~ ZHPDiag v2017.5.6.77 Par Nicolas Coolman (2017/05/04) ~ Démarré par TOSHIBA-PC (Administrator) (2017/05/07 00:37:10) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\TOSHIBA-PC\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\TOSHIBA-PC\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 8.1 Pro, 64-bit (Build 9600) =>.Microsoft Corporation ---\\ Navigateurs Internet (3) - 0s ~ GCIE: Google Chrome v57.0.2987.133 ~ MFIE: Mozilla Firefox 51.0.1 (x86 fr) ~ MSIE: Internet Explorer v11.0.9600.18639 ---\\ Informations sur les produits Windows (9) - 4s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows(R) Operating System, VOLUME_KMSCLIENT channel Windows ID Activation : OK ~ Windows Partial Key : 9D6T9 Windows License : OK Expiration Licence Windows : 84225 minute(s) (59 jour(s)) ~ Windows Remaining Initializations Number : 999 Windows Automatic Updates : OK ---\\ Logiciels de protection (2) - 5s 360 Total Security v9.0.0.1085 (Protection) Windows Defender (Deactivate) ---\\ Surveillance de Logiciels (3) - 6s ~ Adobe Flash Player 21 PPAPI (Surveillance) ~ Adobe Flash Player Packages (Surveillance) ~ Adobe Acrobat Reader DC - Français (Surveillance) ---\\ Logiciels de partage P2P (1) - 6s ~ µTorrent v3.4.9.43085 (P2P) ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 4074.72 MB (43% free) : OK =>.RAM Value System Restore: Activé (Enable) System drive C: has 23 GB (21%) free of 109 GB : OK =>.Disk Space ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: DUCHEL ~ User Name: TOSHIBA-PC ~ Logged in as Administrator ---\\ Enumération des unités disques (4) - 0s ~ Drive C: has 23 GB free of 109 GB (System) ~ Drive F: has 166 GB free of 199 GB ~ Drive G: has 168 GB free of 199 GB ~ Drive S: has 92 GB free of 99 GB ---\\ Etat du Centre de Sécurité Windows (12) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] AutoConfigUrl: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 1s [MD5.ED6B4C95E2A6D67480B9DBB8A8E7D9B4] - 27/08/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2755504] =>.Microsoft Windows® [MD5.6C308D32AFA41D26CE2A0EA8F7B79565] - 29/10/2014 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [54784] =>.Microsoft Corporation [MD5.D9516405E05F24EDCD90B1988FAF3948] - 14/01/2017 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [146944] =>.Microsoft Corporation [MD5.1C5E7DFE2DF454E1C04C8A6B0CCF8297] - 25/03/2017 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [3241472] =>.Microsoft Corporation [MD5.B1102BBDDD9C87B3D609D6C08F7A3DBD] - 05/01/2016 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [570880] =>.Microsoft Corporation [MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - 21/12/2013 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [447488] =>.Microsoft Corporation [MD5.CF5FA7E4FB587B0F09BB0C143EB49797] - 09/02/2017 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [658432] =>.Microsoft Corporation [MD5.F2E67F682DDCFE2C2C170F2AA3650ED6] - 09/02/2017 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [499200] =>.Microsoft Corporation [MD5.E37F897ED7B5AFF79B1398258DB96BD9] - 30/09/2013 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19456] =>.Microsoft Corporation [MD5.A460C3AF3755A2A79A3C8EFE72E147B5] - 13/10/2015 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\Windows\System32\drivers\AFD.sys [559616] =>.Microsoft Corporation [MD5.74B14192CF79A72F7536B27CB8814FBD] - 22/08/2013 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [26464] =>.Microsoft Windows® [MD5.2FA6510E33F7DEFEC03658B74101A9B9] - 22/08/2013 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [88576] =>.Microsoft Corporation [MD5.C6796EA22B513E3457514D92DCDB1A3D] - 22/08/2013 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [164352] =>.Microsoft Corporation [MD5.4FED6AD69C9EE1EE7FD3C88437138855] - 10/01/2017 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [138752] =>.Microsoft Corporation [MD5.D4B7ED39C7900384D9E5C1283F1E7926] - 24/07/2014 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [76800] =>.Microsoft Corporation [MD5.49EE0AE9E5B64FFBBD06D55C4984B598] - 04/11/2014 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [108544] =>.Microsoft Corporation [MD5.B7342B3C58E91107F6E946A93D9D4EFD] - 27/11/2013 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [142848] =>.Microsoft Corporation [MD5.E2FC654EC895E92A022794329BFC53EC] - 01/02/2017 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\Windows\System32\drivers\MRxSmb.sys [401408] =>.Microsoft Corporation [MD5.9DC17B7D9D84C37C102D379FCC7D4942] - 14/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [281088] =>.Microsoft Corporation [MD5.9980B262DBE439AE6BDC91AA985F19EE] - 30/12/2015 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [2017624] =>.Microsoft Windows® [MD5.57DCE4FB0467986AE78E1C6FC5240D32] - 11/08/2016 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [96256] =>.Microsoft Corporation [MD5.235624C147E3CB4C288D5D3D8E8D64A2] - 02/02/2016 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [112640] =>.Microsoft Corporation [MD5.680C1DAE268B6FB67FA21B389A8B79EF] - 30/09/2013 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\Windows\System32\drivers\rdpdr.sys [195584] =>.Microsoft Corporation [MD5.E0BD2D83875464FEEEB242CBA8B7E073] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [108032] =>.Microsoft Corporation [MD5.17F7B0F2298D97F4B6C7A69511033D3D] - 14/03/2016 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [316760] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (26) - 2s O23 - Service: Applications Services (Apps_Cfg) . (...) - C:\ProgramData\Apple\Apps\config.dll (.not file.) O23 - Service: (bilibili) . (...) - C:\Program Files (x86)\bilibili\bilibili.dll (.not file.) O23 - Service: cktSvc (cktSvc) . (...) - C:\Program Files (x86)\Uncheckit\cktSvc.exe (.not file.) =>.Superfluous.Elex O23 - Service: SCP DS3 Service (Ds3Service) . (.Scarlet.Crush Productions - ScpService.) - G:\ScpServer\bin\ScpService.exe =>.Scarlet.Crush Productions O23 - Service: ed2k idle service (ed2kidle) . (...) - C:\Program Files (x86)\amuleCexx\ed2k.exe (.not file.) =>Adware.aMULEcustom O23 - Service: Update Service(FirefoxU) (FirefoxU) . (.Copyright (C) 2017 - .) - C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe {45A8458D05878B9FE97F9367F3956CDE} O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: HWDeviceService64.exe (HWDeviceService64.exe) . (.Copyright (C) 2008 - DCSHOST.) - C:\ProgramData\DatacardService\HWDeviceService64.exe =>.HUAWEI Technologies Co., Ltd.® O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\system32\igfxCUIService.exe =>.Intel Corporation O23 - Service: Service Installer TrueKey (InstallerService) . (...) - C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe (.not file.) O23 - Service: YAC Service (iSafeService) . (.Elex do Brasil Participações Ltda - iSafeSvc.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>.Superfluous.Elex =>.Superfluous.Elex O23 - Service: (Kitty) . (.kitty - kitty.) - C:\Users\TOSHIBA-PC\AppData\Local\Kitty\Kitty.dll =>.Superfluous.Elex O23 - Service: Kyubey (Kyubey) . (...) - C:\Users\TOSHIBA-PC\AppData\Roaming\Kyubey\Kyubey.exe (.not file.) =>Adware.CrossRider O23 - Service: 360 Total Security (QHActiveDefense) . (.QIHU 360 SOFTWARE CO. LIMITED - 360 Total Security.) - C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe =>.QIHU 360 SOFTWARE CO. LIMITED® O23 - Service: QQPCMgr RTP Service (QQPCRTP) . (.Tencent - 电脑管家-实时防护服务.) - C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\QQPCRTP.exe =>.Superfluous.Tencent =>.Superfluous.Tencent O23 - Service: (QQRepair105a) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair105a =>.Superfluous.Tencent =>.Superfluous.Tencent O23 - Service: (QQRepairb4d) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairb4d =>.Superfluous.Tencent =>.Superfluous.Tencent O23 - Service: (QQRepairbd1) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairbd1 =>.Superfluous.Tencent =>.Superfluous.Tencent O23 - Service: (QQRepairf5) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairf5 =>.Superfluous.Tencent =>.Superfluous.Tencent O23 - Service: QQRepairFixSVC (QQRepairFixSVC) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairFixSVC =>.Superfluous.Tencent =>.Superfluous.Tencent O23 - Service: SNARE (SNARE) . (.InterSect Alliance Pty Ltd - SNARE Service.) - C:\Users\TOSHIBA-PC\AppData\Local\SNARE\Snarer.dll =>.Superfluous.InterSectAlliance O23 - Service: SRepairDrv (SRepairDrv) . (.Tencent - Tencent SRepairDrv(电脑管家修复模块).) - C:\Program Files (x86)\Tencent\QQPCMgr\SRepairDrv =>.Superfluous.Tencent =>.Superfluous.Tencent O23 - Service: (StanduckSU) . (...) - C:\Users\TOSHIB~1\AppData\Local\Temp\1\BaofengUpdate_U.exe (.not file.) O23 - Service: (Update service) . (.Popcorn Time - Updater.) - C:\Program Files (x86)\Popcorn Time\Updater.exe =>.Superfluous.PopcornTime O23 - Service: WANARE (WANARE) . (.InterSect Alliance Pty Ltd - WANARE Service.) - C:\Users\TOSHIBA-PC\AppData\Local\WANARE\Snare.dll =>.Superfluous.InterSectAlliance O23 - Service: Wise Boot Assistant (WiseBootAssistant) . (.WiseCleaner.com - Wise BootTime Service.) - C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe =>.Lespeed Technology Ltd.® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (37) - 30s SS - Demand [21/10/2016] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated® SS - Demand [07/01/2017] [ 270936] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SS - Demand [24/08/2016] [ 744640] (AdobeUpdateService) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe =>.Adobe Systems Incorporated® SS - Demand [26/09/2016] [ 2207960] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Systems Incorporated® SS - Demand [27/09/2016] [ 246112] Camtel EVDO-Huawei. OUC (Camtel EVDO-Huawei. RunOuc) . (...) - C:\Program Files (x86)\Camtel EVDO-Huawei\UpdateDog\ouc.exe =>.HUAWEI Technologies Co., Ltd.® SS - Demand [12/05/2016] [ 280696] Intel(R) Content Protection HECI Service (cphs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe =>.Intel Corporation - pGFX® SS - Demand [29/08/2016] [ 1467072] Disc Soft Lite Bus Service (Disc Soft Lite Bus Service) . (.Disc Soft Ltd.) - G:\DAEMON Tools Lite\DiscSoftBusServiceLite.exe =>.Disc Soft Ltd® SS - Demand [28/04/2016] [ 279552] Droid4XService (Droid4XService) . (...) - F:\Droid4X\Droid4XService.exe =>.Haiyu Dongxiang Co.,Ltd SR - Auto [13/03/2014] [ 381952] SCP DS3 Service (Ds3Service) . (.Scarlet.Crush Productions.) - G:\ScpServer\bin\ScpService.exe =>.Scarlet.Crush Productions SR - Auto [04/05/2017] [ 107672] Update Service(FirefoxU) (FirefoxU) . (.Copyright (C) 2017.) - C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe {45A8458D05878B9FE97F9367F3956CDE} SS - Auto [07/01/2016] [ 107848] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [07/01/2016] [ 107848] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Auto [14/03/2011] [ 346976] HWDeviceService64.exe (HWDeviceService64.exe) . (.Copyright (C) 2008.) - C:\ProgramData\DatacardService\HWDeviceService64.exe =>.HUAWEI Technologies Co., Ltd.® SR - Auto [12/05/2016] [ 319096] Intel(R) HD Graphics Control Panel Service (igfxCUIService1.0.0.0) . (.Intel Corporation.) - C:\Windows\system32\igfxCUIService.exe =>.Intel Corporation - pGFX® SS - Auto [19/08/2016] [ 131024] YAC Service (iSafeService) . (.Elex do Brasil Participações Ltda.) - C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>.Superfluous.Elex =>.Superfluous.Elex SR - Auto [04/05/2017] [ 124928] (Kitty) . (.kitty.) - C:\Users\TOSHIBA-PC\AppData\Local\Kitty\Kitty.dll =>.Superfluous.Elex SS - Demand [05/01/2017] [ 26112] KMS-R@1n (KMS-R@1n) . (...) - C:\Windows\KMS-R@1n.exe =>HackTool.WinActivator SS - Demand [30/01/2017] [ 172488] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SS - Demand [07/07/2015] [ 785904] Nero Update (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe =>.Nero AG® SS - Demand [16/09/2016] [ 2141192] Origin Client Service (Origin Client Service) . (.Electronic Arts.) - C:\Program Files (x86)\Origin\OriginClientService.exe =>.Electronic Arts, Inc.® SS - Demand [16/09/2016] [ 2206224] Origin Web Helper Service (Origin Web Helper Service) . (.Electronic Arts.) - C:\Program Files (x86)\Origin\OriginWebHelperService.exe =>.Electronic Arts, Inc.® SR - Auto [30/12/2016] [ 928168] 360 Total Security (QHActiveDefense) . (.QIHU 360 SOFTWARE CO. LIMITED.) - C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe =>.QIHU 360 SOFTWARE CO. LIMITED® SR - Auto [12/09/2015] [ 297608] QQPCMgr RTP Service (QQPCRTP) . (.Tencent.) - C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\QQPCRTP.exe =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Auto [06/05/2017] [ 155368] (QQRepair105a) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair105a =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Disabl [04/08/2016] [ 208616] (QQRepair129d) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair129d =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Disabl [22/08/2016] [ 208616] (QQRepair13f7) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair13f7 =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Disabl [06/08/2016] [ 208616] (QQRepair24ea) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair24ea =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Auto [04/08/2016] [ 208616] (QQRepairb4d) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairb4d =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Auto [16/07/2016] [ 208616] (QQRepairbd1) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairbd1 =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Auto [06/08/2016] [ 208616] (QQRepairf5) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairf5 =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Auto [06/05/2017] [ 155368] QQRepairFixSVC (QQRepairFixSVC) . (...) - C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairFixSVC =>.Superfluous.Tencent =>.Superfluous.Tencent SR - Auto [13/04/2017] [ 793600] SNARE (SNARE) . (.InterSect Alliance Pty Ltd.) - C:\Users\TOSHIBA-PC\AppData\Local\SNARE\Snarer.dll =>.Superfluous.InterSectAlliance SS - System [06/05/2017] [ 185848] SRepairDrv (SRepairDrv) . (.Tencent.) - C:\Program Files (x86)\Tencent\QQPCMgr\SRepairDrv =>.Superfluous.Tencent =>.Superfluous.Tencent SS - Demand [12/09/2015] [ 293728] TAOFrame (TAOFrame) . (.Tencent.) - C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\TAOFrame.exe =>.Superfluous.Tencent =>.Superfluous.Tencent SR - Auto [26/08/2016] [ 339968] (Update service) . (.Popcorn Time.) - C:\Program Files (x86)\Popcorn Time\Updater.exe =>.Superfluous.PopcornTime SR - Auto [05/05/2017] [ 826368] WANARE (WANARE) . (.InterSect Alliance Pty Ltd.) - C:\Users\TOSHIBA-PC\AppData\Local\WANARE\Snare.dll =>.Superfluous.InterSectAlliance SR - Auto [13/10/2016] [ 646904] Wise Boot Assistant (WiseBootAssistant) . (.WiseCleaner.com.) - C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe =>.Lespeed Technology Ltd.