~ ZHPDiag v2016.8.6.127 Par Nicolas Coolman (2016/08/06) ~ Démarré par ptimot (Administrator) (2016/08/07 14:35:51) ~ Site: https://www.nicolascoolman.com ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\ptimot\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\ptimot\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 8.1 Pro, 64-bit (Build 9600) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v53.0.2785.46 MSIE: Internet Explorer v11.0.9600.17905 ---\\ Informations sur les produits Windows (3) - 4s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK ---\\ Logiciels de protection (3) - 8s Avira Antivirus v15.0.18.354 Avira Launcher v1.1.67.18988 Windows Defender (Deactivate) ---\\ Surveillance de Logiciels (1) - 10s Adobe Acrobat Reader DC ---\\ Logiciels de partage P2P (1) - 11s µTorrent v3.4.5.41712 ---\\ Informations sur le système (6) - 0s ~ Operating System: AMD64 Family 18 Model 1 Stepping 0, AuthenticAMD ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 3648.404 MB (37% free) System Restore: Activé (Enable) System drive C: has 228 GB () free of 460 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: FAMILLE ~ User Name: ptimot ~ Logged in as Administrator ---\\ Enumération des unités disques (1) - 0s ~ Drive C: has 228 GB free of 460 GB (System) ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 2s [MD5.C10A66189DC8C090E7C84873EDCEBC88] - 28/01/2015 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [2501368] =>.Microsoft Windows® [MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - 29/10/2014 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [54784] =>.Microsoft Corporation [MD5.A570A64292214C43E0BA50E6A72A6380] - 29/10/2014 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [145920] =>.Microsoft Corporation [MD5.98C6A46E9E2822BF83196C2EAE43DBD4] - 15/06/2015 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [2427392] =>.Microsoft Corporation [MD5.EC498BAE1F0D3E0E401C963F8D76C437] - 29/10/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [572416] =>.Microsoft Corporation [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - 21/12/2013 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [447488] =>.Microsoft Corporation [MD5.A5675939CF0F99B20B5A3CFCC3C1B46A] - 29/10/2014 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [657920] =>.Microsoft Corporation [MD5.BD9C7A068C46053F8747CEA73B5930AB] - 29/10/2014 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [498688] =>.Microsoft Corporation [MD5.E37F897ED7B5AFF79B1398258DB96BD9] - 30/09/2013 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19456] =>.Microsoft Corporation [MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - 30/05/2014 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [563200] =>.Microsoft Corporation [MD5.74B14192CF79A72F7536B27CB8814FBD] - 22/08/2013 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [26464] =>.Microsoft Windows® [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - 22/08/2013 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [88576] =>.Microsoft Corporation [MD5.C6796EA22B513E3457514D92DCDB1A3D] - 22/08/2013 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [164352] =>.Microsoft Corporation [MD5.A03F362C5557E238CBFA914689C77248] - 06/03/2014 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [134144] =>.Microsoft Corporation [MD5.D4B7ED39C7900384D9E5C1283F1E7926] - 24/07/2014 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [76800] =>.Microsoft Corporation [MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - 04/11/2014 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [108544] =>.Microsoft Corporation [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - 27/11/2013 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [142848] =>.Microsoft Corporation [MD5.6FBDF2B1B025A8E6E069234362FFFFB7] - 27/06/2015 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [401408] =>.Microsoft Corporation [MD5.0217532E19A748F0E5D569307363D5FD] - 22/08/2013 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [282624] =>.Microsoft Corporation [MD5.7F68063A5A0461E02BC860CE0E6BFDDC] - 15/10/2014 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2025792] =>.Microsoft Windows® [MD5.764B1121867B2D9B31C491668AC72B2B] - 22/08/2013 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [94208] =>.Microsoft Corporation [MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - 22/08/2013 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [120832] =>.Microsoft Corporation [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - 30/09/2013 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [195584] =>.Microsoft Corporation [MD5.FFF28F9F6823EB1756C60F1649560BBF] - 22/08/2013 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [107520] =>.Microsoft Corporation [MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - 19/06/2014 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [310080] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (21) - 3s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe =>.AMD O23 - Service: AMD FUEL Service (AMD FUEL Service) . (.Advanced Micro Devices, Inc. - Service Fusion Utility.) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe =>.Advanced Micro Devices, Inc. O23 - Service: Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG - Antivirus MailScanner WFP Service.) - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\Antivirus\sched.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) - C:\Program Files (x86)\Avira\Antivirus\avguard.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG - AntiVir WebGuard WFP Service.) - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® O23 - Service: Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG - Avira Service Host.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe =>.Avira Operations GmbH & Co. KG® O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe =>.Dritek System Inc.® O23 - Service: ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe =>.Acer Incorporated® O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) . (.The Firebird Project - Firebird SQL Server.) - C:\APP\firebird\bin\fbguard.exe =>.The Firebird Project O23 - Service: Freemake Improver (Freemake Improver) . (.Freemake - FreemakeUtilsService.) - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe =>.Freemake O23 - Service: FreemakeVideoCapture (FreemakeVideoCapture) . (.Ellora Assets Corp. - CaptureLibService.) - C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe =>.Ellora Assets Corp. O23 - Service: GREGService (GREGService) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe =>.Acer Incorporated® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: Live Updater Service (Live Updater Service) . (.Acer Incorporated - Updater Service.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe =>.Acer Incorporated® O23 - Service: NTI IScheduleSvc (NTI IScheduleSvc) . (.NTI Corporation - Backup Manager Module.) - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe =>.NTI Corporation® O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl® O23 - Service: Wondershare Application Framework Service (WsAppService) . (.Wondershare - Wondershare AppService.) - C:\Program Files (x86)\Wondershare\WAF\2.2.4.1\WsAppService.exe =>.Wondershare ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (29) - 26s SR - Auto [25/06/2016] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® SR - Auto [21/07/2014] [ 239616] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe =>.AMD SR - Auto [28/09/2012] [ 361984] AMD FUEL Service (AMD FUEL Service) . (.Advanced Micro Devices, Inc..) - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe =>.Advanced Micro Devices, Inc. SS - Auto [28/07/2016] [ 989696] Avira Protection e-mail (AntiVirMailService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [28/07/2016] [ 472112] Avira Planificateur (AntiVirSchedulerService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Antivirus\sched.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [28/07/2016] [ 472112] Avira Protection temps réel (AntiVirService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Antivirus\avguard.exe =>.Avira Operations GmbH & Co. KG® SS - Auto [28/07/2016] [ 1453696] Avira Protection Web (AntiVirWebService) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [07/10/2015] [ 77104] Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe =>.Apple Inc.® SR - Auto [11/07/2016] [ 309384] Avira Service Host (Avira.ServiceHost) . (.Avira Operations GmbH & Co. KG.) - C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe =>.Avira Operations GmbH & Co. KG® SR - Auto [12/08/2015] [ 462096] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.® SR - Auto [01/07/2011] [ 353360] Dritek WMI Service (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe =>.Dritek System Inc.® SS - Demand [21/06/2011] [ 173424] EgisTec Ticket Service (EgisTec Ticket Service) . (.Egis Technology Inc..) - C:\Program Files (x86)\Common Files\EgisTec\Services\EgisTicketService.exe =>.EGIS TECHNOLOGY INC.® SR - Auto [02/08/2011] [ 872552] ePower Service (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe =>.Acer Incorporated® SR - Auto [03/07/2008] [ 65536] Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) . (.The Firebird Project.) - C:\APP\firebird\bin\fbguard.exe =>.The Firebird Project SR - Demand [03/07/2008] [ 1527893] Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) . (.The Firebird Project.) - C:\APP\firebird\bin\fbserver.exe =>.The Firebird Project SS - Demand [26/07/2012] [ 655624] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Acresso Software Inc..) - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe =>.Acresso Software Inc.® SR - Auto [29/12/2015] [ 108032] Freemake Improver (Freemake Improver) . (.Freemake.) - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe =>.Freemake SR - Auto [29/12/2015] [ 9216] FreemakeVideoCapture (FreemakeVideoCapture) . (.Ellora Assets Corp..) - C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe =>.Ellora Assets Corp. SS - Demand [12/10/2010] [ 206072] GamesAppService (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe =>.WildTangent Inc® SR - Auto [30/05/2011] [ 36456] GREGService (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe =>.Acer Incorporated® SS - Auto [26/06/2015] [ 144200] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [26/06/2015] [ 144200] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Demand [17/12/2015] [ 644880] Service de l’iPod (iPod Service) . (.Apple Inc..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.® SR - Auto [05/04/2012] [ 255376] Live Updater Service (Live Updater Service) . (.Acer Incorporated.) - C:\Program Files\Acer\Acer Updater\UpdaterService.exe =>.Acer Incorporated® SR - Auto [24/04/2011] [ 256832] NTI IScheduleSvc (NTI IScheduleSvc) . (.NTI Corporation.) - C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe =>.NTI Corporation® SS - Auto [11/12/2014] [ 315496] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software Sarl® SS - Auto [12/07/2016] [ 417792] Wondershare Application Framework Service (WsAppService) . (.Wondershare.) - C:\Program Files (x86)\Wondershare\WAF\2.2.4.1\WsAppService.exe =>.Wondershare SS - Demand [13/07/2016] [ 115856] Wondershare Driver Install Service (WsDrvInst) . (.Wondershare.) - C:\Program Files (x86)\Wondershare\Dr.Fone pour Android\DriverInstall.exe =>.Wondershare software CO., LIMITED® ---\\ Tâches planifiées en automatique (24) - 5s [MD5.BE1A1E8EEA50BE1E1A78EB3D7F4CE8CF] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1110232] (.Activate.) =>.Adobe Systems, Incorporated® [MD5.1C95203134CE54AC7D1CFCEA27B9D578] [APT] [Avira System Speedup Tray] (.Avira Operations GmbH & Co. KG.) -- C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [340936] (.Activate.) =>.Avira Operations GmbH & Co. KG® [MD5.BA90221541E206773C2662083B72ED5E] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6775512] (.Activate.) =>.Piriform Ltd® [MD5.9834D0C33581BE9975783BFD56E2242C] [APT] [EgisUpdate] (.Egis Technology Inc..) -- C:\Program Files\EgisTec IPS\EgisUpdate.exe [207728] (.Activate.) =>.EGIS TECHNOLOGY INC.