~ ZHPDiag v2016.6.6.102 Par Nicolas Coolman (2016/06/06) ~ Démarré par Aministrateur (Administrator) (2016/06/13 01:37:24) ~ Site: http://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version KO ~ Mode: Scanner ~ Rapport: C:\Documents and Settings\Aministrateur\Bureau\ZHPDiag.txt ~ Rapport: C:\Documents and Settings\Aministrateur\Application Data\ZHP\ZHPDiag.txt ~ UAC: Deactivate ~ Démarrage du système: Normal (Normal boot) Windows XP, 32-bit Service Pack 3 (Build 2600) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v49.0.2623.112 MSIE: Internet Explorer v7.0.5730.13 ---\\ Informations sur les produits Windows (3) - 0s Windows Automatic Updates : OK Windows Activation Technologies : KO Windows Genuine Advantage : OK ---\\ Logiciels d'optimisation (1) - 2s CCleaner v5.12 ---\\ Surveillance de Logiciels (1) - 3s Adobe Reader XI ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 15 Model 4 Stepping 1, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 1826.236 MB (44% free) System Restore: Activé (Enable) System drive C: has 3 GB () free of 40 GB =>Alerte espace disque inférieur à 20 Go ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: ADMINISTRATEUR ~ User Name: Aministrateur ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 3 GB free of 40 GB (System) ~ Drive D: has 32 GB free of 36 GB ---\\ Etat du Centre de Sécurité Windows (10) - 0s [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] XMLLookup: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Intl: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (23) - 3s [MD5.F2317622D29F9FF0F88AEECD5F60F0DD] - 14/04/2008 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [1037824] =>.Microsoft Corporation [MD5.93AD0B78C7357A05F50E594EC7C22300] - 14/04/2008 - (.Microsoft Corporation - Exécuter une DLL en tant qu'application.) -- C:\WINDOWS\System32\rundll32.exe [33792] =>.Microsoft Corporation [MD5.418FE72D859EA3320F89612A969015C9] - 23/09/2013 - (.Microsoft Corporation - Internet Extensions for Win32.) -- C:\WINDOWS\System32\wininet.dll [841216] =>.Microsoft Corporation [MD5.DD73D6B9F6B4CB630CF35B438B540174] - 14/04/2008 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [512000] =>.Microsoft Corporation [MD5.D76A076ADB74F8132924E498D63123A2] - 03/03/2011 - (.Microsoft Corporation - DNS Client API DLL.) -- C:\WINDOWS\System32\dnsapi.dll [149504] =>.Microsoft Corporation [MD5.1E44BC1E83D8FD2305F8D452DB109CF9] - 17/08/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [138496] =>.Microsoft Corporation [MD5.9F3A2F5AA6875C72BF062C712CFA2674] - 14/04/2008 - (.Microsoft Corporation - IDE/ATAPI Port Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [96512] =>.Microsoft Corporation [MD5.C885B02847F5D2FD45A24E219ED93B32] - 14/04/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [63744] =>.Microsoft Corporation [MD5.1F4260CC5B42272D71F79E570A27A4FE] - 14/04/2008 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [62976] =>.Microsoft Corporation [MD5.31F923EB2170FC172C81ABDA0045D18C] - 14/04/2008 - (.Microsoft Corporation - Pilote de cryptographie FIPS.) -- C:\WINDOWS\System32\drivers\Fips.sys [44672] =>.Microsoft Corporation [MD5.573C7D0A32852B48F3058CFD8026F511] - 14/04/2008 - (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [144384] [MD5.A09BDC4ED10E3B2E0EC27BB94AF32516] - 14/04/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [54144] =>.Microsoft Corporation [MD5.083A052659F5310DD8B6A6CB05EDCF8E] - 14/04/2008 - (.Microsoft Corporation - IMAPI Kernel Driver.) -- C:\WINDOWS\System32\drivers\Imapi.sys [42112] =>.Microsoft Corporation [MD5.CC748EA12C6EFFDE940EE98098BF96BB] - 14/04/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [152832] =>.Microsoft Corporation [MD5.23C74D75E36E7158768DD63D92789A91] - 14/04/2008 - (.Microsoft Corporation - IPSec Driver.) -- C:\WINDOWS\System32\drivers\IPSec.sys [75264] =>.Microsoft Corporation [MD5.7D304A5EB4344EBEEAB53A2FE3FFB9F0] - 15/07/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [456320] =>.Microsoft Corporation [MD5.74B2B2F5BEA5E9A3DC021D685551BD3D] - 14/04/2008 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [162816] =>.Microsoft Corporation [MD5.78A08DD6A8D65E697C18E1DB01C5CDCA] - 14/04/2008 - (.Microsoft Corporation - NT File System Driver.) -- C:\WINDOWS\System32\drivers\ntfs.sys [574976] =>.Microsoft Corporation [MD5.8FD0BDBEA875D06CCF6C945CA9ABAF75] - 14/04/2008 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [80384] =>.Microsoft Corporation [MD5.11B4A627BC9614B885C4969BFA5FF8A6] - 14/04/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [51328] =>.Microsoft Corporation [MD5.15CABD0F7C00C47C70124907916AF3F1] - 13/04/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [196224] =>.Microsoft Corporation [MD5.D8EB2A7904DB6C916EB5361878DDCBAE] - 13/04/2008 - (.Microsoft Corporation - Pilote de filtre audio Livre rouge.) -- C:\WINDOWS\System32\drivers\redbook.sys [58752] =>.Microsoft Corporation [MD5.46DE1126684369BACE4849E4FC8C43CA] - 14/04/2008 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [53376] =>.Microsoft Corporation ---\\ Liste des services NT non Microsoft et non désactivés (2) - 1s O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) . (.Analog Devices, Inc. - SoundMAX service agent component.) - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe =>.Analog Devices, Inc. ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (5) - 16s SS - Auto [09/09/2015] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [09/09/2015] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [17/12/2015] [ 147624] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SR - Auto [20/09/2002] [ 45056] SoundMAX Agent Service (SoundMAX Agent Service (default)) . (.Analog Devices, Inc..) - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe =>.Analog Devices, Inc. ---\\ Tâches planifiées en automatique (8) - 4s [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- D‚marrer … l'ouverture de session (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- SYSTEM (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineUA] (...) -- SYSTEM (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [Notification de fin de service de Microsoft Windows XP - … la connexion] (...) -- D‚marrer … l'ouverture de session (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [Notification de fin de service de Microsoft Windows XP -mensuellement] (...) -- Aministrateur (.not file.) [0] (.Activate.) =>.Superfluous.Empty O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1052] (.Orphan.) =>.Superfluous.Orphan O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1056] (.Orphan.) =>.Superfluous.Orphan O39 - APT: Notification de fin de service de Microsoft Windows XP -mensuellement - (...) -- C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job [232] (.Orphan.) =>.Superfluous.Orphan ---\\ Processus lancés (22) - 6s [MD5.3978F082274F723AD5A0A8058C2417DD] - (.Analog Devices, Inc. - SoundMAX service agent component.