® ---\\ Tâches planifiées en automatique (43) - 5s [MD5.220ADB2D8475CF40556F61688D3A3EA3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1156824] (.Deactivate.) =>.Adobe Systems, Incorporated® [MD5.35FC4D62C2210C0A389552358FE43FCA] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_21_0_0_213_pepper.exe [1173184] (.Deactivate.) =>.Adobe Systems Incorporated® [MD5.B79750091FC0842182FE49D263791294] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [270936] (.Deactivate.) =>.Adobe Systems Incorporated® [MD5.48515EEA1608ECD83FE26C7490460F59] [APT] [AdobeAAMUpdater-1.0-MicrosoftAccount-wemoduchel@yahoo.com] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128] (.Activate.) =>.Adobe Systems Incorporated® [MD5.D663176B9297A432309140315169274C] [APT] [DriverPack Notifier] (.Driver PackSolution.) -- C:\Program Files (x86)\DriverPack Notifier\DriverPackNotifier.exe [258560] (.Activate.) =>.Driver PackSolution [MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] (.Activate.) =>.Google Inc® [MD5.E1B44A75947137F4143308D566889837] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [107848] (.Activate.) =>.Google Inc® [MD5.DD447775B268E90264D5F45EFF374395] [APT] [lbe2wvr0] (...) -- C:\Program Files\Common Files\xqjp335z\b2c0aigcwpodj.exe [57344] (.Activate.) =>.Superfluous.Linkury [MD5.00000000000000000000000000000000] [APT] [Mart Kit] (...) -- C:\Users\TOSHIBA-PC\AppData\Local\Mart Kit\xBin\MartKit.dll (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.7F014D20314F4902FF7AB2BD459C4430] [APT] [Milimili] (...) -- C:\Program Files (x86)\MIO\MIO.exe [282168] (.Activate.) =>.Superfluous.Tencent [MD5.00000000000000000000000000000000] [APT] [psv_j4y4mexq] (...) -- C:\ProgramData\Gravelex\vqgsx5m5.bkn.reg" & del "C:\ProgramData\Gravelex\vqgsx5m5.bkn.reg" & SCHTASKS (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_kenp3ze5] (...) -- C:\ProgramData\Gravelex\jclnjdyv.vbx.reg" & del "C:\ProgramData\Gravelex\jclnjdyv.vbx.reg" & SCHTASKS (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_nipokh0s] (...) -- C:\ProgramData\Gravelex\dzypcxog.zoz.reg" & del "C:\ProgramData\Gravelex\dzypcxog.zoz.reg" & SCHTASKS (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [psv_p5ryd1zu] (...) -- C:\ProgramData\Gravelex\fwmhvmgg.e1h.reg" & del "C:\ProgramData\Gravelex\fwmhvmgg.e1h.reg" & SCHTASKS (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [UncheckitTaskMN] (...) -- C:\Program Files (x86)\Uncheckit\cktSvc.exe (.not file.) [0] (.Activate.) =>.Superfluous.Elex [MD5.693B9A3BE28C649EE338609A41C13D9E] [APT] [Wise Turbo Checker] (.WiseCleaner.COM.) -- C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe [1597688] (.Activate.) =>.Lespeed Technology Ltd.® [MD5.00000000000000000000000000000000] [APT] [{306D8998-A34D-4F27-9214-42FCE95D96EB}] (...) -- G:\FIFA 15 CPY\ModdingWayInstaller.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{45AD329E-942C-4808-A47E-9A05694C8F88}] (...) -- C:\Users\TOSHIBA-PC\Downloads\totalmounter-3100-jetelecharge.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{C88090A8-59C5-494A-BBBD-EE9572CEF03B}] (...) -- G:\FIFA 15 CPY\OriginSetup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.C72865DE00C0B7E4B4C3DEBCB347FC36] [APT] [AVAST Software\Avast settings backup] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [797264] (.Activate.) =>.AVAST Software s.r.o.® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] =>.Adobe Systems Incorporated® O39 - APT: Unknown - (...) -- C:\Windows\Tasks\Wise Care 365.job [0] O39 - APT: Wise Turbo Checker - (.WiseCleaner.COM.) -- C:\Windows\Tasks\Wise Turbo Checker.job [452] =>.Lespeed Technology Ltd.® O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [4478] =>.Adobe Systems, Incorporated® O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier [4036] =>.Adobe Systems Incorporated® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3892] =>.Adobe Systems Incorporated® O39 - APT: AdobeAAMUpdater-1.0-MicrosoftAccount-wemoduchel@yahoo.com - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-wemoduchel@yahoo.com [3508] =>.Adobe Systems Incorporated® O39 - APT: DriverPack Notifier - (.Driver PackSolution.) -- C:\Windows\System32\Tasks\DriverPack Notifier [3462] =>.Driver PackSolution O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3372] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3500] =>.Google Inc® O39 - APT: lbe2wvr0 - (...) -- C:\Windows\System32\Tasks\lbe2wvr0 [3156] =>.Superfluous.Linkury O39 - APT: Mart Kit - (...) -- C:\Windows\System32\Tasks\Mart Kit [3084] (.Orphan.) =>.Superfluous.Orphan O39 - APT: Milimili - (...) -- C:\Windows\System32\Tasks\Milimili [3614] =>.Superfluous.Tencent O39 - APT: psv_j4y4mexq - (...) -- C:\Windows\System32\Tasks\psv_j4y4mexq [3290] (.Orphan.) =>.Superfluous.Orphan O39 - APT: psv_kenp3ze5 - (...) -- C:\Windows\System32\Tasks\psv_kenp3ze5 [3290] (.Orphan.) =>.Superfluous.Orphan O39 - APT: psv_nipokh0s - (...) -- C:\Windows\System32\Tasks\psv_nipokh0s [3290] (.Orphan.) =>.Superfluous.Orphan O39 - APT: psv_p5ryd1zu - (...) -- C:\Windows\System32\Tasks\psv_p5ryd1zu [3290] (.Orphan.) =>.Superfluous.Orphan O39 - APT: UncheckitTaskMN - (...) -- C:\Windows\System32\Tasks\UncheckitTaskMN [3802] (.Orphan.) =>.Superfluous.Elex O39 - APT: Unknown - (...) -- C:\Windows\System32\Tasks\Windows-PG [3514] O39 - APT: Wise Turbo Checker - (.WiseCleaner.COM.) -- C:\Windows\System32\Tasks\Wise Turbo Checker [3110] =>.Lespeed Technology Ltd.® O39 - APT: {306D8998-A34D-4F27-9214-42FCE95D96EB} - (...) -- C:\Windows\System32\Tasks\{306D8998-A34D-4F27-9214-42FCE95D96EB} [3120] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {45AD329E-942C-4808-A47E-9A05694C8F88} - (...) -- C:\Windows\System32\Tasks\{45AD329E-942C-4808-A47E-9A05694C8F88} [3194] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {C88090A8-59C5-494A-BBBD-EE9572CEF03B} - (...) -- C:\Windows\System32\Tasks\{C88090A8-59C5-494A-BBBD-EE9572CEF03B} [3104] (.Orphan.) =>.Superfluous.Orphan ---\\ Applications lancées au démarrage du système (10) - 0s O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp.® O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - HKCU\..\Run: [background_fault] . (.AVAST Software - Avast Antivirus Installer.) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\aswRD.exe =>.AVAST Software s.r.o.® O4 - HKCU\..\Run: [BitTorrent] . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent\BitTorrent.exe =>.BitTorrent Inc® O4 - HKLM\..\Wow6432Node\Run: [QHSafeTray] . (.QIHU 360 SOFTWARE CO. LIMITED - 360 Total Security.) -- C:\Program Files (x86)\360\Total Security\safemon\360Tray.exe =>.QIHU 360 SOFTWARE CO. LIMITED® O4 - HKLM\..\Wow6432Node\Run: [ QQPCTray] . (.Tencent - 电脑管家.) -- C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\QQPCTray.exe =>.Superfluous.Tencent O4 - HKLM\..\Wow6432Node\Run: [VirtualCloneDrive] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- F:\VirtualCloneDrive\VCDDaemon.exe =>.Elaborate Bytes AG® O4 - HKUS\S-1-5-21-1127164482-3646318719-4202298796-1001\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - HKUS\S-1-5-21-1127164482-3646318719-4202298796-1001\..\Run: [background_fault] . (.AVAST Software - Avast Antivirus Installer.) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\aswRD.exe =>.AVAST Software s.r.o.® O4 - HKUS\S-1-5-21-1127164482-3646318719-4202298796-1001\..\Run: [BitTorrent] . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent\BitTorrent.exe =>.BitTorrent Inc® ---\\ Processus lancés (28) - 2s [MD5.7C8C3FB2CB2E941ABDBF02DDBFB82657] - (.Tencent - 电脑管家-实时防护服务.) -- C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\QQPCRTP.exe [297608] [PID.620] =>.Superfluous.Tencent [MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxCUIService Module.) -- C:\Windows\system32\igfxCUIService.exe [0] [PID.1936] =>.Intel Corporation [MD5.EEBDDBB9ADC46BE1BFE295EB0A501FC6] - (.QIHU 360 SOFTWARE CO. LIMITED - 360 Total Security.) -- C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [928168] [PID.1072] =>.QIHU 360 SOFTWARE CO. LIMITED® [MD5.CC8C8479B0C9FC6803B6905D99158FE4] - (.Scarlet.Crush Productions - ScpService.) -- G:\ScpServer\bin\ScpService.exe [381952] [PID.2420] =>.Scarlet.Crush Productions [MD5.E98D3E8DB50BDD746EA32328583A3F6F] - (.QIHU 360 SOFTWARE CO. LIMITED - 360 Total Security.) -- C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe [124536] [PID.2512] =>.QIHU 360 SOFTWARE CO. LIMITED® [MD5.E90DA42B87D684DEBFB73B38A718A006] - (.Copyright (C) 2008 - DCSHOST.) -- C:\ProgramData\DatacardService\HWDeviceService64.exe [346976] [PID.2572] =>.HUAWEI Technologies Co., Ltd.® [MD5.BD93D1A0E0A7A96BEA4585F17C9B3307] - (.Popcorn Time - Updater.) -- C:\Program Files (x86)\Popcorn Time\Updater.exe [339968] [PID.2788] =>.Superfluous.PopcornTime [MD5.C560BF93704E77CF55D3704C1EA60EB1] - (.WiseCleaner.com - Wise BootTime Service.) -- C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [646904] [PID.2908] =>.Lespeed Technology Ltd.® [MD5.349AB4F70E2AC44970894E7F03E1576E] - (.Huawei Technologies Co., Ltd. - DataCardMonitor MFC Application.) -- C:\ProgramData\DatacardService\DCSHelper.exe [236384] [PID.4248] =>.HUAWEI Technologies Co., Ltd.® [MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxEM Module.) -- C:\Windows\system32\igfxEM.exe [0] [PID.4528] =>.Intel Corporation [MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxHK Module.) -- C:\Windows\system32\igfxHK.exe [0] [PID.4576] =>.Intel Corporation [MD5.00000000000000000000000000000000] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxTray.exe [0] [PID.4616] =>.Intel Corporation [MD5.50301BE8AACD48A4E0C82A574C0EDD91] - (.Tencent - 电脑管家.) -- C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\QQPCTray.exe [355296] [PID.4644] =>.Superfluous.Tencent [MD5.6B518B9A219E3DF159F01E86205982F2] - (.Tencent - 电脑管家-网络流量监控.) -- C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\plugins\QMNetMon\QQPCNetFlow.exe [1186144] [PID.5220] =>.Superfluous.Tencent [MD5.819776A95B23B678C4027C236F802A69] - (.Tencent - 电脑管家-小火箭.) -- C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\QQPCRealTimeSpeedup.exe [575968] [PID.5600] =>.Superfluous.Tencent [MD5.87C63D4ACC2D8E4C10036446749EC7F2] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16709160] [PID.6120] =>.Realtek Semiconductor Corp.® [MD5.309A0390822194B835DBBF1374718354] - (.BitTorrent Inc. - µTorrent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe [1979072] [PID.4952] =>.BitTorrent Inc® [MD5.D3DA11612530D639FDF8912C1800B60A] - (.AVAST Software - Avast Antivirus Installer.) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\aswRD.exe [1419576] [PID.4148] =>.AVAST Software s.r.o.® [MD5.5FC8863C25E84D52326AC5B962D18CEC] - (.BitTorrent Inc. - BitTorrent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent\BitTorrent.exe [2411720] [PID.5420] =>.BitTorrent Inc® [MD5.31333682578AFD6716E6D611D04FD954] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent\updates\7.10.0_43581\bittorrentie.exe [398528] [PID.4940] =>.BitTorrent Inc® [MD5.8073517E5013443BF0F5D201D61081F7] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe [390144] [PID.5388] [MD5.8073517E5013443BF0F5D201D61081F7] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\updates\3.4.9_43085\utorrentie.exe [390144] [PID.3292] [MD5.31333682578AFD6716E6D611D04FD954] - (.BitTorrent Inc. - WebHelper.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent\updates\7.10.0_43581\bittorrentie.exe [398528] [PID.5676] =>.BitTorrent Inc® [MD5.44C91776D38F9857EF46509238158A74] - (.QIHU 360 SOFTWARE CO. LIMITED - 360 Total Security.) -- C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1933736] [PID.3456] =>.QIHU 360 SOFTWARE CO. LIMITED® [MD5.3BD79A1F6D2EA0FDDEA3F8914B2A6A0C] - (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- F:\VirtualCloneDrive\VCDDaemon.exe [88984] [PID.2200] =>.Elaborate Bytes AG® [MD5.556DCC3B726DF4042CDA6CB00ED25608] - (.Copyright (C) 2017 - .) -- C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe [107672] [PID.256] {45A8458D05878B9FE97F9367F3956CDE} [MD5.2DEAA3DFCEDB5D40DB2EFE2AFC0E5C94] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Firefox\Firefox.exe [500888] [PID.6608] =>.Mengmeng Wang® [MD5.3045B0FB3DB8848915E43BEAB65C3D0B] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\ZHP\ZHPDiag3.exe [2723328] [PID.7288] =>.Nicolas Coolman ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (8) - 0s P2 - EXT: (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll =>.Adobe Systems, Incorporated® P2 - EXT: (.Adobe Inc. - Acrobate Reader.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.FRA =>.Adobe Inc. P2 - EXT: (.Tracker Software Products Ltd. - PDF-XChange Viewer Netscape Gecko Plugin.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\npPDFXCviewNPPlugin.dll =>.Tracker Software Products (Canada) Ltd® P2 - FPN: [HKCU] [@iqiyi.com/npWebPlayer] - (.爱奇艺公司.) -- C:\IQIYI Video\LStyle\npWebPlayer.dll =>.Superfluous.IQIYIVideo P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll =>.Adobe Systems Incorporated P2 - FPN: [HKLM] [@iqiyi.com/npWebPlayer] - (.爱奇艺公司.) -- C:\IQIYI Video\LStyle\npWebPlayer.dll =>.Superfluous.IQIYIVideo P2 - FPN: [HKLM] [@qq.com/npAndroidAssistant] - (.腾讯公司.) -- C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3198\npQQPhoneManagerExt.dll =>.Superfluous.Tencent P2 - FPN: [HKLM] [@qq.com/QQPCMgr] - (.Tencent Technology (Shenzhen) Company Limited.) -- C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\npQMExtensionsMozilla.dll =>.Superfluous.Tencent ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (22) - 1s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/ =>PUP.Optional.Browser R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/ =>PUP.Optional.Browser R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.hao123.com/ =>PUP.Optional.Browser R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgijvkxlyip4nye17avlwqjf96savhjpymjjszrkhzuq_zp7sslzjyr1ft4hdu3_akkmvkgvgoxyei5mfaxmnh9i4anynmfgom0ekhumu1avvrzmltembzt3xmsgh-joimgx-xv2eztgq90q-5he2-colzd0kzdhswnlxc0tlzownxg,,&q={searchterms} =>.Superfluous.