~ ZHPDiag v2016.1.31.23 Par Nicolas Coolman (2016/01/30) ~ Démarré par PC-DELL (Administrator) (2017/04/29 20:54:00) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Pas de fichier réseau ~ Mode: Scanner ~ Rapport: C:\Users\PC-DELL\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\PC-DELL\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Deactivate ~ Démarrage du système: Normal (Normal boot) Windows 8.1 Enterprise, 64-bit (Build 9600) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v58.0.3029.81 MSIE: Internet Explorer v11.0.9600.18639 ---\\ Informations sur les produits Windows (3) - 3s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK ---\\ Logiciels de protection (2) - 7s AVG Protection v2016.151.8013 Windows Defender (Deactivate) ---\\ Logiciels d'optimisation (1) - 8s CCleaner v4.08 ---\\ Surveillance de Logiciels (1) - 8s Adobe Acrobat Reader DC - Français ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 61 Stepping 4, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4107.596 MB (41% free) System Restore: Activé (Enable) System drive C: has 130 GB () free of 176 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: ACER-ASPIRE-E15 ~ User Name: PC-DELL ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 130 GB free of 176 GB (System) ~ Drive D: has 246 GB free of 300 GB ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 2s [MD5.ED6B4C95E2A6D67480B9DBB8A8E7D9B4] - 27/08/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2755504] =>.Microsoft Windows® [MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - 29/10/2014 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [54784] =>.Microsoft Corporation [MD5.D9516405E05F24EDCD90B1988FAF3948] - 14/01/2017 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [146944] =>.Microsoft Corporation [MD5.1C5E7DFE2DF454E1C04C8A6B0CCF8297] - 25/03/2017 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [3241472] =>.Microsoft Corporation [MD5.B1102BBDDD9C87B3D609D6C08F7A3DBD] - 05/01/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [570880] =>.Microsoft Corporation [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - 18/03/2014 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [447488] =>.Microsoft Corporation [MD5.CF5FA7E4FB587B0F09BB0C143EB49797] - 09/02/2017 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [658432] =>.Microsoft Corporation [MD5.F2E67F682DDCFE2C2C170F2AA3650ED6] - 09/02/2017 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [499200] =>.Microsoft Corporation [MD5.E37F897ED7B5AFF79B1398258DB96BD9] - 18/03/2014 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19456] =>.Microsoft Corporation [MD5.A460C3AF3755A2A79A3C8EFE72E147B5] - 13/10/2015 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\AFD.sys [559616] =>.Microsoft Corporation [MD5.74B14192CF79A72F7536B27CB8814FBD] - 22/08/2013 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [26464] =>.Microsoft Windows® [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - 22/08/2013 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [88576] =>.Microsoft Corporation [MD5.C6796EA22B513E3457514D92DCDB1A3D] - 22/08/2013 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [164352] =>.Microsoft Corporation [MD5.4FED6AD69C9EE1EE7FD3C88437138855] - 11/01/2017 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [138752] =>.Microsoft Corporation [MD5.D4B7ED39C7900384D9E5C1283F1E7926] - 24/07/2014 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [76800] =>.Microsoft Corporation [MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - 04/11/2014 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [108544] =>.Microsoft Corporation [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - 18/03/2014 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [142848] =>.Microsoft Corporation [MD5.E2FC654EC895E92A022794329BFC53EC] - 01/02/2017 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\MRxSmb.sys [401408] =>.Microsoft Corporation [MD5.9DC17B7D9D84C37C102D379FCC7D4942] - 14/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [281088] =>.Microsoft Corporation [MD5.9980B262DBE439AE6BDC91AA985F19EE] - 30/12/2015 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [2017624] =>.Microsoft Windows® [MD5.57DCE4FB0467986AE78E1C6FC5240D32] - 11/08/2016 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [96256] =>.Microsoft Corporation [MD5.235624C147E3CB4C288D5D3D8E8D64A2] - 02/02/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [112640] =>.Microsoft Corporation [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - 18/03/2014 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [195584] =>.Microsoft Corporation [MD5.E0BD2D83875464FEEEB242CBA8B7E073] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [108032] =>.Microsoft Corporation [MD5.17F7B0F2298D97F4B6C7A69511033D3D] - 14/03/2016 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [316760] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (13) - 3s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® O23 - Service: AVG Firewall (avgfws) . (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) - C:\Program Files (x86)\AVG\Av\avgfwsa.exe =>.AVG Technologies CZ, s.r.o.® O23 - Service: AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o. - AVG Identity Protection Service.) - C:\Program Files (x86)\AVG\Av\avgidsagenta.exe =>.AVG Technologies CZ, s.r.o.® O23 - Service: AVG Service (avgsvc) . (.AVG Technologies CZ, s.r.o. - AVG Service Process.) - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe =>.AVG Technologies CZ, s.r.o.® O23 - Service: AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o. - AVG Watchdog Service.) - C:\Program Files (x86)\AVG\Av\avgwdsvca.exe =>.AVG Technologies CZ, s.r.o.® O23 - Service: @oem13.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Man (BcmBtRSupport) . (.Broadcom Corporation. - Bluetooth Radio Management Support.) - C:\Windows\System32\BtwRSupportService.exe =>.Broadcom Corporation® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe {14F8FDD167F92402B1570B5DC495C815} =>.Google Inc. O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\igfxCUIService.exe {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation O23 - Service: Service Installer TrueKey (InstallerService) . (...) - C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe (.not file.) O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 352.9.) - C:\Windows\system32\nvvsvc.exe =>.NVIDIA Corporation O23 - Service: Intel Security True Key (TrueKey) . (.McAfee, Inc. - Intel Security True Key.) - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc. O23 - Service: Intel Security True Key Scheduler (TrueKeyScheduler) . (.McAfee, Inc. - Intel Security True Key.) - C:\Program Files\TrueKey\McTkSchedulerService.exe {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc. O23 - Service: Intel Security True Key Helper Service (TrueKeyServiceHelper) . (.McAfee, Inc. - McAfee TrueKey Service helper EXE.) - C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc. ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (16) - 43s SR - Auto [02/02/2017] [ 82640] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® SS - Demand [11/04/2017] [ 1002552] AvgAMPS (AvgAMPS) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\Av\avgamps.exe =>.AVG Technologies CZ, s.r.o.® SR - Auto [11/04/2017] [ 1824184] AVG Firewall (avgfws) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\Av\avgfwsa.exe =>.AVG Technologies CZ, s.r.o.® SR - Auto [11/04/2017] [ 5334432] AVGIDSAgent (AVGIDSAgent) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\Av\avgidsagenta.exe =>.AVG Technologies CZ, s.r.o.® SS - Auto [06/12/2016] [ 1146128] AVG Service (avgsvc) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe =>.AVG Technologies CZ, s.r.o.® SS - Auto [11/04/2017] [ 729048] AVG WatchDog (avgwd) . (.AVG Technologies CZ, s.r.o..) - C:\Program Files (x86)\AVG\Av\avgwdsvca.exe =>.AVG Technologies CZ, s.r.o.