photo - (.Vistaprint.) [HKCU][64Bits] -- {70B0F1A3-D243-4FB9-B2C8-074350115F98}_is1 © ---\\ HKCU & HKLM Software Keys (175) - 10s HKLM\SOFTWARE\Wow6432Node\Activision HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\AdwCleaner HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies HKLM\SOFTWARE\Wow6432Node\AMD HKLM\SOFTWARE\Wow6432Node\Apple Computer, Inc. HKLM\SOFTWARE\Wow6432Node\Apple Inc. HKLM\SOFTWARE\Wow6432Node\ATI HKLM\SOFTWARE\Wow6432Node\ATI Technologies HKLM\SOFTWARE\Wow6432Node\AVAST Software HKLM\SOFTWARE\Wow6432Node\Bethesda Softworks HKLM\SOFTWARE\Wow6432Node\BillP Studios HKLM\SOFTWARE\Wow6432Node\BioWare HKLM\SOFTWARE\Wow6432Node\Bunndle HKLM\SOFTWARE\Wow6432Node\CAPCOM HKLM\SOFTWARE\Wow6432Node\CAPCOM U.S.A., INC HKLM\SOFTWARE\Wow6432Node\CDDB HKLM\SOFTWARE\Wow6432Node\CDex HKLM\SOFTWARE\Wow6432Node\Crytek HKLM\SOFTWARE\Wow6432Node\cybelsoft HKLM\SOFTWARE\Wow6432Node\CyberLink HKLM\SOFTWARE\Wow6432Node\Danger Close Games HKLM\SOFTWARE\Wow6432Node\Disc Soft HKLM\SOFTWARE\Wow6432Node\Druide informatique inc. HKLM\SOFTWARE\Wow6432Node\DT Soft HKLM\SOFTWARE\Wow6432Node\EA Games HKLM\SOFTWARE\Wow6432Node\EasyBits HKLM\SOFTWARE\Wow6432Node\Electronic Arts HKLM\SOFTWARE\Wow6432Node\Garmin HKLM\SOFTWARE\Wow6432Node\GNU HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\IncrediMail HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Lavasoft HKLM\SOFTWARE\Wow6432Node\Licenses HKLM\SOFTWARE\Wow6432Node\Logitech HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware (Trial) HKLM\SOFTWARE\Wow6432Node\Maxis HKLM\SOFTWARE\Wow6432Node\MimarSinan HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\NETGEAR HKLM\SOFTWARE\Wow6432Node\NewspaperDirect HKLM\SOFTWARE\Wow6432Node\Novell HKLM\SOFTWARE\Wow6432Node\NSIS_HideMe HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\OpenAutomate HKLM\SOFTWARE\Wow6432Node\Origin HKLM\SOFTWARE\Wow6432Node\Pando Networks HKLM\SOFTWARE\Wow6432Node\PDFComplete HKLM\SOFTWARE\Wow6432Node\perforce HKLM\SOFTWARE\Wow6432Node\Photo Notifier and Animation Creator HKLM\SOFTWARE\Wow6432Node\PopCap HKLM\SOFTWARE\Wow6432Node\RealHideIP HKLM\SOFTWARE\Wow6432Node\RealNetworks HKLM\SOFTWARE\Wow6432Node\Realtek HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\Rebellion HKLM\SOFTWARE\Wow6432Node\Rockstar Games HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited HKLM\SOFTWARE\Wow6432Node\SERCOMM HKLM\SOFTWARE\Wow6432Node\Sierra On-Line HKLM\SOFTWARE\Wow6432Node\Sierra OnLine HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\Smart File Advisor HKLM\SOFTWARE\Wow6432Node\SOSVirus HKLM\SOFTWARE\Wow6432Node\Square Enix HKLM\SOFTWARE\Wow6432Node\TrendMicro HKLM\SOFTWARE\Wow6432Node\Ubisoft HKLM\SOFTWARE\Wow6432Node\Valve HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WildTangent HKLM\SOFTWARE\Wow6432Node\Win32 Services HKLM\SOFTWARE\Wow6432Node\WinPcap HKLM\SOFTWARE\Wow6432Node\Wow6432Node HKLM\SOFTWARE\Wow6432Node\Xing Technology Corp. HKLM\SOFTWARE\Wow6432Node\Even Balance HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\2K Sports HKCU\SOFTWARE\4A-Games HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AMD HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\ArchiveExpl HKCU\SOFTWARE\ATI HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\Backup8 HKCU\SOFTWARE\BillP Studios HKCU\SOFTWARE\Binary Noise HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\Bugsplat HKCU\SOFTWARE\CC HKCU\SOFTWARE\Clubic HKCU\SOFTWARE\Compex HKCU\SOFTWARE\Crystal Dynamics HKCU\SOFTWARE\Crytek HKCU\SOFTWARE\cybelsoft HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\Disc Soft HKCU\SOFTWARE\Druide informatique inc. HKCU\SOFTWARE\dskMetrics HKCU\SOFTWARE\DT Soft HKCU\SOFTWARE\Eidos HKCU\SOFTWARE\ej-technologies HKCU\SOFTWARE\Electronic Arts HKCU\SOFTWARE\eMule HKCU\SOFTWARE\FLT HKCU\SOFTWARE\FreeTime HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\Garmin HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\Hola HKCU\SOFTWARE\ihelper HKCU\SOFTWARE\IM HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\IncrediMail HKCU\SOFTWARE\Incredimail Backup8 HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\Lavasoft HKCU\SOFTWARE\Licenses HKCU\SOFTWARE\Logitech HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MainConcept HKCU\SOFTWARE\Malwarebytes' Anti-Malware HKCU\SOFTWARE\MOHWSplash HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\NeutronGames HKCU\SOFTWARE\Northcode Inc HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Orange HKCU\SOFTWARE\Orange-France HKCU\SOFTWARE\OrangeInside HKCU\SOFTWARE\perforce HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\RealNetworks HKCU\SOFTWARE\redsn0w HKCU\SOFTWARE\RocketDock HKCU\SOFTWARE\Safer Networking Limited HKCU\SOFTWARE\SecuROM HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SkypeRS HKCU\SOFTWARE\Smart Projects HKCU\SOFTWARE\Teiron HKCU\SOFTWARE\TeleCharger_v2 HKCU\SOFTWARE\The Silicon Realms Toolworks HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\Ubisoft HKCU\SOFTWARE\UsbFix HKCU\SOFTWARE\uTorrentPlus HKCU\SOFTWARE\Valve HKCU\SOFTWARE\VideoLAN HKCU\SOFTWARE\Winamp HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner HKCU\SOFTWARE\AppDataLow\Software\JavaSoft ---\\ Contenu des dossiers Programmes (388) - 13s O43 - CFD: 2014/07/01 13:07:37 - [] D -- C:\Program Files (x86)\1-click run O43 - CFD: 2012/07/18 22:42:19 - [] D -- C:\Program Files (x86)\2K Games O43 - CFD: 2012/09/26 22:31:32 - [] D -- C:\Program Files (x86)\Activision O43 - CFD: 2013/10/27 13:28:16 - [] D -- C:\Program Files (x86)\Adobe O43 - CFD: 2015/07/04 16:25:26 - [] AD -- C:\Program Files (x86)\AdvOR O43 - CFD: 2013/05/05 09:01:08 - [] D -- C:\Program Files (x86)\AGB-GT O43 - CFD: 2012/10/24 11:11:30 - [] D -- C:\Program Files (x86)\AMD APP O43 - CFD: 2013/11/06 21:33:56 - [] D -- C:\Program Files (x86)\AMD AVT O43 - CFD: 2014/10/09 22:27:40 - [] D -- C:\Program Files (x86)\Any Video Recorder O43 - CFD: 2014/09/16 12:53:50 - [] D -- C:\Program Files (x86)\Apple Software Update O43 - CFD: 2012/10/24 11:11:04 - [] D -- C:\Program Files (x86)\ATI Technologies O43 - CFD: 2013/09/26 17:40:33 - [] D -- C:\Program Files (x86)\Battlefield 3 O43 - CFD: 2013/11/17 19:35:49 - [] D -- C:\Program Files (x86)\Battlefield 4 O43 - CFD: 2011/09/09 16:49:33 - [] D -- C:\Program Files (x86)\Bethesda Softworks O43 - CFD: 2011/08/26 21:28:09 - [] D -- C:\Program Files (x86)\BillP Studios O43 - CFD: 2013/06/04 13:44:49 - [] D -- C:\Program Files (x86)\BioShock Infinite O43 - CFD: 2012/04/16 17:26:28 - [] D -- C:\Program Files (x86)\Bonjour O43 - CFD: 2014/11/10 02:25:10 - [] D -- C:\Program Files (x86)\Call of Duty Advanced Warfare O43 - CFD: 2014/10/17 14:34:33 - [] D -- C:\Program Files (x86)\Call of Duty Ghosts O43 - CFD: 2012/07/19 00:35:20 - [] D -- C:\Program Files (x86)\Capcom O43 - CFD: 2012/07/26 15:42:21 - [] D -- C:\Program Files (x86)\CDex_150 O43 - CFD: 2015/04/15 22:37:25 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 2014/10/10 12:54:49 - [] D -- C:\Program Files (x86)\Compex O43 - CFD: 2013/05/29 00:02:42 - [] D -- C:\Program Files (x86)\CopyTrans O43 - CFD: 2013/05/05 10:32:49 - [] D -- C:\Program Files (x86)\Crysis 3 O43 - CFD: 2011/07/04 17:36:13 - [] D -- C:\Program Files (x86)\Cyberlink O43 - CFD: 2013/10/01 11:11:49 - [] D -- C:\Program Files (x86)\DAEMON Tools Lite O43 - CFD: 2012/05/25 20:33:01 - [] D -- C:\Program Files (x86)\Dead Island O43 - CFD: 2014/11/11 20:18:18 - [] D -- C:\Program Files (x86)\Dead Rising 3 O43 - CFD: 2011/09/10 15:53:44 - [] D -- C:\Program Files (x86)\Deus Ex - Human Revolution O43 - CFD: 2014/10/05 15:26:47 - [] D -- C:\Program Files (x86)\DJO LLC O43 - CFD: 2013/05/04 19:08:10 - [] D -- C:\Program Files (x86)\Druide O43 - CFD: 2013/11/01 13:14:09 - [] D -- C:\Program Files (x86)\EA GAMES O43 - CFD: 2014/06/24 10:56:08 - [] D -- C:\Program Files (x86)\Eidos Interactive O43 - CFD: 2011/09/10 23:06:31 - [] D -- C:\Program Files (x86)\Electronic Arts O43 - CFD: 2011/08/27 08:44:29 - [] D -- C:\Program Files (x86)\eMule O43 - CFD: 2014/10/24 18:42:51 - [] D -- C:\Program Files (x86)\F1 2014 O43 - CFD: 2014/06/30 23:11:10 - [] D -- C:\Program Files (x86)\Freenet O43 - CFD: 2012/10/15 23:06:10 - [] D -- C:\Program Files (x86)\FreeTime O43 - CFD: 2012/07/14 21:59:52 - [] D -- C:\Program Files (x86)\Frozenbyte O43 - CFD: 2014/09/17 15:35:56 - [] D -- C:\Program Files (x86)\IncrediMail O43 - CFD: 2014/09/16 11:48:50 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 2012/10/24 11:46:41 - [] D -- C:\Program Files (x86)\Intel O43 - CFD: 2015/09/10 05:10:40 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 2014/08/10 07:03:28 - [] D -- C:\Program Files (x86)\iTools O43 - CFD: 2015/06/26 16:48:43 - [] D -- C:\Program Files (x86)\iTunes O43 - CFD: 2014/07/20 20:48:07 - [] D -- C:\Program Files (x86)\Java O43 - CFD: 2012/10/23 23:17:55 - [] D -- C:\Program Files (x86)\Logitech O43 - CFD: 2015/06/27 06:17:39 - [] D -- C:\Program Files (x86)\Malwarebytes Anti-Malware O43 - CFD: 2012/06/10 11:22:57 - [] D -- C:\Program Files (x86)\Mass Effect 3 O43 - CFD: 2012/12/25 20:14:49 - [] D -- C:\Program Files (x86)\Medal of Honor Warfighter O43 - CFD: 2013/12/15 14:52:05 - [] D -- C:\Program Files (x86)\Metro Last Light O43 - CFD: 2013/05/04 18:27:39 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services O43 - CFD: 2012/07/19 01:01:26 - [] D -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE O43 - CFD: 2013/05/04 18:30:57 - [] D -- C:\Program Files (x86)\Microsoft Office O43 - CFD: 2015/08/13 04:17:51 - [] D -- C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 2013/05/04 18:31:46 - [] D -- C:\Program Files (x86)\Microsoft SQL Server O43 - CFD: 2012/05/31 18:09:16 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 2014/04/30 01:20:20 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 2015/07/31 14:25:08 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 2012/05/31 18:06:22 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 2014/10/05 17:36:41 - [] D -- C:\Program Files (x86)\MSECACHE O43 - CFD: 2012/04/15 03:01:01 - [0] D -- C:\Program Files (x86)\MSXML 4.0 O43 - CFD: 2014/10/19 11:50:08 - [] D -- C:\Program Files (x86)\NBA 2K15 O43 - CFD: 2011/07/04 17:42:40 - [] D -- C:\Program Files (x86)\NewspaperDirect O43 - CFD: 2012/06/10 11:29:00 - [] D -- C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 2011/08/26 18:14:46 - [] RD -- C:\Program Files (x86)\Online Services O43 - CFD: 2015/06/28 11:55:02 - [] D -- C:\Program Files (x86)\Orange O43 - CFD: 2014/05/10 10:22:01 - [] D -- C:\Program Files (x86)\Outlast O43 - CFD: 2012/06/11 23:08:47 - [] D -- C:\Program Files (x86)\Pando Networks O43 - CFD: 2014/09/16 19:39:48 - [] D -- C:\Program Files (x86)\Photo Notifier and Animation Creator O43 - CFD: 2015/06/28 15:33:11 - [] D -- C:\Program Files (x86)\PPÖúÊÖ O43 - CFD: 2015/01/24 16:11:39 - [] D -- C:\Program Files (x86)\QuickTime O43 - CFD: 2011/08/26 22:01:46 - [] D -- C:\Program Files (x86)\RealHideIP O43 - CFD: 2012/10/24 11:31:27 - [] D -- C:\Program Files (x86)\Realtek O43 - CFD: 2012/07/15 23:40:59 - [] D -- C:\Program Files (x86)\Rebellion O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 2011/08/27 11:03:53 - [] D -- C:\Program Files (x86)\RocketDock O43 - CFD: 2012/09/17 23:16:02 - [] D -- C:\Program Files (x86)\Rockstar Games O43 - CFD: 2014/07/27 11:35:15 - [] D -- C:\Program Files (x86)\Ruiware O43 - CFD: 2015/06/26 16:41:34 - [] RD -- C:\Program Files (x86)\Skype O43 - CFD: 2014/07/01 13:10:24 - [] D -- C:\Program Files (x86)\Sniper Elite 3 O43 - CFD: 2014/09/17 16:38:28 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy O43 - CFD: 2014/09/17 16:42:30 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy 2 O43 - CFD: 2013/05/23 10:25:25 - [] D -- C:\Program Files (x86)\SQUARE ENIX O43 - CFD: 2015/03/26 21:40:45 - [] D -- C:\Program Files (x86)\State Of Decay O43 - CFD: 2012/10/24 11:21:21 - [0] HD -- C:\Program Files (x86)\Temp O43 - CFD: 2014/11/10 15:40:20 - [] D -- C:\Program Files (x86)\The Sims 4 O43 - CFD: 2015/02/11 14:14:38 - [] D -- C:\Program Files (x86)\Tor Browser O43 - CFD: 2014/05/10 10:08:38 - [] D -- C:\Program Files (x86)\Ubisoft O43 - CFD: 2009/07/14 06:57:06 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 2011/08/27 11:47:17 - [] D -- C:\Program Files (x86)\USB-set O43 - CFD: 2011/08/27 09:32:09 - [] D -- C:\Program Files (x86)\VideoLAN O43 - CFD: 2014/09/16 15:12:35 - [] D -- C:\Program Files (x86)\VShare =>PUP.Optional.Pugi O43 - CFD: 2013/07/12 03:37:23 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 2014/10/05 17:39:19 - [] D -- C:\Program Files (x86)\Windows Installer Clean Up O43 - CFD: 2011/07/04 17:45:23 - [] D -- C:\Program Files (x86)\Windows Live O43 - CFD: 2011/08/27 13:48:06 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 2015/06/11 03:45:01 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 2009/07/14 07:32:38 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 2011/08/27 13:48:06 - [] D -- C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 2010/11/21 05:31:38 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 2012/10/11 22:21:25 - [] D -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 2012/05/13 14:06:14 - [] D -- C:\Program Files (x86)\WinPcap O43 - CFD: 2014/06/07 17:05:45 - [] D -- C:\Program Files (x86)\Wolfenstein The New Order O43 - CFD: 2014/05/09 08:07:29 - [] D -- C:\Program Files (x86)\WRC 4 FIA World Rally Championship O43 - CFD: 2015/06/28 11:31:16 - [] D -- C:\Program Files (x86)\Yahoo! O43 - CFD: 2014/06/08 15:29:07 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\(Default) O43 - CFD: 2012/07/18 22:51:50 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2K Games O43 - CFD: 2014/10/05 18:16:40 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2009/07/14 06:57:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2013/11/06 21:33:23 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center O43 - CFD: 2013/05/04 19:09:15 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Antidote O43 - CFD: 2014/10/09 22:27:40 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Any Video Recorder O43 - CFD: 2011/09/04 11:49:22 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bejeweled 2 Deluxe O43 - CFD: 2011/09/09 16:53:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks O43 - CFD: 2013/10/01 11:12:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite O43 - CFD: 2014/11/11 20:18:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dead Rising 3 O43 - CFD: 2014/06/24 11:11:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos Interactive O43 - CFD: 2011/08/27 00:50:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMule O43 - CFD: 2011/07/04 17:42:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eReaders O43 - CFD: 2012/06/15 14:26:28 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Player O43 - CFD: 2014/11/10 15:43:13 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2011/08/26 18:14:17 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Manuels de l'utilisateur O43 - CFD: 2014/09/17 15:51:20 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail O43 - CFD: 2012/10/24 11:46:54 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel O43 - CFD: 2013/07/06 16:43:29 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ipswDownloader O43 - CFD: 2014/07/04 15:09:56 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTools O43 - CFD: 2015/06/26 16:49:09 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 2015/06/27 