~ ZHPDiag v2016.5.21.98 Par Nicolas Coolman (2016/05/21) ~ Démarré par Amir (Administrator) (2016/05/21 23:09:41) ~ Site: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\Amir\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\Amir\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 10 Pro, 64-bit (Build 10586) ---\\ Navigateurs Internet (4) - 0s GCIE: Google Chrome v50.0.2661.102 MFIE: Mozilla Firefox 35.0.1 (x86 fr) OPIE: Opera 36.0.2130.65 MSIE: Internet Explorer v11.306.10586.0 ---\\ Informations sur les produits Windows (3) - 5s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK ---\\ Logiciels de protection (1) - 98s Windows Defender (Deactivate) ---\\ Surveillance de Logiciels (2) - 100s Adobe Flash Player 21 PPAPI Adobe Acrobat Reader DC - Français ---\\ Logiciels de partage P2P (1) - 101s µTorrent v3.4.5.41865 ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4153.14 MB (14% free) System Restore: Activé (Enable) System drive C: has 16 GB () free of 200 GB =>Alerte espace disque inférieur à 20 Go ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: PRINCE ~ User Name: Amir ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 16 GB free of 200 GB (System) ~ Drive D: has 53 GB free of 225 GB ---\\ Etat du Centre de Sécurité Windows (7) - 0s [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK ---\\ Recherche particulière de fichiers génériques (25) - 7s [MD5.2617877C5761B8A696FD0368861EE6E4] - 23/04/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [4515256] =>.Microsoft Windows® [MD5.0DCB89B1F3689BC6262FF30BBD603171] - 30/10/2015 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [59392] =>.Microsoft Corporation [MD5.C1C81AAF533552B3C4D9F11A5FF97700] - 23/04/2016 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [291360] =>.Microsoft Windows Publisher® [MD5.AE6A68A065D4C26AF4BEFAA53623B266] - 29/03/2016 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2755584] =>.Microsoft Corporation [MD5.5C156EC4E44E30331BCC865A3B61D839] - 23/04/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [585728] =>.Microsoft Corporation [MD5.9EEAA1B69DC3FD620AE576CC8F4147DC] - 30/10/2015 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [430592] =>.Microsoft Corporation [MD5.9A3E17CDB177913C2A111C80F3D0DBB4] - 29/03/2016 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [686976] =>.Microsoft Windows® [MD5.6A7ACABAE92C837F5C1330188EAE36AE] - 29/03/2016 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [535080] =>.Microsoft Windows® [MD5.CE50037751671682D1FDBBE7C9B37F4A] - 30/10/2015 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation [MD5.70148EFA9A562E7185B75BBE7D376BF7] - 29/11/2015 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\AFD.sys [578912] =>.Microsoft Windows® [MD5.492B99D2E3D5D7BFD5F0AE1BE7BD37DD] - 30/10/2015 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [28512] =>.Microsoft Windows® [MD5.7F9C7226D743B232907ED2537B8A574F] - 30/10/2015 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92672] =>.Microsoft Corporation [MD5.82D97776BF982AA143BDC7DFB5054EA8] - 30/10/2015 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [173568] =>.Microsoft Corporation [MD5.935823F79CBEDB91637B63D37E3A5A36] - 29/03/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [148480] =>.Microsoft Corporation [MD5.84BC034B6BB763733C1949B7B9BAF976] - 30/10/2015 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [79872] =>.Microsoft Corporation [MD5.53FDD9E69189E546DE4740F8C4D8AB2F] - 30/10/2015 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [114688] =>.Microsoft Corporation [MD5.9E5E8F2A1996F23B7E9687846AA81B01] - 30/10/2015 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [143360] =>.Microsoft Corporation [MD5.0B3B0C1D86050355676640488FA897D3] - 23/02/2016 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\MRxSmb.sys [430944] =>.Microsoft Windows® [MD5.F51C02D992A8D6BC5EC4D990F227D4C7] - 30/10/2015 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [279552] =>.Microsoft Corporation [MD5.19BD8A88AAC580592668B070AC0727D9] - 29/03/2016 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [2152280] =>.Microsoft Windows® [MD5.7D0FC96264C0F8F2C1321E33E8EB646C] - 30/10/2015 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [96768] =>.Microsoft Corporation [MD5.E3C82823B22463BC38AA4F8ADA852624] - 23/02/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [104960] =>.Microsoft Corporation [MD5.1DC2CC74B51E4DC4CD5A20C1021E4010] - 30/10/2015 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [173056] =>.Microsoft Corporation [MD5.91D3F2A6253EF83EFBD7903028F58C4D] - 29/11/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [118624] =>.Microsoft Windows® [MD5.E1F91A727A04C9F8199D04FF3BBBF63C] - 30/10/2015 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [414560] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (11) - 9s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® O23 - Service: Advanced SystemCare Service 9 (AdvancedSystemCareService9) . (.IObit - Advanced SystemCare Service.) - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe =>.IObit Information Technology® O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe =>.AMD O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: LiveUpdate (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe =>.IObit Information Technology® O23 - Service: Mobile Broadband HL Service (Mobile Broadband HL Service) . (.Copyright (C) 2013 - .) - C:\ProgramData\MobileBrServ\mbbservice.exe =>.Huawei Technologies Co., Ltd.® O23 - Service: Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor - Realtek Audio Service.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp® O23 - Service: SRepairDrv (SRepairDrv) . (.Tencent - Tencent SRepairDrv(电脑管家修复模块).) - C:\Program Files (x86)\Tencent\QQPCMgr\Plugins\SRepairDrv =>.Superfluous.Tencent O23 - Service: SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated - 64-bit Synaptics Pointing Enhance Service.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated® O23 - Service: (TTService) . (.TorrentsTime - TTService.) - C:\Program Files (x86)\TorrentsTime Media Player\bin\TTService.exe =>.Radius, OOO® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (27) - 64s SR - Auto [22/04/2016] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® SS - Demand [08/04/2016] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [05/01/2016] [ 446240] Advanced SystemCare Service 9 (AdvancedSystemCareService9) . (.IObit.) - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe =>.IObit Information Technology® SS - Demand [28/07/2011] [ 262144] Arp Intelligent Protection Service (AIPS) . (.Arcai.com.) - C:\Program Files (x86)\netcut\services\aips.exe =>.arcai.com SR - Auto [04/05/2016] [ 296448] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe =>.AMD SR - Auto [21/05/2016] [ 243296] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.® SS - Demand [31/03/2016] [ 875616] BaiduPinyin Updater (BaiduPinyinUpdater) . (.Baidu, Inc..) - C:\Program Files (x86)\baidu\BaiduPinyinUpdate\bdupdate.exe =>.Baidu (China) Co., Ltd.® SS - Auto [02/09/2015] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [02/09/2015] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Auto [14/01/2016] [ 2945312] LiveUpdate (LiveUpdateSvc) . (.IObit.) - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe =>.IObit Information Technology® SR - Auto [23/07/2013] [ 239696] Mobile Broadband HL Service (Mobile Broadband HL Service) . (.Copyright (C) 2013.) - C:\ProgramData\MobileBrServ\mbbservice.exe =>.Huawei Technologies Co., Ltd.® SS - Demand [02/02/2016] [39622144] MySQL57 (MySQL57) . (...) - C:\Program Files\MySQL\MySQL Server 5.7\bin\mysqld.exe SS - Demand [16/08/2005] [ 24064] OracleDBConsoleorcl (OracleDBConsoleorcl) . (.Oracle Corporation.) - D:\oracle\product\10.2.0\db_1\BIN\nmesrvc.exe =>.Oracle Corporation SS - Disabl [29/08/2005] [ 102400] OracleJobSchedulerORCL (OracleJobSchedulerORCL) . (...) - d:\oracle\product\10.2.0\db_1\BIN\extjob.exe SS - Demand [16/08/2005] [ 53248] OracleOraDb10g_home1iSQL*Plus (OracleOraDb10g_home1iSQL*Plus) . (.Oracle.) - D:\oracle\product\10.2.0\db_1\BIN\isqlplussvc.exe =>.Oracle SS - Demand [29/08/2005] [59027456] OracleServiceORCL (OracleServiceORCL) . (.Oracle Corporation.) - d:\oracle\product\10.2.0\db_1\BIN\oracle.exe =>.Oracle Corporation SS - Demand [10/05/2016] [ 2120712] Origin Client Service (Origin Client Service) . (.Electronic Arts.) - C:\Program Files (x86)\Origin\OriginClientService.exe =>.Electronic Arts, Inc.® SS - Demand [05/11/2015] [ 4327632] RemoteServerWin (RemoteServerWin) . (.Unified Intents AB.) - C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe =>.Unified Intents AB® SS - Demand [01/03/2013] [ 118520] Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.Riverbed Technology, Inc..) - C:\Program Files (x86)\WinPcap\rpcapd.exe =>.Riverbed Technology, Inc.® SR - Auto [21/05/2016] [ 310016] Realtek Audio Service (RtkAudioService) . (.Realtek Semiconductor.) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe =>.Realtek Semiconductor Corp® SS - Demand [03/06/2015] [ 327296] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl® SS - System [04/05/2016] [ 172664] SRepairDrv (SRepairDrv) . (.Tencent.) - C:\Program Files (x86)\Tencent\QQPCMgr\Plugins\SRepairDrv =>.Superfluous.Tencent SR - Auto [04/05/2016] [ 246376] SynTPEnh Caller Service (SynTPEnhService) . (.Synaptics Incorporated.) - C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe =>.Synaptics Incorporated® SR - Auto [02/03/2016] [ 3312152] (TTService) . (.TorrentsTime.) - C:\Program Files (x86)\TorrentsTime Media Player\bin\TTService.exe =>.Radius, OOO® SS - Demand [01/05/2014] [ 24576] wampapache64 (wampapache64) . (.Apache Software Foundation.) - c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe =>.Apache Software Foundation SS - Demand [01/05/2014] [12942848] wampmysqld64 (wampmysqld64) . (...) - c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe ---\\ Tâches planifiées en automatique (56) - 33s [MD5.DE7BC28EAE6A62BC35754D1DCA4ECF38] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1107672] (.Activate.) =>.Adobe Systems, Incorporated® [MD5.35FC4D62C2210C0A389552358FE43FCA] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe [1173184] (.Deactivate.) =>.Adobe Systems Incorporated® [MD5.04A7B373A727BD3ACD824621CF65AE70] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [269504] (.Deactivate.) =>.Adobe Systems Incorporated® [MD5.51B634D617073986FA73417318F7C121] [APT] [AdobeAAMUpdater-1.0-MicrosoftAccount-amir.salah9300@outlook.com] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936] (.Deactivate.) =>.Adobe Systems Incorporated® [MD5.71E7A6272C7B0404416D26BD258BA5E9] [APT] [ASC9_PerformanceMonitor] (.IObit.) -- C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [1529632] (.Activate.) =>.IObit Information Technology® [MD5.2464832F559CA6BB34856B5AD8A1C30A] [APT] [ASC9_SkipUac_Amir] (.IObit.) -- C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [5037344] (.Activate.) =>.IObit Information Technology® [MD5.1282F8C897DBF180BCF3F6F6968DE2C3] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [1517200] (.Activate.) =>.AVAST Software a.s.® [MD5.66D83678EC3C27F4B215582600A26407] [APT] [BaiduPinyinUpdate] (.Baidu, Inc..) -- C:\Program Files (x86)\baidu\BaiduPinyin\3.3.2.1028\bdupdate.exe [875616] (.Activate.) =>.Baidu (China) Co., Ltd.® [MD5.5C35525CEBE7B59FAFA05D5E98D7EDEF] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6602152] (.Activate.) =>.Piriform Ltd® [MD5.DD447775B268E90264D5F45EFF374395] [APT] [d2yhfhnq] (...) -- C:\Program Files\Common Files\ofhgm2bm\83ce4nmqbhr1c.exe [57344] (.Deactivate.) [MD5.04F9794E0EC6D7431372C4EAE550E8D5] [APT] [Driver Booster Scheduler] (.IObit.) -- C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [1009952] (.Activate.) =>.IObit Information Technology® [MD5.3CD43786B9B6FFE997E1ACC3F67BFF5D] [APT] [Driver Booster SkipUAC (Amir)] (.IObit.) -- C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [4810528] (.Activate.) =>.IObit Information Technology® [MD5.2A3FB4C98F139038E23330D2439DB8A4] [APT] [FacebookUpdateTaskUserS-1-5-21-2421554984-2418916756-405203484-1001Core] (.Facebook Inc..) -- C:\Users\Amir\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] (.Deactivate.) =>.Facebook, Inc.® [MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.B6111CCEAAE49B68CCEA8167C1A443BE] [APT] [Opera scheduled Autoupdate 1420889810] (.Opera Software.) -- C:\Program Files (x86)\Opera\launcher.exe [695848] (.Deactivate.) =>.Opera Software ASA® [MD5.2E696C90B2D1DD842F59E38FD212D225] [APT] [SafeZone scheduled Autoupdate 1463791888] (.Avast Software.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [735736] (.Activate.) =>.AVAST Software s.r.o.® [MD5.47576403334514C6847D89FBD8A77440] [APT] [SmartDefrag_Startup] (.IObit.) -- C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe [5224224] (.Activate.) =>.IObit Information Technology® [MD5.1234AC298BE3915F94F9BE538D459EA2] [APT] [SmartDefrag_Update] (.IObit.) -- C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe [2841888] (.Activate.) =>.IObit Information Technology® [MD5.ACE954D13DF2EA669C454F922C70CECA] [APT] [Superclean] (.Super PC Tools Ltd.) -- c:\programdata\{c88e21da-818e-87b8-c88e-e21da818876a}\hqghumeaylnlf.exe [4878960] (.Deactivate.) =>PUP.Optional.Adwareplugin [MD5.93104E6E9CA1963C43FB40EDFF664FC5] [APT] [Uninstaller_SkipUac_Amir] (.IObit.) -- C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5275936] (.Activate.) =>.IObit Information Technology® [MD5.00000000000000000000000000000000] [APT] [{0EBA842A-1FA2-4C91-969D-6DBE95DEE4F6}] (...) -- G:\.\Setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{0FC02AAE-B99A-4601-B410-2E98C7637820}] (...) -- C:\Users\Amir\AppData\Local\TNT2\2.0.0.1868\TNT2User.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{458F1BA1-577F-4EAC-BB4E-AFE80101358F}] (...) -- C:\Program Files (x86)\Picexa\uninstall.exe (.not file.) [0] (.Activate.) =>PUP.Optional.Picexa [MD5.00000000000000000000000000000000] [APT] [{AC3B6E63-6A3C-4A4A-BF68-1C2DF46062A8}] (...) -- C:\ProgramData\VMware\VMware Workstation\Uninstaller\uninstall.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{C7EA4353-0FF7-4BDF-BF22-07A0B21A8208}] (...) -- C:\Program Files (x86)\Picexa\uninstall.exe (.not file.) [0] (.Activate.) =>PUP.Optional.Picexa [MD5.E3238CA9101C670556B636C8F4FCE358] [APT] [Lenovo\] (.Lenovo.) -- C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [17184] (.Activate.) =>.LENOVO® O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job [892] =>.Adobe Systems Incorporated® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated® O39 - APT: ASC9_SkipUac_Amir - (.IObit.) -- C:\Windows\Tasks\ASC9_SkipUac_Amir.job [250] =>.IObit Information Technology® O39 - APT: FacebookUpdateTaskUserS-1-5-21-2421554984-2418916756-405203484-1001Core - (.Facebook Inc..) -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2421554984-2418916756-405203484-1001Core.job [916] =>.Facebook, Inc.® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1086] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1090] =>.Google Inc® O39 - APT: Superclean - (.Super PC Tools Ltd.) -- C:\Windows\Tasks\Superclean.job [352] =>PUP.Optional.Adwareplugin O39 - APT: Uninstaller_SkipUac_Amir - (.IObit.) -- C:\Windows\Tasks\Uninstaller_SkipUac_Amir.job [290] =>.IObit Information Technology® O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3972] =>.Adobe Systems, Incorporated® O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier [4032] =>.Adobe Systems Incorporated® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3994] =>.Adobe Systems Incorporated® O39 - APT: AdobeAAMUpdater-1.0-MicrosoftAccount-amir.salah9300@outlook.com - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-amir.salah9300@outlook.com [3728] =>.Adobe Systems Incorporated® O39 - APT: ASC9_PerformanceMonitor - (.IObit.) -- C:\Windows\System32\Tasks\ASC9_PerformanceMonitor [3298] =>.IObit Information Technology® O39 - APT: ASC9_SkipUac_Amir - (.IObit.) -- C:\Windows\System32\Tasks\ASC9_SkipUac_Amir [2418] =>.IObit Information Technology® O39 - APT: avast! Emergency Update - (.AVAST Software.) -- C:\Windows\System32\Tasks\avast! Emergency Update [4006] =>.AVAST Software a.s.® O39 - APT: BaiduPinyinUpdate - (.Baidu, Inc..) -- C:\Windows\System32\Tasks\BaiduPinyinUpdate [3124] =>.Baidu (China) Co., Ltd.® O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2038] =>.Piriform Ltd® O39 - APT: d2yhfhnq - (...) -- C:\Windows\System32\Tasks\d2yhfhnq [3150] O39 - APT: Driver Booster Scheduler - (.IObit.) -- C:\Windows\System32\Tasks\Driver Booster Scheduler [3362] =>.IObit Information Technology® O39 - APT: Driver Booster SkipUAC (Amir) - (.IObit.) -- C:\Windows\System32\Tasks\Driver Booster SkipUAC (Amir) [3004] =>.IObit Information Technology® O39 - APT: FacebookUpdateTaskUserS-1-5-21-2421554984-2418916756-405203484-1001Core - (.Facebook Inc..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2421554984-2418916756-405203484-1001Core [3800] =>.Facebook, Inc.® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3916] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [4148] =>.Google Inc® O39 - APT: Opera scheduled Autoupdate 1420889810 - (.Opera Software.) -- C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1420889810 [4072] =>.Opera Software ASA® O39 - APT: SafeZone scheduled Autoupdate 1463791888 - (.Avast Software.) -- C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1463791888 [4028] =>.AVAST Software s.r.o.® O39 - APT: SmartDefrag_Startup - (.IObit.) -- C:\Windows\System32\Tasks\SmartDefrag_Startup [3204] =>.IObit Information Technology® O39 - APT: SmartDefrag_Update - (.IObit.) -- C:\Windows\System32\Tasks\SmartDefrag_Update [3200] =>.IObit Information Technology® O39 - APT: Superclean - (.Super PC Tools Ltd.) -- C:\Windows\System32\Tasks\Superclean [3376] =>PUP.Optional.Adwareplugin O39 - APT: Uninstaller_SkipUac_Amir - (.IObit.) -- C:\Windows\System32\Tasks\Uninstaller_SkipUac_Amir [2472] =>.IObit Information Technology® ---\\ Processus lancés (51) - 9s [MD5.91C596BE98F65830352B466C19705533] - (.IObit - Advanced SystemCare Service.) -- C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [446240] [PID.824] =>.IObit Information Technology® [MD5.56FE3C885B0901601549E23E7A435984] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler.exe [250008] [PID.1660] =>.Google Inc® [MD5.A425CDCEB9D26E9A5ABAFA259799D447] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.30.3\GoogleCrashHandler64.exe [312472] [PID.1668] =>.Google Inc® [MD5.D0344B72397CB9EE5543E7869C0301B9] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [296448] [PID.1720] =>.AMD [MD5.4DE8F2643F0EAEA126D8546AEDA1EBB1] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [695808] [PID.1744] =>.AMD [MD5.89EC2C7C83223CB06946621693F814BC] - (.Realtek Semiconductor - Realtek Audio Service.) -- C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [310016] [PID.1892] =>.Realtek Semiconductor Corp® [MD5.DCAC2845D29651D5E07B92733B04119A] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008] [PID.84] =>.Realtek Semiconductor Corp® [MD5.A24AF1F8186B4B69D54DCC4B059CA695] - (.AVAST Software - avast! Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296] [PID.1644] =>.AVAST Software a.s.® [MD5.36114214BF8D7C464D1E92E4EB6B2DD3] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.2536] =>.Adobe Systems, Incorporated® [MD5.2D2DE301547146A79F6412075A66D731] - (.IObit - Product Updater.) -- C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2945312] [PID.2712] =>.IObit Information Technology® [MD5.0417C188DA81AA5564B152CA4E00458A] - (.Copyright (C) 2013 - .) -- C:\ProgramData\MobileBrServ\mbbservice.exe [239696] [PID.2780] =>.Huawei Technologies Co., Ltd.