® SS - Auto [10/07/2015] [ 2269440] @oem13.inf,%BlueBcmBtRSupport.SVCNAME%;Bluetooth Driver Man (BcmBtRSupport) . (.Broadcom Corporation..) - C:\Windows\system32\BtwRSupportService.exe =>.Broadcom Corporation. SS - Demand [07/12/2016] [ 301552] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation SS - Auto [22/04/2017] [ 153168] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe {14F8FDD167F92402B1570B5DC495C815} =>.Google Inc. SS - Demand [22/04/2017] [ 153168] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe {14F8FDD167F92402B1570B5DC495C815} =>.Google Inc. SR - Auto [07/12/2016] [ 373744] Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\igfxCUIService.exe =>.Intel Corporation SR - Auto [18/05/2015] [ 937288] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe =>.NVIDIA Corporation SS - Auto [12/04/2017] [ 996736] Intel Security True Key (TrueKey) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc. SS - Auto [12/04/2017] [ 16160] Intel Security True Key Scheduler (TrueKeyScheduler) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McTkSchedulerService.exe {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc. SR - Auto [12/04/2017] [ 86776] Intel Security True Key Helper Service (TrueKeyServiceHelper) . (.McAfee, Inc..) - C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc. ---\\ Tâches planifiées en automatique (18) - 6s [MD5.ABC53D0C55FBF9C78AAD3583EFF4E3A9] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1160408] =>.Adobe Systems, Incorporated® [MD5.E3FEA8060978EAB6FA5D40E74DE6308B] [APT] [AutoPico Daily Restart] (...) -- C:\Program Files\KMSpico\AutoPico.exe [1051416] =>HackTool.KMSpico [MD5.00000000000000000000000000000000] [APT] [AVGPCTuneUp_Task_BkGndMaintenance] (...) -- C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe (.not file.) [0] [MD5.BD9F34DE12E1D8547BBE1E12A7F9F245] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [4324120] =>.Piriform Ltd® [MD5.00000000000000000000000000000000] [APT] [Google Update] (...) -- C:\Users\PC-DELL\AppData\Local\Google\Update\GoogleUpdate.exe (.not file.) [0] [MD5.0770AA83722D93B209B83B1BA80B101D] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] {14F8FDD167F92402B1570B5DC495C815} =>.Google Inc. [MD5.0770AA83722D93B209B83B1BA80B101D] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168] {14F8FDD167F92402B1570B5DC495C815} =>.Google Inc. [MD5.7F014D20314F4902FF7AB2BD459C4430] [APT] [Milimili] (...) -- C:\Program Files (x86)\MIO\MIO.exe [282168] =>.Superfluous.Tencent [MD5.00000000000000000000000000000000] [APT] [Prersogh Agent] (...) -- C:\Program Files (x86)\Libutkijek\vupesh.exe (.not file.) [0] O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [4476] =>.Adobe Systems Incorporated O39 - APT: AutoPico Daily Restart - (...) -- C:\Windows\System32\Tasks\AutoPico Daily Restart [3708] =>HackTool.KMSpico O39 - APT: AVGPCTuneUp_Task_BkGndMaintenance - (...) -- C:\Windows\System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance [2760] (.Orphean.) O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2776] =>.Piriform Ltd O39 - APT: Google Update - (...) -- C:\Windows\System32\Tasks\Google Update [3860] (.Orphean.) O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3372] =>.Google Inc. O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3500] =>.Google Inc. O39 - APT: Milimili - (...) -- C:\Windows\System32\Tasks\Milimili [3604] O39 - APT: Prersogh Agent - (...) -- C:\Windows\System32\Tasks\Prersogh Agent [6044] (.Orphean.) ---\\ Processus lancés (30) - 4s [MD5.2AA34C3EB72F146D8C01045200E655CD] - (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Service.) -- c:\Program Files (x86)\AVG\Av\avgrsa.exe [1292560] [PID.444] =>.AVG Technologies CZ, s.r.o.® [MD5.566D1239493A96B5699801CEE21D6284] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 352.9.) -- C:\Windows\System32\nvvsvc.exe [937288] [PID.1184] =>.NVIDIA Corporation® [MD5.D732F09C7B11AE0BB744171B48CEEE9C] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\System32\igfxCUIService.exe [373744] [PID.1452] {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation [MD5.671133C0AC2D8B40B7574F69059653E9] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82640] [PID.1992] =>.Adobe Systems, Incorporated® [MD5.9B78FE508A00ED957BB16CC13E078C14] - (.AVG Technologies CZ, s.r.o. - AVG Firewall Service.) -- C:\Program Files (x86)\AVG\Av\avgfwsa.exe [1824184] [PID.2020] =>.AVG Technologies CZ, s.r.o.® [MD5.1DDB3677E7316A8D3972735B933249A2] - (.AVG Technologies CZ, s.r.o. - AVG Online Shield Service.) -- C:\Program Files (x86)\AVG\Av\avgnsa.exe [1947920] [PID.2704] =>.AVG Technologies CZ, s.r.o.® [MD5.0AC383EC3B884ECDA37DA6C843AEE241] - (.AVG Technologies CZ, s.r.o. - AVG E-mail Scanner.) -- C:\Program Files (x86)\AVG\Av\avgemca.exe [974096] [PID.2712] =>.AVG Technologies CZ, s.r.o.® [MD5.6C5509D6E39941C0C7E8F45C2C52AAA6] - (.McAfee, Inc. - McAfee TrueKey Service helper EXE.) -- C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86776] [PID.3812] {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc. [MD5.E9B36442CABB024A39DF6CC1D30692BD] - (.AVG Technologies CZ, s.r.o. - AVG Scanning Core Module - Server Part.) -- C:\Program Files (x86)\AVG\Av\avgcsrva.exe [1193744] [PID.5268] =>.AVG Technologies CZ, s.r.o.® [MD5.33E6E5822E22A5E1DEA523C06155FD07] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe [288848] [PID.5220] {14F8FDD167F92402B1570B5DC495C815} =>.Google Inc. [MD5.27BEAF3F308ED2276F3863C2F2597556] - (.Google Inc. - Google Crash Handler.) -- C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe [366672] [PID.4552] {14F8FDD167F92402B1570B5DC495C815} =>.Google Inc. [MD5.89A8AC0343E9B7687EE7365E7A2565FE] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\System32\igfxEM.exe [354800] [PID.6276] {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation [MD5.EEC466FB0426F7E18976DE14E67807BF] - (.Intel Corporation - igfxHK Module.) -- C:\Windows\System32\igfxHK.exe [268784] [PID.3224] {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation [MD5.16A816119ACE851E3D2172AED212EF57] - (...) -- C:\Windows\System32\igfxTray.exe [401904] [PID.5044] {330000B898AA86B5A39E5A1BBD00020000B898} [MD5.889E56C58F5AC4242E395E3AD5F7780C] - (.IvoSoft - Classic Start Menu.) -- C:\Program Files\Classic Shell\ClassicStartMenu.exe [161728] [PID.6384] =>.Ivaylo Beltchev® [MD5.76EA7A1634C707E4A6A80BC516759620] - (.AVG Technologies CZ, s.r.o. - AVG User Interface.) -- C:\Program Files (x86)\AVG\Av\avgui.exe [6807824] [PID.6868] =>.AVG Technologies CZ, s.r.o.® [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.2868] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.3132] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.3440] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.5844] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.6404] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.3848] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.4480] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.6292] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.1876] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.4452] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.6200] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.FF9CE0FC9E3B4BC22001764A9EFE4741] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\PC-DELL\Downloads\ZHPDiag3.exe [2105344] [PID.1360] =>.Nicolas Coolman [MD5.FF9CE0FC9E3B4BC22001764A9EFE4741] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\PC-DELL\AppData\Roaming\ZHP\ZHPDiag3.exe [2105344] [PID.2604] =>.Nicolas Coolman [MD5.B8C827F6DF6BD5C12E2C182F9DCF60E1] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1144664] [PID.4660] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (7) - 2s P2 - EXT FILE: (...) -- C:\Users\PC-DELL\AppData\Roaming\Mozilla\Firefox\Profiles\k66vyr3f.default\extensions\455574@extcorp.com.xpi P2 - EXT FILE: (...) -- C:\Users\PC-DELL\AppData\Roaming\Mozilla\Firefox\Profiles\k66vyr3f.default\searchplugins\8l35h813.xml P2 - EXT FILE: (...) -- C:\Users\PC-DELL\AppData\Roaming\Mozilla\Firefox\Profiles\k66vyr3f.default\searchplugins\bingp.xml P2 - EXT FILE: (...) -- C:\Users\PC-DELL\AppData\Roaming\Mozilla\Firefox\Profiles\k66vyr3f.default\searchplugins\gamesgofree.xml P2 - EXT FILE: (...) -- C:\Users\PC-DELL\AppData\Roaming\Mozilla\Firefox\Profiles\k66vyr3f.default\searchplugins\McSiteAdvisor.xml P2 - EXT: (.LC - Fast search.) -- C:\Users\PC-DELL\AppData\Roaming\Mozilla\Firefox\Profiles\k66vyr3f.default\extensions\amcontextmenu@loucypher P2 - FPN: [HKLM] [@microsoft.com/Lync,version=15.0] - (.Microsoft.) -- C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll =>.Microsoft ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (19) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://us.search.yahoo.com/ R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://us.search.yahoo.com/ R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://us.search.yahoo.