06:39:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft O43 - CFD: 2012/10/23 10:43:24 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech O43 - CFD: 2012/12/02 13:12:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com O43 - CFD: 2009/07/14 06:57:09 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2014/06/02 17:57:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware O43 - CFD: 2012/07/19 01:01:24 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace O43 - CFD: 2015/09/11 03:07:12 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 2015/08/13 03:54:05 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 2011/08/26 18:14:46 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online Services O43 - CFD: 2014/05/10 10:19:21 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlast O43 - CFD: 2014/09/16 11:47:44 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Help & Tools O43 - CFD: 2013/04/18 15:04:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre O43 - CFD: 2013/03/20 17:04:57 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre Studio X O43 - CFD: 2014/09/16 15:06:42 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PPÖúÊÖ O43 - CFD: 2015/01/24 16:11:33 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime O43 - CFD: 2014/06/24 14:43:18 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razor 1911 O43 - CFD: 2011/08/26 22:01:46 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real Hide IP O43 - CFD: 2012/07/15 23:44:49 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rebellion O43 - CFD: 2011/07/04 17:33:52 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recovery Manager O43 - CFD: 2011/08/27 11:03:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock O43 - CFD: 2012/09/17 18:49:38 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games O43 - CFD: 2013/04/17 22:24:12 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sierra O43 - CFD: 2015/04/15 22:37:26 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 2013/05/05 09:10:54 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sniper Ghost Warrior 2 O43 - CFD: 2013/05/23 10:34:34 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SQUARE ENIX O43 - CFD: 2014/10/09 22:22:20 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2010/11/21 09:16:41 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 2011/08/27 11:47:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB-set O43 - CFD: 2014/04/02 12:32:01 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 2011/07/04 17:45:22 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 2014/07/27 11:35:16 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPatrol O43 - CFD: 2012/05/13 14:06:14 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap O43 - CFD: 2015/06/26 16:38:53 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 2014/12/20 01:26:02 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 2013/10/27 13:28:19 - [] D -- C:\ProgramData\Adobe O43 - CFD: 2013/11/06 21:33:57 - [] D -- C:\ProgramData\AMD O43 - CFD: 2012/04/28 14:44:41 - [] D -- C:\ProgramData\Ant O43 - CFD: 2014/09/16 12:52:53 - [] D -- C:\ProgramData\Apple O43 - CFD: 2011/08/26 21:02:08 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 2013/11/06 21:34:31 - [] D -- C:\ProgramData\ATI O43 - CFD: 2013/09/28 11:58:17 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 2015/01/04 11:47:12 - [] D -- C:\ProgramData\Baidu O43 - CFD: 2014/06/05 23:03:02 - [] D -- C:\ProgramData\Caphyon O43 - CFD: 2014/10/24 18:43:28 - [] D -- C:\ProgramData\Codemasters O43 - CFD: 2011/08/26 19:58:13 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 2012/08/18 10:59:50 - [] D -- C:\ProgramData\DAEMON Tools Lite O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 2013/09/25 14:34:33 - [] D -- C:\ProgramData\Downloaded Installations O43 - CFD: 2011/09/10 23:22:47 - [] SHD -- C:\ProgramData\DSS O43 - CFD: 2015/06/26 16:49:00 - [] D -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 O43 - CFD: 2011/09/04 14:07:00 - [] D -- C:\ProgramData\EA Core O43 - CFD: 2013/12/30 07:58:50 - [] D -- C:\ProgramData\Easybits Magic Desktop for HP O43 - CFD: 2013/05/05 10:32:37 - [] D -- C:\ProgramData\Electronic Arts O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 2012/04/28 16:48:05 - [] D -- C:\ProgramData\Garmin O43 - CFD: 2012/05/13 22:50:29 - [] D -- C:\ProgramData\GFI Software O43 - CFD: 2014/09/16 11:48:02 - [] D -- C:\ProgramData\Hewlett-Packard O43 - CFD: 2011/08/26 19:04:36 - [] D -- C:\ProgramData\IM O43 - CFD: 2011/08/26 19:03:28 - [] D -- C:\ProgramData\IncrediMail O43 - CFD: 2014/07/27 11:35:15 - [] D -- C:\ProgramData\InstallMate =>PUP.Optional.Tarma O43 - CFD: 2012/10/24 11:46:50 - [] D -- C:\ProgramData\intel O43 - CFD: 2015/06/27 06:39:23 - [] D -- C:\ProgramData\Lavasoft O43 - CFD: 2014/05/04 14:49:40 - [] D -- C:\ProgramData\Logs O43 - CFD: 2012/12/02 13:12:33 - [] D -- C:\ProgramData\ma-config.com O43 - CFD: 2014/05/08 10:46:34 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 2015/09/20 08:45:18 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 2015/09/11 03:07:25 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 2013/10/27 15:48:58 - [] D -- C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS O43 - CFD: 2012/04/26 07:04:35 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 2011/08/26 18:25:06 - [] D -- C:\ProgramData\Norton O43 - CFD: 2011/07/04 17:46:04 - [] D -- C:\ProgramData\NortonInstaller O43 - CFD: 2014/07/20 21:25:21 - [0] D -- C:\ProgramData\Oracle O43 - CFD: 2014/06/02 14:14:06 - [] D -- C:\ProgramData\Orbit O43 - CFD: 2012/11/03 10:25:10 - [] D -- C:\ProgramData\Origin O43 - CFD: 2015/02/12 04:26:17 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 2011/08/27 09:59:42 - [0] D -- C:\ProgramData\PDFC O43 - CFD: 2012/08/20 19:15:30 - [] D -- C:\ProgramData\Photo Notifier and Animation Creator O43 - CFD: 2014/10/09 22:22:28 - [] D -- C:\ProgramData\Real O43 - CFD: 2011/09/04 19:31:04 - [] D -- C:\ProgramData\RealHideIP O43 - CFD: 2014/10/10 00:43:30 - [0] D -- C:\ProgramData\RealNetworks O43 - CFD: 2015/08/08 00:59:33 - [] D -- C:\ProgramData\Recovery O43 - CFD: 2013/05/04 18:31:33 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 2012/10/30 13:47:27 - [] D -- C:\ProgramData\RELOADED O43 - CFD: 2012/09/17 18:28:43 - [] D -- C:\ProgramData\Rockstar Games O43 - CFD: 2015/07/30 22:57:48 - [] D -- C:\ProgramData\RogueKiller O43 - CFD: 2015/06/26 16:41:38 - [] D -- C:\ProgramData\Skype O43 - CFD: 2015/07/27 18:37:59 - [] D -- C:\ProgramData\Spybot - Search & Destroy O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 2013/11/15 15:48:23 - [] D -- C:\ProgramData\Steam O43 - CFD: 2013/07/06 12:46:03 - [] D -- C:\ProgramData\Sun O43 - CFD: 2014/05/04 14:49:40 - [] D -- C:\ProgramData\Temp O43 - CFD: 2009/07/14 07:08:56 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 2011/08/27 11:47:39 - [] D -- C:\ProgramData\usb-set O43 - CFD: 2014/09/16 11:37:42 - [] D -- C:\ProgramData\WildTangent O43 - CFD: 2015/08/14 15:40:17 - [] D -- C:\ProgramData\WindSolutions O43 - CFD: 2011/08/26 20:53:34 - [0] D -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} O43 - CFD: 2011/07/04 17:32:02 - [] D -- C:\ProgramData\{E91883C8-8CDC-46A4-A45F-CB40EB82ED60} O43 - CFD: 2013/10/27 13:28:29 - [] D -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 2015/06/26 16:32:27 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 2015/06/26 16:48:35 - [] D -- C:\Program Files (x86)\Common Files\Apple O43 - CFD: 2012/10/24 11:11:23 - [] D -- C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 2013/05/04 18:32:01 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 2014/11/10 15:43:01 - [] HD -- C:\Program Files (x86)\Common Files\EAInstaller O43 - CFD: 2011/07/04 17:29:41 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 2012/10/24 11:41:11 - [] D -- C:\Program Files (x86)\Common Files\Intel Corporation O43 - CFD: 2013/09/25 13:58:16 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 2014/04/30 01:20:14 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 2011/07/04 17:30:52 - [] D -- C:\Program Files (x86)\Common Files\postureAgent O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 2015/04/15 22:37:25 - [] D -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 2009/07/14 05:20:08 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 2014/06/08 12:50:33 - [0] D -- C:\Program Files (x86)\Common Files\SWF Studio O43 - CFD: 2013/05/04 18:33:27 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 2011/07/04 17:44:03 - [] D -- C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 2014/06/08 12:53:18 - [0] SHD -- C:\Users\Maison\AppData\Roaming\.