~ ZHPDiag v2015.12.7.181 Par Nicolas Coolman (2015/12/07) ~ Démarré par Alexis (Administrator) (2015/12/08 22:33:38) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\Alexis\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Alexis\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Deactivate ~ Démarrage du système: Normal (Normal boot) Windows 7 Ultimate, 64-bit (Build 7601) ---\\ Navigateurs Internet (3) - 0s GCIE: Google Chrome v46.0.2490.86 MFIE: Mozilla Firefox 42.0 (x86 fr) v42.0 MSIE: Internet Explorer v9.0.8112.16421 ---\\ Informations sur les produits Windows (4) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK Windows Activation Technologies : KO ---\\ Logiciels de protection (1) - 3s Windows Defender W7 (Deactivate) ---\\ Logiciels d'optimisation (1) - 4s CCleaner v5.11 ---\\ Surveillance de Logiciels (1) - 4s Adobe Flash Player 19 NPAPI ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 8345.8 MB (55% free) System Restore: Activé (Enable) System drive C: has 8 GB () free of 155 GB =>Alerte espace disque inférieur à 20 Go ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: ALEXIS-PC ~ User Name: Alexis ~ Logged in as Administrator ---\\ Enumération des unités disques (3) - 0s ~ Drive C: has 8 GB free of 155 GB (System) ~ Drive D: has 11 GB free of 149 GB ~ Drive F: has GB free of 0 GB ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: Modified [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Recherche particulière de fichiers génériques (26) - 2s [MD5.332FEAB1435662FC6C672E25BEB37BE3] - 25/02/2011 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2871808] © [MD5.DD81D91FF3B0763C392422865C9AC12E] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [45568] © [MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] © [MD5.5A45FA344F4AD99D903F4B20E43B89EC] - 11/07/2012 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [1392128] © [MD5.1151B1BAA6F350B1DB6598E0FEA7C457] - 21/11/2010 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [390656] © [MD5.067FA52BFB59A56110A12312EF9AF243] - 21/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] © [MD5.2EE46D0268B69DFED15647DD974FE37E] - 11/07/2012 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [357888] © =>Hijacker.DNS.Hosts [MD5.444D310F8A73A1E4DE5BB650B3708462] - 11/07/2012 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [270336] © =>Hijacker.DNS.Hosts [MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 21/11/2010 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] © [MD5.1C7857B62DE5994A75B054A9FD4C3825] - 28/12/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [498688] © [MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows® [MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] © [MD5.F036CE71586E93D94DAB220D7BDF4416] - 21/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] © [MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - 21/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [102400] © [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 21/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] © [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] © [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] © [MD5.A5D9106A73DC88564C825D317CAC68AC] - 27/04/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [158208] © [MD5.09594D1089C523423B32A4229263F068] - 21/11/2010 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [261632] © [MD5.05D78AA5CB5F3F5C31160BDB955D0B7C] - 21/11/2010 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1659776] =>.Microsoft Windows® [MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] © [MD5.471815800AE33E6F1C32FB1B97C490CA] - 21/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] © [MD5.1B6163C503398B23FF8B939C67747683] - 21/11/2010 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [165888] © [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] © [MD5.DDAD5A7AB24D8B65F8D724F5C20FD806] - 21/11/2010 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [119296] © [MD5.0D08D2F3B3FF84E433346669B5E0F639] - 21/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (24) - 2s O23 - Service: Airtop (Airtop) . (...) - C:\ProgramData\Airtop\Airtop.exe =>PUP.Optional.Salus O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe © O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® O23 - Service: ApplicationHosting (ApplicationHosting) . (...) - C:\ProgramData\ApplicationHosting\ApplicationHosting.exe =>PUP.Optional.ApplicationHosting O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® O23 - Service: Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc. - Dropbox Update.) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe {0C89CBE063927780186EC0063F10D323} © O23 - Service: Touchla (doonioaduuaate) . (. - xrc.) - C:\Users\Alexis\AppData\Local\Labsoltax.exe O23 - Service: Dripkix Service (Dripkix) . (.Copyright © 2015 - .) - C:\Program Files\Dripkix\Dripkix.exe =>PUP.Optional.Amonetize O23 - Service: FastCompress (FastCompress) . (.Adlegend Media - Support File.) - C:\Program Files (x86)\FastCompress-Zip\Fast_Support.exe {11210D7D7D1C16D9150B69F8767D7C855E19} © O23 - Service: Desktop Upload (ginoquci) . (...) - C:\Users\Alexis\AppData\Local\Temp\nsb8202.tmp O23 - Service: Rename Outline (gufutoqu) . (...) - C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\knsjC532.tmp =>PUP.Optional.CrossRider O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: Ma-Config Agent (MaConfigAgent) . (.CybelSoft - Service de détection matériel.) - C:\Program Files\ma-config.com\MaConfigAgent.exe =>.Cybelsoft® O23 - Service: Add Telephone Line (nyneryxo) . (...) - C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\hnsg5CE7.tmp =>PUP.Optional.CrossRider O23 - Service: Razer Game Scanner (Razer Game Scanner Service) . (.Copyright © 2013-2015 - GameScannerService.) - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe =>.Razer Inc.® O23 - Service: Free Up Joystick (roqenufe) . (...) - C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\jnsb480E.tmp =>PUP.Optional.CrossRider O23 - Service: RzKLService (RzKLService) . (.Razer Inc. - RzKLService.exe.) - C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe =>.Razer Inc.® O23 - Service: Razer Surround Audio Service (RzMaelstromVADStreamingService) . (.A-Volute - Maelstrom VAD Streaming Service.) - C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe O23 - Service: SSFK (SSFK) . (.TODO: <公司名> - TODO: <文件说明>.) - C:\Program Files (x86)\SFK\SSFK.exe {1121D343CEADB8041BAC48B044906C5E105E} =>PUP.Optional.MyWebSearch O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe =>.DEVGURU CO LTD® O23 - Service: Update Mgr AssistPoint (Update Mgr AssistPoint) . (...) - C:\Program Files (x86)\Common Files\c716fd70-872c-4aaa-a07f-e248365d7f56\updater.exe (.not file.) =>PUP.Optional.AssistPoint O23 - Service: WindowsMangerProtect Service (WindowsMangerProtect) . (.Sysinternals process Explorer - Sysinternals process Explorer.) - C:\ProgramData\Tmp0x0x\ProtectWindowsManager.exe {11215BD52CE822E39F61AAE0642B2F566ABD} =>PUP.Optional.WpManager O23 - Service: WNetEnhancer Service (WNetEnhancer Service) . (...) - C:\Program Files (x86)\WNetEnhancer\WNetEnhancer Internet Enhancer\663d2e82e7a5dc32e243ab08ac2ec4a6.exe =>PUP.Optional.Wajam O23 - Service: Zitenop (Zitenop) . (...) - C:\ProgramData\Zitenop\Zitenop.exe =>PUP.Optional.Salus ---\\ Tâches planifiées en automatique (33) - 8s [MD5.280A526E8111AC6A5BCC1A059E1E0340] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [269000] =>.Adobe Systems Incorporated® [MD5.00000000000000000000000000000000] [APT] [AdobeAAMUpdater-1.0-Alexis-PC-Alexis] (...) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (.not file.) [0] [MD5.E49FD011745BFC5621C586CCD07FF81E] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6564776] =>.Piriform Ltd® [MD5.33BFEC2B102B196B62ABB9947C7D7E23] [APT] [DropboxUpdateTaskMachineCore] (.Dropbox, Inc..) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048] {0C89CBE063927780186EC0063F10D323} © [MD5.33BFEC2B102B196B62ABB9947C7D7E23] [APT] [DropboxUpdateTaskMachineUA] (.Dropbox, Inc..) -- C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048] {0C89CBE063927780186EC0063F10D323} © [MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc® [MD5.053EEEE1ABAE53F044F1E386E22AE525] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>.Google Inc® [MD5.5CB43CAD6E0507ED5363DD352478D408] [APT] [kol3015] (...) -- C:\Program Files (x86)\Fast-Search\kol3015.exe [58701] =>PUP.Optional.FastSearch [MD5.B7DE5EBDB81CA20938830638FBBBB779] [APT] [updateTask] (...) -- c:/task.vbs [592] [MD5.00000000000000000000000000000000] [APT] [Urecceqm] (...) -- C:\PROGRA~1\GROOVE~1\Okael.bat (.not file.) [0] =>PUP.Optional.Groover [MD5.8643E609F6E5C53EFD9AF59CBBEFEE1D] [APT] [VKCAGRPJFKDHGGAN] (.All rights reserved..) -- C:\ProgramData\Service7609\Service7609.exe [419328] =>Heuristic.Graftor [MD5.7A2870C2A8283B3630BF7670D0362B94] [APT] [{195C9C7A-8C13-41C8-8780-8310CF103364}] (.Google Inc..) -- c:\program files (x86)\Google\Chrome\application\chrome.exe [811848] =>.Google Inc® [MD5.C7D113EDE88B40CCC634EDEFC92C750D] [APT] [{48A1ACB4-CB8C-4160-8D6A-45860DC00F1C}] (.8pecxstudios.) -- d:\program files (x86)\Cyberfox\Cyberfox.exe [781856] {275F7B4841402DE0F41C8CCF30795AC2} © [MD5.5353A34090BABE3CD48B70569AF0DD12] [APT] [{5F5F8BA0-73A5-4940-BE02-7D58B8CF1E27}] (.Valve Corporation.) -- D:\Program Files (x86)\Steam\Steam.exe [3011152] =>.Valve® [MD5.5353A34090BABE3CD48B70569AF0DD12] [APT] [{EEE10425-C61E-47E9-A9FD-E5F7312FF846}] (.Valve Corporation.) -- D:\Program Files (x86)\Steam\Steam.exe [3011152] =>.Valve® [MD5.BC41666FF68C364CD3EAA486E50C9270] [APT] [Apple\AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [563000] =>.Apple Inc.® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] © O39 - APT: DropboxUpdateTaskMachineCore - (.Dropbox, Inc..) -- C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job [1182] © O39 - APT: DropboxUpdateTaskMachineUA - (.Dropbox, Inc..) -- C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job [1186] © O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1066] © O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1070] © O39 - APT: VKCAGRPJFKDHGGAN - (.All rights reserved..) -- C:\Windows\Tasks\VKCAGRPJFKDHGGAN.job [344] =>Heuristic.Graftor O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] © O39 - APT: AdobeAAMUpdater-1.0-Alexis-PC-Alexis - (...) -- C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Alexis-PC-Alexis [3506] O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2774] © O39 - APT: DropboxUpdateTaskMachineCore - (.Dropbox, Inc..) -- C:\Windows\System32\Tasks\DropboxUpdateTaskMachineCore [3930] © O39 - APT: DropboxUpdateTaskMachineUA - (.Dropbox, Inc..) -- C:\Windows\System32\Tasks\DropboxUpdateTaskMachineUA [4182] © O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3814] © O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4066] © O39 - APT: kol3015 - (...) -- C:\Windows\System32\Tasks\kol3015 [3090] =>PUP.Optional.FastSearch O39 - APT: updateTask - (...) -- C:\Windows\System32\Tasks\updateTask [3150] O39 - APT: Urecceqm - (...) -- C:\Windows\System32\Tasks\Urecceqm [3338] =>PUP.Optional.Groover O39 - APT: VKCAGRPJFKDHGGAN - (.All rights reserved..) -- C:\Windows\System32\Tasks\VKCAGRPJFKDHGGAN [3380] =>Heuristic.Graftor ---\\ Processus lancés (27) - 4s [MD5.E338ECFE8E997B8E7EC7165764F67F8A] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [246272] [PID.168] © [MD5.13155ABE5CEE5F2332885574A2432C01] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [776192] [PID.1336] © [MD5.79FE7F781972884B7AB05B4E60CC5ED9] - (.Sysinternals process Explorer - Sysinternals process Explorer.) -- C:\ProgramData\Tmp0x0x\ProtectWindowsManager.exe [344232] [PID.1400] {11215BD52CE822E39F61AAE0642B2F566ABD} © [MD5.63702EE9CBE4347C48FA6F30083D26A2] - (...) -- C:\ProgramData\Airtop\Airtop.exe [401408] [PID.1724] =>PUP.Optional.Salus [MD5.165DA337583D903CEEC988F56F933419] - (...) -- C:\ProgramData\ApplicationHosting\ApplicationHosting.exe [401408] [PID.1928] =>PUP.Optional.ApplicationHosting [MD5.790AC1BEFFBCC73A7ADD37CF7030E44C] - (.Copyright © 2015 - .) -- C:\Program Files\Dripkix\Dripkix.exe [379904] [PID.2084] =>PUP.Optional.Amonetize [MD5.F5FDE761873B4B45C4D6AD9CE3F95442] - (...) -- C:\Users\Alexis\AppData\Local\Temp\nsb8202.tmp [222208] [PID.2120] [MD5.71678A862FDBACC1B5A15BE31008306E] - (...) -- C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\hnsg5CE7.tmp [134656] [PID.2432] =>PUP.Optional.CrossRider [MD5.74752ECD1495E4388CCC3B781E637F91] - (...) -- C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\jnsb480E.tmp [307200] [PID.2556] =>PUP.Optional.CrossRider [MD5.0436A7489D3FB6D2BACB37415A6BF4C4] - (.A-Volute - Maelstrom VAD Streaming Service.) -- C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4250624] [PID.2600] [MD5.44D1D137952BE444B2BD998200151DFC] - (.TODO: <公司名> - TODO: <文件说明>.) -- C:\Program Files (x86)\SFK\SSFK.exe [155280] [PID.2760] {1121D343CEADB8041BAC48B044906C5E105E} [MD5.4DDF155817D2BF79675B400038A41317] - (...) -- C:\Program Files (x86)\WNetEnhancer\WNetEnhancer Internet Enhancer\663d2e82e7a5dc32e243ab08ac2ec4a6.exe [1457152] [PID.2948] =>PUP.Optional.Wajam [MD5.F64E1F680DEEE761AE00D650EC0FB129] - (...) -- C:\Users\Alexis\AppData\Local\gmsd_fr_005010169\upgmsd_fr_005010169.exe [3261616] [PID.4836] {1121659F89D645B84A6361DBAB1CE36D6315} =>PUP.Optional.CrossRider [MD5.A005676B30AEB3C7703C317D992B193A] - (.Copyright © 2015 - MalwareProtectionClient.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe [291648] [PID.1108] {0DB13F364982158C0E6000F666CC2AA4} =>.Superfluous.MalwareProtection [MD5.A005676B30AEB3C7703C317D992B193A] - (...) -- C:\Program Files (x86)\rec_en_77\rec_en_77.exe [291648] [PID.3936] {11219EC4C02D1E1878E59FED81CDA1E305F8} =>PUP.Optional.Tuto4PC [MD5.A005676B30AEB3C7703C317D992B193A] - (...) -- C:\Program Files (x86)\gmsd_fr_005010169\gmsd_fr_005010169.exe [291648] [PID.4320] {1121659F89D645B84A6361DBAB1CE36D6315} =>PUP.Optional.CrossRider [MD5.A005676B30AEB3C7703C317D992B193A] - (...) -- C:\ProgramData\Airtop\Airtop.exe [291648] [PID.6276] =>PUP.Optional.Salus [MD5.A005676B30AEB3C7703C317D992B193A] - (.Alexander Roshal - WinRAR archiver.) -- D:\Program Files (x86)\WinRAR\WinRAR.exe [291648] [PID.6908] [MD5.A005676B30AEB3C7703C317D992B193A] - (...) -- C:\Program Files (x86)\WNetEnhancer\WNetEnhancer Internet Enhancer\7e0e6c165467f226fa2a8f9d6445d9af.exe [291648] [PID.10592] =>PUP.Optional.Wajam [MD5.A005676B30AEB3C7703C317D992B193A] - (.Adlegend Media - Support File.) -- C:\Program Files (x86)\FastCompress-Zip\Fast_Support.exe [291648] [PID.15612] {11210D7D7D1C16D9150B69F8767D7C855E19} © [MD5.A005676B30AEB3C7703C317D992B193A] - (.Copyright © 2015 - .) -- C:\Program Files\Dripkix\packages\76b17136-be0a-4a59-8a8b-6dca3c97cc4d\Drip.exe [291648] [PID.14572] =>PUP.Optional.Amonetize [MD5.A005676B30AEB3C7703C317D992B193A] - (...) -- C:\ProgramData\Zitenop\Zitenop.exe [291648] [PID.9696] =>PUP.Optional.Salus [MD5.A005676B30AEB3C7703C317D992B193A] - (...) -- C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\knsjC532.tmp [291648] [PID.16588] =>PUP.Optional.CrossRider [MD5.A005676B30AEB3C7703C317D992B193A] - (.TeamSpeak Systems GmbH - TeamSpeak 3 Client.) -- C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe [291648] [PID.4144] {7F5E65E3859D53019B20374E9FDA5B38} © [MD5.A005676B30AEB3C7703C317D992B193A] - (.8pecxstudios - Cyberfox.) -- D:\Program Files (x86)\Cyberfox\Cyberfox.exe [291648] [PID.3616] {275F7B4841402DE0F41C8CCF30795AC2} © [MD5.A005676B30AEB3C7703C317D992B193A] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\Alexis\Downloads\ZHPDiag3.exe [291648] [PID.14916] © [MD5.A005676B30AEB3C7703C317D992B193A] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\Alexis\Downloads\ZHPDiag3.exe [291648] [PID.5108] © ---\\ Google Chrome, Démarrage,Recherche,Extensions (2) - 34s G2 - GCE: Preference [User Data\Default] [fhdcbgmkmfapmaccefgcigficdnphjbn] [{"background":{"scripts":["background.js"]},"conte] {background:{scripts:[background.js]}content_scrip =>Hijacker.Browser G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (21) - 2s P2 - EXT FILE: (...) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\default.xml P2 - EXT FILE: (...) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\findit.xml =>PUP.Optional.SmartBar P2 - EXT FILE: (...) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\istartpageing.xml =>PUP.Optional.IstartPageing P2 - EXT FILE: (...) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\search-simple.xml =>PUP.Optional.SearchSimple P2 - EXT FILE: (...) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} © P2 - EXT: (.lightningnewtab.com - Newtab.) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab P2 - EXT: (.roc - YahooToolsProtected .) -- C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\extensions\yahooprotected@gmail.com P2 - FPN: [HKCU] [pandonetworks.com/PandoWebPlugin] - (.Pando Networks.) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_245.dll © P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll © P2 - FPN: [HKLM] [@esn.me/esnsonar,version=0.70.4] - (.ESN Social Software AB.) -- C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll © P2 - FPN: [HKLM] [@esn/npbattlelog,version=2.5.1] - (.EA Digital Illusions CE AB.) -- C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll © P2 - FPN: [HKLM] [@esn/npbattlelog,version=2.7.1] - (.EA Digital Illusions CE AB.) -- C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll © P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.65.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll © P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.65.2] - (.Oracle Corporation.) -- C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll © P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (.Microsoft Corporation.) -- C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll © P2 - FPN: [HKLM] [@pandonetworks.com/PandoWebPlugin] - (.Pando Networks.) -- C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll © P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc..) -- C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll © P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.1] - (.VideoLAN.) -- C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll © ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (16) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://%66%65%65%64.%73%6E%61%70%64%6F.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_ByKo5GOPu13rXw155J4OB8oo3_nrI_YPbYytCFQMvqrv5QNdU0j2sjSZdooisThXcRcgUYaWyOaN5DqyNbRFcqYtiw8A0zjNGuJWk93003G8B1-suLT2VAyq6xBHqSp2uzWkn2eJkBUuIoLVNyLfxNC1mvis4 =>PUP.Optional.Linkury R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com?fr=hp-avast&type=avastbcl R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com?fr=hp-avast&type=avastbcl R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_byko5gopu13rxw155j4ob8oo3_nri_ypbyytcfqmvqrv5qndu0j2sjszdooisthxcrcguyawyoan5dqdcbztevk9yo_oplzovxeitjg-jalxk8sgq8x5mlsdgtsrv4swri8h3dyautnqleoivqh8ejs0eb78f&q={searchterms} =>PUP.Optional.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_byko5gopu13rxw155j4ob8oo3_nri_ypbyytcfqmvqrv5qndu0j2sjszdooisthxcrcguyawyoan5dqdcbztevk9yo_oplzovxeitjg-jalxk8sgq8x5mlsdgtsrv4swri8h3dyautnqleoivqh8ejs0eb78f&q={searchterms} =>PUP.Optional.Linkury R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_byko5gopu13rxw155j4ob8oo3_nri_ypbyytcfqmvqrv5qndu0j2sjszdooisthxcrcguyawyoan5dqdcbztevk9yo_oplzovxeitjg-jalxk8sgq8x5mlsdgtsrv4swri8h3dyautnqleoivqh8ejs0eb78f&q={searchterms} =>PUP.Optional.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_byko5gopu13rxw155j4ob8oo3_nri_ypbyytcfqmvqrv5qndu0j2sjszdooisthxcrcguyawyoan5dqdcbztevk9yo_oplzovxeitjg-jalxk8sgq8x5mlsdgtsrv4swri8h3dyautnqleoivqh8ejs0eb78f&q={searchterms} =>PUP.Optional.Linkury R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKEY_USERS\S-1-5-21-921229589-2242423223-674013632-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_byko5gopu13rxw155j4ob8oo3_nri_ypbyytcfqmvqrv5qndu0j2sjszdooisthxcrcguyawyoan5dqdcbztevk9yo_oplzovxeitjg-jalxk8sgq8x5mlsdgtsrv4swri8h3dyautnqleoivqh8ejs0eb78f&q={searchterms} =>PUP.Optional.Linkury R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (7) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <-loopback> R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:52083;https=127.0.0.1:52083 =>Hijacker.Proxy R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) © F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) © F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) © ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (6) - 0s O2 - BHO: CrossriderApp0035497 [64Bits] - {11111111-1111-1111-1111-110311541197} (Orphean) =>PUP.Optional.CrossRider O2 - BHO: CrossriderApp0048922 [64Bits] - {11111111-1111-1111-1111-110411891122} (Orphean) =>PUP.Optional.CrossRider O2 - BHO: TrustMediaViewerV1alpha1193 [64Bits] - {30c23909-a0f6-4e68-a6f7-919ff3cfac34} (Orphean) =>PUP.Optional.MediaViewer O2 - BHO: ExplorerBHO Class [64Bits] - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} . (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer32.dll © O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll =>.Oracle America, Inc.® O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll =>.Oracle America, Inc.® ---\\ Internet Explorer, Barre d'outil (1) - 1s O3 - Toolbar: (no name) - [HKLM]{553891B7-A0D5-4526-BE18-D3CE461D6310} (Orphean) © ---\\ Applications lancées au démarrage du système (26) - 1s O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.® O4 - HKLM\..\Run: [SpaceSoundPro] C:\Program Files\SpaceSoundPro\SpaceSoundPro.exe (.not file.) =>PUP.Optional.SpaceSoundPro O4 - HKCU\..\Run: [Speech Recognition] . (.Microsoft Corporation - Reconnaissance vocale.) -- C:\Windows\Speech\Common\sapisvr.exe © O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.Disc Soft Ltd® O4 - HKCU\..\Run: [WindApp] C:\Users\Alexis\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.) =>PUP.Optional.Nosibay O4 - HKCU\..\Run: [Selection Tools] C:\Users\Alexis\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe (.not file.) =>PUP.Optional.Nosibay O4 - HKLM\..\Wow6432Node\Run: [USB3MON] . (.Intel Corporation - Intel(R) USB 3.0 Monitor.) -- C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe =>.Intel Corporation® O4 - HKLM\..\Wow6432Node\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe =>.Microsoft Corporation® O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.® O4 - HKLM\..\Wow6432Node\Run: [Dropbox] . (.Dropbox, Inc. - Dropbox.) -- C:\Program Files (x86)\Dropbox\Client\Dropbox.exe =>.Dropbox, Inc® O4 - HKLM\..\Wow6432Node\Run: [MalwareProtectionLive] . (.Copyright © 2015 - MalwareProtectionClient.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe {0DB13F364982158C0E6000F666CC2AA4} =>.Superfluous.MalwareProtection O4 - HKLM\..\Wow6432Node\Run: [ospd_us_013010168] (Orphean) =>PUP.Optional.CrossRider O4 - HKLM\..\Wow6432Node\Run: [rec_en_77] . (...) -- C:\Program Files (x86)\rec_en_77\rec_en_77.exe {11219EC4C02D1E1878E59FED81CDA1E305F8} =>PUP.Optional.Tuto4PC O4 - HKLM\..\Wow6432Node\Run: [gmsd_fr_005010169] . (...) -- C:\Program Files (x86)\gmsd_fr_005010169\gmsd_fr_005010169.exe {1121659F89D645B84A6361DBAB1CE36D6315} =>PUP.Optional.CrossRider O4 - HKLM\..\Wow6432Node\RunOnce: [upgmsd_fr_005010169.exe] . (...) -- C:\Users\Alexis\AppData\Local\gmsd_fr_005010169\upgmsd_fr_005010169.exe {1121659F89D645B84A6361DBAB1CE36D6315} =>PUP.Optional.CrossRider O4 - HKLM\..\Wow6432Node\RunOnce: [Update] C:\Users\Alexis\AppData\Roaming\VOPackage\VOPackage.exe (.not file.) =>PUP.Optional.Downware O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe © O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe © O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe © O4 - HKUS\S-1-5-21-921229589-2242423223-674013632-1001\..\Run: [Speech Recognition] . (.Microsoft Corporation - Reconnaissance vocale.) -- C:\Windows\Speech\Common\sapisvr.exe © O4 - HKUS\S-1-5-21-921229589-2242423223-674013632-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKUS\S-1-5-21-921229589-2242423223-674013632-1001\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.Disc Soft Ltd® O4 - HKUS\S-1-5-21-921229589-2242423223-674013632-1001\..\Run: [WindApp] C:\Users\Alexis\AppData\Roaming\Store\WindApp\WindApp.exe (.not file.) =>PUP.Optional.Nosibay O4 - HKUS\S-1-5-21-921229589-2242423223-674013632-1001\..\Run: [Selection Tools] C:\Users\Alexis\AppData\Roaming\WTools\Selection Tools\Selection Tools.exe (.not file.) =>PUP.Optional.Nosibay ---\\ Winsock hijacker (Layered Service Provider) (15) - 0s O10 - WLSP:\Catalog_Entries\000000000001\Winsock LSP File . (...) -- C:\Windows\System32\Ekiraky.dll (Not File) =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries\000000000002\Winsock LSP File . (...) -- C:\Windows\System32\Ekiraky.dll (Not File) =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries\000000000003\Winsock LSP File . (...) -- C:\Windows\System32\Ekiraky.dll (Not File) =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries\000000000004\Winsock LSP File . (...) -- C:\Windows\System32\Ekiraky.dll (Not File) =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries\000000000015\Winsock LSP File . (...) -- C:\Windows\System32\Ekiraky.dll (Not File) =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000001\Winsock LSP File . (...) -- C:\Windows\system32\Ekiraky64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000002\Winsock LSP File . (...) -- C:\Windows\system32\Ekiraky64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000003\Winsock LSP File . (...) -- C:\Windows\system32\Ekiraky64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000004\Winsock LSP File . (...) -- C:\Windows\system32\Ekiraky64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000005\Winsock LSP File . (...) -- C:\Windows\system32\Ofuwday64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000006\Winsock LSP File . (...) -- C:\Windows\system32\Ofuwday64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000007\Winsock LSP File . (...) -- C:\Windows\system32\Ofuwday64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000008\Winsock LSP File . (...) -- C:\Windows\system32\Ofuwday64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000019\Winsock LSP File . (...) -- C:\Windows\system32\Ofuwday64.dll =>Hijacker.Winsock O10 - WLSP:\Catalog_Entries64\000000000020\Winsock LSP File . (...) -- C:\Windows\system32\Ekiraky64.dll =>Hijacker.Winsock ---\\ Modification Domaine/Adresses DNS (12) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 104.197.191.4 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.20.115 192.168.20.116 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = crdp-lille.local O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 104.197.191.4 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.20.115 192.168.20.116 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpDomain = crdp-lille.local O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 104.197.191.4 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.20.115 192.168.20.116 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254 O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpDomain = crdp-lille.local ---\\ Protocole additionnel (21) - 2s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll © O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll © O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll © O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll © O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Handler: skype4com [64Bits] - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} . (.Skype Technologies - Skype4COM.) -- C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll =>.Skype Software Sarl® O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll © O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll © O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s O20 - AppInit_DLLs: . (...) - C:\ProgramData\Zitenop\Viajob.dll =>PUP.Optional.Salus ---\\ Logiciels installés (105) - 48s O42 - Logiciel: @BIOS - (.GIGABYTE.) [HKLM][64Bits] -- {B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83} © O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX © O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI © O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C82415B1-6D78-7002-1E5A-338B06C20524} © O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} © O42 - Logiciel: AMD Catalyst Control Center - (.Nom de votre société.) [HKLM][64Bits] -- {DC914285-C110-6FB9-0235-339080572BB9} O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4D4964B2-1FAD-A4A1-052A-7F048C7A128D} © O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {0407893F-352C-B182-E04A-A8C3333DA29B} © O42 - Logiciel: AMD Media Foundation Decoders - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {55B348BE-A3BE-9AE7-58BD-BE45B9A28F82} © O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {426582A8-202F-D13C-8BD5-F00551BAFC93} © O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {A50679D9-6CBD-4FCD-BACB-62EF3894F6F3} © O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {1F72FDD5-A069-45B4-928F-D0F16492DC69} © O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {FD244E19-6EFE-4A2D-948A-0D45D4C168BE} © O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF} © O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} © O42 - Logiciel: AutoGreen B12.0206.1 - (.GIGABYTE.) [HKLM][64Bits] -- {C75FAD21-EC08-42F3-92D6-C9C0AB355345} © O42 - Logiciel: AutoGreen B12.0206.1 - (.GIGABYTE.) [HKLM][64Bits] -- InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345} © O42 - Logiciel: Battlefield 3™ - (.Electronic Arts.) [HKLM][64Bits] -- {76285C16-411A-488A-BCE3-C83CB933D8CF} © O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {56DDDFB8-7F79-4480-89D5-25E1F52AB28F} © O42 - Logiciel: Canon MG3100 series MP Drivers - (...) [HKLM][64Bits] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG3100_series O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {11087D24-567D-7D88-69C6-D7A08B5F4C47} © O42 - Logiciel: Catalyst Control Center Graphics Previews Common - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {D48A6B6E-F184-0FDC-37E7-747B99D05849} © O42 - Logiciel: Catalyst Control Center Localization All - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {ECBD4C97-2421-F72D-D464-F1865B5B9BAE} © O42 - Logiciel: CCC Help Chinese Standard - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {E12EFCDD-4216-B13C-A7FD-193E5B310FDC} © O42 - Logiciel: CCC Help Chinese Traditional - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {2DDBBBAC-CD01-BC14-379F-D4410EA23EE8} © O42 - Logiciel: CCC Help Czech - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {BED52158-4FA3-E3C6-0469-57CB86DD31B1} © O42 - Logiciel: CCC Help Danish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {98DD4A71-7634-93FE-E654-EE0702755079} © O42 - Logiciel: CCC Help Dutch - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A5FFD88B-9054-94F8-2A98-74BFE092DD7E} © O42 - Logiciel: CCC Help English - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4D8DAEC1-E68E-6D3B-59F1-C467EB716FC9} © O42 - Logiciel: CCC Help Finnish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C561B330-D61D-1145-1FBA-659F495A37DD} © O42 - Logiciel: CCC Help French - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {06321F6A-683B-67C8-C0C4-377E828A6B35} © O42 - Logiciel: CCC Help German - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F3A362D2-3AE5-135F-6D4B-B503FA940B2A} © O42 - Logiciel: CCC Help Greek - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {1FEB2431-43FC-A347-E3CF-19A11882C836} © O42 - Logiciel: CCC Help Hungarian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {9BE5D029-21AF-4AF8-E8AC-5EE820989D6D} © O42 - Logiciel: CCC Help Italian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {D42AE073-7032-64E9-DEE7-DDD5B06C8CBA} © O42 - Logiciel: CCC Help Japanese - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {45EA0C40-75A8-B25B-9407-65A091598A3B} © O42 - Logiciel: CCC Help Korean - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {2133B48A-B339-9B36-D9A2-30080100BC98} © O42 - Logiciel: CCC Help Norwegian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4EE3E380-B8FC-5D63-3152-8DEE19A57B6B} © O42 - Logiciel: CCC Help Polish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {8C025263-0129-6713-35C0-9246C80B32D1} © O42 - Logiciel: CCC Help Portuguese - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {1D844E6F-8132-D0AB-98CA-BD3B497DD284} © O42 - Logiciel: CCC Help Russian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {369F8F60-0D34-3551-8CF5-F9AD0B9B7F67} © O42 - Logiciel: CCC Help Spanish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {6FE68FBF-4815-DDA9-9346-FF6E512A8B3A} © O42 - Logiciel: CCC Help Swedish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {25AFF9AE-4FA6-1529-F861-E122311C7FF9} © O42 - Logiciel: CCC Help Thai - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {79C8C8FD-8472-B94D-3E2F-BEA23A79A664} © O42 - Logiciel: CCC Help Turkish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C05C1350-C3D9-519C-8D3D-A5527D24DFD6} © O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner © O42 - Logiciel: Clicker Heroes - (.Playsaurus.) [HKLM][64Bits] -- Steam App 363970 © =>.SteamApp.Game O42 - Logiciel: Curse Client - (.Curse.) [HKCU][64Bits] -- 101a9f93b8f0bb6f © O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite © O42 - Logiciel: DayZ - (.Bohemia Interactive.) [HKLM][64Bits] -- Steam App 221100 © =>.SteamApp.Game O42 - Logiciel: Dropbox - (.Dropbox, Inc..) [HKLM][64Bits] -- Dropbox © O42 - Logiciel: Dropbox Update Helper - (.Dropbox, Inc..) [HKLM][64Bits] -- {099218A5-A723-43DC-8DB5-6173656A1E94} © O42 - Logiciel: Easy Tune 6 B12.0626.1 - (.GIGABYTE.) [HKLM][64Bits] -- {457D7505-D665-4F95-91C3-ECB8C56E9ACA} © O42 - Logiciel: Easy Tune 6 B12.0626.1 - (.GIGABYTE.) [HKLM][64Bits] -- InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA} © O42 - Logiciel: Etron USB3.0 Host Controller - (.Etron Technology.) [HKLM][64Bits] -- {DFBB738C-71D8-4DC5-B8D2-D65C37680E27} © O42 - Logiciel: Etron USB3.0 Host Controller - (.Etron Technology.) [HKLM][64Bits] -- InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27} © O42 - Logiciel: FastCompress-Zip_1.0.2.1_Release - (...) [HKLM][64Bits] -- FastCompress-Zip O42 - Logiciel: FIFA 14 - (.Electronic Arts.) [HKLM][64Bits] -- {AA7A2800-1E75-4240-855B-03AFF8E5171E} © O42 - Logiciel: GamesDesktop 001.005010169 - (.GAMESDESKTOP.) [HKLM][64Bits] -- gmsd_fr_005010169_is1 =>PUP.Optional.GamesDesktop O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} © O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} © O42 - Logiciel: Hearthstone - (.Blizzard Entertainment.) [HKLM][64Bits] -- Hearthstone © O42 - Logiciel: Heroes of the Storm - (.Blizzard Entertainment.) [HKLM][64Bits] -- Heroes of the Storm © O42 - Logiciel: iCloud - (.Apple Inc..) [HKLM][64Bits] -- {709A2D23-C25E-47B5-9268-CB6FEE648504} © O42 - Logiciel: Intel(R) USB 3.0 eXtensible Host Controller Driver - (.Intel Corporation.) [HKLM][64Bits] -- {240C3DDD-C5E9-4029-9DF7-95650D040CF2} © O42 - Logiciel: iRoot - (.Shenzhen Xinyi Network Co.,Ltd..) [HKLM][64Bits] -- {1295E43F-382A-4CB2-9E0F-079C0D7401BB}_is1 O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {96984DE8-1DB8-425C-AC8C-3098BC696F04} © O42 - Logiciel: Java 8 Update 65 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218065F0} © O42 - Logiciel: Java 8 Update 66 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86418066F0} © O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} © O42 - Logiciel: Kingo ROOT version 1.4.2.2494 - (.Kingosoft Technology Ltd..) [HKLM][64Bits] -- {AE7675D6-0B31-494F-ABFA-822E1A0FDF17}_is1 © O42 - Logiciel: LibreOffice 5.0.3.2 - (.The Document Foundation.) [HKLM][64Bits] -- {D61E7AA0-0380-49B9-8DDD-7685E2306176} © O42 - Logiciel: Ma-Config.com (64 bits) - (.Cybelsoft.) [HKLM][64Bits] -- {E1322B8A-6F66-44ED-95D5-7FEBC50AC814} © O42 - Logiciel: Malware Protection Live - (...) [HKLM][64Bits] -- MalwareProtectionLive O42 - Logiciel: MEGAsync - (.Mega Limited.) [HKLM][64Bits] -- MEGAsync © O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM][64Bits] -- {9C5A08BF-BB99-4998-81BD-F6CC32483B34} © O42 - Logiciel: Microsoft Corporation - (.Microsoft Corporation.) [HKLM][64Bits] -- {B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800} © O42 - Logiciel: Microsoft LifeCam - (.Microsoft Corporation.) [HKLM][64Bits] -- {5CE7E3F5-9803-4F32-AA89-2D8848A80109} © O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} © O42 - Logiciel: Mozilla Firefox 42.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 42.0 (x86 fr) © O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService © O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++ © O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {DEA314C4-0929-4250-BC92-98E4C105F28D} © O42 - Logiciel: OEM Application Profile - (.Nom de votre société.) [HKLM][64Bits] -- {69C424A3-8863-FF59-FCF3-E3D94AB696FA} O42 - Logiciel: Oracle VM VirtualBox 5.0.10 - (.Oracle Corporation.) [HKLM][64Bits] -- {F6E922CF-068D-4AFC-8DBF-4636B84AF0A5} © O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin © O42 - Logiciel: Rainbow Six Siege - Open Beta - (.Ubisoft.) [HKLM][64Bits] -- Uplay Install 1001 © O42 - Logiciel: Razer Cortex - (.Razer Inc..) [HKLM][64Bits] -- Razer Cortex_is1 © O42 - Logiciel: Razer Surround - (.Razer Inc..) [HKLM][64Bits] -- Razer Surround © O42 - Logiciel: Razer Synapse - (.Razer Inc..) [HKLM][64Bits] -- {0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6} © O42 - Logiciel: recALL version 15.02 - (...) [HKLM][64Bits] -- recALL_is1 O42 - Logiciel: Rust - (.Facepunch Studios.) [HKLM][64Bits] -- Steam App 252490 © =>.SteamApp.Game O42 - Logiciel: SafeFinder - (.Linkury.) [HKLM][64Bits] -- {D71F4C2F-F591-45C8-87D7-C1FD4DC4A7EC} =>PUP.Optional.SmartBar O42 - Logiciel: Samsung Kies3 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {88547073-C566-4895-9005-EBE98EA3F7C7} © O42 - Logiciel: Samsung Kies3 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7} © O42 - Logiciel: Samsung USB Driver for Mobile Phones - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} © O42 - Logiciel: Skype™ 6.21 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} © O42 - Logiciel: SVH - (...) [HKLM][64Bits] -- rec_en_77_is1 =>PUP.Optional.Tuto4PC O42 - Logiciel: TeamSpeak 3 Client - (.TeamSpeak Systems GmbH.) [HKLM][64Bits] -- TeamSpeak 3 Client © O42 - Logiciel: UNetbootin - (...) [HKLM][64Bits] -- UNetbootin O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM][64Bits] -- Uplay © O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player © O42 - Logiciel: Warface - (.Crytek.) [HKLM][64Bits] -- Steam App 291480 © =>.SteamApp.Game O42 - Logiciel: Wireshark 1.12.8 (64-bit) - (.The Wireshark developer community, http://www.wireshark.org.) [HKLM][64Bits] -- Wireshark © ---\\ HKCU & HKLM Software Keys (172) - 48s HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\AdwCleaner HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies HKLM\SOFTWARE\Wow6432Node\AMD HKLM\SOFTWARE\Wow6432Node\Apple Inc. HKLM\SOFTWARE\Wow6432Node\ArenaNet HKLM\SOFTWARE\Wow6432Node\AssistPoint =>PUP.Optional.AssistPoint HKLM\SOFTWARE\Wow6432Node\Atheros Communications Inc. HKLM\SOFTWARE\Wow6432Node\ATI HKLM\SOFTWARE\Wow6432Node\ATI Technologies HKLM\SOFTWARE\Wow6432Node\Battlelog Web Plugins HKLM\SOFTWARE\Wow6432Node\Blizzard Entertainment HKLM\SOFTWARE\Wow6432Node\Client HKLM\SOFTWARE\Wow6432Node\DICE HKLM\SOFTWARE\Wow6432Node\Disc Soft HKLM\SOFTWARE\Wow6432Node\dotNetInstaller HKLM\SOFTWARE\Wow6432Node\downchecker =>PUP.Optional.DownChecker HKLM\SOFTWARE\Wow6432Node\Dropbox HKLM\SOFTWARE\Wow6432Node\DropboxUpdate HKLM\SOFTWARE\Wow6432Node\EA Games HKLM\SOFTWARE\Wow6432Node\EA Sports HKLM\SOFTWARE\Wow6432Node\EasyAntiCheat HKLM\SOFTWARE\Wow6432Node\Electronic Arts HKLM\SOFTWARE\Wow6432Node\Fast-Search =>PUP.Optional.FastSearch HKLM\SOFTWARE\Wow6432Node\FastCompress-Zip HKLM\SOFTWARE\Wow6432Node\FFPluginHp =>PUP.Optional.SweetSearch HKLM\SOFTWARE\Wow6432Node\FileZilla Client HKLM\SOFTWARE\Wow6432Node\Fraps HKLM\SOFTWARE\Wow6432Node\Gameforge HKLM\SOFTWARE\Wow6432Node\gamersfirst HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP =>PUP.Optional.GamesDesktop HKLM\SOFTWARE\Wow6432Node\Gigabyte HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\Havij HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\InstallShield HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\istartpageingSoftware =>PUP.Optional.IstartPageing HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\LibreOffice HKLM\SOFTWARE\Wow6432Node\Licenses HKLM\SOFTWARE\Wow6432Node\Loader HKLM\SOFTWARE\Wow6432Node\LolliScan =>PUP.Optional.Graftor HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\mount&blade warband HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\mtAirtop =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\mtZitenop =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Notepad++ HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\Opera Software HKLM\SOFTWARE\Wow6432Node\Origin HKLM\SOFTWARE\Wow6432Node\Origin Games HKLM\SOFTWARE\Wow6432Node\Overwolf HKLM\SOFTWARE\Wow6432Node\Razer HKLM\SOFTWARE\Wow6432Node\RichMediaViewV1 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Wow6432Node\RichMediaViewV1release399 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Wow6432Node\Samsung HKLM\SOFTWARE\Wow6432Node\SensePlus-nv =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\SensePlus-nv-ie =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SoftVoice HKLM\SOFTWARE\Wow6432Node\SpaceSondPro =>PUP.Optional.SpaceSoundPro HKLM\SOFTWARE\Wow6432Node\Spotflux, Inc HKLM\SOFTWARE\Wow6432Node\SVH HKLM\SOFTWARE\Wow6432Node\SwiftSearch_1.10.0.25 =>PUP.Optional.Generic HKLM\SOFTWARE\Wow6432Node\TeamSpeak 3 Client HKLM\SOFTWARE\Wow6432Node\The Document Foundation HKLM\SOFTWARE\Wow6432Node\THQ HKLM\SOFTWARE\Wow6432Node\TrustMediaViewerV1alpha1193 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive HKLM\SOFTWARE\Wow6432Node\Ubisoft HKLM\SOFTWARE\Wow6432Node\Valve HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WinRAR HKLM\SOFTWARE\Wow6432Node\WNetEnhancer =>PUP.Optional.Wajam HKLM\SOFTWARE\Wow6432Node\XinYi Network HKLM\SOFTWARE\Wow6432Node\yoursearchingSoftware =>PUP.Optional.YourSearching HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\7room HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AhnLab HKCU\SOFTWARE\Aion HKCU\SOFTWARE\AMD HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\ATI HKCU\SOFTWARE\Audacity HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\Blizzard Entertainment HKCU\SOFTWARE\Bugsplat HKCU\SOFTWARE\Canon HKCU\SOFTWARE\DailyPcClean =>PUP.Optional.DailyPCClean HKCU\SOFTWARE\Disc Soft HKCU\SOFTWARE\Drivers HKCU\SOFTWARE\Dropbox HKCU\SOFTWARE\DropboxUpdate HKCU\SOFTWARE\ej-technologies HKCU\SOFTWARE\Electronic Arts HKCU\SOFTWARE\Facepunch Studios LTD HKCU\SOFTWARE\FastCompress-Zip HKCU\SOFTWARE\FixKorea HKCU\SOFTWARE\Gameforge4d HKCU\SOFTWARE\GfaceGmbh HKCU\SOFTWARE\Gigabyte HKCU\SOFTWARE\Google HKCU\SOFTWARE\IGA HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\InstallPath HKCU\SOFTWARE\IvoSoft HKCU\SOFTWARE\iWebar-nv-ie =>PUP.Optional.CrossRider HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\Licenses HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Logitech HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MainConcept HKCU\SOFTWARE\MainConcept (Consumer) HKCU\SOFTWARE\Mirillis HKCU\SOFTWARE\MountAndBladeWarbandKeys HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Mumble HKCU\SOFTWARE\Nexon HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer HKCU\SOFTWARE\OB HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\Oracle HKCU\SOFTWARE\Parsec Productions HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\Raptr HKCU\SOFTWARE\Razer HKCU\SOFTWARE\Rtp HKCU\SOFTWARE\Samsung HKCU\SOFTWARE\SKS HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SoftVoice HKCU\SOFTWARE\Software HKCU\SOFTWARE\Store =>PUP.Optional.Generic HKCU\SOFTWARE\SysProgs HKCU\SOFTWARE\System32 HKCU\SOFTWARE\TeamSpeak 3 Client HKCU\SOFTWARE\TechSmith HKCU\SOFTWARE\tfdfu HKCU\SOFTWARE\The Creative Assembly HKCU\SOFTWARE\The Document Foundation HKCU\SOFTWARE\The Fun Pimps HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner HKCU\SOFTWARE\Tutorials =>PUP.Optional.AgenceExclusive HKCU\SOFTWARE\TutoTag =>PUP.Optional.AgenceExclusive HKCU\SOFTWARE\Unity HKCU\SOFTWARE\Valve HKCU\SOFTWARE\VIA HKCU\SOFTWARE\Wargaming.net HKCU\SOFTWARE\Win HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Wireshark HKCU\SOFTWARE\WNetEnhancer =>PUP.Optional.Wajam HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\WTools =>PUP.Optional.Nosibay HKCU\SOFTWARE\XinYi Network HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\Intel\Indeo\4.1 HKCU\SOFTWARE\AppDataLow\Software ---\\ Contenu des dossiers Programmes (336) - 31s O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009 =>PUP.Optional.CrossRider O43 - CFD: 07/12/2015 - [] D -- C:\Program Files (x86)\032B0290-1449484097-0559-0306-940700080009 =>PUP.Optional.CrossRider O43 - CFD: 23/03/2015 - [] D -- C:\Program Files (x86)\209fe72e-431d-43ba-948d-1274eef4bd7f =>PUP.Optional.CrossRider O43 - CFD: 23/03/2015 - [] D -- C:\Program Files (x86)\6d2018b6-192d-498a-8d18-12afcb059256 =>PUP.Optional.CrossRider O43 - CFD: 23/03/2015 - [] D -- C:\Program Files (x86)\Adobe O43 - CFD: 23/03/2015 - [] D -- C:\Program Files (x86)\AMD O43 - CFD: 02/06/2013 - [] D -- C:\Program Files (x86)\AMD APP O43 - CFD: 14/02/2015 - [] D -- C:\Program Files (x86)\AMD AVT O43 - CFD: 18/10/2015 - [] D -- C:\Program Files (x86)\Apple Software Update O43 - CFD: 18/11/2015 - [] D -- C:\Program Files (x86)\Assist Point =>PUP.Optional.AssistPoint O43 - CFD: 21/09/2015 - [] D -- C:\Program Files (x86)\Battle.net O43 - CFD: 22/10/2015 - [] D -- C:\Program Files (x86)\Battlelog Web Plugins O43 - CFD: 18/10/2015 - [] D -- C:\Program Files (x86)\Bonjour O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 25/06/2014 - [] D -- C:\Program Files (x86)\DAEMON Tools Lite O43 - CFD: 22/11/2015 - [] D -- C:\Program Files (x86)\Dropbox O43 - CFD: 14/02/2015 - [] D -- C:\Program Files (x86)\Etron Technology O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\Fast-Search =>PUP.Optional.FastSearch O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\FastCompress-Zip O43 - CFD: 07/12/2015 - [] D -- C:\Program Files (x86)\Feed Notifier O43 - CFD: 26/10/2015 - [] D -- C:\Program Files (x86)\GameforgeLive O43 - CFD: 13/12/2014 - [] D -- C:\Program Files (x86)\GIGABYTE O43 - CFD: 07/12/2015 - [] D -- C:\Program Files (x86)\gmsd_fr_005010169 =>PUP.Optional.CrossRider O43 - CFD: 28/10/2015 - [] D -- C:\Program Files (x86)\Google O43 - CFD: 21/05/2015 - [] D -- C:\Program Files (x86)\Hearthstone O43 - CFD: 28/10/2015 - [] D -- C:\Program Files (x86)\Image-Line O43 - CFD: 06/12/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information O43 - CFD: 13/12/2014 - [] D -- C:\Program Files (x86)\Intel O43 - CFD: 11/07/2012 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 18/10/2015 - [] D -- C:\Program Files (x86)\iTunes O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Java O43 - CFD: 06/12/2015 - [] D -- C:\Program Files (x86)\Kingo ROOT O43 - CFD: 03/11/2015 - [] D -- C:\Program Files (x86)\LibreOffice 5 O43 - CFD: 12/12/2014 - [] D -- C:\Program Files (x86)\Microsoft LifeCam O43 - CFD: 07/12/2015 - [] D -- C:\Program Files (x86)\Microsoft Silverlight O43 - CFD: 17/09/2013 - [] D -- C:\Program Files (x86)\Microsoft XNA O43 - CFD: 02/06/2013 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 21/11/2015 - [0] D -- C:\Program Files (x86)\Mirillis O43 - CFD: 14/11/2015 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 15/11/2015 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 01/11/2013 - [] D -- C:\Program Files (x86)\Mumble O43 - CFD: 03/05/2015 - [] D -- C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\Opera O43 - CFD: 28/10/2015 - [] D -- C:\Program Files (x86)\Overwolf O43 - CFD: 09/06/2013 - [] D -- C:\Program Files (x86)\Pando Networks O43 - CFD: 14/12/2014 - [] D -- C:\Program Files (x86)\Raptr O43 - CFD: 14/02/2015 - [] D -- C:\Program Files (x86)\Razer O43 - CFD: 07/12/2015 - [] D -- C:\Program Files (x86)\rec_en_77 =>PUP.Optional.Tuto4PC O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 06/11/2015 - [] D -- C:\Program Files (x86)\RegCleaner O43 - CFD: 06/12/2015 - [] D -- C:\Program Files (x86)\Samsung O43 - CFD: 08/12/2015 - [] D -- C:\Program Files (x86)\SFK =>PUP.Optional.MyWebSearch O43 - CFD: 21/11/2015 - [] RD -- C:\Program Files (x86)\Skype O43 - CFD: 24/09/2014 - [] D -- C:\Program Files (x86)\Spotflux O43 - CFD: 28/11/2015 - [] D -- C:\Program Files (x86)\Ubisoft O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 21/11/2015 - [] D -- C:\Program Files (x86)\VIA O43 - CFD: 15/11/2015 - [] D -- C:\Program Files (x86)\VideoLAN O43 - CFD: 07/12/2015 - [] D -- C:\Program Files (x86)\VROOT O43 - CFD: 21/11/2015 - [0] D -- C:\Program Files (x86)\VS Revo Group O43 - CFD: 11/07/2012 - [] D -- C:\Program Files (x86)\WinCDEmu O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Photo Viewer O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 07/12/2015 - [] D -- C:\Program Files (x86)\WNetEnhancer =>PUP.Optional.Wajam O43 - CFD: 17/06/2015 - [] D -- C:\Program Files (x86)\World of Warcraft O43 - CFD: 11/07/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 11/07/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 14/02/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center O43 - CFD: 11/05/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net O43 - CFD: 19/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3 O43 - CFD: 27/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 25/06/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite O43 - CFD: 22/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox O43 - CFD: 14/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 14 O43 - CFD: 09/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps O43 - CFD: 08/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP =>PUP.Optional.GamesDesktop O43 - CFD: 13/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE O43 - CFD: 28/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome O43 - CFD: 21/05/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone O43 - CFD: 18/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud O43 - CFD: 21/05/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line O43 - CFD: 18/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kingo ROOT O43 - CFD: 03/11/2015 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.0 O43 - CFD: 14/02/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 12/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft LifeCam O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mumble O43 - CFD: 09/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ O43 - CFD: 21/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox O43 - CFD: 08/11/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin O43 - CFD: 14/02/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung O43 - CFD: 13/11/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 08/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 01/06/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam O43 - CFD: 01/06/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client O43 - CFD: 15/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VROOT O43 - CFD: 25/06/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetEnhancer =>PUP.Optional.Wajam O43 - CFD: 10/05/2015 - [] D -- C:\ProgramData\.mono O43 - CFD: 18/10/2015 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\3a08aecf-996c-434c-872d-c3768a6d9134 O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\5673cc4a-1bd3-1 O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\5673cc4a-61b7-0 O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\7c0535b143fc4671b6ebd202fbffe066 O43 - CFD: 16/09/2014 - [] D -- C:\ProgramData\Adobe O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Airtop =>PUP.Optional.Salus O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\Airtops =>PUP.Optional.Salus O43 - CFD: 14/02/2015 - [] D -- C:\ProgramData\AMD O43 - CFD: 18/10/2015 - [] D -- C:\ProgramData\Apple O43 - CFD: 18/10/2015 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\ApplicationHosting =>PUP.Optional.ApplicationHosting O43 - CFD: 14/02/2015 - [] D -- C:\ProgramData\ATI O43 - CFD: 16/02/2015 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 11/06/2013 - [] D -- C:\ProgramData\Battle.net O43 - CFD: 05/04/2015 - [] D -- C:\ProgramData\Blizzard Entertainment O43 - CFD: 11/07/2012 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\c716fd70-872c-4aaa-a07f-e248365d7f56 O43 - CFD: 09/03/2014 - [] HD -- C:\ProgramData\CanonBJ O43 - CFD: 25/06/2014 - [] D -- C:\ProgramData\DAEMON Tools Lite O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 22/11/2015 - [] D -- C:\ProgramData\Dropbox O43 - CFD: 19/10/2015 - [] D -- C:\ProgramData\EA Core O43 - CFD: 19/10/2015 - [] D -- C:\ProgramData\EA Logs O43 - CFD: 14/10/2013 - [] D -- C:\ProgramData\Electronic Arts O43 - CFD: 11/07/2012 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 28/10/2015 - [] D -- C:\ProgramData\GFACE O43 - CFD: 24/09/2014 - [] D -- C:\ProgramData\Glyph O43 - CFD: 12/11/2013 - [] D -- C:\ProgramData\LogMeIn O43 - CFD: 14/02/2015 - [] D -- C:\ProgramData\ma-config.com O43 - CFD: 08/11/2014 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 11/07/2012 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\Microsoft O43 - CFD: 08/05/2015 - [] D -- C:\ProgramData\Mirillis O43 - CFD: 11/07/2012 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 23/09/2014 - [] D -- C:\ProgramData\Nexon O43 - CFD: 14/12/2014 - [] D -- C:\ProgramData\Norton O43 - CFD: 13/12/2014 - [] D -- C:\ProgramData\NortonInstaller O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\Oracle O43 - CFD: 15/11/2015 - [] D -- C:\ProgramData\Origin O43 - CFD: 14/02/2015 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 11/01/2015 - [] D -- C:\ProgramData\PMB Files O43 - CFD: 14/02/2015 - [] D -- C:\ProgramData\Razer O43 - CFD: 16/09/2014 - [] D -- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 24/09/2014 - [] D -- C:\ProgramData\Riot Games O43 - CFD: 15/07/2014 - [] D -- C:\ProgramData\RogueKiller O43 - CFD: 31/05/2014 - [] D -- C:\ProgramData\RzMaelstromVAD_1.1.58.1854 O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\Samsung O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\Service7609 =>Heuristic.Graftor O43 - CFD: 13/11/2014 - [] D -- C:\ProgramData\Skype O43 - CFD: 24/09/2014 - [] D -- C:\ProgramData\spotflux O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 19/11/2013 - [] D -- C:\ProgramData\Sun O43 - CFD: 21/11/2015 - [0] D -- C:\ProgramData\TamoSoft O43 - CFD: 25/06/2013 - [] D -- C:\ProgramData\TechSmith O43 - CFD: 07/04/2015 - [0] AD -- C:\ProgramData\TEMP O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 07/12/2015 - [] D -- C:\ProgramData\Tmp0x0x O43 - CFD: 02/06/2015 - [] D -- C:\ProgramData\TrackMania O43 - CFD: 23/06/2013 - [] D -- C:\ProgramData\WarThunder O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Zitenop =>PUP.Optional.Salus O43 - CFD: 08/12/2015 - [] D -- C:\ProgramData\Zitenops =>PUP.Optional.Salus O43 - CFD: 10/04/2014 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 18/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Apple O43 - CFD: 02/06/2013 - [] D -- C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 14/06/2014 - [] D -- C:\Program Files (x86)\Common Files\BattlEye O43 - CFD: 21/05/2015 - [] D -- C:\Program Files (x86)\Common Files\Blizzard Entertainment O43 - CFD: 06/12/2015 - [] D -- C:\Program Files (x86)\Common Files\c716fd70-872c-4aaa-a07f-e248365d7f56 O43 - CFD: 26/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Config O43 - CFD: 07/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Danstring O43 - CFD: 19/10/2015 - [] HD -- C:\Program Files (x86)\Common Files\EAInstaller O43 - CFD: 13/12/2014 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 17/09/2013 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 21/05/2015 - [] D -- C:\Program Files (x86)\Common Files\Propellerhead Software O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 13/11/2014 - [] D -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 09/09/2015 - [] D -- C:\Program Files (x86)\Common Files\Steam O43 - CFD: 11/07/2012 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 03/05/2015 - [] D -- C:\Program Files (x86)\Common Files\Wise Installation Wizard O43 - CFD: 21/02/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\.minecraft O43 - CFD: 10/05/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\.mono O43 - CFD: 13/04/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\8pecxstudios O43 - CFD: 20/09/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Adobe O43 - CFD: 14/04/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\AMD O43 - CFD: 26/08/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\AnkamaCertificates O43 - CFD: 26/08/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\app O43 - CFD: 15/11/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Apple Computer O43 - CFD: 01/06/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\ATI O43 - CFD: 03/02/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Audacity O43 - CFD: 11/05/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Awesomium O43 - CFD: 03/10/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Battle.net O43 - CFD: 12/11/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\com.playsaurus.heroclicker O43 - CFD: 21/02/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Curse Advertising O43 - CFD: 22/11/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 26/08/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\Dofus O43 - CFD: 26/08/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\Dofus-2 O43 - CFD: 29/08/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\Dofus-3 O43 - CFD: 04/02/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Dofus2 O43 - CFD: 22/11/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Dropbox O43 - CFD: 09/01/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\FileZilla O43 - CFD: 17/06/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\ftblauncher O43 - CFD: 13/01/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Guild Wars 2 O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\GytjeOibyirn O43 - CFD: 12/04/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\HeroesAndGeneralsDesktop O43 - CFD: 04/06/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\Identities O43 - CFD: 21/05/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Image-Line O43 - CFD: 13/12/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\InstallShield O43 - CFD: 08/12/2015 - [0] D -- C:\Users\Alexis\AppData\Roaming\istartpageing =>PUP.Optional.IstartPageing O43 - CFD: 20/12/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\java O43 - CFD: 25/06/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Kalypso Media O43 - CFD: 12/12/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\library_dir O43 - CFD: 09/09/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\LibreOffice O43 - CFD: 10/06/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\LolClient O43 - CFD: 09/06/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\Macromedia O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\mgyun O43 - CFD: 05/05/2015 - [] SD -- C:\Users\Alexis\AppData\Roaming\Microsoft O43 - CFD: 08/05/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Mirillis O43 - CFD: 01/06/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\Mount&Blade Warband O43 - CFD: 25/08/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Mozilla O43 - CFD: 15/07/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Mumble O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\NivriWaickyr O43 - CFD: 08/12/2015 - [0] D -- C:\Users\Alexis\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock O43 - CFD: 09/01/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Notepad++ O43 - CFD: 08/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy O43 - CFD: 08/12/2015 - [0] D -- C:\Users\Alexis\AppData\Roaming\Opera Software O43 - CFD: 09/10/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Origin O43 - CFD: 14/12/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Raptr O43 - CFD: 26/08/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\Reg O43 - CFD: 26/08/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\Reg.C9ECCBDBA4E09304DEEFB106465BC17F6D6749B9.1 O43 - CFD: 17/02/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\RIFT O43 - CFD: 23/12/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Riot Games O43 - CFD: 06/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Samsung O43 - CFD: 07/06/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Shooter O43 - CFD: 08/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Skype O43 - CFD: 08/12/2015 - [0] D -- C:\Users\Alexis\AppData\Roaming\Store =>PUP.Optional.Nosibay O43 - CFD: 05/11/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\SumatraPDF O43 - CFD: 30/10/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Sun O43 - CFD: 27/10/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\TeamViewer O43 - CFD: 14/07/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Teeworlds O43 - CFD: 24/09/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\TERA O43 - CFD: 30/06/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Tropico 5 O43 - CFD: 08/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\TS3Client O43 - CFD: 15/11/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\vlc O43 - CFD: 14/06/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Wargaming.net O43 - CFD: 25/06/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\WinRAR O43 - CFD: 11/09/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Wireshark O43 - CFD: 17/09/2013 - [] D -- C:\Users\Alexis\AppData\Roaming\WorldPainter O43 - CFD: 08/12/2015 - [0] D -- C:\Users\Alexis\AppData\Roaming\WTools O43 - CFD: 20/09/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\XnView O43 - CFD: 07/12/2015 - [0] D -- C:\Users\Alexis\AppData\Roaming\yoursearching =>PUP.Optional.YourSearching O43 - CFD: 08/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\ZHP O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\032B0290-1449487728-0559-0306-940700080009 O43 - CFD: 10/04/2014 - [] D -- C:\Users\Alexis\AppData\Local\41 O43 - CFD: 13/04/2015 - [] D -- C:\Users\Alexis\AppData\Local\8pecxstudios O43 - CFD: 20/09/2014 - [] D -- C:\Users\Alexis\AppData\Local\Adobe O43 - CFD: 26/08/2015 - [] D -- C:\Users\Alexis\AppData\Local\Anno Online O43 - CFD: 08/06/2013 - [] D -- C:\Users\Alexis\AppData\Local\Apple O43 - CFD: 08/06/2013 - [] D -- C:\Users\Alexis\AppData\Local\Apple Computer O43 - CFD: 02/06/2013 - [0] SHD -- C:\Users\Alexis\AppData\Local\Application Data O43 - CFD: 01/06/2013 - [] D -- C:\Users\Alexis\AppData\Local\Apps O43 - CFD: 01/06/2013 - [] D -- C:\Users\Alexis\AppData\Local\ATI O43 - CFD: 21/09/2015 - [] D -- C:\Users\Alexis\AppData\Local\Battle.net O43 - CFD: 11/05/2014 - [] D -- C:\Users\Alexis\AppData\Local\Blizzard O43 - CFD: 11/05/2014 - [] D -- C:\Users\Alexis\AppData\Local\Blizzard Entertainment O43 - CFD: 04/01/2014 - [] D -- C:\Users\Alexis\AppData\Local\CDWLauncher O43 - CFD: 23/08/2015 - [] D -- C:\Users\Alexis\AppData\Local\CEF O43 - CFD: 08/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\CrashDumps O43 - CFD: 23/03/2015 - [] D -- C:\Users\Alexis\AppData\Local\CrashRpt =>.Superfluous.CrashReports O43 - CFD: 24/09/2014 - [] D -- C:\Users\Alexis\AppData\Local\CSO O43 - CFD: 14/06/2014 - [] D -- C:\Users\Alexis\AppData\Local\DayZ O43 - CFD: 29/10/2015 - [0] D -- C:\Users\Alexis\AppData\Local\Deployment O43 - CFD: 22/11/2015 - [] D -- C:\Users\Alexis\AppData\Local\Dropbox O43 - CFD: 21/11/2013 - [] D -- C:\Users\Alexis\AppData\Local\Eclipse O43 - CFD: 16/11/2015 - [] D -- C:\Users\Alexis\AppData\Local\ElevatedDiagnostics O43 - CFD: 19/10/2015 - [] D -- C:\Users\Alexis\AppData\Local\ESN O43 - CFD: 24/09/2014 - [] D -- C:\Users\Alexis\AppData\Local\Glyph O43 - CFD: 08/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\gmsd_fr_005010169 =>PUP.Optional.CrossRider O43 - CFD: 01/06/2013 - [] D -- C:\Users\Alexis\AppData\Local\Google O43 - CFD: 02/06/2013 - [0] SHD -- C:\Users\Alexis\AppData\Local\Historique O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\Installer =>PUP.Optional.InstallPedia O43 - CFD: 06/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\Kingosoft O43 - CFD: 12/11/2013 - [] D -- C:\Users\Alexis\AppData\Local\LogMeIn O43 - CFD: 28/08/2014 - [] D -- C:\Users\Alexis\AppData\Local\Macromedia O43 - CFD: 06/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive =>.Superfluous.MalwareProtection O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\Mega Limited O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\MEGAsync O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\Microsoft O43 - CFD: 08/05/2015 - [] D -- C:\Users\Alexis\AppData\Local\Mirillis O43 - CFD: 25/08/2014 - [] D -- C:\Users\Alexis\AppData\Local\Mozilla O43 - CFD: 08/12/2015 - [0] D -- C:\Users\Alexis\AppData\Local\Opera Software O43 - CFD: 14/10/2013 - [] D -- C:\Users\Alexis\AppData\Local\Origin O43 - CFD: 11/01/2015 - [] D -- C:\Users\Alexis\AppData\Local\PMB Files O43 - CFD: 23/06/2013 - [] D -- C:\Users\Alexis\AppData\Local\Programs O43 - CFD: 19/10/2015 - [] D -- C:\Users\Alexis\AppData\Local\PunkBuster O43 - CFD: 14/02/2015 - [] D -- C:\Users\Alexis\AppData\Local\Razer O43 - CFD: 14/02/2015 - [] D -- C:\Users\Alexis\AppData\Local\Razer_Inc O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\rec_en_77 =>PUP.Optional.Tuto4PC O43 - CFD: 14/02/2015 - [] D -- C:\Users\Alexis\AppData\Local\RzStats O43 - CFD: 27/05/2014 - [] D -- C:\Users\Alexis\AppData\Local\Skype O43 - CFD: 08/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\SmartWeb =>PUP.Optional.SmartWebSearch O43 - CFD: 10/04/2014 - [] D -- C:\Users\Alexis\AppData\Local\Software =>PUP.Optional.Boxore O43 - CFD: 20/02/2015 - [] D -- C:\Users\Alexis\AppData\Local\Steam O43 - CFD: 25/06/2013 - [] D -- C:\Users\Alexis\AppData\Local\TechSmith O43 - CFD: 08/12/2015 - [] D -- C:\Users\Alexis\AppData\Local\Temp O43 - CFD: 07/12/2015 - [0] D -- C:\Users\Alexis\AppData\Local\Tempfolder O43 - CFD: 02/06/2013 - [0] SHD -- C:\Users\Alexis\AppData\Local\Temporary Internet Files O43 - CFD: 12/04/2015 - [] D -- C:\Users\Alexis\AppData\Local\Ubisoft O43 - CFD: 28/11/2015 - [] D -- C:\Users\Alexis\AppData\Local\Ubisoft Game Launcher O43 - CFD: 23/06/2013 - [0] D -- C:\Users\Alexis\AppData\Local\WarThunder O43 - CFD: 28/10/2015 - [] D -- C:\Users\Alexis\AppData\Local\wf-launcher O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 08/12/2015 - [] RD -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 21/02/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse O43 - CFD: 21/11/2015 - [0] D -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line O43 - CFD: 07/12/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync O43 - CFD: 09/01/2015 - [0] D -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ O43 - CFD: 08/12/2015 - [] RD -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 13/12/2014 - [] D -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam O43 - CFD: 28/11/2015 - [] D -- C:\Users\Alexis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft ---\\ Derniers fichiers créés dans Windows Prefetcher (7) - 10s O45 - LFCP:[MD5.91F5519404E8885113099DEFC56BAC6F] 08/12/2015 A -- C:\Windows\Prefetch\62793.WINDAPP.MON001.NO.EXE-5D7E35F7.pf =>PUP.Optional.Nosibay O45 - LFCP:[MD5.8B05E5A4971FDDF3A6A5400F14AFF63A] 08/12/2015 A -- C:\Windows\Prefetch\BUBBLE DOCK BSETUP.EXE-29E55CE8.pf =>PUP.Optional.BubbleDock O45 - LFCP:[MD5.6AF2E1DA57B1B6EA33EC5605ED054529] 08/12/2015 A -- C:\Windows\Prefetch\BUBBLE DOCK.EXE-C3A82C7A.pf =>PUP.Optional.BubbleDock O45 - LFCP:[MD5.38DB5057F06C489999555EF8C692A5D9] 08/12/2015 A -- C:\Windows\Prefetch\LBUBBLE DOCK.EXE-2F791CAE.pf =>PUP.Optional.BubbleDock O45 - LFCP:[MD5.0B3EAB6AEFC776BC375E5EF57AE00F7D] 08/12/2015 A -- C:\Windows\Prefetch\SEARCHMOREKNOWDESKTOPSEARCH.E-4D59CE71.pf =>PUP.Optional.DesktopSearch O45 - LFCP:[MD5.B735FBB9A79BCF9864E09FD22C68F79C] 08/12/2015 A -- C:\Windows\Prefetch\SELECTION TOOLS.EXE-E43D508D.pf =>PUP.Optional.Nosibay O45 - LFCP:[MD5.1E176CAD970806CAC2AB01F306410518] 08/12/2015 A -- C:\Windows\Prefetch\UPGMSD_FR_005010169.EXE-06E01730.pf =>PUP.Optional.CrossRider ---\\ ShellIconOverlayIdentifiers (SIOI) (14) - 6s O106 - SIOI: DropboxExt1 Class [ DropboxExt1] - {FB314ED9-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll {017CA19B5859E83F44D874C1CE506E6D} © O106 - SIOI: DropboxExt2 Class [ DropboxExt2] - {FB314EDA-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll {017CA19B5859E83F44D874C1CE506E6D} © O106 - SIOI: DropboxExt5 Class [ DropboxExt3] - {FB314EDD-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll {017CA19B5859E83F44D874C1CE506E6D} © O106 - SIOI: DropboxExt6 Class [ DropboxExt4] - {FB314EDE-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll {017CA19B5859E83F44D874C1CE506E6D} © O106 - SIOI: DropboxExt3 Class [ DropboxExt5] - {FB314EDB-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll {017CA19B5859E83F44D874C1CE506E6D} © O106 - SIOI: DropboxExt7 Class [ DropboxExt6] - {FB314EDF-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll {017CA19B5859E83F44D874C1CE506E6D} © O106 - SIOI: DropboxExt4 Class [ DropboxExt7] - {FB314EDC-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll {017CA19B5859E83F44D874C1CE506E6D} © O106 - SIOI: DropboxExt8 Class [ DropboxExt8] - {FB314EE0-A251-47B7-93E1-CDD82E34AF8B}. (.Dropbox, Inc. - Dropbox Shell Extension.) -- C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll {017CA19B5859E83F44D874C1CE506E6D} © O106 - SIOI: ###MegaShellExtPending [###MegaShellExtPending] - {056D528D-CE28-4194-9BA3-BA2E9197FF8C}. (...) -- C:\Users\Alexis\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI: ###MegaShellExtSynced [###MegaShellExtSynced] - {05B38830-F4E9-4329-978B-1DD28605D202}. (...) -- C:\Users\Alexis\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI: ###MegaShellExtSyncing [###MegaShellExtSyncing] - {0596C850-7BDD-4C9D-AFDF-873BE6890637}. (...) -- C:\Users\Alexis\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll © O106 - SIOI: ShareOverlay Class [ShareOverlay] - {594D4122-1F87-41E2-96C7-825FB4796516}. (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer32.dll © O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll © ---\\ Enumération des clés StartupReg (11) - 1s O53 - SMSR:HKLM\...\startupreg\cacaoweb [Key] . (...) -- C:\Users\Alexis\AppData\Roaming\cacaoweb\cacaoweb.exe (.not file.) =>.Superfluous.CacaoWeb O53 - SMSR:HKLM\...\startupreg\CCleaner Monitoring [Key] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe © O53 - SMSR:HKLM\...\startupreg\GoogleChromeAutoLaunch_C46C75B69F6A4FF65E3F09375992B78F [Key] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe © O53 - SMSR:HKLM\...\startupreg\Overwolf [Key] . (...) -- C:\Program Files (x86)\Overwolf\Overwolf.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Razer Synapse [Key] . (.Razer Inc. - Razer Synapse.) -- C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe © O53 - SMSR:HKLM\...\startupreg\RazerCortex [Key] . (.Razer Inc. - RazerCortex.exe.) -- C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe © O53 - SMSR:HKLM\...\startupreg\RocketDock [Key] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe © O53 - SMSR:HKLM\...\startupreg\StartCCC [Key] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe © O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (.Valve Corporation - Steam Client Bootstrapper.) -- D:\Program Files (x86)\Steam\Steam.exe © O53 - SMSR:HKLM\...\startupreg\uTorrent [Key] . (...) -- C:\Users\Alexis\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) ---\\ Liste des pilotes du système (78) - 25s O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] =>.Microsoft Windows® O58 - SDL:2014/12/23 23:40:56 A . (.Advanced Micro Devices - AMD ACP Binaries.) -- C:\Windows\System32\drivers\amdacpksd.sys [294600] =>.Advanced Micro Devices, Inc.® O58 - SDL:2014/10/28 00:46:12 A . (.Advanced Micro Devices, Inc. - AMD PCI Root Bus Lower Filter.) -- C:\Windows\System32\drivers\amdkmpfd.sys [62152] =>.Advanced Micro Devices, Inc.® O58 - SDL:2010/11/21 04:23:47 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] =>.Microsoft Windows® O58 - SDL:2010/11/21 04:23:47 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] =>.Microsoft Windows® O58 - SDL:2009/06/20 03:09:57 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [1394688] © O58 - SDL:2014/06/21 18:01:22 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdW76.sys [94720] © O58 - SDL:2014/12/23 23:39:02 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [18977280] © O58 - SDL:2014/12/23 23:08:00 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [591872] © O58 - SDL:2009/06/10 21:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] © O58 - SDL:2011/08/08 19:13:12 A . (.SysProgs.org - WinCDEmu virtual CDROM bus.) -- C:\Windows\System32\drivers\BazisVirtualCDBus.sys [198480] {1734AA23F6C88B7F2E7FC68F7118423E} O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] © O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] © O58 - SDL:2009/07/14 02:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] © O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] © O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] © O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] © O58 - SDL:2009/06/10 21:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] © O58 - SDL:2015/12/07 19:36:36 A . (.Cherimoya Ltd - Cherimoya Ltd.) -- C:\Windows\System32\drivers\cherimoya.sys [61336] {1121B348573C1CA1DF257D517183A16A9C79} =>PUP.Optional.Shopperz O58 - SDL:2009/07/14 02:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] =>.Microsoft Windows® O58 - SDL:2014/06/25 17:12:05 A . (.Disc Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\drivers\dtsoftbus01.sys [283064] =>.Disc Soft Ltd® O58 - SDL:2009/06/10 21:35:09 A . (.Intel Corporation - Intel(R) PRO/1000 Adapter NDIS 6 deserializ.) -- C:\Windows\System32\drivers\E1G6032E.sys [145792] © O58 - SDL:2009/07/14 02:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] =>.Microsoft Windows® O58 - SDL:2012/02/03 19:23:56 A . (.Etron Technology Inc - Etron eXtensible Hub Driver..) -- C:\Windows\System32\drivers\EtronHub3.sys [59520] © O58 - SDL:2012/02/03 19:23:56 A . (.Etron Technology Inc - Etron eXtensible Host Controller Driver..) -- C:\Windows\System32\drivers\EtronXHCI.sys [84736] © O58 - SDL:2009/06/10 21:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] © O58 - SDL:2012/08/21 12:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\Windows\System32\drivers\GEARAspiWDM.sys [33240] =>.GEAR Software Inc.® O58 - SDL:2015/01/14 11:32:32 AH . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\drivers\hamachi.sys [33856] {0FC50C0152AB6D162B832AC3528B10F1} © O58 - SDL:2009/06/10 21:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] © O58 - SDL:2012/07/17 18:12:08 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [62784] =>.Intel Corporation® O58 - SDL:2010/11/21 04:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] =>.Microsoft Windows® O58 - SDL:2010/11/21 04:23:47 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] =>.Microsoft Windows® O58 - SDL:2012/05/20 17:25:32 A . (.Intel Corporation - Intel(R) USB 3.0 Host Controller Switch Dri.) -- C:\Windows\System32\drivers\iusb3hcs.sys [19264] =>.Intel Corporation® O58 - SDL:2012/05/20 17:25:32 A . (.Intel Corporation - Intel(R) USB 3.0 Hub Driver.) -- C:\Windows\System32\drivers\iusb3hub.sys [357184] =>.Intel Corporation® O58 - SDL:2012/05/20 17:25:32 A . (.Intel Corporation - Intel(R) USB 3.0 eXtensible Host Controller.) -- C:\Windows\System32\drivers\iusb3xhc.sys [789824] =>.Intel Corporation® O58 - SDL:2012/04/25 08:07:18 A . (.Qualcomm Atheros Co., Ltd. - Qualcomm Atheros Ar81xx series PCI-E Gigabi.) -- C:\Windows\System32\drivers\L1C62x64.sys [104560] {709771C02A395029A68C5FBDB0E867FD} © O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] =>.Microsoft Windows® O58 - SDL:2014/08/08 18:12:14 A . (.NetFilterSDK.com - NetFilter SDK TDI Hook Driver (WPP).) -- C:\Windows\System32\drivers\netfilter2.sys [60160] {787B156DBE2C603B1C32E7122CF5A030} O58 - SDL:2009/07/14 02:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] =>.Microsoft Windows® O58 - SDL:2010/11/21 04:23:47 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] =>.Microsoft Windows® O58 - SDL:2010/11/21 04:23:47 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] =>.Microsoft Windows® O58 - SDL:2009/06/10 21:35:42 A . (.Realtek Corporation - Realtek 8101E/8168/8169 NDIS 6.20 64-bit Dr.) -- C:\Windows\System32\drivers\Rt64win7.sys [187392] © O58 - SDL:2009/06/10 21:35:46 A . (.Realtek Semiconductor Corporation - Realtek RTL8187B NDIS Driver.) -- C:\Windows\System32\drivers\RTL8187B.sys [416768] © O58 - SDL:2014/12/30 10:35:54 A . (.Razer Inc - Razer RzEndPt.) -- C:\Windows\System32\drivers\rzendpt.sys [39592] =>.Razer Inc.® O58 - SDL:2014/05/23 11:34:46 A . (.Windows (R) Win 7 DDK provider - Maelstrom VAD Audio driver.) -- C:\Windows\System32\drivers\RzMaelstromVAD.sys [32768] © O58 - SDL:2015/01/31 01:08:58 A . (.Razer, Inc. - Razer Overlay Support.) -- C:\Windows\System32\drivers\rzpmgrk.sys [37184] =>.Razer Inc.® O58 - SDL:2014/12/10 21:43:07 A . (.Razer, Inc. - Razer Overlay Support.) -- C:\Windows\System32\drivers\rzpnk.sys [129600] =>.Razer Inc.® O58 - SDL:2014/12/30 10:35:54 A . (.Razer Inc - Razer Rzudd Engine.) -- C:\Windows\System32\drivers\rzudd.sys [177832] =>.Razer Inc.® O58 - SDL:2009/06/10 21:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] © O58 - SDL:2009/07/14 01:00:40 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\serial.sys [94208] © O58 - SDL:2009/07/14 02:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] =>.Microsoft Windows® O58 - SDL:2011/05/13 03:21:04 A . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\System32\drivers\ssadwh.sys [13800] © O58 - SDL:2015/05/21 07:02:42 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [110720] =>.DEVGURU CO LTD® O58 - SDL:2015/05/21 07:02:42 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [206080] =>.DEVGURU CO LTD® O58 - SDL:2009/07/14 02:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] =>.Microsoft Windows® O58 - SDL:2014/08/08 18:12:10 A . (.Spotflux, Inc. - Spotflux Network Device Driver.) -- C:\Windows\System32\drivers\tapSF0901.sys [39104] {787B156DBE2C603B1C32E7122CF5A030} O58 - SDL:2012/12/13 12:50:36 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\Windows\System32\drivers\usbaapl64.sys [54784] © O58 - SDL:2015/11/10 17:56:50 A . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\System32\drivers\VBoxDrv.sys [964928] {51CA009816FDBD80F120E015EE75823E} © O58 - SDL:2015/11/10 17:56:22 A . (.Oracle Corporation - VirtualBox NDIS 6.0 Lightweight Filter Driv.) -- C:\Windows\System32\drivers\VBoxNetLwf.sys [194976] {51CA009816FDBD80F120E015EE75823E} © O58 - SDL:2015/11/10 17:56:20 A . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\Windows\System32\drivers\VBoxUSBMon.sys [138904] {51CA009816FDBD80F120E015EE75823E} © O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] =>.Microsoft Windows® O58 - SDL:2009/03/18 17:35:42 AH . (.LogMeIn, Inc. - Hamachi Virtual Network Interface Driver.) -- C:\Windows\System32\hamachi.sys [33856] {0FC50C0152AB6D162B832AC3528B10F1} © ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (48) - 37s O61 - LFC: 2015/12/08 22:36:33 A . (.Nicolas Coolman.) -- C:\Users\Alexis\ZHPCleaner.exe [291648] © O61 - LFC: 2015/12/06 17:25:36 A . (..) -- C:\Users\Alexis\Downloads\android_root_other-68856381.exe [291648] {67AFE4FB2458A37CFEBA2D43EC2594B2} O61 - LFC: 2015/12/06 17:29:49 A . (.Kingosoft Technology Ltd..) -- C:\Users\Alexis\Downloads\android_root_other.exe [291648] {4BA0711A8EBE6D481E1846163BA3D2FD} © O61 - LFC: 2015/12/07 00:51:21 A . (.MEGA Limited.) -- C:\Users\Alexis\Downloads\MEGAsyncSetup(1).exe [291648] {11212775AC8BD188EC962027044A8529D2BF} © O61 - LFC: 2015/12/06 19:53:36 A . (.MEGA Limited.) -- C:\Users\Alexis\Downloads\MEGAsyncSetup.exe [291648] {11212775AC8BD188EC962027044A8529D2BF} © O61 - LFC: 2015/12/07 00:55:36 N . (..) -- C:\Users\Alexis\Downloads\SRSRoot.exe [291648] O61 - LFC: 2015/12/08 22:35:46 A . (.Nicolas Coolman.) -- C:\Users\Alexis\Downloads\ZHPCleaner.exe [291648] © O61 - LFC: 2015/12/08 22:32:39 A . (.Copyright (C) 2015 Nicolas Coolman.) -- C:\Users\Alexis\Downloads\ZHPDiag3.exe [291648] © O61 - LFC: 2015/12/07 11:34:22 A . (..) -- C:\Users\Alexis\Desktop\File2.exe [291648] O61 - LFC: 2015/12/07 18:40:34 A . (..) -- C:\Users\Alexis\AppData\Roaming\moses.exe [291648] O61 - LFC: 2015/12/08 22:36:33 A . (.Nicolas Coolman.) -- C:\Users\Alexis\AppData\Roaming\ZHP\ZHPCleaner.exe [291648] © O61 - LFC: 2015/12/08 22:32:39 A . (.Copyright (C) 2015 Nicolas Coolman.) -- C:\Users\Alexis\AppData\Roaming\ZHP\ZHPDiag3.exe [291648] © O61 - LFC: 2015/12/08 19:19:35 A . (..) -- C:\Users\Alexis\AppData\Roaming\OpenCandy\34B2AA63A5384F389CDE46C223899B62\setup.exe [291648] {785165B82B596AA4788FFE2543F5E3A3} =>PUP.Optional.OpenCandy O61 - LFC: 2015/12/07 16:19:48 A . (..) -- C:\Users\Alexis\AppData\Roaming\NivriWaickyr\Wilnifg.exe [291648] {01} O61 - LFC: 2015/12/07 11:34:23 A . (..) -- C:\Users\Alexis\AppData\Roaming\mgyun\cache2.bin [291648] O61 - LFC: 2015/12/07 11:34:37 A . (..) -- C:\Users\Alexis\AppData\Roaming\mgyun\cache3.bin [291648] O61 - LFC: 2015/12/07 18:37:30 A . (..) -- C:\Users\Alexis\AppData\Roaming\GytjeOibyirn\Todno.exe [291648] {01} O61 - LFC: 2015/12/07 11:31:42 A . (..) -- C:\Users\Alexis\AppData\Local\Labsoltax.exe [291648] O61 - LFC: 2015/12/07 19:36:12 A . (.SoftBrain Technologies Ltd..) -- C:\Users\Alexis\AppData\Local\SmartWeb\__u.exe [291648] =>PUP.Optional.SmartWebSearch O61 - LFC: 2015/12/03 00:47:18 A . (.Copyright © 2015.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe [291648] {0DB13F364982158C0E6000F666CC2AA4} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 17:29:58 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\uninstall.exe [291648] =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/07 11:34:48 A . (.Install helper Team.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk788-3a9a96c7-8f69-4647-9872-16437b5b16de.exe [291648] {61F716E4410768DA5306101E504DEBAA} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/07 11:34:48 A . (.Install helper Team.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk788-707685b8-9510-4ff3-8d9b-66c5b2ace5e1.exe [291648] {61F716E4410768DA5306101E504DEBAA} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/07 11:34:48 A . (.Install helper Team.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk788-d46d40c8-5a1f-462b-8fc5-0efe407a4b6c.exe [291648] {61F716E4410768DA5306101E504DEBAA} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/08 20:56:10 A . (.Install helper Team.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-038de6af-266b-4db6-9bce-467e8e47e7f9.exe [291648] {61F716E4410768DA5306101E504DEBAA} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/08 19:19:35 A . (.Install helper Team.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-199137ac-027c-4333-baab-cae18c999c04.exe [291648] {61F716E4410768DA5306101E504DEBAA} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/08 19:19:35 A . (.Install helper Team.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-2fccb677-dd11-496c-bfa7-f0a17884f442.exe [291648] {61F716E4410768DA5306101E504DEBAA} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/08 20:56:09 A . (.Install helper Team.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-9e143978-55e7-4b1a-93f8-686f3932e040.exe [291648] {61F716E4410768DA5306101E504DEBAA} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/08 20:56:10 A . (.Install helper Team.) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-fb65f2c4-9535-4cf0-931e-162f077786f5.exe [291648] {61F716E4410768DA5306101E504DEBAA} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 20:26:21 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-1be8e3fe-7dc0-49d5-b23e-2052f8907396.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 18:26:22 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-1f547a07-0ceb-45b3-8d0f-e4def2e0649f.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 18:26:21 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-7efed5dd-539c-4e72-9ca6-78a2a26aa312.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 18:26:23 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-804581a9-2808-4904-bdba-b2e1a8e202f6.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 18:26:21 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-bbe34a65-25a8-45a3-8edb-74fe73cad706.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 20:26:21 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-df048cc4-12d2-4af3-92a1-fb80db26b245.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 20:26:21 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-e0d53720-fcb2-4e63-9a02-b9410494df97.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 20:26:21 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-e4ecbe96-ee3f-4a16-94c8-25c0957ade02.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 21:26:23 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\PluginContainer-a8477e14-c262-47a1-b087-f92bcab8ffc2.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/07 10:26:22 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\PluginContainer-b7bb3717-0d9f-40f5-9520-0a117e442387.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/07 01:26:22 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\PluginContainer-fef9969e-6be4-4057-a284-4e13e2dacf25.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/06 18:21:20 A . (..) -- C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\updater-474f52e6-893e-4734-81ac-8e3f554bf11a.exe [291648] {58FC58A52C291B337067DC6AA50B8FB3} =>.Superfluous.MalwareProtection O61 - LFC: 2015/12/07 11:38:16 A . (.Copyright (C) 2014.) -- C:\Users\Alexis\AppData\Local\Installer\Install_26144\YTDownloader.exe [291648] =>PUP.Optional.YTDownloader O61 - LFC: 2015/12/02 23:43:38 A . (..) -- C:\Users\Alexis\AppData\Local\Google\Chrome\User Data\ev_hashes_whitelist.bin [291648] O61 - LFC: 2015/12/07 13:05:38 A . (..) -- C:\Users\Alexis\AppData\Local\gmsd_fr_005010169\upgmsd_fr_005010169.exe [291648] {1121659F89D645B84A6361DBAB1CE36D6315} =>PUP.Optional.CrossRider O61 - LFC: 2015/12/08 20:19:48 A . (..) -- C:\Users\Alexis\AppData\Local\gmsd_fr_005010169\Download\myoffergroup_fr.exe [291648] =>PUP.Optional.CrossRider O61 - LFC: 2015/12/04 11:07:32 A . (..) -- C:\Users\Alexis\AppData\Local\032B0290-1449487728-0559-0306-940700080009\pnsrBCC6.exe [291648] O61 - LFC: 2015/12/07 11:28:48 A . (..) -- C:\Users\Alexis\AppData\Local\032B0290-1449487728-0559-0306-940700080009\rnsrBCC4.exe [291648] O61 - LFC: 2015/12/07 11:28:48 A . (..) -- C:\Users\Alexis\AppData\Local\032B0290-1449487728-0559-0306-940700080009\Uninstall.exe [291648] ---\\ Associations Shell Spawning (11) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe © O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe © O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe © O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe © O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.8pecxstudios - Cyberfox.) -- D:\Program Files (x86)\Cyberfox\Cyberfox.exe {275F7B4841402DE0F41C8CCF30795AC2} © ---\\ Menu de démarrage Internet (20) - 2s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Users\Alexis\AppData\Local\BoBrowser\Application\bobrowser.exe =>PUP.Optional.BoBrowser O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.8pecxstudios - Cyberfox.) -- D:\Program Files (x86)\Cyberfox\Cyberfox.exe http://www.piesearch.com/ =>PUP.Optional.PieSearch O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.piesearch.com/ =>PUP.Optional.PieSearch O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.piesearch.com/ =>PUP.Optional.PieSearch O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Internet Explorer\iexplore.ex http://www.yoursearching.com/ =>PUP.Optional.YourSearching O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Users\Alexis\AppData\Local\BoBrowser\Application\bobrowser.exe (.not file.) =>PUP.Optional.BoBrowser O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.8pecxstudios - Cyberfox Helper.) -- D:\Program Files (x86)\Cyberfox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - 'Firefox' Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Users\Alexis\AppData\Local\BoBrowser\Application\bobrowser.exe (.not file.) =>PUP.Optional.BoBrowser O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.8pecxstudios - Cyberfox Helper.) -- D:\Program Files (x86)\Cyberfox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - 'Firefox' Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Users\Alexis\AppData\Local\BoBrowser\Application\bobrowser.exe (.not file.) =>PUP.Optional.BoBrowser O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.8pecxstudios - Cyberfox Helper.) -- D:\Program Files (x86)\Cyberfox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - 'Firefox' Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe © O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe © ---\\ Recherche d'infection sur les navigateurs (19) - 7s O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("browser.search.defaultenginename", "webssearches"); =>PUP.Optional.WebsSearches O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("browser.search.searchengine.desc", "this is my first firefox searchEngine"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("browser.search.searchengine.ptid", "cmi"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("browser.search.searchengine.uid", "WDCXWD3200AAJS-00B4A0_WD-WMAT1032030320303"); =>PUP.Optional.SearchEngine O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("browser.search.selectedEngine", "webssearches"); =>PUP.Optional.WebsSearches O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("browser.startup.homepage", "C:\\ProgramData\\Zitenops\\ff.HP"); =>PUP.Optional.Salus O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("extensions.enabledAddons", "yahooprotected%40gmail.com:1.0.1.1042,deskCutv2%40gmail.com:0.1.12,%7B972ce4c6-7e08-4474-a2[...] =>PUP.Optional.DeskCut O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("extensions.xpiState", "{\"app-profile\":{\"deskCutv2@gmail.com\":{\"d\":\"C:\\\\Users\\\\Alexis\\\\AppData\\\\Roaming\\[...] =>PUP.Optional.DeskCut O69 - SBI: prefs.js [Alexis - 8i3qsk17.default] user_pref("keyword.URL", "http://searchinterneat-a.akamaihd.net/s?eq=U0EeE1xZE1oZB1ZEfQsNBwlCRAUSbQAIUgFcFQYXcBQAVlwQDAZAIwAAAg1JR[...] =>PUP.Optional.Browser O69 - SBI: SearchScopes [HKCU] OldSearch - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {2B242C78-B2B9-4B13-9C1F-ED589474B5BC} - (Yahoo Search!) - http://search.yahoo.com/ O69 - SBI: SearchScopes [HKCU] {74BB5483-E6D3-4F34-8932-567807084D2E} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {B37A3067-8B54-4980-88AA-C660C8CCE4E8} [DefaultScope] - (Default) - http://searchinterneat-a.akamaihd.net/ O69 - SBI: SearchScopes [HKCU] {ielnksrch} - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_ByKo5GOPu13rXw155J4OB8oo3_nrI_YPbYytCFQMvqrv5QNdU0j2sjSZdooisThXcRcgUYaWyOaN5DqDcBztEVk9yo_oPLzoVXEITJg-jALxK8Sgq8x5MlsDgTSRv4sWri8h3dyAuTNqLEoIvqh8EJS0eB78f&q={searchTerms} O69 - SBI: SearchScopes [HKUS\.DEFAULT] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - http://feed.snapdo.com/ O69 - SBI: SearchScopes [HKUS\S-1-5-18] {006ee092-9658-4fd6-bd8e-a21a348e59f5} - (Web Search) - http://feed.snapdo.com/ ---\\ Enumère les fichiers Crack & Keygen (3) - 13s O82 - LFC: 2014/11/24 21:34:14 A . (...) -- C:\Users\Alexis\Downloads\Windows Loader 2.2.2.zip [291648] =>.Crack,Keygen O82 - LFC: 2014/11/24 21:28:58 A . (...) -- C:\Users\Alexis\Downloads\Windows Loader 2.2.2__8173_il6 (2).exe [291648] =>.Crack,Keygen O82 - LFC: 2014/04/28 21:31:50 A . (...) -- C:\Users\Alexis\Desktop\CRACKHACK\Windows Loader.exe [291648] =>.Crack,Keygen ---\\ Enumère les services démarrés par Svchost (33) - 3s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] © O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] © O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] © O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] © O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [777728] © O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [853504] © O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [679424] © O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] © O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] © O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] © O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] © O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] © O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] © O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [680960] © O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2477536] =>.Microsoft Windows Component Publisher® O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] © O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] © O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] © O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] © O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70656] © O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] © O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] © O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] © O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] © O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136192] © O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] © O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] © O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] © O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] © O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [209920] © O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] © O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] © O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [193536] © ---\\ Liste des exceptions du parefeu Windows (47) - 9s O87 - FAEL: "TCP Query User{49B5280C-A8E4-43A4-9A82-0BB7855390D8}C:\users\alexis\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P6-TRUE] .(...) -- C:\users\alexis\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>.Superfluous.CacaoWeb O87 - FAEL: "UDP Query User{31C68931-48F1-4C3A-A65D-4B718AE992AB}C:\users\alexis\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P17-TRUE] .