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (24) ---\\ Browser Helper Object de navigateur (BHO) (5) - 0s O2 - BHO: True Key Helper [64Bits] - {0F4B8786-5502-4803-8EBC-F652A1153BB6} . (.Intel Security - True Key Internet Explorer Extension.) -- C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll {0732A8F76CAB52571E0277593B1DB3A5} O2 - BHO: Skype for Business Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll {330000014096A9EE7056FECC07000100000140} =>.Microsoft Corporation O2 - BHO: ExplorerBHO Class [64Bits] - {449D0D6E-2412-4E61-B68F-1CB625CD9E52} . (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer32.dll =>.Ivaylo Beltchev® O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL {330000014096A9EE7056FECC07000100000140} =>.Microsoft Corporation O2 - BHO: ClassicIEBHO Class [64Bits] - {EA801577-E6AD-4BD5-8F71-4BE0154331A4} . (.IvoSoft - Customizations for the title bar and status.) -- C:\Program Files\Classic Shell\ClassicIEDLL_32.dll =>.Ivaylo Beltchev® ---\\ Internet Explorer, Barre d'outil (1) - 0s O3 - Toolbar: True Key - [HKLM]{4BAAC1B8-0800-42C9-8FA6-08B211F356B8} . (.Intel Security - True Key Internet Explorer Extension.) -- C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll {0732A8F76CAB52571E0277593B1DB3A5} ---\\ Applications lancées au démarrage du système (11) - 0s O4 - HKLM\..\Run: [Classic Start Menu] . (.IvoSoft - Classic Start Menu.) -- C:\Program Files\Classic Shell\ClassicStartMenu.exe =>.Ivaylo Beltchev® O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.) O4 - HKCU\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\PC-DELL\AppData\Local\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation® O4 - HKCU\..\Run: [Windows Defender] - O4 - HKLM\..\Wow6432Node\Run: [YouCam Service] . (.CyberLink Corp. - CyberLink YouCam Service.) -- C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe =>.CyberLink® O4 - HKLM\..\Wow6432Node\Run: [AvgUi] . (.AVG Technologies CZ, s.r.o. - AVG Ui (Re)Starter.) -- C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe =>.AVG Technologies CZ, s.r.o.® O4 - HKLM\..\Wow6432Node\Run: [AVG_UI] . (.AVG Technologies CZ, s.r.o. - AVG Ui (Re)Starter.) -- C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe =>.AVG Technologies CZ, s.r.o.® O4 - HKLM\..\Wow6432Node\Run: [WindowsDefender] - O4 - HKLM\..\Wow6432Node\Run: [chromebrowser] . (.Setup Engine Copyright © 2004-2015 Indigo Rose Corpor - Setup Application.) -- C:\Windows\chromebrowser.exe O4 - HKUS\S-1-5-21-2405176224-2998749337-3538285142-1001\..\Run: [BingSvc] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\PC-DELL\AppData\Local\Microsoft\BingSvc\BingSvc.exe =>.Microsoft Corporation® O4 - HKUS\S-1-5-21-2405176224-2998749337-3538285142-1001\..\Run: [Windows Defender] - ---\\ Raccourcis Global Startup (32) - 7s O4 - GS\Desktop [Administrateur]: Excel 2013.lnk . (...) C:\Windows\Installer\{91150000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [Administrateur]: Media Player Classic Home Cinema.lnk . (.MPC-HC Team - MPC-HC.) C:\Program Files (x86)\Combined Community Codec Pack\MPC\mpc-hc.exe =>.MPC-HC Team O4 - GS\Desktop [Administrateur]: Never Alone.lnk . (...) C:\Program Files (x86)\Never Alone\Never_Alone.exe {35A97E05231E9BA453FB9BB6F3589480} O4 - GS\Desktop [Administrateur]: Wondershare PDF Converter Pro.lnk . (.Wondershare - Wondershare PDF Converter Pro.) C:\Program Files (x86)\Wondershare\PDF Converter Pro\PDFConverterPro.exe =>.Wondershare O4 - GS\Desktop [Administrateur]: Word 2013.lnk . (...) C:\Windows\Installer\{91150000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [Administrateur]: Your Uninstaller.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe {2D52C7CF5E69A633AC3AED0E78F988DC} O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\PC-DELL\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [Administrateur]: دليل الطب البديل.lnk . (.www.elebda3.net - دليل الطب البديل.) C:\dalel v1\DaLeL V1.0.exe O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\Quicklaunch [Administrateur]: jetAudio.lnk . (.JetAudio, Inc. - jetAudio.) C:\Program Files\JetAudio\JetAudio.exe {2B13AAC1A1EE61} O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\Desktop [PC-DELL]: Excel 2013.lnk . (...) C:\Windows\Installer\{91150000-0011-0000-0000-0000000FF1CE}\xlicons.exe =>.Microsoft Corporation® O4 - GS\Desktop [PC-DELL]: Media Player Classic Home Cinema.lnk . (.MPC-HC Team - MPC-HC.) C:\Program Files (x86)\Combined Community Codec Pack\MPC\mpc-hc.exe =>.MPC-HC Team O4 - GS\Desktop [PC-DELL]: Never Alone.lnk . (...) C:\Program Files (x86)\Never Alone\Never_Alone.exe {35A97E05231E9BA453FB9BB6F3589480} O4 - GS\Desktop [PC-DELL]: Wondershare PDF Converter Pro.lnk . (.Wondershare - Wondershare PDF Converter Pro.) C:\Program Files (x86)\Wondershare\PDF Converter Pro\PDFConverterPro.exe =>.Wondershare O4 - GS\Desktop [PC-DELL]: Word 2013.lnk . (...) C:\Windows\Installer\{91150000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [PC-DELL]: Your Uninstaller.lnk . (.URSoft,Inc - Your Uninstaller! - New way to uninstall pr.) C:\Program Files\Your Uninstaller! 7\urmain.exe {2D52C7CF5E69A633AC3AED0E78F988DC} O4 - GS\Desktop [PC-DELL]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\PC-DELL\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [PC-DELL]: دليل الطب البديل.lnk . (.www.elebda3.net - دليل الطب البديل.) C:\dalel v1\DaLeL V1.0.exe O4 - GS\Quicklaunch [PC-DELL]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\Quicklaunch [PC-DELL]: jetAudio.lnk . (.JetAudio, Inc. - jetAudio.) C:\Program Files\JetAudio\JetAudio.exe {2B13AAC1A1EE61} O4 - GS\TaskBar [PC-DELL]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated® O4 - GS\CommonDesktop [Public]: AVG Protection.lnk . (.AVG Technologies CZ, s.r.o. - AVG User Interface.) C:\Program Files (x86)\AVG\Av\avgui.exe =>.AVG Technologies CZ, s.r.o.® O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - GS\CommonDesktop [Public]: CyberLink YouCam 5.lnk . (.CyberLink Corp. - YouCam.) C:\Program Files (x86)\CyberLink\YouCam\YouCam.exe =>.CyberLink® O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\CommonDesktop [Public]: jetAudio.lnk . (.JetAudio, Inc. - jetAudio.) C:\Program Files\JetAudio\JetAudio.exe {2B13AAC1A1EE61} O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) D:\VLC\vlc.exe =>.VideoLAN® O4 - GS\Programs [Public]: Documents.lnk . (...) C:\Users\PC-DELL\Documents O4 - GS\Programs [Public]: Pictures.lnk . (...) C:\Users\PC-DELL\Pictures O4 - GS\Programs [Public]: دليل الطب البديل.lnk . (.www.elebda3.net - دليل الطب البديل.) C:\dalel v1\DaLeL V1.0.exe ---\\ Modification Domaine/Adresses DNS (2) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 0.0.0.0 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8011E5F1-A7D5-4FE8-A089-9CDA17C50FD2}: DhcpNameServer = 192.168.1.1 0.0.0.0 ---\\ Protocole additionnel (23) - 1s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: osf [64Bits] - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microsoft Corporation - Microsoft Office 2013 component.) -- C:\Program Files (x86)\Microsoft