Rapport de ZHPDiag v1.31.19 par Nicolas Coolman, Update du 06/09/2012
Run by Jonathan at 20/10/2015 15:14:57
Web site :  http://nicolascoolman.skyrock.com/
State : Problème connexion internet


---\\ Web Browser
MSIE: Internet Explorer v9.11.9600.18015
MFIE: Mozilla Firefox 41.0.2 v41.0.2 (Defaut)

---\\ Windows Product Information
~ Langage: Français
Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
~ Windows(R) 7, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 7QJB7
Windows License : OK
~ Windows Remaining Initializations Number : 2
Software Protection Service (Protection logicielle)  : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ System Information
~ Processor: Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 3000 MB (21% free)
System Restore: Activé (Enable)
System drive C: has 273 GB (46%) free of 583 GB

---\\ Logged in mode
~ Computer Name: JONATHAN-PC
~ User Name: Jonathan
~ All Users Names: Jonathan, HomeGroupUser$, Administrateur, 
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator

---\\ Environnement Variables
~ System Unit : C:\
~ %AppData% : C:\Users\Jonathan\AppData\Roaming\
~ %Desktop% : C:\Users\Jonathan\Desktop\
~ %Favorites% : C:\Users\Jonathan\Favorites\
~ %LocalAppData% : C:\Users\Jonathan\AppData\Local\
~ %StartMenu% : C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ DOS/Devices
C:\ Hard drive, Flash drive, Thumb drive (Free 273 Go of 583 Go)
D:\ CD-ROM drive (Not Inserted)



---\\ Security Center & Tools Informations
UAC deactivate by program
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime :  OK
~ Scan Security Center in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.) (.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.BD06D875FB79E92DAF724C91DE743AFA] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.16/09/2015 - 04:11:12.) -- C:\Windows\System32\wininet.dll [2487808]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2010 - 14:27:26.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.20/11/2010 - 10:19:21.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.20/11/2010 - 10:26:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.20/11/2010 - 11:43:43.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.43E1F4B0EFDC244D2A83995CCD7846F7] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.22/07/2015 - 17:45:48.) -- C:\Windows\system32\Drivers\MRxSmb.sys [159232]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.) (.20/11/2010 - 10:23:20.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.20/11/2010 - 11:52:35.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.) (.11/11/2014 - 02:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.20/11/2010 - 14:34:02.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Scan Generic Processes in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/61
~ Mes musiques (My Musics) : 3/344
~ Mes Videos (My Videos) : 1/191
~ Mes Favoris (My Favorites) : 1/18
~ Mes Documents (My Documents) : 1/654
~ Mon Bureau (My Desktop) : 1/74
~ Menu demarrer (Programs) : 1/28
~ Scan Hidden Files in 00mn 01s



---\\ Processus lancés
[MD5.5AF1E9600E3FF841E522703A4993ED0C] - (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe   [186904] [PID.1780]
[MD5.C25CA8B25132DAB46338C815C0F6ABCA] - (.Robert Misiak - ChronosXP.) -- C:\Program Files (x86)\ChronosXP\ChronosXP.exe   [599040] [PID.1920]
[MD5.C7A9C4FDCEA704A34A5997FE0A8A0A38] - (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe   [1194504] [PID.2828]
[MD5.F59723E50E23B1EA4A1D49A8971D4EE3] - (.Glarysoft Ltd - Glary Utilities 5.) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe   [795936] [PID.2324]
[MD5.123CE08362EE48BBA7F9F1D7EB50F24F] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe   [6134544] [PID.2808]
[MD5.3E04F1E482357B1FC8B088197C3D9FF8] - (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe   [1022152] [PID.3532]
[MD5.14DCA74CB34502CA919966F31FBB8B0D] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe   [377000] [PID.2468]
[MD5.91EADE0A0A24664F75955377EDF2E4E2] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe   [278184] [PID.3576]
[MD5.ED51CB30657A6C3217A03D1628FB9038] - (.Adobe Systems, Inc. - Adobe Flash Player 19.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe   [3425992] [PID.4052]
[MD5.E47457275305DCF57BD49018BEF00517] - (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\IEXPLORE.exe   [816744] [PID.4004]
[MD5.D24AFAF59806EA0CFA6DCE9C5E8224CB] - (.Eyeo GmbH - Adblock Plus Engine for Internet Explorer.) -- C:\Program Files (x86)\Adblock Plus for IE\AdblockPlusEngine.exe   [4719808] [PID.3604]
[MD5.4CE0626245E0F0AC4970AF913FB6964A] - (...) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe   [3764736] [PID.2400]
[MD5.11120878E5276B367E1A10FF8C9B595B] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe   [146600] [PID.]
[MD5.34400005DE52842C4D6D4EE978B4D7CE] - (.Adobe Systems Incorporated - Adobe Photoshop Elements 8.0 (component).) -- c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe   [169312] [PID.]
[MD5.FC5B75CA6A1DA31EDD4F8D53F5540B98] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe   [81088] [PID.]
[MD5.7548066DF68A8A1A56B043359F915F37] - (.Intel Corporation - RAID Monitor.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe   [354840] [PID.]
~ Scan Processes Running in 00mn 00s



---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Preferences
~ Scan Google Browser in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions  (P2,M0,M1,M2,M3)
M0 - MFSP: prefs.js [Jonathan - 0apl404x.default] http://www.google.fr
M0 - MFSP: prefs.js [Jonathan - bd0rx1b1.default-1434397015107] http://www.google.com
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.40728.0.) -- c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.1] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Users\Jonathan\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll
P2 - FPN: [HKCU] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Users\Jonathan\AppData\Local\Google\Update\1.3.28.15\npGoogleUpdate3.dll
~ Scan Firefox Browser in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: (no name) [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Google Inc. - Google Update.) (No version) -- (.not file.)
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 1
~ Scan IE Browser in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Scan Proxy management in 00mn 00s



---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Scan Keys in 00mn 00s



---\\ Redirection du fichier Hosts (O1)
~ Le fichier hosts est sain (The hosts file is clean).
~ Scan Hosts File in 00mn 00s
~ Nombre de lignes (Lines number): 21



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: (no name) [64Bits] - {5C255C8A-E604-49b4-9D64-90988571CECB} Clé orpheline
O2 - BHO: (no name) [64Bits] - {83FF80F4-8C74-4b80-B5BA-C8DDD434E5C4} Clé orpheline
O2 - BHO: (no name) [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} Clé orpheline
O2 - BHO: (no name) [64Bits] - {FFCB3198-32F3-4E8B-9539-4324694ED664} Clé orpheline
~ Scan BHO in 00mn 00s



---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar: (no name) [64Bits] - [HKLM]{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} . (...) --  (.not file.)
~ Scan Toolbar in 00mn 00s



---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKLM\..\Run: [IAAnotif] . (.Intel Corporation - Event Monitor User Notification Tool.) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) 
O4 - HKCU\..\Run: [ChronosXP] . (.Robert Misiak - ChronosXP.) -- C:\Program Files (x86)\ChronosXP\ChronosXP.exe 
O4 - HKCU\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Jonathan\AppData\Local\Google\Update\GoogleUpdate.exe 
O4 - HKCU\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe 
O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe 
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe 
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe 
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe 
O4 - HKUS\S-1-5-21-2876310697-1504902648-3380367184-1000\..\Run: [ChronosXP] . (.Robert Misiak - ChronosXP.) -- C:\Program Files (x86)\ChronosXP\ChronosXP.exe 
O4 - HKUS\S-1-5-21-2876310697-1504902648-3380367184-1000\..\Run: [Google Update] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Jonathan\AppData\Local\Google\Update\GoogleUpdate.exe 
O4 - HKUS\S-1-5-21-2876310697-1504902648-3380367184-1000\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe 
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe 
~ Scan Application in 00mn 00s



