~ ZHPDiag v2016.1.31.23 Par Nicolas Coolman (2016/01/30) ~ Démarré par oui (Administrator) (2016/04/07 22:01:22) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Pas de fichier réseau ~ Mode: Scanner ~ Rapport: C:\Users\oui\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\oui\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 10 Pro, 32-bit (Build 10586) ---\\ Navigateurs Internet (3) - 1s GCIE: Google Chrome v49.0.2623.110 OPIE: Opera 36.0.2130.46 MSIE: Internet Explorer v11.162.10586.0 ---\\ Informations sur les produits Windows (7) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows(R) Operating System, RETAIL channel Windows ID Activation : OK ~ Windows Partial Key : 3V66T ~ Windows Remaining Initializations Number : 1001 Windows Automatic Updates : OK ---\\ Logiciels de protection (2) - 6s Avast Free Antivirus v11.1.2241 Windows Defender (Deactivate) ---\\ Surveillance de Logiciels (2) - 6s Adobe Flash Player 21 PPAPI Adobe Reader 9.3 - Français ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 6 Model 37 Stepping 5, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 3069.804 MB (52% free) System Restore: Activé (Enable) System drive C: has 33 GB () free of 89 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: OUI-PC ~ User Name: oui ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 33 GB free of 89 GB (System) ~ Drive D: has 51 GB free of 215 GB ---\\ Etat du Centre de Sécurité Windows (7) - 0s [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Recherche particulière de fichiers génériques (24) - 1s [MD5.FCBCED2A237DCD7EF86CED551B731742] - 29/01/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [4064320] =>.Microsoft Windows® [MD5.2DBCA4E4BB09FF7F8F171CC364DFAF67] - 30/10/2015 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [53760] =>.Microsoft Corporation [MD5.DE3A10032AE77199B1E7FBC8D6E21636] - 30/10/2015 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [192200] =>.Microsoft Windows Publisher® [MD5.44F1D7984F8B7739EF7EF50DEC6B41B9] - 23/02/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [2229760] =>.Microsoft Corporation [MD5.66FC7843E349C68F424EB79E0A17D8D2] - 05/01/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [493056] =>.Microsoft Corporation [MD5.97FA4FB31B988CFA3E8F39788BC16562] - 30/10/2015 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [419328] =>.Microsoft Corporation [MD5.2796C0957F6F05A528DD64B8591371B6] - 30/10/2015 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [535088] =>.Microsoft Windows® [MD5.09F38BE73FDD29C6C20ED33AD349B991] - 30/10/2015 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation [MD5.0E423A5854E1265F3B6D27332601355F] - 05/11/2015 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [471392] =>.Microsoft Windows® [MD5.845E9A40B9B3CAD20B5EE45A2A58EE11] - 30/10/2015 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [23392] =>.Microsoft Windows® [MD5.40FF3DCC427730779DDF301A0F9FC0E1] - 30/10/2015 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [74752] =>.Microsoft Corporation [MD5.568DF0072AD005D29D6E987698C8225A] - 30/10/2015 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [130560] =>.Microsoft Corporation [MD5.903EC9934C38FA7357C1DC83339A0D55] - 30/10/2015 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [113664] =>.Microsoft Corporation [MD5.1CB5E8AA58EE45207109AD07D50BB7D2] - 30/10/2015 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [68096] =>.Microsoft Corporation [MD5.14DDBB0CBE11A736C089A4F2813A5EDF] - 30/10/2015 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [90624] =>.Microsoft Corporation [MD5.F97C1D68DE39952F880F98CFCE0DAF1A] - 30/10/2015 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [124416] =>.Microsoft Corporation [MD5.89A56A86A03414C8ED5A96A52C3BA7B2] - 23/02/2016 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [381280] =>.Microsoft Windows® [MD5.1CA44BC32773FCB9FE4ADAA077AB642E] - 30/10/2015 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [211968] =>.Microsoft Corporation [MD5.49EBEFD579621241A7EDF0C6E1C224C6] - 23/02/2016 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [1820512] =>.Microsoft Windows® [MD5.B69B323395ABC1303EB9F69E9B8460F8] - 30/10/2015 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [81408] =>.Microsoft Corporation [MD5.D49CBC052916F95D184713CA6FC37C5C] - 23/02/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [80896] =>.Microsoft Corporation [MD5.288DA2E52BFE6A90937FF9A994FA56ED] - 30/10/2015 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [132608] =>.Microsoft Corporation [MD5.1683BCB69B9950CD8C97865F3EC6781E] - 05/11/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [95072] =>.Microsoft Windows® [MD5.2E5522E831E616B37F06908B7B56C3B3] - 30/10/2015 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [349536] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (6) - 2s O23 - Service: Advanced SystemCare Service 9 (AdvancedSystemCareService9) . (.IObit - Advanced SystemCare Service.) - C:\Program Files\IObit\Advanced SystemCare\ASCService.exe =>.IObit Information Technology® O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe =>.AVAST Software a.s.® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: IMF Service (IMFservice) . (.IObit - IObit Malware Fighter Service.) - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe =>.IObit Information Technology® O23 - Service: LiveUpdate (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe =>.IObit Information Technology® O23 - Service: RzKLService (RzKLService) . (.Razer Inc. - RzKLService.exe.) - C:\Program Files\Razer\Razer Cortex\RzKLService.exe =>.Razer Inc.® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (16) - 24s SS - Demand [07/04/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [04/11/2015] [ 827680] Advanced SystemCare Service 9 (AdvancedSystemCareService9) . (.IObit.) - C:\Program Files\IObit\Advanced SystemCare\ASCService.exe =>.IObit Information Technology® SR - Auto [10/11/2015] [ 174416] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe =>.AVAST Software a.s.® SR - Demand [10/11/2015] [ 4390776] AvastVBox COM Service (AvastVBoxSvc) . (.Avast Software.) - C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe =>.AVAST Software a.s.® SS - Demand [15/03/2016] [ 93064] FLService (FLService) . (.New Softwares.net.) - C:\Windows\System32\WinFLService.exe {1121122E787653A63021DDD46D487F7F3B5B} SS - Auto [07/04/2016] [ 154440] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [07/04/2016] [ 154440] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Auto [10/03/2016] [ 1576736] IMF Service (IMFservice) . (.IObit.) - C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe =>.IObit Information Technology® SS - Demand [13/03/2016] [ 2751760] LavasoftTcpService (LavasoftTcpService) . (.Lavasoft Limited.) - C:\Program Files\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe =>.Lavasoft Limited® SS - Demand [08/06/2015] [ 509424] Lenovo EasyPlus Hotspot (Lenovo EasyPlus Hotspot) . (.Lenovo.) - C:\Program Files\Common Files\LENOVO\easyplussdk\bin\EPHotspot.exe =>.LENOVO® SR - Auto [10/03/2016] [ 2945312] LiveUpdate (LiveUpdateSvc) . (.IObit.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe =>.IObit Information Technology® SS - Demand [04/07/2015] [ 76888] PnkBstrA (PnkBstrA) . (...) - C:\Windows\System32\PnkBstrA.exe =>.Even Balance, Inc.® SS - Demand [23/09/2015] [ 188072] Razer Game Scanner (Razer Game Scanner Service) . (.Copyright © 2013-2015.) - C:\Program Files\Razer\Razer Services\GSS\GameScannerService.exe =>.Razer Inc.® SR - Auto [28/10/2015] [ 129168] RzKLService (RzKLService) . (.Razer Inc..) - C:\Program Files\Razer\Razer Cortex\RzKLService.exe =>.Razer Inc.® SS - Demand [13/03/2016] [ 17168] WC Assistant (WCAssistantService) . (.Copyright © 2014.) - C:\Program Files\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe =>.Lavasoft Limited® ---\\ Tâches planifiées en automatique (40) - 5s [MD5.2C8FC1112AB26C23E250EC12DFEA1129] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashUtil32_21_0_0_197_pepper.exe [1164992] =>.Adobe Systems Incorporated® [MD5.AEDD2A855B49829E009C75D955795181] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269504] =>.Adobe Systems Incorporated® [MD5.DC7D54AE67F4D5F065F19011E3D123C2] [APT] [ASC9_PerformanceMonitor] (.IObit.) -- C:\Program Files\IObit\Advanced SystemCare\Monitor.exe [1517344] =>.IObit Information Technology® [MD5.83FAB1FD5301FE77440762F4577F4720] [APT] [ASC9_SkipUac_oui] (.IObit.) -- C:\Program Files\IObit\Advanced SystemCare\ASC.exe [4999456] =>.IObit Information Technology® [MD5.3F32141C078BD6A21D75CBE5A888039C] [APT] [AutoKMS] (.CODYQX4 & Bosh.) -- C:\Windows\AutoKMS\AutoKMS.exe [1725440] =>HackTool.AutoKMS [MD5.8A6D1C082176864414E85ACF6696331D] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [1510320] =>.AVAST Software a.s.