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgijvkxlyip4nye17avlwqjf96savhjpymjjszrkhzuq_zp7sslzjyr1ft4hdu3_akkmvkgvgoxyei5mfaxmnh9i4anynmfgom0ekhumu1avvrzmltembzt3xmsgh-joimgx-xv2eztgq90q-5he2-colzd0kzdhswnlxc0tlzownxg,,&q={searchterms} =>.Superfluous.Linkury R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.nuesearch.com/ =>Hijacker.Browser R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nuesearch.com/ =>Hijacker.Browser R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgijvkxlyip4nye17avlwqjf96savhjpymjjszrkhzuq_zp7sslzjyr1ft4hdu3_akkmvkgvgoxyei5mfaxmnh9i4anynmfgom0ekhumu1avvrzmltembzt3xmsgh-joimgx-xv2eztgq90q-5he2-colzd0kzdhswnlxc0tlzownxg,,&q={searchterms} =>.Superfluous.Linkury R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgijvkxlyip4nye17avlwqjf96savhjpymjjszrkhzuq_zp7sslzjyr1ft4hdu3_akkmvkgvgoxyei5mfaxmnh9i4anynmfgom0ekhumu1avvrzmltembzt3xmsgh-joimgx-xv2eztgq90q-5he2-colzd0kzdhswnlxc0tlzownxg,,&q={searchterms} =>.Superfluous.Linkury R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.nuesearch.com/ =>Hijacker.Browser R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.nuesearch.com/ =>Hijacker.Browser R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation R1 - HKEY_USERS\S-1-5-21-1127164482-3646318719-4202298796-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgijvkxlyip4nye17avlwqjf96savhjpymjjszrkhzuq_zp7sslzjyr1ft4hdu3_akkmvkgvgoxyei5mfaxmnh9i4anynmfgom0ekhumu1avvrzmltembzt3xmsgh-joimgx-xv2eztgq90q-5he2-colzd0kzdhswnlxc0tlzownxg,,&q={searchterms} =>.Superfluous.Linkury R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1 ---\\ Internet Explorer,Proxy Management (6) - 0s R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [http://unstopp.me/] ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (60) ---\\ Browser Helper Object de navigateur (BHO) (4) - 0s O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O2 - BHO: TSWebMon [64Bits] - {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} (.Orphan.) O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation® O2 - BHO: SafeMon Class [64Bits] - {B69F34DD-F0F9-42DC-9EDD-957187DA688D} . (.Qihu 360 Software Co., Ltd. - 360 Internet Security Internet Protection.) -- C:\Program Files (x86)\360\Total Security\safemon\safemon.dll =>.Qihoo 360 Software (Beijing) Company Limited® ---\\ Internet Explorer, Barre d'outil (1) - 0s O3 - Toolbar: PXCIEaddin - [HKLM]{42DFA04F-0F16-418e-B80C-AB97A5AFAD39} . (.Tracker Softaware - .) -- C:\Program Files\Tracker Software\PDF-XChange 4\PXCIEAddin4.dll =>.Tracker Software Products (Canada) Ltd® ---\\ Raccourcis Global Startup (117) - 9s O4 - GS\Desktop [Administrateur]: Algobox.lnk . (...) S:\Algobox\algobox.exe O4 - GS\Desktop [Administrateur]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent\BitTorrent.exe =>.BitTorrent Inc® O4 - GS\Desktop [Administrateur]: Continuer l’installation de Stremio.lnk . (...) C:\Users\TOSHIBA-PC\AppData\Local\Temp\ICReinstall_Stremio_Setup.exe /ppn:YyhwYgxaFRAiP211FM5W /RR /mnl {1121966945A9CA5F98C1EB7723E4DFD5E099} O4 - GS\Desktop [Administrateur]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Desktop [Administrateur]: Stremio.lnk . (...) G:\Stremio_Setup.exe {1121966945A9CA5F98C1EB7723E4DFD5E099} O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\TOSHIBA-PC\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Legass\Application\chrome.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [Administrateur]: 爱奇艺万能播放器.lnk . (.爱奇艺 - 爱奇艺万能播放器.) C:\IQIYI Video\GeePlayer\GeePlayer\2.3.25.2401\GeePlayer.exe -runfrom quicklaunchrun =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\TaskBar [Administrateur]: DeSmuME_0.9.11_x64.lnk . (...) C:\Users\TOSHIBA-PC\Downloads\desmume-0.9.11-win64 (1)\DeSmuME_0.9.11_x64.exe O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Legass\Application\chrome.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\TaskBar [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\TaskBar [Administrateur]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) S:\NOTEPAD++\notepad++.exe =>.Notepad++® O4 - GS\TaskBar [Administrateur]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [Administrateur]: FIFA 15 CPY.lnk . (...) F:\FIFA 15 CPY O4 - GS\Programs [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Programs [Administrateur]: Launcher.lnk . (...) F:\FIFA 15 CPY\Launcher.exe O4 - GS\Programs [Administrateur]: ScpServer.lnk . (.Scarlet.Crush Productions - ScpServer.) G:\ScpServer\bin\ScpServer.exe =>.Scarlet.Crush Productions O4 - GS\Programs [Administrateur]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [Administrateur]: 爱奇艺万能播放器.lnk . (.爱奇艺 - 爱奇艺万能播放器.) C:\IQIYI Video\GeePlayer\GeePlayer\2.3.25.2401\GeePlayer.exe -runfrom startmenurun =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® O4 - GS\Desktop [duchel]: Algobox.lnk . (...) S:\Algobox\algobox.exe O4 - GS\Desktop [duchel]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent\BitTorrent.exe =>.BitTorrent Inc® O4 - GS\Desktop [duchel]: Continuer l’installation de Stremio.lnk . (...) C:\Users\TOSHIBA-PC\AppData\Local\Temp\ICReinstall_Stremio_Setup.exe /ppn:YyhwYgxaFRAiP211FM5W /RR /mnl {1121966945A9CA5F98C1EB7723E4DFD5E099} O4 - GS\Desktop [duchel]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Desktop [duchel]: Stremio.lnk . (...) G:\Stremio_Setup.exe {1121966945A9CA5F98C1EB7723E4DFD5E099} O4 - GS\Desktop [duchel]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\TOSHIBA-PC\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [duchel]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [duchel]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Legass\Application\chrome.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Quicklaunch [duchel]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Quicklaunch [duchel]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [duchel]: 爱奇艺万能播放器.lnk . (.爱奇艺 - 爱奇艺万能播放器.) C:\IQIYI Video\GeePlayer\GeePlayer\2.3.25.2401\GeePlayer.exe -runfrom quicklaunchrun =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® O4 - GS\sendTo [duchel]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\TaskBar [duchel]: DeSmuME_0.9.11_x64.lnk . (...) C:\Users\TOSHIBA-PC\Downloads\desmume-0.9.11-win64 (1)\DeSmuME_0.9.11_x64.exe O4 - GS\TaskBar [duchel]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Legass\Application\chrome.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\TaskBar [duchel]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\TaskBar [duchel]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) S:\NOTEPAD++\notepad++.exe =>.Notepad++® O4 - GS\TaskBar [duchel]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [duchel]: FIFA 15 CPY.lnk . (...) F:\FIFA 15 CPY O4 - GS\Programs [duchel]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Programs [duchel]: Launcher.lnk . (...) F:\FIFA 15 CPY\Launcher.exe O4 - GS\Programs [duchel]: ScpServer.lnk . (.Scarlet.Crush Productions - ScpServer.) G:\ScpServer\bin\ScpServer.exe =>.Scarlet.Crush Productions O4 - GS\Programs [duchel]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [duchel]: 爱奇艺万能播放器.lnk . (.爱奇艺 - 爱奇艺万能播放器.) C:\IQIYI Video\GeePlayer\GeePlayer\2.3.25.2401\GeePlayer.exe -runfrom startmenurun =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® O4 - GS\Desktop [TOSHIBA-PC]: Algobox.lnk . (...) S:\Algobox\algobox.exe O4 - GS\Desktop [TOSHIBA-PC]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent\BitTorrent.exe =>.BitTorrent Inc® O4 - GS\Desktop [TOSHIBA-PC]: Continuer l’installation de Stremio.lnk . (...) C:\Users\TOSHIBA-PC\AppData\Local\Temp\ICReinstall_Stremio_Setup.exe /ppn:YyhwYgxaFRAiP211FM5W /RR /mnl {1121966945A9CA5F98C1EB7723E4DFD5E099} O4 - GS\Desktop [TOSHIBA-PC]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Desktop [TOSHIBA-PC]: Stremio.lnk . (...) G:\Stremio_Setup.exe {1121966945A9CA5F98C1EB7723E4DFD5E099} O4 - GS\Desktop [TOSHIBA-PC]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\TOSHIBA-PC\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Desktop [TOSHIBA-PC]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [TOSHIBA-PC]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Legass\Application\chrome.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Quicklaunch [TOSHIBA-PC]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Quicklaunch [TOSHIBA-PC]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\Quicklaunch [TOSHIBA-PC]: 爱奇艺万能播放器.lnk . (.爱奇艺 - 爱奇艺万能播放器.) C:\IQIYI Video\GeePlayer\GeePlayer\2.3.25.2401\GeePlayer.exe -runfrom quicklaunchrun =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® O4 - GS\sendTo [TOSHIBA-PC]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\TaskBar [TOSHIBA-PC]: DeSmuME_0.9.11_x64.lnk . (...) C:\Users\TOSHIBA-PC\Downloads\desmume-0.9.11-win64 (1)\DeSmuME_0.9.11_x64.exe O4 - GS\TaskBar [TOSHIBA-PC]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Legass\Application\chrome.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\TaskBar [TOSHIBA-PC]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\TaskBar [TOSHIBA-PC]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) S:\NOTEPAD++\notepad++.exe =>.Notepad++® O4 - GS\TaskBar [TOSHIBA-PC]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [TOSHIBA-PC]: FIFA 15 CPY.lnk . (...) F:\FIFA 15 CPY O4 - GS\Programs [TOSHIBA-PC]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Programs [TOSHIBA-PC]: Launcher.lnk . (...) F:\FIFA 15 CPY\Launcher.exe O4 - GS\Programs [TOSHIBA-PC]: ScpServer.lnk . (.Scarlet.Crush Productions - ScpServer.) G:\ScpServer\bin\ScpServer.exe =>.Scarlet.Crush Productions O4 - GS\Programs [TOSHIBA-PC]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [TOSHIBA-PC]: 爱奇艺万能播放器.lnk . (.爱奇艺 - 爱奇艺万能播放器.) C:\IQIYI Video\GeePlayer\GeePlayer\2.3.25.2401\GeePlayer.exe -runfrom startmenurun =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® O4 - GS\CommonDesktop [Public]: 360 Total Security.lnk . (.QIHU 360 SOFTWARE CO. LIMITED - 360 Total Security.) C:\Program Files (x86)\360\Total Security\QHSafeMain.exe =>.QIHU 360 SOFTWARE CO. LIMITED® O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe =>.Adobe Systems, Incorporated® O4 - GS\CommonDesktop [Public]: Adobe Creative Cloud.lnk . (.Adobe Systems Incorporated - Adobe Creative Cloud.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe =>.Adobe Systems Incorporated® O4 - GS\CommonDesktop [Public]: Droid4X.lnk . (...) F:\Droid4X\Droid4X.exe O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\CommonDesktop [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\CommonDesktop [Public]: Notepad++.lnk . (.Don HO don.h@free.fr - Notepad++ : a free (GNU) source code editor.) S:\NOTEPAD++\notepad++.exe =>.Notepad++® O4 - GS\CommonDesktop [Public]: Popcorn Time.lnk . (...) C:\Program Files (x86)\Popcorn Time\PopcornTimeDesktop.exe =>.Superfluous.PopcornTime O4 - GS\CommonDesktop [Public]: Virtual CloneDrive.lnk . (.Elaborate Bytes AG - VirtualCloneDrive Preferences.) F:\VirtualCloneDrive\VCDPrefs.exe =>.Elaborate Bytes AG O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe =>.VideoLAN® O4 - GS\CommonDesktop [Public]: WinRAR.lnk . (...) C:\Program Files (x86)\WinRAR\WinRAR.exe O4 - GS\CommonDesktop [Public]: Wise Care 365.lnk . (.WiseCleaner.com - Wise Care 365.) C:\Program Files (x86)\Wise\Wise Care 365\WiseCare365.exe =>.Lespeed Technology Ltd.® O4 - GS\CommonDesktop [Public]: Wise Program Uninstaller.lnk . (.WiseCleaner.com - Wise Program Uninstaller.) C:\Program Files (x86)\Wise\Wise Program Uninstaller\WiseProgramUninstaller.exe =>.Lespeed Technology Ltd.® O4 - GS\Programs [Public]: FIFA 15 CPY.lnk . (...) F:\FIFA 15 CPY O4 - GS\Programs [Public]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\Programs [Public]: Launcher.lnk . (...) F:\FIFA 15 CPY\Launcher.exe O4 - GS\Programs [Public]: ScpServer.lnk . (.Scarlet.Crush Productions - ScpServer.) G:\ScpServer\bin\ScpServer.exe =>.Scarlet.Crush Productions O4 - GS\Programs [Public]: Start Tor Browser.lnk . (.Mozilla Corporation - Tor Browser.) F:\Tor Browser\Browser\firefox.exe =>.Mozilla Corporation O4 - GS\Programs [Public]: 爱奇艺万能播放器.lnk . (.爱奇艺 - 爱奇艺万能播放器.) C:\IQIYI Video\GeePlayer\GeePlayer\2.3.25.2401\GeePlayer.exe -runfrom startmenurun =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Steps Recorder.lnk . (.Microsoft Corporation - Enregistreur d’actions.) C:\Windows\system32\psr.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Acrobat Reader DC.lnk . (.Flexera Software LLC - InstallShield.) C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}\SC_Reader.ico =>.Flexera Software LLC O4 - GS\ProgramsCommon [Public]: Adobe Creative Cloud.lnk . (.Adobe Systems Incorporated - Adobe Creative Cloud.) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe =>.Adobe Systems Incorporated® O4 - GS\ProgramsCommon [Public]: Adobe Photoshop CC 2015.5.lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CC 2015.5.) C:\Program Files\Adobe\Adobe Photoshop CC 2015.5\Photoshop.exe =>.Adobe Systems Incorporated® O4 - GS\ProgramsCommon [Public]: Camera.lnk . (.Microsoft Corporation - Camera.) C:\Windows\Camera\Camera.exe =>.Microsoft Windows® O4 - GS\ProgramsCommon [Public]: Coach's GameBook Demo.lnk . (...) C:\Windows\Installer\{AE47FB62-8F4D-47E5-AB39-72E57772FD96}\NewShortcut2.exe O4 - GS\ProgramsCommon [Public]: FileManager.lnk . (.Microsoft Corporation - OneDrive.) C:\Windows\FileManager\FileManager.exe =>.Microsoft Windows® O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.nuesearch.com/ =>Hijacker.Browser O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\Windows\System32\Control.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Movie Maker.lnk . (.Microsoft Corporation - Movie Maker.) C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files (x86)\Firefox\Firefox.exe =>.Mengmeng Wang® O4 - GS\ProgramsCommon [Public]: Photo Gallery.lnk . (.Microsoft Corporation - Photo Gallery.) C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: PhotosApp.lnk . (.Microsoft Corporation - Photos.) C:\Windows\FileManager\PhotosApp.exe =>.Microsoft Windows® O4 - GS\ProgramsCommon [Public]: Search.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\rundll32.exe -sta {C90FB8CA-3295-4462-A721-2935E83694BA} =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Movie Maker 2.6.lnk . (.Microsoft Corporation - Windows Movie Maker.) C:\Windows\Installer\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}\MOVIEMK.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Store.lnk . (...) C:\Windows\WinStore\WinStore.htm =>.Microsoft Corporation ---\\ Modification Domaine/Adresses DNS (3) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.88.254 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{26FCB9BC-54D2-44CF-97D3-E13522D423F0}: DhcpNameServer = 192.168.88.254 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{485172CC-1BE1-4FD4-8E27-9D645AD727A4}: DhcpNameServer = 192.168.88.254 =>.Local IP Adress ---\\ Protocole additionnel (24) - 0s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\SysWOW64\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\SysWOW64\itss.dll =>.Microsoft Corporation O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: viprotocol [64Bits] - {B658800C-F66E-4EF3-AB85-6C0C227862A9} . (.AVG Secure Search - ViProtocol.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\19.1.0\ViProtocol.dll =>.AVG Technologies CZ, s.r.o.