# O43 - CFD: 2014/10/19 15:52:34 - [] D -- C:\Users\Maison\AppData\Roaming\2K Sports O43 - CFD: 2014/09/08 16:54:44 - [] D -- C:\Users\Maison\AppData\Roaming\AdbDriverInstaller O43 - CFD: 2015/05/11 07:32:30 - [] D -- C:\Users\Maison\AppData\Roaming\Adobe O43 - CFD: 2014/10/09 22:29:21 - [] D -- C:\Users\Maison\AppData\Roaming\AnvSoft O43 - CFD: 2014/09/08 17:03:19 - [] D -- C:\Users\Maison\AppData\Roaming\ApkInstaller O43 - CFD: 2012/04/17 11:44:19 - [] D -- C:\Users\Maison\AppData\Roaming\Apple Computer O43 - CFD: 2011/08/26 18:19:35 - [] D -- C:\Users\Maison\AppData\Roaming\ATI O43 - CFD: 2013/09/27 12:59:26 - [] D -- C:\Users\Maison\AppData\Roaming\AVAST Software O43 - CFD: 2015/06/28 12:06:58 - [] D -- C:\Users\Maison\AppData\Roaming\com.adobe.example.widget O43 - CFD: 2015/06/28 11:55:08 - [] D -- C:\Users\Maison\AppData\Roaming\com.orange.widgets.adobeair.OrangeMeteo O43 - CFD: 2011/08/26 19:58:13 - [] D -- C:\Users\Maison\AppData\Roaming\CyberLink O43 - CFD: 2015/08/05 23:14:51 - [] D -- C:\Users\Maison\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 2014/06/08 07:50:02 - [] D -- C:\Users\Maison\AppData\Roaming\DarkSoulsII O43 - CFD: 2011/09/09 12:57:26 - [] D -- C:\Users\Maison\AppData\Roaming\Druide O43 - CFD: 2014/10/24 12:54:51 - [] D -- C:\Users\Maison\AppData\Roaming\dvdcss O43 - CFD: 2012/06/11 20:30:28 - [] D -- C:\Users\Maison\AppData\Roaming\ElephormDVDPlayer.8FC2E10752433BF8182FC825ABC2922D2AC381F8.1 O43 - CFD: 2014/09/08 17:08:39 - [] D -- C:\Users\Maison\AppData\Roaming\ERoot O43 - CFD: 2014/07/08 20:11:55 - [] D -- C:\Users\Maison\AppData\Roaming\fltk.org O43 - CFD: 2014/07/08 20:08:00 - [] D -- C:\Users\Maison\AppData\Roaming\Garmin O43 - CFD: 2014/07/08 20:11:58 - [] D -- C:\Users\Maison\AppData\Roaming\gmaptool.eu O43 - CFD: 2011/08/26 18:52:21 - [] D -- C:\Users\Maison\AppData\Roaming\Hewlett-Packard O43 - CFD: 2015/02/13 20:56:43 - [] D -- C:\Users\Maison\AppData\Roaming\HideMe O43 - CFD: 2014/09/16 11:44:00 - [] D -- C:\Users\Maison\AppData\Roaming\hpqLog O43 - CFD: 2011/08/28 07:25:44 - [] D -- C:\Users\Maison\AppData\Roaming\HpUpdate O43 - CFD: 2014/06/26 11:48:33 - [] D -- C:\Users\Maison\AppData\Roaming\I2P O43 - CFD: 2013/03/13 14:36:41 - [] D -- C:\Users\Maison\AppData\Roaming\Identities O43 - CFD: 2015/01/18 07:25:05 - [] D -- C:\Users\Maison\AppData\Roaming\ihelper O43 - CFD: 2012/10/24 11:40:08 - [] D -- C:\Users\Maison\AppData\Roaming\Intel Corporation O43 - CFD: 2014/05/01 07:10:34 - [] D -- C:\Users\Maison\AppData\Roaming\Lavasoft O43 - CFD: 2013/09/25 14:39:14 - [] D -- C:\Users\Maison\AppData\Roaming\LavasoftStatistics O43 - CFD: 2011/07/04 17:42:36 - [] D -- C:\Users\Maison\AppData\Roaming\Macromedia O43 - CFD: 2014/05/08 10:46:38 - [0] D -- C:\Users\Maison\AppData\Roaming\Malwarebytes O43 - CFD: 2010/11/21 09:16:41 - [0] D -- C:\Users\Maison\AppData\Roaming\Media Center Programs O43 - CFD: 2015/06/07 08:27:31 - [] SD -- C:\Users\Maison\AppData\Roaming\Microsoft O43 - CFD: 2014/05/09 08:07:38 - [] D -- C:\Users\Maison\AppData\Roaming\Milestone O43 - CFD: 2011/08/26 18:58:12 - [] D -- C:\Users\Maison\AppData\Roaming\Mozilla O43 - CFD: 2015/09/12 08:27:34 - [] D -- C:\Users\Maison\AppData\Roaming\Orange O43 - CFD: 2015/09/12 08:29:47 - [] D -- C:\Users\Maison\AppData\Roaming\Orange-France O43 - CFD: 2012/11/03 10:25:11 - [] D -- C:\Users\Maison\AppData\Roaming\Origin O43 - CFD: 2013/04/18 15:22:49 - [] D -- C:\Users\Maison\AppData\Roaming\PhotoFiltre O43 - CFD: 2014/10/09 22:22:27 - [] D -- C:\Users\Maison\AppData\Roaming\Real O43 - CFD: 2011/08/26 22:04:34 - [] D -- C:\Users\Maison\AppData\Roaming\RealHideIP O43 - CFD: 2014/10/09 20:22:09 - [] D -- C:\Users\Maison\AppData\Roaming\RealNetworks O43 - CFD: 2013/07/06 15:20:11 - [] D -- C:\Users\Maison\AppData\Roaming\redsn0w O43 - CFD: 2015/06/26 16:42:00 - [] D -- C:\Users\Maison\AppData\Roaming\Skype O43 - CFD: 2014/09/22 11:59:50 - [] D -- C:\Users\Maison\AppData\Roaming\Steam O43 - CFD: 2014/06/08 12:51:33 - [] D -- C:\Users\Maison\AppData\Roaming\T2ViewerJVM_250 O43 - CFD: 2015/06/28 15:33:11 - [] D -- C:\Users\Maison\AppData\Roaming\Teiron O43 - CFD: 2014/07/04 15:13:02 - [] D -- C:\Users\Maison\AppData\Roaming\ThinkSky O43 - CFD: 2014/09/17 15:08:17 - [] D -- C:\Users\Maison\AppData\Roaming\Thunderbird O43 - CFD: 2012/07/14 22:01:49 - [] D -- C:\Users\Maison\AppData\Roaming\Trine2 O43 - CFD: 2015/10/13 14:09:42 - [] D -- C:\Users\Maison\AppData\Roaming\uTorrent O43 - CFD: 2015/09/30 18:45:50 - [] D -- C:\Users\Maison\AppData\Roaming\vlc O43 - CFD: 2014/09/16 11:37:39 - [] D -- C:\Users\Maison\AppData\Roaming\WildTangent O43 - CFD: 2012/10/24 10:14:47 - [] D -- C:\Users\Maison\AppData\Roaming\WinBatch O43 - CFD: 2015/08/14 15:40:22 - [] D -- C:\Users\Maison\AppData\Roaming\WindSolutions O43 - CFD: 2011/08/27 12:48:30 - [] D -- C:\Users\Maison\AppData\Roaming\WinPatrol O43 - CFD: 2011/08/26 21:10:37 - [] D -- C:\Users\Maison\AppData\Roaming\WinRAR O43 - CFD: 2015/10/13 14:09:20 - [] D -- C:\Users\Maison\AppData\Roaming\ZHP O43 - CFD: 2011/09/10 13:34:37 - [] D -- C:\Users\Maison\AppData\Local\28050 O43 - CFD: 2013/08/28 17:57:19 - [] D -- C:\Users\Maison\AppData\Local\4A Games O43 - CFD: 2014/12/17 07:58:15 - [] D -- C:\Users\Maison\AppData\Local\Adobe O43 - CFD: 2011/08/26 20:52:41 - [] D -- C:\Users\Maison\AppData\Local\Apple O43 - CFD: 2012/06/08 23:01:48 - [] D -- C:\Users\Maison\AppData\Local\Apple Computer O43 - CFD: 2011/08/26 18:13:53 - [0] SHD -- C:\Users\Maison\AppData\Local\Application Data O43 - CFD: 2012/06/10 09:46:46 - [] D -- C:\Users\Maison\AppData\Local\Apps O43 - CFD: 2011/08/26 18:19:35 - [] D -- C:\Users\Maison\AppData\Local\ATI O43 - CFD: 2013/09/16 16:34:38 - [] D -- C:\Users\Maison\AppData\Local\CAPCOM O43 - CFD: 2012/09/17 19:05:25 - [] D -- C:\Users\Maison\AppData\Local\Chromium O43 - CFD: 2014/09/16 15:12:35 - [] D -- C:\Users\Maison\AppData\Local\CrashRpt =>.Superfluous.CrashReports O43 - CFD: 2015/07/21 08:46:53 - [] D -- C:\Users\Maison\AppData\Local\Diagnostics O43 - CFD: 2013/07/27 15:40:09 - [] D -- C:\Users\Maison\AppData\Local\dxhr O43 - CFD: 2015/06/28 12:32:13 - [] D -- C:\Users\Maison\AppData\Local\Eggiz O43 - CFD: 2015/07/03 16:33:00 - [0] D -- C:\Users\Maison\AppData\Local\ElevatedDiagnostics O43 - CFD: 2015/06/26 10:44:30 - [0] SHD -- C:\Users\Maison\AppData\Local\EmieBrowserModeList O43 - CFD: 2015/06/26 10:44:30 - [0] SHD -- C:\Users\Maison\AppData\Local\EmieSiteList O43 - CFD: 2015/06/26 10:44:30 - [0] SHD -- C:\Users\Maison\AppData\Local\EmieUserList O43 - CFD: 2013/06/04 13:42:18 - [] D -- C:\Users\Maison\AppData\Local\FLT O43 - CFD: 2014/07/08 20:08:02 - [] D -- C:\Users\Maison\AppData\Local\Garmin O43 - CFD: 2014/07/08 20:07:53 - [] D -- C:\Users\Maison\AppData\Local\GARMIN_Corp O43 - CFD: 2015/06/03 06:16:35 - [] D -- C:\Users\Maison\AppData\Local\GWX