® [MD5.F09789E8C16FE61A714D49DA24544DFC] [APT] [Driver Booster Scheduler] (.IObit.) -- C:\Program Files\IObit\Driver Booster\Scheduler.exe [1009952] =>.IObit Information Technology® [MD5.BDFED53F51A736992CA8955A5E24D1FB] [APT] [Driver Booster SkipUAC (oui)] (.IObit.) -- C:\Program Files\IObit\Driver Booster\DriverBooster.exe [4794656] =>.IObit Information Technology® [MD5.750446ED76A5D13E902174DDDDA1A62B] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc® [MD5.750446ED76A5D13E902174DDDDA1A62B] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [154440] =>.Google Inc® [MD5.EED9031220EE45C19ADED53509B874B7] [APT] [Opera scheduled Autoupdate 1460022470] (.Opera Software.) -- C:\Program Files\Opera\launcher.exe [695848] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.00000000000000000000000000000000] [APT] [RunAsStdUser Task] (...) -- C:\Program Files\Moo0\VoiceRecorder 1.43\VoiceRecorder.exe (.not file.) [0] [MD5.00000000000000000000000000000000] [APT] [SidebarExecute] (...) -- C:\Program Files\Windows Sidebar\sidebar.exe (.not file.) [0] [MD5.ECFF97F51AE1F5BCE7DE42DDF1400720] [APT] [SmartDefrag4_Startup] (.IObit.) -- C:\Program Files\IObit\Smart Defrag 4\SmartDefrag.exe [4534560] =>.IObit Information Technology® [MD5.A1397A63678D28D5336B0CB6E71E9032] [APT] [SmartDefrag4_Update] (.IObit.) -- C:\Program Files\IObit\Smart Defrag 4\AutoUpdate.exe [2393888] =>.IObit Information Technology® [MD5.0538D3DE65F62F442D95BB2202116D26] [APT] [Uninstaller_SkipUac_oui] (.IObit.) -- C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe [4864800] =>.IObit Information Technology® [MD5.224EFC8B50E88D79DCEB19D658D5C41B] [APT] [AVAST Software\Avast settings backup] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [652816] =>.AVAST Software a.s.® [MD5.6F1EB36D59455B5B2F832F6D823F0596] [APT] [Lenovo\Lenovo Customer Feedback Program] (.Lenovo.) -- C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe [16832] =>.LENOVO® [MD5.E3238CA9101C670556B636C8F4FCE358] [APT] [Lenovo\Lenovo Customer Feedback Program 35] (.Lenovo.) -- C:\Program Files\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [17184] =>.LENOVO® O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job [1064] =>.Adobe Systems Incorporated O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1060] =>.Google Inc. O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1064] =>.Google Inc. O39 - APT: Uninstaller_SkipUac_oui - (.IObit.) -- C:\WINDOWS\Tasks\Uninstaller_SkipUac_oui.job [276] =>.IObit O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier [4122] =>.Adobe Systems Incorporated O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater [3976] =>.Adobe Systems Incorporated O39 - APT: ASC9_PerformanceMonitor - (.IObit.) -- C:\WINDOWS\System32\Tasks\ASC9_PerformanceMonitor [3312] =>.IObit O39 - APT: ASC9_SkipUac_oui - (.IObit.) -- C:\WINDOWS\System32\Tasks\ASC9_SkipUac_oui [3000] =>.IObit O39 - APT: AutoKMS - (.CODYQX4 & Bosh.) -- C:\WINDOWS\System32\Tasks\AutoKMS [3536] =>HackTool.AutoKMS O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\WINDOWS\System32\Tasks\avast! Emergency Update [4294] =>.AVAST Software O39 - APT: Driver Booster Scheduler - (.IObit.) -- C:\WINDOWS\System32\Tasks\Driver Booster Scheduler [3416] =>.IObit O39 - APT: Driver Booster SkipUAC (oui) - (.IObit.) -- C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (oui) [3060] =>.IObit O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3890] =>.Google Inc. O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4122] =>.Google Inc. O39 - APT: Opera scheduled Autoupdate 1460022470 - (.Opera Software.) -- C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1460022470 [3952] =>.Opera Software O39 - APT: RunAsStdUser Task - (...) -- C:\WINDOWS\System32\Tasks\RunAsStdUser Task [3366] (.Orphean.) O39 - APT: SidebarExecute - (...) -- C:\WINDOWS\System32\Tasks\SidebarExecute [3300] (.Orphean.) O39 - APT: SmartDefrag4_Startup - (.IObit.) -- C:\WINDOWS\System32\Tasks\SmartDefrag4_Startup [3316] =>.IObit O39 - APT: SmartDefrag4_Update - (.IObit.) -- C:\WINDOWS\System32\Tasks\SmartDefrag4_Update [3314] =>.IObit O39 - APT: Uninstaller_SkipUac_oui - (.IObit.) -- C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_oui [2454] =>.IObit ---\\ Processus lancés (25) - 2s [MD5.16C8FC1588F3656DE67727EEB4DA853E] - (.IObit - IObit Malware Fighter Service.) -- C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [1576736] [PID.1144] =>.IObit Information Technology® [MD5.A1936493AC94D7C4350327049ED5B953] - (.IObit - Advanced SystemCare Service.) -- C:\Program Files\IObit\Advanced SystemCare\ASCService.exe [827680] [PID.1160] =>.IObit Information Technology® [MD5.199D3FA1AF32FCE46A38E8EB64FFF520] - (.AVAST Software - avast! Service.) -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [174416] [PID.476] =>.AVAST Software a.s.® [MD5.9FE061CEBE2478FABC37BBA9557C6DAA] - (.Razer Inc. - RzKLService.exe.) -- C:\Program Files\Razer\Razer Cortex\RzKLService.exe [129168] [PID.2540] =>.Razer Inc.® [MD5.BB319A6240A810FD09E63CDBB3E6AF30] - (.IObit - Product Updater.) -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2945312] [PID.2652] =>.IObit Information Technology® [MD5.0EBCD3C26F9584864A9C8337DABB0185] - (.Avast Software - AvastVirtualBox Interface.) -- C:\Program Files\Alwil Software\Avast5\ng\vbox\AvastVBoxSVC.exe [4390776] [PID.4684] =>.AVAST Software a.s.® [MD5.ABF64234F3462571E66527828040219B] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files\Google\Update\1.3.29.5\GoogleCrashHandler.exe [252232] [PID.5556] =>.Google Inc® [MD5.ECFF97F51AE1F5BCE7DE42DDF1400720] - (.IObit - Smart Defrag v4.) -- C:\Program Files\IObit\Smart Defrag 4\SmartDefrag.exe [4534560] [PID.4040] =>.IObit Information Technology® [MD5.DC7D54AE67F4D5F065F19011E3D123C2] - (.IObit - Performance Monitor.) -- C:\Program Files\IObit\Advanced SystemCare\Monitor.exe [1517344] [PID.4044] =>.IObit Information Technology® [MD5.2F722690B624C9AD160EDC24DCA880DF] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe [7004376] [PID.1260] =>.AVAST Software a.s.® [MD5.60D66CEB34E0F631C206423CEFE35FDB] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [143392] [PID.5196] =>.Intel Corporation - pGFX® [MD5.2308A07BD53235EC6A0640DE5E58BAE7] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [178208] [PID.1444] =>.Intel Corporation - pGFX® [MD5.BD7D0E6082E90D3AE3676548F64A8251] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [178720] [PID.5116] =>.Intel Corporation - pGFX® [MD5.4EB962689D7314183AA360B29FCB4DF1] - (.IObit - Advanced SystemCare 9.) -- C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe [2010912] [PID.1500] =>.IObit Information Technology® [MD5.F70987D7C2F1C67BD1FB511C574F1F58] - (.IObit - IObit Uninstaller 5 UninstallMontior.) -- C:\Program Files\IObit\IObit Uninstaller\UninstallMonitor.exe [260896] [PID.5948] =>.IObit Information Technology® [MD5.41B7B1BFB83D92EC2CD4D66B760E4DDA] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\36.0.2130.46\opera.exe [648232] [PID.7912] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.1017F1DFE47DB1D1FA5F88046275A270] - (.Opera Software - Opera crash-reporter.) -- C:\Program Files\Opera\36.0.2130.46\opera_crashreporter.exe [519720] [PID.4916] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.41B7B1BFB83D92EC2CD4D66B760E4DDA] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\36.0.2130.46\opera.exe [648232] [PID.3084] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.41B7B1BFB83D92EC2CD4D66B760E4DDA] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\36.0.2130.46\opera.exe [648232] [PID.6712] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.41B7B1BFB83D92EC2CD4D66B760E4DDA] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\36.0.2130.46\opera.exe [648232] [PID.4892] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.41B7B1BFB83D92EC2CD4D66B760E4DDA] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\36.0.2130.46\opera.exe [648232] [PID.7752] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.41B7B1BFB83D92EC2CD4D66B760E4DDA] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\36.0.2130.46\opera.exe [648232] [PID.8116] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.41B7B1BFB83D92EC2CD4D66B760E4DDA] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\36.0.2130.46\opera.exe [648232] [PID.7640] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.41B7B1BFB83D92EC2CD4D66B760E4DDA] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\36.0.2130.46\opera.exe [648232] [PID.1108] {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software [MD5.FF9CE0FC9E3B4BC22001764A9EFE4741] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\oui\AppData\Roaming\ZHP\ZHPDiag3.exe [2105344] [PID.6156] =>.Nicolas Coolman ---\\ Google Chrome, Démarrage,Recherche,Extensions (13) - 0s G0 - GCSP: Preferences [User Data\Default][HomePage] http://accounts.google.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com G2 - GCE: Preference [User Data\Default] [aabcgdmkeabbnleenpncegpcngjpnjkc] G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] G2 - GCE: Preference [User Data\Default] [amjcoehkcacocffpmhnefgoeanepjfkf] Facebook Video Downloader G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] G2 - GCE: Preference [User Data\Default] [dhdgffkkebhmkfjojejmpbldmpobfkfo] G2 - GCE: Preference [User Data\Default] [eofcbnmajmjmplflapaojjnihcjkigck] Avast SafePrice G2 - GCE: Preference [User Data\Default] [fcachklhcihfinmagjnlomehfdhndhep] Toolkit For Facebook G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 0s P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_21_0_0_197.dll =>.Adobe Systems Incorporated P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.1] - (.VideoLAN.