® [MD5.0C03FB91E17987EED93F60007B08DAA0] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.0C03FB91E17987EED93F60007B08DAA0] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] (.Activate.) =>.Google Inc® [MD5.0285670FD75CB7626EE51B0B32ED0769] [APT] [PMMUpdate] (.Egis Technology Inc..) -- C:\Program Files\EgisTec IPS\PMMUpdate.exe [452976] (.Activate.) =>.EGIS TECHNOLOGY INC.® [MD5.00000000000000000000000000000000] [APT] [Scheduled scanning task] (...) -- C:\PROGRA~2\SFR\PACK_S~1\apps\COMPUT~1\ANTI-V~1\fsav.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [Updater27096.exe] (...) -- C:\Users\ptimot\AppData\Local\Updater27096\Updater27096.exe (.not file.) [0] (.Activate.) =>PUP.Optional.CrossRider [MD5.00000000000000000000000000000000] [APT] [{26E76C22-BA09-42AE-BC48-842DF25B813D}] (...) -- C:\Program Files (x86)\SFR\Pack_Securite\fsuninstall.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.FEF332CFA1DC0D426739F5760443FCA6] [APT] [{9355686C-A391-45E6-8C9F-9F27B0136013}] (.esobi Inc..) -- C:\Program Files (x86)\InstallShield Installation Information\{613C0AC5-3A67-4B94-8B13-9176AD83F5BF}\setup.exe [983648] (.Activate.) =>.esobi Inc. [MD5.BC41666FF68C364CD3EAA486E50C9270] [APT] [Apple] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [563000] (.Activate.) =>.Apple Inc.® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job [1088] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job [1092] =>.Google Inc® O39 - APT: Scheduled scanning task - (...) -- C:\WINDOWS\Tasks\Scheduled scanning task.job [652] (.Orphan.) =>.Superfluous.Orphan O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task [4476] =>.Adobe Systems, Incorporated® O39 - APT: Avira System Speedup Tray - (.Avira Operations GmbH & Co. KG.) -- C:\WINDOWS\System32\Tasks\Avira System Speedup Tray [3344] =>.Avira Operations GmbH & Co. KG® O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\WINDOWS\System32\Tasks\CCleanerSkipUAC [2790] =>.Piriform Ltd® O39 - APT: EgisUpdate - (.Egis Technology Inc..) -- C:\WINDOWS\System32\Tasks\EgisUpdate [3340] =>.EGIS TECHNOLOGY INC.® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore [3828] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA [4064] =>.Google Inc® O39 - APT: PMMUpdate - (.Egis Technology Inc..) -- C:\WINDOWS\System32\Tasks\PMMUpdate [3272] =>.EGIS TECHNOLOGY INC.® O39 - APT: Scheduled scanning task - (...) -- C:\WINDOWS\System32\Tasks\Scheduled scanning task [3960] (.Orphan.) =>.Superfluous.Orphan O39 - APT: Updater27096.exe - (...) -- C:\WINDOWS\System32\Tasks\Updater27096.exe [3754] (.Orphan.) =>PUP.Optional.CrossRider ---\\ Processus lancés (61) - 6s [MD5.6CF81DD5083D7F94A7E76E50429A949C] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [239616] [PID.936] =>.AMD [MD5.89B1B68B76363ABD2E24E3BB614CE53C] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [588288] [PID.792] =>.AMD [MD5.BB3BAB4F1502328C4FB6CCA3C8114F39] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\Antivirus\sched.exe [472112] [PID.1412] =>.Avira Operations GmbH & Co. KG® [MD5.68E7DEA59FDEF410BAF29FDB5B7A6EEF] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128] [PID.1656] =>.Adobe Systems, Incorporated® [MD5.B8590E612C0DC80DF2BBC543F744BA92] - (.Advanced Micro Devices, Inc. - Service Fusion Utility.) -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984] [PID.1672] =>.Advanced Micro Devices, Inc. [MD5.BB3BAB4F1502328C4FB6CCA3C8114F39] - (.Avira Operations GmbH & Co. KG - Antivirus Host Framework Service.) -- C:\Program Files (x86)\Avira\Antivirus\avguard.exe [472112] [PID.1696] =>.Avira Operations GmbH & Co. KG® [MD5.2D564BB1C4559A517B390A031955714D] - (.Apple Inc. - MobileDeviceService.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104] [PID.1740] =>.Apple Inc.® [MD5.B5C2F92EE1106DFE7BB1CCE4D35B6037] - (.Apple Inc. - Bonjour Service.) -- C:\Program Files\Bonjour\mDNSResponder.exe [462096] [PID.1812] =>.Apple Inc.® [MD5.9DD3A22F804697606C2B7FF9E912FF6B] - (.Dritek System Inc. - Dritek WMI Service.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe [353360] [PID.1892] =>.Dritek System Inc.® [MD5.48425C93B6F36529707206E4FA680CF3] - (.Acer Incorporated - ePowerSvc.) -- C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [872552] [PID.1916] =>.Acer Incorporated® [MD5.21ACFD2B4BF6C0F4D9080A437E400E88] - (.Dritek System Inc. - Launch Manager utility process.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe [418896] [PID.1924] =>.Dritek System Inc.® [MD5.EAFA072D9BF7E2A230A3CC7107481AFC] - (.The Firebird Project - Firebird SQL Server.) -- C:\APP\firebird\bin\fbguard.exe [65536] [PID.2004] =>.The Firebird Project [MD5.7FAD993A097FF54743A287105798D343] - (.Freemake - FreemakeUtilsService.) -- C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032] [PID.2032] =>.Freemake [MD5.89447F08E17FC743659E503D7DDFCEA0] - (.Ellora Assets Corp. - CaptureLibService.) -- C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216] [PID.1560] =>.Ellora Assets Corp. [MD5.C9B2D1D3F86FD3673EF847DEF73B6F9E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [36456] [PID.1648] =>.Acer Incorporated® [MD5.93B73DED2BC688F140C6AE2FBAD45789] - (.Acer Incorporated - Updater Service.) -- C:\Program Files\Acer\Acer Updater\UpdaterService.exe [255376] [PID.2056] =>.Acer Incorporated® [MD5.1873214666F6F0A883742DF91FBC48C9] - (.NTI Corporation - Backup Manager Module.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [256832] [PID.2384] =>.NTI Corporation® [MD5.56DC41E2E257669DFCC00DEE39731733] - (.Avira Operations GmbH & Co. KG - Avira.SystemSpeedup.SpeedupService.) -- C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [27632] [PID.2460] =>.Avira Operations GmbH & Co. KG® [MD5.8256846E20B6F451A4A6B2EAD057FF25] - (.Avira Operations GmbH & Co. KG - AntiVir shadow copy service.) -- C:\Program Files (x86)\Avira\Antivirus\avshadow.exe [1042232] [PID.2764] =>.Avira Operations GmbH & Co. KG® [MD5.5F0C87F2FA11C991BB93B84BD02151B3] - (.Avira Operations GmbH & Co. KG - Avira Service Host.) -- C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [309384] [PID.3312] =>.Avira Operations GmbH & Co. KG® [MD5.01FE3287C438D28EB6753169B1F43381] - (.The Firebird Project - Firebird SQL Server.) -- C:\APP\firebird\bin\fbserver.exe [1527893] [PID.3968] =>.The Firebird Project [MD5.0C03FB91E17987EED93F60007B08DAA0] - (.Google Inc. - Programme d'installation de Google.) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] [PID.5068] =>.Google Inc® [MD5.58332C83C4A329A744B0B98F934934BB] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe [288920] [PID.3632] =>.Google Inc® [MD5.1C95203134CE54AC7D1CFCEA27B9D578] - (.Avira Operations GmbH & Co. KG - Systray.) -- C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [340936] [PID.1104] =>.Avira Operations GmbH & Co. KG® [MD5.788321A2C0C45F16820E00A8BA8FD3DA] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe [366232] [PID.4752] =>.Google Inc® [MD5.5DADA908E14051D65DB1991CB0B1F58D] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12673128] [PID.4456] =>.Realtek Semiconductor Corp® [MD5.E897F9B62E611D59FDFAB82FC829B93A] - (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2277480] [PID.432] =>.Realtek Semiconductor Corp® [MD5.3B3277631453C93FDB1879D6BF0B260B] - (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe [2589992] [PID.2716] =>.ELAN Microelectronics Corporation® [MD5.F0474296AC4E0E6BDE733C1B8513E41A] - (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [1831016] [PID.2628] =>.Acer Incorporated® [MD5.ADFCC68B42627055979B26FC00759D17] - (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe [170256] [PID.4740] =>.Apple Inc.® [MD5.A4C1851F2A1475D92568EF8CA305E336] - (.ELAN Microelectronics Corp. - ETD Control Center Helper.) -- C:\Program Files\Elantech\ETDCtrlHelper.exe [2366760] [PID.5132] =>.ELAN Microelectronics Corporation® [MD5.0D360F06B168A6F37ACA9D9F958245DA] - (.NTI Corporation - Acer Backup Manager.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe [297280] [PID.5200] =>.NTI Corporation® [MD5.B066C46E4B638B849245E35A5703AF80] - (.Apple Inc. - iPodService Module (64-bit).) -- C:\Program Files\iPod\bin\iPodService.exe [644880] [PID.5220] =>.Apple Inc.® [MD5.45C24D3BF28C360F59B43ED69A70A723] - (.Nico Mak Computing - File Association Helper.) -- C:\Program Files\WinZip\FAHWindow64.exe [186592] [PID.5236] =>.WinZip Computing LLC® [MD5.E6CC0FA3C1040C791EB3F4BA6C789411] - (.Dolby Laboratories Inc. - Dolby Profile Selector.) -- C:\Dolby PCEE4\pcee4.exe [506712] [PID.5296] =>.Dolby Laboratories, Inc.® [MD5.BFF01283DA99C51C55647ED6609CDC6B] - (.Nico Mak Computing - Notification de Mises à jour WinZip.) -- C:\Program Files\WinZip\WZUpdateNotifier.exe [1143008] [PID.5356] =>.WinZip Computing LLC® [MD5.9FE6D9D024B302BB75AD48F00C93A886] - (.WinZip Computing, S.L. - WinZip Preloader.) -- C:\Program Files\WinZip\WzPreloader.exe [124128] [PID.5388] =>.WinZip Computing LLC® [MD5.BE7919E8505F8AF593BDD195E616FB95] - (.Acer Incorporated - ePowerEvent.) -- C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe [467560] [PID.5432] =>.Acer Incorporated® [MD5.9ABC4E3B00CFA3A47D5569F5B49FE42F] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1103440] [PID.5440] =>.Dritek System Inc.® [MD5.A7D638F45317CB04FC6D718714050F50] - (.Dritek System Inc. - MMDx64Fx Application.) -- C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe [240208] [PID.5544] =>.Dritek System Inc.® [MD5.A824317EA303679481EF1039A5D66212] - (.Dritek System Inc. - Launch Manager Worker.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe [343632] [PID.5568] =>.Dritek System Inc.® [MD5.BADF6C22FBAA3ED3E2413A60411425AC] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299520] [PID.5700] =>.Advanced Micro Devices Inc. [MD5.C4668A2D015BFC941394010662CC21CC] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [8810200] [PID.5716] =>.Piriform Ltd® [MD5.1772ABF6821703562572E96B81B67EFC] - (.Copyright © 2015 - ProductUpdater.) -- C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [73216] [PID.5736] [MD5.7444E0F4C9991AE3711F5FAB5DB257E1] - (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [831064] [PID.5808] =>.Avira Operations GmbH & Co. KG® [MD5.0E452B882FEEFCEFF3A8225B89393D1D] - (.Avira Operations GmbH & Co. KG - Avira Launcher.) -- C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe [151776] [PID.5828] =>.Avira Operations GmbH & Co. KG® [MD5.D69FF8A90B0DD791A2660461BCA48991] - (...) -- C:\APP\ediag\eclipse.exe [57344] [PID.5960] [MD5.9428C1CC03CA43DA67A2DE36A7598FB0] - (...) -- C:\APP\sim\sim.exe [57344] [PID.6048] [MD5.8879B592948C0EF7FF3AB947A10D7C95] - (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\APP\ediag\jre\bin\j9w.exe [149936] [PID.6132] =>.Sun Microsystems, Inc.