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe [45056] [PID.384] =>.Analog Devices, Inc. [MD5.DD7423ABBE2913E70D50E9318AD57EE4] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files\Google\Update\GoogleUpdate.exe [144200] [PID.356] =>.Google Inc® [MD5.68FE95197C9CA351E749AB49F5A174A8] - (.Analog Devices, Inc. - SoundMAX System Tray.) -- C:\Program Files\Analog Devices\SoundMAX\SMTray.exe [225280] [PID.1300] =>.Analog Devices, Inc. [MD5.E79977B1ECC05C53F0194750457BBB37] - (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe [131072] [PID.1856] =>.Intel Corporation [MD5.DDE4A991F26179573D2CFA7A093F56FA] - (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe [163840] [PID.1440] =>.Intel Corporation [MD5.EAF47A526B911B0961D3FECEB442E0C4] - (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe [135168] [PID.1512] =>.Intel Corporation [MD5.8D8D9C8486CB29D01000BFFFE132780A] - (.Wondershare - Wondershare Studio.) -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2087264] [PID.2008] =>.Wondershare software CO., LIMITED® [MD5.5C35525CEBE7B59FAFA05D5E98D7EDEF] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [6602152] [PID.2188] =>.Piriform Ltd® [MD5.CC436BB2A26391F3DEBE316F6FB0474F] - (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Microsoft\BingSvc\BingSvc.exe [144008] [PID.2232] =>.Microsoft Corporation® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3284] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.3448] =>.Google Inc® [MD5.0612402AD98C8C31CD6F2B914A419039] - (...) -- C:\Documents and Settings\Aministrateur\Local Settings\Temp\winsbsamy.exe [12970] [PID.2484] [MD5.781A020EE3641DA19FE4EBA0FBAB1444] - (...) -- C:\Documents and Settings\Aministrateur\Local Settings\Temp\begjmx.exe [19626] [PID.2628] [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.1168] =>.Google Inc® [MD5.97C105F970F72928BA957F1C46FEA6AB] - (...) -- C:\Documents and Settings\Aministrateur\Local Settings\Temp\winsmbm.exe [53930] [PID.680] [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.13596] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.23588] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.22744] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.20644] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.24664] =>.Google Inc® [MD5.06FAA58219BF8B6D1BC25C2783763E11] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [874648] [PID.32392] =>.Google Inc® [MD5.CC0AD099C20DE19FB336AE3E6712DBEE] - (.Nicolas Coolman - ZHPDiag.) -- C:\Documents and Settings\Aministrateur\Mes documents\Downloads\ZHPDiag3.exe [2213888] [PID.33400] =>.Nicolas Coolman ---\\ Google Chrome, Démarrage,Recherche,Extensions (11) - 1s G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [dkmjljdbbgogihjcapfhgkonfmccbffp] eShield G2 - GCE: Preference [User Data\Default] [fcfenmboojpjinhpgggodefccipikbpd] __MSG_ExtnName__ G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 0s M0 - MFSP: prefs.js [Aministrateur - xh483j1j.default-1448803674421] http://services.eshield.com/general/newhometab.php?hometab=home&partner=11433&guid={ADD9B3FB-F921-47B5-A2A1-2F30E529D6BE}&i= =>.Superfluous.eShield P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.1] - (.VideoLAN.) -- D:\VLC\npvlc.dll =>.VideoLAN ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (12) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/ R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://services.eshield.com/ =>.Superfluous.eShield R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = http://services.eshield.com/ =>.Superfluous.eShield R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer R4 - HKCU\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,Enabled = 1 ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl" ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (0) ---\\ Applications lancées au démarrage du système (23) - 0s O4 - HKLM\..\Run: [bintin] . (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation O4 - HKLM\..\Run: [AzMixerSel] . (.Realtek Semiconductor Corp. - Azalia Mixer Selector.) -- C:\Program Files\Realtek\InstallShield\AzMixerSel.exe =>.Realtek Semiconductor Corp. O4 - HKLM\..\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated O4 - HKLM\..\Run: [Smapp] . (.Analog Devices, Inc. - SoundMAX System Tray.) -- C:\Program Files\Analog Devices\SoundMAX\SMTray.exe =>.Analog Devices, Inc. O4 - HKLM\..\Run: [VideoLAN] . (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation O4 - HKLM\..\Run: [C-cleaner] . (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe =>.Intel Corporation O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe =>.Intel Corporation O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe =>.Intel Corporation O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] . (.Wondershare - Wondershare Studio.) -- C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe =>.Wondershare software CO., LIMITED® O4 - HKLM\..\Run: [Microsoft Word] . (...) -- C:\Documents and Settings\Aministrateur\Application Data\Microsoft Office\Microsoft Word.WsF O4 - HKCU\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd® O4 - HKCU\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation® O4 - HKCU\..\Run: [Microsoft Word] . (...) -- C:\Documents and Settings\Aministrateur\Application Data\Microsoft Office\Microsoft Word.WsF O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-1644491937-688789844-1606980848-1003\..\Run: [CTFMON.EXE] . (.Microsoft Corporation - CTF Loader.) -- C:\WINDOWS\system32\ctfmon.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-1644491937-688789844-1606980848-1003\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd® O4 - HKUS\S-1-5-21-1644491937-688789844-1606980848-1003\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-1644491937-688789844-1606980848-1003\..