® [MD5.9E9C72A009E58B54030A7B2807783F1C] - (.Synaptics Incorporated - 64-bit Synaptics Pointing Enhance Service.) -- C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246376] [PID.2900] =>.Synaptics Incorporated® [MD5.F3EC777A20EAA81F6434DD2D48077E8E] - (.TorrentsTime - TTService.) -- C:\Program Files (x86)\TorrentsTime Media Player\bin\TTService.exe [3312152] [PID.2916] =>.Radius, OOO® [MD5.C47C6CB5A67F53080C5BBE052D9E64D1] - (.Synaptics Incorporated - Synaptics TouchPad 64-bit Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3965544] [PID.3048] =>.Synaptics Incorporated® [MD5.47576403334514C6847D89FBD8A77440] - (.IObit - Smart Defrag 5.) -- C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe [5224224] [PID.3180] =>.IObit Information Technology® [MD5.71E7A6272C7B0404416D26BD258BA5E9] - (.IObit - Performance Monitor.) -- C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [1529632] [PID.3204] =>.IObit Information Technology® [MD5.8B71A949725F39C7C3D5CBA5458E3D39] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\PROGRAM FILES\SYNAPTICS\SynTP\SYNTPHELPER.EXE [210024] [PID.2728] =>.Synaptics Incorporated® [MD5.7F2AFABE85EB2CE91EC1F9AEED70EEB3] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16418560] [PID.5736] =>.Realtek Semiconductor Corp® [MD5.16D96FCE92BA1B4FE049C782F1F80A66] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3890161] [PID.5952] =>.Tonec Inc. [MD5.36F4C7EF5BFB395CE24F57507F66CE09] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [7400576] [PID.5216] =>.AVAST Software a.s.® [MD5.1C7C9F16762BB5D75B4E43B0BD9AC78D] - (.Internet Download Manager, Tonec Inc. - IDM Integration module.) -- C:\Program Files (x86)\Internet Download Manager\IDMIntegrator64.exe [67608] [PID.5212] =>.Tonec Inc.® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.1804] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.7880] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.10144] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.4604] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.10176] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.10132] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.10408] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.10420] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.10388] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.11160] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.4144] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.10372] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.4024] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.5492] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.10320] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.9012] =>.Google Inc® [MD5.C282A6792FB3C2E4CF37082891A5D69C] - (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2172600] [PID.7732] =>.Adobe Systems, Incorporated® [MD5.C282A6792FB3C2E4CF37082891A5D69C] - (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2172600] [PID.2496] =>.Adobe Systems, Incorporated® [MD5.254D4BE8CD7953E7AD7CC37FE82BCF35] - (.Adobe Systems Incorporated - Adobe RdrCEF.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe [1825976] [PID.5628] =>.Adobe Systems, Incorporated® [MD5.254D4BE8CD7953E7AD7CC37FE82BCF35] - (.Adobe Systems Incorporated - Adobe RdrCEF.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe [1825976] [PID.5844] =>.Adobe Systems, Incorporated® [MD5.254D4BE8CD7953E7AD7CC37FE82BCF35] - (.Adobe Systems Incorporated - Adobe RdrCEF.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe [1825976] [PID.4268] =>.Adobe Systems, Incorporated® [MD5.254D4BE8CD7953E7AD7CC37FE82BCF35] - (.Adobe Systems Incorporated - Adobe RdrCEF.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe [1825976] [PID.1060] =>.Adobe Systems, Incorporated® [MD5.254D4BE8CD7953E7AD7CC37FE82BCF35] - (.Adobe Systems Incorporated - Adobe RdrCEF.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe [1825976] [PID.5020] =>.Adobe Systems, Incorporated® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.7176] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.232] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.5028] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.9032] =>.Google Inc® [MD5.388DE3C872874C49EF5E7B18EC36047A] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Amir\Downloads\ZHPDiag3.exe [2208768] [PID.10948] =>.Nicolas Coolman [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.9304] =>.Google Inc® [MD5.455927608C21945849E1A3E35E36671F] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304] [PID.2164] =>.Google Inc® ---\\ Google Chrome, Démarrage,Recherche,Extensions (38) - 41s G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.palikan.com/ =>PUP.Optional.GoPalikan G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.istartpageing.com/ =>PUP.Optional.IstartPageing G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] [https://mynamedomain.koko//0service/update2/crx] Google Chrome manifest =>Hijacker.Browser G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] [https://mynamedomain.koko//0service/update2/crx] Google Chrome manifest =>Hijacker.Browser G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [bfbmjmiodbnnpllbbbfblcplfjjepjdn] __MSG_name__ G2 - GCE: Preference [User Data\Default] [biobmijljmeoecmeijddfdlocepdaldo] __MSG_application_title__ G2 - GCE: Preference [User Data\Default] [bjfhmglciegochdpefhhlphglcehbmek] Hypothesis - Web & PDF Annotation G2 - GCE: Preference [User Data\Default] [bkkbcggnhapdmkeljlodobbkopceiche] Poper Blocker G2 - GCE: Preference [User Data\Default] [blhjobkfabeopalncconblmakfcllmhk] __MSG_extName__ G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__ =>.AdblocPlus Plugin G2 - GCE: Preference [User Data\Default] [cmedhionkhpnakcndndgjdbohmhepckk] __MSG_extension_name__ G2 - GCE: Preference [User Data\Default] [cnlojoclkbpmfhakhaagjpjfifbaoadf] IDM Integration Module Extension G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [dcnofaichneijfbkdkghmhjjbepjmble] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [dhdgffkkebhmkfjojejmpbldmpobfkfo] G2 - GCE: Preference [User Data\Default] [egncdnniomonjgpjbapalkckojhkfddk] (Orphean) G2 - GCE: Preference [User Data\Default] [elicpjhcidhpjomhibiffojpinpmmpil] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] [https://mynamedomain.koko//0service/update2/crx] Google Chrome manifest =>Hijacker.Browser G2 - GCE: Preference [User Data\Default] [fodaojgjnmpoaegnignmjbkchkepjioa] __MSG_application_title__ G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [gighmmpiobklfepjocnamgkkbiglidom] AdBlock G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] Avast Online Security G2 - GCE: Preference [User Data\Default] [hgdohmjplligggendhbmghhmpphabopi] YouTube To MP3! G2 - GCE: Preference [User Data\Default] [hiajdlfgbgnnjakkbnpdhmhfhklkbiol] JavaScript Popup Blocker G2 - GCE: Preference [User Data\Default] [ilppkoakomgpcblpemgbloapenijdcho] __MSG_extName__ G2 - GCE: Preference [User Data\Default] [jjphmlaoffndcnecccgemfdaaoighkel] Floating for YouTube™ G2 - GCE: Preference [User Data\Default] [lgblnfidahcdcjddiepkckcfdhpknnjh] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [ljibkigjccbegnbeojkoafejpoiachej] Palikan New Tab =>PUP.Optional.GoPalikan G2 - GCE: Preference [User Data\Default] [llombcdkjcncahlegofkelfjjkokpoho] Video Deck for YouTube™ - for Desktop G2 - GCE: Preference [User Data\Default] [lmjegmlicamnimmfhcmpkclmigmmcbeh] Application Launcher for Drive (by Google) G2 - GCE: Preference [User Data\Default] [lnkdbjbjpnpjeciipoaflmpcddinpjjp] SmartVideo For YouTube™ G2 - GCE: Preference [User Data\Default] [ngpampappnmepgilojfohadhhmbhlaek] IDM Integration Module G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [ocgmhdfokhcgblalllbjpplpaeciijen] __MSG_application_title__ G2 - GCE: Preference [User Data\Default] [ooebklgpfnbcnpokahmdidgbmlcdepkm] 电脑管家上网防护 =>.Superfluous.Chrome G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (38) - 50s M0 - MFSP: prefs.js [Amir - gxh8qwmb.default] http://www.palikan.com/?f=1&a=bfp_coinisre_16_07&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtBtBtAtC0AyB0FtC0ByE0BtN0D0Tzu0StCyDtCtCtN1L2XzutAtFtCzztFtCtFyDtN1L1Czu1BtBtN1L1G1B1V1N2Y1L1Qzu2StAtCtBtB0Ezy0F0CtGyEyB0F0AtGtA0FyByBtGyE0BzyyDtG0FyE0FtBtD0F0DyByDyC0CtC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0E0AyB0Ezy0FtDtG0D0ByCtDtGyE0D0EtAtGzyzz0EtAtGyB0CyE0FtD0AyDtC0B0D0F0F2QtN0A0LzutB&cr=115641536&ir= =>PUP.Optional.GoPalikan P2 - EXT: (.Microsoft Corporation - The plugin allows you to have a better expe.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npMeetingJoinPluginOC.dll =>.Microsoft Corporation® P2 - EXT: (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll =>.Adobe Systems, Incorporated® P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.FRA P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\yahooprotected@gmail.com.xpi =>PUP.Optional.WinYahoo P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\bing-.xml P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\delta-homes.xml =>PUP.Optional.DeltaHomes P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\dsrlte.xml =>PUP.Optional.PaybyAds P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\findit.xml =>PUP.Optional.SmartBar P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\findwide.xml P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\istartpageing.xml =>PUP.Optional.IstartPageing P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\mystartsearch.xml =>PUP.Optional.StartSearch P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\palikan.xml =>PUP.Optional.GoPalikan P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\search-simple.xml =>PUP.Optional.SearchSimple P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\WebSearch.xml =>PUP.Optional.SimpleSearches P2 - EXT FILE: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\findit.xml =>PUP.Optional.SmartBar P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\GoSearch.xml =>Trojan.GoSearch P2 - EXT: (...) -- C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\istartpageing.xml =>PUP.Optional.IstartPageing P2 - EXT: (.Mozilla - Default.) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} =>.Mozilla P2 - EXT: (.Gomita - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\0dad4eef9031d243b80bc974ac8834eb =>.Gomita P2 - EXT: (.Gomita - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\distribution\bundles\6e10b152f39435b2ff078358ac8834eb =>.Gomita P2 - EXT: (.Cinema Plus - CinemaPlus-4.2v.) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com =>PUP.Optional.CrossRider P2 - EXT: (.Microsoft Corporation - Bing Search.) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\bingsearch.full@microsoft.com =>.Microsoft Corporation P2 - EXT: (. - 50Couponss.) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\c@C26.net P2 - EXT: (.roc - Default SearchProtected .) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\defsearchp@gmail.com P2 - EXT: (.lightningnewtab.com - FirefixTab.) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab P2 - EXT: (.Gomita - Firefox Helper.) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\firefox@helper =>.Gomita P2 - EXT: (. - BeStSauveForYoiu.) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\IW@SAjTE7r7.net P2 - EXT: (...) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\staged => P2 - EXT: (. - The AdBlocker.) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\yeqleverjiikyfgnw@lhkzqn__zjtwyusm.org P2 - EXT: (.V@no - Cookies Manager+.) -- C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} =>.V@no P2 - FPN: [HKCU] [torrents-time.com/TTPlugin] - (.Torrents Time.) -- C:\Program Files (x86)\TorrentsTime Media Player\bin\npTTPlugin.dll P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll =>.Adobe Systems Incorporated P2 - FPN: [HKLM] [@baidu.com/BaiduExpert-npplugin] - (.百度在线网络技术（北京）有限公司.) -- C:\Users\Amir\AppData\Roaming\Baidu\BDWebAdapter\3.0.359.0\npBDExNP.dll P2 - FPN: [HKLM] [@baidu.com/npxbdcntb] - (.(c) Baidu Ltd. All rights reserved..) -- C:\Program Files (x86)\baidu\BaiduPinyin\3.3.2.1028\npxbdcntb.dll P2 - FPN: [HKLM] [@qq.com/npAndroidAssistant] - (.腾讯公司.) -- C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll =>.Superfluous.Tencent ---\\ Opera, Démarrage,Recherche,Plugins (8) - 3s B2 - EXT: [adblockforopera] C:\Users\Amir\AppData\Roaming\Opera Software\Opera Stable\Extensions\aobdicepooefnbaeokijohmhjlleamfj B2 - EXT: [{background:{scripts:[background.js]}content_scrip] C:\Users\Amir\AppData\Roaming\Opera Software\Opera Stable\Extensions\bdgkapbcioidohpahpfnflgbonpbehap B2 - EXT: [allgenius] C:\Users\Amir\AppData\Roaming\Opera Software\Opera Stable\Extensions\bnlagjpcfaabkkapnjhmdeejhjgbeneg B2 - EXT: [adblockcash] C:\Users\Amir\AppData\Roaming\Opera Software\Opera Stable\Extensions\cfaeobphmnkkcgccdfagcephianpcfip B2 - EXT: [Dynamo Combo] C:\Users\Amir\AppData\Roaming\Opera Software\Opera Stable\Extensions\cgohmfhlbipbcmmpdonacmkpibfghppn B2 - EXT: [Coupon Time] C:\Users\Amir\AppData\Roaming\Opera Software\Opera Stable\Extensions\gmnhkhnkokdagfhdhphaejgjakkjekam B2 - EXT: [Wild West] C:\Users\Amir\AppData\Roaming\Opera Software\Opera Stable\Extensions\mbmdepjcjoedhdbhnhiddpkceoiebihh B2 - EXT: [Opera Stable] C:\Users\Amir\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (24) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/ =>PUP.Optional.Browser R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/ =>PUP.Optional.Browser R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/ =>PUP.Optional.Browser R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_b2unnicrttpc0yle0cuz5wvvjkvkw6ezrteqnoomt9ue2qba13rkalvc8nr42pqv-__58zpgu_z-h_5eeciauggsu0y0vin1b0ypcbx2emr7njijrwwaticynfocvneoypbytqg9cmhgz_bzq3nsdfmjrbool&q={searchterms} =>PUP.Optional.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.delta-homes.com/ =>PUP.Optional.Qvo6 R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.delta-homes.com/ =>PUP.Optional.Qvo6 R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,First Home Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_b2unnicrttpc0yle0cuz5wvvjkvkw6ezrteqnoomt9ue2qba13rkalvc8nr42pqv-__58zpgu_z-h_5eeciauggsu0y0vin1b0ypcbx2emr7njijrwwaticynfocvneoypbytqg9cmhgz_bzq3nsdfmjrbool&q={searchterms} =>PUP.Optional.Linkury R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_b2unnicrttpc0yle0cuz5wvvjkvkw6ezrteqnoomt9ue2qba13rkalvc8nr42pqv-__58zpgu_z-h_5eeciauggsu0y0vin1b0ypcbx2emr7njijrwwaticynfocvneoypbytqg9cmhgz_bzq3nsdfmjrbool&q={searchterms} =>PUP.Optional.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_b2unnicrttpc0yle0cuz5wvvjkvkw6ezrteqnoomt9ue2qba13rkalvc8nr42pqv-__58zpgu_z-h_5eeciauggsu0y0vin1b0ypcbx2emr7njijrwwaticynfocvneoypbytqg9cmhgz_bzq3nsdfmjrbool&q={searchterms} =>PUP.Optional.Linkury R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKEY_USERS\S-1-5-21-2421554984-2418916756-405203484-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_b2unnicrttpc0yle0cuz5wvvjkvkw6ezrteqnoomt9ue2qba13rkalvc8nr42pqv-__58zpgu_z-h_5eeciauggsu0y0vin1b0ypcbx2emr7njijrwwaticynfocvneoypbytqg9cmhgz_bzq3nsdfmjrbool&q={searchterms} =>PUP.Optional.Linkury R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer,Proxy Management (6) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 127.0.0.1:8118 =>Hijacker.Proxy R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit= F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet= ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (34) ---\\ Browser Helper Object de navigateur (BHO) (6) - 1s O2 - BHO: IDM Helper [64Bits] - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.® O2 - BHO: ExplorerWnd Helper [64Bits] - {10921475-03CE-4E04-90CE-E2E7EF20C814} (Orphean) O2 - BHO: Skype for Business Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll =>.Microsoft Corporation® O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (Orphean) O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} (Orphean) ---\\ Applications lancées au démarrage du système (24) - 14s O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated® O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp® O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Amir\AppData\Local\Facebook\Update\FacebookUpdate.exe =>.Facebook, Inc.® O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Amir\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation® O4 - HKCU\..\Run: [Advanced SystemCare 9] . (.IObit - Advanced SystemCare 9.) -- C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe =>.IObit Information Technology® O4 - HKCU\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc. O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKCU\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe =>.Google Inc® O4 - HKCU\..\RunOnce: [Application Restart #0] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe =>.Advanced Micro Devices, Inc.® O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.® O4 - HKLM\..\Wow6432Node\Run: [Adobe Creative Cloud] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- c:\program files (x86)\Adobe\adobe creative cloud\ACC\creative cloud.exe =>.Adobe Systems Incorporated® O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software a.s.® O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-2421554984-2418916756-405203484-1001\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Amir\AppData\Local\Facebook\Update\FacebookUpdate.exe =>.Facebook, Inc.® O4 - HKUS\S-1-5-21-2421554984-2418916756-405203484-1001\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - HKUS\S-1-5-21-2421554984-2418916756-405203484-1001\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\Amir\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-2421554984-2418916756-405203484-1001\..\Run: [Advanced SystemCare 9] . (.IObit - Advanced SystemCare 9.) -- C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe =>.IObit Information Technology® O4 - HKUS\S-1-5-21-2421554984-2418916756-405203484-1001\..\Run: [IDMan] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files (x86)\Internet Download Manager\IDMan.exe =>.Tonec Inc. O4 - HKUS\S-1-5-21-2421554984-2418916756-405203484-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKUS\S-1-5-21-2421554984-2418916756-405203484-1001\..\Run: [GoogleDriveSync] . (.Google - Google Drive.) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe =>.Google Inc® O4 - HKUS\S-1-5-21-2421554984-2418916756-405203484-1001\..\RunOnce: [Application Restart #0] . (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® ---\\ Raccourcis Global Startup (92) - 47s O4 - GS\Desktop [Administrateur]: Android Studio.lnk . (.Google - .) C:\Program Files (x86)\Android studio\Android Studio\bin\studio64.exe =>.Google O4 - GS\Desktop [Administrateur]: AptanaStudio.lnk . (...) C:\Users\Amir\AppData\Roaming\Appcelerator\Aptana Studio\AptanaStudio3.exe {2B728230DD498C} O4 - GS\Desktop [Administrateur]: Balsamiq Mockups 3.lnk . (...) C:\Program Files (x86)\Balsamiq Mockups 3\Balsamiq Mockups 3.exe O4 - GS\Desktop [Administrateur]: Cisco Packet Tracer Student.lnk . (...) C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\PacketTracer6.exe {37531C4EB56A967FE17E390590A07763} O4 - GS\Desktop [Administrateur]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe O4 - GS\Desktop [Administrateur]: eclipse.exe - Raccourci.lnk . (...) C:\Users\Amir\Downloads\Video\Compressed\eclipse\eclipse.exe O4 - GS\Desktop [Administrateur]: Google Drive.lnk . (...) C:\Users\Amir\Google Drive O4 - GS\Desktop [Administrateur]: LispWorks.lnk . (...) C:\Program Files (x86)\LispWorks Personal\lispworks-personal-6-1-1-x86-win32.exe {11212140D5C11AE214E321759218643C8E57} O4 - GS\Desktop [Administrateur]: Pacestar UML Diagrammer.lnk . (.Pacestar Software - Pacestar UML Diagrammer.) C:\Program Files (x86)\Pacestar UML Diagrammer\PSUML.EXE =>.Pacestar Software O4 - GS\Desktop [Administrateur]: Photoshop.exe - Raccourci.lnk . (.Adobe Systems, Incorporated - .) C:\Program Files (x86)\adobe\Adobe Photoshop CC\Photoshop.exe =>.Adobe Systems, Incorporated O4 - GS\Desktop [Administrateur]: Pro Evolution Soccer 2016.lnk . (.