---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Jonathan\Desktop\Internet Explorer.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\Jonathan\Desktop\OpenOffice.org 3.3.lnk . (.OpenOffice.org.)  -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
O4 - Global Startup: C:\Users\Jonathan\Desktop\Orion-Astro 2.LNK . (.Cabinet d'Astrologie J.-F. Faccin.)  -- C:\Program Files (x86)\orion-astro 2\orionastro2.exe
O4 - Global Startup: C:\Users\Jonathan\Desktop\Skype.lnk . (.Skype Technologies S.A..)  -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O4 - Global Startup: C:\Users\Jonathan\Desktop\Éteindre.lnk . (.Microsoft Corporation.)  -- C:\Windows\System32\shutdown.exe
O4 - Global Startup: C:\Users\Jonathan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Glary Utilities 5.lnk . (.Glarysoft Ltd.)  -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
O4 - Global Startup: C:\Users\Jonathan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.)  -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
~ Scan Global Startup in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ Scan IE Control Panel in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
~ Scan Winsock in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{AF9D7567-9D2D-45A9-9FD2-CA6C88D89C90}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CCS\Services\Tcpip\..\{F785637E-BB7C-48BD-8F86-880598D2720B}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{AF9D7567-9D2D-45A9-9FD2-CA6C88D89C90}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\..\{F785637E-BB7C-48BD-8F86-880598D2720B}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{AF9D7567-9D2D-45A9-9FD2-CA6C88D89C90}: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\..\{F785637E-BB7C-48BD-8F86-880598D2720B}: DhcpNameServer = 212.27.40.241 212.27.40.240
~ Scan Domain in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\system32\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\msvidctl.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll
~ Scan Protocole Additionnel in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Scan Winlogon in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ Scan SSODL in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Active File Monitor V8 (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated - Adobe Photoshop Elements 8.0 (component).) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) . (.Intel Corporation - RAID Monitor.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service:  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
~ Scan Services in 00mn 00s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) -  (.not file.)
~ Scan Desktop Component in 00mn 00s



---\\ BootExecute (O34)
O34 - HKLM BootExecute: (autocheck autochk * ) - File not found
~ Scan Keys in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GlaryInitialize 5.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2876310697-1504902648-3380367184-1000Core.job
O39 - APT:Automatic Planified Task  - C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2876310697-1504902648-3380367184-1000UA.job
[MD5.C6D147C12C424373B016C0AB0A6C61EB] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.D9E35285D8CCE58241038E5B23507DAB] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
[MD5.816B4925CC73512A2DEBF625DABCCAB6] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
[MD5.398F51B05F0FF8D5264E04520D2194F3] [APT] [GlaryInitialize 5] (.Glarysoft Ltd.) -- C:\Program Files (x86)\Glary Utilities 5\Initialize.exe
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskUserS-1-5-21-2876310697-1504902648-3380367184-1000Core] (.Google Inc..) -- C:\Users\Jonathan\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskUserS-1-5-21-2876310697-1504902648-3380367184-1000UA] (.Google Inc..) -- C:\Users\Jonathan\AppData\Local\Google\Update\GoogleUpdate.exe
[MD5.F59723E50E23B1EA4A1D49A8971D4EE3] [APT] [GU5SkipUAC] (.Glarysoft Ltd.) -- C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
[MD5.00000000000000000000000000000000] [APT] [RealPlayerRealUpgradeLogonTaskS-1-5-21-2876310697-1504902648-3380367184-1000] (...) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [RealPlayerRealUpgradeScheduledTaskS-1-5-21-2876310697-1504902648-3380367184-1000] (...) -- C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe (.not file.)
[MD5.14DCA74CB34502CA919966F31FBB8B0D] [APT] [{35A9354E-E98D-4FA1-B57F-D88F41140401}] (.Mozilla Corporation.) -- c:\program files (x86)\mozilla firefox\firefox.exe
[MD5.00000000000000000000000000000000] [APT] [{84302565-1C37-4615-885F-9EB0D27D8FD3}] (...) -- C:\Users\Jonathan\Desktop\vanBasco's Karaoke Player\uninst.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{E3D0FA73-378C-4CDB-A46F-9846A4FA4C5E}] (...) -- C:\Users\Jonathan\Documents\vanBasco's Karaoke Player\uninst.exe (.not file.)
[MD5.C4EC9656B85914FC5B4BF4C1A5406857] [APT] [{F0E2B7D4-A397-4796-A873-16789D81FD9E}] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\aswRundll.exe
~ Scan Scheduled Task in 00mn 04s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll
O40 - ASIC: Disable SSL3 [64Bits] - {7D715857-A67C-4C2F-A929-038448584D63} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Scan Active Setup in 00mn 00s