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (12) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://yamdex.net/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://yamdex.net/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R3 - URLSearchHook: (no name) - {0633EE93-D776-472f-A0FF-E1416B8B2E3D} Orphean R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer,Proxy Management (4) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (7) - 0s 5.231 212.227 205.199 5.231 212.227 205.199 ~ Nombre lignes détournées 5.231 32 (Hosts file redirected) ---\\ Browser Helper Object de navigateur (BHO) (8) - 1s O2 - BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} . (.IObit - Uninstall for explorer.) -- C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer.dll =>.IObit Information Technology® O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} (Orphean) O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_77\bin\ssv.dll =>.Oracle America, Inc.® O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll =>.AVAST Software a.s.® O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation® O2 - BHO: Advanced SystemCare Surfing Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} . (.IObit - Advanced SystemCare ASCPlugin_Protection.) -- C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll =>.IObit Information Technology® O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_77\bin\jp2ssv.dll =>.Oracle America, Inc.® ---\\ Internet Explorer, Barre d'outil (1) - 0s O3 - Toolbar: 0xB1C218236549D4119B18009027A5CD4F - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} . (...) -- (.not file.) ---\\ Applications lancées au démarrage du système (13) - 0s O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\Alwil Software\Avast5\AvastUI.exe =>.AVAST Software a.s.® O4 - HKLM\..\Run: [IObit Malware Fighter] . (.IObit - IObit Malware Fighter.) -- C:\Program Files\IObit\IObit Malware Fighter\IMF.exe =>.IObit Information Technology® O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation - pGFX® O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation - pGFX® O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation - pGFX® O4 - HKCU\..\Run: [Advanced SystemCare 9] . (.IObit - Advanced SystemCare 9.) -- C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe =>.IObit Information Technology® O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.Disc Soft Ltd® O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\oui\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\System32\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\System32\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-1118928101-2426349639-1067432843-1000\..\Run: [Advanced SystemCare 9] . (.IObit - Advanced SystemCare 9.) -- C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe =>.IObit Information Technology® O4 - HKUS\S-1-5-21-1118928101-2426349639-1067432843-1000\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.Disc Soft Ltd® O4 - HKUS\S-1-5-21-1118928101-2426349639-1067432843-1000\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\oui\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation® ---\\ Raccourcis Global Startup (23) - 3s O4 - GS\Desktop [Administrateur]: Advanced SystemCare 9.lnk . (.IObit - Advanced SystemCare 9.) C:\Program Files\IObit\Advanced SystemCare\ASC.exe =>.IObit Information Technology® O4 - GS\Desktop [Administrateur]: AvastUI.lnk . (.AVAST Software - avast! Antivirus.) C:\Program Files\Alwil Software\Avast5\AvastUI.exe =>.AVAST Software a.s.® O4 - GS\Desktop [Administrateur]: Driver Booster 3.lnk . (.IObit - Driver Booster 3.) C:\Program Files\IObit\Driver Booster\DriverBooster.exe =>.IObit Information Technology® O4 - GS\Desktop [Administrateur]: FastStone Capture.lnk . (.FastStone Soft - FastStone Capture.) C:\Program Files\FastStone Capture\FSCapture.exe =>.FastStone Soft O4 - GS\Desktop [Administrateur]: IObit Uninstaller.lnk . (.IObit - Uninstall Programs.) C:\Program Files\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe =>.IObit Information Technology® O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\oui\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [Administrateur]: Gооglе Сhrоmе.lnk . (...) C:\Program Files\Google\Chrome\Application\chrome.bat O4 - GS\Desktop [oui]: Advanced SystemCare 9.lnk . (.IObit - Advanced SystemCare 9.) C:\Program Files\IObit\Advanced SystemCare\ASC.exe =>.IObit Information Technology® O4 - GS\Desktop [oui]: AvastUI.lnk . (.AVAST Software - avast! Antivirus.) C:\Program Files\Alwil Software\Avast5\AvastUI.exe =>.AVAST Software a.s.® O4 - GS\Desktop [oui]: Driver Booster 3.lnk . (.IObit - Driver Booster 3.) C:\Program Files\IObit\Driver Booster\DriverBooster.exe =>.IObit Information Technology® O4 - GS\Desktop [oui]: FastStone Capture.lnk . (.FastStone Soft - FastStone Capture.) C:\Program Files\FastStone Capture\FSCapture.exe =>.FastStone Soft O4 - GS\Desktop [oui]: IObit Uninstaller.lnk . (.IObit - Uninstall Programs.) C:\Program Files\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe =>.IObit Information Technology® O4 - GS\Desktop [oui]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\oui\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [oui]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [oui]: Gооglе Сhrоmе.lnk . (...) C:\Program Files\Google\Chrome\Application\chrome.bat O4 - GS\CommonDesktop [Public]: Camtasia Studio 8.lnk . (.TechSmith Corporation - Camtasia Studio.) C:\Program Files\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe =>.TechSmith Corporation® O4 - GS\CommonDesktop [Public]: DAEMON Tools Lite.lnk . (.Disc Soft Ltd - DAEMON Tools Lite.) C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.Disc Soft Ltd® O4 - GS\CommonDesktop [Public]: Folder Lock.lnk . (.New Softwares.net. - Folder Lock Application.) C:\Program Files\NewSoftware's\Folder Lock\Folder Lock.exe {1121122E787653A63021DDD46D487F7F3B5B} O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: IObit Malware Fighter.lnk . (.IObit - IObit Malware Fighter.) C:\Program Files\IObit\IObit Malware Fighter\IMF.exe =>.IObit Information Technology® O4 - GS\CommonDesktop [Public]: Opera.lnk . (.Opera Software - Opera Internet Browser.) C:\Program Files\Opera\launcher.exe {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software O4 - GS\Programs [Public]: Messenger.lnk . (...) C:\Program Files\Messenger for Desktop\Messenger.exe ---\\ Modification Domaine/Adresses DNS (4) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpDomain = localdomain O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{a7fb1896-a01c-48f2-b8b9-6ea2224123ff}: DhcpNameServer = 192.168.0.1 192.168.0.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{a7fb1896-a01c-48f2-b8b9-6ea2224123ff}: DhcpDomain = localdomain ---\\ Protocole additionnel (24) - 1s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: tbauth - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: windows.tbauth - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Enumère les données de BootExecute (1) - 0s O34 - HKLM BootExecute: (SmartDefragBootTime.exe) (.IObit - SmartDefrag.) -- SmartDefragBootTime.exe ---\\ Logiciels installés (43) - 14s O42 - Logiciel: Adobe Flash Player 21 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 21 PPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player PPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Reader 9.3 - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-A93000000001} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Shockwave Player 12.2 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player =>.Adobe Systems, Inc. O42 - Logiciel: Advanced SystemCare 9 - (.IObit.) [HKLM] -- Advanced SystemCare_is1 =>.IObit Information Technology® O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM] -- avast =>.AVAST Software a.s.® O42 - Logiciel: Camtasia Studio 8 - (.TechSmith Corporation.) [HKLM] -- {80AE23DF-71A4-4E3F-B931-F93AB5DF0BDD} =>.TechSmith Corporation O42 - Logiciel: Cheat Engine 6.4 - (.Cheat Engine.) [HKLM] -- Cheat Engine 6.4_is1 =>.Cheat Engine® O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM] -- DAEMON Tools Lite =>.Disc Soft Ltd O42 - Logiciel: Driver Booster 3.2 - (.IObit.) [HKLM] -- Driver Booster_is1 =>.IObit Information Technology® O42 - Logiciel: DriverPack Solution Updater - (.DriverPack Solution.) [HKCU] -- DRPSu Updater =>.Kuzyakov Artur Vyacheslavovich IP® O42 - Logiciel: FastStone Capture 7.1 - (.FastStone Soft.) [HKLM] -- FastStone Capture =>.FastStone Soft O42 - Logiciel: Folder Lock - (.New Softwares.net.) [HKLM] -- Folder Lock {1121122E787653A63021DDD46D487F7F3B5B} O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>.Google Inc. O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - pGFX® O42 - Logiciel: IObit Malware Fighter 4 - (.IObit.) [HKLM] -- IObit Malware Fighter_is1 =>.IObit Information Technology® O42 - Logiciel: IObit Uninstaller - (.IObit.) [HKLM] -- IObitUninstall =>.IObit Information Technology® O42 - Logiciel: Java 8 Update 65 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218065F0} =>.Oracle Corporation O42 - Logiciel: Java 8 Update 66 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218066F0} =>.Oracle Corporation O42 - Logiciel: Java 8 Update 72 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218072F0} =>.Oracle Corporation O42 - Logiciel: Java 8 Update 74 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218074F0} =>.Oracle