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2016.) C:\Program Files (x86)\Pro Evolution Soccer 2016\PES2016.exe =>.Konami Digital Entertainment Co., Ltd. O4 - GS\Desktop [Administrateur]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\Amir\Desktop\Mes documents\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Desktop [Administrateur]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\Amir\AppData\Local\Viber\Viber.exe {5AECF5A58104948997EF21A8F3D44AAE} O4 - GS\Desktop [Administrateur]: WampServer64.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Amir\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe O4 - GS\Quicklaunch [Administrateur]: Wireshark Legacy.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\wireshark-gtk.exe =>.Wireshark Foundation® O4 - GS\Quicklaunch [Administrateur]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation® O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Amir\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc. O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Administrateur]: Advanced SystemCare 9.lnk . (.IObit - Advanced SystemCare 9.) C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe =>.IObit Information Technology® O4 - GS\TaskBar [Administrateur]: Driver Booster 3.lnk . (.IObit - Driver Booster 3.) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe =>.IObit Information Technology® O4 - GS\TaskBar [Administrateur]: LispWorks.lnk . (...) C:\Program Files (x86)\LispWorks Personal\lispworks-personal-6-1-1-x86-win32.exe {11212140D5C11AE214E321759218643C8E57} O4 - GS\TaskBar [Administrateur]: MPC-HC x64.lnk . (.MPC-HC Team - MPC-HC.) C:\Program Files\MPC-HC\mpc-hc64.exe =>.Open Source Developer, Fotis ZAFIROPOULOS® O4 - GS\TaskBar [Administrateur]: SQL Plus.lnk . (.Oracle Corporation - Oracle SQL*PLUS.) D:\oracle\product\10.2.0\db_1\BIN\sqlplusw.exe =>.Oracle Corporation O4 - GS\TaskBar [Administrateur]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation® O4 - GS\Desktop [Amir]: Android Studio.lnk . (.Google - .) C:\Program Files (x86)\Android studio\Android Studio\bin\studio64.exe =>.Google O4 - GS\Desktop [Amir]: AptanaStudio.lnk . (...) C:\Users\Amir\AppData\Roaming\Appcelerator\Aptana Studio\AptanaStudio3.exe {2B728230DD498C} O4 - GS\Desktop [Amir]: Balsamiq Mockups 3.lnk . (...) C:\Program Files (x86)\Balsamiq Mockups 3\Balsamiq Mockups 3.exe O4 - GS\Desktop [Amir]: Cisco Packet Tracer Student.lnk . (...) C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\PacketTracer6.exe {37531C4EB56A967FE17E390590A07763} O4 - GS\Desktop [Amir]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe O4 - GS\Desktop [Amir]: eclipse.exe - Raccourci.lnk . (...) C:\Users\Amir\Downloads\Video\Compressed\eclipse\eclipse.exe O4 - GS\Desktop [Amir]: Google Drive.lnk . (...) C:\Users\Amir\Google Drive O4 - GS\Desktop [Amir]: LispWorks.lnk . (...) C:\Program Files (x86)\LispWorks Personal\lispworks-personal-6-1-1-x86-win32.exe {11212140D5C11AE214E321759218643C8E57} O4 - GS\Desktop [Amir]: Pacestar UML Diagrammer.lnk . (.Pacestar Software - Pacestar UML Diagrammer.) C:\Program Files (x86)\Pacestar UML Diagrammer\PSUML.EXE =>.Pacestar Software O4 - GS\Desktop [Amir]: Photoshop.exe - Raccourci.lnk . (.Adobe Systems, Incorporated - .) C:\Program Files (x86)\adobe\Adobe Photoshop CC\Photoshop.exe =>.Adobe Systems, Incorporated O4 - GS\Desktop [Amir]: Pro Evolution Soccer 2016.lnk . (.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2016.) C:\Program Files (x86)\Pro Evolution Soccer 2016\PES2016.exe =>.Konami Digital Entertainment Co., Ltd. O4 - GS\Desktop [Amir]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\Amir\Desktop\Mes documents\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Desktop [Amir]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\Amir\AppData\Local\Viber\Viber.exe {5AECF5A58104948997EF21A8F3D44AAE} O4 - GS\Desktop [Amir]: WampServer64.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software O4 - GS\Desktop [Amir]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Amir\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Amir]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe O4 - GS\Quicklaunch [Amir]: Wireshark Legacy.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\wireshark-gtk.exe =>.Wireshark Foundation® O4 - GS\Quicklaunch [Amir]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation® O4 - GS\Quicklaunch [Amir]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Amir\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc. O4 - GS\sendTo [Amir]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Amir]: Advanced SystemCare 9.lnk . (.IObit - Advanced SystemCare 9.) C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe =>.IObit Information Technology® O4 - GS\TaskBar [Amir]: Driver Booster 3.lnk . (.IObit - Driver Booster 3.) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe =>.IObit Information Technology® O4 - GS\TaskBar [Amir]: LispWorks.lnk . (...) C:\Program Files (x86)\LispWorks Personal\lispworks-personal-6-1-1-x86-win32.exe {11212140D5C11AE214E321759218643C8E57} O4 - GS\TaskBar [Amir]: MPC-HC x64.lnk . (.MPC-HC Team - MPC-HC.) C:\Program Files\MPC-HC\mpc-hc64.exe =>.Open Source Developer, Fotis ZAFIROPOULOS® O4 - GS\TaskBar [Amir]: SQL Plus.lnk . (.Oracle Corporation - Oracle SQL*PLUS.) D:\oracle\product\10.2.0\db_1\BIN\sqlplusw.exe =>.Oracle Corporation O4 - GS\TaskBar [Amir]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation® O4 - GS\Desktop [le-pr]: Android Studio.lnk . (.Google - .) C:\Program Files (x86)\Android studio\Android Studio\bin\studio64.exe =>.Google O4 - GS\Desktop [le-pr]: AptanaStudio.lnk . (...) C:\Users\Amir\AppData\Roaming\Appcelerator\Aptana Studio\AptanaStudio3.exe {2B728230DD498C} O4 - GS\Desktop [le-pr]: Balsamiq Mockups 3.lnk . (...) C:\Program Files (x86)\Balsamiq Mockups 3\Balsamiq Mockups 3.exe O4 - GS\Desktop [le-pr]: Cisco Packet Tracer Student.lnk . (...) C:\Program Files (x86)\Cisco Packet Tracer 6.2sv\bin\PacketTracer6.exe {37531C4EB56A967FE17E390590A07763} O4 - GS\Desktop [le-pr]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe O4 - GS\Desktop [le-pr]: eclipse.exe - Raccourci.lnk . (...) C:\Users\Amir\Downloads\Video\Compressed\eclipse\eclipse.exe O4 - GS\Desktop [le-pr]: Google Drive.lnk . (...) C:\Users\Amir\Google Drive O4 - GS\Desktop [le-pr]: LispWorks.lnk . (...) C:\Program Files (x86)\LispWorks Personal\lispworks-personal-6-1-1-x86-win32.exe {11212140D5C11AE214E321759218643C8E57} O4 - GS\Desktop [le-pr]: Pacestar UML Diagrammer.lnk . (.Pacestar Software - Pacestar UML Diagrammer.) C:\Program Files (x86)\Pacestar UML Diagrammer\PSUML.EXE =>.Pacestar Software O4 - GS\Desktop [le-pr]: Photoshop.exe - Raccourci.lnk . (.Adobe Systems, Incorporated - .) C:\Program Files (x86)\adobe\Adobe Photoshop CC\Photoshop.exe =>.Adobe Systems, Incorporated O4 - GS\Desktop [le-pr]: Pro Evolution Soccer 2016.lnk . (.Konami Digital Entertainment Co., Ltd. - Pro Evolution Soccer 2016.) C:\Program Files (x86)\Pro Evolution Soccer 2016\PES2016.exe =>.Konami Digital Entertainment Co., Ltd. O4 - GS\Desktop [le-pr]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) C:\Users\Amir\Desktop\Mes documents\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Desktop [le-pr]: Viber.lnk . (.Viber Media S.à r.l. - Viber.) C:\Users\Amir\AppData\Local\Viber\Viber.exe {5AECF5A58104948997EF21A8F3D44AAE} O4 - GS\Desktop [le-pr]: WampServer64.lnk . (.Aestan Software - Aestan Tray Menu.) C:\wamp\wampmanager.exe =>.Aestan Software O4 - GS\Desktop [le-pr]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Amir\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [le-pr]: Dev-C++.lnk . (.Bloodshed Software - Dev-C++ IDE.) C:\Program Files (x86)\Dev-Cpp\devcpp.exe O4 - GS\Quicklaunch [le-pr]: Wireshark Legacy.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\wireshark-gtk.exe =>.Wireshark Foundation® O4 - GS\Quicklaunch [le-pr]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation® O4 - GS\Quicklaunch [le-pr]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\Amir\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc. O4 - GS\sendTo [le-pr]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [le-pr]: Advanced SystemCare 9.lnk . (.IObit - Advanced SystemCare 9.) C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe =>.IObit Information Technology® O4 - GS\TaskBar [le-pr]: Driver Booster 3.lnk . (.IObit - Driver Booster 3.) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe =>.IObit Information Technology® O4 - GS\TaskBar [le-pr]: LispWorks.lnk . (...) C:\Program Files (x86)\LispWorks Personal\lispworks-personal-6-1-1-x86-win32.exe {11212140D5C11AE214E321759218643C8E57} O4 - GS\TaskBar [le-pr]: MPC-HC x64.lnk . (.MPC-HC Team - MPC-HC.) C:\Program Files\MPC-HC\mpc-hc64.exe =>.Open Source Developer, Fotis ZAFIROPOULOS® O4 - GS\TaskBar [le-pr]: SQL Plus.lnk . (.Oracle Corporation - Oracle SQL*PLUS.) D:\oracle\product\10.2.0\db_1\BIN\sqlplusw.exe =>.Oracle Corporation O4 - GS\TaskBar [le-pr]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation® O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated® O4 - GS\CommonDesktop [Public]: Advanced SystemCare 9.lnk . (.IObit - Advanced SystemCare 9.) C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe =>.IObit Information Technology® O4 - GS\CommonDesktop [Public]: Avast Antivirus Gratuit.lnk . (.AVAST Software - avast! Antivirus.) C:\Program Files\AVAST Software\Avast\AvastUI.exe =>.AVAST Software a.s.® O4 - GS\CommonDesktop [Public]: Avast SafeZone Browser.lnk . (.Avast Software - Avast SafeZone Browser.) C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software s.r.o.® O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - GS\CommonDesktop [Public]: CPUID HWMonitor.lnk . (.CPUID - HWMonitor.) C:\Program Files\CPUID\HWMonitor\HWMonitor.exe =>.CPUID® O4 - GS\CommonDesktop [Public]: Driver Booster 3.lnk . (.IObit - Driver Booster 3.) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe =>.IObit Information Technology® O4 - GS\CommonDesktop [Public]: IObit Uninstaller.lnk . (.IObit - Uninstall Programs.) C:\Program Files (x86)\IObit\IObit Uninstaller\Uninstaler_SkipUac.exe =>.IObit Information Technology® O4 - GS\CommonDesktop [Public]: Need for Speed™ Most Wanted.lnk . (.Electronic Arts - Need for Speed™ Most Wanted.) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe =>.Electronic Arts® O4 - GS\CommonDesktop [Public]: Origin.lnk . (.Electronic Arts - Origin.) C:\Program Files (x86)\Origin\Origin.exe =>.Electronic Arts, Inc.® O4 - GS\CommonDesktop [Public]: Recuva.lnk . (.Piriform Ltd - Recuva.) C:\Program Files\Recuva\recuva64.exe =>.Piriform Ltd® O4 - GS\CommonDesktop [Public]: Smart Defrag 5.lnk . (.IObit - Smart Defrag 5.) C:\Program Files (x86)\IObit\Smart Defrag\SmartDefrag.exe =>.IObit Information Technology® O4 - GS\CommonDesktop [Public]: Unified Remote.lnk . (.Unified Intents AB - Unified Remote.) C:\Program Files (x86)\Unified Remote 3\RemoteServerWin.exe =>.Unified Intents AB® O4 - GS\CommonDesktop [Public]: Wireshark.lnk . (.The Wireshark developer community, http://www.wiresha - Wireshark.) C:\Program Files (x86)\Wireshark\Wireshark.exe =>.Wireshark Foundation® ---\\ Modification Domaine/Adresses DNS (7) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{236d8884-0787-46f6-b532-719d718f72ff}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{b2b3c5d0-07f0-4044-a023-9ae1be1db856}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{cfdc9f45-51f2-44e2-b554-f999cf02bb0d}: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{f0ecfd18-972f-429b-ac13-7a36b50af812}: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{cfdc9f45-51f2-44e2-b554-f999cf02bb0d}: DhcpDomain = hi.link O17 - HKLM\System\CCS\Services\Tcpip\..\{f0ecfd18-972f-429b-ac13-7a36b50af812}: DhcpDomain = hi.link ---\\ Protocole additionnel (24) - 1s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: osf [64Bits] - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL =>.Microsoft Corporation® O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Logiciels installés (123) - 27s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc. O42 - Logiciel: 7-Zip 9.20 - (...) [HKLM][64Bits] -- 7-Zip O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {19687AD5-7E54-4C5E-A796-125C95079C1D} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Creative Cloud - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Creative Cloud =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 21 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 21 PPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player PPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Photoshop CC 2014 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {D7A4F897-B20A-42D0-862D-CB5F6DB7391D} =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824166751} =>.Adobe Systems Incorporated O42 - Logiciel: Advanced SystemCare 9 - (.IObit.) [HKLM][64Bits] -- Advanced SystemCare_is1 =>.IObit Information Technology® O42 - Logiciel: AMD Catalyst Control Center - (.AMD.) [HKLM][64Bits] -- WUCCCApp =>.Advanced Micro Devices, Inc.® O42 - Logiciel: Aptana Studio - (.Appcelerator.) [HKCU][64Bits] -- Aptana Studio 3.6.0 {2B728230DD498C} O42 - Logiciel: Aptana Studio - (.Appcelerator.) [HKLM][64Bits] -- {2D6C1116-78C6-469C-9923-3E549218773F} O42 - Logiciel: Avast Antivirus Gratuit - (.AVAST Software.) [HKLM][64Bits] -- Avast =>.AVAST Software a.s.® O42 - Logiciel: Balsamiq Mockups 3 - (.Balsamiq SRL.) [HKLM][64Bits] -- {3EA3007A-42E5-063B-7D50-604E09A30EA3} =>.Balsamiq SRL O42 - Logiciel: Balsamiq Mockups 3 - (.Balsamiq SRL.) [HKLM][64Bits] -- BalsamiqMockups3.EDE15CF69E11F7F7D45B5430C7D37CC6C3545E3C.1 =>.Balsamiq SRL O42 - Logiciel: BingoMaster - (.BingoMaster.) [HKCU][64Bits] -- {9563BC59-9556-4805-8CD4-886781779D8D} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: Cisco Packet Tracer 6.2 Student - (.Cisco Systems, Inc..) [HKLM][64Bits] -- Cisco Packet Tracer 6.2 Student_is1 =>.Cisco Systems, Inc. O42 - Logiciel: Compatible Web Directory - (.Compatible Web Directory.) [HKLM][64Bits] -- PopupProduct =>PUP.Optional.CompatibleWebDir O42 - Logiciel: CPUID HWMonitor 1.28 - (...) [HKLM][64Bits] -- CPUID HWMonitor_is1 O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.Disc Soft Ltd O42 - Logiciel: Dev-C++ - (...) [HKLM][64Bits] -- Dev-C++ O42 - Logiciel: Driver Booster 3.3 - (.IObit.) [HKLM][64Bits] -- Driver Booster_is1 =>.IObit Information Technology® O42 - Logiciel: Facebook Video Calling 3.1.0.521 - (.Skype Limited.) [HKLM][64Bits] -- {2091F234-EB58-4B80-8C96-8EB78C808CF7} =>.Skype Limited O42 - Logiciel: Git version 2.7.4 - (.The Git Development Community.) [HKLM][64Bits] -- Git_is1 {3385BEEB33D0394E5191BB8C650B5C1F} =>.The Git Development Community O42 - Logiciel: GlassFish Server Open Source Edition 4.1.1 - (...) [HKLM][64Bits] -- nbi-glassfish-mod-4.1.1.0.1 O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Drive - (.Google, Inc..) [HKLM][64Bits] -- {D7269C20-B3CE-4CD0-8E88-3D307D3BD41A} =>.Google, Inc. O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: IAR Embedded Workbench for ARM Kickstart - (.IAR Systems.) [HKLM][64Bits] -- {504ACD85-9BE3-43A0-B080-F9E298D5387D} O42 - Logiciel: IIS 8.0 Express - (.Microsoft Corporation.) [HKLM][64Bits] -- {7BF61FA9-BDFB-4563-98AD-FCB0DA28CCC7} =>.Microsoft Corporation O42 - Logiciel: Intel® Hardware Accelerated Execution Manager - (.Intel Corporation.) [HKLM][64Bits] -- {ECCB31F5-435D-4F37-A98D-5854D3C62718} =>.Intel Corporation O42 - Logiciel: Intel® RealSense™ SDK 2014 Runtime (x64): Core - (.Intel Corporation.) [HKLM][64Bits] -- {37D41A97-6B02-4C30-8753-85107BE1D674} =>.Intel Corporation O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM][64Bits] -- Internet Download Manager =>.Tonec Inc.® O42 - Logiciel: IObit Malware Fighter 4 - (.IObit.) [HKLM][64Bits] -- IObit Malware Fighter_is1 =>.IObit Information Technology® O42 - Logiciel: IObit Uninstaller - (.IObit.) [HKLM][64Bits] -- IObitUninstall =>.IObit Information Technology® O42 - Logiciel: Java 8 Update 77 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86418077F0} =>.Oracle Corporation O42 - Logiciel: Java 8 Update 92 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F86418092F0} =>.Oracle Corporation O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation O42 - Logiciel: Java SE Development Kit 8 Update 45 (64-bit) - (.Oracle Corporation.) [HKLM][64Bits] -- {64A3A4F4-B792-11D6-A78A-00B0D0180450} =>.Oracle Corporation O42 - Logiciel: LispWorks 6.1 Personal - (.LispWorks Ltd.) [HKLM][64Bits] -- {844E2E8E-ED3D-4054-99C7-26ED070BDEFB} O42 - Logiciel: LocalESPCui for en-us Dev12 - (.Microsoft.) [HKLM][64Bits] -- {B1C38F27-D377-8C98-D98D-29B67C0B978D} =>.Microsoft O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM][64Bits] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196} =>.Lenovo Group Limited O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft DirectX SDK (June 2010) - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft DirectX SDK (June 2010) =>.Microsoft Corporation® O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F} =>.Microsoft Corporation O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits] -- {67F42018-F647-4D3C-BE62-F8CB4FE2FCD5} =>.Microsoft Corporation O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation O42 - Logiciel: Microsoft Silverlight 5 SDK - (.Microsoft Corporation.) [HKLM][64Bits] -- {E1FBB3D4-ADB0-4949-B101-855DA061C735} =>.Microsoft Corporation O42 - Logiciel: Microsoft System CLR Types for SQL Server 2012 - (.Microsoft Corporation.) [HKLM][64Bits] -- {070C38AC-05CE-43DF-9A20-141332F6AB2B} =>.Microsoft Corporation O42 - Logiciel: Microsoft System CLR Types for SQL Server 2012 (x64) - (.Microsoft Corporation.) [HKLM][64Bits] -- {05FF8209-C4F1-4C77-BC28-791653156D20} =>.Microsoft Corporation O42 - Logiciel: Microsoft System CLR Types for SQL Server 2014 - (.Microsoft Corporation.) [HKLM][64Bits] -- {4AEB505C-95E1-4964-9B64-8D27F3186D30} =>.Microsoft Corporation O42 - Logiciel: Microsoft System CLR Types for SQL Server 2014 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C06D6DB-A391-4686-B050-99CC522A7843} =>.Microsoft Corporation O42 - Logiciel: Microsoft Web Deploy 3.5 - (.Microsoft Corporation.) [HKLM][64Bits] -- {69A998C5-00A9-42CA-AB4E-C31CFFCD9251} =>.Microsoft Corporation O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Mobile Broadband HL Service - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- Mobile Broadband HL Service =>.Huawei Technologies Co., Ltd.® O42 - Logiciel: Mozilla Firefox 35.