---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver:  (aswKbd) . (.AVAST Software - avast! Keyboard Filter Driver.) - C:\Windows\system32\drivers\aswKbd.sys
O41 - Driver:  (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver:  (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver:  (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\system32\DRIVERS\blbdrive.sys
O41 - Driver:  (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver:  (GUBootStartup) . (.Glarysoft Ltd - The driver for the Startup Manager tool.) - C:\Windows\system32\drivers\GUBootStartup.sys
O41 - Driver:  (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver:  (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver:  (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver:  (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\System32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver:  (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys
~ Scan Drivers in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: Acrobat.com - (.Adobe Systems Incorporated.) [HKLM] -- {287ECFA4-719A-2143-A09B-D6A12DE54E40}
O42 - Logiciel: Adblock Plus pour IE (32-bits) - (.Eyeo GmbH.) [HKLM] -- {BF2AAD9A-B9B8-4806-AF11-8C28EF98893A}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {77D28FF5-242F-488A-8215-937D6A4D69E0}
O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Photoshop Elements 8.0 - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Photoshop Elements 8.0
O42 - Logiciel: Adobe Reader XI (11.0.12) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Shockwave Player 12.0 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Advertising Center - (.Nero AG.) [HKLM] -- {B2EC4A38-B545-4A00-8214-13FE0E915E6D}
O42 - Logiciel: Assistant de connexion Windows Live - (.Microsoft Corporation.) [HKLM] -- {DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
O42 - Logiciel: Astros - (.Philippe GEORGES.) [HKLM] -- Calculs astrologiques_is1
O42 - Logiciel: Audacity 2.0 - (.Audacity Team.) [HKLM] -- Audacity_is1
O42 - Logiciel: Avast Pro Antivirus - (.AVAST Software.) [HKLM] -- Avast
O42 - Logiciel: Backup Manager Basic - (.NewTech Infosystems.) [HKLM] -- {72B776E5-4530-4C4B-9453-751DF87D9D93}
O42 - Logiciel: ChronosXP (32-bit) - (.Robert Misiak.) [HKLM] -- {E2D2C0EE-64F6-4D64-A237-91B7D176395F}
O42 - Logiciel: ConvertHelper 2.2 - (.DownloadHelper.) [HKLM] -- {27CC6AB1-E72B-4179-AF1A-EAE507EBAF51}_is1
O42 - Logiciel: Galerie de photos Windows Live - (.Microsoft Corporation.) [HKLM] -- {B131E59D-202C-43C6-84C9-68F0C37541F1}
O42 - Logiciel: Glary Utilities 5.8 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities 5
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: Google Earth - (.Google.) [HKLM] -- {4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}
O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM] -- Identity Card
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- WinLiveSuite_Wave3
O42 - Logiciel: Installation Windows Live - (.Microsoft Corporation.) [HKLM] -- {46ABBC54-1872-4AA3-95E2-F2C063A63F31}
O42 - Logiciel: Java 8 Update 31 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218031F0}
O42 - Logiciel: JavaFX 2.1.1 - (.Oracle Corporation.) [HKLM] -- {1111706F-666A-4037-7777-211328764D10}
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {E2DFE069-083E-4631-9B6C-43C48E991DE5}
O42 - Logiciel: LAME v3.99.3 (for Windows) - (.Pas de propriétaire.) [HKLM] -- LAME_is1
O42 - Logiciel: Launch Manager - (.Packard Bell.) [HKLM] -- LManager
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.6.1022 - (.Malwarebytes Corporation.) [HKLM] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft Choice Guard - (.Microsoft Corporation.) [HKLM] -- {F0E12BBA-AD66-4022-A453-A1C8A0C4D570}
O42 - Logiciel: Microsoft SQL Server 2005 Compact Edition [ENU] - (.Microsoft Corporation.) [HKLM] -- {F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30411 - (.Microsoft Corporation.) [HKLM] -- {5DA8F6CD-C70E-39D8-8430-3D9808D6BD17}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 - (.Microsoft Corporation.) [HKLM] -- {9A25302D-30C0-39D9-BD6F-21E6EC160475}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Mozilla Firefox 41.0.2 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 41.0.2 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService
O42 - Logiciel: Nero 9 Essentials - (.Nero AG.) [HKLM] -- {6da4586a-ab6f-444c-857a-981cb088e42e}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM] -- {BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}
O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM] -- {F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}
O42 - Logiciel: Nero DiscSpeed - (.Nero AG.) [HKLM] -- {869200DB-287A-4DC0-B02B-2B6787FBCD4C}
O42 - Logiciel: Nero DiscSpeed Help - (.Nero AG.) [HKLM] -- {CC019E3F-59D2-4486-8D4B-878105B62A71}
O42 - Logiciel: Nero DriveSpeed - (.Nero AG.) [HKLM] -- {33CF58F5-48D8-4575-83D6-96F574E4D83A}
O42 - Logiciel: Nero DriveSpeed Help - (.Nero AG.) [HKLM] -- {E5C7D048-F9B4-4219-B323-8BDB01A2563D}
O42 - Logiciel: Nero Express Help - (.Nero AG.) [HKLM] -- {83202942-84B3-4C50-8622-B8C0AA2D2885}
O42 - Logiciel: Nero InfoTool - (.Nero AG.) [HKLM] -- {FBCDFD61-7DCF-4E71-9226-873BA0053139}
O42 - Logiciel: Nero InfoTool Help - (.Nero AG.) [HKLM] -- {20400DBD-E6DB-45B8-9B6B-1DD7033818EC}
O42 - Logiciel: Nero Installer - (.Nero AG.) [HKLM] -- {E8A80433-302B-4FF1-815D-FCC8EAC482FF}
O42 - Logiciel: Nero Online Upgrade - (.Nero AG.) [HKLM] -- {C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}
O42 - Logiciel: Nero StartSmart - (.Nero AG.) [HKLM] -- {7748AC8C-18E3-43BB-959B-088FAEA16FB2}
O42 - Logiciel: Nero StartSmart Help - (.Nero AG.) [HKLM] -- {2348B586-C9AE-46CE-936C-A68E9426E214}
O42 - Logiciel: Nero StartSmart OEM - (.Nero AG.) [HKLM] -- {4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}
O42 - Logiciel: NeroExpress - (.Nero AG.) [HKLM] -- {595A3116-40BB-4E0F-A2E8-D7951DA56270}
O42 - Logiciel: OpenOffice.org 3.3 - (.OpenOffice.org.) [HKLM] -- {05653DE1-6567-40C6-B930-39D399B64369}
O42 - Logiciel: Orion-Astro 2.0.0.77 - (.J.-F. Faccin.) [HKLM] -- {A510CF42-8C96-428C-B772-CEE69FA45684}_is1
O42 - Logiciel: Outil de téléchargement Windows Live - (.Microsoft Corporation.) [HKLM] -- {205C6BDD-7B73-42DE-8505-9A093F35A238}
O42 - Logiciel: Packard Bell MyBackup - (.NewTech Infosystems.) [HKLM] -- InstallShield_{72B776E5-4530-4C4B-9453-751DF87D9D93}
O42 - Logiciel: Packard Bell Power Management - (.Packard Bell.) [HKLM] -- {3DB0448D-AD82-4923-B305-D001E521A964}
O42 - Logiciel: Packard Bell Recovery Management - (.Packard Bell.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9}
O42 - Logiciel: Packard Bell Registration - (.Packard Bell.) [HKLM] -- Packard Bell Registration
O42 - Logiciel: PackardBell ScreenSaver - (.PackardBell.) [HKLM] -- PackardBell Screensaver
O42 - Logiciel: Photo Réducteur - (.Emjysoft.) [HKLM] -- {DCCC5C32-2C99-485B-9386-D5DF5D0810B1}_is1
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {96AE7E41-E34E-47D0-AC07-1091A8127911}
O42 - Logiciel: Security Update for Microsoft .NET Framework 4.5.2 (KB3023224) - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB3023224
O42 - Logiciel: Security Update for Microsoft .NET Framework 4.5.2 (KB3035490) - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB3035490
O42 - Logiciel: Security Update for Microsoft .NET Framework 4.5.2 (KB3074230) - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB3074230
O42 - Logiciel: Security Update for Microsoft .NET Framework 4.5.2 (KB3074550) - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132}.KB3074550
O42 - Logiciel: Skype Recorder - (.Extralabs Software.) [HKLM] -- {928E90E3-4888-4E7F-863A-D4F75C6BD249}_is1
O42 - Logiciel: Skype™ 7.5 - (.Skype Technologies S.A..) [HKLM] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Solar Maps v3.1 - (.Esoteric Technologies Pty Ltd.) [HKLM] -- {63BDFF10-F244-42AF-AA37-473C3185FA38}
O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM] -- {933B4015-4618-4716-A828-5289FC03165F}
O42 - Logiciel: Video Web Camera - (.Chicony Electronics Co.,Ltd..) [HKLM] -- {12A1B519-5934-4508-ADBD-335347B0DC87}
O42 - Logiciel: Windows Live Call - (.Microsoft Corporation.) [HKLM] -- {82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
O42 - Logiciel: Windows Live Communications Platform - (.Microsoft Corporation.) [HKLM] -- {3B4E636E-9D65-4D67-BA61-189800823F52}
O42 - Logiciel: Windows Live FolderShare - (.Microsoft Corporation.) [HKLM] -- {2075CB0A-D26F-4DAA-B424-5079296B43BA}
O42 - Logiciel: Windows Live Mail - (.Microsoft Corporation.) [HKLM] -- {5DD76286-9BE7-4894-A990-E905E91AC818}
O42 - Logiciel: Windows Live Messenger - (.Microsoft Corporation.) [HKLM] -- {770F1BEC-2871-4E70-B837-FB8525FFA3B1}
O42 - Logiciel: Windows Live Movie Maker - (.Microsoft Corporation.) [HKLM] -- {53B20C18-D8D4-4588-8737-9BBFE303C354}
O42 - Logiciel: Windows Live Writer - (.Microsoft Corporation.) [HKLM] -- {4634B21A-CC07-4396-890C-2B8168661FEA}
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}