\Run: [Microsoft Word] . (...) -- C:\Documents and Settings\Aministrateur\Application Data\Microsoft Office\Microsoft Word.WsF ---\\ Raccourcis Global Startup (50) - 16s O4 - GS\Desktop [Administrateur]: Convertisseur de fichiers en ligne.lnk . (...) C:\Program Files\Abdio Software Inc\Word Reader\OfficeLinks.exe O4 - GS\Desktop [Administrateur]: Personne 2 - Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [Administrateur]: Raccourci (2) vers IMG-20160422-WA0005.lnk . (...) G:\WhatsApp\Media\WhatsApp Images\IMG-20160422-WA0005.jpg O4 - GS\Desktop [Administrateur]: Raccourci (4) vers Camera.lnk . (...) G:\DCIM\Camera O4 - GS\Desktop [Administrateur]: Raccourci vers 12016519_171187166550179_1342850146_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\12016519_171187166550179_1342850146_n.jpg O4 - GS\Desktop [Administrateur]: Raccourci vers 12644759_988331121226817_3698968567697842067_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\12644759_988331121226817_3698968567697842067_n.jpg O4 - GS\Desktop [Administrateur]: Raccourci vers 1937098_1050302395020037_3823697275270737236_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\1937098_1050302395020037_3823697275270737236_n.jpg O4 - GS\Desktop [Administrateur]: Raccourci vers Camera.lnk . (...) G:\DCIM\Camera O4 - GS\Desktop [Administrateur]: Raccourci vers IMG-20160422-WA0005.lnk . (...) G:\WhatsApp\Media\WhatsApp Images\IMG-20160422-WA0005.jpg O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Aministrateur\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: chrome.LNK . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [Aministrateur]: Convertisseur de fichiers en ligne.lnk . (...) C:\Program Files\Abdio Software Inc\Word Reader\OfficeLinks.exe O4 - GS\Desktop [Aministrateur]: Personne 2 - Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [Aministrateur]: Raccourci (2) vers IMG-20160422-WA0005.lnk . (...) G:\WhatsApp\Media\WhatsApp Images\IMG-20160422-WA0005.jpg O4 - GS\Desktop [Aministrateur]: Raccourci (4) vers Camera.lnk . (...) G:\DCIM\Camera O4 - GS\Desktop [Aministrateur]: Raccourci vers 12016519_171187166550179_1342850146_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\12016519_171187166550179_1342850146_n.jpg O4 - GS\Desktop [Aministrateur]: Raccourci vers 12644759_988331121226817_3698968567697842067_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\12644759_988331121226817_3698968567697842067_n.jpg O4 - GS\Desktop [Aministrateur]: Raccourci vers 1937098_1050302395020037_3823697275270737236_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\1937098_1050302395020037_3823697275270737236_n.jpg O4 - GS\Desktop [Aministrateur]: Raccourci vers Camera.lnk . (...) G:\DCIM\Camera O4 - GS\Desktop [Aministrateur]: Raccourci vers IMG-20160422-WA0005.lnk . (...) G:\WhatsApp\Media\WhatsApp Images\IMG-20160422-WA0005.jpg O4 - GS\Desktop [Aministrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Aministrateur\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Aministrateur]: chrome.LNK . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [HelpAssistant]: Convertisseur de fichiers en ligne.lnk . (...) C:\Program Files\Abdio Software Inc\Word Reader\OfficeLinks.exe O4 - GS\Desktop [HelpAssistant]: Personne 2 - Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [HelpAssistant]: Raccourci (2) vers IMG-20160422-WA0005.lnk . (...) G:\WhatsApp\Media\WhatsApp Images\IMG-20160422-WA0005.jpg O4 - GS\Desktop [HelpAssistant]: Raccourci (4) vers Camera.lnk . (...) G:\DCIM\Camera O4 - GS\Desktop [HelpAssistant]: Raccourci vers 12016519_171187166550179_1342850146_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\12016519_171187166550179_1342850146_n.jpg O4 - GS\Desktop [HelpAssistant]: Raccourci vers 12644759_988331121226817_3698968567697842067_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\12644759_988331121226817_3698968567697842067_n.jpg O4 - GS\Desktop [HelpAssistant]: Raccourci vers 1937098_1050302395020037_3823697275270737236_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\1937098_1050302395020037_3823697275270737236_n.jpg O4 - GS\Desktop [HelpAssistant]: Raccourci vers Camera.lnk . (...) G:\DCIM\Camera O4 - GS\Desktop [HelpAssistant]: Raccourci vers IMG-20160422-WA0005.lnk . (...) G:\WhatsApp\Media\WhatsApp Images\IMG-20160422-WA0005.jpg O4 - GS\Desktop [HelpAssistant]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Aministrateur\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [HelpAssistant]: chrome.LNK . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [SUPPORT_388945a0]: Convertisseur de fichiers en ligne.lnk . (...) C:\Program Files\Abdio Software Inc\Word Reader\OfficeLinks.exe O4 - GS\Desktop [SUPPORT_388945a0]: Personne 2 - Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci (2) vers IMG-20160422-WA0005.lnk . (...) G:\WhatsApp\Media\WhatsApp Images\IMG-20160422-WA0005.jpg O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci (4) vers Camera.lnk . (...) G:\DCIM\Camera O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci vers 12016519_171187166550179_1342850146_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\12016519_171187166550179_1342850146_n.jpg O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci vers 12644759_988331121226817_3698968567697842067_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\12644759_988331121226817_3698968567697842067_n.jpg O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci vers 1937098_1050302395020037_3823697275270737236_n.lnk . (...) C:\Documents and Settings\Aministrateur\Mes documents\Downloads\1937098_1050302395020037_3823697275270737236_n.jpg O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci vers Camera.lnk . (...) G:\DCIM\Camera O4 - GS\Desktop [SUPPORT_388945a0]: Raccourci vers IMG-20160422-WA0005.lnk . (...) G:\WhatsApp\Media\WhatsApp Images\IMG-20160422-WA0005.jpg O4 - GS\Desktop [SUPPORT_388945a0]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Documents and Settings\Aministrateur\Application Data\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [SUPPORT_388945a0]: chrome.LNK . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: Adobe Reader XI.lnk . (.Adobe Systems Incorporated - Adobe Reader.) C:\Program Files\Adobe\Reader 11.0\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated® O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd® O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: SDFormatter.lnk . (.TRENDY Corporation - Format Tool for SD Card [Normal Area Only].) C:\Program Files\SDA\SD Formatter\SDFormatter.exe O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (...) D:\VLC\vlc.exe O4 - GS\Programs [Public]: Convertisseur de fichiers en ligne.lnk . (...) C:\Program Files\Abdio Software Inc\Word Reader\OfficeLinks.exe ---\\ Modification Domaine/Adresses DNS (2) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{6BAF30DD-64F2-4E24-BFB1-0C5BE5F66EC7}: DhcpNameServer = 192.168.1.1 ---\\ Protocole additionnel (28) - 1s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API.) -- C:\WINDOWS\system32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\WINDOWS\system32\itss.dll =>.Microsoft Corporation O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: sysimage - {76E67A63-06E9-11D2-A840-006008059382} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\WINDOWS\system32\msvidctl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Microsoft (R) HTML Viewer.) -- C:\WINDOWS\system32\mshtml.dll =>.Microsoft Corporation O18 - Handler: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} . (.Microsoft Corporation - WIA Scripting Layer.) -- C:\WINDOWS\system32\wiascr.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\WINDOWS\system32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: Class Install Handler - {32B533BB-EDAE-11d0-BD5A-00AA00B92AF1} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: lzdhtml - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - OLE32 Extensions for Win32.) -- C:\WINDOWS\system32\urlmon.dll =>.Microsoft Corporation O18 - Filter: text/webviewhtml - {733AC4CB-F1A4-11d0-B951-00A0C90312E1} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation ---\\ Logiciels installés (23) - 58s O42 - Logiciel: Adobe Reader XI (11.0.08) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AB0000000001} =>.Adobe Systems Incorporated O42 - Logiciel: aTube Catcher version 3.8 - (.DsNET Corp.) [HKLM] -- {D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1 =>.DsNET Corp O42 - Logiciel: Broadcom Management Programs - (.Broadcom Corporation.) [HKLM] -- {7BB045C3-D5E4-4620-B536-DC11AACD5942} =>.Broadcom Corporation O42 - Logiciel: Broadcom NetXtreme Ethernet Controller - (.Broadcom Corporation.) [HKLM] -- {F870B987-18BC-45FC-9BE8-35C02DCDA10F} =>.Broadcom Corporation O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: Hotfix for Windows XP (KB915865) - (.Microsoft Corporation.) [HKLM] -- KB915865 =>.Microsoft Corporation® O42 - Logiciel: Hotfix for Windows XP (KB954550-v5) - (.Microsoft Corporation.) [HKLM] -- KB954550-v5 =>.Microsoft Corporation O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (...) [HKLM] -- HDMI O42 - Logiciel: Microsoft Internationalized Domain Names Mitigation APIs - (.Microsoft Corporation.) [HKLM] -- IDNMitigationAPIs =>.Microsoft Corporation® O42 - Logiciel: Microsoft National Language Support Downlevel APIs - (.Microsoft Corporation.) [HKLM] -- NLSDownlevelMapping =>.Microsoft Corporation® O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp. O42 - Logiciel: SDFormatter - (.SD Association.) [HKLM] -- {179324FF-7B16-4BA8-9836-055CAAEE4F08} =>.SD Association O42 - Logiciel: SoundMAX - (.Analog Devices.) [HKLM] -- {F0A37341-D692-11D4-A984-009027EC0A9C} =>.Analog Devices O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN O42 - Logiciel: WebFldrs XP - (.Microsoft Corporation.) [HKLM] -- {350C940c-3D7C-4EE8-BAA9-00BCB3D54227} =>.Microsoft Corporation O42 - Logiciel: Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray - (.Microsoft Corporation.) [HKLM] -- KB952011 =>.Microsoft Corporation® O42 - Logiciel: Windows Genuine Advantage Notifications (KB905474) - (.Microsoft Corporation.) [HKLM] -- WgaNotify =>.Microsoft Corporation O42 - Logiciel: Windows Internet Explorer 7 - (.Microsoft Corporation.) [HKLM] -- ie7 =>.Microsoft Corporation® O42 - Logiciel: WinRAR 5.21 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH® ---\\ HKCU & HKLM Software Keys (78) - 58s HKLM\SOFTWARE\Adobe HKLM\SOFTWARE\Analog Devices HKLM\SOFTWARE\Andrea Electronics HKLM\SOFTWARE\Auslogics HKLM\SOFTWARE\AVS4YOU HKLM\SOFTWARE\Broadcom HKLM\SOFTWARE\C07ft5Y HKLM\SOFTWARE\EASEUS HKLM\SOFTWARE\Freemake HKLM\SOFTWARE\Gemplus HKLM\SOFTWARE\Google HKLM\SOFTWARE\InstalledOptions HKLM\SOFTWARE\Intel HKLM\SOFTWARE\IO3O HKLM\SOFTWARE\Lavasoft HKLM\SOFTWARE\Look@LAN HKLM\SOFTWARE\Macromedia HKLM\SOFTWARE\Mozilla HKLM\SOFTWARE\mozilla.org HKLM\SOFTWARE\MozillaPlugins HKLM\SOFTWARE\ODBC HKLM\SOFTWARE\Opera Software HKLM\SOFTWARE\Piriform HKLM\SOFTWARE\Program Groups HKLM\SOFTWARE\Realtek HKLM\SOFTWARE\Realtek Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications HKLM\SOFTWARE\Schlumberger HKLM\SOFTWARE\Secure HKLM\SOFTWARE\Skype HKLM\SOFTWARE\Staccato HKLM\SOFTWARE\TeamViewer HKLM\SOFTWARE\VideoLAN HKLM\SOFTWARE\WafCX HKLM\SOFTWARE\Windows 3.1 Migration Status HKLM\SOFTWARE\winlogon HKLM\SOFTWARE\WinRAR HKLM\SOFTWARE\Wondershare HKLM\SOFTWARE\Wow6432Node HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\Ajkfuavxbtkms HKCU\SOFTWARE\Analog Devices HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Avira HKCU\SOFTWARE\AVS4YOU HKCU\SOFTWARE\BenVista HKCU\SOFTWARE\Borland HKCU\SOFTWARE\Broadcom HKCU\SOFTWARE\David Esperalta HKCU\SOFTWARE\DriverToolkit =>.Superfluous.DriverToolkit HKCU\SOFTWARE\eSupport.com =>PUP.Optional.eSupport HKCU\SOFTWARE\FinalWire HKCU\SOFTWARE\Freemake HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\MediaChance HKCU\SOFTWARE\MiniTool Solution Ltd. HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\MP_ALL HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\PhotoInstrument HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RocketDock HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SoftPerfect HKCU\SOFTWARE\TNT2 =>PUP.Optional.Freshy HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\Wondershare HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software ---\\ Contenu des dossiers Programmes (120) - 16s O43 - CFD: 18/05/2016 - [] D -- C:\Program Files\Abdio Software Inc O43 - CFD: 09/09/2015 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 09/09/2015 - [] D -- C:\Program Files\Analog Devices O43 - CFD: 04/10/2015 - [0] D -- C:\Program