Office\Office15\MSOSB.DLL =>.Microsoft Corporation® O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Liste des clés Explorer StartupApproved (20) - 1s [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:MPCBrowser Update [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:BrowserUid [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Flvto YouTube Downloader [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:BingSvc [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Google Update [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Skype [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Viber [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:uTorrent [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:BlueStacks Agent [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Windows Defender [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:MPCBrowser Update [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:BrowserUid [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Flvto YouTube Downloader [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:BingSvc [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Google Update [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Skype [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Viber [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:uTorrent [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:BlueStacks Agent [HKEY_USERS\S-1-5-21-2405176224-2998749337-3538285142-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Windows Defender ---\\ Logiciels installés (45) - 30s O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824214663} =>.Adobe Systems Incorporated O42 - Logiciel: AVG - (.AVG Technologies.) [HKLM][64Bits] -- {51E31F6F-B8C7-46D9-AFC8-C36F9DE38031} =>.AVG Technologies O42 - Logiciel: AVG 2016 - (.AVG Technologies.) [HKLM][64Bits] -- {EE270421-C142-4677-935E-46E9B32F25FA} =>.AVG Technologies O42 - Logiciel: AVG Protection - (.AVG Technologies.) [HKLM][64Bits] -- AVG =>.AVG Technologies CZ, s.r.o.® O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: Classic Shell - (.IvoSoft.) [HKLM][64Bits] -- {D4B3454F-7529-4F5F-851D-2C36933F7D64} =>.IvoSoft O42 - Logiciel: Combined Community Codec Pack 2013-11-27 - (.CCCP Project.) [HKLM][64Bits] -- Combined Community Codec Pack_is1 =>.Jernej Simoncic® O42 - Logiciel: CyberLink YouCam 5 - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} =>.CyberLink® O42 - Logiciel: CyberLink YouCam 5 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} =>.CyberLink® O42 - Logiciel: Dell Touchpad - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated O42 - Logiciel: FMW 1 - (.AVG Technologies.) [HKLM][64Bits] -- {DC2A8E3D-D5E1-4837-A2E0-C308100AC412} =>.AVG Technologies O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: Intel Security True Key - (.Intel Security.) [HKLM][64Bits] -- TrueKey {587CD21A05D34D3DDFAA9128521CF4FC} O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation O42 - Logiciel: Intel® RealSense™ SDK 2014 Runtime (x64): Core - (.Intel Corporation.) [HKLM][64Bits] -- {37D41A97-6B02-4C30-8753-85107BE1D674} =>.Intel Corporation O42 - Logiciel: jetAudio Basic VX - (.COWON.) [HKLM][64Bits] -- {DF8195AF-8E6F-4487-A0EE-196F7E3F4B8A} {2B13AAC1A1EE61} =>.COWON O42 - Logiciel: LAV Filters 0.62.0 - (.Hendrik Leppkes.) [HKLM][64Bits] -- lavfilters_is1 =>.Hendrik Leppkes O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0015-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0090-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0016-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00BA-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0044-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-012B-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-00A1-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001A-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0018-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-0019-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HKLM][64Bits] -- {90150000-001B-040C-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Mises à jour NVIDIA 2.5.12.11 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation O42 - Logiciel: Never Alone - (...) [HKLM][64Bits] -- Never Alone_is1 O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Optimus Update 2.5.12.11 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Pilote graphique 352.94 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver =>.NVIDIA Corporation O42 - Logiciel: Panneau de configuration NVIDIA 352.94 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation O42 - Logiciel: Update for Skype for Business 2015 (KB3172492) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{2D935BB6-77E1-4838-AB3C-A4727AE4D4C9} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3178731) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{7289E22A-6A0E-4C85-BF90-94ADAECDC251} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3178731) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUSR_{7289E22A-6A0E-4C85-BF90-94ADAECDC251} =>.Microsoft Corporation® O42 - Logiciel: Update for Skype for Business 2015 (KB3178731) 32-Bit Edition - (.Microsoft.) [HKLM][64Bits] -- {91150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUSR_{7289E22A-6A0E-4C85-BF90-94ADAECDC251} =>.Microsoft Corporation® O42 - Logiciel: Visual Studio 2012 x64 Redistributables - (.AVG Technologies.) [HKLM][64Bits] -- {8C775E70-A791-4DA8-BCC3-6AB7136F4484} =>.AVG Technologies O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM][64Bits] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8} =>.AVG Technologies CZ, s.r.o. O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: WinRAR 5.40 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver =>.win.rar GmbH® O42 - Logiciel: Your Uninstaller! 7 - (.URSoft, Inc..) [HKLM][64Bits] -- YU2010_is1 {2D52C7CF5E69A633AC3AED0E78F988DC} ---\\ HKCU & HKLM Software Keys (103) - 30s HKLM\SOFTWARE\Wow6432Node\Adguard HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\Avg HKLM\SOFTWARE\Wow6432Node\AVG Netherlands B.V HKLM\SOFTWARE\Wow6432Node\AVG Netherlands BV HKLM\SOFTWARE\Wow6432Node\Blizzard Entertainment HKLM\SOFTWARE\Wow6432Node\Boxbob HKLM\SOFTWARE\Wow6432Node\Chromium HKLM\SOFTWARE\Wow6432Node\Combined-Community-Codec-Pack HKLM\SOFTWARE\Wow6432Node\COWON HKLM\SOFTWARE\Wow6432Node\CyberLink HKLM\SOFTWARE\Wow6432Node\Ercshzudiward HKLM\SOFTWARE\Wow6432Node\F024E750EFB6114DAD757F59D53B99C2 =>PUP.Optional.CrossRider HKLM\SOFTWARE\Wow6432Node\Firefox HKLM\SOFTWARE\Wow6432Node\Ghivosp HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\HaaliMkx HKLM\SOFTWARE\Wow6432Node\Hagel HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\initialsite123Software HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\Intel Security HKLM\SOFTWARE\Wow6432Node\jhdbca HKLM\SOFTWARE\Wow6432Node\KasperskyLab HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Licenses HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\McAfee HKLM\SOFTWARE\Wow6432Node\MicroRay HKLM\SOFTWARE\Wow6432Node\Mmoingtozoy HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\ScreenShot HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\SlimWare Utilities Inc HKLM\SOFTWARE\Wow6432Node\ToughKing HKLM\SOFTWARE\Wow6432Node\ToughQueen HKLM\SOFTWARE\Wow6432Node\TrueKey HKLM\SOFTWARE\Wow6432Node\VideoLAN HKLM\SOFTWARE\Wow6432Node\vupesh.exe HKLM\SOFTWARE\Wow6432Node\WinRAR HKLM\SOFTWARE\Wow6432Node\Wow6432Node HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Avg HKCU\SOFTWARE\AVG Netherlands BV HKCU\SOFTWARE\Beautifun Games HKCU\SOFTWARE\Blizzard Entertainment HKCU\SOFTWARE\Boxbob HKCU\SOFTWARE\Chromium HKCU\SOFTWARE\COWON HKCU\SOFTWARE\csastats HKCU\SOFTWARE\CyberLink HKCU\SOFTWARE\drpsu HKCU\SOFTWARE\F024E750EFB6114DAD757F59D53B99C2 =>PUP.Optional.CrossRider HKCU\SOFTWARE\FATITI HKCU\SOFTWARE\Firefox HKCU\SOFTWARE\FlvtoConverter HKCU\SOFTWARE\Gabest HKCU\SOFTWARE\Google HKCU\SOFTWARE\Haali