® O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Photo Gallery Album Download Protocol Handl.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation® O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\SysWOW64\mscoree.dll =>.Microsoft Corporation O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Tâches CLSID du registre (1) - 2s O40 - TASK: {FB58D2BA-2B59-41D9-AAF3-895ECD4DBAC1} - (...) -- C:\Windows\system32\osppc.dll (.not file.) [0] (.Orphan.) =>.Superfluous.Orphan ---\\ Logiciels installés (74) - 16s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- uTorrent =>.BitTorrent Inc® O42 - Logiciel: 360 Total Security - (.360 Security Center.) [HKLM][64Bits] -- 360TotalSecurity =>.QIHU 360 SOFTWARE CO. LIMITED® O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Creative Cloud - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Creative Cloud =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 21 PPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player PPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 24 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player Packages - (..) [HKCU][64Bits] -- Adobe Flash Player Packages =>Adware.InstallCore O42 - Logiciel: Adobe Photoshop CC 2015.5 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- PHSP_17_0_1 =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824205020} =>.Adobe Systems Incorporated O42 - Logiciel: Algobox - (.Legitimate.) [HKLM][64Bits] -- Algobox O42 - Logiciel: AlphaGo - (.AlphaGo.) [HKLM][64Bits] -- {9CDB618D-4F02-4CAD-B743-89677FE7ADE9} O42 - Logiciel: amuleC - (.amuleC.) [HKLM][64Bits] -- {0F7B5011-72EC-493D-A7BF-546591047E8E} =>Adware.aMULEcustom O42 - Logiciel: amulesw - (.amules.) [HKLM][64Bits] -- {7CC4BD9A-10F3-432B-A037-AE9FCE1F9B64} O42 - Logiciel: Bandisoft MPEG-1 Decoder - (.Bandisoft.com.) [HKLM][64Bits] -- BandiMPEG1 =>.Bandisoft.com O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- BitTorrent O42 - Logiciel: Blender - (.Blender Foundation.) [HKLM][64Bits] -- Blender =>.Blender Foundation O42 - Logiciel: BlueStacks App Player - (.BlueStack Systems, Inc..) [HKLM][64Bits] -- {AA655366-D323-404D-AA9B-AD562CAE1DD0} =>.BlueStack Systems, Inc. O42 - Logiciel: Camtel EVDO-Huawei - (.Huawei Technologies Co.,Ltd.) [HKLM][64Bits] -- Camtel EVDO-Huawei =>.Huawei Technologies Co.,Ltd O42 - Logiciel: CinemaP-1.9cV12.09 - (.Cinema PlusV12.09.) [HKLM][64Bits] -- CinemaP-1.9cV12.09 =>Adware.CrossRider O42 - Logiciel: Clavier+ 10.7.1 - (.Guillaume Ryder.) [HKLM][64Bits] -- Clavier+_is1 =>.Guillaume Ryder O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft O42 - Logiciel: DAEMON Tools Lite - (.Disc Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Lite =>.Disc Soft Ltd® O42 - Logiciel: Démo de FIFA 16 - (.Electronic Arts.) [HKLM][64Bits] -- {D09AD1AE-6AAC-45EB-B9F6-C1F223DD8481} =>.Electronic Arts O42 - Logiciel: DriverPack Notifier - (.DriverPack Solution.) [HKLM][64Bits] -- DriverPack Notifier =>.DriverPack Solution O42 - Logiciel: Droid4X - (.Haiyu Dongxiang Co.,Ltd..) [HKLM][64Bits] -- Droid4X =>.Haiyu Dongxiang Co.,Ltd. O42 - Logiciel: EA SPORTS™ FIFA 15 - (.Electronic Arts.) [HKLM][64Bits] -- {3D4ADA2B-F028-4307-ADF4-6F9AA44725DA} =>.Electronic Arts® O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {439B34FF-F74E-4807-B5E2-4B758551DA6B} =>.Microsoft Corporation O42 - Logiciel: GameBook Demo - (.MindSpin Technologies.) [HKLM][64Bits] -- {AE47FB62-8F4D-47E5-AB39-72E57772FD96} O42 - Logiciel: Git version 2.6.4 - (.The Git Development Community.) [HKLM][64Bits] -- Git_is1 =>.The Git Development Community O42 - Logiciel: globalupdate Helper - (.globalupdate Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - pGFX® O42 - Logiciel: KMSpico 8.7 - (..) [HKLM][64Bits] -- KMSpico v8.7_is1 =>HackTool.KMSpico O42 - Logiciel: Logiciel d'archivage WinRAR - (.RarLab.) [HKLM][64Bits] -- WinRAR archiver =>.RarLab O42 - Logiciel: MEGAsync - (.Mega Limited.) [HKLM][64Bits] -- MEGAsync =>.Mega Limited® O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Xbox 360 Accessories 1.2 - (.Microsoft.) [HKLM][64Bits] -- {D9C50188-12D5-4D3E-8F00-682346C2AA5F} =>.Microsoft O42 - Logiciel: Mozilla Firefox 51.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 51.0.1 (x86 fr) =>.Mozilla Corporation® O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} =>.Microsoft O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {E9FA781F-3E80-4399-825A-AD3E11C28C77} =>.Microsoft O42 - Logiciel: MyPC Backup - (.MyPC Backup.) [HKLM][64Bits] -- OLBPre =>PUP.Optional.MyPCBackup O42 - Logiciel: Nero Burning Core - (.Nero AG.) [HKLM][64Bits] -- {A163159C-B476-4501-B163-3F77809AC833} =>.Nero AG O42 - Logiciel: Nero Burning ROM - (.Nero AG.) [HKLM][64Bits] -- {CFB0F37D-22E7-4F37-8FAE-B319A58AC5B9} =>.Nero AG O42 - Logiciel: Nero BurningROM 2016 - (.Nero AG.) [HKLM][64Bits] -- {57A3796C-EDE9-43DA-86C4-92279B6B9AB1} =>.Nero AG O42 - Logiciel: Nero ControlCenter - (.Nero AG.) [HKLM][64Bits] -- {ABC88553-8770-4B97-B43E-5A90647A5B63} =>.Nero AG O42 - Logiciel: Nero Core Components - (.Nero AG.) [HKLM][64Bits] -- {BEBEE34D-84A2-4EDD-8BEA-96CC54371263} =>.Nero AG O42 - Logiciel: Nero CoverDesigner - (.Nero AG.) [HKLM][64Bits] -- {92EBE575-0C6E-4713-B095-34BB927E5AC6} =>.Nero AG O42 - Logiciel: Nero Info - (.Nero AG.) [HKLM][64Bits] -- {F030BFE8-8476-4C08-A553-233DE80A2BE1} =>.Nero AG O42 - Logiciel: Nero Launcher - (.Nero AG.) [HKLM][64Bits] -- {EF0BA418-AF37-471E-9594-EAE5913F4681} =>.Nero AG O42 - Logiciel: Nero SharedVideoCodecs - (.Nero AG.) [HKLM][64Bits] -- {2432E589-6256-4513-B0BF-EFA8E325D5F0} =>.Nero AG O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A} =>.Nero AG O42 - Logiciel: Notepad++ (32-bit x86) - (.Notepad++ Team.) [HKLM][64Bits] -- Notepad++ =>.Notepad++ Team O42 - Logiciel: Oracle VM VirtualBox 4.3.12_ZZZZ - (.Oracle Corporation.) [HKLM][64Bits] -- {B5121457-0126-4E62-BCBF-6DC7C73D9E4A} =>.Oracle Corporation O42 - Logiciel: Origin - (.Electronic Arts, Inc..) [HKLM][64Bits] -- Origin =>.Electronic Arts, Inc.® O42 - Logiciel: PDF-XChange 4 Pro - (.Tracker Software Products Ltd.) [HKLM][64Bits] -- {E38531EE-318C-4EFB-A36B-1A57BFBDAB3C}_is1 =>.Tracker Software Products (Canada) Ltd® O42 - Logiciel: Popcorn Time - (.Popcorn Time.) [HKLM][64Bits] -- Popcorn Time_is1 =>.Superfluous.PopcornTime O42 - Logiciel: Prerequisite installer - (.Nero AG.) [HKLM][64Bits] -- {5F284483-EE8D-447E-BEBE-2BF13B08C4BF} =>.Nero AG O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.® O42 - Logiciel: RPG Maker VX - (.Enterbrain.) [HKLM][64Bits] -- RPGVX_E_is1 =>.Enterbrain O42 - Logiciel: Stashimi Stub Installer - (.Nero AG.) [HKLM][64Bits] -- {910B539D-F257-46C8-9CB8-6C95EFF9CF22} =>.Nero AG O42 - Logiciel: Terela - (.Terela.) [HKLM][64Bits] -- {E2F7C535-0785-4C2D-B56F-016BFD02B010} O42 - Logiciel: Unity Web Player - (.Unity Technologies ApS.) [HKCU][64Bits] -- UnityWebPlayer =>.Unity Technologies ApS O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM][64Bits] -- VirtualCloneDrive =>.Elaborate Bytes O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN O42 - Logiciel: Wakanda Enterprise - (.Wakanda.org.) [HKLM][64Bits] -- {0325C614-024F-46A8-B3AB-A4E6DD27E87C} =>.Wakanda.org O42 - Logiciel: WinSnare - (.WinSnare.) [HKLM][64Bits] -- {BB26F52E-34C5-4937-9240-471C59CC81E6} =>.Superfluous.WinSnare O42 - Logiciel: Wise Care 365 4.51 - (.WiseCleaner.com, Inc..) [HKLM][64Bits] -- Wise Care 365_is1 =>.Lespeed Technology Ltd.® O42 - Logiciel: Wise Program Uninstaller 1.97 - (.WiseCleaner.com, Inc..) [HKLM][64Bits] -- Wise Program Uninstaller_is1 =>.Lespeed Technology Ltd.® O42 - Logiciel: YAC(Yet Another Cleaner!) - (.ELEX DO BRASIL PARTICIPAÇÕES LTDA.) [HKLM][64Bits] -- iSafe =>.Superfluous.Elex O42 - Logiciel: 爱奇艺万能播放器 - (.爱奇艺.) [HKLM][64Bits] -- GeePlayer =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® O42 - Logiciel: 爱奇艺影音 - (.爱奇艺.) [HKLM][64Bits] -- IQIYI Video =>.BEIJING QIYI CENTURY SCIENCE&TECHNOLOGY CO.,LTD.® ---\\ HKCU & HKLM Software Keys (178) - 16s HKLM\SOFTWARE\Wow6432Node\360Safe =>.Qihu 360 Software Co., LTD HKLM\SOFTWARE\Wow6432Node\360softmgr =>.Qihu 360 Software Co., LTD HKLM\SOFTWARE\Wow6432Node\360TotalSecurity =>.Qihu 360 Software Co., LTD HKLM\SOFTWARE\Wow6432Node\Adobe =>.Adobe HKLM\SOFTWARE\Wow6432Node\AppDataLow =>.Microsoft Corporation HKLM\SOFTWARE\Wow6432Node\ArenaHD =>Adware.CrossRider HKLM\SOFTWARE\Wow6432Node\AVG SafeGuard toolbar =>.AVG Software HKLM\SOFTWARE\Wow6432Node\AVG Security Toolbar HKLM\SOFTWARE\Wow6432Node\BandiMPEG1 =>.Bandisoft HKLM\SOFTWARE\Wow6432Node\BANDISOFT =>.Bandisoft HKLM\SOFTWARE\Wow6432Node\BlueStacks =>.BlueStack Systems, Inc. HKLM\SOFTWARE\Wow6432Node\BlueStacksGameManager =>.BlueStack Systems, Inc. HKLM\SOFTWARE\Wow6432Node\Canneverbe Limited =>.Canneverbe Limited HKLM\SOFTWARE\Wow6432Node\Chromium =>.Chromium HKLM\SOFTWARE\Wow6432Node\CinemaP-1.9cV12.09 =>Adware.CrossRider HKLM\SOFTWARE\Wow6432Node\CinemaP-1.9cV12.09-nv-ie =>Adware.CrossRider HKLM\SOFTWARE\Wow6432Node\co.ao.aio HKLM\SOFTWARE\Wow6432Node\dll-files.com =>PUP.Optional.DllFilesFixer HKLM\SOFTWARE\Wow6432Node\dlsecuretb HKLM\SOFTWARE\Wow6432Node\drpsu =>.Driver PackSolution HKLM\SOFTWARE\Wow6432Node\DVDVideoSoft =>.DVDVideoSoft HKLM\SOFTWARE\Wow6432Node\EA Sports =>.Electronic Arts, Inc. HKLM\SOFTWARE\Wow6432Node\eAHPeNhIUJ HKLM\SOFTWARE\Wow6432Node\Elaborate Bytes =>.Elaborate Bytes HKLM\SOFTWARE\Wow6432Node\Electronic Arts =>.Electronic Arts HKLM\SOFTWARE\Wow6432Node\Elex-tech =>.Superfluous.Elex HKLM\SOFTWARE\Wow6432Node\Enterbrain =>.Enterbrain HKLM\SOFTWARE\Wow6432Node\Firefox =>.Mozilla Corporation HKLM\SOFTWARE\Wow6432Node\GitForWindows HKLM\SOFTWARE\Wow6432Node\GlobalUpdate =>PUP.Optional.GlobalUpdate HKLM\SOFTWARE\Wow6432Node\Google =>.Google HKLM\SOFTWARE\Wow6432Node\hdcode =>.Legitimate HKLM\SOFTWARE\Wow6432Node\HighDefAction =>Adware.CrossRider HKLM\SOFTWARE\Wow6432Node\Huawei technologies =>.Huawei Technologies HKLM\SOFTWARE\Wow6432Node\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions HKLM\SOFTWARE\Wow6432Node\Intel =>.Intel HKLM\SOFTWARE\Wow6432Node\Khronos =>.Khronos HKLM\SOFTWARE\Wow6432Node\Legass HKLM\SOFTWARE\Wow6432Node\Licenses =>.Microsoft Corporation HKLM\SOFTWARE\Wow6432Node\LiveUpdate360 =>.Qihu 360 Software Co., LTD HKLM\SOFTWARE\Wow6432Node\Macromedia =>.Macromedia HKLM\SOFTWARE\Wow6432Node\McAfee.com =>.McAfee Inc. HKLM\SOFTWARE\Wow6432Node\MOVAVI =>.Movavi HKLM\SOFTWARE\Wow6432Node\Mozilla =>.Mozilla HKLM\SOFTWARE\Wow6432Node\mozilla.org =>.mozilla.org HKLM\SOFTWARE\Wow6432Node\MozillaPlugins =>.MozillaPlugins HKLM\SOFTWARE\Wow6432Node\mtBluetoothPoint =>PUP.Optional.BluetoothPoint HKLM\SOFTWARE\Wow6432Node\mtGravelex HKLM\SOFTWARE\Wow6432Node\mtSaophase HKLM\SOFTWARE\Wow6432Node\Nero =>.Ahead Corporation HKLM\SOFTWARE\Wow6432Node\Notepad++ =>.Don Ho HKLM\SOFTWARE\Wow6432Node\Nuance =>.Nuance HKLM\SOFTWARE\Wow6432Node\nuesearchSoftware =>.Nuesearch Software HKLM\SOFTWARE\Wow6432Node\ODBC =>.DB Connectivity Solutions HKLM\SOFTWARE\Wow6432Node\Opera Software =>.Opera Software HKLM\SOFTWARE\Wow6432Node\Origin =>.Electronic Arts, Inc. HKLM\SOFTWARE\Wow6432Node\Origin Games =>.Electronic Arts, Inc. HKLM\SOFTWARE\Wow6432Node\ourluckysitesSoftware HKLM\SOFTWARE\Wow6432Node\oursurfingSoftware =>PUP.Optional.OurSurfing HKLM\SOFTWARE\Wow6432Node\qksee =>.Superfluous.TaiwanShuiMu HKLM\SOFTWARE\Wow6432Node\qkseeSvc =>.Superfluous.TaiwanShuiMu HKLM\SOFTWARE\Wow6432Node\RapidSolution =>.RapidSolution HKLM\SOFTWARE\Wow6432Node\Realtek =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\Wow6432Node\Rtp =>.RTP Software HKLM\SOFTWARE\Wow6432Node\ScreenShot HKLM\SOFTWARE\Wow6432Node\SimpleFiles =>PUP.Optional.SimpleFiles HKLM\SOFTWARE\Wow6432Node\SRS Labs =>.SRS Labs HKLM\SOFTWARE\Wow6432Node\startpageing123Software HKLM\SOFTWARE\Wow6432Node\Tencent =>.Superfluous.Tencent HKLM\SOFTWARE\Wow6432Node\Ubisoft =>.Ubisoft HKLM\SOFTWARE\Wow6432Node\VideoLAN =>.VideoLAN HKLM\SOFTWARE\Wow6432Node\Volatile =>.Microsoft Corporation HKLM\SOFTWARE\Wow6432Node\WafCX =>.WafCX HKLM\SOFTWARE\Wow6432Node\WdsManPro =>PUP.Optional.WdsManPro HKLM\SOFTWARE\Wow6432Node\WinISO =>.WinISO Computing Inc HKLM\SOFTWARE\Wow6432Node\WinRAR =>.WinRAR HKLM\SOFTWARE\Wow6432Node\WinSaberSvc =>.Superfluous.WinSaber HKLM\SOFTWARE\Wow6432Node\WinZiper =>.Superfluous.WinZipper HKLM\SOFTWARE\Wow6432Node\WiseCleaner =>.wisecleaner HKLM\SOFTWARE\Wow6432Node\Wondershare =>.Wondershare HKLM\SOFTWARE\Wow6432Node\WondershareSysMenuDATA =>.Wondershare HKLM\SOFTWARE\Wow6432Node\Wow6432Node =>.Microsoft Corporation HKLM\SOFTWARE\Wow6432Node\yessearchesSoftware =>Adware.YesSearches HKLM\SOFTWARE\Wow6432Node\YorkNewCin =>Adware.CrossRider HKLM\SOFTWARE\Wow6432Node\RegisteredApplications =>.Microsoft Corporation HKCU\SOFTWARE\360 =>.Qihu 360 Software Co., LTD HKCU\SOFTWARE\360Safe =>.Qihu 360 Software Co., LTD HKCU\SOFTWARE\360TotalSecurity =>.Qihu 360 Software Co., LTD HKCU\SOFTWARE\Adobe =>.Adobe HKCU\SOFTWARE\AlphaGo HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation HKCU\SOFTWARE\ArenaHD =>Adware.CrossRider HKCU\SOFTWARE\AVAST Software =>.AVAST Software HKCU\SOFTWARE\AVG SafeGuard toolbar =>.AVG Software HKCU\SOFTWARE\BandiMPEG1 =>.Bandisoft HKCU\SOFTWARE\BANDISOFT =>.Bandisoft HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\Blizzard Entertainment =>.Blizzard Entertainment HKCU\SOFTWARE\BugSplat =>.Bugsplat Game HKCU\SOFTWARE\CamStudioOpenSource for Nick =>.Open Source HKCU\SOFTWARE\Canneverbe Limited =>.Canneverbe Limited HKCU\SOFTWARE\Chromium =>.Chromium HKCU\SOFTWARE\CinemaP-1.9cV12.09 =>Adware.CrossRider HKCU\SOFTWARE\CinemaP-1.9cV12.09-nv-ie =>Adware.CrossRider HKCU\SOFTWARE\CrossBrowser =>PUP.Optional.CrossBrowser HKCU\SOFTWARE\csastats =>Adware.InstallCore HKCU\SOFTWARE\deskapp HKCU\SOFTWARE\Disc Soft =>.Disc Soft HKCU\SOFTWARE\DRP HKCU\SOFTWARE\drpsu =>.Driver PackSolution HKCU\SOFTWARE\DVDVideoSoft =>.DVDVideoSoft HKCU\SOFTWARE\eAHPeNhIUJ HKCU\SOFTWARE\Elaborate Bytes =>.Elaborate Bytes HKCU\SOFTWARE\Firefox =>.Mozilla Corporation HKCU\SOFTWARE\Genymobile =>.Genymobile HKCU\SOFTWARE\globalUpdate =>PUP.Optional.GlobalUpdate HKCU\SOFTWARE\Google =>.Google HKCU\SOFTWARE\heheelibom HKCU\SOFTWARE\HighDefAction =>Adware.CrossRider HKCU\SOFTWARE\IM =>Adware.InstallCore HKCU\SOFTWARE\IM Providers =>.IM Providers HKCU\SOFTWARE\IMDownloader =>.Legitimate HKCU\SOFTWARE\InstalledBrowserExtensions =>PUP.Optional.BrowserExtensions HKCU\SOFTWARE\InstallPath =>.Legitimate HKCU\SOFTWARE\Intel =>.Intel HKCU\SOFTWARE\Legass HKCU\SOFTWARE\Licenses =>.Microsoft Corporation HKCU\SOFTWARE\LiveUpdate360 =>.Qihu 360 Software Co., LTD HKCU\SOFTWARE\Macromedia =>.Macromedia HKCU\SOFTWARE\Mine =>.Microsoft Corporation HKCU\SOFTWARE\MOVAVI =>.Movavi HKCU\SOFTWARE\Mozilla =>.Mozilla HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins HKCU\SOFTWARE\Nero =>.Ahead Corporation HKCU\SOFTWARE\Netscape =>.Netscape HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions HKCU\SOFTWARE\Opera Software =>.Opera Software HKCU\SOFTWARE\OSpeedy Driver Updater =>.OSpeedy Software HKCU\SOFTWARE\OSpeedy_Driver_Updater_Init =>.OSpeedy Software HKCU\SOFTWARE\Popcorn Time =>.Superfluous.PopcornTime HKCU\SOFTWARE\PopcornTime =>.Superfluous.PopcornTime HKCU\SOFTWARE\PPStream HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\Prompt Downloader HKCU\SOFTWARE\QtProject =>.QtProject HKCU\SOFTWARE\QyGameClient =>.Superfluous.IQIYIVideo HKCU\SOFTWARE\RapidSolution =>.RapidSolution HKCU\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKCU\SOFTWARE\RegisterA HKCU\SOFTWARE\RegisteredApplications =>.Microsoft Corporation HKCU\SOFTWARE\RomHustler HKCU\SOFTWARE\Rtp =>.RTP Software HKCU\SOFTWARE\Scarlet.Crush Productions =>.Scarlet.Crush Productions HKCU\SOFTWARE\SimpleFiles =>PUP.Optional.SimpleFiles HKCU\SOFTWARE\SMADΔV HKCU\SOFTWARE\Tencent =>.Superfluous.Tencent HKCU\SOFTWARE\Terela HKCU\SOFTWARE\The Silicon Realms Toolworks =>.The Silicon Realms Toolworks HKCU\SOFTWARE\TikGames HKCU\SOFTWARE\Tracker Software =>.Tracker Software HKCU\SOFTWARE\Trolltech =>.Trolltech HKCU\SOFTWARE\Ubisoft =>.Ubisoft HKCU\SOFTWARE\Ultracopier =>.Herman Brule HKCU\SOFTWARE\undefined =>.Superfluous.Downloader HKCU\SOFTWARE\Unity =>.Unity HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation HKCU\SOFTWARE\Vittalia =>PUP.Optional.Vittalia HKCU\SOFTWARE\WinRAR =>.WinRAR HKCU\SOFTWARE\WinRAR SFX =>.RarLab HKCU\SOFTWARE\WinSnare =>.Superfluous.WinSnare HKCU\SOFTWARE\Wondershare =>.Wondershare HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation HKCU\SOFTWARE\WSVCUPlugin =>.Wondershare HKCU\SOFTWARE\YorkNewCin =>Adware.CrossRider HKCU\SOFTWARE\ZHP =>.Nicolas Coolman HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation HKCU\SOFTWARE\AppDataLow\Software\Crossrider =>Adware.CrossRider HKCU\SOFTWARE\AppDataLow\Software\Unity =>.Unity ---\\ Contenu des dossiers Programmes (368) - 34s O43 - CFD: 22/09/2016 - [] D -- C:\Program Files\Adobe =>.Adobe Systems Incorporated® O43 - CFD: 10/01/2016 - [] D -- C:\Program Files\AVG SafeGuard toolbar O43 - CFD: 23/10/2016 - [] D -- C:\Program Files\Blender Foundation =>.Blender Foundation O43 - CFD: 01/09/2016 - [] D -- C:\Program Files\ByteFence =>.Superfluous.ByteFence O43 - CFD: 18/09/2016 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation O43 - CFD: 14/09/2015 - [] D -- C:\Program Files\Controller O43 - CFD: 26/05/2016 - [] D -- C:\Program Files\Droid4Xext =>.Haiyu Dongxiang Co.,Ltd. O43 - CFD: 10/09/2015 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation O43 - CFD: 12/03/2016 - [] D -- C:\Program Files\Genymobile =>.Genymobile O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\Intel =>.Intel Corporation O43 - CFD: 15/04/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation O43 - CFD: 28/12/2015 - [] D -- C:\Program Files\KMSpico =>HackTool.KMSpico O43 - CFD: 01/09/2016 - [0] D -- C:\Program Files\McAfee =>.McAfee O43 - CFD: 10/09/2015 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation O43 - CFD: 01/09/2016 - [] D -- C:\Program Files\Microsoft Xbox 360 Accessories =>.Microsoft Corporation O43 - CFD: 22/03/2016 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation O43 - CFD: 26/05/2016 - [] D -- C:\Program Files\Oracle =>.Oracle O43 - CFD: 05/01/2017 - [] D -- C:\Program Files\Realtek =>.Realtek O43 - CFD: 22/03/2016 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation O43 - CFD: 08/05/2016 - [] D -- C:\Program Files\Sandboxie =>.Sandboxie O43 - CFD: 02/09/2016 - [] D -- C:\Program Files\Scarlet.Crush Production O43 - CFD: 05/01/2017 - [] D -- C:\Program Files\Synaptics =>.Synaptics O43 - CFD: 10/09/2015 - [] D -- C:\Program Files\Tracker Software =>.Tracker Software O43 - CFD: 19/01/2017 - [0] D -- C:\Program Files\TrueKey =>.Intel Corporation O43 - CFD: 22/08/2013 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation O43 - CFD: 15/04/2017 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files\Windows Multimedia Platform =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation O43 - CFD: 06/05/2017 - [] HD -- C:\Program Files\WindowsApps =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files\WindowsPowerShell =>.Microsoft Corporation O43 - CFD: 05/01/2017 - [] D -- C:\Program Files (x86)\360 =>.Qihu 360 Software O43 - CFD: 09/03/2017 - [0] D -- C:\Program Files (x86)\58C1C3AD_cacayima O43 - CFD: 02/04/2017 - [0] D -- C:\Program Files (x86)\58E0D56B_jumpeasy O43 - CFD: 15/04/2017 - [0] D -- C:\Program Files (x86)\58F1BDE5_jumpeasy O43 - CFD: 22/09/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated® O43 - CFD: 04/05/2017 - [0] D -- C:\Program Files (x86)\AlphaGo O43 - CFD: 12/03/2017 - [] D -- C:\Program Files (x86)\amuleCexx =>Adware.aMULEcustom O43 - CFD: 23/03/2017 - [] D -- C:\Program Files (x86)\amulell =>Adware.aMULEcustom O43 - CFD: 22/03/2016 - [] D -- C:\Program Files (x86)\BandiMPEG1 =>.Bandisoft O43 - CFD: 14/02/2017 - [0] D -- C:\Program Files (x86)\bilibili =>.Superfluous.Empty O43 - CFD: 27/09/2016 - [] D -- C:\Program Files (x86)\Camtel EVDO-Huawei =>.HUAWEI Technologies Co., Ltd.® O43 - CFD: 28/12/2015 - [] D -- C:\Program Files (x86)\CinemaP-1.9cV12.09 =>Adware.CrossRider O43 - CFD: 01/09/2016 - [] D -- C:\Program Files (x86)\Common Files =>.Microsoft Corporation O43 - CFD: 09/03/2017 - [0] D -- C:\Program Files (x86)\deskapp O43 - CFD: 05/01/2017 - [] D -- C:\Program Files (x86)\DriverPack Notifier =>.DriverPack Solution O43 - CFD: 14/10/2016 - [] D -- C:\Program Files (x86)\eAHPeNhIUJ {1121241CE1A18DB5D436DE6C5AD0162A462B} O43 - CFD: 29/04/2016 - [] D -- C:\Program Files (x86)\Elex-tech =>.Superfluous.Elex O43 - CFD: 04/05/2017 - [] AD -- C:\Program Files (x86)\Firefox =>.Mozilla Corporation O43 - CFD: 09/03/2016 - [] D -- C:\Program Files (x86)\Git =>.Global Information Technology O43 - CFD: 27/12/2015 - [] D -- C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate O43 - CFD: 07/01/2016 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 18/09/2015 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation O43 - CFD: 15/04/2017 - [] D -- C:\Program Files (x86)\Internet Explorer =>.Microsoft Corporation O43 - CFD: 03/03/2017 - [] D -- C:\Program Files (x86)\Legass =>.Google Inc® O43 - CFD: 10/09/2015 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation O43 - CFD: 13/12/2015 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [] D -- C:\Program Files (x86)\Microsoft Sync Framework =>.Microsoft Corporation O43 - CFD: 10/02/2016 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8 =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [] D -- C:\Program Files (x86)\Microsoft.NET =>.Microsoft Corporation O43 - CFD: 10/07/2016 - [] D -- C:\Program Files (x86)\MindSpinTech O43 - CFD: 14/02/2017 - [] D -- C:\Program Files (x86)\MIO =>.Mio O43 - CFD: 13/12/2015 - [] D -- C:\Program Files (x86)\Movie Maker 2.6 =>.Microsoft Corporation O43 - CFD: 08/02/2017 - [] D -- C:\Program Files (x86)\Mozilla Firefox =>.Mozilla O43 - CFD: 08/02/2017 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service =>.Mozilla O43 - CFD: 22/03/2016 - [] D -- C:\Program Files (x86)\MSBuild =>.Microsoft Corporation O43 - CFD: 08/05/2016 - [] D -- C:\Program Files (x86)\Nero =>.Ahead Corporation O43 - CFD: 24/12/2015 - [] D -- C:\Program Files (x86)\OLBPre =>PUP.Optional.MyPCBackup O43 - CFD: 16/09/2016 - [] D -- C:\Program Files (x86)\Origin =>.Electronic Arts, Inc. O43 - CFD: 11/07/2016 - [0] D -- C:\Program Files (x86)\Origin Games =>.Electronic Arts, Inc. O43 - CFD: 16/04/2017 - [] D -- C:\Program Files (x86)\Popcorn Time =>.Superfluous.PopcornTime O43 - CFD: 14/10/2016 - [0] D -- C:\Program Files (x86)\QQBrowser O43 - CFD: 22/03/2016 - [] D -- C:\Program Files (x86)\Reference Assemblies =>.Microsoft Corporation O43 - CFD: 07/05/2017 - [] D -- C:\Program Files (x86)\reports O43 - CFD: 12/09/2015 - [] D -- C:\Program Files (x86)\Tencent =>.Superfluous.Tencent O43 - CFD: 15/04/2017 - [0] D -- C:\Program Files (x86)\Terela O43 - CFD: 14/02/2017 - [] D -- C:\Program Files (x86)\unkbackup7z_00000000 O43 - CFD: 23/02/2017 - [] D -- C:\Program Files (x86)\unkbackup7z_00000001 O43 - CFD: 24/02/2017 - [] D -- C:\Program Files (x86)\unkbackup7z_00000002 O43 - CFD: 10/09/2015 - [] D -- C:\Program Files (x86)\VideoLAN =>.VideoLan Team O43 - CFD: 15/04/2017 - [] D -- C:\Program Files (x86)\Windows Defender =>.Microsoft Corporation O43 - CFD: 13/12/2015 - [] D -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Windows NT =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] D -- C:\Program Files (x86)\Windows Portable Devices =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [] SHD -- C:\Program Files (x86)\Windows Sidebar =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\WindowsPowerShell =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [] D -- C:\Program Files (x86)\WinRAR =>.WinRAR O43 - CFD: 23/02/2017 - [] D -- C:\Program Files (x86)\WinSnare(4.1.0) =>.Superfluous.WinSnare O43 - CFD: 02/04/2017 - [] D -- C:\Program Files (x86)\WinSnare(4.4.5) =>.Superfluous.WinSnare O43 - CFD: 05/01/2017 - [] D -- C:\Program Files (x86)\Wise =>.Legitimate O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\360 Security Center =>.360 Security Center O43 - CFD: 01/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation O43 - CFD: 16/09/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation O43 - CFD: 15/04/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 14/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Algobox =>.Algobox O43 - CFD: 23/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blender Foundation =>.Blender Foundation O43 - CFD: 27/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Camtel EVDO-Huawei O43 - CFD: 20/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Clavier+ =>.Guillaume Ryder O43 - CFD: 31/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite =>.DAEMON Tools O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Ultra =>.Daemon's Home O43 - CFD: 26/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Droid4X =>.Haiyu Dongxiang Co.,Ltd O43 - CFD: 21/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Démo de FIFA 16 =>.Electronic Arts, Inc. O43 - CFD: 06/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes =>.Elaborate Bytes O43 - CFD: 27/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15 =>.Electronic Arts, Inc. O43 - CFD: 08/05/2016 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation O43 - CFD: 09/03/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git =>.Global Information Technology O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico O43 - CFD: 22/08/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation O43 - CFD: 01/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Xbox 360 Accessories =>.Microsoft Corporation O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MotioninJoy =>.MotionInjoy O43 - CFD: 19/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero =>.Ahead Corporation O43 - CFD: 11/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2016 =>.Ahead Corporation O43 - CFD: 20/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ =>.Don Ho O43 - CFD: 18/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin =>.Electronic Arts, Inc. O43 - CFD: 10/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange 4 Pro O43 - CFD: 16/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time =>.Superfluous.PopcornTime O43 - CFD: 23/10/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RPG Maker VX O43 - CFD: 10/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint =>.Microsoft Corporation O43 - CFD: 01/09/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp =>.Microsoft Corporation O43 - CFD: 01/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation O43 - CFD: 09/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team O43 - CFD: 10/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Care 365 =>.WiseCleaner.com, Inc O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Program Uninstaller =>.Lespeed Technology Ltd O43 - CFD: 10/10/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件 O43 - CFD: 05/01/2017 - [] SHD -- C:\ProgramData\360Quarant =>.Qihu 360 Software Co., LTD O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\360safe =>.Qihu 360 Software O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\360TotalSecurity =>.Qihu 360 Software Co., LTD O43 - CFD: 12/09/2015 - [] D -- C:\ProgramData\4997GameBox_Data O43 - CFD: 12/09/2015 - [] D -- C:\ProgramData\adb O43 - CFD: 22/09/2016 - [] D -- C:\ProgramData\Adobe =>.Adobe O43 - CFD: 03/03/2017 - [] D -- C:\ProgramData\Apple =>.Apple Inc. O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation O43 - CFD: 24/09/2015 - [] D -- C:\ProgramData\Application Hosting O43 - CFD: 05/01/2017 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software O43 - CFD: 10/01/2016 - [] D -- C:\ProgramData\AVG SafeGuard toolbar O43 - CFD: 10/01/2016 - [] D -- C:\ProgramData\AVG Secure Search =>.AVG Secure Search O43 - CFD: 05/05/2017 - [] D -- C:\ProgramData\BIT O43 - CFD: 05/12/2015 - [] D -- C:\ProgramData\Blizzard Entertainment =>.Blizzard Entertainment O43 - CFD: 15/03/2016 - [] D -- C:\ProgramData\BluetoothPoint =>PUP.Optional.BluetoothPoint O43 - CFD: 23/09/2016 - [] D -- C:\ProgramData\boost_interprocess =>.boost.org O43 - CFD: 10/09/2015 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation O43 - CFD: 01/09/2016 - [0] D -- C:\ProgramData\ByteFence =>.Superfluous.ByteFence O43 - CFD: 27/09/2016 - [] D -- C:\ProgramData\Camtel EVDO-Huawei O43 - CFD: 10/01/2016 - [] HD -- C:\ProgramData\Common Files =>.Microsoft Corporation O43 - CFD: 31/08/2016 - [] D -- C:\ProgramData\DAEMON Tools Lite =>.DAEMON Tools O43 - CFD: 27/09/2016 - [] D -- C:\ProgramData\DatacardService =>.Entriq, Inc. O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation O43 - CFD: 03/10/2015 - [] D -- C:\ProgramData\EA Core =>.Electronic Arts, Inc. O43 - CFD: 01/04/2016 - [] D -- C:\ProgramData\eAHPeNhIUJ O43 - CFD: 13/05/2016 - [] D -- C:\ProgramData\Electronic Arts =>.Electronic Arts O43 - CFD: 09/03/2016 - [] D -- C:\ProgramData\Git =>.Global Information Technology O43 - CFD: 09/10/2016 - [] D -- C:\ProgramData\HP =>.Hewlett-Packard O43 - CFD: 12/09/2015 - [0] D -- C:\ProgramData\IQIYI Video =>.Superfluous.IQIYIVideo O43 - CFD: 15/09/2015 - [] D -- C:\ProgramData\KingSoft =>.Kingosoft Technology Ltd O43 - CFD: 01/09/2016 - [] D -- C:\ProgramData\McAfee =>.McAfee O43 - CFD: 10/09/2015 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation O43 - CFD: 13/12/2015 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation O43 - CFD: 14/04/2017 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation O43 - CFD: 23/01/2017 - [] D -- C:\ProgramData\Nero =>.Ahead Corporation O43 - CFD: 24/03/2017 - [] D -- C:\ProgramData\Origin =>.Electronic Arts, Inc. O43 - CFD: 22/09/2016 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation O43 - CFD: 29/12/2015 - [0] D -- C:\ProgramData\PCMGR O43 - CFD: 19/01/2016 - [] D -- C:\ProgramData\RapidSolution =>.RapidSolution O43 - CFD: 22/09/2016 - [] D -- C:\ProgramData\regid.1986-12.com.adobe =>.Adobe Inc. O43 - CFD: 01/11/2015 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft =>.Microsoft Corporation O43 - CFD: 03/10/2015 - [] D -- C:\ProgramData\Solidshield =>.Solidshield Technologies O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation O43 - CFD: 23/10/2016 - [] AD -- C:\ProgramData\TEMP =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation O43 - CFD: 09/12/2015 - [] D -- C:\ProgramData\Tencent =>.Superfluous.Tencent O43 - CFD: 26/05/2016 - [] D -- C:\ProgramData\Thunder Network =>.Thunder Network O43 - CFD: 12/12/2015 - [0] D -- C:\ProgramData\TXPCMGR O43 - CFD: 06/05/2017 - [] D -- C:\ProgramData\TXQMPC O43 - CFD: 16/09/2015 - [] D -- C:\ProgramData\uiksdl201591216 O43 - CFD: 30/05/2016 - [] D -- C:\ProgramData\uwinpu O43 - CFD: 22/09/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe =>.Adobe O43 - CFD: 28/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Alphala O43 - CFD: 05/01/2017 - [] D -- C:\Program Files (x86)\Common Files\AV =>.Avast O43 - CFD: 10/01/2016 - [] D -- C:\Program Files (x86)\Common Files\AVG Secure Search =>.AVG Secure Search O43 - CFD: 13/10/2015 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER =>.Designer O43 - CFD: 21/05/2016 - [] HD -- C:\Program Files (x86)\Common Files\EAInstaller =>.Electronic Arts, Inc. O43 - CFD: 18/09/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel =>.Intel Corporation O43 - CFD: 07/11/2015 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared =>.Microsoft Corporation O43 - CFD: 08/05/2016 - [] D -- C:\Program Files (x86)\Common Files\Nero =>.Ahead Corporation O43 - CFD: 22/08/2013 - [] D -- C:\Program Files (x86)\Common Files\Services =>.Microsoft Corporation O43 - CFD: 14/04/2017 - [] D -- C:\Program Files (x86)\Common Files\System =>.Microsoft Corporation O43 - CFD: 10/10/2015 - [] D -- C:\Program Files (x86)\Common Files\Tencent =>.Superfluous.Tencent O43 - CFD: 13/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Windows Live =>.Microsoft Corporation O43 - CFD: 28/12/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\0V1L2Z2Z1T1I1L1T =>Adware.InstallCore O43 - CFD: 05/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\360safe =>.Qihu 360 Software O43 - CFD: 05/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\360TotalSecurity =>.Qihu 360 Software Co., LTD O43 - CFD: 09/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\4D =>.4D O43 - CFD: 22/09/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Adobe =>.Adobe O43 - CFD: 23/03/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\aMule =>Adware.aMULEcustom O43 - CFD: 09/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Apple Computer =>.Apple Inc. O43 - CFD: 22/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\BANDISOFT =>.Bandisoft O43 - CFD: 07/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\BitTorrent O43 - CFD: 23/10/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Blender Foundation =>.Blender Foundation O43 - CFD: 19/01/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Canneverbe Limited =>.Canneverbe Limited O43 - CFD: 28/12/2015 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\cpuminer =>PUP.Optional.CPUminer O43 - CFD: 05/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\DAEMON Tools Lite =>.DAEMON Tools O43 - CFD: 13/02/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\DAEMON Tools Ultra =>.Daemon's Home O43 - CFD: 05/01/2017 - [] AD -- C:\Users\TOSHIBA-PC\AppData\Roaming\DriverPack Notifier =>.DriverPack Solution O43 - CFD: 05/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\DRPSu =>.Driver PackSolution O43 - CFD: 01/04/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\eCyber =>.Superfluous.Elex O43 - CFD: 29/04/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Elex-tech =>.Superfluous.Elex O43 - CFD: 05/03/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\EurekaLog =>.EurekaLog O43 - CFD: 17/02/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Firefox =>.Mozilla Corporation O43 - CFD: 26/05/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\HaiYuInst O43 - CFD: 01/11/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Identities =>.Microsoft Corporation O43 - CFD: 25/05/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\IQIYI Video =>.Superfluous.IQIYIVideo O43 - CFD: 04/05/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Jihosoft ISO Maker O43 - CFD: 15/04/2017 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Kyubey =>Adware.CrossRider O43 - CFD: 12/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Macromedia =>.Macromedia O43 - CFD: 26/02/2017 - [] SD -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft =>.Microsoft Corporation O43 - CFD: 25/08/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\MotioninJoy =>.MotionInjoy O43 - CFD: 22/10/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Mozilla =>.Mozilla Corporation O43 - CFD: 19/01/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Nero =>.Ahead Corporation O43 - CFD: 20/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Notepad++ =>.Don Ho O43 - CFD: 12/02/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\OnLive App O43 - CFD: 24/12/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Opera Software =>.Opera Software O43 - CFD: 11/03/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Origin =>.Electronic Arts, Inc. O43 - CFD: 19/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\PDAppFlex O43 - CFD: 22/05/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\ppslog O43 - CFD: 20/02/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Quietzone O43 - CFD: 24/12/2015 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\SimpleFiles =>PUP.Optional.SimpleFiles O43 - CFD: 10/09/2015 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Smadav =>.SmadAV O43 - CFD: 29/11/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\SpinTop O43 - CFD: 01/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Synaptics =>.Synaptics O43 - CFD: 11/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Tencent =>.Superfluous.Tencent O43 - CFD: 08/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Theta O43 - CFD: 19/04/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Tunngle =>.Tunngle.net O43 - CFD: 07/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\uTorrent O43 - CFD: 06/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\vlc =>.VideoLan Team O43 - CFD: 11/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Wakanda Controller O43 - CFD: 10/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Wakanda Enterprise Studio O43 - CFD: 13/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\WB_CFG O43 - CFD: 14/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\wenguanjia O43 - CFD: 10/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\WinRAR =>.WinRAR O43 - CFD: 05/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\WinSAPSvc =>PUP.Optional.Youndoo O43 - CFD: 09/03/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\WinSnare =>.Superfluous.WinSnare O43 - CFD: 06/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Wise Care 365 =>.WiseCleaner.com, Inc O43 - CFD: 05/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Wise Uninstaller =>.Lespeed Technology Ltd O43 - CFD: 05/01/2017 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\WiseUpdate =>.WiseCleaner Inc. O43 - CFD: 12/12/2015 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Wondershare Video Converter Ultimate =>.Wondershare Inc. O43 - CFD: 14/10/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\xm1 =>.Canon Inc. O43 - CFD: 07/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 12/12/2015 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A} O43 - CFD: 20/02/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108 O43 - CFD: 12/09/2015 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\70DD1CD0-A7EB-40F8-A8C8-97AEE8EDD191 O43 - CFD: 06/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Adobe =>.Adobe O43 - CFD: 09/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Apple Computer =>.Apple Inc. O43 - CFD: 10/09/2015 - [0] SHD -- C:\Users\TOSHIBA-PC\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 10/01/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\AVG SafeGuard toolbar O43 - CFD: 05/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault O43 - CFD: 12/11/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Ball Component O43 - CFD: 05/12/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Battle.net =>.Games Software O43 - CFD: 05/12/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Blizzard Entertainment =>.Blizzard Entertainment O43 - CFD: 24/05/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\BlueStacks =>.BlueStack Systems, Inc. O43 - CFD: 02/01/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\CEF =>.CEF O43 - CFD: 19/01/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\CrashRpt =>.Superfluous.CrashReports O43 - CFD: 27/04/2017 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Diagnostics =>.Microsoft Corporation O43 - CFD: 31/08/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Disc_Soft_Ltd =>.Disc Soft Ltd O43 - CFD: 17/04/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\DriverTuner =>.Superfluous.DriverTuner O43 - CFD: 24/08/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Droid4X =>.Haiyu Dongxiang Co.,Ltd O43 - CFD: 02/05/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\eAHPeNhIUJ O43 - CFD: 19/03/2017 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation O43 - CFD: 17/02/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Firefox =>.Mozilla Corporation O43 - CFD: 08/05/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Genymobile =>.Genymobile O43 - CFD: 12/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate O43 - CFD: 15/02/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Google =>.Google O43 - CFD: 18/12/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\GWX =>.GWX O43 - CFD: 10/09/2015 - [0] SHD -- C:\Users\TOSHIBA-PC\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 04/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Kitty O43 - CFD: 03/03/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Legass O43 - CFD: 12/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Macromedia =>.Macromedia O43 - CFD: 12/10/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Mart Kit O43 - CFD: 24/08/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Mega Limited =>.MEGA Limited O43 - CFD: 02/12/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\MEGAsync =>.MegaSystems O43 - CFD: 10/03/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 04/11/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 19/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Movavi =>.Movavi O43 - CFD: 22/10/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Mozilla =>.Mozilla Corporation O43 - CFD: 05/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\mpress =>.MPress O43 - CFD: 24/12/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Opera Software =>.Opera Software O43 - CFD: 16/09/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Origin =>.Electronic Arts, Inc. O43 - CFD: 19/06/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Packages =>.Microsoft Corporation O43 - CFD: 16/04/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\PopcornTime =>.Superfluous.PopcornTime O43 - CFD: 10/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Programs =>.Microsoft Corporation O43 - CFD: 22/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Prompt Downloader O43 - CFD: 19/01/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\RapidSolution =>.RapidSolution O43 - CFD: 19/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\screencapture =>.ScreenCapture.com O43 - CFD: 19/03/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\ScreenCaptureStudio =>.ScreenCapture.com O43 - CFD: 13/04/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\SNARE O43 - CFD: 12/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\SysassistByHotWheel =>PUP.Optional.Generic O43 - CFD: 07/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [0] SHD -- C:\Users\TOSHIBA-PC\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 22/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign0ed3e739d1e455a6 =>.Superfluous.Temporary O43 - CFD: 22/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign1264b81c492d34b0 =>.Superfluous.Temporary O43 - CFD: 24/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign133f32e3d3e277b1 =>.Superfluous.Temporary O43 - CFD: 22/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign1bc8dca6cf628e10 =>.Superfluous.Temporary O43 - CFD: 22/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign3db9e1c43b308eb7 =>.Superfluous.Temporary O43 - CFD: 22/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign4b47e0cedd282958 =>.Superfluous.Temporary O43 - CFD: 24/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign4bd12f93fd920e9a =>.Superfluous.Temporary O43 - CFD: 29/10/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign5f7ab8db72eb1bff =>.Superfluous.Temporary O43 - CFD: 24/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign7735845a940be252 =>.Superfluous.Temporary O43 - CFD: 22/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsigna0864c2090947050 =>.Superfluous.Temporary O43 - CFD: 29/10/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsignb71ab54e7543c80c =>.Superfluous.Temporary O43 - CFD: 25/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsignf8ad2622649b2f2f =>.Superfluous.Temporary O43 - CFD: 25/09/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsignfe3bcdbc82d04c24 =>.Superfluous.Temporary O43 - CFD: 07/11/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Tracker Software =>.Tracker Software O43 - CFD: 12/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Unity =>.Unity O43 - CFD: 12/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\VirtualStore =>.Microsoft Corporation O43 - CFD: 05/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\WANARE O43 - CFD: 02/05/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Windows Live =>.Microsoft Corporation O43 - CFD: 18/02/2016 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\WMTools Downloaded Files =>.WMTools O43 - CFD: 12/12/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\Wondershare =>.Wondershare O43 - CFD: 16/04/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\XBOX360_ISO_Extract O43 - CFD: 07/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Local\ZHP =>.Nicolas Coolman O43 - CFD: 10/09/2015 - [0] D -- C:\Users\TOSHIBA-PC\AppData\Local\Programs\Common =>.Microsoft Corporation O43 - CFD: 05/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\360 Security Center =>.360 Security Center O43 - CFD: 05/01/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\7k7k游戏盒子(912) O43 - CFD: 22/08/2013 - [] RD -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [] RD -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation O43 - CFD: 17/10/2016 - [] RD -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 23/03/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC =>Adware.aMULEcustom O43 - CFD: 22/08/2013 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation O43 - CFD: 24/08/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync =>.MegaSystems O43 - CFD: 05/05/2017 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [] RD -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR O43 - CFD: 19/01/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\文管家(912) O43 - CFD: 03/12/2016 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\爱奇艺 O43 - CFD: 10/10/2015 - [] D -- C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件 O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation O43 - CFD: 30/09/2013 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 12/10/2015 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 10/09/2015 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation O43 - CFD: 30/09/2013 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 12/10/2015 - [0] D -- C:\Users\Default User\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 22/08/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 13/05/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Local\eAHPeNhIUJ O43 - CFD: 12/09/2015 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 12/01/2017 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\360safe =>.Qihu 360 Software O43 - CFD: 03/04/2016 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation O43 - CFD: 13/09/2015 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Mozilla =>.Mozilla Corporation O43 - CFD: 14/02/2017 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Tencent =>.Superfluous.Tencent O43 - CFD: 26/05/2016 - [] -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Uncheckit =>.Superfluous.Elex ---\\ Derniers fichiers créés dans Windows Prefetcher (6) - 10s O45 - LFCP:[MD5.2A871F06901DA8E40440198E4151BF8E] 05/01/2017 A -- C:\Windows\Prefetch\KMS-R@1NHOOK.EXE-18725FF6.pf =>HackTool.AutoKMS O45 - LFCP:[MD5.03071BF9056047D6E9496243DEDD0F00] 05/01/2017 A -- C:\Windows\Prefetch\TENCENTDL.EXE-C83FB433.pf =>.Superfluous.Tencent O45 - LFCP:[MD5.F04F4D9C2749793FE666D0E4E5F116E9] 05/01/2017 A -- C:\Windows\Prefetch\UNCHECKITBSN.EXE-33B57A7E.pf =>.Superfluous.Elex O45 - LFCP:[MD5.6BCCF40B57302C84070FA7531191E136] 05/01/2017 A -- C:\Windows\Prefetch\UNCHECKITHELPER.EXE-3F106257.pf =>.Superfluous.Elex O45 - LFCP:[MD5.7F96C683EC413F08EE7702343B3C7DFC] 05/01/2017 A -- C:\Windows\Prefetch\UNCHECKITSVC.EXE-20564D03.pf =>.Superfluous.Elex O45 - LFCP:[MD5.A56B74A2345721E6283A98C13B898CE2] 01/09/2016 A -- C:\Windows\Prefetch\WINZIPER.EXE-C207A8A3.pf =>.Superfluous.WinZipper ---\\ ShellIconOverlayIdentifiers (SIOI) (8) - 0s O106 - SIOI:  MEGA (Pending) [ MEGA (Pending)] - {056D528D-CE28-4194-9BA3-BA2E9197FF8C}. (...) -- C:\Users\TOSHIBA-PC\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI:  MEGA (Synced) [ MEGA (Synced)] - {05B38830-F4E9-4329-978B-1DD28605D202}. (...) -- C:\Users\TOSHIBA-PC\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI:  MEGA (Syncing) [ MEGA (Syncing)] - {0596C850-7BDD-4C9D-AFDF-873BE6890637}. (...) -- C:\Users\TOSHIBA-PC\AppData\Local\MEGAsync\ShellExtX32.dll O106 - SIOI: Groove Explorer Icon Overlay 1 (GFS Unread Stub) [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] - {99FD978C-D287-4F50-827F-B2C658EDA8E7}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2 (GFS Stub) [Groove Explorer Icon Overlay 2 (GFS Stub)] - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] - {920E6DB1-9907-4370-B3A0-BAFC03D81399}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 3 (GFS Folder) [Groove Explorer Icon Overlay 3 (GFS Folder)] - {16F3DD56-1AF5-4347-846D-7C10C4192619}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® O106 - SIOI: Groove Explorer Icon Overlay 4 (GFS Unread Mark) [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation® ---\\ Image File Execution Options (16) - 1s O50 - IFEO:C:\Windows\System32\cscript.exe - (.Microsoft Corporation - Microsoft ® Console Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\dllhost.exe - (.Microsoft Corporation - COM Surrogate.) [DisableExceptionChainValidation\\3] =>.Microsoft Windows® O50 - IFEO:C:\Windows\System32\drvinst.exe - (.Microsoft Corporation - Module d’installation de pilotes.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\mmc.exe - (.Microsoft Corporation - Microsoft Management Console.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\rundll32.exe - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\searchprotocolhost.exe - (.Microsoft Corporation - Microsoft Windows Search Protocol Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation O50 - IFEO:C:\Windows\System32\wscript.exe - (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) [DisableExceptionChainValidation\\3] =>.Microsoft Corporation ---\\ Liste des pilotes du système (82) - 11s O58 - SDL:2016/09/01 12:43:07 A . (.360.cn - 360安全卫士 网络防黑模块.) -- C:\Windows\System32\drivers\360AntiHacker64.sys [151784] =>.Qihoo 360 Software (Beijing) Company Limited® O58 - SDL:2016/09/01 12:43:07 A . (.360.cn - 360杀毒 文件监控驱动.) -- C:\Windows\System32\drivers\360AvFlt.sys [86248] =>.Qihoo 360 Software (Beijing) Company Limited® O58 - SDL:2016/12/30 08:22:46 A . (.360.cn - 360Box64.) -- C:\Windows\System32\drivers\360Box64.sys [330472] =>.Qihoo 360 Software (Beijing) Company Limited® O58 - SDL:2016/09/01 12:43:07 A . (.360.cn - 360安全卫士 木马防火墙模块.) -- C:\Windows\System32\drivers\360Camera64.sys [40520] =>.Qihoo 360 Software (Beijing) Company Limited® O58 - SDL:2016/09/01 12:43:06 A . (.360.cn - 360 Total Security.) -- C:\Windows\System32\drivers\360fsflt.sys [391392] =>.QIHU 360 SOFTWARE CO. LIMITED® O58 - SDL:2013/08/22 13:43:41 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\Windows\System32\drivers\3ware.sys [108896] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:41 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\Windows\System32\drivers\adp80xx.sys [782176] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:41 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [79200] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:41 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [259424] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:40 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [25952] =>.Microsoft Windows® O58 - SDL:2014/09/17 15:43:30 A . (.Tencent - Tencent TAntiRK.) -- C:\Windows\System32\drivers\AntiRkX64.sys [38200] =>.Superfluous.Tencent O58 - SDL:2013/08/22 13:43:41 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [114016] =>.Microsoft Windows® O58 - SDL:2016/10/24 22:19:38 A . (.AVAST Software - Home Network Security.) -- C:\Windows\System32\drivers\aswHdsKe.sys [78840] =>.AVAST Software s.r.o.® O58 - SDL:2016/12/30 08:22:46 A . (.360.cn - BAPIDRV.) -- C:\Windows\System32\drivers\BAPIDRV64.SYS [188864] =>.Qihoo 360 Software (Beijing) Company Limited® O58 - SDL:2013/08/13 00:25:46 A . (.Windows (R) Win 7 DDK provider - BCM Function 2 Device Driver.) -- C:\Windows\System32\drivers\bcmfn2.sys [17624] =>.Broadcom Corporation® O58 - SDL:2015/12/18 02:14:06 A . (.Broadcom Corporation. - Broadcom SMBus Controller Driver.) -- C:\Windows\System32\drivers\bcmsmbsp.sys [54552] =>.Broadcom Corporation® O58 - SDL:2013/08/22 13:43:41 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [531296] =>.Microsoft Windows® O58 - SDL:2016/08/31 11:17:45 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual SCSI Bus Driver.) -- C:\Windows\System32\drivers\dtlitescsibus.sys [30264] =>.Disc Soft Ltd® O58 - SDL:2016/08/31 11:17:55 A . (.Disc Soft Ltd - DAEMON Tools Lite Virtual USB Bus Driver.) -- C:\Windows\System32\drivers\dtliteusbbus.sys [47672] =>.Disc Soft Ltd® O58 - SDL:2016/02/13 15:37:23 A . (.Disc Soft Ltd - DAEMON Tools Ultra Virtual SCSI Bus Driver.) -- C:\Windows\System32\drivers\dtultrascsibus.sys [30264] =>.Disc Soft Ltd® O58 - SDL:2016/02/13 15:37:30 A . (.Disc Soft Ltd - DAEMON Tools Ultra Virtual USB Bus Driver.) -- C:\Windows\System32\drivers\dtultrausbbus.sys [47672] =>.Disc Soft Ltd® O58 - SDL:2014/12/20 23:31:04 A . (.Elaborate Bytes AG - ElbyCD Windows x64 I/O driver.) -- C:\Windows\System32\drivers\ElbyCDIO.sys [40344] =>.Elaborate Bytes AG® O58 - SDL:2013/08/22 13:43:45 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3357024] =>.Microsoft Windows® O58 - SDL:2016/09/27 19:57:02 A . (.Huawei Tech. Co., Ltd. - HUAWEI USB Smart Card Driver.) -- C:\Windows\System32\drivers\ewdcsc.sys [32768] =>.Huawei Tech. Co., Ltd. O58 - SDL:2016/09/27 19:57:02 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ewusbmdm.sys [222464] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:02 A . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\Windows\System32\drivers\ewusbwwan.sys [415744] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:03 A . (.Huawei Technologies Co., Ltd. - ew_hwupgrade Driver.) -- C:\Windows\System32\drivers\ew_hwupgrade.sys [22016] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:03 A . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\ew_hwusbdev.sys [117248] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:03 A . (.Huawei Technologies Co., Ltd. - ew_jubusenum Driver.) -- C:\Windows\System32\drivers\ew_jubusenum.sys [86016] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:04 A . (.Huawei Technologies Co., Ltd. - ew_jucdcacm Driver.) -- C:\Windows\System32\drivers\ew_jucdcacm.sys [98816] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:04 A . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\drivers\ew_jucdcecm.sys [69632] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:04 A . (.Huawei Technologies Co., Ltd. - ew_juextctrl Driver.) -- C:\Windows\System32\drivers\ew_juextctrl.sys [28672] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:04 A . (.Huawei Technologies Co., Ltd. - ew_jucdcndis Driver.) -- C:\Windows\System32\drivers\ew_juwwanecm.sys [212992] =>.Huawei Technologies Co., Ltd. O58 - SDL:2016/09/27 19:57:05 A . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\Windows\System32\drivers\ew_usbenumfilter.sys [13952] =>.Huawei Technologies Co., Ltd. O58 - SDL:2012/07/17 18:12:08 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [62784] =>.Intel Corporation® O58 - SDL:2013/08/22 13:43:45 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [64352] =>.Microsoft Windows® O58 - SDL:2013/07/30 19:47:35 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_GPIO.sys [24568] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2013/07/25 20:05:39 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\Windows\System32\drivers\iaLPSSi_I2C.sys [99320] =>.Intel Corporation - Software and Firmware Products® O58 - SDL:2015/05/29 15:05:32 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStorA.sys [646408] =>.Intel Corporation - Rapid Storage Technology® O58 - SDL:2013/08/10 01:39:30 A . (.Intel Corporation - Intel Rapid Storage Technology driver (inbo.) -- C:\Windows\System32\drivers\iaStorAV.sys [651248] =>.Intel Corporation - Intel® Rapid Storage Technology® O58 - SDL:2013/08/22 13:43:45 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [412000] =>.Microsoft Windows® O58 - SDL:2016/05/12 14:49:30 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [3793872] =>.Intel(R) pGFX® O58 - SDL:2015/08/21 11:50:48 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [463112] =>.Intel Corporation - Client Components Group® O58 - SDL:2015/12/01 20:46:03 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\intelaud.sys [50160] =>.Intel(R) Wireless Display® O58 - SDL:2016/05/23 03:41:44 A . (.Elex do Brasil Participações Ltda - iSafe Kernel Boot Driver.) -- C:\Windows\System32\drivers\iSafeKrnlBoot.sys [55056] =>.Superfluous.Elex O58 - SDL:2016/05/19 07:42:01 A . (.Elex do Brasil Participações Ltda - iSafeNetFilter SDK WFP Driver (WPP).) -- C:\Windows\System32\drivers\iSafeNetFilter.sys [52392] =>.Superfluous.Elex O58 - SDL:2015/12/01 20:46:03 A . (.Intel Corporation - Intel® WiDi Solution.) -- C:\Windows\System32\drivers\iwdbus.sys [38896] =>.Intel(R) Wireless Display® O58 - SDL:2013/08/22 13:43:44 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [109408] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [93536] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:44 A . (.LSI Corporation - LSI SAS Gen3 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas3.sys [81760] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sss.sys [82784] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [56672] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:45 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\megasr.sys [575840] =>.Microsoft Windows® O58 - SDL:2016/09/27 19:57:05 A . (.DiBcom SA - DiBcom AVSTREAM BDA driver.) -- C:\Windows\System32\drivers\mod7700.sys [1001472] =>.DiBcom SA O58 - SDL:2013/08/22 13:43:49 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\Windows\System32\drivers\mvumis.sys [63840] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:31 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [150368] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:32 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [168288] =>.Microsoft Windows® O58 - SDL:2015/10/21 07:04:25 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30 64-bit Dr.) -- C:\Windows\System32\drivers\Rt630x64.sys [886016] =>.Realtek Semiconductor Corp® O58 - SDL:2016/10/07 05:42:28 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [5344264] =>.Realtek Semiconductor Corp.® O58 - SDL:2015/05/27 12:13:22 A . (.Realsil Semiconductor Corporation - RTS USB READER Driver.) -- C:\Windows\System32\drivers\RtsUer.sys [402136] =>.Realtek Semiconductor Corp® O58 - SDL:2015/01/06 10:41:22 A . (.Realtek Semiconductor Corporation - Realtek PCIE NDIS Driver 33736.) -- C:\Windows\System32\drivers\rtwlane.sys [3737304] =>.Realtek Semiconductor Corp® O58 - SDL:2013/05/19 09:02:50 A . (.Scarlet.Crush Productions - Scp Virtual Bus Driver.) -- C:\Windows\System32\drivers\ScpVBus.sys [39168] =>.Bruce James® O58 - SDL:2013/08/22 16:35:09 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2013/08/22 13:43:31 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [44896] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:32 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [81760] =>.Microsoft Windows® O58 - SDL:2016/09/23 15:13:51 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB Composite Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudbus.sys [99384] =>.Samsung Electronics CO., LTD.