Files\Auslogics O43 - CFD: 25/11/2015 - [0] D -- C:\Program Files\Avira O43 - CFD: 18/03/2016 - [0] D -- C:\Program Files\AVS4YOU O43 - CFD: 08/09/2015 - [] D -- C:\Program Files\Broadcom O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd® O43 - CFD: 18/03/2016 - [] D -- C:\Program Files\Common Files O43 - CFD: 30/08/2015 - [0] D -- C:\Program Files\ComPlus Applications O43 - CFD: 29/01/2016 - [] D -- C:\Program Files\Driver Identifier O43 - CFD: 29/01/2016 - [] D -- C:\Program Files\DriverToolkit =>.Superfluous.DriverToolkit O43 - CFD: 28/09/2015 - [] D -- C:\Program Files\DsNET Corp O43 - CFD: 06/06/2016 - [] D -- C:\Program Files\EaseUS O43 - CFD: 12/03/2016 - [] D -- C:\Program Files\Fichiers communs O43 - CFD: 09/09/2015 - [] D -- C:\Program Files\FinalWire O43 - CFD: 06/01/2016 - [0] D -- C:\Program Files\Freemake O43 - CFD: 09/09/2015 - [] D -- C:\Program Files\Google =>.Google Inc® O43 - CFD: 09/09/2015 - [] HD -- C:\Program Files\InstallShield Installation Information O43 - CFD: 30/11/2015 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 12/05/2016 - [] D -- C:\Program Files\IO3O LLC O43 - CFD: 03/09/2015 - [] D -- C:\Program Files\Look@LAN O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\microsoft frontpage O43 - CFD: 26/11/2015 - [] D -- C:\Program Files\Microsoft Office O43 - CFD: 24/11/2015 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation® O43 - CFD: 08/06/2016 - [] D -- C:\Program Files\MiniToolPhotoRecovery O43 - CFD: 11/09/2015 - [] D -- C:\Program Files\Movie Maker O43 - CFD: 26/05/2016 - [] D -- C:\Program Files\Mozilla Maintenance Service =>.Mozilla Corporation® O43 - CFD: 16/09/2015 - [] D -- C:\Program Files\MSBuild O43 - CFD: 10/11/2015 - [] D -- C:\Program Files\MSECache O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\MSN Gaming Zone O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\NetMeeting O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Online Services O43 - CFD: 11/09/2015 - [] D -- C:\Program Files\Outlook Express O43 - CFD: 09/09/2015 - [] D -- C:\Program Files\Realtek O43 - CFD: 09/09/2015 - [] D -- C:\Program Files\Realtek AC97 O43 - CFD: 16/09/2015 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 11/06/2016 - [] D -- C:\Program Files\SDA O43 - CFD: 02/09/2015 - [0] D -- C:\Program Files\Services en ligne O43 - CFD: 30/08/2015 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Windows NT O43 - CFD: 30/08/2015 - [0] HD -- C:\Program Files\WindowsUpdate O43 - CFD: 08/10/2015 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\xerox O43 - CFD: 30/03/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Accessoires O43 - CFD: 28/09/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\aTube Catcher O43 - CFD: 04/10/2015 - [0] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Auslogics O43 - CFD: 08/09/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Broadcom O43 - CFD: 29/11/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\CCleaner O43 - CFD: 13/05/2016 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage O43 - CFD: 30/08/2015 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Jeux O43 - CFD: 24/11/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Microsoft Silverlight O43 - CFD: 30/08/2015 - [] RD -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Outils d'administration O43 - CFD: 11/06/2016 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SDFormatter O43 - CFD: 09/09/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\SoundMAX O43 - CFD: 15/11/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\VideoLAN O43 - CFD: 08/10/2015 - [] D -- C:\Documents and Settings\All Users\Menu Démarrer\Programmes\WinRAR O43 - CFD: 09/09/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\Adobe O43 - CFD: 28/09/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\Auslogics O43 - CFD: 24/11/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\Avira O43 - CFD: 12/03/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\AVS4YOU O43 - CFD: 13/05/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\boost_interprocess O43 - CFD: 30/08/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\DatacardService O43 - CFD: 24/10/2015 - [0] D -- C:\Documents and Settings\All Users\Application Data\IDM O43 - CFD: 28/09/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\Lavasoft O43 - CFD: 24/11/2015 - [] SD -- C:\Documents and Settings\All Users\Application Data\Microsoft O43 - CFD: 27/11/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\Microsoft Help O43 - CFD: 25/11/2015 - [0] D -- C:\Documents and Settings\All Users\Application Data\Package Cache O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Skype O43 - CFD: 11/09/2015 - [] D -- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage O43 - CFD: 10/10/2015 - [0] D -- C:\Documents and Settings\All Users\Application Data\WinZip O43 - CFD: 18/03/2016 - [] D -- C:\Documents and Settings\All Users\Application Data\Wondershare O43 - CFD: 09/09/2015 - [] D -- C:\Program Files\Fichiers communs\Adobe O43 - CFD: 18/03/2016 - [] D -- C:\Program Files\Fichiers communs\AVSMedia O43 - CFD: 09/09/2015 - [] D -- C:\Program Files\Fichiers communs\InstallShield O43 - CFD: 26/11/2015 - [] D -- C:\Program Files\Fichiers communs\Microsoft Shared O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Fichiers communs\MSSoap O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Fichiers communs\ODBC O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Fichiers communs\Services O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Fichiers communs\SpeechEngines O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Fichiers communs\System O43 - CFD: 09/09/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\Adobe O43 - CFD: 12/03/2016 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\AVS4YOU O43 - CFD: 25/10/2015 - [0] D -- C:\Documents and Settings\Aministrateur\Application Data\DMCache O43 - CFD: 29/01/2016 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\driveridentifier O43 - CFD: 03/09/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\DriverTurbo =>.Superfluous.DeskToolsSoft O43 - CFD: 30/08/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\Identities O43 - CFD: 28/09/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\Lavasoft O43 - CFD: 13/02/2016 - [] SD -- C:\Documents and Settings\Aministrateur\Application