HKCU\SOFTWARE\hotger HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\IMDownloader HKCU\SOFTWARE\Intel HKCU\SOFTWARE\Intel Security HKCU\SOFTWARE\IvoSoft HKCU\SOFTWARE\LAV HKCU\SOFTWARE\Local AppWizard-Generated Applications HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\Mine HKCU\SOFTWARE\Mozilla HKCU\SOFTWARE\MPC-HC HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\NVIDIA Corporation HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\PlayFreeBrowser HKCU\SOFTWARE\PlutoTV HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\ReflexiveArcade HKCU\SOFTWARE\RegisteredApplications HKCU\SOFTWARE\Reimage =>PUP.Optional.ReImageRepair HKCU\SOFTWARE\Settings HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SlimWare Utilities Inc HKCU\SOFTWARE\Synaptics HKCU\SOFTWARE\TrueKey HKCU\SOFTWARE\Unity HKCU\SOFTWARE\Unknown File Handler HKCU\SOFTWARE\URSoft HKCU\SOFTWARE\Valve HKCU\SOFTWARE\VitaS3 HKCU\SOFTWARE\WinRAR HKCU\SOFTWARE\WinRAR SFX HKCU\SOFTWARE\WiperSoft HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software ---\\ Contenu des dossiers Programmes (194) - 30s O43 - CFD: 21/04/2017 - [] D -- C:\Program Files (x86)\58FA4BE8_jumpeasy O43 - CFD: 21/04/2017 - [0] D -- C:\Program Files (x86)\58FA77DF_jumpeasy O43 - CFD: 17/08/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems, Incorporated® O43 - CFD: 28/10/2016 - [] D -- C:\Program Files (x86)\AVG =>.AVG Technologies CZ, s.r.o.® O43 - CFD: 23/03/2017 - [0] D -- C:\Program Files (x86)\AVG Driver Updater O43 - CFD: 07/03/2017 - [] D -- C:\Program Files (x86)\Battle.net =>.Blizzard Entertainment, Inc.® O43 - CFD: 23/02/2017 - [0] AD -- C:\Program Files (x86)\BlueStacks O43 - CFD: 21/04/2017 - [] D -- C:\Program Files (x86)\Boxbob O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\CCleaner O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\Combined Community Codec Pack =>.Jernej Simoncic® O43 - CFD: 21/04/2017 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\CyberLink =>.CyberLink® O43 - CFD: 22/04/2017 - [] AD -- C:\Program Files (x86)\Firefox O43 - CFD: 02/03/2017 - [0] D -- C:\Program Files (x86)\FreeFileViewer O43 - CFD: 13/08/2016 - [] D -- C:\Program Files (x86)\GamesGoFree.com O43 - CFD: 22/04/2017 - [] D -- C:\Program Files (x86)\Google {14F8FDD167F92402B1570B5DC495C815} O43 - CFD: 07/03/2017 - [] D -- C:\Program Files (x86)\Hearthstone =>.Blizzard Entertainment, Inc.® O43 - CFD: 17/11/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information {2B13AAC1A1EE61} O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\Intel {330000B898AA86B5A39E5A1BBD00020000B898} O43 - CFD: 13/04/2017 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 13/11/2016 - [] D -- C:\Program Files (x86)\LAV Filters O43 - CFD: 26/04/2017 - [] D -- C:\Program Files (x86)\Libutkijek =>.Superfluous.Tencent O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation® O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\Microsoft SQL Server O43 - CFD: 05/02/2017 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 19/04/2017 - [] D -- C:\Program Files (x86)\MIO =>.Superfluous.Tencent O43 - CFD: 18/04/2017 - [] D -- C:\Program Files (x86)\MK O43 - CFD: 21/04/2017 - [0] D -- C:\Program Files (x86)\Mozilla Firefox O43 - CFD: 24/09/2016 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 13/11/2016 - [] D -- C:\Program Files (x86)\Never Alone {35A97E05231E9BA453FB9BB6F3589480} O43 - CFD: 13/04/2016 - [] D -- C:\Program Files (x86)\NVIDIA Corporation O43 - CFD: 18/04/2017 - [] D -- C:\Program Files (x86)\Prersogh Agent O43 - CFD: 24/09/2016 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 25/12/2016 - [0] RD -- C:\Program Files (x86)\Skype O43 - CFD: 02/03/2017 - [0] D -- C:\Program Files (x86)\Unknown File Handler O43 - CFD: 13/04/2017 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 15/09/2016 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 15/09/2016 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 15/09/2016 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 15/09/2016 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 15/09/2016 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\WindowsPowerShell O43 - CFD: 08/03/2017 - [] D -- C:\Program Files (x86)\WinRAR =>.win.rar GmbH® O43 - CFD: 21/01/2014 - [] D -- C:\Program Files (x86)\Wondershare =>.Wondershare Software Co., Ltd. ® O43 - CFD: 15/09/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 07/01/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 13/04/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 19/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG O43 - CFD: 17/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 06/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Shell O43 - CFD: 17/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack O43 - CFD: 17/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink YouCam 5 O43 - CFD: 17/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\jetAudio O43 - CFD: 04/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico O43 - CFD: 13/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters O43 - CFD: 22/08/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 25/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Meet-and-Fuck Detective RPG O43 - CFD: 13/04/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013 O43 - CFD: 13/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Never Alone O43 - CFD: 21/04/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp O43 - CFD: 15/09/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 22/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN O43 - CFD: 04/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR O43 - CFD: 21/01/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare O43 - CFD: 17/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Your Uninstaller! 7 O43 - CFD: 01/02/2017 - [] D -- C:\ProgramData\.mono O43 - CFD: 23/04/2017 - [] D -- C:\ProgramData\Adguard O43 - CFD: 13/08/2016 - [] D -- C:\ProgramData\Adobe O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 31/08/2016 - [] D -- C:\ProgramData\ASCValidator O43 - CFD: 28/10/2016 - [] D -- C:\ProgramData\Avg O43 - CFD: 05/08/2016 - [] D -- C:\ProgramData\Battle.net O43 - CFD: 07/08/2016 - [] D -- C:\ProgramData\Blizzard Entertainment O43 - CFD: 23/02/2017 - [] D -- C:\ProgramData\BlueStacksSetup O43 - CFD: 04/11/2015 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 27/07/2016 - [] D -- C:\ProgramData\ClassicShell O43 - CFD: 20/07/2016 - [] HD -- C:\ProgramData\Common Files O43 - CFD: 17/11/2015 - [] D -- C:\ProgramData\CyberLink O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 06/12/2016 - [0] D -- C:\ProgramData\Lenovo O43 - CFD: 21/04/2017 - [] D -- C:\ProgramData\McAfee O43 - CFD: 04/11/2015 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 25/04/2017 - [] D -- C:\ProgramData\MFAData O43 - CFD: 29/04/2017 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 13/04/2017 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 04/11/2015 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 13/04/2016 - [] D -- C:\ProgramData\NVIDIA O43 - CFD: 02/01/2016 - [] D -- C:\ProgramData\NVIDIA Corporation O43 - CFD: 23/04/2017 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 18/02/2017 - [0] D -- C:\ProgramData\PopCap Games O43 - CFD: 15/09/2016 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft O43 - CFD: 22/04/2017 - [] D -- C:\ProgramData\Skype O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 23/04/2017 - [0] AD -- C:\ProgramData\TEMP O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 21/04/2017 - [] D -- C:\ProgramData\TrueKey O43 - CFD: 17/08/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\Common Files\COWON O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 17/11/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel O43 - CFD: 05/02/2017 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 05/02/2017 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 