---\\ HKCU & HKLM Software Keys
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Google]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKLM\Software\AVAST Software]
[HKLM\Software\Adblock Plus for IE]
[HKLM\Software\Adobe]
[HKLM\Software\AppDataLow]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DebugMode]
[HKLM\Software\Debug]
[HKLM\Software\DownloadHelper]
[HKLM\Software\FileZilla 3]
[HKLM\Software\GlarySoft]
[HKLM\Software\Google]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\JreMetrics]
[HKLM\Software\Lame For Audacity]
[HKLM\Software\Macromedia]
[HKLM\Software\Macrovision]
[HKLM\Software\Malwarebytes' Anti-Malware]
[HKLM\Software\McAfee.com]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\Nero]
[HKLM\Software\NewTech Infosystems]
[HKLM\Software\ODBC]
[HKLM\Software\OEM]
[HKLM\Software\OpenOffice.org]
[HKLM\Software\Oracle]
[HKLM\Software\Policies]
[HKLM\Software\RealNetworks]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\Robert Misiak]
[HKLM\Software\Skype]
[HKLM\Software\Sonic]
[HKLM\Software\Symantec]
[HKLM\Software\Wistron]
[HKLM\Software\iTinySoft]
[HKLM\Software\mozilla.org]
~ Scan Softwares in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 01/09/2015 - 09:24:21 - [5,396] ----D C:\Program Files (x86)\Adblock Plus for IE
O43 - CFD: 13/12/2013 - 16:57:37 - [917,387] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 31/03/2014 - 00:32:34 - [2,227] ----D C:\Program Files (x86)\Astros
O43 - CFD: 09/08/2012 - 17:02:22 - [43,075] ----D C:\Program Files (x86)\Audacity
O43 - CFD: 27/02/2013 - 11:16:03 - [1,336] ----D C:\Program Files (x86)\ChronosXP
O43 - CFD: 17/07/2015 - 23:37:44 - [348,145] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 31/01/2014 - 22:35:56 - [29,417] ----D C:\Program Files (x86)\ConvertHelper
O43 - CFD: 17/07/2015 - 23:38:35 - [68,466] ----D C:\Program Files (x86)\DivX
O43 - CFD: 16/09/2015 - 21:04:37 - [33,503] ----D C:\Program Files (x86)\Emjysoft
O43 - CFD: 16/11/2012 - 18:25:21 - [16,642] ----D C:\Program Files (x86)\FileZilla FTP Client
O43 - CFD: 20/10/2015 - 12:32:20 - [36,524] ----D C:\Program Files (x86)\Glary Utilities 5
O43 - CFD: 04/10/2014 - 16:55:13 - [192,963] ----D C:\Program Files (x86)\Google
O43 - CFD: 11/09/2012 - 19:07:08 - [32,805] ----D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 11/05/2010 - 06:41:24 - [10,585] ----D C:\Program Files (x86)\Intel
O43 - CFD: 19/10/2015 - 15:14:46 - [10,049] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 15/02/2015 - 13:04:47 - [135,623] ----D C:\Program Files (x86)\Java
O43 - CFD: 09/08/2012 - 19:02:25 - [1,540] ----D C:\Program Files (x86)\Lame For Audacity
O43 - CFD: 12/09/2012 - 01:32:05 - [4,762] ----D C:\Program Files (x86)\Launch Manager
O43 - CFD: 01/08/2012 - 19:14:08 - [0,211] ----D C:\Program Files (x86)\licenses
O43 - CFD: 19/10/2015 - 15:14:21 - [43,263] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 08/06/2015 - 10:37:36 - [0] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 01/08/2012 - 10:34:29 - [0,216] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 13/08/2015 - 11:35:57 - [40,892] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 01/08/2012 - 10:35:11 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 04/08/2012 - 13:44:21 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 19/10/2015 - 15:08:48 - [86,542] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 16/10/2015 - 09:41:18 - [0,267] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 11/05/2010 - 06:48:59 - [360,150] ----D C:\Program Files (x86)\Nero
O43 - CFD: 11/05/2010 - 07:12:09 - [26,887] ----D C:\Program Files (x86)\NewTech Infosystems
O43 - CFD: 01/08/2012 - 19:18:30 - [110,455] ----D C:\Program Files (x86)\Open office
O43 - CFD: 27/08/2012 - 22:51:24 - [353,458] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 01/08/2012 - 21:43:58 - [33,207] ----D C:\Program Files (x86)\Oracle
O43 - CFD: 24/06/2015 - 21:02:52 - [13,843] ----D C:\Program Files (x86)\orion-astro 2
O43 - CFD: 11/09/2012 - 19:08:03 - [32,324] ----D C:\Program Files (x86)\Packard Bell
O43 - CFD: 01/08/2012 - 19:14:08 - [0,027] ----D C:\Program Files (x86)\readmes
O43 - CFD: 11/05/2010 - 06:41:28 - [8,033] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 01/08/2012 - 19:14:08 - [8,746] ----D C:\Program Files (x86)\redist
O43 - CFD: 14/07/2009 - 07:32:38 - [37,361] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 12/04/2015 - 10:49:18 - [42,956] R---D C:\Program Files (x86)\Skype
O43 - CFD: 05/02/2013 - 22:33:55 - [11,027] ----D C:\Program Files (x86)\Skype Recorder
O43 - CFD: 21/09/2015 - 14:33:00 - [28,408] ----D C:\Program Files (x86)\Total Video Converter
O43 - CFD: 14/07/2009 - 06:57:06 - [0] ----D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 01/08/2012 - 10:28:40 - [11,369] ----D C:\Program Files (x86)\Video Web Camera
O43 - CFD: 18/07/2015 - 01:17:14 - [0] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 12/07/2013 - 06:59:24 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 01/08/2012 - 10:35:50 - [141,097] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 01/08/2012 - 10:34:14 - [0,234] ----D C:\Program Files (x86)\Windows Live SkyDrive
O43 - CFD: 04/08/2012 - 15:29:10 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 11/06/2015 - 23:48:17 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 04/08/2012 - 15:29:09 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 04/08/2012 - 15:29:09 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 04/10/2014 - 16:31:21 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 20/10/2015 - 15:15:03 - [9,598] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 10/09/2012 - 23:56:11 - [7,563] ----D C:\Program Files (x86)\ZHPFix
O43 - CFD: 05/01/2013 - 19:32:53 - [68,809] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 30/08/2014 - 21:08:00 - [46,800] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 17/07/2015 - 23:38:34 - [36,411] ----D C:\Program Files (x86)\Common Files\DivX Shared
O43 - CFD: 15/02/2015 - 13:03:03 - [2,052] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 01/08/2012 - 10:40:01 - [0,827] ----D C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 19/10/2015 - 15:14:19 - [18,702] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 11/05/2010 - 06:50:52 - [117,852] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 11/05/2010 - 07:12:57 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 01/08/2012 - 10:38:35 - [4,031] ----D C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 11/05/2010 - 08:46:27 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 27/02/2015 - 16:45:33 - [2,289] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 01/08/2012 - 10:38:35 - [0,324] ----D C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 12/08/2012 - 18:13:51 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 04/08/2012 - 15:29:07 - [9,767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 01/08/2012 - 10:33:01 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 01/08/2012 - 10:30:08 - [0,000] ----D C:\ProgramData\Acer
O43 - CFD: 14/02/2015 - 23:14:48 - [901,986] ----D C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Application Data
O43 - CFD: 07/12/2013 - 14:28:42 - [108,953] ----D C:\ProgramData\AVAST Software
O43 - CFD: 11/05/2010 - 07:12:41 - [0,009] ----D C:\ProgramData\BackupManager