Data\Microsoft O43 - CFD: 10/06/2016 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\Microsoft Office O43 - CFD: 28/11/2015 - [0] D -- C:\Documents and Settings\Aministrateur\Application Data\Moonchild Productions O43 - CFD: 28/11/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\Mozilla O43 - CFD: 30/11/2015 - [0] D -- C:\Documents and Settings\Aministrateur\Application Data\Octoshape O43 - CFD: 25/11/2015 - [0] D -- C:\Documents and Settings\Aministrateur\Application Data\Opera Software O43 - CFD: 06/01/2016 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\RPEng =>PUP.Optional.Generic O43 - CFD: 13/02/2016 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\Skype O43 - CFD: 03/09/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\SoftPerfect Personal Firewall O43 - CFD: 28/11/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\TeamViewer O43 - CFD: 12/05/2016 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\uTorrent O43 - CFD: 15/11/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\vlc O43 - CFD: 27/09/2015 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\WinRAR O43 - CFD: 13/06/2016 - [] D -- C:\Documents and Settings\Aministrateur\Application Data\ZHP O43 - CFD: 09/09/2015 - [] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Adobe O43 - CFD: 06/06/2016 - [] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Downloaded Installations O43 - CFD: 29/01/2016 - [0] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\DriverToolkit =>.Superfluous.DriverToolkit O43 - CFD: 09/09/2015 - [0] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\eSupport.com =>PUP.Optional.eSupport O43 - CFD: 16/09/2015 - [] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Google O43 - CFD: 21/10/2015 - [] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Identities O43 - CFD: 10/03/2016 - [] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Microsoft O43 - CFD: 26/10/2015 - [0] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Microsoft Help O43 - CFD: 25/11/2015 - [] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Moonchild Productions O43 - CFD: 09/09/2015 - [] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Mozilla O43 - CFD: 25/11/2015 - [0] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Opera Software O43 - CFD: 14/09/2015 - [0] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Skype O43 - CFD: 10/03/2016 - [0] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\WMTools Downloaded Files O43 - CFD: 18/03/2016 - [] D -- C:\Documents and Settings\Aministrateur\Local Settings\Application Data\Wondershare O43 - CFD: 05/01/2016 - [] RD -- C:\Documents and Settings\Aministrateur\Menu Démarrer\Programmes\Accessoires O43 - CFD: 16/11/2015 - [] SHD -- C:\Documents and Settings\Aministrateur\Menu Démarrer\Programmes\Démarrage O43 - CFD: 08/10/2015 - [] D -- C:\Documents and Settings\Aministrateur\Menu Démarrer\Programmes\WinRAR ---\\ ShellIconOverlayIdentifiers (SIOI) (1) - 0s O106 - SIOI: Offline Files Menu [Fichiers hors connexion] - {750fdf0e-2a26-11d1-a3ea-080036587f03}. (.Microsoft Corporation - IU de cache côté client.) -- C:\WINDOWS\system32\cscui.dll =>.Microsoft Corporation ---\\ Liste des pilotes du système (42) - 8s O58 - SDL:2003/10/23 10:17:10 A . (.Andrea Electronics Corporation - Andrea Audio Noise Cancellation Driver.) -- C:\WINDOWS\System32\drivers\aeaudio.sys [100384] =>.Andrea Electronics Corporation O58 - SDL:2008/09/24 09:40:22 RA . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\WINDOWS\System32\drivers\ALCXWDM.SYS [4122368] =>.Realtek Semiconductor Corp. O58 - SDL:2008/04/24 14:44:52 A . (.Broadcom Corporation - Broadcom NetXtreme Crash Dump (x86).) -- C:\WINDOWS\System32\drivers\b57cdx.sys [105472] =>.Broadcom Corporation O58 - SDL:2008/07/25 00:18:32 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS5.1.) -- C:\WINDOWS\System32\drivers\b57xp32.sys [176640] =>.Broadcom Corporation O58 - SDL:2008/06/06 08:15:40 A . (.Broadcom Corporation - Broadcom Advanced Server Program Driver for.) -- C:\WINDOWS\System32\drivers\baspxp32.sys [98816] =>.Broadcom Corporation O58 - SDL:2008/04/14 13:00:00 A . (.RAVISENT Technologies Inc. - Pilote principal CineMaster C 1.2 WDM.) -- C:\WINDOWS\System32\drivers\cinemst2.sys [262528] =>.RAVISENT Technologies Inc. O58 - SDL:2008/04/14 13:00:00 A . (.Compaq Computer Corporation - Compaq PA-1 Player Driver.) -- C:\WINDOWS\System32\drivers\cpqdap01.sys [11776] =>.Compaq Computer Corporation O58 - SDL:2008/04/14 13:00:00 A . (.Microsoft Corp., Veritas Software - Pilote de démarrage du gestionnaire de disq.) -- C:\WINDOWS\System32\drivers\dmboot.sys [800256] =>.Microsoft Corp., Veritas Software O58 - SDL:2008/04/14 13:00:00 A . (.Microsoft Corp., Veritas Software - Pilote E/S du Gestionnaire de disques NT.) -- C:\WINDOWS\System32\drivers\dmio.sys [154496] =>.Microsoft Corp., Veritas Software O58 - SDL:2008/04/14 13:00:00 A . (.Microsoft Corp., Veritas Software. - NT Disk Manager Startup Driver.) -- C:\WINDOWS\System32\drivers\dmload.sys [5888] =>.Microsoft Corp., Veritas Software. O58 - SDL:2015/09/09 11:14:44 A . (.Phoenix Technologies - DriverAgent Direct I/O for 32-bit Windows.) -- C:\WINDOWS\System32\drivers\DrvAgent32.sys [31832] =>PUP.Optional.eSupport O58 - SDL:2008/04/14 13:00:00 A . (.Windows (R) Server 2003 DDK provider - High Definition Audio Bus Driver v1.0a.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys [144384] O58 - SDL:2016/01/29 18:22:04 A . (.Logix4u - hwinterface.sys.) -- C:\WINDOWS\System32\drivers\hwinterface.sys [3026] O58 - SDL:2007/01/13 12:33:18 A . (.Intel Corporation - Intel Graphics Miniport Driver.) -- C:\WINDOWS\System32\drivers\igxpmp32.sys [5672032] =>.Intel Corporation O58 - SDL:2008/04/14 13:00:00 A . (.S3/Diamond Multimedia Systems - NikeDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\nikedrv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2008/04/14 13:00:00 A . (.Parallel Technologies, Inc. - Parallel Technologies DirectParallel IO Lib.) -- C:\WINDOWS\System32\drivers\ptilink.sys [17792] =>.Parallel Technologies, Inc. O58 - SDL:2008/04/14 13:00:00 A . (.S3/Diamond Multimedia Systems - Rio8Drv.sys Usb Driver.) -- C:\WINDOWS\System32\drivers\rio8drv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2008/04/14 13:00:00 A . (.S3/Diamond Multimedia Systems - RioDrv Usb Driver.) -- C:\WINDOWS\System32\drivers\riodrv.sys [12032] =>.S3/Diamond Multimedia Systems O58 - SDL:2005/06/29 07:35:10 RA . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RtkHDAud.Sys [3173888] =>.Realtek Semiconductor Corp. O58 - SDL:2008/04/14 13:00:00 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2003/04/08 09:30:48 A . (.Analog Devices, Inc. - SoundMAX Stub Driver.) -- C:\WINDOWS\System32\drivers\smsens.sys [3744] =>.Analog Devices, Inc. O58 - SDL:2004/04/15 10:20:36 A . (.Analog Devices, Inc. - SoundMAX Integrated Digital Audio.) -- C:\WINDOWS\System32\drivers\smwdm.sys [612416] =>.Analog Devices, Inc. O58 - SDL:2015/10/28 19:21:53 A . (.Avira Operations GmbH & Co. KG - AVIRA SnapShot Driver.) -- C:\WINDOWS\System32\drivers\ssmdrv.sys [31848] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2014/12/11 21:53:08 A . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\WINDOWS\System32\drivers\tapwp01.sys [35288] =>.OpenVPN Technologies, Inc.® O58 - SDL:2008/04/14 13:00:00 A . (.Toshiba Corporation - WDM Toshiba Tecra Video Capture Driver.) -- C:\WINDOWS\System32\drivers\tsbvcap.sys [21376] =>.Toshiba Corporation O58 - SDL:2016/01/29 18:29:55 A . (.Windows (R) Win 7 DDK provider - Filter Driver for the Toaster Stack.) -- C:\WINDOWS\System32\drivers\usblowerfilter.sys [16128] =>.Windows (R) Win 7 DDK provider O58 - SDL:2008/04/14 13:00:00 A . (.RAVISENT Technologies Inc. - CineMaster C WDM DVD Minidriver.) -- C:\WINDOWS\System32\drivers\vdmindvd.sys [58112] =>.RAVISENT Technologies Inc. O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ansi.sys [9037] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\country.sys [27097] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\himem.sys [4912] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\key01.sys [42809] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\keyboard.sys [42537] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntdos.sys [27916] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntdos404.sys [29146] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntdos411.sys [29370] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntdos412.sys [29274] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntdos804.sys [29146] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntio.sys [34000] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntio404.sys [34560] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntio411.sys [35648] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntio412.sys [35424] O58 - SDL:2008/04/14 13:00:00 A . (...) -- C:\WINDOWS\System32\ntio804.sys [34560] ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (4) - 42s O61 - LFC: 2016/06/12 22:51:48 A . (..) -- C:\Documents and Settings\Aministrateur\micropro.exe [0] O61 - LFC: 2016/06/06 15:50:44 A . (.WonderFox Soft, Inc..) -- C:\Documents and Settings\Aministrateur\Mes documents\Downloads\dvd-ripper.exe [19988248] O61 - LFC: 2016/06/06 16:31:07 A . (.Alexandre Miguel Canotilho Coelho.) -- C:\Documents and Settings\Aministrateur\Mes documents\Downloads\Windows_Repair_Toolbox_setup.exe [2016668] O61 - LFC: 2016/06/11 17:43:15 A . (..) -- C:\Documents and Settings\Aministrateur\Bureau\Tous les les donnés de Hamza\Ps2 details\Games\GOW2\God of War II (Europe, Australia) (En,Fr,De,Es,It,Ru).iso [4261707776] ---\\ Associations Shell Spawning (8) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\WINDOWS\system32\shell32.dll =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\WINDOWS\system32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\WINDOWS\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (10) - 0s O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O68 - StartMenuInternet: <>[HKLM\..\Shell\open\Command] (...) -- D:\\launcher.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - IE Per-User Initialization Utility.) -- C:\WINDOWS\system32\ie4uinit.exe =>.Microsoft Corporation ---\\ Recherche d'infection sur les navigateurs (8) - 7s O69 - SBI: prefs.js [Aministrateur - xh483j1j.default-1448803674421] user_pref("browser.startup.homepage", "http://services.eshield.com/general/newhometab.php?hometab=home&partner=11433&guid={ADD9B3F[...] =>.Superfluous.eShield O69 - SBI: prefs.js [Aministrateur - xh483j1j.default-1448803674421] user_pref("extensions.ConstantFun.cg", "e3a21d1e-5689-4257-9bd5-c798db7d39ef"); =>PUP.Optional.ConstantFun O69 - SBI: prefs.js [Aministrateur - xh483j1j.default-1448803674421] user_pref("keyword.URL", "http://search.eshield.com/serp?guid={ADD9B3FB-F921-47B5-A2A1-2F30E529D6BE}&action=default_search&k="); =>.Superfluous.eShield O69 - SBI: prefs.js [Aministrateur - xh483j1j.default-1448803674421] user_pref("plugin.state.npconduitfirefoxplugin", 0); =>.Superfluous.Conduit O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {53A8CDBF-E9B2-470C-B811-E6965AA90757} - (Yahoo) - http://search.yahoo.com/ =>.Yahoo Search O69 - SBI: SearchScopes [HKCU] {E8AC4314-4F9D-4473-AED9-96372BBD2DFA} - (eShield Safe Web) - http://search.eshield.com/ =>.Superfluous.eShield O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://search.live.com/ ---\\ Enumère les services démarrés par Svchost (41) - 2s O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\WINDOWS\system32\appmgmts.dll [176640] =>.Microsoft Corporation O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Windows Audio Service.) -- C:\WINDOWS\system32\audiosrv.dll [42496] =>.Microsoft Corporation O83 - Search Svchost Services: Browser (Browser) . (.Microsoft Corporation - Computer Browser Service DLL.) -- C:\WINDOWS\system32\browser.dll [78336] =>.Microsoft Corporation O83 - Search Svchost Services: CryptSvc (CryptSvc) . (.Microsoft Corporation - Cryptographic Services.) -- C:\WINDOWS\system32\cryptsvc.dll [62464] =>.Microsoft Corporation O83 - Search Svchost Services: DMServer (DMServer) . (.Microsoft Corp. - DLL Service gestionnaire de disque logique.) -- C:\WINDOWS\system32\dmserver.dll [24576] =>.Microsoft Corp. O83 - Search Svchost Services: DHCP (DHCP) . (.Microsoft Corporation - Service client DHCP.) -- C:\WINDOWS\system32\dhcpcsvc.dll [127488] =>.Microsoft Corporation O83 - Search Svchost Services: ERSvc (ERSvc) . (.Microsoft Corporation - Windows Error Reporting Service.) -- C:\WINDOWS\system32\ersvc.dll [23040] =>.Microsoft Corporation O83 - Search Svchost Services: EventSystem (EventSystem) . (.Microsoft