01/02/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\.mono O43 - CFD: 17/11/2015 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Adobe O43 - CFD: 20/07/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\AVG O43 - CFD: 07/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Battle.net O43 - CFD: 18/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\BrowserModule O43 - CFD: 06/01/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\ClassicShell O43 - CFD: 20/07/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\COWON O43 - CFD: 17/11/2015 - [] D -- C:\Users\PC-DELL\AppData\Roaming\CyberLink O43 - CFD: 08/02/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Eipix O43 - CFD: 31/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\FileOpenerWindows =>Adware.InstallCore O43 - CFD: 21/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Firefox O43 - CFD: 22/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Google O43 - CFD: 15/09/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Identities O43 - CFD: 20/07/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Macromedia O43 - CFD: 05/12/2016 - [] SD -- C:\Users\PC-DELL\AppData\Roaming\Microsoft O43 - CFD: 13/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Mozilla O43 - CFD: 25/03/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\MPC-HC O43 - CFD: 22/02/2017 - [0] D -- C:\Users\PC-DELL\AppData\Roaming\Pluto TV O43 - CFD: 18/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Profiles O43 - CFD: 18/04/2017 - [0] D -- C:\Users\PC-DELL\AppData\Roaming\Serqotstigush O43 - CFD: 04/03/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Skype O43 - CFD: 13/11/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Steam O43 - CFD: 23/09/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\TeraCopy O43 - CFD: 20/07/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\TuneUp Software O43 - CFD: 20/07/2016 - [] D -- C:\Users\PC-DELL\AppData\Roaming\URSoft O43 - CFD: 27/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\vlc O43 - CFD: 17/11/2015 - [] D -- C:\Users\PC-DELL\AppData\Roaming\WinRAR O43 - CFD: 26/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\WinSAPSvc O43 - CFD: 29/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\ZHP O43 - CFD: 19/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\3DM O43 - CFD: 21/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Adobe O43 - CFD: 04/11/2015 - [0] SHD -- C:\Users\PC-DELL\AppData\Local\Application Data O43 - CFD: 22/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Apps O43 - CFD: 28/10/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\Avg O43 - CFD: 22/03/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\AVG Netherlands BV O43 - CFD: 20/07/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\Avg2015 O43 - CFD: 29/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\AvgSetupLog O43 - CFD: 07/03/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Battle.net O43 - CFD: 01/02/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Blizzard O43 - CFD: 07/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\Blizzard Entertainment O43 - CFD: 23/02/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Bluestacks O43 - CFD: 21/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Boxbob O43 - CFD: 17/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\CEF O43 - CFD: 29/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\ClassicShell O43 - CFD: 19/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\CrashRpt =>.Superfluous.CrashReports O43 - CFD: 17/11/2015 - [] D -- C:\Users\PC-DELL\AppData\Local\CyberLink O43 - CFD: 22/04/2017 - [0] D -- C:\Users\PC-DELL\AppData\Local\Deployment O43 - CFD: 23/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\desecat O43 - CFD: 18/04/2017 - [0] D -- C:\Users\PC-DELL\AppData\Local\Diagnostics O43 - CFD: 27/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\ElevatedDiagnostics O43 - CFD: 17/09/2016 - [0] SHD -- C:\Users\PC-DELL\AppData\Local\EmieSiteList O43 - CFD: 17/09/2016 - [0] SHD -- C:\Users\PC-DELL\AppData\Local\EmieUserList O43 - CFD: 21/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Firefox O43 - CFD: 26/08/2016 - [0] D -- C:\Users\PC-DELL\AppData\Local\Flvto YouTube Downloader O43 - CFD: 15/01/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Google O43 - CFD: 04/11/2015 - [0] SHD -- C:\Users\PC-DELL\AppData\Local\Historique O43 - CFD: 25/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Kitty O43 - CFD: 06/12/2016 - [0] D -- C:\Users\PC-DELL\AppData\Local\Lenovo O43 - CFD: 23/02/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Macromedia O43 - CFD: 20/07/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\MFAData O43 - CFD: 08/02/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Microsoft O43 - CFD: 17/11/2015 - [0] D -- C:\Users\PC-DELL\AppData\Local\Microsoft Help O43 - CFD: 13/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\Mozilla O43 - CFD: 17/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\MPCBrowser O43 - CFD: 28/02/2017 - [0] D -- C:\Users\PC-DELL\AppData\Local\Package Cache O43 - CFD: 09/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Packages O43 - CFD: 17/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\PlayFree Browser O43 - CFD: 22/02/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\PlutoTV O43 - CFD: 17/11/2015 - [] D -- C:\Users\PC-DELL\AppData\Local\Programs O43 - CFD: 23/03/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\SlimWare Utilities Inc O43 - CFD: 26/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\SNARE O43 - CFD: 29/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Temp O43 - CFD: 04/11/2015 - [0] SHD -- C:\Users\PC-DELL\AppData\Local\Temporary Internet Files O43 - CFD: 21/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\tkdata O43 - CFD: 18/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Vekshthimugh O43 - CFD: 23/02/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\Viber O43 - CFD: 14/08/2016 - [] D -- C:\Users\PC-DELL\AppData\Local\VirtualStore O43 - CFD: 23/04/2017 - [] D -- C:\Users\PC-DELL\AppData\Local\{9F90A9CC-BB38-C574-D6A0-E09CF2C81C04} O43 - CFD: 18/03/2014 - [] RD -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility O43 - CFD: 22/08/2013 - [] RD -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 19/01/2017 - [] RD -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 25/03/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 17/11/2015 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games for Windows O43 - CFD: 22/08/2013 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 22/02/2017 - [] RD -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 18/03/2014 - [] RD -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools O43 - CFD: 04/03/2017 - [] D -- C:\Users\PC-DELL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR ---\\ Derniers fichiers créés dans Windows Prefetcher (3) - 21s O45 - LFCP:[MD5.E93F2F966FAD2913B66D966008CDC65D] 04/03/2017 A -- C:\Windows\Prefetch\PERFORMANCEOPTIMIZER.EXE-D034DBC3.pf =>PUP.Optional.BProtector O45 - LFCP:[MD5.840B2A96A123D8A1EF012487CDBF988B] 19/04/2017 A -- C:\Windows\Prefetch\SH_INSTALLER.EXE-423EDE24.pf =>.Superfluous.SpyHunter O45 - LFCP:[MD5.446A8CA4C1E58EEBDC9F141C332928B4] 18/04/2017 A -- C:\Windows\Prefetch\SPYHUNTER-INSTALLER.EXE-5A5219FF.pf =>.Superfluous.SpyHunter ---\\ ShellIconOverlayIdentifiers (SIOI) (4) - 1s O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL {330000014096A9EE7056FECC07000100000140} =>.Microsoft Corporation O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePro2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL {330000014096A9EE7056FECC07000100000140} =>.Microsoft Corporation O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSync)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microsoft OneDrive for Business Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL {330000014096A9EE7056FECC07000100000140} =>.Microsoft Corporation