Corporation O42 - Logiciel: Java 8 Update 77 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218077F0} =>.Oracle Corporation O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation O42 - Logiciel: Logiciel d'archivage WinRAR - (...) [HKLM] -- WinRAR archiver O42 - Logiciel: Metric Collection SDK - (.Lenovo Group Limited.) [HKLM] -- {DDAA788F-52E6-44EA-ADB8-92837B11BF26} =>.Lenovo Group Limited O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196} =>.Lenovo Group Limited O42 - Logiciel: Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.13291. - (.Microsoft Corporation.) [HKLM] -- {25E80DAA-FD87-DCE5-202C-CC02F6673002} =>.Microsoft Corporation O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM] -- {59E4543A-D49D-4489-B445-473D763C79AF} =>.Microsoft Corporation O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM] -- {2BAC54DE-0A81-11E3-8476-F04DA23A5C58} =>.Sony Creative Software Inc. O42 - Logiciel: Opera Stable 36.0.2130.46 - (.Opera Software.) [HKLM] -- Opera 36.0.2130.46 {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software O42 - Logiciel: PES 2016 Selector Tool v2.0 by Ginda01 - (...) [HKLM] -- PES 2016 Selector Tool v2.0 by Ginda01 O42 - Logiciel: PES 2016 Selector Tool v2.5 by Ginda01 - (...) [HKLM] -- PES 2016 Selector Tool v2.5 by Ginda01 O42 - Logiciel: Razer Cortex - (.Razer Inc..) [HKLM] -- Razer Cortex_is1 =>.Razer Inc.® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek PC Camera - (.Realtek Semiconductor Corp..) [HKLM] -- {E0A7ED39-8CD6-4351-93C3-69CCA00D12B4} =>.Realtek Semiconductor Corp® O42 - Logiciel: Smart Defrag 4 - (.IObit.) [HKLM] -- Smart Defrag 4_is1 =>.IObit Information Technology® O42 - Logiciel: Surfing Protection - (.IObit.) [HKLM] -- IObit Surfing Protection_is1 =>.IObit Information Technology® O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726} =>.Adobe Systems, Inc O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM] -- SynTPDeinstKey =>.Synaptics Incorporated O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU] -- UnityWebPlayer =>.Unity Technologies ApS ---\\ HKCU & HKLM Software Keys (190) - 14s HKLM\SOFTWARE\Activision HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\ALWIL Software HKLM\SOFTWARE\AppDataLow HKLM\SOFTWARE\Apple Computer, Inc. HKLM\SOFTWARE\AskPartnerNetwork =>Toolbar.AskBar HKLM\SOFTWARE\ATI Technologies HKLM\SOFTWARE\AVAST Software HKLM\SOFTWARE\b1.org =>PUP.Optional.SearchB1org HKLM\SOFTWARE\Baidu HKLM\SOFTWARE\Belarc HKLM\SOFTWARE\Caphyon HKLM\SOFTWARE\CDDB HKLM\SOFTWARE\CloudOPTInfo HKLM\SOFTWARE\Cygwin HKLM\SOFTWARE\Disc Soft HKLM\SOFTWARE\Dolby HKLM\SOFTWARE\Fortemedia HKLM\SOFTWARE\Fraps HKLM\SOFTWARE\GameModding.net HKLM\SOFTWARE\Google HKLM\SOFTWARE\GRETECH HKLM\SOFTWARE\GTASAMODHotCoffee HKLM\SOFTWARE\GTAViceSity.ru HKLM\SOFTWARE\HICHEM TIGS HKLM\SOFTWARE\IHProtect =>PUP.Optional.AgentODR HKLM\SOFTWARE\InstalledOptions HKLM\SOFTWARE\InstallShield HKLM\SOFTWARE\Intel HKLM\SOFTWARE\Internet Download Manager HKLM\SOFTWARE\IObit HKLM\SOFTWARE\JavaSoft HKLM\SOFTWARE\JreMetrics HKLM\SOFTWARE\Knowles HKLM\SOFTWARE\Lavasoft HKLM\SOFTWARE\Lenovo HKLM\SOFTWARE\macrium HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\MimarSinan HKLM\SOFTWARE\Monect HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\mozilla.org HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\Nahimic HKLM\SOFTWARE\NewSoftware's HKLM\SOFTWARE\Nuance HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\OEM HKLM\SOFTWARE\oursurfingSoftware =>PUP.Optional.OurSurfing HKLM\SOFTWARE\Partner HKLM\SOFTWARE\PES 2016 Selector Tool HKLM\SOFTWARE\PGWARE HKLM\SOFTWARE\PTE Patch 2016 HKLM\SOFTWARE\Razer HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\searchult =>PUP.Optional.Generic HKLM\SOFTWARE\Skype HKLM\SOFTWARE\Sonic HKLM\SOFTWARE\Sony Creative Software HKLM\SOFTWARE\SRS Labs HKLM\SOFTWARE\Stardock HKLM\SOFTWARE\Symantec HKLM\SOFTWARE\Synaptics HKLM\SOFTWARE\TechSmith HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\Valve HKLM\SOFTWARE\VideoLAN HKLM\SOFTWARE\Volatile HKLM\SOFTWARE\W7DSA HKLM\SOFTWARE\Waves Audio HKLM\SOFTWARE\western HKLM\SOFTWARE\Windows HKLM\SOFTWARE\WinRAR HKLM\SOFTWARE\Wow6432Node HKLM\SOFTWARE\Yahoo =>.Yahoo! HKLM\SOFTWARE\yoursearchingSoftware =>PUP.Optional.YourSearching HKCU\SOFTWARE\8322898 HKCU\SOFTWARE\8GadgetPack HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\ALWIL Software HKCU\SOFTWARE\American Megatrends, Inc. HKCU\SOFTWARE\AMS Software HKCU\SOFTWARE\AOL HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit HKCU\SOFTWARE\Apowersoft HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\AskPartnerNetwork =>Toolbar.AskBar HKCU\SOFTWARE\ASProtect HKCU\SOFTWARE\Atheros HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\b1.org =>PUP.Optional.SearchB1org HKCU\SOFTWARE\Baidu HKCU\SOFTWARE\Belarc HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\Bytescout HKCU\SOFTWARE\Camfrog HKCU\SOFTWARE\Cheat Engine HKCU\SOFTWARE\Chromium HKCU\SOFTWARE\Coin32 HKCU\SOFTWARE\CubicDesign HKCU\SOFTWARE\Disc Soft HKCU\SOFTWARE\drpsu HKCU\SOFTWARE\DRPSu Updater HKCU\SOFTWARE\DSS HKCU\SOFTWARE\ej-technologies HKCU\SOFTWARE\FastStone HKCU\SOFTWARE\Fixit Tools HKCU\SOFTWARE\FreeTime HKCU\SOFTWARE\GameModding.net HKCU\SOFTWARE\GlarySoft HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\GRETECH HKCU\SOFTWARE\Gromicho AF Systems HKCU\SOFTWARE\GTAGarage HKCU\SOFTWARE\HomeTab =>PUP.Optional.CertifiedToolbar HKCU\SOFTWARE\ICSW1.17 =>Adware.InstallCore HKCU\SOFTWARE\IGA HKCU\SOFTWARE\IM HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\IObit HKCU\SOFTWARE\Its HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\Kiloo Games HKCU\SOFTWARE\Kromtech HKCU\SOFTWARE\L2j Community Network HKCU\SOFTWARE\Lenovo HKCU\SOFTWARE\Linkey =>PUP.Optional.LinkeySearch HKCU\SOFTWARE\macrium HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MainConcept HKCU\SOFTWARE\Media Get LLC HKCU\SOFTWARE\Michael Herf HKCU\SOFTWARE\Moo0 HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\NewSoftware's HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\Paint.NET HKCU\SOFTWARE\Password Protect Software HKCU\SOFTWARE\PhotoInstrument HKCU\SOFTWARE\PPStream HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\RadiAnt Viewer HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\RSUPPORT HKCU\SOFTWARE\SearchProtectWS =>PUP.Optional.SearchProtect HKCU\SOFTWARE\SecuROM HKCU\SOFTWARE\SHINOHARATakayuki HKCU\SOFTWARE\SimplyTech =>.Superfluous.SimplyTech HKCU\SOFTWARE\Skype HKCU\SOFTWARE\Softland HKCU\SOFTWARE\Sony Creative Software HKCU\SOFTWARE\StackDocklet HKCU\SOFTWARE\Stardock HKCU\SOFTWARE\SWiSHzone.com HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\SyncEngines HKCU\SOFTWARE\TechSmith HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\TNT2 =>PUP.Optional.Freshy HKCU\SOFTWARE\ToMMTi-Systems HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\UberIcon-v1.0.0 HKCU\SOFTWARE\Unity HKCU\SOFTWARE\Valve HKCU\SOFTWARE\W7SOC HKCU\SOFTWARE\WajIEnhance =>PUP.Optional.Wajam HKCU\SOFTWARE\WajIntEnhance =>PUP.Optional.Wajam HKCU\SOFTWARE\WinAVI HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR IM HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\WPI HKCU\SOFTWARE\xSpeed HKCU\SOFTWARE\Yahoo =>.Yahoo! HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\Adobe HKCU\SOFTWARE\AppDataLow\Software\Browser Extensions =>PUP.Optional.Dealio HKCU\SOFTWARE\AppDataLow\Software\JavaSoft HKCU\SOFTWARE\AppDataLow\Software\Monitored HKCU\SOFTWARE\AppDataLow\Software\settings HKCU\SOFTWARE\AppDataLow\Software\Unity ---\\ Contenu des dossiers Programmes (271) - 23s O43 - CFD: 30/06/2015 - [] D -- C:\Program Files\2 =>Heuristique.Suspect O43 - CFD: 30/06/2015 - [] D -- C:\Program Files\7tsp O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 05/08/2015 - [] D -- C:\Program Files\Alwil Software =>.AVAST Software a.s.® O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Cheat Engine 6.4 =>.Cheat Engine® O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Common Files O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\DAEMON Tools Lite =>.Disc Soft Ltd® O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\DVD Maker O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\FastStone Capture O43 - CFD: 17/06/2015 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\Foxit PDF Reader {01D151D46A31F4D1FF4E3A0A8AEC820F} O43 - CFD: 06/04/2016 - [0] D -- C:\Program Files\FreeTime O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Google =>.Google Inc® O43 - CFD: 06/04/2016 - [0] D -- C:\Program Files\GRETECH O43 - CFD: 14/03/2016 - [0] HD -- C:\Program Files\InstallShield Installation Information O43 - CFD: 10/08/2015 - [] D -- C:\Program Files\Intel =>.Intel Corporation - pGFX® O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 27/11/2015 - [] D -- C:\Program Files\IObit =>.IObit Information Technology® O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Java =>.Oracle America, Inc.