® [MD5.C7B13D436C9AC1E7A4E13EB5AA22CD6E] - (...) -- C:\APP\ddc\bin\psaAgent.exe [178688] [PID.3096] [MD5.7E8598353DC8054BFE7F27C985E94741] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299520] [PID.2352] =>.ATI Technologies Inc. [MD5.9798219E00C8356F73423CB1E76880C1] - (.Apache Software Foundation - Apache HTTP Server.) -- C:\APP\ddc\opt\apache\bin\httpd_ddc.exe [20992] [PID.2268] =>.Apache Software Foundation [MD5.08DF4C9AF44D40FA656DF130B13FD8EF] - (...) -- C:\APP\ddc\bin\psaSingleSignOnDaemon.exe [40960] [PID.4728] [MD5.9798219E00C8356F73423CB1E76880C1] - (.Apache Software Foundation - Apache HTTP Server.) -- C:\APP\ddc\opt\apache\bin\httpd_ddc.exe [20992] [PID.476] =>.Apache Software Foundation [MD5.CFBDE54F81995508F8886E1974F44058] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135432] [PID.4700] =>.Google Inc® [MD5.CFBDE54F81995508F8886E1974F44058] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135432] [PID.6988] =>.Google Inc® [MD5.CFBDE54F81995508F8886E1974F44058] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135432] [PID.3076] =>.Google Inc® [MD5.CFBDE54F81995508F8886E1974F44058] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135432] [PID.3544] =>.Google Inc® [MD5.CFBDE54F81995508F8886E1974F44058] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135432] [PID.4344] =>.Google Inc® [MD5.CFBDE54F81995508F8886E1974F44058] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1135432] [PID.6140] =>.Google Inc® [MD5.6731A6CAAA1BE76A80AE7EA4A6181493] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\ptimot\Downloads\ZHPDiag3.exe [2283008] [PID.7068] =>.Nicolas Coolman ---\\ Google Chrome, Démarrage,Recherche,Extensions (21) - 2s G0 - GCSP: Preferences [User Data\Default][HomePage] http://meandsearch.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr G0 - GCSP: Preferences [User Data\Default][HomePage] http://i_skyntjs_info.tlscdn.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://onlinemegax.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://s3.amazonaws.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com G0 - GCSP: Secure Preferences [User Data\Default][HomePage] http://www.google.fr G2 - GCE: Preference [User Data\Default] [adikddnmmpkpfpjnnfhbeomcoifmgchc] __MSG_application_title__ G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [bgnkhhnnamicmpeenaelnjfhikgbkllg] __MSG_name__ G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb] __MSG_name__ =>.AdblocPlus Plugin G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [flliilndjeohchalpbbcdekjklbdgfkk] Avira Browser Safety G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (4) - 3s P2 - EXT: (...) -- C:\Users\ptimot\AppData\Roaming\Mozilla\Extensions\{ae2cff10-0d52-4066-8be9-4abcf119fa78} P2 - FPN: [HKCU] [vitzo.com/VDownloader] - (...) -- C:\Program Files\VDownloader\Addons\npVDownloader.dll P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll =>.Apple Inc. P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll =>.WildTangent ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (20) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = res://ieframe.dll/tabswelcome.htm R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 1s F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (20) ---\\ Browser Helper Object de navigateur (BHO) (1) - 0s O2 - BHO: AMD SteadyVideo BHO [64Bits] - {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} . (.Advanced Micro Devices - This plugin allows the user to turn AMD Ste.) -- C:\Program Files (x86)\AMD\SteadyVideo\SteadyVideo.dll =>.Advanced Micro Devices, Inc.® ---\\ Applications lancées au démarrage du système (22) - 4s O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp® O4 - HKLM\..\Run: [RtHDVBg_Dolby] . (.Realtek Semiconductor - HD Audio Background Process.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconductor Corp® O4 - HKLM\..\Run: [ETDCtrl] . (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe =>.ELAN Microelectronics Corporation® O4 - HKLM\..\Run: [Power Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe =>.Acer Incorporated® O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe =>.Apple Inc.® O4 - HKCU\..\Run: [Xvid] . (...) -- C:\Program Files (x86)\Xvid\CheckUpdate.exe O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKLM\..\Wow6432Node\Run: [BackupManagerTray] . (.NTI Corporation - Acer Backup Manager.) -- C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe =>.NTI Corporation® O4 - HKLM\..\Wow6432Node\Run: [Dolby Advanced Audio v2] . (.Dolby Laboratories Inc. - Dolby Profile Selector.) -- C:\Dolby PCEE4\pcee4.exe =>.Dolby Laboratories, Inc.® O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe =>.Dritek System Inc.® O4 - HKLM\..\Wow6432Node\Run: [SuiteTray] . (.Egis Technology Inc. - SuiteTray.) -- C:\Program Files (x86)\EgisTec MyWinLockerSuite\x86\SuiteTray.exe =>.EGIS TECHNOLOGY INC.® O4 - HKLM\..\Wow6432Node\Run: [APSDaemon] . (.Apple Inc. - Apple Push.) -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe =>.Apple Inc.® O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe =>.Advanced Micro Devices, Inc.® O4 - HKLM\..\Wow6432Node\Run: [ProductUpdater] . (.Copyright © 2015 - ProductUpdater.) -- C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe O4 - HKLM\..\Wow6432Node\Run: [Avira SystrayStartTrigger] . (.Avira Operations GmbH & Co. KG - Avira Launcher.) -- C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe =>.Avira Operations GmbH & Co. KG® O4 - HKLM\..\Wow6432Node\Run: [avgnt] . (.Avira Operations GmbH & Co. KG - Avira system tray application.) -- C:\Program Files (x86)\Avira\Antivirus\avgnt.exe =>.Avira Operations GmbH & Co. KG® O4 - HKLM\..\Wow6432Node\Run: [Avira System Speedup User Starter] . (.Avira Operations GmbH & Co. KG - Avira.SystemSpeedup.Core.Common.Starter.) -- C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe =>.Avira Operations GmbH & Co. KG® O4 - HKLM\..\Wow6432Node\Run: [psastart] . (...) -- C:\APP\ddc\bin\psaStart.exe O4 - HKLM\..\Wow6432Node\Run: [ediagStart] . (...) -- C:\APP\ediag\eDiagStart.lnk O4 - HKLM\..\Wow6432Node\Run: [SIM] . (...) -- C:\APP\sim\SIMBat.lnk O4 - HKUS\S-1-5-21-1594465648-1179219376-2783828405-1001\..\Run: [Xvid] . (...) -- C:\Program Files (x86)\Xvid\CheckUpdate.exe O4 - HKUS\S-1-5-21-1594465648-1179219376-2783828405-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® ---\\ Raccourcis Global Startup (45) - 14s O4 - GS\Desktop [Administrateur]: lettre de motivation 2 (1) - Raccourci.lnk . (...) C:\Users\ptimot\Downloads\lettre de motivation 2 (1).docx O4 - GS\Desktop [Administrateur]: Musique - Raccourci.lnk . (...) C:\Users\ptimot\Music O4 - GS\Desktop [Administrateur]: Quick Zip 5.1.lnk . (.Quick Zip Dev - Quick Zip 5.1.) C:\Users\ptimot\AppData\Roaming\Microsoft\Installer\{87AF4C0E-D953-424B-8108-3127CA217E6F}\QuickZip.exe =>.Quick Zip Dev O4 - GS\Desktop [Administrateur]: vacances 2007.lnk . (...) D:\2007-09-04-1052-39 O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\ptimot\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: 337 GAMES.lnk . (...) C:\Users\ptimot\AppData\Roaming\337Games\337Games.exe O4 - GS\Quicklaunch [Administrateur]: Belarc Advisor.lnk . (.Belarc, Inc. - Belarc Advisor Computer Inventory.) C:\Program Files (x86)\Belarc\BelarcAdvisor\BelarcAdvisor.exe =>.Belarc, Inc.® O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Administrateur]: Samsung Kies 3.lnk . (.Samsung - Kies.) C:\Program Files (x86)\Samsung\Kies3\Kies3.exe =>.Samsung Electronics CO., LTD.® O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\ptimot\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Desktop [ptimot]: lettre de motivation 2 (1) - Raccourci.lnk . (...) C:\Users\ptimot\Downloads\lettre de motivation 2 (1).docx O4 - GS\Desktop [ptimot]: Musique - Raccourci.lnk . (...) C:\Users\ptimot\Music O4 - GS\Desktop [ptimot]: Quick Zip 5.1.lnk . (.Quick Zip Dev - Quick Zip 5.1.) C:\Users\ptimot\AppData\Roaming\Microsoft\Installer\{87AF4C0E-D953-424B-8108-3127CA217E6F}\QuickZip.exe =>.Quick Zip Dev O4 - GS\Desktop [ptimot]: vacances 2007.lnk . (...) D:\2007-09-04-1052-39 O4 - GS\Desktop [ptimot]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\ptimot\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [ptimot]: 337 GAMES.lnk . (...) C:\Users\ptimot\AppData\Roaming\337Games\337Games.exe O4 - GS\Quicklaunch [ptimot]: Belarc Advisor.lnk . (.Belarc, Inc. - Belarc Advisor Computer Inventory.) C:\Program Files (x86)\Belarc\BelarcAdvisor\BelarcAdvisor.exe =>.Belarc, Inc.® O4 - GS\Quicklaunch [ptimot]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [ptimot]: Samsung Kies 3.lnk . (.Samsung - Kies.) C:\Program Files (x86)\Samsung\Kies3\Kies3.exe =>.Samsung Electronics CO., LTD.® O4 - GS\Quicklaunch [ptimot]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\ptimot\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [ptimot]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Software Sarl® O4 - GS\TaskBar [ptimot]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated® O4 - GS\CommonDesktop [Public]: Avira Launcher.lnk . (.Avira Operations GmbH & Co. KG - Avira Launcher.) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe =>.Avira Operations GmbH & Co. KG® O4 - GS\CommonDesktop [Public]: Avira System Speedup.lnk . (.Avira Operations GmbH & Co. KG - Avira_System_Speedup.) C:\Program Files (x86)\Avira\System Speedup\Avira_System_Speedup.exe =>.Avira Operations GmbH & Co. KG® O4 - GS\CommonDesktop [Public]: Belarc Advisor.lnk . (.Belarc, Inc. - Belarc Advisor Computer Inventory.) C:\Program Files (x86)\Belarc\BelarcAdvisor\BelarcAdvisor.exe =>.Belarc, Inc.® O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - GS\CommonDesktop [Public]: DiagBox.lnk . (.ACTIA - .) C:\AWRoot\bin\launcher\LctPOLUX.exe =>.ACTIA O4 - GS\CommonDesktop [Public]: EmailDiag.lnk . (...) C:\APP\ddc\bin\EmailDiagLauncher.exe O4 - GS\CommonDesktop [Public]: Freemake Youtube Mp3 Converter.lnk . (.Freemake - Freemake Video YoutubeMp3Converter.) C:\Program Files (x86)\Freemake\Freemake Youtube Mp3 Converter\FreemakeYoutubeMp3Converter.exe =>.Freemake O4 - GS\CommonDesktop [Public]: Samsung Kies 3.lnk . (.Samsung - Kies.) C:\Program Files (x86)\Samsung\Kies3\Kies3.exe =>.Samsung Electronics CO., LTD.® O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\WINDOWS\Installer\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}\SkypeIcon.exe O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player 2.1.5.) C:\Program Files (x86)\Noopod\VLC\vlc.exe =>.VideoLAN O4 - GS\CommonDesktop [Public]: WinZip.lnk . (.WinZip Computing, S.L. - .) C:\Program Files (x86)\WinZip\WINZIP64.EXE =>.WinZip Computing, S.L. O4 - GS\CommonDesktop [Public]: Wondershare Dr.Fone pour Android.lnk . (.Wondershare - Wondershare Dr.Fone for Android.) C:\Program Files (x86)\Wondershare\Dr.Fone pour Android\DrFoneAndroid.exe =>.Wondershare software CO., LIMITED® O4 - GS\Startup [Public]: FAH.lnk . (.Nico Mak Computing - .) C:\Program Files (x86)\WinZip\FAHConsole.exe =>.Nico Mak Computing O4 - GS\Startup [Public]: Notifications de Mises à jour.lnk . (.Nico Mak Computing - .) C:\Program Files (x86)\WinZip\WZUpdateNotifier.exe =>.Nico Mak Computing O4 - GS\Startup [Public]: WinZip Préchargeur.lnk . (.WinZip Computing, S.L. - .) C:\Program Files (x86)\WinZip\WzPreloader.exe =>.WinZip Computing, S.L. O4 - GS\Programs [Public]: Documents - Raccourci.lnk . (...) C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Libraries\Documents.library-ms O4 - GS\Programs [Public]: Microsoft Office Starter (Français) - Raccourci (2).lnk . (...) C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Français) O4 - GS\Programs [Public]: Microsoft Office Starter (Français) - Raccourci.lnk . (...) C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Starter (Français) O4 - GS\Programs [Public]: Musique - Raccourci.lnk . (...) C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Libraries\Music.library-ms O4 - GS\Programs [Public]: Vidéos - Raccourci.lnk . (...) C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Libraries\Videos.library-ms ---\\ Modification Domaine/Adresses DNS (3) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{65EF2A7B-D223-4D16-BF91-51D2CB167C8E}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\..\{C8F6F26B-7421-433F-9E9A-E819C4F432EC}: DhcpNameServer = 192.168.1.250 ---\\ Protocole additionnel (27) - 2s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: belarc [64Bits] - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} . (.Belarc, Inc. - Belarc VoilaX Control.) -- C:\Program Files (x86)\Belarc\BelarcAdvisor\System\BAVoilaX.dll =>.Belarc, Inc.