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 35.0.1 (x86 fr) =>.Mozilla Corporation® O42 - Logiciel: MPC-HC 1.7.10 (64-bit) - (.MPC-HC Team.) [HKLM][64Bits] -- {2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1 =>.Open Source Developer, Fotis ZAFIROPOULOS® O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM][64Bits] -- {24DB3A5E-0BC8-11E5-9A27-F04DA23A5C58} =>.Sony Creative Software Inc. O42 - Logiciel: MySQL Connector C++ 1.1.7 - (.Oracle and/or its affiliates.) [HKLM][64Bits] -- {A4310FCD-95D5-49B7-91BA-9A079F07B167} O42 - Logiciel: MySQL Connector J - (.Oracle Corporation.) [HKLM][64Bits] -- {305FFC5F-8338-4F1A-9922-D0DB44E21648} =>.Oracle Corporation O42 - Logiciel: MySQL Connector Net 6.9.8 - (.Oracle.) [HKLM][64Bits] -- {D01DF7C8-6F2D-46BC-923B-418233EB1D14} =>.Oracle O42 - Logiciel: MySQL Connector/C 6.1 - (.Oracle Corporation.) [HKLM][64Bits] -- {ABC3A516-54E3-414B-B501-762E7FB2F9D5} =>.Oracle Corporation O42 - Logiciel: MySQL Connector/ODBC 5.3 - (.Oracle Corporation.) [HKLM][64Bits] -- {A1991404-2634-47E1-BC45-8F3B5014B1D1} =>.Oracle Corporation O42 - Logiciel: MySQL Documents 5.7 - (.Oracle Corporation.) [HKLM][64Bits] -- {AF381002-F45F-4D28-BDEA-C2BF8514619A} =>.Oracle Corporation O42 - Logiciel: MySQL Examples and Samples 5.7 - (.Oracle Corporation.) [HKLM][64Bits] -- {2C022F48-5733-4A1E-8D90-EE218CD8A2A7} =>.Oracle Corporation O42 - Logiciel: MySQL Fabric 1.5.6 & MySQL Utilities 1.5.6 - (.Oracle Corporation.) [HKLM][64Bits] -- {C914EB85-F0E6-4150-9FA0-99B716A15EAF} =>.Oracle Corporation O42 - Logiciel: MySQL For Excel 1.3.6 - (.Oracle.) [HKLM][64Bits] -- {DC8733F3-63A6-43F4-8C38-637071FB6D5F} =>.Oracle O42 - Logiciel: MySQL for Visual Studio 1.2.6 - (.Oracle.) [HKLM][64Bits] -- {D885AD96-9178-4CF2-836C-33AE57A57427} =>.Oracle O42 - Logiciel: MySQL Installer for Windows - Community - (.Oracle Corporation.) [HKLM][64Bits] -- {53524738-60C3-4ACA-A47A-9CB615E73B5C} =>.Oracle Corporation O42 - Logiciel: MySQL Notifier 1.1.6 - (.Oracle.) [HKLM][64Bits] -- {CB76A6E9-B184-461D-A8BE-7D0D73199545} =>.Oracle O42 - Logiciel: MySQL Server 5.7 - (.Oracle Corporation.) [HKLM][64Bits] -- {2B08DE80-EE6F-489E-88CA-100046FB9763} =>.Oracle Corporation O42 - Logiciel: Need for Speed™ Most Wanted - (.Electronic Arts.) [HKLM][64Bits] -- {FB0127F3-985B-44CE-AE29-378CAF60B361} =>.Electronic Arts® O42 - Logiciel: Node.js - (.Joyent, Inc. and other Node contributors.) [HKLM][64Bits] -- {2D41A012-35EE-4724-AE8E-E592EDD9F89D} =>.Joyent, Inc. and other Node contributors O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++ =>.Notepad++ Team O42 - Logiciel: Opera Stable 36.0.2130.65 - (.Opera Software.) [HKLM][64Bits] -- Opera 36.0.2130.65 =>.Opera Software ASA® O42 - Logiciel: Oracle Data Provider for .NET Help - (.Oracle Corporation.) [HKLM][64Bits] -- {6AA003BF-73E5-4911-ADB7-71DD5674DDD4} =>.Oracle Corporation O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin =>.Electronic Arts, Inc. O42 - Logiciel: Pacestar UML Diagrammer Trial - (.Pacestar Software.) [HKLM][64Bits] -- Pacestar UML Diagrammer =>.Pacestar Software O42 - Logiciel: Prerequisites for SSDT - (.Microsoft Corporation.) [HKLM][64Bits] -- {21373064-AD95-48DB-A32E-0D9E08EF7355} =>.Microsoft Corporation O42 - Logiciel: Prerequisites for SSDT - (.Microsoft Corporation.) [HKLM][64Bits] -- {35C1D9D6-87C0-46A3-B1B4-EDBCC063221C} =>.Microsoft Corporation O42 - Logiciel: Pro Evolution Soccer 2016 - (.Black Box.) [HKLM][64Bits] -- {XXXXXXXX-XXXX-XXXX-XXXX-BLACKBOX0063} =>.Black Box O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconduct Corp..) [HKLM][64Bits] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp® O42 - Logiciel: Recuva - (.Piriform.) [HKLM][64Bits] -- Recuva =>.Piriform Ltd® O42 - Logiciel: SafeZone Stable 1.48.2066.101 - (.Avast Software.) [HKLM][64Bits] -- SafeZone 1.48.2066.101 =>.AVAST Software s.r.o.® O42 - Logiciel: Setup - (...) [HKLM][64Bits] -- {7ADF667E-E14D-4D2C-827C-B0108F0D93BC} =>PUP.Optional.DesktopPlay O42 - Logiciel: Setup - (...) [HKLM][64Bits] -- {7ADF667E-E14D-4D2C-827C-B0108F0D93BC} O42 - Logiciel: Skype™ 7.6 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} =>.Skype Technologies S.A. O42 - Logiciel: Smart Defrag 5 - (.IObit.) [HKLM][64Bits] -- Smart Defrag_is1 =>.IObit Information Technology® O42 - Logiciel: Support - (.Adobe.) [HKLM][64Bits] -- {C9AED754-BED9-4F5C-9E74-587D3E7B97CC} =>.Adobe O42 - Logiciel: Surfing Protection - (.IObit.) [HKLM][64Bits] -- IObit Surfing Protection_is1 =>.IObit Information Technology® O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated O42 - Logiciel: TorrentsTime Media Player - (.Torrents Time.) [HKLM][64Bits] -- TorrentsTime Media Player_is1 O42 - Logiciel: Unified Remote - (.Unified Intents AB.) [HKLM][64Bits] -- {415B4714-4F8C-49C6-B310-881EAF892CFB}_is1 =>.Unified Intents AB® O42 - Logiciel: Unlocker 1.9.2 - (.Cedrick Collomb.) [HKLM][64Bits] -- Unlocker =>.Cedrick Collomb O42 - Logiciel: Update for (KB2504637) - (.Microsoft Corporation.) [HKLM][64Bits] -- {CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637 =>.Microsoft Corporation O42 - Logiciel: Update for Skype for Business 2015 (KB3039776) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{8B3A877E-1B73-464A-AD21-9F26A0682AC6} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3114831) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{319F14FC-24A0-4A07-B84C-C7450AF9422F} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3114831) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUSR_{319F14FC-24A0-4A07-B84C-C7450AF9422F} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3114831) 64-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{319F14FC-24A0-4A07-B84C-C7450AF9422F} =>.Microsoft Corporation® O42 - Logiciel: Vegas Pro 13.0 (64-bit) - (.Sony.) [HKLM][64Bits] -- {1F535D6E-0BC8-11E5-B2CB-F04DA23A5C58} =>.Sony O42 - Logiciel: Viber - (.Viber Media Inc..) [HKCU][64Bits] -- {b44f5a1f-ca34-4def-9c69-9aabd288bcb6} {5AECF5A58104948997EF21A8F3D44AAE} O42 - Logiciel: Viber - (.Viber Media Inc..) [HKLM][64Bits] -- {B0EA596A-BA3B-4708-9F8A-29063B572292} O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484} =>.AVG Technologies O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} =>.AVG Technologies CZ, s.r.o. O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: WampServer 2.5 - (.Hervé Leclerc (HeL).) [HKLM][64Bits] -- WampServer 2_is1 =>.Hervé Leclerc (HeL) O42 - Logiciel: WCF RIA Services V1.0 SP2 - (.Microsoft Corporation.) [HKLM][64Bits] -- {5D8DD6A8-C4D7-4554-93F9-F1CC28C72600} =>.Microsoft Corporation O42 - Logiciel: WinPcap 4.1.3 - (.Riverbed Technology, Inc..) [HKLM][64Bits] -- WinPcapInst =>.Riverbed Technology, Inc. O42 - Logiciel: WinRAR 5.11 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH® O42 - Logiciel: Wireshark 2.0.1 (32-bit) - (.The Wireshark developer community, https://www.wireshark.org.) [HKLM][64Bits] -- Wireshark =>.Wireshark Foundation® ---\\ HKCU & HKLM Software Keys (221) - 27s HKLM\SOFTWARE\Wow6432Node\"echo_installer"/n HKLM\SOFTWARE\Wow6432Node\3f72f5e1-d396-8198-6325-6b1cc4f639ec =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\7-Zip HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\Altera Corporation HKLM\SOFTWARE\Wow6432Node\AppDataLow HKLM\SOFTWARE\Wow6432Node\Arcai HKLM\SOFTWARE\Wow6432Node\ArenaHD =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Atheros HKLM\SOFTWARE\Wow6432Node\ATI HKLM\SOFTWARE\Wow6432Node\ATI Technologies HKLM\SOFTWARE\Wow6432Node\AVAST Software HKLM\SOFTWARE\Wow6432Node\Avg HKLM\SOFTWARE\Wow6432Node\BackupOptions HKLM\SOFTWARE\Wow6432Node\Baidu HKLM\SOFTWARE\Wow6432Node\CDDB HKLM\SOFTWARE\Wow6432Node\Chedot =>PUP.Optional.ChedotBrowser HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.2cV25.10 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\CLSYSTEM HKLM\SOFTWARE\Wow6432Node\Cygwin HKLM\SOFTWARE\Wow6432Node\Data Fellows HKLM\SOFTWARE\Wow6432Node\Disc Soft HKLM\SOFTWARE\Wow6432Node\downchecker =>PUP.Optional.DownChecker HKLM\SOFTWARE\Wow6432Node\EA Games HKLM\SOFTWARE\Wow6432Node\Electronic Arts HKLM\SOFTWARE\Wow6432Node\FFPluginHp =>PUP.Optional.SweetSearch HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\HaaliMkx HKLM\SOFTWARE\Wow6432Node\hdcode HKLM\SOFTWARE\Wow6432Node\HighDefAction =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Huawei technologies HKLM\SOFTWARE\Wow6432Node\IAR Systems HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\Internet Download Manager HKLM\SOFTWARE\Wow6432Node\IObit HKLM\SOFTWARE\Wow6432Node\istartpageingSoftware =>PUP.Optional.IstartPageing HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\KasperskyLab HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Labcenter Electronics HKLM\SOFTWARE\Wow6432Node\Lenovo HKLM\SOFTWARE\Wow6432Node\LispWorks HKLM\SOFTWARE\Wow6432Node\LogMeInRescueCallingCard HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\McAfee HKLM\SOFTWARE\Wow6432Node\McAfee.com HKLM\SOFTWARE\Wow6432Node\mcafeeupdater HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\MT Solution HKLM\SOFTWARE\Wow6432Node\mtApphcuotloS HKLM\SOFTWARE\Wow6432Node\mtSaophase HKLM\SOFTWARE\Wow6432Node\MySQL HKLM\SOFTWARE\Wow6432Node\MySQL AB HKLM\SOFTWARE\Wow6432Node\Nero HKLM\SOFTWARE\Wow6432Node\Node.js HKLM\SOFTWARE\Wow6432Node\Notepad++ HKLM\SOFTWARE\Wow6432Node\Ntpad HKLM\SOFTWARE\Wow6432Node\Nuance HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\Opera Software HKLM\SOFTWARE\Wow6432Node\ORACLE HKLM\SOFTWARE\Wow6432Node\Origin HKLM\SOFTWARE\Wow6432Node\Origin Games HKLM\SOFTWARE\Wow6432Node\PicexaSvc =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\PJ HKLM\SOFTWARE\Wow6432Node\PowerPivot HKLM\SOFTWARE\Wow6432Node\Realtek HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\Reg HKLM\SOFTWARE\Wow6432Node\rockstar games HKLM\SOFTWARE\Wow6432Node\Rtp HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SMI HKLM\SOFTWARE\Wow6432Node\SoftwareUpdater =>PUP.Optional.SoftwareUpdater HKLM\SOFTWARE\Wow6432Node\Sony Creative Software HKLM\SOFTWARE\Wow6432Node\SpeedBrowser =>PUP.Optional.SpeedBrowser HKLM\SOFTWARE\Wow6432Node\SpringFiles =>.Superfluous.SpringFiles HKLM\SOFTWARE\Wow6432Node\SRS Labs HKLM\SOFTWARE\Wow6432Node\Systweak =>.Superfluous.Systweak HKLM\SOFTWARE\Wow6432Node\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\Wow6432Node\ThinPrint HKLM\SOFTWARE\Wow6432Node\TorrentsTime HKLM\SOFTWARE\Wow6432Node\TorrentsTimeConfig HKLM\SOFTWARE\Wow6432Node\trex HKLM\SOFTWARE\Wow6432Node\TTime HKLM\SOFTWARE\Wow6432Node\UCBrowser HKLM\SOFTWARE\Wow6432Node\UCBrowserPID HKLM\SOFTWARE\Wow6432Node\updated_list HKLM\SOFTWARE\Wow6432Node\VMware, Inc. HKLM\SOFTWARE\Wow6432Node\WdsManPro =>PUP.Optional.WdsManPro HKLM\SOFTWARE\Wow6432Node\WinPcap HKLM\SOFTWARE\Wow6432Node\WinPj HKLM\SOFTWARE\Wow6432Node\WLITE HKLM\SOFTWARE\Wow6432Node\WXLITE HKLM\SOFTWARE\Wow6432Node\YorkNewCin =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\7-Zip HKCU\SOFTWARE\AC3filter HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\ALLCinema HKCU\SOFTWARE\Alnaddy =>PUP.Optional.Alnaddy HKCU\SOFTWARE\Apowersoft HKCU\SOFTWARE\Appcelerator HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\ArenaHD =>PUP.Optional.CrossRider HKCU\SOFTWARE\Atheros HKCU\SOFTWARE\ATI HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\Baidu HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\Browser =>PUP.Optional.CrossRider HKCU\SOFTWARE\Cain HKCU\SOFTWARE\Caphyon HKCU\SOFTWARE\Chedot =>PUP.Optional.ChedotBrowser HKCU\SOFTWARE\CoinisRevShare HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser HKCU\SOFTWARE\Dashlane HKCU\SOFTWARE\Disc Soft HKCU\SOFTWARE\DownloadManager HKCU\SOFTWARE\Driver Pro HKCU\SOFTWARE\EffeTech HKCU\SOFTWARE\Electronic Arts HKCU\SOFTWARE\EMU HKCU\SOFTWARE\Eraser HKCU\SOFTWARE\eSupport.com =>PUP.Optional.eSupport HKCU\SOFTWARE\Facebook HKCU\SOFTWARE\ForceInterfaceCOM HKCU\SOFTWARE\Free Word To PDF HKCU\SOFTWARE\GetFLV HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\GPL Ghostscript HKCU\SOFTWARE\Haali HKCU\SOFTWARE\HighDefAction =>PUP.Optional.CrossRider HKCU\SOFTWARE\IAR Systems HKCU\SOFTWARE\IM HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\IMDownloader HKCU\SOFTWARE\InetStat =>PUP.Optional.InetStat HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions HKCU\SOFTWARE\InstallPath HKCU\SOFTWARE\Intel Corporation HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\Jordan Russell HKCU\SOFTWARE\KasperskyLab HKCU\SOFTWARE\KasperskyLabSetup HKCU\SOFTWARE\Kingsoft HKCU\SOFTWARE\Lenovo HKCU\SOFTWARE\Licenses HKCU\SOFTWARE\LispWorks HKCU\SOFTWARE\LogMeInRescueCallingCard HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Magicbit HKCU\SOFTWARE\MarBit HKCU\SOFTWARE\MiniTool Solution Ltd. HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\MPC-HC HKCU\SOFTWARE\mtApphcuotloS HKCU\SOFTWARE\mtSaophase HKCU\SOFTWARE\mtViafresh HKCU\SOFTWARE\MySQL HKCU\SOFTWARE\MySQL AB HKCU\SOFTWARE\Nero HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Nitro HKCU\SOFTWARE\Node.js HKCU\SOFTWARE\NpApp =>PUP.Optional.PastaLeads HKCU\SOFTWARE\OB HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\Pacestar Software HKCU\SOFTWARE\PC Remote HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\PPTAssist =>.Superfluous.ZhuhaiKingsoft HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\Reg HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\RegisteredApplicationsEx =>PUP.Optional.SfKpCouponApp HKCU\SOFTWARE\RemoteMouse.net HKCU\SOFTWARE\Rtp HKCU\SOFTWARE\skype HKCU\SOFTWARE\SkypeRS HKCU\SOFTWARE\SmileysWeLove HKCU\SOFTWARE\Sony Creative Software HKCU\SOFTWARE\Sparx Systems HKCU\SOFTWARE\speed browser =>PUP.Optional.SpeedBrowser HKCU\SOFTWARE\SpringFiles =>.Superfluous.SpringFiles HKCU\SOFTWARE\Squeaky =>PUP.Optional.Squeaky HKCU\SOFTWARE\StarUML HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\systweak =>.Superfluous.Systweak HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\The Silicon Realms Toolworks HKCU\SOFTWARE\TorrentsTime HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\UCBrowser HKCU\SOFTWARE\UCBrowserPID HKCU\SOFTWARE\uTorrentPlus HKCU\SOFTWARE\Valve HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\Viber HKCU\SOFTWARE\VSRevoGroup HKCU\SOFTWARE\WebApp =>.Superfluous.Downloader HKCU\SOFTWARE\WeDlMngr =>PUP.Optional.weDownloadManager HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Wintertree HKCU\SOFTWARE\Wireshark HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\YorkNewCin =>PUP.Optional.CrossRider HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\JavaSoft HKCU\SOFTWARE\AppDataLow\Software\ThinPrint ---\\ Contenu des dossiers Programmes (588) - 685s O43 - CFD: 27/03/2016 - [] D -- C:\Program Files\Acrylic Wi-Fi Home O43 - CFD: 30/05/2015 - [] AD -- C:\Program Files\adobe O43 - CFD: 25/04/2015 - [] D -- C:\Program Files\Adobe2014 =>.Adobe Systems Incorporated® O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\AMD =>.Advanced Micro Devices, Inc.® O43 - CFD: 28/05/2015 - [0] D -- C:\Program Files\Android O43 - CFD: 25/05/2015 - [] D -- C:\Program Files\Android studio =>.Google Inc® O43 - CFD: 27/03/2016 - [0] AD -- C:\Program Files\Application Verifier O43 - CFD: 04/05/2016 - [] AD -- C:\Program Files\ATI Technologies =>.Advanced Micro Devices, Inc.® O43 - CFD: 21/05/2016 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software s.r.o.® O43 - CFD: 29/11/2015 - [] AD -- C:\Program Files\CCleaner =>.Piriform Ltd® O43 - CFD: 21/05/2016 - [] D -- C:\Program Files\Common Files O43 - CFD: 26/10/2015 - [] D -- C:\Program Files\Concom O43 - CFD: 21/09/2015 - [] D -- C:\Program Files\Controller O43 - CFD: 01/05/2016 - [] D -- C:\Program Files\CPUID =>.CPUID® O43 - CFD: 16/05/2015 - [] D -- C:\Program Files\eclipse =>.Eclipse.org Foundation, Inc.® O43 - CFD: 21/10/2014 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 24/11/2015 - [] AD -- C:\Program Files\glassfish-4.1.1 O43 - CFD: 29/11/2015 - [] AD -- C:\Program Files\IIS =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] AD -- C:\Program Files\IIS Express =>.Microsoft Corporation® O43 - CFD: 20/05/2016 - [] D -- C:\Program Files\Intel =>.Intel(R) Software Development Products® O43 - CFD: 14/05/2016 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 04/05/2016 - [] D -- C:\Program Files\Java =>.Oracle America, Inc.® O43 - CFD: 31/03/2016 - [] AD -- C:\Program Files\KMSpico =>HackTool.KMSpico O43 - CFD: 22/10/2014 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation® O43 - CFD: 22/10/2014 - [] AD -- C:\Program Files\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 01/02/2016 - [] AD -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] AD -- C:\Program Files\Microsoft SQL Server =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] AD -- C:\Program Files\Microsoft SQL Server Compact Edition O43 - CFD: 15/05/2015 - [] D -- C:\Program Files\Microsoft Visual Studio 12.0 O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Microsoft.NET O43 - CFD: 09/04/2016 - [] AD -- C:\Program Files\MPC-HC =>.Open Source Developer, Fotis ZAFIROPOULOS® O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\MSBuild O43 - CFD: 05/05/2016 - [] D -- C:\Program Files\MySQL O43 - CFD: 28/03/2016 - [] D -- C:\Program Files\NetBeans 8.1 O43 - CFD: 20/05/2016 - [0] D -- C:\Program Files\Nitro O43 - CFD: 25/04/2015 - [0] D -- C:\Program Files\onOne Software O43 - CFD: 21/05/2016 - [] D -- C:\Program Files\Realtek =>.Andrea Electronics® O43 - CFD: 15/05/2016 - [] AD -- C:\Program Files\Recuva =>.Piriform Ltd® O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 05/05/2016 - [0] D -- C:\Program Files\Rockstar Games O43 - CFD: 17/02/2016 - [] D -- C:\Program Files\Sony O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Synaptics =>.Synaptics Incorporated® O43 - CFD: 22/08/2013 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Unlocker O43 - CFD: 03/11/2014 - [] D -- C:\Program Files\VideoLAN O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Windows Defender O43 - CFD: 14/05/2016 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 10/03/2016 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 10/03/2016 - [] D -- C:\Program Files\Windows Multimedia Platform O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Windows NT O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 10/03/2016 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 30/10/2015 - [] SHD -- C:\Program Files\Windows Sidebar O43 - CFD: 20/05/2016 - [] HD -- C:\Program Files\WindowsApps O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files\WindowsPowerShell O43 - CFD: 22/10/2014 - [] AD -- C:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 14/10/2015 - [] D -- C:\Program Files (x86)\50CCouppons =>PUP.Optional.50Coupons O43 - CFD: 29/08/2015 - [] D -- C:\Program Files (x86)\50Couponss =>PUP.Optional.50Coupons O43 - CFD: 05/08/2015 - [] D -- C:\Program Files (x86)\7-Zip O43 - CFD: 27/02/2015 - [] D -- C:\Program Files (x86)\7SSAve O43 - CFD: 14/05/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Microsoft Corporation® O43 - CFD: 11/06/2015 - [] D -- C:\Program Files (x86)\AllCheeaepiPraice =>PUP.Optional.AllCheapPrice O43 - CFD: 11/06/2015 - [] D -- C:\Program Files (x86)\AllDAYePrIcE O43 - CFD: 11/06/2015 - [] D -- C:\Program Files (x86)\AllDayPrICe O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\AppInsights O43 - CFD: 27/03/2016 - [0] AD -- C:\Program Files (x86)\Application Verifier O43 - CFD: 04/05/2016 - [] AD -- C:\Program Files (x86)\ATI Technologies O43 - CFD: 04/05/2016 - [] D -- C:\Program Files (x86)\badu O43 - CFD: 04/05/2016 - [] D -- C:\Program Files (x86)\baidu O43 - CFD: 08/07/2015 - [] AD -- C:\Program Files (x86)\Balsamiq Mockups 3 O43 - CFD: 08/07/2015 - [] D -- C:\Program Files (x86)\BeesstSaoveForYYou =>PUP.Optional.BestSaveForYou O43 - CFD: 28/07/2015 - [] D -- C:\Program Files (x86)\BEestSaoveForYuou =>PUP.Optional.BestSaveForYou O43 - CFD: 13/11/2015 - [] D -- C:\Program Files (x86)\BeStSauveForYoiu =>PUP.Optional.BestSaveForYou O43 - CFD: 03/03/2015 - [] D -- C:\Program Files (x86)\BestSaveFoRYouu =>PUP.Optional.BestSaveForYou O43 - CFD: 13/11/2015 - [] D -- C:\Program Files (x86)\BestuSAveFForYou =>PUP.Optional.BestSaveForYou O43 - CFD: 11/06/2015 - [0] D -- C:\Program Files (x86)\BorderlineEdit O43 - CFD: 22/02/2016 - [] D -- C:\Program Files (x86)\Cain O43 - CFD: 30/09/2015 - [] D -- C:\Program Files (x86)\CamStudio 2.7 O43 - CFD: 06/03/2015 - [] D -- C:\Program Files (x86)\ceopunk O43 - CFD: 09/07/2015 - [0] D -- C:\Program Files (x86)\Chedot O43 - CFD: 28/07/2015 - [] D -- C:\Program Files (x86)\CheeeapMe =>PUP.Optional.CheapMe O43 - CFD: 11/11/2015 - [] AD -- C:\Program Files (x86)\Cisco Packet Tracer 6.2sv O43 - CFD: 13/11/2015 - [] D -- C:\Program Files (x86)\Clickable Links O43 - CFD: 21/05/2016 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 16/07/2015 - [0] D -- C:\Program Files (x86)\Coupon Time =>PUP.Optional.CouponTime O43 - CFD: 14/07/2015 - [0] D -- C:\Program Files (x86)\couponight O43 - CFD: 31/05/2015 - [] D -- C:\Program Files (x86)\DAEMON Tools Lite =>.Disc Soft Ltd® O43 - CFD: 06/03/2015 - [] D -- C:\Program Files (x86)\ddollaRkkeepoer =>PUP.Optional.DollarKeeper O43 - CFD: 12/12/2015 - [0] D -- C:\Program Files (x86)\DebugMode O43 - CFD: 19/11/2014 - [] D -- C:\Program Files (x86)\Dev-Cpp O43 - CFD: 16/04/2015 - [] D -- C:\Program Files (x86)\DOSBox-0.74 O43 - CFD: 25/04/2015 - [0] D -- C:\Program Files (x86)\DownSave =>PUP.Optional.DownSave O43 - CFD: 27/05/2015 - [] D -- C:\Program Files (x86)\EasyPHP-DevServer-14.1VC11 O43 - CFD: 27/02/2015 - [] D -- C:\Program Files (x86)\EnjoyCCoupOn =>PUP.Optional.EnjoyCoupon O43 - CFD: 05/05/2016 - [0] D -- C:\Program Files (x86)\eSupport.com =>PUP.Optional.eSupport O43 - CFD: 03/11/2015 - [] D -- C:\Program Files (x86)\Exploremedia =>PUP.Optional.Generic O43 - CFD: 04/11/2015 - [] D -- C:\Program Files (x86)\ExstraCouupon =>PUP.Optional.ExtraCoupon O43 - CFD: 21/12/2015 - [] D -- C:\Program Files (x86)\F3738680-1445878030-81E2-3AFA-7054D2231A7F =>PUP.Optional.CrossRider O43 - CFD: 29/04/2016 - [] D -- C:\Program Files (x86)\fabFORCE O43 - CFD: 12/08/2015 - [0] D -- C:\Program Files (x86)\Facepad for O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\FiendBEstDeal =>PUP.Optional.FindBestDeal O43 - CFD: 13/11/2015 - [] D -- C:\Program Files (x86)\FindBEEstDeal =>PUP.Optional.FindBestDeal O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\FindBeStDeal =>PUP.Optional.FindBestDeal O43 - CFD: 31/05/2015 - [] D -- C:\Program Files (x86)\FindBestDeeal =>PUP.Optional.Deeal O43 - CFD: 17/03/2015 - [] D -- C:\Program Files (x86)\FuonDeals =>PUP.Optional.FunDeals O43 - CFD: 19/05/2015 - [] D -- C:\Program Files (x86)\Geany O43 - CFD: 27/03/2016 - [] AD -- C:\Program Files (x86)\GetFLV O43 - CFD: 22/03/2016 - [] AD -- C:\Program Files (x86)\Git O43 - CFD: 02/09/2015 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 27/02/2015 - [] D -- C:\Program Files (x86)\Google Drive Quick Create O43 - CFD: 06/03/2015 - [] D -- C:\Program Files (x86)\GreaTTSeAve4U =>PUP.Optional.GreatSave4U O43 - CFD: 04/11/2015 - [] D -- C:\Program Files (x86)\HomeworkSimplified O43 - CFD: 13/11/2015 - [] D -- C:\Program Files (x86)\HoofSounds O43 - CFD: 27/03/2016 - [0] AD -- C:\Program Files (x86)\HTML Help Workshop O43 - CFD: 26/02/2016 - [] D -- C:\Program Files (x86)\IAR Systems O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\IIS =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] AD -- C:\Program Files (x86)\IIS Express =>.Microsoft Corporation® O43 - CFD: 22/04/2015 - [0] D -- C:\Program Files (x86)\IndepthEdit O43 - CFD: 20/05/2016 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.Realtek Semiconductor Corp® O43 - CFD: 04/11/2015 - [] D -- C:\Program Files (x86)\Internet Download Manager O43 - CFD: 14/05/2016 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 04/05/2016 - [] D -- C:\Program Files (x86)\IObit =>.IObit Information Technology® O43 - CFD: 08/06/2015 - [] D -- C:\Program Files (x86)\IwillriL Unnoficial Pocket Client O43 - CFD: 06/02/2015 - [] D -- C:\Program Files (x86)\Labcenter Electronics O43 - CFD: 11/05/2015 - [] D -- C:\Program Files (x86)\Lenovo =>.LENOVO® O43 - CFD: 27/04/2015 - [0] D -- C:\Program Files (x86)\LighterInit =>PUP.Optional.Multiplug O43 - CFD: 02/02/2016 - [] AD -- C:\Program Files (x86)\LispWorks Personal {11212140D5C11AE214E321759218643C8E57} O43 - CFD: 09/05/2016 - [0] D -- C:\Program Files (x86)\McAfee O43 - CFD: 03/03/2015 - [] D -- C:\Program Files (x86)\MetaProducts Offline Explorer integration O43 - CFD: 22/10/2014 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Microsoft ASP.NET O43 - CFD: 25/11/2014 - [] D -- C:\Program Files (x86)\Microsoft DirectX SDK (June 2010) =>.Microsoft Corporation® O43 - CFD: 24/10/2014 - [] D -- C:\Program Files (x86)\Microsoft Games for Windows - LIVE =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Microsoft Help Viewer =>.Microsoft Corporation® O43 - CFD: 22/10/2014 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] AD -- C:\Program Files (x86)\Microsoft SDKs =>.Microsoft Corporation® O43 - CFD: 01/02/2016 - [] AD -- C:\Program Files (x86)\Microsoft Silverlight =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] AD -- C:\Program Files (x86)\Microsoft SQL Server =>.Microsoft Corporation® O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 26/01/2016 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio .NET O43 - CFD: 29/11/2015 - [] AD -- C:\Program Files (x86)\Microsoft Visual Studio 11.0 O43 - CFD: 19/03/2016 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 12.0 O43 - CFD: 19/03/2016 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 14.0 O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Microsoft WCF Data Services O43 - CFD: 15/05/2015 - [] AD -- C:\Program Files (x86)\Microsoft Web Tools O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Microsoft XDE O43 - CFD: 29/11/2015 - [] AD -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 20/02/2016 - [] AD -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla Corporation® O43 - CFD: 29/11/2015 - [] AD -- C:\Program Files (x86)\MSBuild O43 - CFD: 20/03/2016 - [] D -- C:\Program Files (x86)\MySQL O43 - CFD: 18/02/2015 - [] D -- C:\Program Files (x86)\NCapture O43 - CFD: 31/10/2015 - [] D -- C:\Program Files (x86)\netcut O43 - CFD: 25/05/2015 - [] D -- C:\Program Files (x86)\nodejs O43 - CFD: 06/06/2015 - [] D -- C:\Program Files (x86)\Notepad++ =>.Notepad++® O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\NuGet O43 - CFD: 23/07/2015 - [] D -- C:\Program Files (x86)\OLBPre =>PUP.Optional.MyPCBackup O43 - CFD: 25/04/2015 - [0] D -- C:\Program Files (x86)\onOne Software O43 - CFD: 13/04/2016 - [] AD -- C:\Program Files (x86)\Opera =>.Opera Software ASA® O43 - CFD: 26/01/2016 - [] D -- C:\Program Files (x86)\Oracle O43 - CFD: 15/05/2016 - [] D -- C:\Program Files (x86)\Origin =>.Electronic Arts, Inc.® O43 - CFD: 09/02/2016 - [] D -- C:\Program Files (x86)\Origin Games =>.Electronic Arts® O43 - CFD: 09/07/2015 - [] D -- C:\Program Files (x86)\Pacestar UML Diagrammer O43 - CFD: 27/03/2016 - [] AD -- C:\Program Files (x86)\Pro Evolution Soccer 2015 O43 - CFD: 20/05/2016 - [] D -- C:\Program Files (x86)\Pro Evolution Soccer 2016 O43 - CFD: 25/08/2015 - [0] D -- C:\Program Files (x86)\ProcessGeneration O43 - CFD: 06/03/2015 - [] D -- C:\Program Files (x86)\RandoomPrice =>PUP.Optional.RandomPrice O43 - CFD: 11/06/2015 - [0] D -- C:\Program Files (x86)\ReactorStasis O43 - CFD: 20/05/2016 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek Semiconductor Corp® O43 - CFD: 29/11/2015 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 10/07/2015 - [0] D -- C:\Program Files (x86)\RelayDouble O43 - CFD: 11/06/2015 - [0] D -- C:\Program Files (x86)\RelayEdit =>PUP.Optional.RelayEdit O43 - CFD: 27/04/2015 - [0] D -- C:\Program Files (x86)\RelayKeeper O43 - CFD: 05/05/2016 - [0] D -- C:\Program Files (x86)\Rockstar Games O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\SaleePelus =>PUP.Optional.SalePlus O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\SalePliuaS =>PUP.Optional.SalePlus O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\SalleoPleuS =>PUP.Optional.SalePlus O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\SallePLus =>PUP.Optional.SalePlus O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\SaloePlaues =>PUP.Optional.SalePlus O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\SaolePlus =>PUP.Optional.SalePlus O43 - CFD: 31/05/2015 - [] D -- C:\Program Files (x86)\SaveLotts =>PUP.Optional.SaveLots O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\SeallePlUs =>PUP.Optional.SalePlus O43 - CFD: 27/02/2015 - [] D -- C:\Program Files (x86)\Search YouTube =>PUP.Optional.SearchYouTube O43 - CFD: 31/05/2015 - [] D -- C:\Program Files (x86)\Sega O43 - CFD: 21/09/2015 - [0] D -- C:\Program Files (x86)\SGAT O43 - CFD: 18/02/2015 - [] D -- C:\Program Files (x86)\ShopDrOPP =>PUP.Optional.ShopDrop O43 - CFD: 31/05/2015 - [] D -- C:\Program Files (x86)\ShoppDroP =>PUP.Optional.ShopDrop O43 - CFD: 17/07/2015 - [] RD -- C:\Program Files (x86)\Skype =>.Skype Software Sarl® O43 - CFD: 13/11/2015 - [] D -- C:\Program Files (x86)\Smart Pause for YouTube O43 - CFD: 19/02/2016 - [] D -- C:\Program Files (x86)\Sony O43 - CFD: 23/07/2015 - [] D -- C:\Program Files (x86)\Sore Hang O43 - CFD: 30/08/2015 - [] D -- C:\Program Files (x86)\Sparx Systems O43 - CFD: 29/04/2016 - [] D -- C:\Program Files (x86)\StarUML O43 - CFD: 20/05/2016 - [0] HD -- C:\Program Files (x86)\Temp O43 - CFD: 21/12/2015 - [] D -- C:\Program Files (x86)\Tencent =>.Superfluous.Tencent O43 - CFD: 20/05/2016 - [] AD -- C:\Program Files (x86)\TorrentsTime Media Player O43 - CFD: 24/04/2015 - [0] D -- C:\Program Files (x86)\TrimFoobar O43 - CFD: 06/05/2016 - [0] D -- C:\Program Files (x86)\UCBrowser O43 - CFD: 27/12/2015 - [] AD -- C:\Program Files (x86)\Unified Remote 3 =>.Unified Intents AB® O43 - CFD: 29/11/2015 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 17/03/2015 - [] D -- C:\Program Files (x86)\Uploads Only for Youtube O43 - CFD: 04/11/2015 - [] D -- C:\Program Files (x86)\VS Revo Group =>.VS Revo Group® O43 - CFD: 29/11/2015 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Windows Kits O43 - CFD: 29/11/2015 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 29/11/2015 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 10/03/2016 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Windows Phone Kits O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Windows Phone Silverlight Kits O43 - CFD: 29/11/2015 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 10/03/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 30/10/2015 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 30/10/2015 - [] SD -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 19/02/2016 - [] D -- C:\Program Files (x86)\WinPcap =>.Riverbed Technology, Inc.® O43 - CFD: 19/02/2016 - [] AD -- C:\Program Files (x86)\Wireshark =>.Wireshark Foundation® O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip O43 - CFD: 29/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\apachefriends O43 - CFD: 04/05/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArgoUML O43 - CFD: 27/03/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Atheros O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++ O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco Packet Tracer Student O43 - CFD: 29/11/2015 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks O43 - CFD: 01/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID O43 - CFD: 11/11/2015 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse =>PUP.Optional.CrossBrowse O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debugmode O43 - CFD: 29/11/2015 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dev+GNU Pascal 1.9.2 O43 - CFD: 05/05/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dim@net O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DOSBox-0.74 O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 3 O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EasyPHP DevServer 14.1 VC11 O43 - CFD: 27/03/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EtherDetect O43 - CFD: 31/10/2015 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 22/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git O43 - CFD: 30/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive O43 - CFD: 26/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IAR Systems O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Malware Fighter O43 - CFD: 05/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico O43 - CFD: 02/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LispWorks 6.1 Personal O43 - CFD: 30/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft DirectX SDK (June 2010) O43 - CFD: 27/03/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Expression O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace O43 - CFD: 10/03/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 31/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 5 SDK O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2012 O43 - CFD: 09/04/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64 O43 - CFD: 05/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MySQL O43 - CFD: 10/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Need for Speed™ Most Wanted O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ O43 - CFD: 25/04/2015 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\onOne Software O43 - CFD: 04/05/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenSubtitlesPlayer O43 - CFD: 26/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle - OraDb10g_home1 O43 - CFD: 09/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin O43 - CFD: 04/05/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OSDownloader O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pacestar UML Diagrammer O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag O43 - CFD: 19/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony O43 - CFD: 20/05/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 30/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 30/10/2015 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 20/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TorrentsTime Media Player O43 - CFD: 27/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unified Remote 3 O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 27/03/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2013 O43 - CFD: 20/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WampServer O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits O43 - CFD: 27/03/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Phone SDK 8.1 O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 05/05/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件 O43 - CFD: 04/05/2015 - [0] D -- C:\ProgramData\231cde8c00001662 O43 - CFD: 06/05/2015 - [0] D -- C:\ProgramData\2331c4400006269 O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\2WMiniPro2 =>PUP.Optional.WdsManPro O43 - CFD: 26/10/2015 - [] D -- C:\ProgramData\403e8deb00002498 O43 - CFD: 09/08/2015 - [0] D -- C:\ProgramData\4d83c68500005a62 O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\4WMiniPro4 =>PUP.Optional.WdsManPro O43 - CFD: 25/04/2015 - [] D -- C:\ProgramData\5f393d535e65b32f O43 - CFD: 17/08/2015 - [] D -- C:\ProgramData\6861582935550964527 O43 - CFD: 02/04/2015 - [] D -- C:\ProgramData\6861582935550964527UL O43 - CFD: 08/07/2015 - [] D -- C:\ProgramData\Adobe O43 - CFD: 28/11/2015 - [] D -- C:\ProgramData\ApphcuotloS O43 - CFD: 21/09/2015 - [] D -- C:\ProgramData\ApphcuotloSs O43 - CFD: 29/11/2015 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 26/10/2015 - [] D -- C:\ProgramData\ApplicationHosting =>PUP.Optional.ApplicationHosting O43 - CFD: 28/11/2015 - [] D -- C:\ProgramData\Atheros O43 - CFD: 21/05/2016 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 29/11/2015 - [0] D -- C:\ProgramData\Babylon =>PUP.Optional.Babylon O43 - CFD: 04/05/2016 - [] D -- C:\ProgramData\Baidu O43 - CFD: 22/12/2015 - [] D -- C:\ProgramData\bBNDVZZFUq O43 - CFD: 20/06/2015 - [] D -- C:\ProgramData\BEstSAveForrYOu =>PUP.Optional.BestSaveForYou O43 - CFD: 24/10/2014 - [] D -- C:\ProgramData\BlueStacksSetup O43 - CFD: 09/01/2016 - [] D -- C:\ProgramData\boost_interprocess O43 - CFD: 03/11/2015 - [] D -- C:\ProgramData\Browser =>PUP.Optional.SpeedBrowser O43 - CFD: 04/02/2015 - [] D -- C:\ProgramData\Browser AdBlocker =>PUP.Optional.SpeedBrowser O43 - CFD: 21/10/2014 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 21/12/2015 - [] HD -- C:\ProgramData\Common Files O43 - CFD: 30/10/2015 - [0] D -- C:\ProgramData\Comms O43 - CFD: 26/10/2015 - [] D -- C:\ProgramData\CoupExtension =>PUP.Optional.CoupExtension O43 - CFD: 10/06/2015 - [] D -- C:\ProgramData\DAEMON Tools Lite O43 - CFD: 05/05/2016 - [] D -- C:\ProgramData\DatacardService O43 - CFD: 29/11/2015 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 20/06/2015 - [] D -- C:\ProgramData\dollArkeeEEppeR =>PUP.Optional.DollarKeeper O43 - CFD: 25/04/2015 - [0] D -- C:\ProgramData\DownSave =>PUP.Optional.DownSave O43 - CFD: 10/02/2016 - [] D -- C:\ProgramData\Electronic Arts O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\eWMiniProe =>PUP.Optional.WdsManPro O43 - CFD: 16/04/2016 - [] D -- C:\ProgramData\F-Secure O43 - CFD: 25/04/2015 - [0] D -- C:\ProgramData\Fun2Save =>PUP.Optional.Fun2Save O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\FWMiniProF =>PUP.Optional.WdsManPro O43 - CFD: 22/03/2016 - [] D -- C:\ProgramData\Git O43 - CFD: 24/10/2014 - [0] D -- C:\ProgramData\GoSave =>PUP.Optional.GoSave O43 - CFD: 22/12/2015 - [] D -- C:\ProgramData\hnejglojphfhgnoojbhoffpnngmlmbjn O43 - CFD: 22/10/2014 - [0] D -- C:\ProgramData\IDM O43 - CFD: 05/05/2016 - [] D -- C:\ProgramData\IObit O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\iWMiniProi =>PUP.Optional.WdsManPro O43 - CFD: 20/05/2016 - [] D -- C:\ProgramData\Kaspersky Lab O43 - CFD: 21/05/2016 - [] D -- C:\ProgramData\Kaspersky Lab Setup Files O43 - CFD: 21/12/2015 - [] D -- C:\ProgramData\kingsoft O43 - CFD: 27/03/2016 - [] D -- C:\ProgramData\KONAMI O43 - CFD: 06/12/2014 - [] D -- C:\ProgramData\Labcenter Electronics =>PUP.Optional.BundleInstaller O43 - CFD: 30/04/2016 - [] D -- C:\ProgramData\log O43 - CFD: 16/11/2014 - [] D -- C:\ProgramData\Logs O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\lWMiniProl =>PUP.Optional.WdsManPro O43 - CFD: 20/05/2016 - [] D -- C:\ProgramData\McAfee O43 - CFD: 21/10/2014 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 21/12/2015 - [] D -- C:\ProgramData\MFAData O43 - CFD: 29/11/2015 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 10/03/2016 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\Microsoft OneDrive O43 - CFD: 09/01/2015 - [] D -- C:\ProgramData\MionuimouommPrIce =>PUP.Optional.MinimumPrice O43 - CFD: 19/04/2016 - [] D -- C:\ProgramData\MobileBrServ O43 - CFD: 21/10/2014 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 04/11/2014 - [] D -- C:\ProgramData\Mozilla O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\MWMiniProM =>PUP.Optional.WdsManPro O43 - CFD: 20/03/2016 - [] D -- C:\ProgramData\MySQL O43 - CFD: 08/02/2015 - [0] D -- C:\ProgramData\Nalpeiron O43 - CFD: 19/09/2015 - [] D -- C:\ProgramData\Nero O43 - CFD: 17/05/2016 - [] D -- C:\ProgramData\Nitro O43 - CFD: 15/05/2015 - [] D -- C:\ProgramData\NuGet O43 - CFD: 01/05/2016 - [] D -- C:\ProgramData\OnlineUpdate O43 - CFD: 08/02/2015 - [] D -- C:\ProgramData\onOne Software O43 - CFD: 23/01/2016 - [] D -- C:\ProgramData\Oracle O43 - CFD: 15/05/2016 - [] D -- C:\ProgramData\Origin O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\OWMiniProO =>PUP.Optional.WdsManPro O43 - CFD: 27/03/2016 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 03/11/2015 - [] D -- C:\ProgramData\PlayGemConfig =>PUP.Optional.PlayGem O43 - CFD: 15/05/2015 - [] D -- C:\ProgramData\PreEmptive Solutions O43 - CFD: 21/05/2016 - [] D -- C:\ProgramData\ProductData O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\pWMiniProp =>PUP.Optional.WdsManPro O43 - CFD: 04/11/2015 - [] D -- C:\ProgramData\Radio O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\regid.1986-12.com.adobe O43 - CFD: 27/03/2016 - [] AD -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 09/01/2015 - [] D -- C:\ProgramData\RooboSAver =>PUP.Optional.RoboSaver O43 - CFD: 21/09/2015 - [] D -- C:\ProgramData\Saophases =>PUP.Optional.Saophase O43 - CFD: 17/07/2015 - [] D -- C:\ProgramData\Skype O43 - CFD: 22/02/2016 - [] D -- C:\ProgramData\SoftwareDistribution O43 - CFD: 19/02/2016 - [] D -- C:\ProgramData\Sony O43 - CFD: 17/10/2015 - [] D -- C:\ProgramData\Steam O43 - CFD: 16/05/2015 - [] D -- C:\ProgramData\Sun O43 - CFD: 07/11/2015 - [0] D -- C:\ProgramData\Systweak =>.Superfluous.Systweak O43 - CFD: 16/11/2014 - [] D -- C:\ProgramData\TEMP O43 - CFD: 05/05/2016 - [] D -- C:\ProgramData\Tencent =>.Superfluous.Tencent O43 - CFD: 04/05/2015 - [] D -- C:\ProgramData\The AdBlocker =>PUP.Optional.Adblocker O43 - CFD: 04/11/2014 - [] D -- C:\ProgramData\TheAdBlock =>PUP.Optional.TheAdBlock O43 - CFD: 06/01/2016 - [] D -- C:\ProgramData\Tmp0x0x =>PUP.Optional.WpManager O43 - CFD: 20/06/2015 - [] D -- C:\ProgramData\ttakeooRlEavE O43 - CFD: 21/12/2015 - [0] D -- C:\ProgramData\TXPCMGR O43 - CFD: 05/05/2016 - [] D -- C:\ProgramData\TXQMPC O43 - CFD: 30/04/2016 - [] D -- C:\ProgramData\Unified Remote O43 - CFD: 12/12/2015 - [] D -- C:\ProgramData\Unuasbises O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\USOPrivate O43 - CFD: 29/11/2015 - [] D -- C:\ProgramData\USOShared O43 - CFD: 21/09/2015 - [] D -- C:\ProgramData\Viafreshs O43 - CFD: 29/10/2015 - [] D -- C:\ProgramData\VMware O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\vWMiniProv =>PUP.Optional.WdsManPro O43 - CFD: 