O106 - SIOI: ShareOverlay Class [ShareOverlay] - {594D4122-1F87-41E2-96C7-825FB4796516}. (.IvoSoft - Adds classic Windows Explorer features.) -- C:\Program Files\Classic Shell\ClassicExplorer32.dll =>.Ivaylo Beltchev® ---\\ Liste des pilotes du système (64) - 18s O58 - SDL:2013/08/22 14:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [108896] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [782176] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79200] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [25952] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [114016] =>.Microsoft Windows® O58 - SDL:2013/06/18 16:45:02 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\Windows\System32\drivers\athw8x.sys [3680256] =>.Qualcomm Atheros Communications, Inc. O58 - SDL:2014/08/11 15:39:24 A . (.Qualcomm Atheros Communications, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\Windows\System32\drivers\athwbx.sys [3905536] =>.Qualcomm Atheros Communications, Inc. O58 - SDL:2016/01/07 16:03:54 A . (.AVG Technologies CZ, s.r.o. - AVG Early Launch Anti-Malware Driver.) -- C:\Windows\System32\drivers\avgboota.sys [21632] =>.Microsoft Windows Early Launch Anti-malware Publisher® O58 - SDL:2016/05/13 07:52:10 A . (.AVG Technologies CZ, s.r.o. - AVG File Vault Driver.) -- C:\Windows\System32\drivers\avgdiska.sys [163072] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2016/10/23 06:21:50 A . (.AVG Technologies CZ, s.r.o. - AVG Filter Driver.) -- C:\Windows\System32\drivers\avgfwd6a.sys [73992] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2017/02/20 14:14:46 A . (.AVG Technologies CZ, s.r.o. - AVG IDS Application Activity Monitor Driver.) -- C:\Windows\System32\drivers\avgidsdrivera.sys [313088] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2016/10/05 16:01:16 A . (.AVG Technologies CZ, s.r.o. - AVG Application Activity Monitor Helper Dri.) -- C:\Windows\System32\drivers\avgidsha.sys [267008] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2016/11/30 09:04:10 A . (.AVG Technologies CZ, s.r.o. - AVG AVI Loader Driver.) -- C:\Windows\System32\drivers\avgldx64.sys [298240] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2016/02/16 16:05:56 A . (.AVG Technologies CZ, s.r.o. - AVG Logging Driver.) -- C:\Windows\System32\drivers\avgloga.sys [360736] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2017/04/11 12:42:58 A . (.AVG Technologies CZ, s.r.o. - AVG Resident Shield Minifilter Driver.) -- C:\Windows\System32\drivers\avgmfx64.sys [253184] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2016/06/01 13:16:40 A . (.AVG Technologies CZ, s.r.o. - AVG Anti-Rootkit Driver.) -- C:\Windows\System32\drivers\avgrkx64.sys [52992] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2016/06/20 15:22:20 A . (.AVG Technologies CZ, s.r.o. - AVG Universal Driver.) -- C:\Windows\System32\drivers\avguniva.sys [77056] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2016/08/04 06:52:42 A . (.AVG Technologies CZ, s.r.o. - AVG Firewall driver.) -- C:\Windows\System32\drivers\avgwfpa.sys [313096] =>.AVG Technologies CZ, s.r.o.® O58 - SDL:2015/07/10 12:44:38 A . (.Broadcom Corporation. - Broadcom Bluetooth Firmware Download Filter.) -- C:\Windows\System32\drivers\bcbtums.sys [199472] =>.Broadcom Corporation® O58 - SDL:2013/08/13 01:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [17624] =>.Broadcom Corporation® O58 - SDL:2013/07/01 18:50:06 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\Windows\System32\drivers\BCMWL63a.SYS [8536752] =>.Broadcom Corporation® O58 - SDL:2015/07/10 12:44:40 A . (.Broadcom Corporation. - Broadcom Bluetooth USB AMP Filter.) -- C:\Windows\System32\drivers\btwampfl.sys [205608] =>.Broadcom Corporation® O58 - SDL:2013/08/22 14:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows® O58 - SDL:2013/01/24 16:12:08 A . (.OSR Open Systems Resources, Inc. - Airplane Mode Switch Driver.) -- C:\Windows\System32\drivers\DellRbtn.sys [10752] =>.OSR Open Systems Resources, Inc. O58 - SDL:2013/08/22 14:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3357024] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows® O58 - SDL:2013/07/30 20:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2013/07/25 21:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2014/07/01 15:49:40 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver.) -- C:\Windows\System32\drivers\iaLPSS_GPIO.sys [35832] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2014/07/01 15:49:40 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver.) -- C:\Windows\System32\drivers\iaLPSS_I2C.sys [120312] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2014/07/01 15:49:40 A . (.Intel Corporation - Intel(R) Serial IO UART Driver.) -- C:\Windows\System32\drivers\iaLPSS_UART2.sys [143864] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2013/08/10 02:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [651248] =>.Intel Corporation - Intel® Rapid Storage Technology® O58 - SDL:2013/08/22 14:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows® O58 - SDL:2016/12/07 00:22:12 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [7966192] {330000B898AA86B5A39E5A1BBD00020000B898} =>.Intel Corporation O58 - SDL:2016/05/12 05:32:26 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [481768] {330000B85395C584DD5249B00800020000B853} =>.Intel(R) Corporation O58 - SDL:2015/12/07 19:53:18 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\intelaud.sys [51704] {330000B7E741A34024FC3AB6E700020000B7E7} =>.Intel Corporation O58 - SDL:2015/12/07 19:53:18 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\iwdbus.sys [39920] {330000B7E741A34024FC3AB6E700020000B7E7} =>.Intel Corporation O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109408] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [93536] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [81760] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [56672] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows® O58 - SDL:2015/07/16 11:55:18 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\Netwbw02.sys [4043544] =>.Intel Corporation-Wireless Connectivity Solutions® O58 - SDL:2015/05/18 15:35:43 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [10971792] =>.NVIDIA Corporation® O58 - SDL:2013/08/22 14:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [168288] =>.Microsoft Windows® O58 - SDL:2015/05/29 12:44:06 A . (.Qualcomm Atheros, Inc. - Qualcomm Atheros Extensible Wireless LAN de.) -- C:\Windows\System32\drivers\Qcamainx64.sys [2325528] =>.Microsoft Windows Hardware Compatibility Publisher® O58 - SDL:2013/06/18 16:46:17 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\Windows\System32\drivers\Rt630x64.sys [591360] =>.Realtek O58 - SDL:2015/05/27 13:13:22 A . (.Realsil Semiconductor Corporation - RTS USB READER Driver.) -- C:\Windows\System32\drivers\RtsUer.sys [402136] =>.Realtek Semiconductor Corp® O58 - SDL:2013/08/22 17:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2013/08/22 14:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows® O58 - SDL:2015/05/29 15:45:42 A . (.Synaptics Incorporated - Synaptics SMBus Driver.) -- C:\Windows\System32\drivers\Smb_driver_Intel.sys [33960] =>.Synaptics Incorporated® O58 - SDL:2013/08/22 14:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows® O58 - SDL:2017/03/22 13:51:45 A . (.SlimWare Utilities, Inc. - Driver Update Installer Monitor.) -- C:\Windows\System32\drivers\SWDUMon.sys [25608] {63C924EF6594B5566CDC0B18350FA6D1} =>.SlimWare Utilities, Inc. O58 - SDL:2015/06/17 19:40:38 A . (.Synaptics Incorporated - Synaptics I2C Driver.) -- C:\Windows\System32\drivers\SynRMIHID.sys [43176] =>.Synaptics Incorporated® O58 - SDL:2015/06/17 19:40:38 A . (.Synaptics Incorporated - Synaptics Touchpad Win64 Driver.) -- C:\Windows\System32\drivers\SynTP.sys [587432] =>.Synaptics Incorporated® O58 - SDL:2015/07/07 19:45:12 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverW8x64.sys [184608] =>.Intel