O43 - CFD: 01/08/2012 - 10:22:55 - [0] --H-D C:\ProgramData\Bureau
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Desktop
O43 - CFD: 17/07/2015 - 23:38:37 - [2,420] ----D C:\ProgramData\DivX
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Documents
O43 - CFD: 12/09/2013 - 18:10:23 - [0,006] ----D C:\ProgramData\eSafe
O43 - CFD: 01/08/2012 - 10:22:55 - [0] --H-D C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Favorites
O43 - CFD: 09/08/2012 - 22:32:14 - [0,042] ----D C:\ProgramData\FLEXnet
O43 - CFD: 20/10/2015 - 12:09:48 - [6,057] ----D C:\ProgramData\GlarySoft
O43 - CFD: 11/09/2012 - 19:04:44 - [0,988] ----D C:\ProgramData\Google
O43 - CFD: 07/06/2015 - 20:24:12 - [32,671] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 01/08/2012 - 20:38:25 - [0,078] ----D C:\ProgramData\McAfee
O43 - CFD: 01/08/2012 - 10:22:55 - [0] --H-D C:\ProgramData\Menu Démarrer
O43 - CFD: 28/05/2015 - 21:49:57 - [357,390] -S--D C:\ProgramData\Microsoft
O43 - CFD: 01/08/2012 - 10:22:55 - [0] --H-D C:\ProgramData\Modèles
O43 - CFD: 01/08/2012 - 12:20:56 - [0,036] ----D C:\ProgramData\Mozilla
O43 - CFD: 11/05/2010 - 06:47:42 - [10,626] ----D C:\ProgramData\Nero
O43 - CFD: 13/08/2012 - 11:23:26 - [0,014] ----D C:\ProgramData\Norton
O43 - CFD: 11/05/2010 - 06:51:18 - [5,600] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 01/08/2012 - 10:31:17 - [0,001] ----D C:\ProgramData\OEM
O43 - CFD: 15/02/2015 - 13:01:30 - [67,709] ----D C:\ProgramData\Oracle
O43 - CFD: 25/10/2012 - 14:48:22 - [622,437] ----D C:\ProgramData\orion2
O43 - CFD: 11/05/2010 - 06:53:11 - [1,446] ----D C:\ProgramData\Partner
O43 - CFD: 04/10/2014 - 16:31:22 - [0,070] ----D C:\ProgramData\Real
O43 - CFD: 28/06/2015 - 11:18:05 - [122,738] ----D C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Start Menu
O43 - CFD: 01/08/2012 - 21:44:43 - [0,000] ----D C:\ProgramData\Sun
O43 - CFD: 06/02/2013 - 03:15:43 - [0,051] ---AD C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 07:08:56 - [0] --H-D C:\ProgramData\Templates
O43 - CFD: 13/04/2015 - 13:25:29 - [27,456] ----D C:\Users\Jonathan\AppData\Roaming\Adobe
O43 - CFD: 01/10/2015 - 13:11:26 - [0,013] ----D C:\Users\Jonathan\AppData\Roaming\Audacity
O43 - CFD: 07/12/2013 - 14:39:28 - [21,163] ----D C:\Users\Jonathan\AppData\Roaming\AVAST Software
O43 - CFD: 20/10/2015 - 11:54:56 - [0] ----D C:\Users\Jonathan\AppData\Roaming\DiskDefrag
O43 - CFD: 17/07/2015 - 23:38:35 - [0,001] ----D C:\Users\Jonathan\AppData\Roaming\DivX
O43 - CFD: 24/12/2013 - 15:16:44 - [136,126] ----D C:\Users\Jonathan\AppData\Roaming\Emjysoft
O43 - CFD: 16/11/2012 - 20:05:17 - [0,029] ----D C:\Users\Jonathan\AppData\Roaming\FileZilla
O43 - CFD: 20/10/2015 - 11:54:55 - [1,371] ----D C:\Users\Jonathan\AppData\Roaming\GlarySoft
O43 - CFD: 01/08/2012 - 10:29:58 - [0,053] ----D C:\Users\Jonathan\AppData\Roaming\Macromedia
O43 - CFD: 10/09/2012 - 23:50:18 - [0] ----D C:\Users\Jonathan\AppData\Roaming\Malwarebytes
O43 - CFD: 25/07/2015 - 14:03:39 - [37,631] -S--D C:\Users\Jonathan\AppData\Roaming\Microsoft
O43 - CFD: 12/09/2013 - 01:41:04 - [0,001] ----D C:\Users\Jonathan\AppData\Roaming\MOVAVI
O43 - CFD: 04/10/2014 - 16:51:11 - [366,395] ----D C:\Users\Jonathan\AppData\Roaming\Mozilla
O43 - CFD: 04/09/2014 - 11:08:09 - [0,894] ----D C:\Users\Jonathan\AppData\Roaming\MP3 Quality Modifier
O43 - CFD: 01/08/2012 - 23:32:56 - [0,000] ----D C:\Users\Jonathan\AppData\Roaming\Nero
O43 - CFD: 03/08/2012 - 15:40:53 - [93,460] ----D C:\Users\Jonathan\AppData\Roaming\OpenOffice.org
O43 - CFD: 11/02/2013 - 22:36:43 - [0,214] ----D C:\Users\Jonathan\AppData\Roaming\PCFix
O43 - CFD: 15/05/2013 - 22:07:55 - [0,128] ----D C:\Users\Jonathan\AppData\Roaming\Real
O43 - CFD: 15/09/2015 - 19:20:47 - [8,847] ----D C:\Users\Jonathan\AppData\Roaming\Skype
O43 - CFD: 22/07/2015 - 20:51:21 - [19,968] ----D C:\Users\Jonathan\AppData\Local\Adobe
O43 - CFD: 01/08/2012 - 10:23:05 - [0] ----D C:\Users\Jonathan\AppData\Local\Application Data
O43 - CFD: 01/08/2012 - 11:55:11 - [1,507] ----D C:\Users\Jonathan\AppData\Local\Apps
O43 - CFD: 19/10/2015 - 19:50:36 - [14,944] ----D C:\Users\Jonathan\AppData\Local\CrashDumps
O43 - CFD: 19/10/2015 - 21:21:41 - [9,087] ----D C:\Users\Jonathan\AppData\Local\Diagnostics
O43 - CFD: 19/10/2015 - 21:21:53 - [0,555] ----D C:\Users\Jonathan\AppData\Local\ElevatedDiagnostics
O43 - CFD: 06/07/2015 - 00:06:34 - [0] -SH-D C:\Users\Jonathan\AppData\Local\EmieBrowserModeList
O43 - CFD: 06/07/2015 - 00:06:34 - [0] -SH-D C:\Users\Jonathan\AppData\Local\EmieSiteList
O43 - CFD: 06/07/2015 - 00:06:34 - [0] -SH-D C:\Users\Jonathan\AppData\Local\EmieUserList
O43 - CFD: 08/10/2014 - 14:07:26 - [0,000] ----D C:\Users\Jonathan\AppData\Local\Emjysoft
O43 - CFD: 04/10/2014 - 16:52:08 - [1423,603] ----D C:\Users\Jonathan\AppData\Local\Google
O43 - CFD: 18/09/2015 - 10:26:15 - [0,000] ----D C:\Users\Jonathan\AppData\Local\GWX
O43 - CFD: 01/08/2012 - 10:23:05 - [0] ----D C:\Users\Jonathan\AppData\Local\Historique
O43 - CFD: 04/10/2014 - 17:05:36 - [0] ----D C:\Users\Jonathan\AppData\Local\Macromedia
O43 - CFD: 03/01/2015 - 12:05:26 - [1828,266] ----D C:\Users\Jonathan\AppData\Local\Microsoft
O43 - CFD: 05/10/2013 - 13:34:57 - [786,459] ----D C:\Users\Jonathan\AppData\Local\Mozilla
O43 - CFD: 01/08/2012 - 10:32:22 - [0,016] ----D C:\Users\Jonathan\AppData\Local\Packard Bell
O43 - CFD: 07/06/2015 - 20:22:59 - [0] ----D C:\Users\Jonathan\AppData\Local\Programs
O43 - CFD: 08/04/2014 - 17:02:08 - [4,959] ----D C:\Users\Jonathan\AppData\Local\Skype
O43 - CFD: 20/10/2015 - 15:14:32 - [2,335] ----D C:\Users\Jonathan\AppData\Local\Temp
O43 - CFD: 01/08/2012 - 10:23:05 - [0] ----D C:\Users\Jonathan\AppData\Local\Temporary Internet Files
O43 - CFD: 01/08/2012 - 22:06:51 - [1,632] ----D C:\Users\Jonathan\AppData\Local\VirtualStore
O43 - CFD: 12/09/2013 - 18:01:42 - [0,054] ----D C:\Users\Jonathan\AppData\Local\Wajam
O43 - CFD: 11/05/2010 - 08:47:04 - [0,013] R---D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 19/10/2015 - 15:14:32 - [0,000] R---D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 27/02/2013 - 11:16:04 - [0,009] ----D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ChronosXP
O43 - CFD: 11/02/2013 - 22:36:41 - [0,001] ----D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
O43 - CFD: 26/07/2013 - 16:01:25 - [0,000] ----D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 12/09/2013 - 18:51:24 - [0,002] ----D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 11/05/2010 - 08:47:04 - [0,001] R---D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 19/10/2015 - 15:14:32 - [0,000] R---D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 01/10/2015 - 00:27:27 - [0] ----D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\vanBasco's Karaoke Player
O43 - CFD: 01/09/2015 - 09:24:21 - [5,396] ----D C:\Program Files (x86)\Adblock Plus for IE
O43 - CFD: 13/12/2013 - 16:57:37 - [917,387] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 31/03/2014 - 00:32:34 - [2,227] ----D C:\Program Files (x86)\Astros
O43 - CFD: 09/08/2012 - 17:02:22 - [43,075] ----D C:\Program Files (x86)\Audacity
O43 - CFD: 27/02/2013 - 11:16:03 - [1,336] ----D C:\Program Files (x86)\ChronosXP
O43 - CFD: 17/07/2015 - 23:37:44 - [348,145] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 31/01/2014 - 22:35:56 - [29,417] ----D C:\Program Files (x86)\ConvertHelper