27/03/2016 - [] AD -- C:\ProgramData\Windows App Certification Kit O43 - CFD: 16/07/2015 - [] D -- C:\ProgramData\X360CE O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\XWMiniProX =>PUP.Optional.WdsManPro O43 - CFD: 02/05/2015 - [] D -- C:\ProgramData\Yellow AdBlocker =>PUP.Optional.Adblocker O43 - CFD: 06/12/2015 - [] D -- C:\ProgramData\yWMiniProy =>PUP.Optional.WdsManPro O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\{03ce3a6d-7a2d-f034-03ce-e3a6d7a2e9b5} O43 - CFD: 08/08/2015 - [] D -- C:\ProgramData\{10a510fa-128f-12df-10a5-510fa12843e8} O43 - CFD: 08/08/2015 - [] D -- C:\ProgramData\{36110c07-4482-dc2f-3611-10c07448301d} O43 - CFD: 08/08/2015 - [] D -- C:\ProgramData\{497451df-0ccd-8ec5-4974-451df0cc477c} O43 - CFD: 23/07/2015 - [] D -- C:\ProgramData\{9e3a6c48-5b55-9e9a-9e3a-a6c485b5b121} O43 - CFD: 28/07/2015 - [] D -- C:\ProgramData\{b4d7e535-48eb-e38b-b4d7-7e53548e94d5} O43 - CFD: 04/05/2016 - [0] D -- C:\ProgramData\{BE2ACE5C-32B7-4777-9BDF-ECF87CDAB705} O43 - CFD: 27/08/2015 - [] D -- C:\ProgramData\{c88e21da-818e-87b8-c88e-e21da818876a} =>PUP.Optional.Adwareplugin O43 - CFD: 31/07/2015 - [] D -- C:\ProgramData\{c9b8d679-a910-0087-c9b8-8d679a9159e6} O43 - CFD: 22/04/2015 - [0] D -- C:\ProgramData\{dbf7536f-2f4f-85ee-dbf7-7536f2f44dbc} O43 - CFD: 22/04/2015 - [] D -- C:\ProgramData\{e33564dd-6b50-6d24-e335-564dd6b59375} O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\{f806f598-70de-94bc-f806-6f59870dd661} O43 - CFD: 22/02/2016 - [0] D -- C:\ProgramData\{FD6F83C0-EC70-4581-8361-C70CD1AA4B98} O43 - CFD: 14/05/2016 - [] AD -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 04/05/2016 - [] AD -- C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 27/03/2016 - [0] AD -- C:\Program Files (x86)\Common Files\Designer O43 - CFD: 10/02/2016 - [] HD -- C:\Program Files (x86)\Common Files\EAInstaller O43 - CFD: 13/02/2016 - [] D -- C:\Program Files (x86)\Common Files\IAR Systems O43 - CFD: 04/05/2016 - [] D -- C:\Program Files (x86)\Common Files\IObit O43 - CFD: 20/05/2015 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 27/03/2016 - [0] AD -- C:\Program Files (x86)\Common Files\Merge Modules O43 - CFD: 15/05/2015 - [] D -- C:\Program Files (x86)\Common Files\Microsoft O43 - CFD: 29/11/2015 - [] AD -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 30/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 03/12/2014 - [] AD -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 29/11/2015 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 21/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Tencent =>.Superfluous.Tencent O43 - CFD: 29/10/2015 - [] D -- C:\Program Files (x86)\Common Files\VMware O43 - CFD: 27/03/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Acrylic Wi-Fi Home O43 - CFD: 08/07/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Adobe O43 - CFD: 23/01/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Apowersoft O43 - CFD: 25/05/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Appcelerator O43 - CFD: 04/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Apple Computer O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\ATI O43 - CFD: 22/09/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Audacity O43 - CFD: 21/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\AVAST Software O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Babylon =>PUP.Optional.Babylon O43 - CFD: 04/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Baidu O43 - CFD: 08/07/2015 - [] D -- C:\Users\Amir\AppData\Roaming\BalsamiqMockups3 O43 - CFD: 08/07/2015 - [] D -- C:\Users\Amir\AppData\Roaming\BalsamiqMockups3.EDE15CF69E11F7F7D45B5430C7D37CC6C3545E3C.1 O43 - CFD: 13/08/2015 - [] D -- C:\Users\Amir\AppData\Roaming\CodeBlocks O43 - CFD: 03/11/2015 - [0] D -- C:\Users\Amir\AppData\Roaming\cpuminer =>PUP.Optional.CPUminer O43 - CFD: 04/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\DAEMON Tools Lite O43 - CFD: 29/04/2016 - [] D -- C:\Users\Amir\AppData\Roaming\DBDesigner4 O43 - CFD: 10/01/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Dev-Cpp O43 - CFD: 21/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\DMCache O43 - CFD: 17/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Downloaded Installations O43 - CFD: 24/04/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Dropbox O43 - CFD: 24/01/2015 - [] D -- C:\Users\Amir\AppData\Roaming\dvdcss O43 - CFD: 19/03/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Eclipse O43 - CFD: 13/11/2015 - [0] D -- C:\Users\Amir\AppData\Roaming\Full Installer O43 - CFD: 19/05/2015 - [] D -- C:\Users\Amir\AppData\Roaming\geany O43 - CFD: 19/05/2015 - [] D -- C:\Users\Amir\AppData\Roaming\gtk-2.0 O43 - CFD: 19/02/2016 - [] D -- C:\Users\Amir\AppData\Roaming\IAR Embedded Workbench O43 - CFD: 18/04/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Identities O43 - CFD: 20/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\IDM O43 - CFD: 28/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\InstallShield O43 - CFD: 04/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\IObit O43 - CFD: 25/05/2015 - [] D -- C:\Users\Amir\AppData\Roaming\JetBrains O43 - CFD: 21/12/2015 - [] D -- C:\Users\Amir\AppData\Roaming\kingsoft O43 - CFD: 25/10/2014 - [] D -- C:\Users\Amir\AppData\Roaming\Macromedia O43 - CFD: 29/11/2015 - [] SD -- C:\Users\Amir\AppData\Roaming\Microsoft O43 - CFD: 07/04/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Mozilla O43 - CFD: 15/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\MPC-HC O43 - CFD: 11/05/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Nero O43 - CFD: 10/01/2016 - [] D -- C:\Users\Amir\AppData\Roaming\NetBeans O43 - CFD: 17/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Nitro O43 - CFD: 04/03/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Notepad++ O43 - CFD: 11/10/2015 - [] D -- C:\Users\Amir\AppData\Roaming\NuGet O43 - CFD: 08/02/2015 - [] D -- C:\Users\Amir\AppData\Roaming\onOne Software O43 - CFD: 10/01/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Opera Software O43 - CFD: 29/04/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Oracle O43 - CFD: 09/02/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Origin O43 - CFD: 16/05/2015 - [] D -- C:\Users\Amir\AppData\Roaming\PC Remote O43 - CFD: 26/04/2015 - [] D -- C:\Users\Amir\AppData\Roaming\PDAppFlex O43 - CFD: 30/01/2016 - [] D -- C:\Users\Amir\AppData\Roaming\PowerISO O43 - CFD: 29/04/2016 - [] D -- C:\Users\Amir\AppData\Roaming\ProductData O43 - CFD: 09/01/2016 - [0] D -- C:\Users\Amir\AppData\Roaming\Publish Providers O43 - CFD: 05/06/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Qt O43 - CFD: 27/12/2015 - [] D -- C:\Users\Amir\AppData\Roaming\QtProject O43 - CFD: 31/01/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Skype O43 - CFD: 17/05/2015 - [] D -- C:\Users\Amir\AppData\Roaming\smileyswelove =>PUP.Optional.SmileyBar O43 - CFD: 19/02/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Sony O43 - CFD: 08/07/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Sparx Systems O43 - CFD: 09/07/2015 - [] D -- C:\Users\Amir\AppData\Roaming\SSN =>PUP.Optional.SaveSerpNow O43 - CFD: 26/04/2016 - [] D -- C:\Users\Amir\AppData\Roaming\StarUML O43 - CFD: 23/01/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Sun O43 - CFD: 23/12/2015 - [0] D -- C:\Users\Amir\AppData\Roaming\systweak =>.Superfluous.Systweak O43 - CFD: 19/09/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Temp O43 - CFD: 04/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Tencent =>.Superfluous.Tencent O43 - CFD: 31/10/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Unified Remote O43 - CFD: 13/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Updater O43 - CFD: 21/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\uTorrent O43 - CFD: 21/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\ViberPC O43 - CFD: 01/04/2016 - [] D -- C:\Users\Amir\AppData\Roaming\vlc O43 - CFD: 29/10/2015 - [] D -- C:\Users\Amir\AppData\Roaming\VMware O43 - CFD: 04/05/2016 - [0] D -- C:\Users\Amir\AppData\Roaming\vnlgp O43 - CFD: 22/10/2014 - [] D -- C:\Users\Amir\AppData\Roaming\WinRAR O43 - CFD: 19/02/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Wireshark O43 - CFD: 21/05/2016 - [] D -- C:\Users\Amir\AppData\Roaming\ZHP O43 - CFD: 29/11/2015 - [0] D -- C:\Users\Amir\AppData\Local\ActiveSync O43 - CFD: 14/05/2016 - [] D -- C:\Users\Amir\AppData\Local\Adobe O43 - CFD: 27/12/2015 - [] D -- C:\Users\Amir\AppData\Local\AMD O43 - CFD: 25/05/2015 - [] D -- C:\Users\Amir\AppData\Local\Android O43 - CFD: 29/11/2015 - [0] SHD -- C:\Users\Amir\AppData\Local\Application Data O43 - CFD: 29/04/2016 - [] D -- C:\Users\Amir\AppData\Local\assembly O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Local\ATI O43 - CFD: 21/12/2015 - [] D -- C:\Users\Amir\AppData\Local\Avg2015 O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Local\Babylon =>PUP.Optional.Babylon O43 - CFD: 25/05/2015 - [] D -- C:\Users\Amir\AppData\Local\Caphyon O43 - CFD: 11/12/2015 - [] D -- C:\Users\Amir\AppData\Local\CEF O43 - CFD: 09/07/2015 - [] D -- C:\Users\Amir\AppData\Local\Chedot O43 - CFD: 22/10/2014 - [] D -- C:\Users\Amir\AppData\Local\Chromatic Browser =>PUP.Optional.ChromaticBrowser O43 - CFD: 24/02/2016 - [] D -- C:\Users\Amir\AppData\Local\Comms O43 - CFD: 22/10/2014 - [] D -- C:\Users\Amir\AppData\Local\Comodo O43 - CFD: 27/04/2016 - [0] D -- C:\Users\Amir\AppData\Local\Diagnostics O43 - CFD: 16/04/2015 - [] D -- C:\Users\Amir\AppData\Local\DOSBox O43 - CFD: 02/02/2016 - [] D -- C:\Users\Amir\AppData\Local\Downloaded Installations O43 - CFD: 29/04/2016 - [] D -- C:\Users\Amir\AppData\Local\Eclipse O43 - CFD: 15/05/2016 - [] D -- C:\Users\Amir\AppData\Local\ElevatedDiagnostics O43 - CFD: 28/06/2015 - [0] SHD -- C:\Users\Amir\AppData\Local\EmieBrowserModeList O43 - CFD: 28/06/2015 - [0] SHD -- C:\Users\Amir\AppData\Local\EmieSiteList O43 - CFD: 28/06/2015 - [0] SHD -- C:\Users\Amir\AppData\Local\EmieUserList O43 - CFD: 30/11/2015 - [] D -- C:\Users\Amir\AppData\Local\Eraser 6 O43 - CFD: 01/05/2016 - [0] D -- C:\Users\Amir\AppData\Local\eSupport.com =>PUP.Optional.eSupport O43 - CFD: 22/12/2015 - [] D -- C:\Users\Amir\AppData\Local\F3738680-1445881681-81E2-3AFA-7054D2231A7F O43 - CFD: 06/12/2015 - [0] D -- C:\Users\Amir\AppData\Local\F3738680-1448755286-81E2-3AFA-7054D2231A7F O43 - CFD: 22/12/2015 - [] D -- C:\Users\Amir\AppData\Local\F3738680-1450690144-81E2-3AFA-7054D2231A7F O43 - CFD: 03/11/2014 - [] D -- C:\Users\Amir\AppData\Local\Facebook O43 - CFD: 21/11/2015 - [] D -- C:\Users\Amir\AppData\Local\FPU O43 - CFD: 17/04/2016 - [0] D -- C:\Users\Amir\AppData\Local\FSDART O43 - CFD: 13/09/2015 - [] D -- C:\Users\Amir\AppData\Local\Google O43 - CFD: 01/06/2015 - [] D -- C:\Users\Amir\AppData\Local\GWX O43 - CFD: 19/11/2015 - [] D -- C:\Users\Amir\AppData\Local\HealthAlert =>PUP.Optional.HealthAlert O43 - CFD: 29/11/2015 - [0] SHD -- C:\Users\Amir\AppData\Local\Historique O43 - CFD: 09/01/2016 - [] D -- C:\Users\Amir\AppData\Local\IsolatedStorage O43 - CFD: 06/12/2014 - [] D -- C:\Users\Amir\AppData\Local\Labcenter Electronics O43 - CFD: 17/05/2015 - [] D -- C:\Users\Amir\AppData\Local\Lenovo O43 - CFD: 21/12/2015 - [] D -- C:\Users\Amir\AppData\Local\MFAData O43 - CFD: 23/01/2016 - [] D -- C:\Users\Amir\AppData\Local\Microsoft O43 - CFD: 10/03/2016 - [] D -- C:\Users\Amir\AppData\Local\Microsoft Help O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Local\MicrosoftEdge O43 - CFD: 04/11/2014 - [] D -- C:\Users\Amir\AppData\Local\Mozilla O43 - CFD: 10/01/2016 - [] D -- C:\Users\Amir\AppData\Local\NetBeans O43 - CFD: 29/11/2015 - [0] D -- C:\Users\Amir\AppData\Local\NetworkTiles O43 - CFD: 10/01/2015 - [] D -- C:\Users\Amir\AppData\Local\Opera Software O43 - CFD: 10/02/2016 - [] D -- C:\Users\Amir\AppData\Local\Origin O43 - CFD: 22/03/2016 - [] D -- C:\Users\Amir\AppData\Local\Package Cache O43 - CFD: 20/05/2016 - [] D -- C:\Users\Amir\AppData\Local\Packages O43 - CFD: 20/03/2015 - [] D -- C:\Users\Amir\AppData\Local\Pay-By-Ads =>PUP.Optional.PaybyAds O43 - CFD: 01/12/2015 - [0] D -- C:\Users\Amir\AppData\Local\PeerDistRepub O43 - CFD: 23/12/2015 - [0] D -- C:\Users\Amir\AppData\Local\PPTAssist =>.Superfluous.ZhuhaiKingsoft O43 - CFD: 22/10/2014 - [] D -- C:\Users\Amir\AppData\Local\Programs O43 - CFD: 23/02/2016 - [] D -- C:\Users\Amir\AppData\Local\Publishers O43 - CFD: 23/04/2015 - [] D -- C:\Users\Amir\AppData\Local\Rockstar Games O43 - CFD: 03/11/2014 - [] D -- C:\Users\Amir\AppData\Local\Skype O43 - CFD: 09/01/2016 - [] D -- C:\Users\Amir\AppData\Local\Sony O43 - CFD: 26/10/2015 - [] D -- C:\Users\Amir\AppData\Local\Systweak =>.Superfluous.Systweak O43 - CFD: 21/05/2016 - [] D -- C:\Users\Amir\AppData\Local\Temp O43 - CFD: 29/11/2015 - [0] SHD -- C:\Users\Amir\AppData\Local\Temporary Internet Files O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Local\TileDataLayer O43 - CFD: 22/10/2014 - [] D -- C:\Users\Amir\AppData\Local\Torch =>.Superfluous.Torch O43 - CFD: 30/04/2016 - [] D -- C:\Users\Amir\AppData\Local\Viber O43 - CFD: 22/03/2016 - [] D -- C:\Users\Amir\AppData\Local\Viber Media S.à r.l O43 - CFD: 04/05/2016 - [] D -- C:\Users\Amir\AppData\Local\VirtualStore O43 - CFD: 29/10/2015 - [] D -- C:\Users\Amir\AppData\Local\VMware O43 - CFD: 03/11/2015 - [] D -- C:\Users\Amir\AppData\Local\Windesk_Winsearch =>PUP.Optional.WindeskWinsearch O43 - CFD: 22/10/2014 - [0] D -- C:\Users\Amir\AppData\Local\Programs\Common O43 - CFD: 30/10/2015 - [] RD -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 29/11/2015 - [] RD -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 14/05/2016 - [] RD -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 17/02/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bloodshed Dev-C++ O43 - CFD: 12/12/2015 - [0] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Debugmode O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager O43 - CFD: 30/10/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js O43 - CFD: 29/11/2015 - [0] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Software O43 - CFD: 28/03/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Qt O43 - CFD: 14/05/2016 - [] RD -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 30/10/2015 - [] RD -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 04/05/2016 - [0] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\UC浏览器 O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker O43 - CFD: 22/03/2016 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber O43 - CFD: 30/10/2015 - [] RSD -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell O43 - CFD: 29/11/2015 - [] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 04/05/2016 - [0] D -- C:\Users\Amir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件 O43 - CFD: 0 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\ATI O43 - CFD: 0 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Avg2015 O43 - CFD: 0 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\DataSharing O43 - CFD: 0 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Google O43 - CFD: 29/11/2015 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft O43 - CFD: 0 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\MicrosoftEdge O43 - CFD: 0 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Packages O43 - CFD: 0 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\TrueKey ---\\ ShellIconOverlayIdentifiers (SIOI) (9) - 1s O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Amir\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5-AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Amir\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Amir\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Amir\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\Amir\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileSyncShell.dll =>.Microsoft Corporation® O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software a.s.® ---\\ Liste des pilotes du système (89) - 60s O58 - SDL:2015/10/30 08:17:22 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [107360] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:22 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [1135456] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:22 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:22 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:22 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows® O58 - SDL:2014/04/09 21:05:52 A . (.Wondershare - Wondershare Virtual Audio Device.) -- C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [31920] =>.APOWERSOFT LIMITED® O58 - SDL:2015/10/30 08:17:22 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows® O58 - SDL:2016/05/21 01:10:58 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [37656] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2016/05/21 01:50:44 A . (.AVAST Software - avast! Keyboard Filter Driver.) -- C:\Windows\System32\drivers\aswKbd.sys [37144] =>.AVAST Software a.s.® O58 - SDL:2016/05/21 01:10:58 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [107792] =>.AVAST Software a.s.® O58 - SDL:2016/05/21 01:10:57 A . (.AVAST Software - avast! WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [103064] =>.AVAST Software a.s.® O58 - SDL:2016/05/21 01:10:58 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [74544] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2016/05/21 01:10:30 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [1070904] =>.AVAST Software a.s.® O58 - SDL:2016/05/21 01:10:58 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [465792] =>.AVAST Software a.s.® O58 - SDL:2016/05/21 01:10:59 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [166432] =>.AVAST Software a.s.® O58 - SDL:2016/05/21 01:10:58 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [287528] =>.AVAST Software a.s.® (ALWIL Software) O58 - SDL:2016/05/04 04:08:16 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdWT6.sys [111120] =>.Microsoft Windows Hardware Compatibility Publisher® O58 - SDL:2016/05/04 03:26:05 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [21521920] =>.Advanced Micro Devices, Inc. O58 - SDL:2016/05/04 03:26:09 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmnag.sys [20257792] =>.Advanced Micro Devices, Inc. O58 - SDL:2016/05/04 03:26:09 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [484864] =>.Advanced Micro Devices, Inc. O58 - SDL:2015/10/30 08:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn.sys [9728] =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/10/30 08:17:22 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [9728] =>.Windows (R) Win 7 DDK provider O58 - SDL:2015/10/30 08:17:22 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows® O58 - SDL:2015/05/31 15:02:06 A . (.Disc Soft Ltd - DAEMON Tools Virtual Bus Driver.) -- C:\Windows\System32\drivers\dtsoftbus01.sys [283064] =>.Disc Soft Ltd® O58 - SDL:2015/10/30 08:17:22 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3436896] =>.Microsoft Windows® O58 - SDL:2012/07/17 17:12:08 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [62784] =>.Intel Corporation® O58 - SDL:2015/10/30 08:17:22 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:18 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\Windows\System32\drivers\iai2c.sys [81408] =>.Intel(R) Corporation O58 - SDL:2015/10/30 08:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\Windows\System32\drivers\iaLPSS2i_I2C.sys [165888] =>.Intel Corporation O58 - SDL:2015/10/30 08:17:18 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [38128] =>.Intel Corporation - Client Components Group® O58 - SDL:2015/10/30 08:17:18 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [113152] =>.Intel Corporation O58 - SDL:2015/10/30 08:17:22 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\Windows\System32\drivers\iaStorAV.sys [673120] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:22 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\Windows\System32\drivers\ibbus.sys [424800] =>.Microsoft Windows® O58 - SDL:2015/06/12 03:00:58 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\drivers\idmwfp.sys [197616] =>.Tonec Inc.