® O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation® O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Photo Gallery Album Download Protocol Handl.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation® O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation® O18 - Filter: video/mp4 [64Bits] - {20C75730-7C25-476B-95DC-C65810F9E489} . (.Advanced Micro Devices - MIME Video Detector for IE.) -- C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll =>.Advanced Micro Devices, Inc.® O18 - Filter: video/x-flv [64Bits] - {20C75730-7C25-476B-95DC-C65810F9E489} . (.Advanced Micro Devices - MIME Video Detector for IE.) -- C:\Program Files (x86)\AMD\SteadyVideo\VideoMIMEFilter.dll =>.Advanced Micro Devices, Inc.® ---\\ Enumère les données de BootExecute (1) - 0s O34 - HKLM BootExecute: (sdnclean64.exe) ---\\ Logiciels installés (127) - 31s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc® O42 - Logiciel: Acer Backup Manager - (.NTI Corporation.) [HKLM][64Bits] -- InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270} =>.NTI Corporation O42 - Logiciel: Acer Crystal Eye Webcam - (.CyberLink Corp..) [HKLM][64Bits] -- {A0382E3C-7384-429A-9BFA-AF5888E5A193} =>.CyberLink® O42 - Logiciel: Acer Crystal Eye Webcam - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{A0382E3C-7384-429A-9BFA-AF5888E5A193} =>.CyberLink® O42 - Logiciel: Acer ePower Management - (.Acer Incorporated.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964} =>.Acer Incorporated® O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9} =>.Acer Incorporated® O42 - Logiciel: Acer Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent acer Master Uninstall =>.WildTangent Inc O42 - Logiciel: Acer Registration - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Registration =>.Acer Incorporated® O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Screensaver =>.Acer Incorporated O42 - Logiciel: Adobe Acrobat Reader DC - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1033-7B44-AC0F074E4100} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {FDB3B167-F4FA-461D-976F-286304A57B2A} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824191728} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe SVG Viewer 3.0 - (...) [HKLM][64Bits] -- Adobe SVG Viewer O42 - Logiciel: Agatha Christie - Death on the Nile - (.WildTangent.) [HKLM][64Bits] -- WTA-4d55f8eb-ff3d-4c78-b20c-2d53127aaf5d =>.WildTangent Inc® O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} =>.Advanced Micro Devices Inc. O42 - Logiciel: AMD Fuel - (.Nom de votre société.) [HKLM][64Bits] -- {41253317-0BF1-8A3C-2CED-0C7D8037E97E} O42 - Logiciel: AMD Steady Video Plug-In - (.AMD.) [HKLM][64Bits] -- {45E3D837-4855-7F41-A22E-D1D0AEA71EF8} =>.AMD O42 - Logiciel: AMD VISION Engine Control Center - (.AMD.) [HKLM][64Bits] -- WUCCCApp =>.AMD O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F} =>.Apple Inc. O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {691F30EB-9009-475A-B8A9-E1BF39598FD5} =>.Apple Inc. O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {3540181E-340A-4E7A-B409-31663472B2F7} =>.Apple Inc. O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF} =>.Apple Inc. O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} =>.Atheros Communications Inc.® O42 - Logiciel: Avira Antivirus v15.0.18.354 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- Avira Antivirus =>.Avira Operations GmbH & Co. KG® O42 - Logiciel: Avira Launcher v1.1.67.18988 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {92a7fd6b-31e5-472f-862e-79214c5032ef} =>.Avira Operations GmbH & Co. KG® O42 - Logiciel: Avira Launcher v1.1.67.18988 - (.Avira Operations GmbH & Co. KG.) [HKLM][64Bits] -- {A6634D1D-EA57-45DE-AF8F-0EDD35B912C3} =>.Avira Operations GmbH & Co. KG O42 - Logiciel: Backup Manager V3 - (.NTI Corporation.) [HKLM][64Bits] -- {0B61BBD5-DA3C-409A-8730-0C3DC3B0F270} =>.NTI Corporation O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-5c9bb8f3-c103-4585-82e9-c603f1c2f647 =>.WildTangent Inc® O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {56DDDFB8-7F79-4480-89D5-25E1F52AB28F} =>.Apple Inc. O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-c7924be6-442e-47e3-8a76-bbd80b4cca26 =>.WildTangent Inc® O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM][64Bits] -- DivX Setup =>.DivX, LLC® O42 - Logiciel: Crazy Chicken Kart 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-c1c537d3-293e-45ff-8945-80d7e7cddf79 =>.WildTangent Inc® O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft O42 - Logiciel: DC-Bass Source 1.3.0 - (...) [HKLM][64Bits] -- DC-Bass Source O42 - Logiciel: Dolby Advanced Audio v2 - (.Dolby Laboratories Inc.) [HKLM][64Bits] -- {B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613} =>.Dolby Laboratories Inc O42 - Logiciel: eBay Worldwide - (.OEM.) [HKLM][64Bits] -- {D3E5A972-9A15-427D-AE78-8181A5FD943C} =>.OEM O42 - Logiciel: ETDWare PS/2-X64 8.0.6.3_WHQL - (.ELAN Microelectronic Corp..) [HKLM][64Bits] -- Elantech =>.ELAN Microelectronics Corporation® O42 - Logiciel: Evernote v. 4.5.1 - (.Evernote Corp..) [HKLM][64Bits] -- {28921580-E4BB-11E0-9FD7-1CC1DEF07CBE} =>.Evernote Corp. O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WTA-6c23bfb4-2fe7-4878-b606-5a3d4879de3d =>.WildTangent Inc® O42 - Logiciel: Final Drive: Nitro - (.WildTangent.) [HKLM][64Bits] -- WTA-5f347708-72a0-47ab-aa2e-1a84b7e55947 =>.WildTangent Inc® O42 - Logiciel: Fooz Kids - (.FUHU, Inc..) [HKLM][64Bits] -- {4C774C35-E0AF-72E1-136A-2BF666702268} =>.FUHU, Inc. O42 - Logiciel: Fooz Kids - (.FUHU, Inc..) [HKLM][64Bits] -- FoozKids =>.FUHU, Inc. O42 - Logiciel: Fooz Kids Platform - (.FUHU, Inc..) [HKLM][64Bits] -- {8D68CE08-9A14-4B7B-9857-3C646A2F34C7} =>.FUHU, Inc. O42 - Logiciel: Fotogaléria - (.Microsoft Corporation.) [HKLM][64Bits] -- {5B87607E-E781-49C5-9891-80990E45BCA1} =>.Microsoft Corporation O42 - Logiciel: Fotogalerie - (.Microsoft Corporation.) [HKLM][64Bits] -- {41BF4A3B-D60A-4E92-883F-C88C8C157261} =>.Microsoft Corporation O42 - Logiciel: Fotogalerie - (.Microsoft Corporation.) [HKLM][64Bits] -- {F37D360D-9308-4BB1-8515-DC6B637B9486} =>.Microsoft Corporation O42 - Logiciel: Fotogalerija - (.Microsoft Corporation.) [HKLM][64Bits] -- {5D5B5672-1A0F-4412-B6A0-3A16706DE82D} =>.Microsoft Corporation O42 - Logiciel: Fotogalleri - (.Microsoft Corporation.) [HKLM][64Bits] -- {85E3592A-8C11-44F4-AABD-F82EF41167AD} =>.Microsoft Corporation O42 - Logiciel: Fotogalleriet - (.Microsoft Corporation.) [HKLM][64Bits] -- {5FF3045E-4A36-4B98-9F7F-48B49F4469C7} =>.Microsoft Corporation O42 - Logiciel: Fotoğraf Galerisi - (.Microsoft Corporation.) [HKLM][64Bits] -- {B743ABDD-E681-4B32-A33E-6E7F3F845AEA} =>.Microsoft Corporation O42 - Logiciel: Fotótár - (.Microsoft Corporation.) [HKLM][64Bits] -- {6F19A9AE-85C6-4EBB-BADC-CC1B8B9F3F91} =>.Microsoft Corporation O42 - Logiciel: Galeria de Fotografias - (.Microsoft Corporation.) [HKLM][64Bits] -- {23079EF2-2617-4BFC-BDFF-E6AE8D79B734} =>.Microsoft Corporation O42 - Logiciel: Galería de fotos - (.Microsoft Corporation.) [HKLM][64Bits] -- {198CEF22-A27F-4DC7-9B66-2C22A4B1CA09} =>.Microsoft Corporation O42 - Logiciel: Galeria de Fotos - (.Microsoft Corporation.) [HKLM][64Bits] -- {9EE1AE8B-4872-41CA-8C9A-C33D899523E0} =>.Microsoft Corporation O42 - Logiciel: Galeria fotogràfica - (.Microsoft Corporation.) [HKLM][64Bits] -- {118AAEAF-65EF-41CA-B24B-14732C266C84} =>.Microsoft Corporation O42 - Logiciel: Galeria fotografii - (.Microsoft Corporation.) [HKLM][64Bits] -- {77655DF6-A143-4A25-A5F8-127C8CE63EDA} =>.Microsoft Corporation O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {439B34FF-F74E-4807-B5E2-4B758551DA6B} =>.Microsoft Corporation O42 - Logiciel: Galerie foto - (.Microsoft Corporation.) [HKLM][64Bits] -- {429BEB2D-4EB8-49E6-A135-823FCB2AAAC5} =>.Microsoft Corporation O42 - Logiciel: Galerija fotografija - (.Microsoft Corporation.) [HKLM][64Bits] -- {343C0612-37DC-4914-95A7-0845EE0C8F04} =>.Microsoft Corporation O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Earth - (.Google.) [HKLM][64Bits] -- {817750FA-EC6A-485D-9901-0683AE6FFDF1} =>.Google O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: Haali Media Splitter - (...) [HKLM][64Bits] -- HaaliMkx O42 - Logiciel: Identity Card - (.Acer Incorporated.) [HKLM][64Bits] -- Identity Card =>.Acer Incorporated® O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-0a3e4778-6916-4c7c-ab62-a79a835ef501 =>.WildTangent Inc® O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {FBEB98F8-64E4-4FA3-A15E-4A9F42FF962E} =>.Apple Inc. O42 - Logiciel: Java 8 Update 71 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218071F0} =>.Oracle Corporation O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation O42 - Logiciel: Jewel Match 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-92fe9f8a-ba38-4514-99d5-831489e848a6 =>.WildTangent Inc® O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM][64Bits] -- WTA-40fb1c16-6e8f-4322-b89c-d5db25131e94 =>.WildTangent Inc® O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM][64Bits] -- WTA-9a24a4fc-7d08-4541-9842-9491f24e894c =>.WildTangent Inc® O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79} =>.Microsoft Corporation O42 - Logiciel: Launch Manager - (.Acer Inc..) [HKLM][64Bits] -- LManager =>.Dritek System Inc.® O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU][64Bits] -- OneDriveSetup.exe =>.Microsoft Corporation® O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} =>.Microsoft O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} =>.Microsoft O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} =>.Microsoft O42 - Logiciel: Mystery of Mortlake Mansion - (.WildTangent.) [HKLM][64Bits] -- WTA-57ca64de-b7d6-4e12-8de3-10cc99af59c7 =>.WildTangent Inc® O42 - Logiciel: MyWinLocker - (.Egis Technology Inc..) [HKLM][64Bits] -- {0B78ECB0-1A6B-4E6D-89D7-0E7CE77F0427} =>.Egis Technology Inc. O42 - Logiciel: MyWinLocker 4 - (.Egis Technology Inc..) [HKLM][64Bits] -- {39F15B50-A977-4CA6-B1C3-6A8724CDA025} =>.Egis Technology Inc. O42 - Logiciel: MyWinLocker Suite - (.Egis Technology Inc..) [HKLM][64Bits] -- {17DF9714-60C9-43C9-A9C2-32BCAED44CBE} =>.Egis Technology Inc. O42 - Logiciel: MyWinLocker Suite - (.Egis Technology Inc..) [HKLM][64Bits] -- InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE} =>.Egis Technology Inc. O42 - Logiciel: newsXpresso - (.esobi Inc..) [HKLM][64Bits] -- InstallShield_{613C0AC5-3A67-4B94-8B13-9176AD83F5BF} =>.esobi Inc. O42 - Logiciel: Noopod (Uninstall) - (...) [HKLM][64Bits] -- Noopod O42 - Logiciel: NTI Media Maker 9 - (.NTI Corporation.) [HKLM][64Bits] -- {D3D5C4E8-040F-4C6F-8105-41D43CF94F44} =>.NTI Corporation O42 - Logiciel: NTI Media Maker 9 - (.NTI Corporation.) [HKLM][64Bits] -- InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44} =>.NTI Corporation O42 - Logiciel: Online Safety 2.83.1346.10 - (.F-Secure Corporation.) [HKLM][64Bits] -- {4A1D6878-ED34-4885-AF28-9FA259D67377} =>.F-Secure Corporation O42 - Logiciel: OpenSource Flash Video Splitter 1.0.0.5 - (...) [HKLM][64Bits] -- OpenSource Flash Video Splitter O42 - Logiciel: Package de pilotes Windows - ACTIA Automotive ACTIA USB Devices Driver Inst - (.ACTIA Automotive.) [HKLM][64Bits] -- 06330AEC489EF74CA815EB51EB0BFB271730A066 {0100000000011FA43B56D3} =>.ACTIA Automotive O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WTA-4a61484c-753e-4d1d-ace8-095b69efbd43 =>.WildTangent Inc® O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-0ee7012c-18b4-438d-a3b8-dad44376d2eb =>.WildTangent Inc® O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-6b99d81d-db94-4e15-a421-f76e219a2829 =>.WildTangent Inc® O42 - Logiciel: Quick Zip 5.1 - (.Quick Zip