O43 - CFD: 17/07/2015 - 23:38:35 - [68,466] ----D C:\Program Files (x86)\DivX
O43 - CFD: 16/09/2015 - 21:04:37 - [33,503] ----D C:\Program Files (x86)\Emjysoft
O43 - CFD: 16/11/2012 - 18:25:21 - [16,642] ----D C:\Program Files (x86)\FileZilla FTP Client
O43 - CFD: 20/10/2015 - 12:32:20 - [36,524] ----D C:\Program Files (x86)\Glary Utilities 5
O43 - CFD: 04/10/2014 - 16:55:13 - [192,963] ----D C:\Program Files (x86)\Google
O43 - CFD: 11/09/2012 - 19:07:08 - [32,805] ----D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 11/05/2010 - 06:41:24 - [10,585] ----D C:\Program Files (x86)\Intel
O43 - CFD: 19/10/2015 - 15:14:46 - [10,049] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 15/02/2015 - 13:04:47 - [135,623] ----D C:\Program Files (x86)\Java
O43 - CFD: 09/08/2012 - 19:02:25 - [1,540] ----D C:\Program Files (x86)\Lame For Audacity
O43 - CFD: 12/09/2012 - 01:32:05 - [4,762] ----D C:\Program Files (x86)\Launch Manager
O43 - CFD: 01/08/2012 - 19:14:08 - [0,211] ----D C:\Program Files (x86)\licenses
O43 - CFD: 19/10/2015 - 15:14:21 - [43,263] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 08/06/2015 - 10:37:36 - [0] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 01/08/2012 - 10:34:29 - [0,216] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 13/08/2015 - 11:35:57 - [40,892] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 01/08/2012 - 10:35:11 - [1,745] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 04/08/2012 - 13:44:21 - [0,023] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 19/10/2015 - 15:08:48 - [86,542] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 16/10/2015 - 09:41:18 - [0,267] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - 07:32:38 - [0,025] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 11/05/2010 - 06:48:59 - [360,150] ----D C:\Program Files (x86)\Nero
O43 - CFD: 11/05/2010 - 07:12:09 - [26,887] ----D C:\Program Files (x86)\NewTech Infosystems
O43 - CFD: 01/08/2012 - 19:18:30 - [110,455] ----D C:\Program Files (x86)\Open office
O43 - CFD: 27/08/2012 - 22:51:24 - [353,458] ----D C:\Program Files (x86)\OpenOffice.org 3
O43 - CFD: 01/08/2012 - 21:43:58 - [33,207] ----D C:\Program Files (x86)\Oracle
O43 - CFD: 24/06/2015 - 21:02:52 - [13,843] ----D C:\Program Files (x86)\orion-astro 2
O43 - CFD: 11/09/2012 - 19:08:03 - [32,324] ----D C:\Program Files (x86)\Packard Bell
O43 - CFD: 01/08/2012 - 19:14:08 - [0,027] ----D C:\Program Files (x86)\readmes
O43 - CFD: 11/05/2010 - 06:41:28 - [8,033] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 01/08/2012 - 19:14:08 - [8,746] ----D C:\Program Files (x86)\redist
O43 - CFD: 14/07/2009 - 07:32:38 - [37,361] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 12/04/2015 - 10:49:18 - [42,956] R---D C:\Program Files (x86)\Skype
O43 - CFD: 05/02/2013 - 22:33:55 - [11,027] ----D C:\Program Files (x86)\Skype Recorder
O43 - CFD: 21/09/2015 - 14:33:00 - [28,408] ----D C:\Program Files (x86)\Total Video Converter
O43 - CFD: 14/07/2009 - 06:57:06 - [0] ----D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 01/08/2012 - 10:28:40 - [11,369] ----D C:\Program Files (x86)\Video Web Camera
O43 - CFD: 18/07/2015 - 01:17:14 - [0] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 12/07/2013 - 06:59:24 - [0,500] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 01/08/2012 - 10:35:50 - [141,097] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 01/08/2012 - 10:34:14 - [0,234] ----D C:\Program Files (x86)\Windows Live SkyDrive
O43 - CFD: 04/08/2012 - 15:29:10 - [5,895] ----D C:\Program Files (x86)\Windows Mail
O43 - CFD: 11/06/2015 - 23:48:17 - [4,791] ----D C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - 07:32:38 - [11,632] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 04/08/2012 - 15:29:09 - [4,213] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 04/08/2012 - 15:29:09 - [0,181] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 04/10/2014 - 16:31:21 - [5,717] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 20/10/2015 - 15:15:03 - [9,598] ----D C:\Program Files (x86)\ZHPDiag
O43 - CFD: 10/09/2012 - 23:56:11 - [7,563] ----D C:\Program Files (x86)\ZHPFix
O43 - CFD: 05/01/2013 - 19:32:53 - [68,809] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 30/08/2014 - 21:08:00 - [46,800] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 17/07/2015 - 23:38:34 - [36,411] ----D C:\Program Files (x86)\Common Files\DivX Shared
O43 - CFD: 15/02/2015 - 13:03:03 - [2,052] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 01/08/2012 - 10:40:01 - [0,827] ----D C:\Program Files (x86)\Common Files\Macrovision Shared
O43 - CFD: 19/10/2015 - 15:14:19 - [18,702] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 11/05/2010 - 06:50:52 - [117,852] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 11/05/2010 - 07:12:57 - [0,338] ----D C:\Program Files (x86)\Common Files\Oberon Media
O43 - CFD: 01/08/2012 - 10:38:35 - [4,031] ----D C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 11/05/2010 - 08:46:27 - [0,003] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 27/02/2015 - 16:45:33 - [2,289] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 01/08/2012 - 10:38:35 - [0,324] ----D C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 14/07/2009 - 05:20:08 - [39,200] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 12/08/2012 - 18:13:51 - [0] ----D C:\Program Files (x86)\Common Files\Symantec Shared
O43 - CFD: 04/08/2012 - 15:29:07 - [9,767] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 01/08/2012 - 10:33:01 - [0] ----D C:\Program Files (x86)\Common Files\Windows Live
~ Scan Program Folder in 01mn 01s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.4F8EEF11BA435588C73BF35B902F05F9] - 20/10/2015 - 13:23:30 ---A- . (...) -- C:\Windows\WindowsUpdate.log   [1695868]
O44 - LFC:[MD5.AC849B99E032F4017BB1CE37934DD4AF] - 20/10/2015 - 13:22:11 ---A- . (...) -- C:\Windows\setupact.log   [112]
O44 - LFC:[MD5.5EEA93E4C1A8755B86CFF81E038418BD] - 20/10/2015 - 13:22:06 -S-A- . (...) -- C:\Windows\bootstat.dat   [67584]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/10/2015 - 11:31:05 ---A- . (...) -- C:\Windows\setuperr.log   [0]
O44 - LFC:[MD5.AAC5EA5A9AF33F0609975A2938D9273B] - 19/10/2015 - 23:53:46 ---A- . (...) -- C:\Windows\SysNative\PerfStringBackup.INI   [1669656]
O44 - LFC:[MD5.44A9E253301943EBC1C164E8378FF79C] - 19/10/2015 - 23:53:46 ---A- . (...) -- C:\Windows\SysNative\perfc009.dat   [122352]
O44 - LFC:[MD5.B2ECB42FF2DB154F8372420C0CB3D239] - 19/10/2015 - 23:53:46 ---A- . (...) -- C:\Windows\SysNative\perfc00C.dat   [150402]
O44 - LFC:[MD5.1DE6EEDB177A4E15E2A5870662B7E780] - 19/10/2015 - 23:53:46 ---A- . (...) -- C:\Windows\SysNative\perfh009.dat   [654480]
O44 - LFC:[MD5.7CE2D2B92A2639472707B9D7FB57641B] - 19/10/2015 - 23:53:46 ---A- . (...) -- C:\Windows\SysNative\perfh00C.dat   [747910]
O44 - LFC:[MD5.AAC5EA5A9AF33F0609975A2938D9273B] - 19/10/2015 - 23:53:46 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI   [1669656]
O44 - LFC:[MD5.4A89054BB55F9EE03B7048D0B4FAE99F] - 15/10/2015 - 22:39:55 ---A- . (...) -- C:\Windows\wininit.ini   [674]
O44 - LFC:[MD5.487A7E409726F26B5A3FD08D9C37550D] - 21/09/2015 - 21:30:24 ---A- . (...) -- C:\Windows\SysNative\FNTCACHE.DAT   [300336]
~ Scan Files in 00mn 58s