O43 - CFD: 2011/08/26 18:17:56 - [] D -- C:\Users\Maison\AppData\Local\Hewlett-Packard O43 - CFD: 2011/08/26 18:18:36 - [] D -- C:\Users\Maison\AppData\Local\Hewlett-Packard_Company O43 - CFD: 2011/08/26 18:13:53 - [0] SHD -- C:\Users\Maison\AppData\Local\Historique O43 - CFD: 2014/01/24 22:28:13 - [] D -- C:\Users\Maison\AppData\Local\IM O43 - CFD: 2015/09/12 08:27:49 - [] D -- C:\Users\Maison\AppData\Local\Le Cloud Orange O43 - CFD: 2013/07/06 11:04:35 - [] D -- C:\Users\Maison\AppData\Local\libimobiledevice O43 - CFD: 2012/10/23 10:35:36 - [0] D -- C:\Users\Maison\AppData\Local\Logitech-LS O43 - CFD: 2012/06/21 06:21:18 - [] D -- C:\Users\Maison\AppData\Local\Macromedia O43 - CFD: 2015/06/07 08:27:31 - [] D -- C:\Users\Maison\AppData\Local\Microsoft O43 - CFD: 2012/04/10 13:30:58 - [] D -- C:\Users\Maison\AppData\Local\Microsoft Games O43 - CFD: 2011/08/26 20:25:11 - [] D -- C:\Users\Maison\AppData\Local\Microsoft Help O43 - CFD: 2013/09/20 05:34:09 - [] D -- C:\Users\Maison\AppData\Local\Mozilla O43 - CFD: 2015/09/09 16:31:19 - [] D -- C:\Users\Maison\AppData\Local\Mozilla Firefox O43 - CFD: 2012/11/03 10:25:08 - [] D -- C:\Users\Maison\AppData\Local\Origin O43 - CFD: 2015/07/03 23:53:14 - [0] D -- C:\Users\Maison\AppData\Local\pangu O43 - CFD: 2011/08/26 18:18:36 - [0] D -- C:\Users\Maison\AppData\Local\PDFC O43 - CFD: 2013/03/13 08:48:51 - [] D -- C:\Users\Maison\AppData\Local\Programs O43 - CFD: 2013/07/27 13:38:01 - [] D -- C:\Users\Maison\AppData\Local\PunkBuster O43 - CFD: 2011/08/26 18:17:54 - [] D -- C:\Users\Maison\AppData\Local\RemEngine O43 - CFD: 2013/05/23 10:39:14 - [] D -- C:\Users\Maison\AppData\Local\SKIDROW O43 - CFD: 2015/06/26 16:41:45 - [] D -- C:\Users\Maison\AppData\Local\Skype O43 - CFD: 2014/06/24 14:44:49 - [] D -- C:\Users\Maison\AppData\Local\Skyrim O43 - CFD: 2014/07/01 13:11:46 - [] D -- C:\Users\Maison\AppData\Local\Sniper3 O43 - CFD: 2012/07/15 23:47:14 - [] D -- C:\Users\Maison\AppData\Local\SniperV2 O43 - CFD: 2011/08/26 19:12:50 - [] D -- C:\Users\Maison\AppData\Local\Sunbelt Software O43 - CFD: 2015/10/13 14:08:44 - [] D -- C:\Users\Maison\AppData\Local\Temp O43 - CFD: 2011/08/26 18:13:53 - [0] SHD -- C:\Users\Maison\AppData\Local\Temporary Internet Files O43 - CFD: 2014/09/17 15:08:18 - [] D -- C:\Users\Maison\AppData\Local\Thunderbird O43 - CFD: 2013/07/27 12:00:21 - [] D -- C:\Users\Maison\AppData\Local\Ubisoft Game Launcher O43 - CFD: 2011/09/04 11:54:12 - [] D -- C:\Users\Maison\AppData\Local\VirtualStore O43 - CFD: 2014/04/25 05:20:36 - [] D -- C:\Users\Maison\AppData\Local\Vistaprint Livres photo O43 - CFD: 2015/01/12 13:22:37 - [] D -- C:\Users\Maison\AppData\Local\Windows Live O43 - CFD: 2013/07/26 20:40:51 - [0] D -- C:\Users\Maison\AppData\Local\{21BA2752-833C-4922-A008-3A90EFF050BB} O43 - CFD: 2015/06/28 12:59:29 - [0] D -- C:\Users\Maison\AppData\Local\{29B0545D-92CF-4ADB-B91F-6FC31A18A604} O43 - CFD: 2015/09/01 20:58:11 - [0] D -- C:\Users\Maison\AppData\Local\{4EDE18A5-5166-4BB2-A4FB-D50D97C34927} O43 - CFD: 2015/01/12 13:23:00 - [0] D -- C:\Users\Maison\AppData\Local\{7153FE92-7DF6-47EB-8847-ED84DDA670B9} O43 - CFD: 2013/07/12 15:51:03 - [0] D -- C:\Users\Maison\AppData\Local\{7A8B8F50-3E70-4FEA-AC47-CE2FBBC9320B} O43 - CFD: 2012/10/15 18:03:32 - [0] D -- C:\Users\Maison\AppData\Local\{803970E5-DF33-46F8-98F8-339113F43CA3} O43 - CFD: 2014/04/26 10:26:06 - [0] D -- C:\Users\Maison\AppData\Local\{8549CF92-EAB1-44B2-B3C6-58AF78FA8575} O43 - CFD: 2012/12/25 16:39:20 - [0] D -- C:\Users\Maison\AppData\Local\{922F598C-EC67-43A8-8F71-919B04EF8DEF} O43 - CFD: 2012/06/11 23:07:35 - [] D -- C:\Users\Maison\AppData\Local\{99D5BFA2-767C-434A-83CF-613CC6D36C3F} O43 - CFD: 2015/01/15 22:59:21 - [0] D -- C:\Users\Maison\AppData\Local\{CD9C1D0A-2749-4283-A4F9-03338C782406} O43 - CFD: 2012/10/15 18:03:28 - [0] D -- C:\Users\Maison\AppData\Local\{E92B1234-4F74-4E6A-A20D-AEA42C9DBF17} O43 - CFD: 2014/08/04 15:48:51 - [0] D -- C:\Users\Maison\AppData\Local\{EDBCEC44-1C78-4B35-A2CB-D92042B0A444} O43 - CFD: 2013/05/09 08:35:19 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run O43 - CFD: 2009/07/14 06:54:32 - [] RD -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 2015/08/13 04:22:25 - [] RD -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 2014/10/10 12:54:53 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Compex O43 - CFD: 2012/10/15 23:22:26 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CopyTrans Suite O43 - CFD: 2014/06/30 22:50:31 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freenet O43 - CFD: 2013/04/17 22:28:49 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 2015/02/13 20:56:33 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HideMe O43 - CFD: 2013/07/06 16:43:29 - [0] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ipswDownloader O43 - CFD: 2015/09/12 08:27:45 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Le Cloud d'Orange - Transfert de fichiers O43 - CFD: 2009/07/14 06:49:38 - [] RD -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 2015/09/12 08:27:35 - [0] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My Application O43 - CFD: 2013/05/09 08:35:19 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Portable Programs O43 - CFD: 2015/08/13 04:22:25 - [] RD -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 2013/07/27 11:38:51 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft O43 - CFD: 2014/04/24 12:35:05 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vistaprint Livres photo O43 - CFD: 2015/06/26 16:38:53 - [] D -- C:\Users\Maison\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 0s O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL © O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL © O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL © O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll © O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll © O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll © ---\\ Liste des pilotes du système (78) - 6s O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] © O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] © O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] © O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] © O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] © O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] © O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] © O58 - SDL:2012/05/17 13:01:08 A . (.AnvSoft Inc. - AnvSoft Virtual Audio Device.) -- C:\Windows\System32\drivers\anvsnddrv.sys [33872] O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] © O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] © O58 - SDL:2015/08/07 12:33:41 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [28656] © O58 - SDL:2015/08/07 12:33:41 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [90968] © O58 - SDL:2015/08/07 12:33:40 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [93528] © O58 - SDL:2015/08/07 12:33:41 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [65224] © O58 - SDL:2015/08/14 00:34:12 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [1048344] © O58 - SDL:2015/08/07 12:33:41 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [447944] © O58 - SDL:2015/08/07 12:33:41 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [150672] © O58 - SDL:2015/08/07 12:33:41 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [274808] © O58 - SDL:2013/07/05 10:40:38 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdW76.sys [96256] © O58 - SDL:2013/10/08 15:58:42 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [12534784] © O58 - SDL:2013/10/08 14:27:46 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [619008] © O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] © O58 - SDL:2011/12/12 17:42:00 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\Windows\System32\drivers\bcmwlhigh664.sys [1256192] © O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] © O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] © O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] © O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] © O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] © O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] © O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] © O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] © O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] © O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] © O58 - SDL:2012/08/21 13:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240] © O58 - SDL:2013/09/25 14:32:56 A . (.GFI Software - GFI Boot Time Operations Driver.) -- C:\Windows\System32\drivers\gfibto.sys [14456] O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] © O58 - SDL:2012/07/02 15:16:02 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [62784] © O58 - SDL:2010/11/21 05:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] © O58 - SDL:2011/11/30 03:40:32 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [568600] © O58 - SDL:2012/09/01 18:01:56 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStorA.sys [647736] © O58 - SDL:2012/09/01 18:01:56 A . (.Intel Corporation - Intel Rapid Storage Technology Filter drive.) -- C:\Windows\System32\drivers\iaStorF.sys [28216] © O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] © O58 - SDL:2009/06/10 22:37:05 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [6108416] © O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] © O58 - SDL:2011/05/17 16:44:46 A . (.http://libusb-win32.sourceforge.net - LibUSB-Win32 - Kernel Driver.) -- C:\Windows\System32\drivers\libusb0.sys [44480] O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] © O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] © O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] © O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] © O58 - SDL:2015/06/18 08:41:40 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [25816] © O58 - SDL:2015/06/18 08:41:44 A . (.Malwarebytes Corporation - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [109272] © O58 - SDL:2015/07/31 14:14:45 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [113880] © O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] © O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] © O58 - SDL:2015/06/18 08:41:56 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [63704] © O58 - SDL:2013/07/25 16:53:46 A . (.Apple Inc. - Apple Mobile Device Ethernet.) -- C:\Windows\System32\drivers\netaapl64.sys [23040] © O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] © O58 - SDL:2010/02/03 11:21:56 A . (.CACE Technologies, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [47632] © O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] © O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] © O58 - SDL:2007/08/08 22:40:18 A . (.Intellon, Inc. - PCAUSA NDIS 5.0 SPR Protocol Driver.) -- C:\Windows\System32\drivers\PLCND532.sys [26656] O58 - SDL:2007/08/08 22:39:44 A . (.Intellon, Inc. - PCAUSA NDIS 5.0 SPR Protocol Driver (AMD64).) -- C:\Windows\System32\drivers\PLCND564.sys [40992] O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] © O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] © O58 - SDL:2007/05/14 17:06:18 A . (.Research In Motion Limited - BlackBerry Device Driver.) -- C:\Windows\System32\drivers\RimUsb_AMD64.sys [27520] © O58 - SDL:2012/06/12 22:00:48 A . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Dri.) -- C:\Windows\System32\drivers\Rt64win7.sys [726160] © O58 - SDL:2012/06/19 16:54:20 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [4065296] © O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] © O58 - SDL:2009/07/14 02:00:40 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\serial.sys [94208] © O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] © O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] © O58 - SDL:2013/10/01 11:12:22 A . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\drivers\sptd.sys [564824] © O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] © O58 - SDL:2015/01/22 17:16:38 A . (.BitDefender S.R.L. - Trufos Kernel Module.) -- C:\Windows\System32\drivers\Trufos.sys [452040] © O58 - SDL:2014/07/28 14:52:00 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [54784] © O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] © O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] © O58 - SDL:2015/04/30 00:01:06 A . (.Western Digital Technologies - WD SCSI Architecture Model (SAM) driver.) -- C:\Windows\System32\drivers\wdcsam64.sys [23200] © ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (2) - 30s O61 - LFC: 2015/10/11 16:22:47 A . (..) -- C:\Users\Maison\AppData\Roaming\Microsoft\UProof\CMAdj.12.bin [234] O61 - LFC: 2015/10/13 06:08:51 A . (..) -- C:\Users\Maison\AppData\Local\ATI\ACE\Manifest.Bin [28362] ---\\ Associations Shell Spawning (11) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe © O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe © O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe © O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe © O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe © ---\\ Menu de démarrage Internet (8) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe © O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © ---\\ Recherche d'infection sur les navigateurs (3) - 7s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {371D1C85-9A03-4FA2-B9B3-F25F75332819} - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKCU] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} - (Google) - http://www.google.com/ ---\\ Enumère les services démarrés par Svchost (32) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] © O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] © O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] © O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] © O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] © O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] © O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680960] © O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] © O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] © O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] © O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] © O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] © O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] © O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] © O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2606080] © O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] © O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] © O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] © O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] © O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] © O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] © O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] © O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] © O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] © O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] © O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] © O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] © O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] © O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] © O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] © O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] © O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] © ---\\ Liste des exceptions du parefeu Windows (60) - 6s O87 - FAEL: "TCP Query User{80DBE103-4EAF-4D42-8823-4BBA0C37E27A}C:\program files (x86)\emule\emule.exe" [In-None-P6-TRUE] .