Dev.) [HKLM][64Bits] -- {87AF4C0E-D953-424B-8108-3127CA217E6F} =>.Quick Zip Dev O42 - Logiciel: Raccolta foto - (.Microsoft Corporation.) [HKLM][64Bits] -- {86A1CEAD-EF47-47BB-AE79-DA8C09E15382} =>.Microsoft Corporation O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp® O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} =>.Realtek Semiconductor Corp® O42 - Logiciel: Samsung Kies3 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- {88547073-C566-4895-9005-EBE98EA3F7C7} =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Samsung Kies3 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits] -- InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7} =>.Samsung Electronics Co., Ltd. O42 - Logiciel: Shredder - (.Egis Technology Inc..) [HKLM][64Bits] -- {1F557316-CFC0-41BD-AFF7-8BC49CE444D7} =>.Egis Technology Inc. O42 - Logiciel: Shredder - (.Egis Technology Inc..) [HKLM][64Bits] -- {C2695E83-CF1D-43D1-84FE-B3BEC561012A} =>.Egis Technology Inc. O42 - Logiciel: Skype™ 7.0 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7} =>.Skype Technologies S.A. O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-8bf0cea9-067f-41fd-834f-5a03815c6bfa =>.WildTangent Inc® O42 - Logiciel: Torchlight - (.WildTangent.) [HKLM][64Bits] -- WTA-ef16294d-f7c4-40f1-a064-6a283d8790f4 =>.WildTangent Inc® O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent Inc® O42 - Logiciel: Valokuvavalikoima - (.Microsoft Corporation.) [HKLM][64Bits] -- {B315ABA6-8217-484E-9AC5-38806E265664} =>.Microsoft Corporation O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM][64Bits] -- {933B4015-4618-4716-A828-5289FC03165F} =>.DivX, Inc O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-57c9a666-fcaf-402a-827e-7199ca05b253 =>.WildTangent Inc® O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WTA-d033dac5-a96c-48d3-ad98-662ab82e5a2b =>.WildTangent Inc® O42 - Logiciel: Welcome Center - (.Acer Incorporated.) [HKLM][64Bits] -- Acer Welcome Center =>.Acer Incorporated® O42 - Logiciel: WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer =>.WildTangent Inc® O42 - Logiciel: WinPcap 4.1.2 - (.CACE Technologies.) [HKLM][64Bits] -- WinPcapInst =>.CACE Technologies O42 - Logiciel: WinZip 20.0 - (.WinZip Computing, S.L. .) [HKLM][64Bits] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240EF} =>.WinZip Computing, S.L. O42 - Logiciel: Xvid Video Codec - (.Xvid Team.) [HKLM][64Bits] -- Xvid Video Codec 1.3.2 =>.Xvid Team O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-3a464662-7e6a-4ac2-a85f-c3119adacb73 =>.WildTangent Inc® O42 - Logiciel: Συλλογή φωτογραφιών - (.Microsoft Corporation.) [HKLM][64Bits] -- {2D5C287A-1D2D-46BA-8EF8-D2747575DB6E} =>.Microsoft Corporation O42 - Logiciel: Фотоальбом - (.Microsoft Corporation.) [HKLM][64Bits] -- {B27EB36C-9860-42FD-AA90-23648E49F15C} =>.Microsoft Corporation O42 - Logiciel: Фотогалерия - (.Microsoft Corporation.) [HKLM][64Bits] -- {3AAB928E-40E9-4DC5-A9CC-FB979E1B2C03} =>.Microsoft Corporation O42 - Logiciel: Фотографии (общедоступная версия) - (.Microsoft Corporation.) [HKLM][64Bits] -- {7D6C9057-7F50-4CAB-A557-A68A7932B48E} =>.Microsoft Corporation O42 - Logiciel: גלריית התמונות - (.Microsoft Corporation.) [HKLM][64Bits] -- {F1BEEA80-1419-45EE-A4C7-41FD4450ED92} =>.Microsoft Corporation O42 - Logiciel: معرض الصور - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF15F988-98D4-479F-9750-85A495BF8233} =>.Microsoft Corporation O42 - Logiciel: 影像中心 - (.Microsoft Corporation.) [HKLM][64Bits] -- {D3F0882C-4948-4BAA-9720-47CC4D9AEF54} =>.Microsoft Corporation ---\\ HKCU & HKLM Software Keys (123) - 31s HKLM\SOFTWARE\Wow6432Node\Acer Incorporated HKLM\SOFTWARE\Wow6432Node\ACTIA HKLM\SOFTWARE\Wow6432Node\Adguard HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\AdwCleaner HKLM\SOFTWARE\Wow6432Node\AMD HKLM\SOFTWARE\Wow6432Node\Apple Inc. HKLM\SOFTWARE\Wow6432Node\Atheros Communications Inc. HKLM\SOFTWARE\Wow6432Node\ATI HKLM\SOFTWARE\Wow6432Node\ATI Technologies HKLM\SOFTWARE\Wow6432Node\Avira HKLM\SOFTWARE\Wow6432Node\AviraSpeedup HKLM\SOFTWARE\Wow6432Node\Belarc HKLM\SOFTWARE\Wow6432Node\Bunndle HKLM\SOFTWARE\Wow6432Node\CyberLink HKLM\SOFTWARE\Wow6432Node\DiagBox HKLM\SOFTWARE\Wow6432Node\DivX HKLM\SOFTWARE\Wow6432Node\DivXNetworks HKLM\SOFTWARE\Wow6432Node\Dritek HKLM\SOFTWARE\Wow6432Node\EgisTec IPS HKLM\SOFTWARE\Wow6432Node\EgisTec MyWinLocker HKLM\SOFTWARE\Wow6432Node\EgisTec MyWinLockerSuite HKLM\SOFTWARE\Wow6432Node\EgisTec Shredder HKLM\SOFTWARE\Wow6432Node\Evernote HKLM\SOFTWARE\Wow6432Node\F-Secure HKLM\SOFTWARE\Wow6432Node\Firebird Project HKLM\SOFTWARE\Wow6432Node\Freemake HKLM\SOFTWARE\Wow6432Node\fssg HKLM\SOFTWARE\Wow6432Node\FUHU, Inc. HKLM\SOFTWARE\Wow6432Node\GNU HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\HaaliMkx HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\JavaSoft HKLM\SOFTWARE\Wow6432Node\JreMetrics HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Lame For Audacity HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\Macrovision HKLM\SOFTWARE\Wow6432Node\Malwarebytes' Anti-Malware HKLM\SOFTWARE\Wow6432Node\McAfee HKLM\SOFTWARE\Wow6432Node\MicroWorld HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\National Instruments HKLM\SOFTWARE\Wow6432Node\Netscape HKLM\SOFTWARE\Wow6432Node\NewTech Infosystems HKLM\SOFTWARE\Wow6432Node\Nico Mak Computing HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\OEM HKLM\SOFTWARE\Wow6432Node\Opera Software HKLM\SOFTWARE\Wow6432Node\POUD HKLM\SOFTWARE\Wow6432Node\Realtek HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\Safer Networking Limited HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\VirualDiskRedist HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WildTangent HKLM\SOFTWARE\Wow6432Node\WinPcap HKLM\SOFTWARE\Wow6432Node\Wondershare HKLM\SOFTWARE\Wow6432Node\Wow6432Node HKLM\SOFTWARE\Wow6432Node\X-AVCSD HKLM\SOFTWARE\Wow6432Node\Xvid Team HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo! HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\Acer HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Apple Computer, Inc. HKCU\SOFTWARE\Apple Inc. HKCU\SOFTWARE\ATI HKCU\SOFTWARE\Avira HKCU\SOFTWARE\AviraSpeedup HKCU\SOFTWARE\Belarc HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\Cyberlink HKCU\SOFTWARE\DivX HKCU\SOFTWARE\Dritek HKCU\SOFTWARE\DSP-worx HKCU\SOFTWARE\Elantech HKCU\SOFTWARE\F-Secure HKCU\SOFTWARE\Freemake HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\Haali HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\JavaSoft HKCU\SOFTWARE\LAV HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MicroWorld HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\NewTech Infosystems HKCU\SOFTWARE\Nico Mak Computing HKCU\SOFTWARE\Noopod HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\OEM HKCU\SOFTWARE\Opera Software HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\Quick Zip Dev HKCU\SOFTWARE\Realtek HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\Safer Networking Limited HKCU\SOFTWARE\Samsung HKCU\SOFTWARE\Skype HKCU\SOFTWARE\TCP Optimizer HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\Unity HKCU\SOFTWARE\Windows Live Writer HKCU\SOFTWARE\WinZip Computing HKCU\SOFTWARE\Wondershare HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\JavaSoft ---\\ Contenu des dossiers Programmes (359) - 83s O43 - CFD: 25/10/2012 - [] D -- C:\Program Files\Accessory Store =>.Acer Incorporated® O43 - CFD: 16/11/2012 - [] D -- C:\Program Files\Acer =>.Acer Incorporated® O43 - CFD: 21/07/2015 - [] D -- C:\Program Files\AMD O43 - CFD: 26/07/2012 - [] D -- C:\Program Files\ATI =>.Advanced Micro Devices, Inc.® O43 - CFD: 21/11/2012 - [] D -- C:\Program Files\ATI Technologies O43 - CFD: 12/01/2016 - [] D -- C:\Program Files\Bonjour =>.Apple Inc.® O43 - CFD: 07/08/2016 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd® O43 - CFD: 18/02/2016 - [] D -- C:\Program Files\Common Files O43 - CFD: 25/03/2016 - [] D -- C:\Program Files\DiagBox O43 - CFD: 25/03/2016 - [] D -- C:\Program Files\DIFX {0100000000011FA43B56D3} O43 - CFD: 26/06/2013 - [] D -- C:\Program Files\DivX O43 - CFD: 21/11/2012 - [] D -- C:\Program Files\DVD Maker O43 - CFD: 26/07/2012 - [] D -- C:\Program Files\EgisTec IPS =>.EGIS TECHNOLOGY INC.® O43 - CFD: 01/11/2013 - [] D -- C:\Program Files\Elantech =>.ELAN Microelectronics Corporation® O43 - CFD: 25/10/2012 - [0] SHD -- C:\Program Files\Fichiers communs O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Internet Explorer O43 - CFD: 12/01/2016 - [] D -- C:\Program Files\iPod =>.Apple Inc.® O43 - CFD: 12/01/2016 - [] D -- C:\Program Files\iTunes =>.Apple Inc.® O43 - CFD: 18/02/2016 - [] D -- C:\Program Files\Microsoft Office O43 - CFD: 11/08/2015 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation® O43 - CFD: 01/11/2013 - [] D -- C:\Program Files\MSBuild O43 - CFD: 01/11/2013 - [] D -- C:\Program Files\Realtek =>.Andrea Electronics® O43 - CFD: 01/11/2013 - [] D -- C:\Program Files\Reference Assemblies O43 - CFD: 26/07/2012 - [0] HD -- C:\Program Files\Uninstall Information O43 - CFD: 01/11/2013 - [] D -- C:\Program Files\VDownloader O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation® O43 - CFD: 26/09/2015 - [] D -- C:\Program Files\Windows Journal O43 - CFD: 18/11/2014 - [] D -- C:\Program Files\Windows Live O43 - CFD: 19/03/2015 - [] D -- C:\Program Files\Windows Mail O43 - CFD: 19/03/2015 - [] D -- C:\Program Files\Windows Media Player O43 - CFD: 19/03/2015 - [] D -- C:\Program Files\Windows Multimedia Platform O43 - CFD: 01/11/2013 - [] D -- C:\Program Files\Windows NT O43 - CFD: 19/03/2015 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 19/03/2015 - [] D -- C:\Program Files\Windows Portable Devices O43 - CFD: 01/11/2013 - [] SHD -- C:\Program Files\Windows Sidebar O43 - CFD: 10/07/2016 - [] HD -- C:\Program Files\WindowsApps O43 - CFD: 19/03/2015 - [] D -- C:\Program Files\WindowsPowerShell O43 - CFD: 29/10/2012 - [] D -- C:\Program Files\WinPcap =>.CACE Technologies, Inc.® O43 - CFD: 18/02/2016 - [] D -- C:\Program Files\WinZip =>.WinZip Computing LLC® O43 - CFD: 16/11/2012 - [] D -- C:\Program Files (x86)\Acer =>.Acer Incorporated® O43 - CFD: 17/10/2011 - [] D -- C:\Program Files (x86)\Acer Games O43 - CFD: 03/11/2015 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated® O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\AMD O43 - CFD: 21/11/2012 - [] D -- C:\Program Files (x86)\AMD APP O43 - CFD: 21/11/2012 - [] D -- C:\Program Files (x86)\AMD AVT O43 - CFD: 11/01/2016 - [] D -- C:\Program Files (x86)\Apple Software Update =>.Apple Inc.® O43 - CFD: 21/07/2015 - [] D -- C:\Program Files (x86)\ATI Technologies O43 - CFD: 31/07/2016 - [] D -- C:\Program Files (x86)\Avira =>.Avira Operations GmbH & Co. KG® O43 - CFD: 11/08/2015 - [] D -- C:\Program Files (x86)\Belarc =>.Belarc, Inc.® O43 - CFD: 12/01/2016 - [] D -- C:\Program Files (x86)\Bonjour =>.Apple Inc.® O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 26/05/2013 - [] D -- C:\Program Files (x86)\DirectVobSub O43 - CFD: 26/06/2013 - [] D -- C:\Program Files (x86)\DivX O43 - CFD: 03/08/2016 - [] HD -- C:\Program Files (x86)\DrFoneAndroid_Temp O43 - CFD: 26/05/2013 - [] D -- C:\Program Files (x86)\DSP-worx O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\EgisTec IPS =>.EGIS TECHNOLOGY INC.® O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\EgisTec MyWinLocker =>.EGIS TECHNOLOGY INC.® O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\EgisTec MyWinLockerSuite =>.EGIS TECHNOLOGY INC.® O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\EgisTec Shredder =>.EGIS TECHNOLOGY INC.