Corporation - Embedded Subsystems and IP Blocks Group® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [19808] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [168800] =>.Microsoft Windows® O58 - SDL:2013/08/22 14:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (7) - 28s O61 - LFC: 2017/04/29 13:00:06 A . (.Slimware Utilities Holdings, Inc..) -- C:\Users\PC-DELL\Downloads\AVG_Driver_Updater_Setup_11_4.exe [1205376] {4E24709247A9E82CEA18415248BEAB61} O61 - LFC: 2017/04/26 19:28:12 A . (.win.) -- C:\Users\PC-DELL\AppData\Roaming\WinSAPSvc\WinSAP.dll [507392] O61 - LFC: 2017/04/26 09:52:10 A . (.InterSect Alliance Pty Ltd.) -- C:\Users\PC-DELL\AppData\Local\SNARE\Snare.dll [833024] O61 - LFC: 2017/04/23 17:35:32 A . (.Performix LLC.) -- C:\Users\PC-DELL\AppData\Local\Microsoft\Windows\INetCache\IE\BDB3O0C3\setup[1].exe [35366216] {0274DD7B6346BD44F8432CBF991D0383} O61 - LFC: 2017/04/23 17:03:31 A . (.Performix LLC.) -- C:\Users\PC-DELL\AppData\Local\Microsoft\Windows\INetCache\IE\3MIRURKH\setup[1].exe [6674432] O61 - LFC: 2017/04/26 19:28:15 A . (.kitty.) -- C:\Users\PC-DELL\AppData\Local\Kitty\Kitty.dll [505344] O61 - LFC: 2017/04/22 01:07:36 N . (..) -- C:\Users\PC-DELL\AppData\Local\Apps\2.0\3J9JOGA7.YHN\V5RGLT94.N3M\prog...app_baa8013a79450f71_0001.0003_a714e86c750880e5\clickonce_bootstrap.exe [15440] {14F8FDD167F92402B1570B5DC495C815} ---\\ Associations Shell Spawning (10) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (8) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation ---\\ Recherche d'infection sur les navigateurs (6) - 12s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Yahoo! Powered Search) - http://us.search.yahoo.com/ =>.Yahoo Search O69 - SBI: SearchScopes [HKCU] {0CE02FFA-A6B0-46F6-BA2F-BD32C3630126} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {3CED8FA4-A84C-4F9E-B2A1-B58B4AD545CB} - (Google) - http://www.google.com/ O69 - SBI: SearchScopes [HKCU] {96bd48dd-741b-41ae-ac4a-aff96ba00f7e} - (GamesGoFree) - http://my.gamesgofree.com/ O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Yahoo! Powered Search) - http://us.search.yahoo.com/ =>.Yahoo Search O69 - SBI: SearchScopes [HKLM] {0CE02FFA-A6B0-46F6-BA2F-BD32C3630126} - (@ieframe.dll,-12512) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (36) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [214528] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [158720] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [158720] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [329216] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1360896] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [1080320] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [927744] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [31744] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [110080] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [110592] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1265152] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [230400] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [71168] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [135168] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [228864] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [342016] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84992] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [101376] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [348672] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [522240] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\system32\wlidsvc.dll [1639424] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [59392] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [206848] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\ncasvc.dll [166400] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [102912] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [542720] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [233472] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\sens.dll [73728] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [452608] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [313344] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [3714560] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [933376] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [640000] =>.Microsoft Corporation O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [187904] =>.Microsoft Corporation O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [92992] =>.Microsoft Windows® ---\\ Liste des exceptions du parefeu Windows (12) - 4s O87 - FAEL: "{359121E0-1398-441D-A7A5-C2E128EB9AE0}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{2CA4A713-C09C-4ED0-B652-F15853A3EA16}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{1C879CB9-3589-43A1-AD3C-6279358CF7D6}" [In-None-P6-TRUE] .(...) -- C:\Users\PC-DELL\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{3595B5DA-9BC2-4BDF-968E-A2B2834866E5}" [Out-None-P6-TRUE] .(...) -- C:\Users\PC-DELL\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{DB1C8516-14F7-435C-BA0C-C8C74C97092C}" [In-None-P17-TRUE] .(...) -- C:\Users\PC-DELL\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{5DF74D2F-7C14-4FDE-8EDC-2BB2DE3E4922}" [In-None-P6-TRUE] .(...) -- C:\Users\PC-DELL\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{E4B19202-D45D-453B-9251-5B71C440BB68}" [In-None-P17-TRUE] .(...) -- C:\Users\PC-DELL\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{8BDE02A5-2B3D-4F91-AA68-8E8521009CCC}" [Out-None-P17-TRUE] .(...) -- C:\Users\PC-DELL\AppData\Roaming\uTorrent\uTorrent.exe (.not file.) O87 - FAEL: "{027FFA3F-CFAA-4454-8ED3-B0DA51CA11ED}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{2B04B007-FAB3-4983-B15F-28E28CC461C1}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico O87 - FAEL: "{069AAB71-1641-4AF0-A11E-AF92157149AE}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (.not file.) O87 - FAEL: "{2479899C-437E-49B9-BBE6-D85A5394D2ED}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\Boxbob\Application\chrome.exe (.not file.) ---\\ Recherche de clés de registre Tracing (2) - 3s HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\performanceoptimizer_RASAPI32 =>PUP.Optional.BProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\performanceoptimizer_RASMANCS =>PUP.Optional.BProtector ---\\ Scan Additionnel (14) - 0s C:\Program Files\KMSpico\AutoPico.exe =>HackTool.KMSpico C:\Windows\System32\Tasks\AutoPico Daily Restart =>HackTool.KMSpico HKLM\SOFTWARE\Wow6432Node\F024E750EFB6114DAD757F59D53B99C2 =>PUP.Optional.CrossRider HKCU\SOFTWARE\F024E750EFB6114DAD757F59D53B99C2 =>PUP.Optional.CrossRider HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\Reimage =>PUP.Optional.ReImageRepair C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico C:\Users\PC-DELL\AppData\Roaming\FileOpenerWindows =>Adware.InstallCore C:\Users\PC-DELL\AppData\Local\CrashRpt =>.Superfluous.CrashReports C:\Windows\Prefetch\PERFORMANCEOPTIMIZER.EXE-D034DBC3.pf =>PUP.Optional.BProtector C:\Windows\Prefetch\SH_INSTALLER.EXE-423EDE24.pf =>.Superfluous.SpyHunter C:\Windows\Prefetch\SPYHUNTER-INSTALLER.EXE-5A5219FF.pf =>.Superfluous.SpyHunter HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\performanceoptimizer_RASAPI32 =>PUP.Optional.BProtector HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\performanceoptimizer_RASMANCS =>PUP.Optional.BProtector ---\\ Récapitulatif des éléments trouvés sur votre station (7) - 0s http://www.nicolascoolman.fr/?p=989 =>HackTool.KMSpico http://www.nicolascoolman.fr/?p=180 =>PUP.Optional.CrossRider http://www.nicolascoolman.fr/?p=279 =>Adware.InstallCore http://www.nicolascoolman.fr/?p=1075 =>PUP.Optional.ReImageRepair http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.CrashReports http://www.nicolascoolman.fr/?p=533 =>PUP.Optional.BProtector http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.SpyHunter ~ End of the scan, 32780 items in 00h06mn04s (818)(0)