(...) -- C:\users\alexis\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>.Superfluous.CacaoWeb O87 - FAEL: "{670002F7-6A24-46D6-9E96-75E41325BB2B}" [In-None-P6-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe {69FD587152CFDDF516423156E752D014} O87 - FAEL: "{2BCD1A05-231A-4144-8D45-6B132E7EBD2F}" [In-None-P17-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe {69FD587152CFDDF516423156E752D014} O87 - FAEL: "{E5AF1923-2456-4DED-B92C-DE4EB7AB253C}" [In-None-P6-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe {69FD587152CFDDF516423156E752D014} O87 - FAEL: "{A4B9719D-0F33-4B58-A0A2-23F05DBA0EE3}" [In-None-P17-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe {69FD587152CFDDF516423156E752D014} O87 - FAEL: "{0A7F66E5-3209-449D-913B-467BE2D7B968}" [In-None-P17-TRUE] .(.Copyright (C) 2007-2011, Pando Networks Inc. - Pando Media Booster.) -- C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe {69FD587152CFDDF516423156E752D014} O87 - FAEL: "{0685F73F-F61A-4A20-9235-B6A5E9218647}" [In-None-P6-TRUE] .(...) -- D:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe (.not file.) O87 - FAEL: "{09990D12-76BA-4EC7-9AD5-3B8DDE868B83}" [In-None-P17-TRUE] .(...) -- D:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe (.not file.) O87 - FAEL: "{72995A1F-A14D-40D5-8DB0-FC880C794076}" [In-None-P6-TRUE] .(.Taleworlds Entertainment - Mount&Blade: Warband.) -- D:\Program Files (x86)\Steam\SteamApps\common\MountBlade Warband\mb_warband.exe © O87 - FAEL: "{7B4ED46A-EFEF-465A-A198-EF6C43EA8696}" [In-None-P17-TRUE] .(.Taleworlds Entertainment - Mount&Blade: Warband.) -- D:\Program Files (x86)\Steam\SteamApps\common\MountBlade Warband\mb_warband.exe © O87 - FAEL: "{1A0E63C2-6811-4D1F-8B51-9F6533D34ACE}" [In-None-P6-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe O87 - FAEL: "{50245DAC-284B-42D4-885E-6CE2B7361A43}" [In-None-P17-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe O87 - FAEL: "TCP Query User{358AA87B-A09C-4F35-917F-40E1D02FA63F}C:\users\alexis\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P6-TRUE] .(...) -- C:\users\alexis\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>.Superfluous.CacaoWeb O87 - FAEL: "UDP Query User{0B59EE0B-39B5-4780-8B3B-56484F8D5D2B}C:\users\alexis\appdata\roaming\cacaoweb\cacaoweb.exe" [In-None-P17-TRUE] .(...) -- C:\users\alexis\appdata\roaming\cacaoweb\cacaoweb.exe (.not file.) =>.Superfluous.CacaoWeb O87 - FAEL: "TCP Query User{6422AA8E-E348-4504-A2F9-DB7B37DD02EA}D:\program files (x86)\steam\steamapps\common\war thunder\aces.exe" [In-None-P6-TRUE] .(...) -- D:\program files (x86)\steam\steamapps\common\war thunder\aces.exe O87 - FAEL: "UDP Query User{74ECAB2D-A71A-4FE0-B741-A52C639BD0FD}D:\program files (x86)\steam\steamapps\common\war thunder\aces.exe" [In-None-P17-TRUE] .(...) -- D:\program files (x86)\steam\steamapps\common\war thunder\aces.exe O87 - FAEL: "{F2185804-D974-4D92-AE1B-184A7B37F41E}" [In-None-P6-TRUE] .(...) -- C:\Users\Alexis\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{7CFECBD8-3907-4691-BEAF-0D4ADC91F146}" [In-None-P17-TRUE] .(...) -- C:\Users\Alexis\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "TCP Query User{AA9C8D9A-DDD3-4D3E-B4FD-691F2CA2AAC8}C:\program files (x86)\maniaplanet\maniaplanet.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.) O87 - FAEL: "UDP Query User{14AC968B-4484-4CD2-AB12-EEC7BCCAB1C9}C:\program files (x86)\maniaplanet\maniaplanet.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\maniaplanet\maniaplanet.exe (.not file.) O87 - FAEL: "TCP Query User{6026335B-ABCB-4D75-85D6-86637690C871}C:\program files (x86)\gameforgelive\games\fra_fra\aion\nclauncher.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\gameforgelive\games\fra_fra\aion\nclauncher.exe (.not file.) O87 - FAEL: "UDP Query User{0EADC98B-D0E1-4792-9BEA-AC9C17EAE53A}C:\program files (x86)\gameforgelive\games\fra_fra\aion\nclauncher.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\gameforgelive\games\fra_fra\aion\nclauncher.exe (.not file.) O87 - FAEL: "{BB9F2486-FF24-41B1-BF92-F3B44B9D7113}" [In-None-P6-TRUE] .(...) -- C:\Users\Alexis\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{D23B2DD5-660E-4BFC-A50A-5C50B4BA107D}" [In-None-P17-TRUE] .(...) -- C:\Users\Alexis\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{09E3D1ED-D5ED-417B-93CC-55F2D852735E}" [In-None-P6-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe {008E759F39278718B7} O87 - FAEL: "{2DCAD100-E5C2-49C3-BF95-7DA2E149F370}" [In-None-P17-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Rust\Rust.exe {008E759F39278718B7} O87 - FAEL: "{29E3EB95-5C38-4632-84F4-E784A4A3CCBC}" [In-None-P6-TRUE] .(.BattlEye Innovations - BattlEye Launcher.) -- D:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe {42BE0082B9A0C36589A976D4B4F924BA} © O87 - FAEL: "{88ED4924-BF2D-4340-9E57-DC49AEB2BC45}" [In-None-P17-TRUE] .(.BattlEye Innovations - BattlEye Launcher.) -- D:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe {42BE0082B9A0C36589A976D4B4F924BA} © O87 - FAEL: "{B626E68A-A5B9-4210-9406-F2B1467273E6}" [In-None-P6-TRUE] .(.Curse - Curse Client.) -- C:\Users\Alexis\AppData\Local\Apps\2.0\008PB8MC.NLP\EL4WWZB4.8T0\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe © O87 - FAEL: "{0D2B8924-E900-4227-8E71-69C185198F6D}" [In-None-P17-TRUE] .(.Curse - Curse Client.) -- C:\Users\Alexis\AppData\Local\Apps\2.0\008PB8MC.NLP\EL4WWZB4.8T0\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe © O87 - FAEL: "{67C447AB-4AF9-4CBC-81F6-A0D58702722A}" [In-None-P6-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe (.not file.) O87 - FAEL: "{7390D6E6-A7D0-41C9-8A93-BD5BD853CB99}" [In-None-P17-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe (.not file.) O87 - FAEL: "{6F1A494B-95EE-48BC-80A8-4051D8F0D628}" [In-None-P6-TRUE] .(.Curse - Curse Client.) -- C:\Users\Alexis\AppData\Local\Apps\2.0\008PB8MC.NLP\EL4WWZB4.8T0\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe © O87 - FAEL: "{D6845F73-5C54-4BE3-A5E8-3912ACBA8F6F}" [In-None-P17-TRUE] .(.Curse - Curse Client.) -- C:\Users\Alexis\AppData\Local\Apps\2.0\008PB8MC.NLP\EL4WWZB4.8T0\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe © O87 - FAEL: "{E840A0EA-C418-456F-BBDC-3EEFC3840B31}" [In-None-P6-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe (.not file.) O87 - FAEL: "{AA76ED8F-BB41-4B71-A4D8-0CA4B519ADF5}" [In-None-P17-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrA.exe (.not file.) O87 - FAEL: "{F1889BBD-55EB-4C5A-82B1-A33DAFE5BF48}" [In-None-P6-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe (.not file.) O87 - FAEL: "{134503F8-8E07-47ED-870C-D84D2BAC4224}" [In-None-P17-TRUE] .(...) -- C:\Windows\SysWOW64\PnkBstrB.exe (.not file.) O87 - FAEL: "{F84F2254-412D-4035-9FEE-65D51C506EDF}" [In-None-P6-TRUE] .(.EA Digital Illusions CE AB - Battlefield 3™.) -- D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe {0C618E5C55725B09158B62149C425BA5} © O87 - FAEL: "{C7A8C4E9-265F-4FF3-ADCE-7730CCB6EA0C}" [In-None-P17-TRUE] .(.EA Digital Illusions CE AB - Battlefield 3™.) -- D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe {0C618E5C55725B09158B62149C425BA5} © O87 - FAEL: "{AA357A31-535A-4C15-84AF-3647553D0DEF}" [In-None-P6-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe O87 - FAEL: "{3A914261-9B79-4186-B019-A5A8D635A287}" [In-None-P17-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe O87 - FAEL: "{4EB032EA-499B-4F15-B56A-6F9FDED70BE9}" [In-None-P6-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe {0AEBA8669460A2A96F4D6F3A2E13E864} O87 - FAEL: "{89263BE6-F6CB-43B0-9478-1901D71A2A50}" [In-None-P17-TRUE] .(...) -- D:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe {0AEBA8669460A2A96F4D6F3A2E13E864} O87 - FAEL: "{DD9B4BFC-54AF-4950-8021-7A796334AE87}" [In-None-P6-TRUE] .(...) -- C:\Users\Alexis\Downloads\android_root_other-68856381.exe {67AFE4FB2458A37CFEBA2D43EC2594B2} O87 - FAEL: "{884D785F-EE6C-4017-9730-4BDAB7244CA4}" [In-None-P17-TRUE] .(...) -- C:\Users\Alexis\Downloads\android_root_other-68856381.exe {67AFE4FB2458A37CFEBA2D43EC2594B2} ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (34) - 9s SS - Demand [11/11/2015] [ 291648] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [07/12/2015] [ 291648] Airtop (Airtop) . (...) - C:\ProgramData\Airtop\Airtop.exe =>PUP.Optional.Salus SR - Auto [0] [ 291648] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe © SR - Auto [02/09/2015] [ 291648] Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® SR - Auto [07/12/2015] [ 291648] ApplicationHosting (ApplicationHosting) . (...) - C:\ProgramData\ApplicationHosting\ApplicationHosting.exe =>PUP.Optional.ApplicationHosting SS - Demand [14/06/2014] [ 291648] BattlEye Service (BEService) . (...) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe SR - Auto [12/08/2015] [ 291648] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® SS - Auto [22/11/2015] [ 291648] Service Mise à jour Dropbox (dbupdate) (dbupdate) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe {0C89CBE063927780186EC0063F10D323} © SS - Demand [22/11/2015] [ 291648] Service Mise à jour Dropbox (dbupdatem) (dbupdatem) . (.Dropbox, Inc..) - C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe {0C89CBE063927780186EC0063F10D323} © SS - Auto [07/12/2015] [ 291648] Touchla (doonioaduuaate) . (...) - C:\Users\Alexis\AppData\Local\Labsoltax.exe SR - Auto [12/11/2015] [ 291648] Dripkix Service (Dripkix) . (.Copyright © 2015.) - C:\Program Files\Dripkix\Dripkix.exe =>PUP.Optional.Amonetize SR - Auto [05/08/2015] [ 291648] FastCompress (FastCompress) . (.Adlegend Media.) - C:\Program Files (x86)\FastCompress-Zip\Fast_Support.exe {11210D7D7D1C16D9150B69F8767D7C855E19} © SR - Auto [07/12/2015] [ 291648] Desktop Upload (ginoquci) . (...) - C:\Users\Alexis\AppData\Local\Temp\nsb8202.tmp SR - Auto [08/12/2015] [ 291648] Rename Outline (gufutoqu) . (...) - C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\knsjC532.tmp =>PUP.Optional.CrossRider SS - Auto [28/10/2015] [ 291648] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [28/10/2015] [ 291648] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [30/08/2011] [ 291648] Intel(R) Integrated Clock Controller Service - Intel(R) ICCS (ICCS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe © SS - Demand [04/04/2005] [ 291648] InstallDriver Table Manager (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe © SR - Demand [23/09/2015] [ 291648] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.® SR - Auto [15/10/2014] [ 291648] Ma-Config Agent (MaConfigAgent) . (.CybelSoft.) - C:\Program Files\ma-config.com\MaConfigAgent.exe =>.Cybelsoft® SS - Demand [06/11/2015] [ 291648] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SR - Auto [07/12/2015] [ 291648] Add Telephone Line (nyneryxo) . (...) - C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\hnsg5CE7.tmp =>PUP.Optional.CrossRider SS - Demand [26/10/2015] [ 291648] Origin Client Service (Origin Client Service) . (.Electronic Arts.) - D:\Program Files (x86)\Origin\OriginClientService.exe =>.Electronic Arts, Inc.® SR - Auto [31/01/2015] [ 291648] Razer Game Scanner (Razer Game Scanner Service) . (.Copyright © 2013-2015.) - C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe =>.Razer Inc.® SR - Auto [07/12/2015] [ 291648] Free Up Joystick (roqenufe) . (...) - C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\jnsb480E.tmp =>PUP.Optional.CrossRider SR - Auto [26/01/2015] [ 291648] RzKLService (RzKLService) . (.Razer Inc..) - C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe =>.Razer Inc.® SR - Auto [09/06/2014] [ 291648] Razer Surround Audio Service (RzMaelstromVADStreamingService) . (.A-Volute.) - C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe SR - Auto [07/12/2015] [ 291648] SSFK (SSFK) . (.TODO: <公司名>.) - C:\Program Files (x86)\SFK\SSFK.exe {1121D343CEADB8041BAC48B044906C5E105E} =>PUP.Optional.MyWebSearch SR - Auto [21/05/2015] [ 291648] SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD..) - C:\Program Files (x86)\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe =>.DEVGURU CO LTD® SS - Demand [19/08/2015] [ 291648] Steam Client Service (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe =>.Valve® SR - Auto [07/12/2015] [ 291648] WindowsMangerProtect Service (WindowsMangerProtect) . (.Sysinternals process Explorer.) - C:\ProgramData\Tmp0x0x\ProtectWindowsManager.exe {11215BD52CE822E39F61AAE0642B2F566ABD} =>PUP.Optional.WpManager SR - Auto [04/12/2015] [ 291648] WNetEnhancer Service (WNetEnhancer Service) . (...) - C:\Program Files (x86)\WNetEnhancer\WNetEnhancer Internet Enhancer\663d2e82e7a5dc32e243ab08ac2ec4a6.exe =>PUP.Optional.Wajam SR - Auto [08/12/2015] [ 291648] Zitenop (Zitenop) . (...) - C:\ProgramData\Zitenop\Zitenop.exe =>PUP.Optional.Salus ---\\ Recherche de clés de registre Tracing (26) - 8s HKLM\SOFTWARE\Microsoft\Tracing\Dripkix_RASAPI32 =>PUP.Optional.Amonetize HKLM\SOFTWARE\Microsoft\Tracing\Dripkix_RASMANCS =>PUP.Optional.Amonetize HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Airtop_RASAPI32 =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Airtop_RASMANCS =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASAPI32 =>PUP.Optional.ApplicationHosting HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASMANCS =>PUP.Optional.ApplicationHosting HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASAPI32 =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASMANCS =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock Uninstall_RASAPI32 =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock Uninstall_RASMANCS =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASAPI32 =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASMANCS =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\OneSystemCare_RASAPI32 =>PUP.Optional.OneSystemCare HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\OneSystemCare_RASMANCS =>PUP.Optional.OneSystemCare HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Selection Tools Uninstall_RASAPI32 =>PUP.Optional.Nosibay HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Selection Tools Uninstall_RASMANCS =>PUP.Optional.Nosibay HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Selection Tools_RASAPI32 =>PUP.Optional.Nosibay HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Selection Tools_RASMANCS =>PUP.Optional.Nosibay HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpaceSoundPro_RASAPI32 =>PUP.Optional.SpaceSoundPro HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpaceSoundPro_RASMANCS =>PUP.Optional.SpaceSoundPro HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upgmsd_fr_005010169_RASAPI32 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upgmsd_fr_005010169_RASMANCS =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upospd_us_013010168_RASAPI32 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upospd_us_013010168_RASMANCS =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Zitenop_RASAPI32 =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Zitenop_RASMANCS =>PUP.Optional.Salus ---\\ Scan Additionnel (166) - 1s HKLM\SYSTEM\CurrentControlSet\Services\Airtop =>PUP.Optional.Salus C:\ProgramData\Airtop\Airtop.exe =>PUP.Optional.Salus HKLM\SYSTEM\CurrentControlSet\Services\ApplicationHosting =>PUP.Optional.ApplicationHosting C:\ProgramData\ApplicationHosting\ApplicationHosting.exe =>PUP.Optional.ApplicationHosting HKLM\SYSTEM\CurrentControlSet\Services\Dripkix =>PUP.Optional.Amonetize C:\Program Files\Dripkix\Dripkix.exe =>PUP.Optional.Amonetize HKLM\SYSTEM\CurrentControlSet\Services\gufutoqu =>PUP.Optional.CrossRider C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\knsjC532.tmp =>PUP.Optional.CrossRider HKLM\SYSTEM\CurrentControlSet\Services\nyneryxo =>PUP.Optional.CrossRider C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\hnsg5CE7.tmp =>PUP.Optional.CrossRider HKLM\SYSTEM\CurrentControlSet\Services\roqenufe =>PUP.Optional.CrossRider C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009\jnsb480E.tmp =>PUP.Optional.CrossRider HKLM\SYSTEM\CurrentControlSet\Services\SSFK =>PUP.Optional.MyWebSearch C:\Program Files (x86)\SFK\SSFK.exe =>PUP.Optional.MyWebSearch HKLM\SOFTWARE\AssistPoint =>PUP.Optional.AssistPoint HKLM\SYSTEM\CurrentControlSet\Services\Update Mgr AssistPoint =>PUP.Optional.AssistPoint HKLM\SYSTEM\CurrentControlSet\Services\WindowsMangerProtect =>PUP.Optional.WpManager C:\ProgramData\Tmp0x0x\ProtectWindowsManager.exe =>PUP.Optional.WpManager HKLM\SYSTEM\CurrentControlSet\Services\WNetEnhancer Service =>PUP.Optional.Wajam C:\Program Files (x86)\WNetEnhancer\WNetEnhancer Internet Enhancer\663d2e82e7a5dc32e243ab08ac2ec4a6.exe =>PUP.Optional.Wajam HKLM\SYSTEM\CurrentControlSet\Services\Zitenop =>PUP.Optional.Salus C:\ProgramData\Zitenop\Zitenop.exe =>PUP.Optional.Salus C:\Program Files (x86)\Fast-Search\kol3015.exe =>PUP.Optional.FastSearch C:\ProgramData\Service7609 =>Heuristic.Graftor C:\ProgramData\Service7609\Service7609.exe =>Heuristic.Graftor C:\Windows\Tasks\VKCAGRPJFKDHGGAN.job =>Heuristic.Graftor C:\Windows\System32\Tasks\kol3015 =>PUP.Optional.FastSearch C:\Windows\System32\Tasks\Urecceqm =>PUP.Optional.Groover C:\Windows\System32\Tasks\VKCAGRPJFKDHGGAN =>Heuristic.Graftor C:\Users\Alexis\AppData\Local\gmsd_fr_005010169\upgmsd_fr_005010169.exe =>PUP.Optional.CrossRider C:\Users\Alexis\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe =>.Superfluous.MalwareProtection C:\Program Files (x86)\rec_en_77\rec_en_77.exe =>PUP.Optional.Tuto4PC C:\Program Files (x86)\gmsd_fr_005010169\gmsd_fr_005010169.exe =>PUP.Optional.CrossRider C:\Program Files (x86)\WNetEnhancer\WNetEnhancer Internet Enhancer\7e0e6c165467f226fa2a8f9d6445d9af.exe =>PUP.Optional.Wajam C:\Program Files\Dripkix\packages\76b17136-be0a-4a59-8a8b-6dca3c97cc4d\Drip.exe =>PUP.Optional.Amonetize C:\Users\Alexis\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhdcbgmkmfapmaccefgcigficdnphjbn =>Hijacker.Browser C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\findit.xml =>PUP.Optional.SmartBar C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\istartpageing.xml =>PUP.Optional.IstartPageing C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\search-simple.xml =>PUP.Optional.SearchSimple C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo C:\Users\Alexis\AppData\Roaming\Mozilla\Firefox\Profiles\8i3qsk17.default\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311541197} =>PUP.Optional.CrossRider HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411891122} =>PUP.Optional.CrossRider HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30c23909-a0f6-4e68-a6f7-919ff3cfac34} =>PUP.Optional.MediaViewer C:\Windows\system32\Ekiraky64.dll =>Hijacker.Winsock C:\Windows\system32\Ofuwday64.dll =>Hijacker.Winsock C:\ProgramData\Zitenop\Viajob.dll =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\gmsd_fr_005010169_is1 =>PUP.Optional.GamesDesktop HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\rec_en_77_is1 =>PUP.Optional.Tuto4PC HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D71F4C2F-F591-45C8-87D7-C1FD4DC4A7EC} =>PUP.Optional.SmartBar HKLM\SOFTWARE\Wow6432Node\AssistPoint =>PUP.Optional.AssistPoint HKLM\SOFTWARE\Wow6432Node\downchecker =>PUP.Optional.DownChecker HKLM\SOFTWARE\Wow6432Node\Fast-Search =>PUP.Optional.FastSearch HKLM\SOFTWARE\Wow6432Node\FFPluginHp =>PUP.Optional.SweetSearch HKLM\SOFTWARE\Wow6432Node\GAMESDESKTOP =>PUP.Optional.GamesDesktop HKLM\SOFTWARE\Wow6432Node\istartpageingSoftware =>PUP.Optional.IstartPageing HKLM\SOFTWARE\Wow6432Node\LolliScan =>PUP.Optional.Graftor HKLM\SOFTWARE\Wow6432Node\mtAirtop =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\mtZitenop =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\RichMediaViewV1 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Wow6432Node\RichMediaViewV1release399 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Wow6432Node\SensePlus-nv =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\SensePlus-nv-ie =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\SpaceSondPro =>PUP.Optional.SpaceSoundPro HKLM\SOFTWARE\Wow6432Node\SwiftSearch_1.10.0.25 =>PUP.Optional.Generic HKLM\SOFTWARE\Wow6432Node\TrustMediaViewerV1alpha1193 =>PUP.Optional.MediaViewer HKLM\SOFTWARE\Wow6432Node\Tutorials =>PUP.Optional.AgenceExclusive HKLM\SOFTWARE\Wow6432Node\WNetEnhancer =>PUP.Optional.Wajam HKLM\SOFTWARE\Wow6432Node\yoursearchingSoftware =>PUP.Optional.YourSearching HKCU\SOFTWARE\DailyPcClean =>PUP.Optional.DailyPCClean HKCU\SOFTWARE\iWebar-nv-ie =>PUP.Optional.CrossRider HKCU\SOFTWARE\Nosibay =>PUP.Optional.SPointer HKCU\SOFTWARE\Store =>PUP.Optional.Generic HKCU\SOFTWARE\tstamptoken =>PUP.Optional.MaxComputerCleaner HKCU\SOFTWARE\Tutorials =>PUP.Optional.AgenceExclusive HKCU\SOFTWARE\TutoTag =>PUP.Optional.AgenceExclusive HKCU\SOFTWARE\WNetEnhancer =>PUP.Optional.Wajam HKCU\SOFTWARE\WTools =>PUP.Optional.Nosibay C:\Program Files (x86)\032B0290-1449484090-0559-0306-940700080009 =>PUP.Optional.CrossRider C:\Program Files (x86)\032B0290-1449484097-0559-0306-940700080009 =>PUP.Optional.CrossRider C:\Program Files (x86)\209fe72e-431d-43ba-948d-1274eef4bd7f =>PUP.Optional.CrossRider C:\Program Files (x86)\6d2018b6-192d-498a-8d18-12afcb059256 =>PUP.Optional.CrossRider C:\Program Files (x86)\Assist Point =>PUP.Optional.AssistPoint C:\Program Files (x86)\Fast-Search =>PUP.Optional.FastSearch C:\Program Files (x86)\gmsd_fr_005010169 =>PUP.Optional.CrossRider C:\Program Files (x86)\rec_en_77 =>PUP.Optional.Tuto4PC C:\Program Files (x86)\SFK =>PUP.Optional.MyWebSearch C:\Program Files (x86)\WNetEnhancer =>PUP.Optional.Wajam C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP =>PUP.Optional.GamesDesktop C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WNetEnhancer =>PUP.Optional.Wajam C:\ProgramData\Airtop =>PUP.Optional.Salus C:\ProgramData\Airtops =>PUP.Optional.Salus C:\ProgramData\ApplicationHosting =>PUP.Optional.ApplicationHosting C:\ProgramData\Zitenop =>PUP.Optional.Salus C:\ProgramData\Zitenops =>PUP.Optional.Salus C:\Users\Alexis\AppData\Roaming\istartpageing =>PUP.Optional.IstartPageing C:\Users\Alexis\AppData\Roaming\Nosibay =>PUP.Optional.BubbleDock C:\Users\Alexis\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy C:\Users\Alexis\AppData\Roaming\Store =>PUP.Optional.Nosibay C:\Users\Alexis\AppData\Roaming\yoursearching =>PUP.Optional.YourSearching C:\Users\Alexis\AppData\Local\CrashRpt =>.Superfluous.CrashReports C:\Users\Alexis\AppData\Local\gmsd_fr_005010169 =>PUP.Optional.CrossRider C:\Users\Alexis\AppData\Local\Installer =>PUP.Optional.InstallPedia C:\Users\Alexis\AppData\Local\MalwareProtectionLive =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\rec_en_77 =>PUP.Optional.Tuto4PC C:\Users\Alexis\AppData\Local\SmartWeb =>PUP.Optional.SmartWebSearch C:\Users\Alexis\AppData\Local\Software =>PUP.Optional.Boxore C:\Windows\Prefetch\62793.WINDAPP.MON001.NO.EXE-5D7E35F7.pf =>PUP.Optional.Nosibay C:\Windows\Prefetch\BUBBLE DOCK BSETUP.EXE-29E55CE8.pf =>PUP.Optional.BubbleDock C:\Windows\Prefetch\BUBBLE DOCK.EXE-C3A82C7A.pf =>PUP.Optional.BubbleDock C:\Windows\Prefetch\LBUBBLE DOCK.EXE-2F791CAE.pf =>PUP.Optional.BubbleDock C:\Windows\Prefetch\SEARCHMOREKNOWDESKTOPSEARCH.E-4D59CE71.pf =>PUP.Optional.DesktopSearch C:\Windows\Prefetch\SELECTION TOOLS.EXE-E43D508D.pf =>PUP.Optional.Nosibay C:\Windows\Prefetch\UPGMSD_FR_005010169.EXE-06E01730.pf =>PUP.Optional.CrossRider C:\Windows\System32\drivers\cherimoya.sys =>PUP.Optional.Shopperz C:\Users\Alexis\AppData\Roaming\OpenCandy\34B2AA63A5384F389CDE46C223899B62\setup.exe =>PUP.Optional.OpenCandy C:\Users\Alexis\AppData\Local\SmartWeb\__u.exe =>PUP.Optional.SmartWebSearch C:\Users\Alexis\AppData\Local\MalwareProtectionLive\uninstall.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk788-3a9a96c7-8f69-4647-9872-16437b5b16de.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk788-707685b8-9510-4ff3-8d9b-66c5b2ace5e1.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk788-d46d40c8-5a1f-462b-8fc5-0efe407a4b6c.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-038de6af-266b-4db6-9bce-467e8e47e7f9.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-199137ac-027c-4333-baab-cae18c999c04.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-2fccb677-dd11-496c-bfa7-f0a17884f442.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-9e143978-55e7-4b1a-93f8-686f3932e040.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\dhk806-fb65f2c4-9535-4cf0-931e-162f077786f5.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-1be8e3fe-7dc0-49d5-b23e-2052f8907396.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-1f547a07-0ceb-45b3-8d0f-e4def2e0649f.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-7efed5dd-539c-4e72-9ca6-78a2a26aa312.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-804581a9-2808-4904-bdba-b2e1a8e202f6.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-bbe34a65-25a8-45a3-8edb-74fe73cad706.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-df048cc4-12d2-4af3-92a1-fb80db26b245.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-e0d53720-fcb2-4e63-9a02-b9410494df97.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\Plugin-e4ecbe96-ee3f-4a16-94c8-25c0957ade02.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\PluginContainer-a8477e14-c262-47a1-b087-f92bcab8ffc2.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\PluginContainer-b7bb3717-0d9f-40f5-9520-0a117e442387.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\PluginContainer-fef9969e-6be4-4057-a284-4e13e2dacf25.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\MalwareProtectionLive\quarantine\updater-474f52e6-893e-4734-81ac-8e3f554bf11a.exe =>.Superfluous.MalwareProtection C:\Users\Alexis\AppData\Local\Installer\Install_26144\YTDownloader.exe =>PUP.Optional.YTDownloader C:\Users\Alexis\AppData\Local\gmsd_fr_005010169\Download\myoffergroup_fr.exe =>PUP.Optional.CrossRider HKLM64\SOFTWARE\Microsoft\Tracing\Dripkix_RASAPI32 =>PUP.Optional.Amonetize HKLM64\SOFTWARE\Microsoft\Tracing\Dripkix_RASMANCS =>PUP.Optional.Amonetize HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Airtop_RASAPI32 =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Airtop_RASMANCS =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASAPI32 =>PUP.Optional.ApplicationHosting HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ApplicationHosting_RASMANCS =>PUP.Optional.ApplicationHosting HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASAPI32 =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASMANCS =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock Uninstall_RASAPI32 =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock Uninstall_RASMANCS =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASAPI32 =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASMANCS =>PUP.Optional.BubbleDock HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\OneSystemCare_RASAPI32 =>PUP.Optional.OneSystemCare HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\OneSystemCare_RASMANCS =>PUP.Optional.OneSystemCare HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Selection Tools Uninstall_RASAPI32 =>PUP.Optional.Nosibay HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Selection Tools Uninstall_RASMANCS =>PUP.Optional.Nosibay HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Selection Tools_RASAPI32 =>PUP.Optional.Nosibay HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Selection Tools_RASMANCS =>PUP.Optional.Nosibay HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpaceSoundPro_RASAPI32 =>PUP.Optional.SpaceSoundPro HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SpaceSoundPro_RASMANCS =>PUP.Optional.SpaceSoundPro HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upgmsd_fr_005010169_RASAPI32 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upgmsd_fr_005010169_RASMANCS =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upospd_us_013010168_RASAPI32 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\upospd_us_013010168_RASMANCS =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Zitenop_RASAPI32 =>PUP.Optional.Salus HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Zitenop_RASMANCS =>PUP.Optional.Salus ---\\ Récapitulatif des éléments trouvés sur votre station (53) - 0s http://www.nicolascoolman.fr/?p=4664 =>Hijacker.DNS.Hosts http://www.nicolascoolman.fr/?p=2645 =>PUP.Optional.Salus http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ApplicationHosting http://www.nicolascoolman.fr/?p=2072 =>PUP.Optional.Amonetize http://www.nicolascoolman.fr/?p=180 =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/?p=220 =>PUP.Optional.MyWebSearch http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.AssistPoint http://www.nicolascoolman.fr/?p=173 =>PUP.Optional.WpManager http://www.nicolascoolman.fr/?p=263 =>PUP.Optional.Wajam http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FastSearch http://www.nicolascoolman.fr/?p=4161 =>PUP.Optional.Groover http://www.nicolascoolman.fr/?p=4664 =>Heuristic.Graftor http://www.nicolascoolman.fr/?p=29 =>PUP.Optional.SmartWebSearch http://www.nicolascoolman.fr/?p=4664 =>.Superfluous.MalwareProtection http://www.nicolascoolman.fr/?p=4879 =>PUP.Optional.Tuto4PC http://www.nicolascoolman.fr/?p=4664 =>Hijacker.Browser http://www.nicolascoolman.fr/?p=308 =>PUP.Optional.SmartBar http://www.nicolascoolman.fr/?p=4936 =>PUP.Optional.IstartPageing http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SearchSimple http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BDYahoo http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.LightningNewTab http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Linkury http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.MediaViewer http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SpaceSoundPro http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Nosibay http://www.nicolascoolman.fr/?p=401 =>PUP.Optional.Downware http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.GamesDesktop http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DownChecker http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SweetSearch http://www.nicolascoolman.fr/?p=2460 =>PUP.Optional.Graftor http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Generic http://www.nicolascoolman.fr/?p=122 =>PUP.Optional.AgenceExclusive http://www.nicolascoolman.fr/?p=5037 =>PUP.Optional.YourSearching http://www.nicolascoolman.fr/?p=4047 =>PUP.Optional.DailyPCClean http://www.nicolascoolman.fr/?p=205 =>PUP.Optional.SPointer http://www.nicolascoolman.fr/?p=2576 =>PUP.Optional.MaxComputerCleaner http://www.nicolascoolman.fr/?p=177 =>PUP.Optional.BubbleDock http://www.nicolascoolman.fr/?p=197 =>PUP.Optional.OpenCandy http://www.nicolascoolman.fr/?p=4664 =>.Superfluous.CrashReports http://www.nicolascoolman.fr/?p=943 =>PUP.Optional.InstallPedia http://www.nicolascoolman.fr/?p=90 =>PUP.Optional.Boxore http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DesktopSearch http://www.nicolascoolman.fr/?p=338 =>.Superfluous.CacaoWeb http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Shopperz http://www.nicolascoolman.fr/?p=1780 =>PUP.Optional.YTDownloader http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BoBrowser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PieSearch http://www.nicolascoolman.fr/?p=248 =>PUP.Optional.WebsSearches http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SearchEngine http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DeskCut http://www.nicolascoolman.fr/?p=666 =>PUP.Optional.QuickStart http://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.OneSystemCare ~ End of the scan, 26428 items in 283 seconds (1502)(3)