® O43 - CFD: 13/03/2016 - [] D -- C:\Program Files\Lavasoft =>.Lavasoft Limited® O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Lenovo =>.LENOVO® O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\Microsoft Analysis Services O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Microsoft Games O43 - CFD: 06/07/2015 - [] D -- C:\Program Files\Microsoft Games for Windows - LIVE =>.Microsoft Corporation® O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 19/02/2016 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation® O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\Microsoft Synchronization Services O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\MSBuild O43 - CFD: 27/09/2015 - [] D -- C:\Program Files\NewSoftware's {1121122E787653A63021DDD46D487F7F3B5B} O43 - CFD: 02/08/2015 - [0] D -- C:\Program Files\NirSoft O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Opera {0510E03CD7B8B71E2E2DB16679B09595} O43 - CFD: 17/06/2015 - [0] D -- C:\Program Files\Paint.NET O43 - CFD: 27/09/2015 - [0] D -- C:\Program Files\Password Protect O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\QuickTime O43 - CFD: 08/07/2015 - [] D -- C:\Program Files\Ravenscourt O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Razer =>.Razer Inc.® O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Realtek =>.Andrea Electronics® O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 02/08/2015 - [] D -- C:\Program Files\RSUPPORT O43 - CFD: 06/04/2016 - [0] D -- C:\Program Files\SDA O43 - CFD: 06/03/2016 - [] D -- C:\Program Files\Stardock O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated® O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\TechSmith =>.TechSmith Corporation® O43 - CFD: 06/08/2015 - [] D -- C:\Program Files\Tencent =>.Superfluous.Tencent O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\UltraISO O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 06/04/2016 - [0] D -- C:\Program Files\VideoLAN O43 - CFD: 18/07/2015 - [] D -- C:\Program Files\WebcamMax O43 - CFD: 14/09/2015 - [0] D -- C:\Program Files\WinAVI O43 - CFD: 30/10/2015 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Windows Multimedia Platform O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Windows NT O43 - CFD: 30/10/2015 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 07/04/2016 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 06/04/2016 - [] SHD -- C:\Program Files\Windows Sidebar O43 - CFD: 07/04/2016 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation® O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files\WindowsPowerShell O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\WinRAR O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 06/04/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare O43 - CFD: 06/04/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Baidu Browser O43 - CFD: 07/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4 O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3 O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folder Lock O43 - CFD: 06/04/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player O43 - CFD: 08/03/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 06/04/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 07/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer O43 - CFD: 06/04/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SDFormatter O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 4 O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 30/10/2015 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith O43 - CFD: 06/04/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 17/06/2015 - [] D -- C:\ProgramData\Alwil Software O43 - CFD: 06/04/2016 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 29/09/2015 - [] D -- C:\ProgramData\Atheros O43 - CFD: 06/08/2015 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Baidu O43 - CFD: 17/06/2015 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 23/11/2015 - [] D -- C:\ProgramData\Caphyon O43 - CFD: 30/10/2015 - [0] D -- C:\ProgramData\Comms O43 - CFD: 23/03/2016 - [] D -- C:\ProgramData\DAEMON Tools Lite O43 - CFD: 06/04/2016 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 02/07/2015 - [] D -- C:\ProgramData\EpicScale =>PUP.Optional.EpicScale O43 - CFD: 17/06/2015 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 06/04/2016 - [0] D -- C:\ProgramData\GRETECH O43 - CFD: 17/06/2015 - [0] D -- C:\ProgramData\IDM O43 - CFD: 02/07/2015 - [] D -- C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR O43 - CFD: 17/03/2016 - [] D -- C:\ProgramData\IObit O43 - CFD: 03/07/2015 - [0] D -- C:\ProgramData\IQIYI Video =>.Superfluous.IQIYIVideo O43 - CFD: 02/08/2015 - [] D -- C:\ProgramData\KeyLemon O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\KONAMI O43 - CFD: 13/03/2016 - [] D -- C:\ProgramData\Lavasoft O43 - CFD: 03/07/2015 - [] D -- C:\ProgramData\LocalStorage O43 - CFD: 03/08/2015 - [] D -- C:\ProgramData\Macrium O43 - CFD: 17/06/2015 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 06/04/2016 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 07/04/2016 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\Microsoft OneDrive O43 - CFD: 17/06/2015 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 11/11/2015 - [] D -- C:\ProgramData\Oracle O43 - CFD: 27/11/2015 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 03/04/2016 - [] D -- C:\ProgramData\ProductData O43 - CFD: 24/02/2016 - [0] D -- C:\ProgramData\RadiantViewer O43 - CFD: 07/04/2016 - [] D -- C:\ProgramData\Razer O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\regid.1995-08.com.techsmith O43 - CFD: 15/09/2015 - [] D -- C:\ProgramData\Skype O43 - CFD: 30/10/2015 - [0] D -- C:\ProgramData\SoftwareDistribution O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\Stardock O43 - CFD: 10/08/2015 - [] D -- C:\ProgramData\Steam O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\TechSmith O43 - CFD: 06/08/2015 - [] D -- C:\ProgramData\Tencent =>.Superfluous.Tencent O43 - CFD: 16/12/2015 - [] D -- C:\ProgramData\Tmp0x0x =>PUP.Optional.WpManager O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\USOPrivate O43 - CFD: 06/04/2016 - [] D -- C:\ProgramData\USOShared O43 - CFD: 01/07/2015 - [0] D -- C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} =>PUP.Optional.Generic O43 - CFD: 27/11/2015 - [0] D -- C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} O43 - CFD: 26/06/2015 - [] D -- C:\Program Files\Common Files\Adobe O43 - CFD: 28/07/2015 - [] D -- C:\Program Files\Common Files\AV O43 - CFD: 17/06/2015 - [] D -- C:\Program Files\Common Files\DESIGNER O43 - CFD: 01/07/2015 - [] D -- C:\Program Files\Common Files\InstallShield O43 - CFD: 27/11/2015 - [] D -- C:\Program Files\Common Files\Intel O43 - CFD: 17/03/2016 - [] D -- C:\Program Files\Common Files\IObit O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Common Files\Java O43 - CFD: 22/03/2016 - [] D -- C:\Program Files\Common Files\LENOVO O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Common Files\microsoft shared O43 - CFD: 30/10/2015 - [] D -- C:\Program Files\Common Files\Services O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Common Files\SpeechEngines O43 - CFD: 22/09/2015 - [] D -- C:\Program Files\Common Files\Steam O43 - CFD: 30/10/2015 - [] D -- C:\Program Files\Common Files\System O43 - CFD: 06/04/2016 - [] D -- C:\Program Files\Common Files\TechSmith Shared O43 - CFD: 06/08/2015 - [] D -- C:\Program Files\Common Files\Tencent =>.Superfluous.Tencent O43 - CFD: 26/06/2015 - [] D -- C:\Users\oui\AppData\Roaming\Adobe O43 - CFD: 28/10/2015 - [] D -- C:\Users\oui\AppData\Roaming\AMS Software O43 - CFD: 03/12/2015 - [] D -- C:\Users\oui\AppData\Roaming\Apowersoft O43 - CFD: 01/07/2015 - [] D -- C:\Users\oui\AppData\Roaming\Apple Computer O43 - CFD: 06/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\AVAST Software O43 - CFD: 02/04/2016 - [] D -- C:\Users\oui\AppData\Roaming\Baidu O43 - CFD: 28/10/2015 - [] D -- C:\Users\oui\AppData\Roaming\Below O43 - CFD: 18/02/2016 - [] D -- C:\Users\oui\AppData\Roaming\BioniX Flickr Mass Downloader O43 - CFD: 18/02/2016 - [0] D -- C:\Users\oui\AppData\Roaming\Bionix Wallpaper O43 - CFD: 23/03/2016 - [] D -- C:\Users\oui\AppData\Roaming\BioniX Wallpaper 8 O43 - CFD: 18/02/2016 - [] D -- C:\Users\oui\AppData\Roaming\BioniX Wallpaper Animator O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 06/03/2016 - [0] D -- C:\Users\oui\AppData\Roaming\DMCache O43 - CFD: 17/06/2015 - [] D -- C:\Users\oui\AppData\Roaming\DRPSu O43 - CFD: 03/07/2015 - [] D -- C:\Users\oui\AppData\Roaming\dvdcss O43 - CFD: 22/03/2016 - [] D -- C:\Users\oui\AppData\Roaming\EurekaLab s.a.s O43 - CFD: 17/06/2015 - [] D -- C:\Users\oui\AppData\Roaming\FastStone O43 - CFD: 02/04/2016 - [] D -- C:\Users\oui\AppData\Roaming\GRETECH O43 - CFD: 02/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\Gromicho AF Systems O43 - CFD: 13/09/2015 - [] D -- C:\Users\oui\AppData\Roaming\HandBrake O43 - CFD: 23/11/2015 - [] D -- C:\Users\oui\AppData\Roaming\HICHEM TIGS O43 - CFD: 17/06/2015 - [] D -- C:\Users\oui\AppData\Roaming\Identities O43 - CFD: 21/09/2015 - [] D -- C:\Users\oui\AppData\Roaming\inkscape O43 - CFD: 27/11/2015 - [] D -- C:\Users\oui\AppData\Roaming\IObit O43 - CFD: 03/07/2015 - [] D -- C:\Users\oui\AppData\Roaming\IQIYI Video =>.Superfluous.IQIYIVideo O43 - CFD: 26/06/2015 - [] D -- C:\Users\oui\AppData\Roaming\Macromedia O43 - CFD: 14/07/2009 - [0] D -- C:\Users\oui\AppData\Roaming\Media Center Programs O43 - CFD: 06/04/2016 - [] SD -- C:\Users\oui\AppData\Roaming\Microsoft O43 - CFD: 13/09/2015 - [] D -- C:\Users\oui\AppData\Roaming\mkvtoolnix