® O58 - SDL:2015/01/30 09:02:10 A . (.Intel Corporation - HAXM_Driver.) -- C:\Windows\System32\drivers\IntelHaxm.sys [84992] O58 - SDL:2008/05/15 03:28:52 A . (.Atheros Communications, Inc. - Atheros Security NDIS 6.0 Filter Driver.) -- C:\Windows\System32\drivers\jswpslwfx.sys [26624] =>.Atheros Communications, Inc. O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [108888] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2i.sys [104800] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3i.sys [99168] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [59744] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - MLX4 Bus Driver.) -- C:\Windows\System32\drivers\mlx4_bus.sys [705376] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\Windows\System32\drivers\ndfltr.sys [76128] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:18 A . (.MediaTek Inc. - MediaTek 802.11n Wireless Adapter Driver.) -- C:\Windows\System32\drivers\netr28ux.sys [2196480] =>.MediaTek Inc. O58 - SDL:2013/03/01 02:49:12 A . (.Riverbed Technology, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [36600] =>.Riverbed Technology, Inc.® O58 - SDL:2015/10/30 08:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166240] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\percsas2i.sys [58208] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\percsas3i.sys [58720] =>.Microsoft Windows® O58 - SDL:2007/05/14 16:06:18 A . (.Research In Motion Limited - BlackBerry Device Driver.) -- C:\Windows\System32\drivers\RimUsb_AMD64.sys [27520] =>.Research In Motion Limited O58 - SDL:2016/05/04 04:02:31 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40 64-bit Dr.) -- C:\Windows\System32\drivers\rt640x64.sys [936192] =>.Realtek Semiconductor Corp® O58 - SDL:2015/05/29 05:51:46 A . (.Realtek Microelectronics - Filter Driver for the Realtek Bluetooth Chi.) -- C:\Windows\System32\drivers\RtkBtfilter.sys [65792] =>.Realtek Semiconductor Corp® O58 - SDL:2016/05/21 09:31:25 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [4803840] =>.Realtek Semiconductor Corp® O58 - SDL:2016/05/04 04:01:22 A . (.Realsil Semiconductor Corporation - RTS USB READER Driver.) -- C:\Windows\System32\drivers\RtsUer.sys [413912] =>.Realtek Semiconductor Corp® O58 - SDL:2015/10/30 08:17:19 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 33003.) -- C:\Windows\System32\drivers\rtwlane_13.sys [3749888] =>.Realtek Semiconductor Corporation O58 - SDL:2015/10/08 08:00:24 A . (.Power Software Ltd - PowerISO Virtual Drive.) -- C:\Windows\System32\drivers\scdemu.sys [127760] =>.Power Software Limited® O58 - SDL:2015/10/30 08:17:23 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows® O58 - SDL:2016/05/04 03:49:36 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_AMDASF_Aux.sys [42088] =>.Synaptics Incorporated® O58 - SDL:2015/10/08 19:34:16 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_Intel.sys [51392] =>.Synaptics Incorporated® O58 - SDL:2016/05/04 03:49:36 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_Intel_Aux.sys [42600] =>.Synaptics Incorporated® O58 - SDL:2015/12/08 04:00:54 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [122160] =>.DEVGURU CO LTD® O58 - SDL:2015/12/08 04:00:58 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [214832] =>.DEVGURU CO LTD® O58 - SDL:2015/12/08 04:01:06 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Mobile Logging Device Driver (M.) -- C:\Windows\System32\drivers\ssudserd.sys [214832] =>.DEVGURU CO LTD® O58 - SDL:2015/10/30 08:17:23 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows® O58 - SDL:2016/05/04 03:51:00 A . (.Synaptics Incorporated - Synaptics I2C Driver.) -- C:\Windows\System32\drivers\SynRMIHID_Aux.sys [57448] =>.Synaptics Incorporated® O58 - SDL:2016/05/04 03:51:04 A . (.Synaptics Incorporated - Synaptics Touchpad Win64 Driver.) -- C:\Windows\System32\drivers\SynTP.sys [631400] =>.Synaptics Incorporated® O58 - SDL:2016/05/04 03:13:12 A . (.Tencent Technology(Shenzhen) Company Limited - TAOKernel.) -- C:\Windows\System32\drivers\TAOKernelEx64.sys [143992] =>.Superfluous.Tencent O58 - SDL:2014/07/30 12:05:54 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\System32\drivers\tap0901.sys [40664] =>.OpenVPN Technologies, Inc.® O58 - SDL:2016/05/04 22:43:54 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverW8x64.sys [185896] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2016/05/04 03:13:13 A . (.电脑管家 - 电脑管家-驱动模块.) -- C:\Windows\System32\drivers\TFsFltX64.sys [97400] =>.Superfluous.Tencent O58 - SDL:2016/05/04 03:23:08 A . (.Toshiba Corporation - Toshiba Hotkey Driver.) -- C:\Windows\System32\drivers\Thotkey.sys [45720] =>.TOSHIBA CORPORATION® O58 - SDL:2013/11/01 02:22:28 A . (.TOSHIBA Corporation - TOSHIBA Bluetooth EC Driver.) -- C:\Windows\System32\drivers\tosrfec.sys [27032] =>.TOSHIBA CORPORATION® O58 - SDL:2013/08/15 00:13:32 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\Windows\System32\drivers\TVALZ_O.SYS [32832] =>.TOSHIBA CORPORATION® O58 - SDL:2016/04/25 11:31:21 A . (.Huorong Borui (Beijing) Technology Co., Ltd. - Huorong Network Security Core Kext.) -- C:\Windows\System32\drivers\ucguard.sys [80768] =>.TAOBAO (CHINA) SOFTWARE CO.,LTD.® O58 - SDL:2015/12/10 18:27:26 N . (.USBPcap - USBPcap Driver.) -- C:\Windows\System32\drivers\USBPcap.sys [41720] {0B49E2E7A42940E43EDAC36D6386A3FC} O58 - SDL:2014/11/24 12:07:22 A . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\System32\drivers\VBoxDrv.sys [916024] =>.Oracle Corporation® O58 - SDL:2014/11/24 12:07:02 A . (.Oracle Corporation - VirtualBox Host-Only Network Adapter Driver.) -- C:\Windows\System32\drivers\VBoxNetAdp.sys [141440] =>.Oracle Corporation® O58 - SDL:2014/11/24 12:06:12 A . (.Oracle Corporation - VirtualBox Bridged Networking Driver.) -- C:\Windows\System32\drivers\VBoxNetFlt.sys [156360] =>.Oracle Corporation® O58 - SDL:2014/11/24 12:07:02 A . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\Windows\System32\drivers\VBoxUSBMon.sys [128080] =>.Oracle Corporation® O58 - SDL:2015/10/30 08:17:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [166752] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - Kernel WinMad.) -- C:\Windows\System32\drivers\winmad.sys [26976] =>.Microsoft Windows® O58 - SDL:2015/10/30 08:17:23 A . (.Mellanox - Kernel WinVerbs.) -- C:\Windows\System32\drivers\winverbs.sys [59232] =>.Microsoft Windows® O58 - SDL:2013/08/26 10:52:56 A . (...) -- C:\Windows\System32\pwdrvio.sys [19032] =>.MiniTool Solution Ltd® O58 - SDL:2013/08/26 10:52:54 A . (...) -- C:\Windows\System32\pwdspio.sys [12384] =>.MiniTool Solution Ltd® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (46) - 1094s O61 - LFC: 2016/05/21 16:44:36 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\[PES16] Stadium Pack by Estarlen Silva_Adapted version for PTE Patch\Setup.exe [866675652] O61 - LFC: 2016/05/21 17:12:33 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\[PES16] PTE PATCH 4.0\Setup1.exe [1710315838] O61 - LFC: 2016/05/21 17:12:32 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\[PES16] PTE PATCH 4.0\Setup2.exe [659418375] O61 - LFC: 2016/05/21 16:04:37 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\[PES16] PTE PATCH - Unlock Extra Team\Setup.exe [6970826] O61 - LFC: 2016/05/21 11:36:36 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\Pro.Evolution.Soccer.2016.Update.v1.03.01-RELOADED\Update\setup-1.bin [3675617] O61 - LFC: 2016/05/21 17:07:35 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\Pro.Evolution.Soccer.2016.Update.v1.03.01-RELOADED\Update\setup-2.bin [517780619] O61 - LFC: 2016/05/21 11:36:36 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\Pro.Evolution.Soccer.2016.Update.v1.03.01-RELOADED\Update\setup.exe [613409] O61 - LFC: 2016/05/21 11:00:53 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\Pro.Evolution.Soccer.2016.Update.v1.03.01-RELOADED\Crack\sdkencryptedappticket.dll [202244] O61 - LFC: 2016/05/21 11:00:53 RA . (..) -- C:\Users\Amir\Downloads\PES16 PTE Patch 4.0 + Update RELOADED + Stadium Pack\Pro.Evolution.Soccer.2016.Update.v1.03.01-RELOADED\Crack\steam_api.dll [1236996] O61 - LFC: 2016/05/20 23:17:49 RA . (.Slipknot Corp..) -- C:\Users\Amir\Downloads\Kaspersky Total Security 2015\Kaspersky Total Security 2015\Kaspersky World 2015\Kaspersy World.exe [1028608] O61 - LFC: 2016/05/21 20:45:41 A . (..) -- C:\Users\Amir\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin [8192] O61 - LFC: 2016/05/18 00:44:00 A . (..) -- C:\Users\Amir\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\UrlBlock\urlblock_635991195357304015.bin [83407] O61 - LFC: 2016/05/21 23:47:11 A . (..) -- C:\Users\Amir\AppData\Local\Microsoft\Windows\UPPS\UPPS.bin [16148] O61 - LFC: 2016/05/20 11:13:37 A . (..) -- C:\Users\Amir\AppData\Local\Google\Chrome\User Data\nacl_validation_cache.bin [236] O61 - LFC: 2016/05/21 14:06:32 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\aapt.exe [1466368] O61 - LFC: 2016/05/21 14:06:31 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\aidl.exe [325632] O61 - LFC: 2016/05/21 14:06:24 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\arm-linux-androideabi-ld.exe [3790336] O61 - LFC: 2016/05/21 14:06:38 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\bcc_compat.exe [149504] O61 - LFC: 2016/05/21 14:06:24 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\dexdump.exe [233472] O61 - LFC: 2016/05/21 14:06:25 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\dx.bat [2762] O61 - LFC: 2016/05/21 14:06:38 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\i686-linux-android-ld.exe [3790336] O61 - LFC: 2016/05/21 14:06:25 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\libbcc.dll [350208] O61 - LFC: 2016/05/21 14:06:32 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\libbcinfo.dll [620544] O61 - LFC: 2016/05/21 14:06:25 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\libclang.dll [13593088] O61 - LFC: 2016/05/21 14:06:38 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\libLLVM.dll [22592512] O61 - LFC: 2016/05/21 14:06:29 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\llvm-rs-cc.exe [1225728] O61 - LFC: 2016/05/21 14:06:24 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\mainDexClasses.bat [3680] O61 - LFC: 2016/05/21 14:06:22 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\mipsel-linux-android-ld.exe [1841664] O61 - LFC: 2016/05/21 14:06:24 A . (..) -- C:\Users\Amir\AppData\Local\Android\sdk\build-tools\21.1.2\zipalign.exe [209408] O61 - LFC: 2016/05/17 22:18:38 A . (..) -- C:\Users\Amir\AppData\Local\AMD\GLCache\5b29effe650b9c07_19.bin [14278997] O61 - LFC: 2016/05/21 11:11:37 A . (..) -- C:\Users\Amir\AppData\Local\AMD\GLCache\acb585400ae887c3_19.bin [65313] O61 - LFC: 2016/05/16 12:25:00 A . (..) -- C:\Users\Amir\AppData\Local\AMD\GLCache\b0c6cb5251c1d522_19.bin [19529] O61 - LFC: 2016/05/17 22:17:23 A . (..) -- C:\Users\Amir\AppData\Local\AMD\GLCache\b169ddc631f65d92_19.bin [25378] O61 - LFC: 2016/05/21 14:07:56 A . (..) -- C:\Users\Amir\AndroidStudioProjects\Sunshine-Version-2-1.01_hello_world\build\intermediates\gradle_project_sync_data.bin [585] O61 - LFC: 2016/05/21 15:14:22 A . (..) -- C:\Users\Amir\AndroidStudioProjects\Sunshine-Version-2-1.01_hello_world\.gradle\2.2.1\taskArtifacts\fileHashes.bin [84298] O61 - LFC: 2016/05/21 15:14:22 A . (..) -- C:\Users\Amir\AndroidStudioProjects\Sunshine-Version-2-1.01_hello_world\.gradle\2.2.1\taskArtifacts\fileSnapshots.bin [677183] O61 - LFC: 2016/05/21 15:12:44 A . (..) -- C:\Users\Amir\AndroidStudioProjects\Sunshine-Version-2-1.01_hello_world\.gradle\2.2.1\taskArtifacts\outputFileStates.bin [19712] O61 - LFC: 2016/05/21 15:14:22 A . (..) -- C:\Users\Amir\AndroidStudioProjects\Sunshine-Version-2-1.01_hello_world\.gradle\2.2.1\taskArtifacts\taskArtifacts.bin [39773] O61 - LFC: 2016/05/21 15:41:11 A . (..) -- C:\Users\Amir\.gradle\daemon\2.2.1\registry.bin [2139] O61 - LFC: 2016/05/21 14:03:11 A . (..) -- C:\Users\Amir\.gradle\caches\modules-2\metadata-2.14\artifact-at-repository.bin [24718] O61 - LFC: 2016/05/21 14:03:11 A . (..) -- C:\Users\Amir\.gradle\caches\modules-2\metadata-2.14\artifact-at-url.bin [59742] O61 - LFC: 2016/05/21 14:03:11 A . (..) -- C:\Users\Amir\.gradle\caches\modules-2\metadata-2.14\module-artifacts.bin [20600] O61 - LFC: 2016/05/21 14:03:11 A . (..) -- C:\Users\Amir\.gradle\caches\modules-2\metadata-2.14\module-metadata.bin [19690] O61 - LFC: 2016/05/16 12:21:31 N . (..) -- C:\Users\Amir\.AndroidStudio1.2\system\tmp\winp.x647340876596350192598.dll [13280] {0095A8B8DD16F4C8100775A1CDD561B81C} O61 - LFC: 2016/05/21 13:36:33 A . (..) -- C:\Users\Amir\.AndroidStudio1.2\system\tmp\native-platform644008082499524462dir\native-platform.dll [52224] O61 - LFC: 2016/05/21 13:04:45 N . (.Java(TM) Native Access (JNA).) -- C:\Users\Amir\.AndroidStudio1.2\system\tmp\jna\jna8507677460938265947.dll [200192] ---\\ Associations Shell Spawning (9) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (20) - 2s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- c:\program files (x86)\mozilla firefox\firefox.exe http://www.istartpageing.com/ =>PUP.Optional.IstartPageing O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files\Internet Explorer\iexplore.ex http://www.istartpageing.com/ =>PUP.Optional.IstartPageing O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe =>.Opera Software ASA® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe =>.Opera Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe =>.Opera Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\launcher.exe =>.Opera Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software ---\\ Recherche d'infection sur les navigateurs (22) - 3s O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("browser.search.defaultenginename", "istartpageing"); =>PUP.Optional.IstartPageing O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("browser.search.searchengine.alias", "istartpageing"); =>PUP.Optional.IstartPageing O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("browser.search.searchengine.iconURL", "http://istartpageing.com/favicon.ico"); =>PUP.Optional.IstartPageing O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("browser.search.searchengine.name", "istartpageing"); =>PUP.Optional.IstartPageing O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("browser.search.searchengine.url", "http://istartpageing.com/web?type=ds&ts=1450686469&z=378d8516bf3aaf68c5ecd1eg3z6w0e9[...] =>PUP.Optional.IstartPageing O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("browser.search.selectedEngine", "istartpageing"); =>PUP.Optional.IstartPageing O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("browser.startup.homepage", "http://www.palikan.com/?f=1&a=bfp_coinisre_16_07&cd=2XzuyEtN2Y1L1QzuyBtDyDyE0DtBtBtAtC0AyB0[...] =>PUP.Optional.GoPalikan O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("extensions.quick_start.enable_search1", false); =>PUP.Optional.QuickStart O69 - SBI: prefs.js [Amir - gxh8qwmb.default] user_pref("extensions.quick_start.sd.closeWindowWithLastTab_prev_state", false); =>PUP.Optional.QuickStart O69 - SBI: SearchScopes [HKCU] OldSearch - () - http://do-search.com/ =>PUP.Optional.DoSearches O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {135978CF-7F4E-4BF9-97F0-19DC124BD58E} - (FindWide) - http://do-search.com/ =>PUP.Optional.DoSearches O69 - SBI: SearchScopes [HKCU] {20B9D1AE-AD1A-38B4-87FE-AF278DA9861D} [DefaultScope] - (Palikan) - http://www.palikan.com/ =>PUP.Optional.GoPalikan O69 - SBI: SearchScopes [HKCU] {6586d803-df30-46d3-a89a-4136c8571d45} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {E74F99CB-0C97-40EF-AACF-A559B724237E} - (Yahoo!) - http://do-search.com/ =>PUP.Optional.DoSearches O69 - SBI: SearchScopes [HKCU] {ielnksrch} - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2uNnicRTtpc0ylE0cUz5wVvjKvKW6eZRTeQnooMt9uE2qBa13RKAlVc8NR42pQv-__58zpGU_Z-H_5EeCIaugGSu0Y0vIn1B0YpCBX2Emr7nJIjRWwAticYnfOcvNEOYPbytqg9cMhGZ_BzQ3NsdFMJrbOOL&q={searchTerms} =>PUP.Optional.Linkury O69 - SBI: SearchScopes [HKLM] ielnksrch - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTxkij9_B2uNnicRTtpc0ylE0cUz5wVvjKvKW6eZRTeQnooMt9uE2qBa13RKAlVc8NR42pQv-__58zpGU_Z-H_5EeCIaugGSu0Y0vIn1B0YpCBX2Emr7nJIjRWwAticYnfOcvNEOYPbytqg9cMhGZ_BzQ3NsdFMJrbOOL&q={searchTerms} =>PUP.Optional.Linkury O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {20B9D1AE-AD1A-38B4-87FE-AF278DA9861D} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {80c554b9-c7f8-4a21-9471-06d606da78a2} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKLM] {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} - (WebSearch) - http://websearch.searchsun.info/ O69 - SBI: SearchScopes [HKLM] {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} - (Bing) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (42) - 8s O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [192000] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [192000] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [283136] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1338368] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [957952] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [958464] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [31232] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [94720] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [112640] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [997376] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [225280] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [134656] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [328192] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [372736] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [96256] =>.Microsoft Corporation O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsvc Task.) -- C:\Windows\system32\dcpsvc.dll [186880] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\system32\wlidsvc.dll [2057216] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\ncasvc.dll [168960] =>.Microsoft Corporation O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll [207360] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [59392] =>.Microsoft Corporation O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation - RDXService.) -- C:\Windows\system32\RDXService.dll [1073152] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll [27136] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [106496] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [696320] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [507904] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\sens.dll [73216] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [456704] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [311808] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2280960] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [1144320] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [608768] =>.Microsoft Corporation O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\system32\dmwappushsvc.dll [57856] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [361472] =>.Microsoft Corporation O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\system32\XboxNetApiSvc.dll [1035776] =>.Microsoft Corporation O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session Orchestrator Core.) -- C:\Windows\system32\usocore.dll [360960] =>.Microsoft Corporation O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll [1139712] =>.Microsoft Corporation O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll [278016] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [205824] =>.Microsoft Corporation O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll [912384] =>.Microsoft Corporation O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll [948736] =>.Microsoft Corporation O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [200192] =>.Microsoft Corporation ---\\ Liste des exceptions du parefeu Windows (14) - 22s O87 - FAEL: "UDP Query User{DB12BE4E-30D2-4735-A147-7A02C92197EA}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe {37531C4EB56A967FE17E390590A07763} O87 - FAEL: "TCP Query User{40E654EC-5E23-4F9B-B8FB-6BAD9131561C}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe {37531C4EB56A967FE17E390590A07763} O87 - FAEL: "UDP Query User{EFDE5C82-89EA-449F-BBF6-BB8F4F44B660}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe" [In-None-P17-TRUE] .