® O43 - CFD: 17/10/2011 - [] D -- C:\Program Files (x86)\Evernote O43 - CFD: 25/05/2014 - [] D -- C:\Program Files (x86)\ffdshow O43 - CFD: 17/10/2011 - [] D -- C:\Program Files (x86)\Fooz Kids O43 - CFD: 11/01/2016 - [] D -- C:\Program Files (x86)\Freemake =>.Microsoft Corporation® O43 - CFD: 26/06/2015 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 26/05/2013 - [] D -- C:\Program Files (x86)\Haali O43 - CFD: 21/10/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.Macrovision Corporation® O43 - CFD: 15/07/2016 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 12/01/2016 - [] D -- C:\Program Files (x86)\iTunes O43 - CFD: 24/01/2016 - [] D -- C:\Program Files (x86)\Java =>.Oracle America, Inc.® O43 - CFD: 26/05/2013 - [] D -- C:\Program Files (x86)\Lame For Audacity O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\Launch Manager =>.Dritek System Inc.® O43 - CFD: 18/11/2012 - [0] D -- C:\Program Files (x86)\Microsoft O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 11/08/2015 - [] D -- C:\Program Files (x86)\Microsoft Silverlight =>.Microsoft Corporation® O43 - CFD: 17/10/2011 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8 O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Microsoft Works O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 05/05/2013 - [] D -- C:\Program Files (x86)\Noopod O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\NTI =>.NTI Corporation® O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\OEM O43 - CFD: 26/05/2013 - [] D -- C:\Program Files (x86)\OpenSource Flash Video Splitter O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\Opera O43 - CFD: 19/08/2015 - [] D -- C:\Program Files (x86)\QuickTime =>Riskware.QuickTime O43 - CFD: 16/05/2013 - [] D -- C:\Program Files (x86)\QuickZip O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek Semiconductor Corp® O43 - CFD: 01/11/2013 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 21/10/2015 - [] D -- C:\Program Files (x86)\Samsung =>.Samsung Electronics CO., LTD.® O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\SFR =>.F-Secure Corporation® O43 - CFD: 19/04/2015 - [] RD -- C:\Program Files (x86)\Skype =>.Skype Software Sarl® O43 - CFD: 23/04/2013 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy =>.Safer Networking Ltd.® O43 - CFD: 27/05/2014 - [] D -- C:\Program Files (x86)\Spybot - Search & Destroy 2 =>.Safer Networking Ltd.® O43 - CFD: 26/07/2012 - [0] HD -- C:\Program Files (x86)\Temp O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 01/11/2012 - [0] D -- C:\Program Files (x86)\VideoLAN O43 - CFD: 01/11/2012 - [] D -- C:\Program Files (x86)\WildTangent Games =>.WildTangent Inc® O43 - CFD: 14/11/2015 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 18/11/2014 - [] D -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation® O43 - CFD: 19/03/2015 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 19/03/2015 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 19/03/2015 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 19/03/2015 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 19/03/2015 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 01/11/2013 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 03/08/2016 - [] D -- C:\Program Files (x86)\Wondershare O43 - CFD: 26/05/2013 - [] D -- C:\Program Files (x86)\Xvid O43 - CFD: 19/03/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 19/03/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 01/11/2013 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Backup Manager O43 - CFD: 01/11/2013 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye Webcam O43 - CFD: 01/11/2013 - [] AD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem O43 - CFD: 14/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 21/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center O43 - CFD: 31/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira O43 - CFD: 07/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 25/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiagBox O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DirectVobSub O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dolby O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EgisTec O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote O43 - CFD: 25/05/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow O43 - CFD: 11/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter O43 - CFD: 12/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes O43 - CFD: 24/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java O43 - CFD: 22/08/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 11/08/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Media Maker 9 O43 - CFD: 23/09/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pack Sécurité O43 - CFD: 21/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung O43 - CFD: 19/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 18/02/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 19/03/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 30/09/2013 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC O43 - CFD: 06/07/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 25/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wifi O43 - CFD: 18/11/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip O43 - CFD: 03/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid O43 - CFD: 16/01/2015 - [] D -- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 O43 - CFD: 17/10/2011 - [] D -- C:\ProgramData\Acer O43 - CFD: 03/11/2015 - [] D -- C:\ProgramData\Adobe O43 - CFD: 21/11/2012 - [] D -- C:\ProgramData\AMD O43 - CFD: 30/01/2014 - [] D -- C:\ProgramData\Apple O43 - CFD: 29/12/2013 - [] D -- C:\ProgramData\Apple Computer O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 22/07/2015 - [] D -- C:\ProgramData\ATI O43 - CFD: 24/01/2016 - [] D -- C:\ProgramData\Avira O43 - CFD: 17/10/2011 - [] D -- C:\ProgramData\BackupManager O43 - CFD: 25/10/2012 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 26/07/2012 - [] D -- C:\ProgramData\CLSK O43 - CFD: 16/11/2012 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 26/06/2013 - [] D -- C:\ProgramData\DivX O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 12/01/2016 - [] D -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7 O43 - CFD: 26/07/2012 - [] D -- C:\ProgramData\EgisTec O43 - CFD: 26/07/2012 - [] D -- C:\ProgramData\EgisTec IPS O43 - CFD: 17/10/2011 - [0] D -- C:\ProgramData\Evernote O43 - CFD: 24/01/2016 - [] D -- C:\ProgramData\F-Secure O43 - CFD: 25/10/2012 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 22/06/2016 - [0] D -- C:\ProgramData\firebird O43 - CFD: 26/07/2012 - [] D -- C:\ProgramData\FLEXnet O43 - CFD: 17/10/2011 - [] D -- C:\ProgramData\Fooz Kids O43 - CFD: 11/01/2016 - [] D -- C:\ProgramData\Freemake O43 - CFD: 26/05/2014 - [] D -- C:\ProgramData\Malwarebytes O43 - CFD: 25/10/2012 - [] D -- C:\ProgramData\McAfee O43 - CFD: 25/10/2012 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 18/02/2016 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 18/11/2014 - [] D -- C:\ProgramData\Microsoft OneDrive O43 - CFD: 27/10/2014 - [] D -- C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS O43 - CFD: 12/06/2014 - [] D -- C:\ProgramData\MicroWorld O43 - CFD: 25/10/2012 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 07/11/2012 - [] D -- C:\ProgramData\newsXpresso O43 - CFD: 16/11/2012 - [] D -- C:\ProgramData\NTI Launcher O43 - CFD: 16/11/2012 - [] D -- C:\ProgramData\NTIRegEt O43 - CFD: 31/10/2012 - [] D -- C:\ProgramData\oem O43 - CFD: 22/07/2015 - [] D -- C:\ProgramData\Office Genuine Advantage O43 - CFD: 24/01/2016 - [] D -- C:\ProgramData\Oracle O43 - CFD: 23/07/2016 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 01/11/2013 - [] D -- C:\ProgramData\PRICache O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 21/10/2015 - [] D -- C:\ProgramData\Samsung O43 - CFD: 19/04/2015 - [] D -- C:\ProgramData\Skype O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 16/11/2012 - [] D -- C:\ProgramData\Temp O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\UniqueId O43 - CFD: 17/11/2012 - [] D -- C:\ProgramData\VirtualizedApplications O43 - CFD: 01/11/2012 - [] D -- C:\ProgramData\WildTangent O43 - CFD: 18/02/2016 - [] D -- C:\ProgramData\WinZip O43 - CFD: 04/08/2016 - [] D -- C:\ProgramData\Wondershare O43 - CFD: 03/08/2016 - [] D -- C:\ProgramData\wsr O43 - CFD: 25/03/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 17/10/2011 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 26/02/2015 - [] D -- C:\Program Files (x86)\Common Files\Apple O43 - CFD: 21/11/2012 - [] D -- C:\Program Files (x86)\Common Files\ATI Technologies O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\Common Files\EgisTec O43 - CFD: 11/01/2016 - [] D -- C:\Program Files (x86)\Common Files\Freemake Shared O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 24/01/2016 - [] D -- C:\Program Files (x86)\Common Files\Java O43 - CFD: 26/07/2012 - [] D -- C:\Program Files (x86)\Common Files\Macrovision Shared O43 - CFD: 25/10/2012 - [] D -- C:\Program Files (x86)\Common Files\mcafee O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 12/06/2014 - [0] D -- C:\Program Files (x86)\Common Files\MicroWorld O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 19/04/2015 - [] D -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 01/11/2013 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 18/02/2016 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 17/10/2011 - [] D -- C:\Program Files (x86)\Common Files\Windows Live O43 - CFD: 26/05/2014 - [] D -- C:\Program Files (x86)\Common Files\Wise Installation Wizard O43 - CFD: 25/03/2016 - [] D -- C:\Users\ptimot\AppData\Roaming\Actia O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\Adobe O43 - CFD: 16/01/2015 - [] D -- C:\Users\ptimot\AppData\Roaming\Apple Computer O43 - CFD: 02/11/2012 - [] D -- C:\Users\ptimot\AppData\Roaming\ATI O43 - CFD: 24/01/2016 - [] D -- C:\Users\ptimot\AppData\Roaming\Avira O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\CDXReader O43 - CFD: 16/11/2012 - [] D -- C:\Users\ptimot\AppData\Roaming\CyberLink O43 - CFD: 27/12/2012 - [] D -- C:\Users\ptimot\AppData\Roaming\F-Secure O43 - CFD: 19/11/2012 - [] D -- C:\Users\ptimot\AppData\Roaming\FoozKids O43 - CFD: 03/08/2016 - [0] D -- C:\Users\ptimot\AppData\Roaming\HMYGSetting O43 - CFD: 02/11/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\Identities O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\LavFilters O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\Macromedia O43 - CFD: 21/11/2010 - [0] D -- C:\Users\ptimot\AppData\Roaming\Media Center Programs O43 - CFD: 13/01/2016 - [] SD -- C:\Users\ptimot\AppData\Roaming\Microsoft O43 - CFD: 25/03/2016 - [] D -- C:\Users\ptimot\AppData\Roaming\Mozilla O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\newsXpresso O43 - CFD: 25/10/2012 - [0] D -- C:\Users\ptimot\AppData\Roaming\Opera O43 - CFD: 26/04/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\PCFix O43 - CFD: 09/06/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\player O43 - CFD: 16/05/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\QuickZip O43 - CFD: 21/10/2015 - [] D -- C:\Users\ptimot\AppData\Roaming\Samsung O43 - CFD: 25/10/2012 - [] D -- C:\Users\ptimot\AppData\Roaming\Screensaver O43 - CFD: 18/01/2015 - [] D -- C:\Users\ptimot\AppData\Roaming\Skype O43 - CFD: 27/10/2014 - [] D -- C:\Users\ptimot\AppData\Roaming\SoftGrid Client O43 - CFD: 11/01/2016 - [] D -- C:\Users\ptimot\AppData\Roaming\Sun O43 - CFD: 16/11/2012 - [0] D -- C:\Users\ptimot\AppData\Roaming\TP O43 - CFD: 04/01/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\Unity O43 - CFD: 07/08/2016 - [] D -- C:\Users\ptimot\AppData\Roaming\uTorrent O43 - CFD: 12/01/2015 - [] D -- C:\Users\ptimot\AppData\Roaming\vlc O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\WildTangent O43 - CFD: 25/10/2012 - [] D -- C:\Users\ptimot\AppData\Roaming\Windows Live Writer O43 - CFD: 03/08/2016 - [] D -- C:\Users\ptimot\AppData\Roaming\Wondershare O43 - CFD: 07/08/2016 - [] D -- C:\Users\ptimot\AppData\Roaming\ZHP O43 - CFD: 25/10/2012 - [] D -- C:\Users\ptimot\AppData\Local\Acer O43 - CFD: 25/03/2016 - [] D -- C:\Users\ptimot\AppData\Local\Actia O43 - CFD: 17/02/2016 - [] D -- C:\Users\ptimot\AppData\Local\Adobe O43 - CFD: 21/11/2012 - [] D -- C:\Users\ptimot\AppData\Local\AMD O43 - CFD: 04/01/2013 - [] D -- C:\Users\ptimot\AppData\Local\Apple O43 - CFD: 29/12/2013 - [] D -- C:\Users\ptimot\AppData\Local\Apple Computer O43 - CFD: 01/11/2013 - [0] SHD -- C:\Users\ptimot\AppData\Local\Application Data O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Local\Apps O43 - CFD: 02/11/2012 - [] D -- C:\Users\ptimot\AppData\Local\ATI O43 - CFD: 24/01/2016 - [] D -- C:\Users\ptimot\AppData\Local\Avira O43 - CFD: 17/02/2016 - [] D -- C:\Users\ptimot\AppData\Local\CEF O43 - CFD: 16/11/2012 - [] D -- C:\Users\ptimot\AppData\Local\Cyberlink O43 - CFD: 10/06/2016 - [0] D -- C:\Users\ptimot\AppData\Local\Diagnostics O43 - CFD: 25/10/2012 - [] D -- C:\Users\ptimot\AppData\Local\EgisTec IPS O43 - CFD: 24/11/2015 - [0] D -- C:\Users\ptimot\AppData\Local\ElevatedDiagnostics O43 - CFD: 10/08/2015 - [0] SHD -- C:\Users\ptimot\AppData\Local\EmieBrowserModeList O43 - CFD: 10/08/2015 - [0] SHD -- C:\Users\ptimot\AppData\Local\EmieSiteList O43 - CFD: 10/08/2015 - [0] SHD -- C:\Users\ptimot\AppData\Local\EmieUserList O43 - CFD: 23/09/2014 - [] D -- C:\Users\ptimot\AppData\Local\F-Secure O43 - CFD: 11/01/2016 - [] D -- C:\Users\ptimot\AppData\Local\FreemakeVideoDownloader O43 - CFD: 02/08/2015 - [] D -- C:\Users\ptimot\AppData\Local\Google O43 - CFD: 11/06/2015 - [] D -- C:\Users\ptimot\AppData\Local\GWX O43 - CFD: 01/11/2013 - [0] SHD -- C:\Users\ptimot\AppData\Local\Historique O43 - CFD: 14/11/2013 - [] D -- C:\Users\ptimot\AppData\Local\messenger-rdv-rapide O43 - CFD: 06/03/2015 - [] D -- C:\Users\ptimot\AppData\Local\Microsoft O43 - CFD: 27/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\Microsoft Help O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Local\Microsoft_Corporation O43 - CFD: 18/02/2016 - [] D -- C:\Users\ptimot\AppData\Local\Nico Mak Computing O43 - CFD: 05/05/2013 - [] D -- C:\Users\ptimot\AppData\Local\Noopod O43 - CFD: 25/10/2012 - [0] D -- C:\Users\ptimot\AppData\Local\Opera O43 - CFD: 06/08/2015 - [] D -- C:\Users\ptimot\AppData\Local\Packages O43 - CFD: 01/11/2013 - [] D -- C:\Users\ptimot\AppData\Local\Programs O43 - CFD: 25/08/2013 - [] D -- C:\Users\ptimot\AppData\Local\Quick_Zip_Dev O43 - CFD: 16/11/2012 - [] D -- C:\Users\ptimot\AppData\Local\SoftGrid Client O43 - CFD: 07/08/2016 - [] D -- C:\Users\ptimot\AppData\Local\Temp O43 - CFD: 01/11/2013 - [0] SHD -- C:\Users\ptimot\AppData\Local\Temporary Internet Files O43 - CFD: 15/03/2013 - [0] D -- C:\Users\ptimot\AppData\Local\Unity O43 - CFD: 12/05/2016 - [] D -- C:\Users\ptimot\AppData\Local\VirtualStore O43 - CFD: 18/11/2014 - [] D -- C:\Users\ptimot\AppData\Local\Windows Live O43 - CFD: 18/11/2014 - [] D -- C:\Users\ptimot\AppData\Local\Windows Live Writer O43 - CFD: 04/05/2016 - [] D -- C:\Users\ptimot\AppData\Local\WinZip O43 - CFD: 09/09/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{07F24AC4-48D3-40AF-B039-ADBC9ED06F43} =>.Superfluous.Empty O43 - CFD: 05/06/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{0D2B61C9-99DA-49BB-A5B3-B01C0A6B6471} =>.Superfluous.Empty O43 - CFD: 10/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{0EF8E8D8-C3E4-4F26-970E-440E22E12631} =>.Superfluous.Empty O43 - CFD: 12/07/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{0F8A1331-E87C-4E47-8B04-C0DD827179AD} =>.Superfluous.Empty O43 - CFD: 31/07/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{1376E102-0104-495B-B72C-99353A997B3C} =>.Superfluous.Empty O43 - CFD: 13/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{15ACFBEB-6EB3-42E6-9179-6BA03B96C12F} =>.Superfluous.Empty O43 - CFD: 03/08/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{15E7ABE8-D65E-44D7-BCA6-DC524D0B349D} =>.Superfluous.Empty O43 - CFD: 06/08/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{1B5664AD-1C06-43FC-90AD-3C11E0FDDE4A} =>.Superfluous.Empty O43 - CFD: 28/09/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{1C970E9C-418E-4EEA-8324-9F590AB7719D} =>.Superfluous.Empty O43 - CFD: 15/08/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{23085735-865D-463F-A43A-89D0D7489889} =>.Superfluous.Empty O43 - CFD: 14/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{2A41AEC8-8C7B-4D65-8F03-8333F9BE01FF} =>.Superfluous.Empty O43 - CFD: 14/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{2C7DAA0B-1543-4348-BFC6-0C0D5E013309} =>.Superfluous.Empty O43 - CFD: 16/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{30C58AE0-70F0-4B1D-82F5-A3398387EB28} =>.Superfluous.Empty O43 - CFD: 21/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{33B890C7-5827-494F-B2F2-D62DC668DA86} =>.Superfluous.Empty O43 - CFD: 18/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{34F88AE6-2745-4163-A897-1D6562AF9E1D} =>.Superfluous.Empty O43 - CFD: 17/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{3DD3B68D-B57C-4E76-B9E9-CE321F5B4E92} =>.Superfluous.Empty O43 - CFD: 15/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{42247A23-E0B7-4C0C-A5A8-42E5D759B39B} =>.Superfluous.Empty O43 - CFD: 02/07/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{504255C7-3B37-4E7E-B327-48F0B67A08B0} =>.Superfluous.Empty O43 - CFD: 10/08/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{519B7EC4-D868-42B5-9EF3-02FB9F87E0B7} =>.Superfluous.Empty O43 - CFD: 04/06/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{5C2CF899-CA29-4733-8E19-0EC26D1F56FE} =>.Superfluous.Empty O43 - CFD: 13/07/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{64B2EAC8-BC1C-42C1-9E5A-97DFD71F8012} =>.Superfluous.Empty O43 - CFD: 30/07/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{6DEA9CB0-C397-45BC-B3B5-C93EA44D2BDA} =>.Superfluous.Empty O43 - CFD: 08/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{6EC858DB-8975-4C48-934C-14EAD3F8E23B} =>.Superfluous.Empty O43 - CFD: 12/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{77B8E397-26BF-4AA3-9877-68FA6CE3D486} =>.Superfluous.Empty O43 - CFD: 08/08/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{7F5B4BC5-CF81-4148-9600-F127D794318D} =>.Superfluous.Empty O43 - CFD: 18/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{817A4CC2-4B35-42B3-B96C-FE936829D849} =>.Superfluous.Empty O43 - CFD: 29/09/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{81CCC6AF-B777-4F73-8B94-B90C37AC77F9} =>.Superfluous.Empty O43 - CFD: 16/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{82B0BF60-6E4C-4603-81D2-8799B37F6337} =>.Superfluous.Empty O43 - CFD: 01/08/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{84BAB507-9B14-45FB-9062-352CD2BC5030} =>.Superfluous.Empty O43 - CFD: 29/07/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{89D8B886-0457-497E-9933-1D3BAFD60FEC} =>.Superfluous.Empty O43 - CFD: 17/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{91B671CB-9537-4B09-B6DB-755DBA565106} =>.Superfluous.Empty O43 - CFD: 25/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{91C5A457-CF44-46F8-A7FC-6FA3C01B636A} =>.Superfluous.Empty O43 - CFD: 09/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{9653BB65-D7FF-459B-8C42-C45E03A715A9} =>.Superfluous.Empty O43 - CFD: 20/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{98396919-EAD9-48F4-9575-45C9F003981B} =>.Superfluous.Empty O43 - CFD: 06/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{98E64433-C2A9-42BC-845C-ECDD3598618D} =>.Superfluous.Empty O43 - CFD: 22/08/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{9E260DC1-DE06-4452-A693-069541D8D78A} =>.Superfluous.Empty O43 - CFD: 03/06/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{9ED17C23-220D-4028-9FF6-0147575E8347} =>.Superfluous.Empty O43 - CFD: 04/08/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{AD9304C1-8E31-430D-A67F-D779CE866D50} =>.Superfluous.Empty O43 - CFD: 26/06/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{AE5CA7B9-5992-4BB5-87C3-474A6AB9F0F2} =>.Superfluous.Empty O43 - CFD: 24/07/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{BCF3E3D8-86C7-4C9B-833D-DF3ACD00FFD8} =>.Superfluous.Empty O43 - CFD: 31/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{C1524564-5810-401F-8510-9DC00B8FDBC0} =>.Superfluous.Empty O43 - CFD: 08/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{C7DB80BD-3E0A-40D4-BFE8-04482D440433} =>.Superfluous.Empty O43 - CFD: 09/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{CA6CECCA-91CC-4820-A13E-D74691725E05} =>.Superfluous.Empty O43 - CFD: 18/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{CB53E72B-8BA9-4CEF-9336-6EAE478982C0} =>.Superfluous.Empty O43 - CFD: 13/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{D5C78DCB-AE15-4044-BACB-F6069E0137B0} =>.Superfluous.Empty O43 - CFD: 22/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{E518AC35-1EFE-4E10-88C4-599EDBF689D8} =>.Superfluous.Empty O43 - CFD: 24/10/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{E8DFDDC0-80E8-4AC7-8694-D041AFCE0228} =>.Superfluous.Empty O43 - CFD: 18/07/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{EB321C1B-39B4-42FC-85C5-C4E4C1B70C2C} =>.Superfluous.Empty O43 - CFD: 10/11/2014 - [0] D -- C:\Users\ptimot\AppData\Local\{F7291298-82B4-476F-8417-8B59BD652D9F} =>.Superfluous.Empty O43 - CFD: 01/11/2013 - [0] D -- C:\Users\ptimot\AppData\Local\Programs\Common O43 - CFD: 22/08/2013 - [] RD -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 01/11/2013 - [] RD -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 20/05/2014 - [] RD -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 01/11/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake O43 - CFD: 26/05/2013 - [0] D -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter O43 - CFD: 01/11/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 01/11/2013 - [] D -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Quick Zip 5.1 O43 - CFD: 07/08/2016 - [] RD -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 01/11/2013 - [] RD -- C:\Users\ptimot\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 0 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\ATI O43 - CFD: 02/11/2013 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft O43 - CFD: 0 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Packages O43 - CFD: 01/11/2013 - [0] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\SoftGrid Client ---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 26s O45 - LFCP:[MD5.77EE47B72D719853406B947294C0FAFE] 25/05/2014 A -- C:\WINDOWS\Prefetch\HDVIDCODEC.TMP-ACAA2DCF.pf =>PUP.Optional.CrossRider ---\\ Enumération des clés StartupReg (3) - 1s O53 - SMSR:HKLM\...\startupreg\Norton Online Backup [Key] . (...) -- C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O53 - SMSR:HKLM\...