---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security Package.) -- C:\Windows\System32\pku2u.dll
~ Scan Keys in 00mn 00s



---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -- C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ Scan CSB in 00mn 00s



---\\ MountPoints2 Shell Key (O51) (None)

---\\ Trojan Driver Search Data (HKLM) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
~ Scan Keys in 00mn 00s



---\\ ShareTools MSconfig StartupReg (O53)
O53 - SMSR:HKLM\...\startupreg\Acer ePower Management  [Key] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
O53 - SMSR:HKLM\...\startupreg\Adobe ARM  [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\Adobe Reader Speed Launcher  [Key] . (...) -- C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\BackupManagerTray  [Key] . (.NewTech Infosystems, Inc. - Packard Bell MyBackup.) -- C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
O53 - SMSR:HKLM\...\startupreg\Camera Assistant Software  [Key] . (.Chicony - traybar.) -- C:\Program Files (x86)\Video Web Camera\traybar.exe
O53 - SMSR:HKLM\...\startupreg\Google Update  [Key] . (.Google Inc. - Programme d'installation de Google.) -- C:\Users\Jonathan\AppData\Local\Google\Update\GoogleUpdate.exe
O53 - SMSR:HKLM\...\startupreg\LManager  [Key] . (.Dritek System Inc. - Launch Manager Keyboard Application.) -- C:\Program Files (x86)\Launch Manager\LManager.exe
O53 - SMSR:HKLM\...\startupreg\PLFSetI  [Key] . (.Pas de propriétaire - DefaultSettingEXE MFC Application.) -- C:\Windows\PLFSetI.exe
O53 - SMSR:HKLM\...\startupreg\ROC_roc_ssl_v12  [Key] . (...) -- C:\Program Files (x86)\AVG Secure Search\ROC_roc_ssl_v12.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Skype  [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched  [Key] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O53 - SMSR:HKLM\...\startupreg\swg  [Key] . (...) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (.not file.)
~ Scan SMSR Keys in 00mn 00s



---\\ Microsoft Control Security Providers (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies System (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "SoftwareSASGeneration"=1
~ Scan Keys in 00mn 00s



---\\ Microsoft Windows Policies Explorer (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoInternetOpenWith"=1
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoResolveTrack"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
~ Scan Keys in 00mn 00s



---\\ Liste des Drivers Système (O58)
O58 - SDL:[MD5.2F6B34B83843F0C5118B63AC634F5BF4] - 14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\Drivers\adp94xx.sys   [491088]
O58 - SDL:[MD5.D5BCB77BE83CF99F508943945D46343D] - 12/09/2012 - 00:31:12 ---A- . (.Dritek System Inc. - Dritek 64-bit PS/2 Keyboard Filter Driver.) -- C:\Windows\SysWOW64\drivers\DKbFltr.sys   [25608]
~ Scan Drivers in 00mn 00s



---\\ Liste des outils de nettoyage (O63)
O63 - Logiciel: ZHPDiag 1.31 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1
O63 - Logiciel: ZHPFix 1.2 - (.Nicolas Coolman.) [HKLM] -- ZHPFix_is1
~ Scan ADS in 00mn 00s



---\\ Liste des services Legacy (O64)
O64 - Services: CurCS - 18/09/2015 - C:\Windows\system32\drivers\aswHwid.sys (aswHwid)  .(.AVAST Software - avast! HWID.) - LEGACY_ASWHWID
O64 - Services: CurCS - 18/09/2015 - C:\Windows\system32\drivers\aswMonFlt.sys (aswMonFlt)  .(.AVAST Software - avast! File System Minifilter for Windows 2.) - LEGACY_ASWMONFLT
O64 - Services: CurCS - 18/09/2015 - C:\Windows\system32\drivers\aswRdr2.sys (aswRdr)  .(.AVAST Software - avast! WFP Redirect Driver.) - LEGACY_ASWRDR
O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\aswRvrt.sys (aswRvrt)  .(.AVAST Software - avast! Revert.) - LEGACY_ASWRVRT
O64 - Services: CurCS - 18/09/2015 - C:\Windows\system32\drivers\aswSnx.sys (aswSnx)  .(.AVAST Software - avast! Virtualization Driver.) - LEGACY_ASWSNX
O64 - Services: CurCS - 18/09/2015 - C:\Windows\system32\drivers\aswSP.sys (aswSP)  .(.AVAST Software - avast! self protection module.) - LEGACY_ASWSP
O64 - Services: CurCS - 18/09/2015 - C:\Windows\system32\drivers\aswStm.sys (aswStm)  .(.AVAST Software - Stream Filter.) - LEGACY_ASWSTM
O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\aswVmm.sys (aswVmm)  .(.AVAST Software - avast! VM Monitor.) - LEGACY_ASWVMM
O64 - Services: CurCS - 20/09/2014 - C:\Windows\system32\drivers\GUBootStartup.sys (GUBootStartup)  .(.Glarysoft Ltd - The driver for the Startup Manager tool.) - LEGACY_GUBOOTSTARTUP
O64 - Services: CurCS - 20/06/2015 - C:\Windows\system32\drivers\MBAMSwissArmy.sys (MBAMSwissArmy)  .(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMSWISSARMY
O64 - Services: CurCS - ??\??\???? - C:\Windows\System32\Drivers\secdrv.sys (secdrv)  .(.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) - LEGACY_SECDRV
~ Scan Services in 00mn 01s