(...) -- C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe {37531C4EB56A967FE17E390590A07763} O87 - FAEL: "TCP Query User{6DB7DF34-69FA-47EC-8348-355E827CCA07}C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe" [In-None-P6-TRUE] .(...) -- C:\program files (x86)\cisco packet tracer 6.2sv\bin\packettracer6.exe {37531C4EB56A967FE17E390590A07763} O87 - FAEL: "UDP Query User{2531511D-06D0-4789-B553-B39324BB786F}C:\users\amir\appdata\roaming\appcelerator\aptana studio\aptanastudio3.exe" [In-None-P17-TRUE] .(...) -- C:\users\amir\appdata\roaming\appcelerator\aptana studio\aptanastudio3.exe {2B728230DD498C} O87 - FAEL: "TCP Query User{9CB2F828-4511-456F-8447-7B616564A531}C:\users\amir\appdata\roaming\appcelerator\aptana studio\aptanastudio3.exe" [In-None-P6-TRUE] .(...) -- C:\users\amir\appdata\roaming\appcelerator\aptana studio\aptanastudio3.exe {2B728230DD498C} O87 - FAEL: "{C0F5FD0F-E587-4E16-BBA5-996F651B28E0}" [In-None-P17-TRUE] .(.@ByELDI - Service_KMS.) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{34D6EC0A-F14C-4D76-A76A-CC8BF80609FD}" [In-None-P6-TRUE] .(.@ByELDI - Service_KMS.) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{698764C1-2B6F-4607-80EA-69AAF22BFD47}" [In-None-P17-TRUE] .(.@ByELDI - Service_KMS.) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "{D88BEB06-A209-4BDC-9A11-E02F4FBF3A02}" [In-None-P6-TRUE] .(.@ByELDI - Service_KMS.) -- C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico O87 - FAEL: "TCP Query User{24A6B961-1B13-4E5B-9D6C-F93CCDADB7CC}C:\users\amir\downloads\video\compressed\eclipse\eclipse.exe" [In-None-P6-TRUE] .(...) -- C:\users\amir\downloads\video\compressed\eclipse\eclipse.exe O87 - FAEL: "UDP Query User{C7C9022B-3794-4946-8273-1F9674108D9E}C:\users\amir\downloads\video\compressed\eclipse\eclipse.exe" [In-None-P17-TRUE] .(...) -- C:\users\amir\downloads\video\compressed\eclipse\eclipse.exe O87 - FAEL: "TCP Query User{CE59A423-DA74-4648-AC0F-25753BAA4409}D:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe" [In-None-P6-TRUE] .(...) -- D:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe O87 - FAEL: "UDP Query User{546594F3-8C0D-4D9F-A8E6-545EC055B553}D:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe" [In-None-P17-TRUE] .(...) -- D:\oracle\product\10.2.0\db_1\jdk\jre\bin\java.exe ---\\ Recherche de clés de registre Tracing (1) - 1s HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\tencentdl_RASAPI32 =>.Superfluous.Tencent ---\\ Scan Additionnel (163) - 0s C:\ProgramData\{c88e21da-818e-87b8-c88e-e21da818876a} =>PUP.Optional.Adwareplugin c:\programdata\{c88e21da-818e-87b8-c88e-e21da818876a}\hqghumeaylnlf.exe =>PUP.Optional.Adwareplugin C:\Windows\Tasks\Superclean.job =>PUP.Optional.Adwareplugin C:\Windows\System32\Tasks\Superclean =>PUP.Optional.Adwareplugin C:\Users\Amir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek =>Hijacker.Browser C:\Users\Amir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake =>Hijacker.Browser C:\Users\Amir\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap =>Hijacker.Browser C:\Users\Amir\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljibkigjccbegnbeojkoafejpoiachej =>PUP.Optional.GoPalikan C:\Users\Amir\AppData\Local\Google\Chrome\User Data\Default\Extensions\ooebklgpfnbcnpokahmdidgbmlcdepkm =>.Superfluous.Chrome C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\yahooprotected@gmail.com.xpi =>PUP.Optional.WinYahoo C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\delta-homes.xml =>PUP.Optional.DeltaHomes C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\dsrlte.xml =>PUP.Optional.PaybyAds C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\findit.xml =>PUP.Optional.SmartBar C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\istartpageing.xml =>PUP.Optional.IstartPageing C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\mystartsearch.xml =>PUP.Optional.StartSearch C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\palikan.xml =>PUP.Optional.GoPalikan C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\search-simple.xml =>PUP.Optional.SearchSimple C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\WebSearch.xml =>PUP.Optional.SimpleSearches C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\searchplugins\yahoo.xml =>PUP.Optional.BDYahoo C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\findit.xml =>PUP.Optional.SmartBar C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\GoSearch.xml =>Trojan.GoSearch C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\istartpageing.xml =>PUP.Optional.IstartPageing C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\6a1a03975fde4c8690f6b883c36bc1@7d88519bfe704d8cae3851239.com =>PUP.Optional.CrossRider C:\Users\Amir\AppData\Roaming\Mozilla\Firefox\Profiles\gxh8qwmb.default\extensions\deskCutv2@gmail.com =>PUP.Optional.LightningNewTab C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll =>.Superfluous.Tencent HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PopupProduct =>PUP.Optional.CompatibleWebDir HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC} =>PUP.Optional.DesktopPlay HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\PopupProduct =>PUP.Optional.CompatibleWebDir HKLM\SOFTWARE\Wow6432Node\3f72f5e1-d396-8198-6325-6b1cc4f639ec =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\ArenaHD =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Chedot =>PUP.Optional.ChedotBrowser HKLM\SOFTWARE\Wow6432Node\CinemaPlus-3.2cV25.10 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\downchecker =>PUP.Optional.DownChecker HKLM\SOFTWARE\Wow6432Node\FFPluginHp =>PUP.Optional.SweetSearch HKLM\SOFTWARE\Wow6432Node\HighDefAction =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\istartpageingSoftware =>PUP.Optional.IstartPageing HKLM\SOFTWARE\Wow6432Node\PicexaSvc =>PUP.Optional.Picexa HKLM\SOFTWARE\Wow6432Node\SoftwareUpdater =>PUP.Optional.SoftwareUpdater HKLM\SOFTWARE\Wow6432Node\SpeedBrowser =>PUP.Optional.SpeedBrowser HKLM\SOFTWARE\Wow6432Node\SpringFiles =>.Superfluous.SpringFiles HKLM\SOFTWARE\Wow6432Node\Systweak =>.Superfluous.Systweak HKLM\SOFTWARE\Wow6432Node\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\Wow6432Node\WdsManPro =>PUP.Optional.WdsManPro HKLM\SOFTWARE\Wow6432Node\YorkNewCin =>PUP.Optional.CrossRider HKCU\SOFTWARE\Alnaddy =>PUP.Optional.Alnaddy HKCU\SOFTWARE\ArenaHD =>PUP.Optional.CrossRider HKCU\SOFTWARE\Browser =>PUP.Optional.CrossRider HKCU\SOFTWARE\Chedot =>PUP.Optional.ChedotBrowser HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser HKCU\SOFTWARE\eSupport.com =>PUP.Optional.eSupport HKCU\SOFTWARE\HighDefAction =>PUP.Optional.CrossRider HKCU\SOFTWARE\InetStat =>PUP.Optional.InetStat HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions HKCU\SOFTWARE\NpApp =>PUP.Optional.PastaLeads HKCU\SOFTWARE\PPTAssist =>.Superfluous.ZhuhaiKingsoft HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\RegisteredApplicationsEx =>PUP.Optional.SfKpCouponApp HKCU\SOFTWARE\speed browser =>PUP.Optional.SpeedBrowser HKCU\SOFTWARE\SpringFiles =>.Superfluous.SpringFiles HKCU\SOFTWARE\Squeaky =>PUP.Optional.Squeaky HKCU\SOFTWARE\systweak =>.Superfluous.Systweak HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\WebApp =>.Superfluous.Downloader HKCU\SOFTWARE\WeDlMngr =>PUP.Optional.weDownloadManager HKCU\SOFTWARE\YorkNewCin =>PUP.Optional.CrossRider C:\Program Files\KMSpico =>HackTool.KMSpico C:\Program Files (x86)\50CCouppons =>PUP.Optional.50Coupons C:\Program Files (x86)\50Couponss =>PUP.Optional.50Coupons C:\Program Files (x86)\AllCheeaepiPraice =>PUP.Optional.AllCheapPrice C:\Program Files (x86)\BeesstSaoveForYYou =>PUP.Optional.BestSaveForYou C:\Program Files (x86)\BEestSaoveForYuou =>PUP.Optional.BestSaveForYou C:\Program Files (x86)\BeStSauveForYoiu =>PUP.Optional.BestSaveForYou C:\Program Files (x86)\BestSaveFoRYouu =>PUP.Optional.BestSaveForYou C:\Program Files (x86)\BestuSAveFForYou =>PUP.Optional.BestSaveForYou C:\Program Files (x86)\CheeeapMe =>PUP.Optional.CheapMe C:\Program Files (x86)\Coupon Time =>PUP.Optional.CouponTime C:\Program Files (x86)\ddollaRkkeepoer =>PUP.Optional.DollarKeeper C:\Program Files (x86)\DownSave =>PUP.Optional.DownSave C:\Program Files (x86)\EnjoyCCoupOn =>PUP.Optional.EnjoyCoupon C:\Program Files (x86)\eSupport.com =>PUP.Optional.eSupport C:\Program Files (x86)\Exploremedia =>PUP.Optional.Generic C:\Program Files (x86)\ExstraCouupon =>PUP.Optional.ExtraCoupon C:\Program Files (x86)\F3738680-1445878030-81E2-3AFA-7054D2231A7F =>PUP.Optional.CrossRider C:\Program Files (x86)\FiendBEstDeal =>PUP.Optional.FindBestDeal C:\Program Files (x86)\FindBEEstDeal =>PUP.Optional.FindBestDeal C:\Program Files (x86)\FindBeStDeal =>PUP.Optional.FindBestDeal C:\Program Files (x86)\FindBestDeeal =>PUP.Optional.Deeal C:\Program Files (x86)\FuonDeals =>PUP.Optional.FunDeals C:\Program Files (x86)\GreaTTSeAve4U =>PUP.Optional.GreatSave4U C:\Program Files (x86)\LighterInit =>PUP.Optional.Multiplug C:\Program Files (x86)\OLBPre =>PUP.Optional.MyPCBackup C:\Program Files (x86)\RandoomPrice =>PUP.Optional.RandomPrice C:\Program Files (x86)\RelayEdit =>PUP.Optional.RelayEdit C:\Program Files (x86)\SaleePelus =>PUP.Optional.SalePlus C:\Program Files (x86)\SalePliuaS =>PUP.Optional.SalePlus C:\Program Files (x86)\SalleoPleuS =>PUP.Optional.SalePlus C:\Program Files (x86)\SallePLus =>PUP.Optional.SalePlus C:\Program Files (x86)\SaloePlaues =>PUP.Optional.SalePlus C:\Program Files (x86)\SaolePlus =>PUP.Optional.SalePlus C:\Program Files (x86)\SaveLotts =>PUP.Optional.SaveLots C:\Program Files (x86)\SeallePlUs =>PUP.Optional.SalePlus C:\Program Files (x86)\Search YouTube =>PUP.Optional.SearchYouTube C:\Program Files (x86)\ShopDrOPP =>PUP.Optional.ShopDrop C:\Program Files (x86)\ShoppDroP =>PUP.Optional.ShopDrop C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse =>PUP.Optional.CrossBrowse C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico C:\ProgramData\2WMiniPro2 =>PUP.Optional.WdsManPro C:\ProgramData\4WMiniPro4 =>PUP.Optional.WdsManPro C:\ProgramData\ApplicationHosting =>PUP.Optional.ApplicationHosting C:\ProgramData\Babylon =>PUP.Optional.Babylon C:\ProgramData\BEstSAveForrYOu =>PUP.Optional.BestSaveForYou C:\ProgramData\Browser =>PUP.Optional.SpeedBrowser C:\ProgramData\Browser AdBlocker =>PUP.Optional.SpeedBrowser C:\ProgramData\CoupExtension =>PUP.Optional.CoupExtension C:\ProgramData\dollArkeeEEppeR =>PUP.Optional.DollarKeeper C:\ProgramData\DownSave =>PUP.Optional.DownSave C:\ProgramData\eWMiniProe =>PUP.Optional.WdsManPro C:\ProgramData\Fun2Save =>PUP.Optional.Fun2Save C:\ProgramData\FWMiniProF =>PUP.Optional.WdsManPro C:\ProgramData\GoSave =>PUP.Optional.GoSave C:\ProgramData\iWMiniProi =>PUP.Optional.WdsManPro C:\ProgramData\Labcenter Electronics =>PUP.Optional.BundleInstaller C:\ProgramData\lWMiniProl =>PUP.Optional.WdsManPro C:\ProgramData\MionuimouommPrIce =>PUP.Optional.MinimumPrice C:\ProgramData\MWMiniProM =>PUP.Optional.WdsManPro C:\ProgramData\OWMiniProO =>PUP.Optional.WdsManPro C:\ProgramData\PlayGemConfig =>PUP.Optional.PlayGem C:\ProgramData\pWMiniProp =>PUP.Optional.WdsManPro C:\ProgramData\RooboSAver =>PUP.Optional.RoboSaver C:\ProgramData\Saophases =>PUP.Optional.Saophase C:\ProgramData\Systweak =>.Superfluous.Systweak C:\ProgramData\Tencent =>.Superfluous.Tencent C:\ProgramData\The AdBlocker =>PUP.Optional.Adblocker C:\ProgramData\TheAdBlock =>PUP.Optional.TheAdBlock C:\ProgramData\Tmp0x0x =>PUP.Optional.WpManager C:\ProgramData\vWMiniProv =>PUP.Optional.WdsManPro C:\ProgramData\XWMiniProX =>PUP.Optional.WdsManPro C:\ProgramData\Yellow AdBlocker =>PUP.Optional.Adblocker C:\ProgramData\yWMiniProy =>PUP.Optional.WdsManPro C:\Program Files (x86)\Common Files\Tencent =>.Superfluous.Tencent C:\Users\Amir\AppData\Roaming\Babylon =>PUP.Optional.Babylon C:\Users\Amir\AppData\Roaming\cpuminer =>PUP.Optional.CPUminer C:\Users\Amir\AppData\Roaming\smileyswelove =>PUP.Optional.SmileyBar C:\Users\Amir\AppData\Roaming\SSN =>PUP.Optional.SaveSerpNow C:\Users\Amir\AppData\Roaming\systweak =>.Superfluous.Systweak C:\Users\Amir\AppData\Roaming\Tencent =>.Superfluous.Tencent C:\Users\Amir\AppData\Local\Babylon =>PUP.Optional.Babylon C:\Users\Amir\AppData\Local\Chromatic Browser =>PUP.Optional.ChromaticBrowser C:\Users\Amir\AppData\Local\eSupport.com =>PUP.Optional.eSupport C:\Users\Amir\AppData\Local\HealthAlert =>PUP.Optional.HealthAlert C:\Users\Amir\AppData\Local\Pay-By-Ads =>PUP.Optional.PaybyAds C:\Users\Amir\AppData\Local\PPTAssist =>.Superfluous.ZhuhaiKingsoft C:\Users\Amir\AppData\Local\Systweak =>.Superfluous.Systweak C:\Users\Amir\AppData\Local\Torch =>.Superfluous.Torch C:\Users\Amir\AppData\Local\Windesk_Winsearch =>PUP.Optional.WindeskWinsearch HKCU\Software\Microsoft\Internet Explorer\SearchScopes\OldSearch =>PUP.Optional.DoSearches HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{135978CF-7F4E-4BF9-97F0-19DC124BD58E} =>PUP.Optional.DoSearches HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{20B9D1AE-AD1A-38B4-87FE-AF278DA9861D} =>PUP.Optional.GoPalikan HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E74F99CB-0C97-40EF-AACF-A559B724237E} =>PUP.Optional.DoSearches HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{ielnksrch} =>PUP.Optional.Linkury HKLM\Software\Microsoft\Internet Explorer\SearchScopes\ielnksrch =>PUP.Optional.Linkury C:\Program Files\KMSpico\Service_KMS.exe =>HackTool.KMSpico HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\tencentdl_RASAPI32 =>.Superfluous.Tencent ---\\ Récapitulatif des éléments trouvés sur votre station (89) - 0s http://www.nicolascoolman.fr/?p=368 =>.Superfluous.Tencent http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Adwareplugin http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Picexa http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.GoPalikan http://www.nicolascoolman.fr/pup-optional-istartpageing/ =>PUP.Optional.IstartPageing http://www.nicolascoolman.fr/hijacker-browser/ =>Hijacker.Browser http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Chrome http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WinYahoo http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DeltaHomes http://www.nicolascoolman.fr/?p=1754 =>PUP.Optional.PaybyAds http://www.nicolascoolman.fr/?p=308 =>PUP.Optional.SmartBar http://www.nicolascoolman.fr/pup-optional-startsearch/ =>PUP.Optional.StartSearch http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SearchSimple http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SimpleSearches http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BDYahoo http://www.nicolascoolman.fr/?p=4664 =>Trojan.GoSearch http://www.nicolascoolman.info/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.LightningNewTab http://www.nicolascoolman.fr/?p=546 =>PUP.Optional.Browser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Linkury http://www.nicolascoolman.fr/?p=721 =>PUP.Optional.Qvo6 http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.CompatibleWebDir http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DesktopPlay http://www.nicolascoolman.fr/pup-optional-chedotbrowser/ =>PUP.Optional.ChedotBrowser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DownChecker http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SweetSearch http://www.nicolascoolman.fr/?p=641 =>PUP.Optional.SoftwareUpdater http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SpeedBrowser http://www.nicolascoolman.info/2016/04/26/superfluous-springfiles/ =>.Superfluous.SpringFiles http://www.nicolascoolman.fr/pup-systweak/ =>.Superfluous.Systweak http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WdsManPro http://www.nicolascoolman.fr/?p=1750 =>PUP.Optional.Alnaddy http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.CrossBrowser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.eSupport http://www.nicolascoolman.fr/pup-inetstat/ =>PUP.Optional.InetStat http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BrowserExtensions http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PastaLeads http://www.nicolascoolman.info/2016/05/05/superfluous-zhuhaikingsoft/ =>.Superfluous.ZhuhaiKingsoft http://www.nicolascoolman.info/2016/04/22/adware-installcore/ =>Adware.InstallCore http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SfKpCouponApp http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Squeaky http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Downloader http://www.nicolascoolman.fr/?p=1135 =>PUP.Optional.weDownloadManager http://www.nicolascoolman.fr/?p=989 =>HackTool.KMSpico http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.50Coupons http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.AllCheapPrice http://www.nicolascoolman.fr/?p=1126 =>PUP.Optional.BestSaveForYou http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.CheapMe http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.CouponTime http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DollarKeeper http://www.nicolascoolman.fr/?p=1365 =>PUP.Optional.DownSave http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.EnjoyCoupon http://www.nicolascoolman.info/2016/05/01/definition-dun-logiciel-pup-lpi/ =>PUP.Optional.Generic http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ExtraCoupon http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FindBestDeal http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Deeal http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FunDeals http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.GreatSave4U http://www.nicolascoolman.info/2016/04/28/pup-optional-multiplug/ =>PUP.Optional.Multiplug http://www.nicolascoolman.fr/?p=316 =>PUP.Optional.MyPCBackup http://www.nicolascoolman.fr/?p=1543 =>PUP.Optional.RandomPrice http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.RelayEdit http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SalePlus http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SaveLots http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SearchYouTube http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ShopDrop http://www.nicolascoolman.fr/pup-optional-crossbrowse =>PUP.Optional.CrossBrowse http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ApplicationHosting http://www.nicolascoolman.fr/?p=170 =>PUP.Optional.Babylon http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.CoupExtension http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Fun2Save http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.GoSave http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BundleInstaller http://www.nicolascoolman.fr/?p=1530 =>PUP.Optional.MinimumPrice http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.PlayGem http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.RoboSaver http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Saophase http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Adblocker http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.TheAdBlock http://www.nicolascoolman.fr/?p=173 =>PUP.Optional.WpManager http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.CPUminer http://www.nicolascoolman.fr/?p=998 =>PUP.Optional.SmileyBar http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SaveSerpNow http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.ChromaticBrowser http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.HealthAlert http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.Torch http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WindeskWinsearch http://www.nicolascoolman.fr/?p=666 =>PUP.Optional.QuickStart http://www.nicolascoolman.fr/?p=579 =>PUP.Optional.DoSearches ~ End of the scan, 93686 items in 01h00mn24s (1946)(0)