Corporation - .) -- C:\WINDOWS\system32\es.dll [253952] =>.Microsoft Corporation O83 - Search Svchost Services: FastUserSwitchingCompatibility (FastUserSwitchingCompatibility) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: HidServ (HidServ) . (.Microsoft Corporation - HID Audio Service.) -- C:\WINDOWS\system32\hidserv.dll [21504] =>.Microsoft Corporation O83 - Search Svchost Services: LanmanServer (LanmanServer) . (.Microsoft Corporation - Server Service DLL.) -- C:\WINDOWS\system32\srvsvc.dll [99840] =>.Microsoft Corporation O83 - Search Svchost Services: LanmanWorkstation (LanmanWorkstation) . (.Microsoft Corporation - Workstation Service DLL.) -- C:\WINDOWS\system32\wkssvc.dll [132096] =>.Microsoft Corporation O83 - Search Svchost Services: Messenger (Messenger) . (.Microsoft Corporation - NT Messenger Service.) -- C:\WINDOWS\system32\msgsvc.dll [33792] =>.Microsoft Corporation O83 - Search Svchost Services: Netman (Netman) . (.Microsoft Corporation - Gestionnaire de connexions réseau.) -- C:\WINDOWS\system32\netman.dll [198144] =>.Microsoft Corporation O83 - Search Svchost Services: Nla (Nla) . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Micro.) -- C:\WINDOWS\system32\mswsock.dll [247808] =>.Microsoft Corporation O83 - Search Svchost Services: Ntmssvc (Ntmssvc) . (.Microsoft Corporation - Gestionnaire de stockage amovible.) -- C:\WINDOWS\system32\ntmssvc.dll [438272] =>.Microsoft Corporation O83 - Search Svchost Services: NWCWorkstation (NWCWorkstation) . (.Microsoft Corporation - Client Service for Netware.) -- C:\WINDOWS\system32\nwwks.dll [65536] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Remote Access AutoDial Manager.) -- C:\WINDOWS\system32\rasauto.dll [88576] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Remote Access Connection Manager.) -- C:\WINDOWS\system32\rasmans.dll [186368] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Dynamic Interface Manager.) -- C:\WINDOWS\system32\mprdim.dll [53248] =>.Microsoft Corporation O83 - Search Svchost Services: Schedule (Schedule) . (.Microsoft Corporation - Moteur du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [194560] =>.Microsoft Corporation O83 - Search Svchost Services: Seclogon (Seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [18944] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - System Event Notification Service (SENS).) -- C:\WINDOWS\system32\sens.dll [39424] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\WINDOWS\system32\ipnathlp.dll [332800] =>.Microsoft Corporation O83 - Search Svchost Services: SRService (SRService) . (.Microsoft Corporation - Service de restauration du système.) -- C:\WINDOWS\system32\srsvc.dll [171520] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\WINDOWS\system32\tapisrv.dll [249856] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: TrkWks (TrkWks) . (.Microsoft Corporation - Distributed Link Tracking Client.) -- C:\WINDOWS\system32\trkwks.dll [90112] =>.Microsoft Corporation O83 - Search Svchost Services: W32Time (W32Time) . (.Microsoft Corporation - Service de temps Windows.) -- C:\WINDOWS\system32\w32time.dll [178176] =>.Microsoft Corporation O83 - Search Svchost Services: WZCSVC (WZCSVC) . (.Microsoft Corporation - Service configuration automatique sans fil.) -- C:\WINDOWS\system32\wzcsvc.dll [483840] =>.Microsoft Corporation O83 - Search Svchost Services: Wmi (Wmi) . (.Microsoft Corporation - API avancées Windows 32.) -- C:\WINDOWS\system32\advapi32.dll [685568] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\wmisvc.dll [145408] =>.Microsoft Corporation O83 - Search Svchost Services: wscsvc (wscsvc) . (.Microsoft Corporation - Windows Security Center Service.) -- C:\WINDOWS\system32\wscsvc.dll [80896] =>.Microsoft Corporation O83 - Search Svchost Services: xmlprov (xmlprov) . (.Microsoft Corporation - Network Provisioning Service.) -- C:\WINDOWS\system32\xmlprov.dll [129024] =>.Microsoft Corporation O83 - Search Svchost Services: napagent (napagent) . (.Microsoft Corporation - Exécution du service Agent de quarantaine.) -- C:\WINDOWS\system32\qagentrt.dll [293376] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [61440] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\system32\qmgr.dll [409088] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Windows Update AutoUpdate Service.) -- C:\WINDOWS\system32\wuauserv.dll [6656] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\WINDOWS\system32\shsvcs.dll [135680] =>.Microsoft Corporation O83 - Search Svchost Services: helpsvc (helpsvc) . (.Microsoft Corporation - Microsoft PCHealth Service Holder.) -- C:\WINDOWS\pchealth\helpctr\binaries\pchsvc.dll [38400] =>.Microsoft Corporation O83 - Search Svchost Services: WmdmPmSN (WmdmPmSN) . (.Microsoft Corporation - Fournisseur de services de périphérique mul.) -- C:\WINDOWS\system32\mspmsnsv.dll [52736] =>.Microsoft Corporation ---\\ Scan Additionnel (9) - 0s HKCU\SOFTWARE\DriverToolkit =>.Superfluous.DriverToolkit HKCU\SOFTWARE\eSupport.com =>PUP.Optional.eSupport HKCU\SOFTWARE\TNT2 =>PUP.Optional.Freshy C:\Program Files\DriverToolkit =>.Superfluous.DriverToolkit C:\Documents and Settings\Aministrateur\Application Data\DriverTurbo =>.Superfluous.DeskToolsSoft C:\Documents and Settings\Aministrateur\Application Data\RPEng =>PUP.Optional.Generic C:\Documents and Settings\Aministrateur\Local Settings\Application Data\DriverToolkit =>.Superfluous.DriverToolkit C:\Documents and Settings\Aministrateur\Local Settings\Application Data\eSupport.com =>PUP.Optional.eSupport HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E8AC4314-4F9D-4473-AED9-96372BBD2DFA} =>.Superfluous.eShield ---\\ Récapitulatif des éléments trouvés sur votre station (8) - 0s https://www.nicolascoolman.info/2016/04/25/superfluous-eshield/ =>.Superfluous.eShield http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.DriverToolkit http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.eSupport http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Freshy http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.DeskToolsSoft https://www.nicolascoolman.info/2016/05/01/definition-dun-logiciel-pup-lpi/ =>PUP.Optional.Generic http://www.nicolascoolman.fr/pup-optional-constantfun/ =>PUP.Optional.ConstantFun http://www.nicolascoolman.fr/?p=210 =>.Superfluous.Conduit ~ End of the scan, 39351 items in 00h04mn05s (612)(0)