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe O87 - FAEL: "UDP Query User{DF936155-ABCB-44E8-BA60-E1EDC3D1D016}C:\program files (x86)\emule\emule.exe" [In-None-P17-TRUE] .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe O87 - FAEL: "TCP Query User{147D06FA-DBF3-44B7-9432-F23286441639}C:\program files (x86)\emule\emule.exe" [In-None-P6-TRUE] .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe O87 - FAEL: "UDP Query User{D9EBB914-03F1-4329-AA2F-8062AB84E68B}C:\program files (x86)\emule\emule.exe" [In-None-P17-TRUE] .(.http://www.emule-project.net - eMule.) -- C:\program files (x86)\emule\emule.exe O87 - FAEL: "TCP Query User{0ED97E40-2E62-4ED3-AA6A-3DC4F4BA1304}C:\program files (x86)\bethesda softworks\brink\brink.exe" [In-None-P6-TRUE] .(.Splash Damage, Ltd. - Brink.) -- C:\program files (x86)\bethesda softworks\brink\brink.exe O87 - FAEL: "UDP Query User{B2B748BC-2C93-49D1-8823-6AD5466BE2F3}C:\program files (x86)\bethesda softworks\brink\brink.exe" [In-None-P17-TRUE] .(.Splash Damage, Ltd. - Brink.) -- C:\program files (x86)\bethesda softworks\brink\brink.exe O87 - FAEL: "{1FB14519-B112-4D07-A9D6-4E2D4E3F5E37}" [In-None-P6-TRUE] .(.CAPCOM U.S.A, INC http://www.capcom.com/us - Resident Evil: Operation Raccoon City.) -- C:\Program Files (x86)\Capcom\Resident Evil Operation Raccoon City\RaccoonCity.exe O87 - FAEL: "{EA029D67-1AB4-425C-896D-570F3C8E8590}" [In-None-P17-TRUE] .(.CAPCOM U.S.A, INC http://www.capcom.com/us - Resident Evil: Operation Raccoon City.) -- C:\Program Files (x86)\Capcom\Resident Evil Operation Raccoon City\RaccoonCity.exe O87 - FAEL: "TCP Query User{C68198B6-F048-4C0D-9673-5591037AE5EA}C:\program files (x86)\activision\call of duty modern warfare 3\iw5mp_server.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\activision\call of duty modern warfare 3\iw5mp_server.exe O87 - FAEL: "UDP Query User{AD94AC74-5C73-4671-B21F-5CCEA84D40EE}C:\program files (x86)\activision\call of duty modern warfare 3\iw5mp_server.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\activision\call of duty modern warfare 3\iw5mp_server.exe O87 - FAEL: "TCP Query User{54246DC8-E9A2-477A-8AA0-FAB1D06EA355}L:\perso\logiciels\utilitaires\office 2013\kmsmicro v3.10\qemu\qemu.exe" [In-None-P6-TRUE] .(...) -- L:\perso\logiciels\utilitaires\office 2013\kmsmicro v3.10\qemu\qemu.exe (.not file.) O87 - FAEL: "UDP Query User{56425AB4-E03D-454C-8AE5-FE2C30A74716}L:\perso\logiciels\utilitaires\office 2013\kmsmicro v3.10\qemu\qemu.exe" [In-None-P17-TRUE] .(...) -- L:\perso\logiciels\utilitaires\office 2013\kmsmicro v3.10\qemu\qemu.exe (.not file.) O87 - FAEL: "TCP Query User{CC3E96B7-0269-42E6-A0EC-4FD9E14C9BA5}C:\program files (x86)\agb-gt\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\agb-gt\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe O87 - FAEL: "UDP Query User{93DEAC53-8AAB-425B-AE83-3060B1F1DD56}C:\program files (x86)\agb-gt\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\agb-gt\sniper ghost warrior 2\bin32\sniperghostwarrior2.exe O87 - FAEL: "{7108FC22-6FF1-4A10-AC76-9D3E68D92E87}" [Out-None-P17-TRUE] .(...) -- C:\Program Files (x86) (x86)\Rockstar Games\MaxPayne3\Updates\MP3_Launcher_1_13_0_0.exe (.not file.) O87 - FAEL: "{094CD362-9D75-451C-B56F-D9BD2786976B}" [Out-None-P17-TRUE] .(...) -- C:\Program Files (x86) (x86)\Rockstar Games\MaxPayne3\Updates\MP3_Patch_Update_1_0_0_17.exe (.not file.) O87 - FAEL: "{28EC1DA5-E510-4337-B07A-12A97A7DBBE9}" [In-None-P6-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe O87 - FAEL: "{959BC695-A90B-4F50-BE09-C5B40FD7A90C}" [In-None-P17-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe O87 - FAEL: "{6231FB31-F111-4157-A133-0DD68FA015BF}" [In-None-P6-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe O87 - FAEL: "{B639F153-043D-4019-A13A-310501B479E4}" [In-None-P17-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe O87 - FAEL: "{FD266CB8-25C6-4E8A-B25C-2AA5703D95AB}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\Blacklist_Launcher.exe O87 - FAEL: "{76AB5A1E-411E-4862-A64C-FD76C6D356FF}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\Blacklist_Launcher.exe O87 - FAEL: "{94920E9D-405F-47D0-BAF0-38CAA771FBB3}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_game.exe O87 - FAEL: "{6A655DED-A2BD-47F7-9DD5-033AC8883473}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_game.exe O87 - FAEL: "{78FB2D81-5BF3-49FF-BF18-A10CAFFF9C6D}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_DX11_game.exe O87 - FAEL: "{17FC3499-0CF9-4780-BB0A-3A5594EE7CC1}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_DX11_game.exe O87 - FAEL: "TCP Query User{1797A578-F2E6-449E-99EC-020AD8AF7719}C:\program files (x86)\wrc 4 fia world rally championship\wrc4.exe" [In-None-P6-TRUE] .(.Milestone S.r.l. - WRC 4.) -- C:\program files (x86)\wrc 4 fia world rally championship\wrc4.exe O87 - FAEL: "UDP Query User{3AD88F64-42EE-4BA7-BFCA-C10D3E2B6417}C:\program files (x86)\wrc 4 fia world rally championship\wrc4.exe" [In-None-P17-TRUE] .(.Milestone S.r.l. - WRC 4.) -- C:\program files (x86)\wrc 4 fia world rally championship\wrc4.exe O87 - FAEL: "TCP Query User{390D9432-FD81-4780-B309-4493285AB716}C:\program files (x86)\outlast\binaries\win64\olgame.exe" [In-None-P6-TRUE] .(.Red Barrels Inc. - Outlast.) -- C:\program files (x86)\outlast\binaries\win64\olgame.exe O87 - FAEL: "UDP Query User{16BD5248-895A-4CD7-BD30-E5E43B684815}C:\program files (x86)\outlast\binaries\win64\olgame.exe" [In-None-P17-TRUE] .(.Red Barrels Inc. - Outlast.) -- C:\program files (x86)\outlast\binaries\win64\olgame.exe O87 - FAEL: "TCP Query User{3ED335E7-68CE-4F16-9DAB-C7602B9E5596}C:\Program Files (x86)\wolfenstein the new order\wolfneworder_x64.exe" [In-None-P6-TRUE] .(.MachineGames - WolfNewOrder.) -- C:\Program Files (x86)\wolfenstein the new order\wolfneworder_x64.exe O87 - FAEL: "UDP Query User{1F656410-EB64-4097-95BE-4D8E64CB250A}C:\Program Files (x86)\wolfenstein the new order\wolfneworder_x64.exe" [In-None-P17-TRUE] .(.MachineGames - WolfNewOrder.) -- C:\Program Files (x86)\wolfenstein the new order\wolfneworder_x64.exe O87 - FAEL: "TCP Query User{9518490C-DC85-4260-834E-1FE0143C885E}C:\program files (x86)\eidos interactive\murdered - soul suspect\binaries\win64\murdered.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\eidos interactive\murdered - soul suspect\binaries\win64\murdered.exe O87 - FAEL: "UDP Query User{E4152E8B-DE94-477F-A42C-3EDCF6518056}C:\program files (x86)\eidos interactive\murdered - soul suspect\binaries\win64\murdered.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\eidos interactive\murdered - soul suspect\binaries\win64\murdered.exe O87 - FAEL: "TCP Query User{8D4AF1DE-C3B5-469D-B24C-5F6E7A19B3DC}C:\program files (x86)\ppöúêö\ihelper.exe" [In-None-P6-TRUE] .(.广州爱禾网络技术有限公司 - PP助手.) -- C:\program files (x86)\ppöúêö\ihelper.exe O87 - FAEL: "UDP Query User{66CEF4E3-B4C8-4DDD-A0BA-1E3174B67945}C:\program files (x86)\ppöúêö\ihelper.exe" [In-None-P17-TRUE] .(.广州爱禾网络技术有限公司 - PP助手.) -- C:\program files (x86)\ppöúêö\ihelper.exe O87 - FAEL: "TCP Query User{6C8F44D7-3C54-4E4F-8D3E-0C482332C62D}C:\program files (x86)\outlast\binaries\win64\olgame.exe" [In-None-P6-TRUE] .(.Red Barrels Inc. - Outlast.) -- C:\program files (x86)\outlast\binaries\win64\olgame.exe O87 - FAEL: "UDP Query User{EECB6875-092C-4D7A-A397-A43EF2D3EF83}C:\program files (x86)\outlast\binaries\win64\olgame.exe" [In-None-P17-TRUE] .(.Red Barrels Inc. - Outlast.) -- C:\program files (x86)\outlast\binaries\win64\olgame.exe O87 - FAEL: "{5F566CDF-6201-4BF2-B9D6-33E7CB751878}" [In-None-P6-FALSE] .