\startupreg\VDownloader [Key] . (...) -- C:\Program Files\VDownloader\VDownloader.exe (.not file.) ---\\ Liste des pilotes du système (57) - 23s O58 - SDL:2013/08/22 14:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys [108896] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [782176] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [79200] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys [25952] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [114016] =>.Microsoft Windows® O58 - SDL:2011/03/30 08:46:46 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\AtihdW76.sys [114704] =>.ATI Technologies, Inc® O58 - SDL:2012/08/21 18:56:38 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\AtihdW86.sys [91648] =>.Advanced Micro Devices O58 - SDL:2014/07/21 22:04:28 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\WINDOWS\System32\drivers\atikmdag.sys [13209088] =>.Advanced Micro Devices, Inc. O58 - SDL:2014/07/21 22:04:28 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\WINDOWS\System32\drivers\atikmpag.sys [626688] =>.Advanced Micro Devices, Inc. O58 - SDL:2016/07/28 13:52:03 A . (.Avira Operations GmbH & Co. KG - Avira Minifilter Driver.) -- C:\WINDOWS\System32\drivers\avgntflt.sys [144664] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2016/07/28 13:52:03 A . (.Avira Operations GmbH & Co. KG - Avira Driver for Security Enhancement.) -- C:\WINDOWS\System32\drivers\avipbb.sys [154392] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2015/12/04 08:38:52 A . (.Avira Operations GmbH & Co. KG - Avira Manager Driver.) -- C:\WINDOWS\System32\drivers\avkmgr.sys [35488] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2016/06/02 19:17:58 A . (.Avira Operations GmbH & Co. KG - Avira WFP Network Driver.) -- C:\WINDOWS\System32\drivers\avnetflt.sys [78208] =>.Avira Operations GmbH & Co. KG® O58 - SDL:2013/08/13 01:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [17624] =>.Broadcom Corporation® O58 - SDL:2013/07/01 18:50:06 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\WINDOWS\System32\drivers\BCMWL63a.SYS [8536752] =>.Broadcom Corporation® O58 - SDL:2013/08/22 14:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows® O58 - SDL:2011/04/05 13:26:26 A . (.ELAN Microelectronics Corp. - ETD Kernel Center.) -- C:\WINDOWS\System32\drivers\ETD.sys [142632] =>.ELAN Microelectronics Corporation® O58 - SDL:2013/08/22 14:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys [3357024] =>.Microsoft Windows® O58 - SDL:2014/01/31 16:22:16 A . (.FTDI Ltd. - FTDIBUS USB Driver.) -- C:\WINDOWS\System32\drivers\ftdibus.sys [94704] =>.Future Technology Devices International Ltd® O58 - SDL:2007/06/27 15:03:54 A . (.FTDI Ltd. - FTDIBUS Serial Device Driver.) -- C:\WINDOWS\System32\drivers\ftser2k.sys [83776] {129A4425F7331F034948124B4D3AEAC8} =>.FTDI Ltd. O58 - SDL:2012/08/21 14:01:20 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\WINDOWS\System32\drivers\GEARAspiWDM.sys [33240] =>.GEAR Software Inc.® O58 - SDL:2013/08/22 14:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows® O58 - SDL:2013/07/30 20:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [24568] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2013/07/25 21:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [99320] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2013/08/10 02:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [651248] =>.Intel Corporation - Intel® Rapid Storage Technology® O58 - SDL:2013/08/22 14:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows® O58 - SDL:2013/06/18 16:44:59 A . (.Qualcomm Atheros Co., Ltd. - Qualcomm Atheros Ar81xx series PCI-E Gigabi.) -- C:\WINDOWS\System32\drivers\L1C63x64.sys [129224] =>.Qualcomm Atheros® O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [109408] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2.sys [93536] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3.sys [81760] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [56672] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows® O58 - SDL:2012/07/26 07:00:14 A . (.Egis Technology Inc. - PSD Mini Filter Driver.) -- C:\WINDOWS\System32\drivers\mwlPSDFilter.sys [22648] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2012/07/26 07:00:14 A . (.Egis Technology Inc. - MyWinLocker PSD Named Pipe Driver.) -- C:\WINDOWS\System32\drivers\mwlPSDNserv.sys [20520] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2012/07/26 07:00:14 A . (.Egis Technology Inc. - MyWinLocker PSD Virtual Disk Driver.) -- C:\WINDOWS\System32\drivers\mwlPSDVDisk.sys [62776] =>.EGIS TECHNOLOGY INC.® O58 - SDL:2011/02/11 23:23:34 A . (.CACE Technologies, Inc. - npf.sys (NT5/6 AMD64) Kernel Driver.) -- C:\WINDOWS\System32\drivers\npf.sys [35344] =>.CACE Technologies, Inc.® O58 - SDL:2011/09/20 12:02:55 A . (.NTI Corporation - NTI CD-ROM Filter Driver.) -- C:\WINDOWS\System32\drivers\NTIDrvr.sys [18432] =>.NewTech Infosystems, Inc® O58 - SDL:2013/08/22 14:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [168288] =>.Microsoft Windows® O58 - SDL:2011/08/16 12:46:02 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [3056360] =>.Realtek Semiconductor Corp® O58 - SDL:2010/12/01 10:12:06 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\WINDOWS\System32\drivers\RtsUStor.sys [250984] =>.Realtek Semiconductor Corp® O58 - SDL:2013/08/22 17:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\WINDOWS\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2013/08/22 14:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows® O58 - SDL:2016/07/22 05:51:36 A . (.Samsung Electronics Co., Ltd. - SAMSUNG USB Composite Device Driver.) -- C:\WINDOWS\System32\drivers\ssudbus.sys [130688] =>.Samsung Electronics CO., LTD.® O58 - SDL:2016/07/22 05:51:40 A . (.Samsung Electronics Co., Ltd. - SAMSUNG Android Modem Device Driver.) -- C:\WINDOWS\System32\drivers\ssudmdm.sys [164992] =>.Samsung Electronics CO., LTD.® O58 - SDL:2013/08/22 14:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows® O58 - SDL:2014/06/12 22:12:34 A . (.BitDefender S.R.L. - Trufos Kernel Module.) -- C:\WINDOWS\System32\drivers\trufos.sys [350160] =>.Bitdefender SRL® O58 - SDL:2011/09/20 12:02:55 A . (.NTI Corporation - NTI CD-ROM Filter Driver.) -- C:\WINDOWS\System32\drivers\UBHelper.sys [17408] =>.NewTech Infosystems, Inc® O58 - SDL:2015/06/17 18:04:24 A . (.Apple, Inc. - Apple Mobile Device USB Driver.) -- C:\WINDOWS\System32\drivers\usbaapl64.sys [54784] =>.Apple, Inc. O58 - SDL:2011/08/17 10:44:46 A . (.Advanced Micro Devices - AMD USB Filter Driver.) -- C:\WINDOWS\System32\drivers\usbfilter.sys [53376] =>.Advanced Micro Devices, Inc.® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\viaide.sys [19808] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [168800] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (2) - 52s O61 - LFC: 2016/08/04 19:22:22 A . (..) -- C:\Users\ptimot\AppData\Roaming\Wondershare\WSRoot\res\common\nido.exe [2036224] O61 - LFC: 2016/08/07 14:27:12 A . (..) -- C:\Users\ptimot\AppData\Local\ATI\ACE\Manifest.Bin [28678] ---\\ Associations Shell Spawning (9) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (12) - 1s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\Opera\Opera.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\Opera\Opera.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\Opera\Opera.exe (.not file.) O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\Opera\Opera.exe (.not file.) ---\\ Recherche d'infection sur les navigateurs (1) - 0s O69 - SBI: SearchScopes [HKLM] {75AD0FCE-0608-3E81-F3FE-2919DDE57E2E} - (Bing) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (36) - 2s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\WINDOWS\System32\aelupsvc.dll [214528] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [156160] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll [156160] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll [329216] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1360896] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\WINDOWS\System32\ikeext.dll [1084416] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll [926208] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll [31744] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\WINDOWS\System32\appinfo.dll [110080] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [110592] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\WINDOWS\system32\schedsvc.dll [1265152] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [230400] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\WINDOWS\system32\mmcss.dll [71168] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\WINDOWS\System32\browser.dll [135168] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\WINDOWS\system32\profsvc.dll [228864] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [339968] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\WINDOWS\System32\wercplsupport.dll [84992] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\WINDOWS\system32\kmsvc.dll [101376] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\WINDOWS\System32\bdesvc.dll [348672] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [522240] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\WINDOWS\system32\wlidsvc.dll [1639424] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll [59392] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll [206848] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [166400] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\WINDOWS\System32\rasauto.dll [102912] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\WINDOWS\System32\rasmans.dll [542208] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [226816] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\WINDOWS\System32\sens.dll [73728] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\WINDOWS\System32\ipnathlp.dll [452608] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [313344] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll [3705344] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\WINDOWS\System32\qmgr.dll [933376] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [640000] =>.Microsoft Corporation O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [187904] =>.Microsoft Corporation O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\WINDOWS\System32\KeyboardFilterSvc.dll [92992] =>.Microsoft Windows® ---\\ Liste des exceptions du parefeu Windows (8) - 6s O87 - FAEL: "TCP Query User{FD2AC5FC-1FFA-4DF5-B331-07E463659DB4}C:\awroot\bin\common\rasrv\awacsserver.exe" [In-None-P6-TRUE] .(.Copyright (C) 2009 - AWACS server.) -- C:\awroot\bin\common\rasrv\awacsserver.exe O87 - FAEL: "UDP Query User{FEC9610F-1836-44D3-A876-8A2B89C9581E}C:\awroot\bin\common\rasrv\awacsserver.exe" [In-None-P17-TRUE] .(.Copyright (C) 2009 - AWACS server.) -- C:\awroot\bin\common\rasrv\awacsserver.exe O87 - FAEL: "TCP Query User{3CE3232D-AFC7-415A-B5E5-7378D9AEE440}C:\awroot\bin\common\mcc\mccomm.exe" [In-None-P6-TRUE] .(.Copyright (C) 2010 - MCComm Application.) -- C:\awroot\bin\common\mcc\mccomm.exe O87 - FAEL: "UDP Query User{89D2DB22-79DD-40FE-8E4B-B8777BEC6815}C:\awroot\bin\common\mcc\mccomm.exe" [In-None-P17-TRUE] .(.Copyright (C) 2010 - MCComm Application.) -- C:\awroot\bin\common\mcc\mccomm.exe O87 - FAEL: "TCP Query User{32D874F2-C1C4-44DA-8625-10AFD28CBE6E}C:\app\ddc\bin\dccfsmrunner.exe" [In-None-P6-TRUE] .(...) -- C:\app\ddc\bin\dccfsmrunner.exe O87 - FAEL: "UDP Query User{3CF1DA2A-3806-4C52-8951-74981A74E5BC}C:\app\ddc\bin\dccfsmrunner.exe" [In-None-P17-TRUE] .(...) -- C:\app\ddc\bin\dccfsmrunner.exe O87 - FAEL: "TCP Query User{7D1194BC-6070-4001-9B0E-F249A1A59625}C:\app\ddc\bin\ddcecureader.exe" [In-None-P6-TRUE] .(...) -- C:\app\ddc\bin\ddcecureader.exe O87 - FAEL: "UDP Query User{34259E4D-2A3E-490C-8298-251AE82885E0}C:\app\ddc\bin\ddcecureader.exe" [In-None-P17-TRUE] .(...) -- C:\app\ddc\bin\ddcecureader.exe ---\\ Scan Additionnel (4) - 0s C:\WINDOWS\System32\Tasks\Updater27096.exe =>PUP.Optional.CrossRider C:\Program Files (x86)\QuickTime =>Riskware.QuickTime C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS C:\WINDOWS\Prefetch\HDVIDCODEC.TMP-ACAA2DCF.pf =>PUP.Optional.CrossRider ---\\ Récapitulatif des éléments trouvés sur votre station (3) - 0s https://www.anti-malware.top/2016/04/30/pup-optional-crossrider/ =>PUP.Optional.CrossRider https://www.anti-malware.top/2016/04/21/riskware-quicktime/ =>Riskware.QuickTime https://www.anti-malware.top/2016/05/04/hacktool-autokms/ =>HackTool.AutoKMS ~ End of the scan, 123797 items in 00h32mn40s (1182)