O43 - CFD: 23/03/2016 - [] D -- C:\Users\oui\AppData\Roaming\Mohaffez O43 - CFD: 02/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\monect O43 - CFD: 02/08/2015 - [0] D -- C:\Users\oui\AppData\Roaming\Mozilla O43 - CFD: 10/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\npm O43 - CFD: 10/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\npm-cache O43 - CFD: 13/03/2016 - [] D -- C:\Users\oui\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Roaming\Opera Software O43 - CFD: 07/10/2015 - [] D -- C:\Users\oui\AppData\Roaming\Outerspace Software O43 - CFD: 04/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\PowerISO O43 - CFD: 03/07/2015 - [] D -- C:\Users\oui\AppData\Roaming\ppslog O43 - CFD: 01/07/2015 - [] D -- C:\Users\oui\AppData\Roaming\ProductData O43 - CFD: 02/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\Rsupport O43 - CFD: 06/07/2015 - [] RHD -- C:\Users\oui\AppData\Roaming\SecuROM O43 - CFD: 16/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\Skype O43 - CFD: 15/11/2015 - [] D -- C:\Users\oui\AppData\Roaming\SmartSteamEmu O43 - CFD: 24/06/2015 - [] D -- C:\Users\oui\AppData\Roaming\Sony O43 - CFD: 28/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\Sun O43 - CFD: 06/07/2015 - [] D -- C:\Users\oui\AppData\Roaming\TechSmith O43 - CFD: 06/08/2015 - [] D -- C:\Users\oui\AppData\Roaming\Tencent =>.Superfluous.Tencent O43 - CFD: 30/06/2015 - [] D -- C:\Users\oui\AppData\Roaming\TS3Client O43 - CFD: 16/07/2015 - [] D -- C:\Users\oui\AppData\Roaming\WebcamMax O43 - CFD: 14/09/2015 - [] D -- C:\Users\oui\AppData\Roaming\WinAVI O43 - CFD: 17/06/2015 - [] D -- C:\Users\oui\AppData\Roaming\WinRAR O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Roaming\ZHP O43 - CFD: 06/04/2016 - [0] D -- C:\Users\oui\AppData\Local\ActiveSync O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Local\Adobe O43 - CFD: 06/04/2016 - [0] SHD -- C:\Users\oui\AppData\Local\Application Data O43 - CFD: 06/08/2015 - [] D -- C:\Users\oui\AppData\Local\Apps O43 - CFD: 22/09/2015 - [] D -- C:\Users\oui\AppData\Local\CEF O43 - CFD: 06/04/2016 - [] D -- C:\Users\oui\AppData\Local\Comms O43 - CFD: 12/02/2016 - [] D -- C:\Users\oui\AppData\Local\Configure O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Local\CrashDumps O43 - CFD: 06/03/2016 - [] D -- C:\Users\oui\AppData\Local\Diagnostics O43 - CFD: 20/03/2016 - [] D -- C:\Users\oui\AppData\Local\Downloaded Installations O43 - CFD: 18/06/2015 - [] D -- C:\Users\oui\AppData\Local\Eggiz O43 - CFD: 17/06/2015 - [] D -- C:\Users\oui\AppData\Local\FastStone O43 - CFD: 27/11/2015 - [0] D -- C:\Users\oui\AppData\Local\FluxSoftware O43 - CFD: 02/08/2015 - [] D -- C:\Users\oui\AppData\Local\Geckofx O43 - CFD: 17/10/2015 - [] D -- C:\Users\oui\AppData\Local\Google O43 - CFD: 06/04/2016 - [] D -- C:\Users\oui\AppData\Local\GWX O43 - CFD: 06/04/2016 - [0] SHD -- C:\Users\oui\AppData\Local\Historique O43 - CFD: 02/08/2015 - [] D -- C:\Users\oui\AppData\Local\KeyLemon O43 - CFD: 25/03/2016 - [] D -- C:\Users\oui\AppData\Local\Lenovo O43 - CFD: 12/02/2016 - [] D -- C:\Users\oui\AppData\Local\Maker3D O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Local\Messenger O43 - CFD: 06/04/2016 - [] D -- C:\Users\oui\AppData\Local\Microsoft O43 - CFD: 16/01/2016 - [] D -- C:\Users\oui\AppData\Local\Microsoft Games O43 - CFD: 09/01/2016 - [0] D -- C:\Users\oui\AppData\Local\Microsoft Help O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Local\MicrosoftEdge O43 - CFD: 07/08/2015 - [] D -- C:\Users\oui\AppData\Local\MiniService O43 - CFD: 06/04/2016 - [0] D -- C:\Users\oui\AppData\Local\NetworkTiles O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Local\Opera Software O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Local\Packages O43 - CFD: 17/06/2015 - [] D -- C:\Users\oui\AppData\Local\Paint.NET O43 - CFD: 27/08/2015 - [] D -- C:\Users\oui\AppData\Local\PES_2013_BAL_Editor_v1.2 O43 - CFD: 15/11/2015 - [] D -- C:\Users\oui\AppData\Local\PES_2016_Selector_Tool O43 - CFD: 23/11/2015 - [] D -- C:\Users\oui\AppData\Local\PES_Tuning_Patch_2015 O43 - CFD: 01/07/2015 - [] D -- C:\Users\oui\AppData\Local\Programs O43 - CFD: 12/02/2016 - [] D -- C:\Users\oui\AppData\Local\PTE_Patch O43 - CFD: 06/04/2016 - [] D -- C:\Users\oui\AppData\Local\Publishers O43 - CFD: 04/07/2015 - [] D -- C:\Users\oui\AppData\Local\PunkBuster O43 - CFD: 24/02/2016 - [] D -- C:\Users\oui\AppData\Local\RadiantViewer O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Local\Razer O43 - CFD: 06/03/2016 - [] D -- C:\Users\oui\AppData\Local\Razer_Inc O43 - CFD: 18/06/2015 - [] D -- C:\Users\oui\AppData\Local\Salaamsoft O43 - CFD: 01/11/2015 - [] D -- C:\Users\oui\AppData\Local\Sidebar7 O43 - CFD: 16/07/2015 - [] D -- C:\Users\oui\AppData\Local\SKIDROW O43 - CFD: 18/06/2015 - [] D -- C:\Users\oui\AppData\Local\Skype O43 - CFD: 02/08/2015 - [] D -- C:\Users\oui\AppData\Local\Smart_PC_Soft O43 - CFD: 24/06/2015 - [] D -- C:\Users\oui\AppData\Local\Sony O43 - CFD: 18/02/2016 - [] D -- C:\Users\oui\AppData\Local\Stardock O43 - CFD: 17/06/2015 - [] D -- C:\Users\oui\AppData\Local\Steam O43 - CFD: 27/11/2015 - [] D -- C:\Users\oui\AppData\Local\SysassistByHotWheel =>PUP.Optional.Generic O43 - CFD: 06/07/2015 - [] D -- C:\Users\oui\AppData\Local\TechSmith O43 - CFD: 07/04/2016 - [] D -- C:\Users\oui\AppData\Local\Temp O43 - CFD: 06/04/2016 - [0] SHD -- C:\Users\oui\AppData\Local\Temporary Internet Files O43 - CFD: 06/04/2016 - [] D -- C:\Users\oui\AppData\Local\TileDataLayer O43 - CFD: 06/04/2016 - [] D -- C:\Users\oui\AppData\Local\Unity O43 - CFD: 18/07/2015 - [] D -- C:\Users\oui\AppData\Local\VirtualStore O43 - CFD: 14/09/2015 - [] D -- C:\Users\oui\AppData\Local\WinAVI O43 - CFD: 30/10/2015 - [] RD -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 06/04/2016 - [] RD -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 07/04/2016 - [] RD -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 06/04/2016 - [] D -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 08/03/2016 - [0] D -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 30/10/2015 - [] D -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 06/04/2016 - [] D -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mohaffez O43 - CFD: 07/04/2016 - [] RD -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 30/10/2015 - [] RD -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 06/04/2016 - [0] D -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker O43 - CFD: 30/10/2015 - [] RSD -- C:\Users\oui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell ---\\ ShellIconOverlayIdentifiers (SIOI) (13) - 1s O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\oui\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\oui\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\oui\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\oui\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\oui\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\Alwil Software\Avast5\ashShell.dll =>.AVAST Software a.s.® O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation O106 - SIOI: Groove Explorer Icon Overlay 1 (GFS Unread Stub) [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] - {99FD978C-D287-4F50-827F-B2C658EDA8E7}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2 (GFS Stub) [Groove Explorer Icon Overlay 2 (GFS Stub)] - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] - {920E6DB1-9907-4370-B3A0-BAFC03D81399}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 3 (GFS Folder) [Groove Explorer Icon Overlay 3 (GFS Folder)] - {16F3DD56-1AF5-4347-846D-7C10C4192619}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 4 (GFS Unread Mark) [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: [Offline Files] - {4E77131D-3629-431c-9818-C5679DC83E81}. (.Microsoft Corporation - IU de cache côté client.) -- C:\Windows\System32\cscui.dll =>.Microsoft Corporation ---\\ Liste des pilotes du système (65) - 14s O58 - SDL:2015/10/30 06:44:28 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [85856] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1038176] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [75104] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [215392] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [22880] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [116576] =>.Microsoft Windows® O58 - SDL:2015/11/10 08:10:34 A . (.AVAST Software - avast! HWID.) -- C:\WINDOWS\System32\drivers\aswHwid.sys [24016] =>.AVAST Software a.s.® O58 - SDL:2015/11/10 08:10:34 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\WINDOWS\System32\drivers\aswMonFlt.sys [81168] =>.AVAST Software a.s.® O58 - SDL:2010/09/07 15:47:46 A . (.AVAST Software - avast! TDI RDR Driver.) -- C:\WINDOWS\System32\drivers\aswRdr.sys [23376] =>.ALWIL Software® O58 - SDL:2015/11/10 08:10:34 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\WINDOWS\System32\drivers\aswRdr2.sys [81728] =>.AVAST Software a.s.® O58 - SDL:2015/11/10 08:10:34 A . (.AVAST Software - avast! Revert.) -- C:\WINDOWS\System32\drivers\aswRvrt.sys [49776] =>.AVAST Software a.s.® O58 - SDL:2015/11/10 08:10:11 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\WINDOWS\System32\drivers\aswSnx.sys [794952] =>.AVAST Software a.s.