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe O87 - FAEL: "{243C3C23-5AD9-4F4C-A7C5-6A1C8D9EC573}" [In-None-P17-FALSE] .(.IncrediMail, Ltd. - IncrediMail Content Importer.) -- C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe O87 - FAEL: "TCP Query User{41BFDB4D-0035-4C5A-820D-BE108F46B708}C:\program files (x86)\eidos interactive\murdered - soul suspect\binaries\win64\murdered.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\eidos interactive\murdered - soul suspect\binaries\win64\murdered.exe O87 - FAEL: "UDP Query User{9DF6DF96-7BC5-4334-BF0D-45371FC7CDD8}C:\program files (x86)\eidos interactive\murdered - soul suspect\binaries\win64\murdered.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\eidos interactive\murdered - soul suspect\binaries\win64\murdered.exe O87 - FAEL: "{6DAC94A8-6AF8-461B-B254-BA04C128F1CF}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe (.not file.) O87 - FAEL: "{6D6495CA-8632-4447-AA75-D90E1716EC1A}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe (.not file.) O87 - FAEL: "TCP Query User{DD649D36-3DBA-47B8-8F1E-75CA87364D46}C:\users\maison\appdata\local\hola\firefox\app\hola_plugin.exe" [In-None-P6-TRUE] .(...) -- C:\users\maison\appdata\local\hola\firefox\app\hola_plugin.exe (.not file.) O87 - FAEL: "UDP Query User{903577CC-3E35-4CD3-BD35-F7D536A77C93}C:\users\maison\appdata\local\hola\firefox\app\hola_plugin.exe" [In-None-P17-TRUE] .(...) -- C:\users\maison\appdata\local\hola\firefox\app\hola_plugin.exe (.not file.) O87 - FAEL: "{40096CC9-EADF-4F28-986D-CEFC7ADBA19A}" [In-None-P6-TRUE] .(...) -- C:\Users\Maison\AppData\Local\Hola\firefox\app\hola_plugin.exe (.not file.) O87 - FAEL: "{6055DE7B-F1FD-44D3-B630-B575304A72AC}" [In-None-P17-TRUE] .(...) -- C:\Users\Maison\AppData\Local\Hola\firefox\app\hola_plugin.exe (.not file.) O87 - FAEL: "{D6E1FD62-B88A-41B5-B33F-CADE91F7746F}" [In-None-P6-FALSE] .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe O87 - FAEL: "{9B9E237E-B3DF-47B4-A2E2-268088D84C0D}" [In-None-P17-FALSE] .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe O87 - FAEL: "{527B36B2-D90A-4254-9BD8-FC093DC3934C}" [In-None-P6-FALSE] .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe O87 - FAEL: "{F56EE27D-CE02-4AD8-8766-FCFBA0ACEF26}" [In-None-P17-FALSE] .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe O87 - FAEL: "{1235AFC3-E081-4642-8ABC-E291664340AD}" [In-None-P6-FALSE] .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe O87 - FAEL: "{F7EB5018-26D4-4504-8138-8A83B1067C0B}" [In-None-P17-FALSE] .(.IncrediMail, Ltd. - IncrediMail Tray Application.) -- C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe O87 - FAEL: "{95F179C4-BE1E-466C-8B67-A41C211C8647}" [In-None-P6-FALSE] .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe O87 - FAEL: "{0829FFDD-2048-4CB9-8C1E-E3CE4FC6E597}" [In-None-P17-FALSE] .(.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe O87 - FAEL: "TCP Query User{2DFF5906-F286-4D54-BBFC-784E2621E94F}C:\users\maison\appdata\roaming\utorrent\utorrent.exe" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\users\maison\appdata\roaming\utorrent\utorrent.exe O87 - FAEL: "UDP Query User{CEC77354-A893-426A-B54B-104765829F00}C:\users\maison\appdata\roaming\utorrent\utorrent.exe" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\users\maison\appdata\roaming\utorrent\utorrent.exe O87 - FAEL: "TCP Query User{B98F2B3C-7358-4E1D-AE95-AE4512FD5AB9}C:\users\maison\appdata\roaming\utorrent\utorrent.exe" [In-None-P6-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\users\maison\appdata\roaming\utorrent\utorrent.exe O87 - FAEL: "UDP Query User{95E8FE65-6E76-44E3-8F03-04CEE0FEE1BA}C:\users\maison\appdata\roaming\utorrent\utorrent.exe" [In-None-P17-TRUE] .(.BitTorrent Inc. - µTorrent.) -- C:\users\maison\appdata\roaming\utorrent\utorrent.exe ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (22) - 21s SR - Auto [2015/07/07 20:12:28] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe © SS - Demand [2015/09/22 21:12:26] [ 269000] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe © SR - Auto [2013/10/08 14:52:58] [ 239616] (AMD External Events Utility) . (.AMD.) - C:\Windows\system32\atiesrxx.exe © SS - Auto [2015/01/19 23:30:38] [ 77128] Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe © SR - Auto [2015/08/07 12:33:35] [ 146600] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe © SR - Auto [2011/08/30 23:05:32] [ 462184] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe © SS - Auto [2012/09/01 18:07:22] [ 14904] Technologie de stockage Intel(R) Rapid (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe © SR - Auto [2012/06/19 19:10:34] [ 634632] Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe © SR - Demand [2015/04/07 00:28:50] [ 643880] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe © SR - Auto [2012/07/19 10:00:30] [ 166720] Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe © SR - Auto [2015/06/24 19:14:38] [ 716664] Ad-Aware Service 11 (LavasoftAdAwareService11) . (...) - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.7.485.8398\AdAwareService.exe SR - Auto [2012/07/19 10:00:54] [ 277824] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe © SS - Demand [2012/10/28 09:54:06] [ 427976] Ma-Config Service (maconfservice) . (.CybelSoft.) - C:\Program Files\ma-config.com\x64\maconfservice.exe © SR - Auto [2015/06/18 08:39:46] [ 1871160] (MBAMScheduler) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe © SR - Auto [2015/06/18 08:39:50] [ 1133880] (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe © SS - Demand [2009/10/20 20:19:48] [ 117264] Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.CACE Technologies, Inc..) - C:\Program Files (x86)\WinPcap\rpcapd.exe © SS - Auto [2014/06/24 10:41:42] [ 1738168] Spybot-S&D 2 Scanner Service (SDScannerService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe © SR - Auto [2014/06/27 11:52:26] [ 2088408] Spybot-S&D 2 Updating Service (SDUpdateService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe © SR - Auto [2014/04/25 14:12:20] [ 171928] Spybot-S&D 2 Security Center Service (SDWSCService) . (.Safer-Networking Ltd..) - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe © SS - Auto [2015/06/03 16:42:38] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe © SR - Auto [2012/07/19 10:00:56] [ 365376] Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe © ---\\ Recherche de clés de registre Tracing (2) - 3s HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FLVPlayer_RASAPI32 =>PUP.Optional.FLVPlayer HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FLVPlayer_RASMANCS =>PUP.Optional.FLVPlayer ---\\ Scan Additionnel (7) - 0s HKCU\SOFTWARE\AppDataLow\Software\adawarebp =>PUP.Optional.ToolbarCleaner C:\Program Files (x86)\VShare =>PUP.Optional.Pugi C:\ProgramData\InstallMate =>PUP.Optional.Tarma C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS C:\Users\Maison\AppData\Local\CrashRpt =>.Superfluous.CrashReports HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FLVPlayer_RASAPI32 =>PUP.Optional.FLVPlayer HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\FLVPlayer_RASMANCS =>PUP.Optional.FLVPlayer ---\\ Récapitulatif des éléments trouvées sur votre station (6) - 0s http://www.nicolascoolman.fr/pup-toolbarcleaner/ =>PUP.Optional.ToolbarCleaner http://www.nicolascoolman.fr/parasite-pugi/ =>PUP.Optional.Pugi http://www.nicolascoolman.fr/pup-tarma/ =>PUP.Optional.Tarma http://www.nicolascoolman.fr/trojan-autokms/ =>HackTool.AutoKMS http://www.nicolascoolman.fr/blog =>.Superfluous.CrashReports http://www.nicolascoolman.fr/blog =>PUP.Optional.FLVPlayer ~ End of the scan, 73714 items in 135 seconds (1225)(0)()