---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <ChromeHTML>[HKLM\..\open\Command] (.Not Key.)
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.bat> <batfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKCR\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Observateur d’événements.) -- C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKCR\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCR\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O67 - Shell Spawning: <.js> <JSFile>[HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
~ Scan Keys in 00mn 00s



---\\ Start Menu Internet (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome.CQZHRTX7TQHS7ZWXD6Z77264RI> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Users\Jonathan\AppData\Local\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome.CQZHRTX7TQHS7ZWXD6Z77264RI> <Google Chrome>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\Jonathan\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome.CQZHRTX7TQHS7ZWXD6Z77264RI> <Google Chrome>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\Jonathan\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe (.not file.)
O68 - StartMenuInternet: <Google Chrome.CQZHRTX7TQHS7ZWXD6Z77264RI> <Google Chrome>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\Jonathan\AppData\Local\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Windows\System32\ie4uinit.exe (.not file.)
~ Scan Keys in 00mn 00s



---\\ Search Browser Infection (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com
~ Scan Keys in 00mn 00s



---\\ Recherche des services démarrés par Svchost (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll   [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll   [80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll   [859648]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll   [680960]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll   [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll   [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll   [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll   [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll   [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll   [683520]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll   [2606080]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll   [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll   [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll   [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\System32\mmcss.dll   [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll   [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\kmsvc.dll   [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll   [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [210432]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [100864]
~ Scan Services in 00mn 01s



---\\ Recherche particuliere à la racine de certains dossiers (O84)
[MD5.1FE339E72FE03A27DD9D5A9A357CFE7D] [SPRF][24/08/2009] (...) -- C:\ProgramData\FullRemove.exe   [131368]
[MD5.CD5F805EE8E53B4616D87DD41CE799E3] [SPRF][20/10/2015] (...) -- C:\Users\Jonathan\AppData\Local\Temp\~autoupdate.dat   [184]
[MD5.4DBA312842F13B18FC23692D1C7542BB] [SPRF][20/10/2015] (...) -- C:\Users\Jonathan\AppData\Local\Temp\~gu3-ver.dat   [107]
[MD5.380D17CAA33EAC6DF0E011C538D94CE7] [SPRF][20/10/2015] (...) -- C:\Users\Jonathan\AppData\Local\Temp\~upgrade.dat   [1306]
[MD5.E2B77D6597C7CE94F6CBB0B6B5E5E47E] [SPRF][20/09/2014] (...) -- C:\Users\Jonathan\Desktop\glary-utilities_5-8_fr_73266.exe   [14425856]
[MD5.9CECEB028DB72C94C2A34F264C1C0B09] [SPRF][04/09/2014] (.Kevin Schneider - MP3 Quality Modifier 2.53.) -- C:\Users\Jonathan\Desktop\MP3QualityModifier.exe   [964608]
~ Scan Files in 00mn 00s



---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "WMPNSS-In-UDP-NoScope" |In - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP-NoScope" |Out - Domain - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP-NoScope" |In - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP-NoScope" |Out - Domain - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-UDP" |In - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-UDP" |Out - Public - P17 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-In-TCP" |In - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "WMPNSS-Out-TCP" |Out - Public - P6 - FALSE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{0FA37060-691D-4A50-9553-78B8357AA97F}" | In - Public - P6 - FALSE | .(.Adobe Systems Incorporated - Adobe Photoshop Elements 8.0 (component).) -- C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
O87 - FAEL: "{4D96A36F-72AA-41F0-9A92-BF67F204A24D}" | In - Public - P17 - FALSE | .(.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Adobe\Elements Organizer 8.0\AdobePhotoshopElementsMediaServer.exe
O87 - FAEL: "{8F1A32B3-534F-479D-8697-7ACD5EA251F1}" |Out - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{2DE0FB53-D7D3-4A6F-9409-4A280F3EB546}" |In - Private - P6 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{F4166D04-9DCC-446B-ACF2-9F45471D44E5}" |Out - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "{84D139C2-D668-4D0A-AF45-40889D531FF9}" |In - Private - P17 - TRUE | .(...) -- C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (.not file.)
O87 - FAEL: "TCP Query User{4E97C757-DE24-48AA-B131-1F870DD14857}C:\program files (x86)\videolan\vlc\vlc.exe" |In - Private - P6 - TRUE | .(...) -- C:\program files (x86)\videolan\vlc\vlc.exe (.not file.)
O87 - FAEL: "UDP Query User{15BCB764-F7C2-4F59-B730-B0A8FDDBBC97}C:\program files (x86)\videolan\vlc\vlc.exe" |In - Private - P17 - TRUE | .(...) -- C:\program files (x86)\videolan\vlc\vlc.exe (.not file.)
O87 - FAEL: "TCP Query User{B6DF9A6D-66E7-4DDA-B231-4657BC22F2E7}C:\users\jonathan\appdata\local\google\chrome\application\chrome.exe" | In - Private - P6 - TRUE | .(.Google Inc..) -- C:\users\jonathan\appdata\local\google\chrome\application\chrome.exe
O87 - FAEL: "UDP Query User{47B52AA4-EDFB-4B9D-82BC-EFA27B6D28CF}C:\users\jonathan\appdata\local\google\chrome\application\chrome.exe" | In - Private - P17 - TRUE | .(.Google Inc..) -- C:\users\jonathan\appdata\local\google\chrome\application\chrome.exe
O87 - FAEL: "{D916184E-6E7E-45D6-BE44-223E64611B34}" | In - None - P17 - TRUE | .(.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe
O87 - FAEL: "{C7267849-9D8B-4502-8265-B8A93FE1B0FE}" | In - Private - P6 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O87 - FAEL: "{7B98D5A8-F8E7-4BE4-B2A0-4F6966927B1C}" | In - Private - P17 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O87 - FAEL: "TCP Query User{BF0DD58B-2B9F-4F23-85DE-5E551EB99515}C:\program files (x86)\mozilla firefox\firefox.exe" | In - Public - P6 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\program files (x86)\mozilla firefox\firefox.exe
O87 - FAEL: "UDP Query User{AA7F27E5-A768-4A22-855F-268C1145DBA2}C:\program files (x86)\mozilla firefox\firefox.exe" | In - Public - P17 - TRUE | .(.Mozilla Corporation - Firefox.) -- C:\program files (x86)\mozilla firefox\firefox.exe
~ Scan Firewall in 00mn 01s



---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 09/10/2009 169312 |  (AdobeActiveFileMonitor8.0) . (.Adobe Systems Incorporated.) - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe
SR - | Auto 29/06/2015 81088 |  (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 03/10/2015 269000 |  (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 18/09/2015 146600 |  (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
SS - | Disabled 23/04/2010 867360 |  (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
SS - | Demand 01/08/2012 867080 |  (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
SS - | Disabled 08/01/2010 23584 |  (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe
SS - | Auto 28/08/2015 144200 |  (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 28/08/2015 144200 |  (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SR - | Auto 05/06/2009 354840 |  (IAANTMON) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
SS - | Demand 15/10/2015 147624 |  (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Disabled 15/01/2010 935208 |  (Nero BackItUp Scheduler 4.0) . (.Nero AG.) - c:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
SS - | Disabled 09/03/2010 250368 |  (NTI IScheduleSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
SS - | Disabled 11/05/2010 332272 |  (Partner Service) . (.Google Inc..) - C:\ProgramData\Partner\Partner.exe
SS - | Demand 18/02/2015 315488 |  (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto  0 |  (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Scan Services in 00mn 06s



End of the scan (1061 lines in 02mn 30s)(0)