® O58 - SDL:2015/11/10 08:10:35 A . (.AVAST Software - avast! self protection module.) -- C:\WINDOWS\System32\drivers\aswSP.sys [435464] =>.AVAST Software a.s.® O58 - SDL:2015/11/10 08:10:35 A . (.AVAST Software - Stream Filter.) -- C:\WINDOWS\System32\drivers\aswStm.sys [117200] =>.AVAST Software a.s.® O58 - SDL:2015/11/10 08:10:35 A . (.AVAST Software - avast! VM Monitor.) -- C:\WINDOWS\System32\drivers\aswVmm.sys [209432] =>.AVAST Software a.s.® O58 - SDL:2015/10/30 06:44:28 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn.sys [8192] =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/10/30 06:44:28 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [8192] =>.Windows (R) Win 7 DDK provider O58 - SDL:2016/04/07 15:57:35 A . (.Disc Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\WINDOWS\System32\drivers\dtsoftbus01.sys [243128] =>.Disc Soft Ltd® O58 - SDL:2009/09/18 03:54:14 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\WINDOWS\System32\drivers\HECI.sys [41088] =>.Intel Corporation O58 - SDL:2015/10/30 06:44:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [56672] =>.Microsoft Windows® O58 - SDL:2015/10/17 12:05:41 A . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\WINDOWS\System32\drivers\HWiNFO32.SYS [23840] =>.Martin Malik - REALiX® O58 - SDL:2015/10/30 06:44:25 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys [66048] =>.Intel(R) Corporation O58 - SDL:2015/10/30 06:44:28 A . (.Intel Corporation - Intel(R) Atom(TM) Processor GPIO Controller.) -- C:\WINDOWS\System32\drivers\iaiogpio.sys [22016] =>.Intel Corporation O58 - SDL:2015/10/30 06:44:28 A . (.Intel Corporation - Intel(R) Atom(TM) Processor I2C Controller.) -- C:\WINDOWS\System32\drivers\iaioi2c.sys [61936] =>.Intel Corporation O58 - SDL:2015/10/30 06:44:28 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [524632] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [333664] =>.Microsoft Windows® O58 - SDL:2012/11/27 00:22:30 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\igdkmd32.sys [10860032] =>.Intel Corporation O58 - SDL:2015/11/27 19:16:49 A . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\WINDOWS\System32\drivers\Impcd.sys [132480] =>.Intel Corporation O58 - SDL:2010/10/15 08:27:20 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [269824] =>.Intel(R) Corporation O58 - SDL:2008/05/15 03:28:44 A . (.Atheros Communications, Inc. - Atheros Security NDIS 6.0 Filter Driver.) -- C:\WINDOWS\System32\drivers\jswpslwf.sys [20384] =>.Atheros Communications, Inc. O58 - SDL:2015/10/30 06:44:28 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [94040] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [88928] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [83288] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [69472] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [52064] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [464728] =>.Microsoft Windows® O58 - SDL:2013/12/03 09:15:00 A . (...) -- C:\WINDOWS\System32\drivers\monectdevices.sys [14104] {561494F6343E98FEA8F9CEE47DE14E16} O58 - SDL:2015/10/30 06:44:28 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [58208] =>.Microsoft Windows® O58 - SDL:2015/11/10 08:10:07 A . (.AVAST Software - avast! NG snapshot driver.) -- C:\WINDOWS\System32\drivers\ngvss.sys [121368] =>.AVAST Software a.s.® O58 - SDL:2015/10/30 06:44:28 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [119136] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [142176] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [51040] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [51552] =>.Microsoft Windows® O58 - SDL:2015/07/04 21:14:15 A . (...) -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [139832] =>.Even Balance, Inc.® O58 - SDL:2015/07/20 20:56:54 A . (.Windows (R) Win 7 DDK provider - Fallback Snapshot Driver.) -- C:\WINDOWS\System32\drivers\pssnap.sys [16016] =>.Paramount Software UK Ltd® O58 - SDL:2016/04/06 21:32:51 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40 32-bit Dr.) -- C:\WINDOWS\System32\drivers\rt640x86.sys [790272] =>.Realtek Semiconductor Corp® O58 - SDL:2016/03/03 11:12:43 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Dr.) -- C:\WINDOWS\System32\drivers\Rt86win7.sys [770304] =>.Realtek Semiconductor Corp® O58 - SDL:2016/04/06 21:33:36 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHDA.sys [3766016] =>.Realtek Semiconductor Corp® O58 - SDL:2015/10/30 06:44:25 A . (.Realtek Semiconductor Corporation - Realtek RTL81892SE NDIS Driverr.) -- C:\WINDOWS\System32\drivers\rtl8192se.sys [1113600] =>.Realtek Semiconductor Corporation O58 - SDL:2015/11/27 19:52:05 A . (.Realtek Semiconductor Corp. - Realtek UVC Driver for XP/Vista/Win7/Win8.) -- C:\WINDOWS\System32\drivers\rtsuvc.sys [7253208] =>.Realtek Semiconductor Corp® O58 - SDL:2015/09/22 23:36:39 A . (.Razer, Inc. - Razer Overlay Support.) -- C:\WINDOWS\System32\drivers\rzpmgrk.sys [20288] =>.Razer Inc.® O58 - SDL:2015/10/30 06:44:28 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [41312] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [79200] =>.Microsoft Windows® O58 - SDL:2014/06/04 16:17:30 A . (.IObit - SmartDefrag Driver.) -- C:\WINDOWS\System32\drivers\SmartDefragDriver.sys [18624] =>.IObit Information Technology® O58 - SDL:2016/04/06 21:31:56 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\WINDOWS\System32\drivers\Smb_driver_Intel.sys [35432] =>.Synaptics Incorporated® O58 - SDL:2015/12/08 05:01:16 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [101040] =>.DEVGURU CO LTD® O58 - SDL:2015/12/08 05:01:22 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [192944] =>.DEVGURU CO LTD® O58 - SDL:2014/01/22 09:52:12 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (M.) -- C:\WINDOWS\System32\drivers\ssudserd.sys [184192] =>.DEVGURU CO LTD® O58 - SDL:2015/10/30 06:44:28 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [26976] =>.Microsoft Windows® O58 - SDL:2011/10/01 01:16:52 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\WINDOWS\System32\drivers\SynTP.sys [296112] =>.Synaptics Incorporated® O58 - SDL:2015/10/30 06:44:28 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR X86-32.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [149856] =>.Microsoft Windows® O58 - SDL:2015/10/30 06:44:28 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [276832] =>.Microsoft Windows® O58 - SDL:2015/08/06 15:50:43 A . (.电脑管家 - 电脑管家-TSSK Driver.) -- C:\WINDOWS\System32\TSSK.sys [67896] =>.Superfluous.Tencent O58 - SDL:2016/03/15 01:56:45 A . (.NewSoftwares.net, Inc. - Virtual Encryption Driver.) -- C:\WINDOWS\System32\WinVDEdrv.sys [228112] =>.NewSoftwares.net Inc. SDN. BHD.® O58 - SDL:2016/03/15 01:56:47 A . (...) -- C:\WINDOWS\System32\WinVDEdrv6.sys [188176] =>.NewSoftwares.net Inc. SDN. BHD.® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (12) - 34s O61 - LFC: 2016/04/07 21:59:24 A . (..) -- C:\Users\oui\ZHPDiag3.exe [289064] O61 - LFC: 2016/04/02 10:08:43 A . (.Copyright (C) 2011.) -- C:\Users\oui\AppData\Roaming\Baidu\Spark\SysData\ExtApp\SnapImg\screensnapshot.exe [530064] O61 - LFC: 2016/04/02 10:08:43 A . (.Copyright (C) 2011.) -- C:\Users\oui\AppData\Roaming\Baidu\Spark\SysData\ExtApp\SnapImg\SnapImg.dll [83088] O61 - LFC: 2016/04/07 13:19:09 A . (..) -- C:\Users\oui\AppData\Roaming\Adobe\Acrobat\9.0\UserCache.bin [70412] O61 - LFC: 2016/04/07 10:27:12 A . (..) -- C:\Users\oui\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_0_Data.bin [3164672] O61 - LFC: 2016/04/06 19:49:19 A . (..) -- C:\Users\oui\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_0_Header.bin [9640] O61 - LFC: 2016/04/07 13:52:11 A . (..) -- C:\Users\oui\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_0_TabletMode_Data.bin [4243452] O61 - LFC: 2016/04/07 21:06:52 A . (..) -- C:\Users\oui\AppData\Local\Packages\Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy\TempState\TileCache_100_0_TabletMode_Header.bin [12136] O61 - LFC: 2016/04/07 21:06:44 A . (..) -- C:\Users\oui\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin [8192] O61 - LFC: 2016/04/07 10:36:37 A . (..) -- C:\Users\oui\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\UrlBlock\urlblock_635956139514163621.bin [54511] O61 - LFC: 2016/04/07 21:05:26 A . (..) -- C:\Users\oui\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148] O61 - LFC: 2016/04/06 19:50:48 A . (..) -- C:\Users\oui\AppData\Local\Microsoft\Windows\1036\StructuredQuerySchema.bin [441937] ---\\ Associations Shell Spawning (9) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (12) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\Launcher.exe {0510E03CD7B8B71E2E2DB16679B09595} =>.Opera Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe =>.Opera Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe =>.Opera Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\launcher.exe =>.Opera Software ---\\ Recherche d'infection sur les navigateurs (13) - 1s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3C} - (>) - http://yamdex.net/ O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3D} - (>) - http://yamdex.net/ O69 - SBI: SearchScopes [HKCU] {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} - (e) - http://www.oursurfing.com/ =>PUP.Optional.OurSurfing O69 - SBI: SearchScopes [HKCU] {646FECF5-0755-4E4C-879C-F297F53017DA} - (Yahoo) - http://search.yahoo.com/ =>.Yahoo Search O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.oursurfing.com/ =>PUP.Optional.OurSurfing O69 - SBI: SearchScopes [HKCU] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (my-search Customized Web Search) - http://search.conduit.com/ =>PUP.Optional.Conduit O69 - SBI: SearchScopes [HKCU] {E733165D-CBCF-4FDA-883E-ADEF965B476C} - (Google) - http://www.oursurfing.com/ =>PUP.Optional.OurSurfing O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKLM] {afdbddaa-5d3f-42ee-b79c-185a7020515b} - (my-search Customized Web Search) - http://search.conduit.com/ =>PUP.Optional.Conduit O69 - SBI: SearchScopes [HKUS\.DEFAULT] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKUS\S-1-5-18] {afdbddaa-5d3f-42ee-b79c-185a7020515b} [DefaultScope] - (Bing) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (42) - 1s O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [160768] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [160768] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [218624] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1190912] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [742400] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [842752] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [24576] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [76288] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [116224] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [95232] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [810496] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [185344] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [107520] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [246784] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [313344] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [68608] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll [1552896] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll [144384] =>.Microsoft Corporation O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\Windows\System32\dcpsvc.dll [156160] =>.Microsoft Corporation O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll [140288] =>.Microsoft Corporation O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll [47616] =>.Microsoft Corporation O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [722432] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [163840] =>.Microsoft Corporation O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [538112] =>.Microsoft Corporation O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll [820224] =>.Microsoft Corporation O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [200192] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [45568] =>.Microsoft Corporation O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [706048] =>.Microsoft Corporation O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\Windows\System32\RDXService.dll [783872] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [307200] =>.Microsoft Corporation O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\Windows\System32\usocore.dll [251392] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [22528] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [93184] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [601088] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [436224] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [57856] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [396288] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [254976] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1895936] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [857600] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [559616] =>.Microsoft Corporation O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [165376] =>.Microsoft Corporation ---\\ Liste des exceptions du parefeu Windows (12) - 2s O87 - FAEL: "{BD59A872-D039-4D4F-9C9F-38A92FDCA503}" [Out-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll (.not file.) O87 - FAEL: "{867BEB74-259D-4D62-B33A-6682D22D9D2D}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftHDSDump.dll (.not file.) O87 - FAEL: "{1E4E0B78-A143-4352-87F5-12F88C6F7E2E}" [Out-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll (.not file.) O87 - FAEL: "{D5976452-4E9F-4D64-AFB8-82CAD0A03CC6}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDownloaderHelp.dll (.not file.) O87 - FAEL: "{76C7BAF3-4292-439D-8BA4-61315342F898}" [Out-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftPlayer.dll (.not file.) O87 - FAEL: "{5B25DBC7-5CDB-4FCE-8B13-156436512B81}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftPlayer.dll (.not file.) O87 - FAEL: "{D386F77C-D6D7-4371-A383-EAD9BC8203F7}" [Out-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftAC.dll (.not file.) O87 - FAEL: "{D288293F-C017-46FF-9F34-07F68155B7F9}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftAC.dll (.not file.) O87 - FAEL: "{BC89BEF4-BB72-464B-AC5D-5F8667E1A804}" [Out-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDump.dll (.not file.) O87 - FAEL: "{94B484A9-7812-4995-8ABF-EF4233A69AEF}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftDump.dll (.not file.) O87 - FAEL: "{59431FDD-A845-48BC-B475-ADF5D3AE9AA6}" [Out-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftSrv.dll (.not file.) O87 - FAEL: "{C8B379B1-EA66-47D2-B9C7-9E34E5E6754A}" [In-None-P6-TRUE] .(...) -- C:\Program Files\Apowersoft\Video Download Capture\ApowersoftSrv.dll (.not file.) ---\\ Scan Additionnel (41) - 0s C:\Windows\AutoKMS\AutoKMS.exe =>HackTool.AutoKMS C:\WINDOWS\System32\Tasks\AutoKMS =>HackTool.AutoKMS HKLM\SOFTWARE\AskPartnerNetwork =>Toolbar.AskBar HKLM\SOFTWARE\b1.org =>PUP.Optional.SearchB1org HKLM\SOFTWARE\IHProtect =>PUP.Optional.AgentODR HKLM\SOFTWARE\oursurfingSoftware =>PUP.Optional.OurSurfing HKLM\SOFTWARE\searchult =>PUP.Optional.Generic HKLM\SOFTWARE\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\yoursearchingSoftware =>PUP.Optional.YourSearching HKCU\SOFTWARE\APN PIP =>PUP.Optional.Conduit HKCU\SOFTWARE\AskPartnerNetwork =>Toolbar.AskBar HKCU\SOFTWARE\b1.org =>PUP.Optional.SearchB1org HKCU\SOFTWARE\HomeTab =>PUP.Optional.CertifiedToolbar HKCU\SOFTWARE\ICSW1.17 =>Adware.InstallCore HKCU\SOFTWARE\Linkey =>PUP.Optional.LinkeySearch HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\SearchProtectWS =>PUP.Optional.SearchProtect HKCU\SOFTWARE\SimplyTech =>.Superfluous.SimplyTech HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\TNT2 =>PUP.Optional.Freshy HKCU\SOFTWARE\WajIEnhance =>PUP.Optional.Wajam HKCU\SOFTWARE\WajIntEnhance =>PUP.Optional.Wajam HKCU\SOFTWARE\AppDataLow\Software\Browser Extensions =>PUP.Optional.Dealio C:\Program Files\2 =>Heuristique.Suspect C:\Program Files\Tencent =>.Superfluous.Tencent C:\ProgramData\EpicScale =>PUP.Optional.EpicScale C:\ProgramData\IHProtectUpDate =>PUP.Optional.AgentODR C:\ProgramData\IQIYI Video =>.Superfluous.IQIYIVideo C:\ProgramData\Tencent =>.Superfluous.Tencent C:\ProgramData\Tmp0x0x =>PUP.Optional.WpManager C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} =>PUP.Optional.Generic C:\Program Files\Common Files\Tencent =>.Superfluous.Tencent C:\Users\oui\AppData\Roaming\IQIYI Video =>.Superfluous.IQIYIVideo C:\Users\oui\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy C:\Users\oui\AppData\Roaming\Tencent =>.Superfluous.Tencent C:\Users\oui\AppData\Local\SysassistByHotWheel =>PUP.Optional.Generic HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} =>PUP.Optional.OurSurfing HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} =>PUP.Optional.OurSurfing HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} =>PUP.Optional.Conduit HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C} =>PUP.Optional.OurSurfing HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} =>PUP.Optional.Conduit ---\\ Récapitulatif des éléments trouvés sur votre station (22) - 0s http://www.nicolascoolman.fr/?p=1804 =>HackTool.AutoKMS http://www.nicolascoolman.fr/?p=5143 =>Toolbar.AskBar http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SearchB1org http://www.nicolascoolman.fr/pup-agentodr/ =>PUP.Optional.AgentODR http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.OurSurfing http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Generic http://www.nicolascoolman.fr/?p=368 =>.Superfluous.Tencent http://www.nicolascoolman.fr/pup-optional-yoursearching =>PUP.Optional.YourSearching http://www.nicolascoolman.fr/?p=210 =>PUP.Optional.Conduit http://www.nicolascoolman.fr/?p=577 =>PUP.Optional.CertifiedToolbar http://www.nicolascoolman.fr/?p=279 =>Adware.InstallCore http://www.nicolascoolman.fr/?p=381 =>PUP.Optional.LinkeySearch http://www.nicolascoolman.fr/?p=1633 =>PUP.Optional.SearchProtect http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.SimplyTech http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Freshy http://www.nicolascoolman.fr/?p=263 =>PUP.Optional.Wajam http://www.nicolascoolman.fr/?p=299 =>PUP.Optional.Dealio http://www.nicolascoolman.fr/?p=4664 =>Heuristique.Suspect http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.EpicScale http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.IQIYIVideo http://www.nicolascoolman.fr/?p=173 =>PUP.Optional.WpManager http://www.nicolascoolman.fr/?p=197 =>PUP.Optional.OpenCandy ~ End of the scan, 20766 items in 00h02mn59s (1042)(0)