® O58 - SDL:2014/01/22 08:52:10 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG Android Modem Device Driver (MSS Ve.) -- C:\Windows\System32\drivers\ssudmdm.sys [206080] =>.DEVGURU CO LTD® O58 - SDL:2013/08/22 13:43:32 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\Windows\System32\drivers\stexstor.sys [31072] =>.Microsoft Windows® O58 - SDL:2015/09/12 17:14:19 A . (.Tencent - 电脑管家-TAO游戏启动加速驱动.) -- C:\Windows\System32\drivers\TAOAccelerator64.sys [99640] =>.Superfluous.Tencent O58 - SDL:2015/09/12 17:14:19 A . (.Tencent Technology(Shenzhen) Company Limited - TAOKernel.) -- C:\Windows\System32\drivers\TAOKernel64.sys [174392] =>.Superfluous.Tencent O58 - SDL:2015/12/21 17:01:36 A . (.Tunngle.net - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\drivers\tap0901t.sys [47736] =>.Tunngle.net GmbH® O58 - SDL:2016/03/29 06:01:56 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\TeeDriverW8x64.sys [186424] =>.Intel(R) Embedded Subsystems and IP Blocks Group® O58 - SDL:2015/09/12 17:14:20 A . (.电脑管家 - 电脑管家-驱动模块.) -- C:\Windows\System32\drivers\TFsFltX64.sys [87864] =>.Superfluous.Tencent O58 - SDL:2013/08/19 12:32:10 A . (.Windows (R) Win 7 DDK provider - Toshiba Hotkey Driver.) -- C:\Windows\System32\drivers\Thotkey.sys [32624] =>.TOSHIBA CORPORATION® O58 - SDL:2013/08/15 01:13:32 A . (.TOSHIBA Corporation - TOSHIBA ACPI-Based Value Added Logical and.) -- C:\Windows\System32\drivers\TVALZ_O.SYS [32832] =>.TOSHIBA CORPORATION® O58 - SDL:2014/05/16 14:04:46 A . (.Oracle Corporation - VirtualBox Support Driver.) -- C:\Windows\System32\drivers\VBoxDrv.sys [254240] =>.Oracle Corporation® O58 - SDL:2013/04/12 11:41:28 A . (.Oracle Corporation - VirtualBox Host-Only Network Adapter Driver.) -- C:\Windows\System32\drivers\VBoxNetAdp.sys [131856] =>.Oracle Corporation® O58 - SDL:2013/04/12 11:40:18 A . (.Oracle Corporation - VirtualBox USB Monitor Driver.) -- C:\Windows\System32\drivers\VBoxUSBMon.sys [120080] =>.Oracle Corporation® O58 - SDL:2014/05/03 17:53:40 A . (.Elaborate Bytes AG - Virtual CloneDrive storage miniport.) -- C:\Windows\System32\drivers\VClone.sys [34816] =>.Elaborate Bytes AG O58 - SDL:2013/08/22 13:43:34 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [19808] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:34 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [168800] =>.Microsoft Windows® O58 - SDL:2013/08/22 13:43:34 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\Windows\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Windows® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (22) - 31s O61 - LFC: 2017/05/03 15:34:34 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\bf.dll [323584] O61 - LFC: 2017/05/02 09:56:39 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\ccv_blob.bin [174592] O61 - LFC: 2017/05/02 10:59:56 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\cfs_blob.bin [417280] O61 - LFC: 2017/05/03 07:30:56 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\cfsa_blob.bin [365056] O61 - LFC: 2017/05/02 09:56:33 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\fcv_blob.bin [53968] O61 - LFC: 2017/05/02 09:56:28 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\icv_blob.bin [68304] O61 - LFC: 2017/05/02 09:53:18 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Local\background_fault\wb_blob.bin [356352] O61 - LFC: 2017/05/04 15:00:10 A . (.kitty.) -- C:\Users\TOSHIBA-PC\AppData\Local\Kitty\Kitty.dll [124928] =>.Superfluous.Elex O61 - LFC: 2017/05/06 12:59:08 A . (.Copyright © 2013.) -- C:\Users\TOSHIBA-PC\AppData\Local\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\AC\Microsoft\CLR_v4.0\NativeImages\OzComponent\b8e5b7717898766f1769604e3f948ff9\OzComponent.ni.dll [1617920] O61 - LFC: 2017/05/06 12:59:00 A . (.Copyright © 2012.) -- C:\Users\TOSHIBA-PC\AppData\Local\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\AC\Microsoft\CLR_v4.0\NativeImages\PSExpress\d3c48272faaf424229eebf4345ce7352\PSExpress.ni.exe [2078720] O61 - LFC: 2017/05/06 12:59:01 A . (.Copyright © 2012.) -- C:\Users\TOSHIBA-PC\AppData\Local\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\AC\Microsoft\CLR_v4.0\NativeImages\PSExpressUtf6b179d3#\b949e7e2e72ade07f324af085091b528\PSExpressUtilityComponent.ni.dll [238080] O61 - LFC: 2017/05/06 12:59:02 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Local\Packages\AdobeSystemsIncorporated.AdobePhotoshopExpress_ynb6jyjzte8ga\AC\Microsoft\CLR_v4.0\NativeImages\PSXEditor\3a09e0c6ec2f9f49ce2861688f2c9aba\PSXEditor.ni.dll [92160] O61 - LFC: 2017/05/05 09:52:20 A . (.InterSect Alliance Pty Ltd.) -- C:\Users\TOSHIBA-PC\AppData\Local\WANARE\Snare.dll [826368] =>.Superfluous.InterSectAlliance O61 - LFC: 2017/05/04 20:50:52 A . (.Tencent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\Tencent\QQPhoneManager\Components\QQDownload\dlcore.dll [2031160] =>.Superfluous.Tencent O61 - LFC: 2017/05/04 20:50:52 A . (.Tencent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\Tencent\QQPhoneManager\Components\QQDownload\DownloadProxyPS.dll [69176] =>.Superfluous.Tencent O61 - LFC: 2017/05/04 20:50:52 A . (.Tencent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\Tencent\QQPhoneManager\Components\QQDownload\extract.dll [367480] =>.Superfluous.Tencent O61 - LFC: 2017/05/04 20:50:52 A . (.Tencent.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\Tencent\QQPhoneManager\Components\QQDownload\Tencentdl.exe [904760] =>.Superfluous.Tencent O61 - LFC: 2017/05/04 20:50:52 A . (.Tencent Technology(Shenzhen) Company Limited.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\Tencent\QQPhoneManager\Components\QQDownload\tnproxy.dll [724536] =>.Superfluous.Tencent O61 - LFC: 2017/05/06 23:47:24 A . (..) -- C:\Users\TOSHIBA-PC\AppData\Roaming\Tencent\Security001\63-62439.exe [120128] =>.Superfluous.Tencent O61 - LFC: 2017/05/05 10:16:00 A . (.WinSAP.) -- C:\Users\TOSHIBA-PC\AppData\Roaming\WinSAPSvc\WinSAP.dll [603648] =>PUP.Optional.Youndoo O61 - LFC: 2017/05/06 17:50:48 A . (..) -- C:\Users\TOSHIBA-PC\Desktop\virtual-clonedrive_5-5-0-0_fr_79406.exe [1710680] {11211328B7810C4738934044B50103E130E8} O61 - LFC: 2017/05/06 22:20:06 A . (..) -- C:\Users\TOSHIBA-PC\Documents\FIFA 15\instance0\replay0.bin [536870912] ---\\ Associations Shell Spawning (11) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Legass\Application\chrome.exe =>.Google Inc® ---\\ Menu de démarrage Internet (12) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.startpageing123.com/ =>Hijacker.StartpageIng123 O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- c:\program files\internet explorer\iexplore.exe http://www.startpageing123.com/ =>Hijacker.StartpageIng123 O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation ---\\ Recherche d'infection sur les navigateurs (6) - 0s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKCU] {33BB0A4E-99AF-4226-BDF6-49120163DE86} - (ourluckysites) - http://www.ourluckysites.com/ O69 - SBI: SearchScopes [HKCU] {A060E7FB-91F5-4c7c-BD0F-4A11A581D878} [DefaultScope] - (百度搜索) - http://www.baidu.com/ O69 - SBI: SearchScopes [HKLM] ielnksrch - (Search the web) - http://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBUTwkzwGbNf1Vk6jjLaGEvVnv4Khpo1QAKuj9TPBsqu4FVSEE4tzJuMSs067Ou0G6vAlCNK69OoeXafxb3wJeMRv8T3Lms-nMmsybRe3LZOMIcwfLH7v1xezL4k1LqRHuCfefYPtn-Vm4FmHuS79v0Wt_TfyqfKxXeInn_9A,,&q={searchTerms} =>.Superfluous.Linkury O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKLM] {33BB0A4E-99AF-4226-BDF6-49120163DE86} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com ---\\ Enumère les services démarrés par Svchost (36) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [214528] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [158720] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [158720] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [329216] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [1360896] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [1080320] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [927744] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [31744] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [110080] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [151040] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [110592] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1265152] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [230400] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [71168] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [135168] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [228864] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [342016] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84992] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [101376] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [348672] =>.Microsoft Corporation O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service d’infrastructure de localisation Wi.) -- C:\Windows\System32\GeofenceMonitorService.dll [522240] =>.Microsoft Corporation O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\system32\wlidsvc.dll [1639424] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [59392] =>.Microsoft Corporation O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll [206848] =>.Microsoft Corporation O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\ncasvc.dll [166400] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [102912] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll [542720] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [233472] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\sens.dll [73728] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [452608] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [313344] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [3714560] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [933376] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [640000] =>.Microsoft Corporation O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [187904] =>.Microsoft Corporation O83 - Search Svchost Services: MsKeyboardFilter (MsKeyboardFilter) . (.Microsoft Corporation - SvcHost Service for Microsoft Keyboard Filt.) -- C:\Windows\System32\KeyboardFilterSvc.dll [92992] =>.Microsoft Windows® ---\\ Liste des exceptions du parefeu Windows (7) - 6s O87 - FAEL: "TCP Query User{C5D842D1-A3C2-4181-9E37-4A564F4866AC}H:\kmsmicro v3.10\qemu\qemu.exe" [In-None-P6-TRUE] .(...) -- H:\kmsmicro v3.10\qemu\qemu.exe (.not file.) O87 - FAEL: "UDP Query User{23DDD0DD-1A3D-4EA5-9ECC-3F2137A7D86D}H:\kmsmicro v3.10\qemu\qemu.exe" [In-None-P17-TRUE] .(...) -- H:\kmsmicro v3.10\qemu\qemu.exe (.not file.) O87 - FAEL: "{072B1272-FA7C-4D74-9ECA-19F0A822CEA2}" [In-None-P6-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico O87 - FAEL: "{485306C2-5D9A-471D-A34C-6DCF7599552E}" [In-None-P17-TRUE] .(...) -- C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico O87 - FAEL: "{8DEEFE4B-7BAC-4832-A4B7-3579D67513E9}" [In-None-P17-TRUE] .(...) -- F:\Droid4X\Droid4X.exe O87 - FAEL: "{24BB0759-79DC-4AA8-A1F4-141FD446C46D}" [In-None-P6-TRUE] .(...) -- C:\Windows\KMS-R@1n.exe =>HackTool.WinActivator O87 - FAEL: "{CF994CF0-FC55-4EB2-A916-AACD49D40B81}" [Out-None-P6-TRUE] .(...) -- C:\Windows\KMS-R@1n.exe =>HackTool.WinActivator ---\\ Enumère les codes produits des logiciels (2) - 2s O90 - PUC: "93BAD29AC2E44034A96BCB446EB8552E" . (.globalupdate Helper.) =>PUP.Optional.GlobalUpdate O90 - PUC: "E25F62BB5C437394290474C195CC186E" . (.WinSnare.) -- C:\Windows\Installer\{BB26F52E-34C5-4937-9240-471C59CC81E6}\_853F67D554F05449430E7E.exe =>.Superfluous.WinSnare ---\\ Recherche des packages WindowsInstaller (4) - 6s [MD5.] [WIS][2017/04/01 04:20:47] (.WinSnare - Windows Installer.) -- C:\Windows\Installer\40e8af7.msi [1395712] =>.Superfluous.WinSnare [MD5.] [WIS][2017/03/03 16:40:38] (.amuleC - Windows Installer.) -- C:\Windows\Installer\5955edd.msi [4392448] =>Adware.aMULEcustom [MD5.] [WIS][2017/03/23 11:49:30] (.amuleC - Windows Installer.) -- C:\Windows\Installer\5db1432.msi [4248064] =>Adware.aMULEcustom [MD5.] [WIS][2015/09/12 15:40:11] (.globalupdate - Windows Installer XML Toolset (3.9.1208.0).) -- C:\Windows\Installer\9dd5203.msi [32768] =>PUP.Optional.GlobalUpdate ---\\ Liste des émulateurs de CD/DVD (MBR Hook) (4) - 2s HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 =>.Superfluous.ByteFence HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS =>.Superfluous.ByteFence HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BluetoothPoint_RASAPI32 =>PUP.Optional.BluetoothPoint HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BluetoothPoint_RASMANCS =>PUP.Optional.BluetoothPoint ---\\ Scan Additionnel (153) - 3s HKLM\SYSTEM\CurrentControlSet\Services\cktSvc =>.Superfluous.Elex HKLM\SYSTEM\CurrentControlSet\Services\ed2kidle =>Adware.aMULEcustom HKLM\SYSTEM\CurrentControlSet\Services\iSafeService =>.Superfluous.Elex C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe =>.Superfluous.Elex HKLM\SYSTEM\CurrentControlSet\Services\Kitty =>.Superfluous.Elex C:\Users\TOSHIBA-PC\AppData\Local\Kitty\Kitty.dll =>.Superfluous.Elex HKLM\SYSTEM\CurrentControlSet\Services\Kyubey =>Adware.CrossRider HKLM\SYSTEM\CurrentControlSet\Services\QQPCRTP =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\QQPCRTP.exe =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\QQRepair105a =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair105a =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\QQRepairb4d =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairb4d =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\QQRepairbd1 =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairbd1 =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\QQRepairf5 =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairf5 =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\QQRepairFixSVC =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\QQRepairFixSVC =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\SNARE =>.Superfluous.InterSectAlliance C:\Users\TOSHIBA-PC\AppData\Local\SNARE\Snarer.dll =>.Superfluous.InterSectAlliance HKLM\SYSTEM\CurrentControlSet\Services\SRepairDrv =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\SRepairDrv =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\Update service =>.Superfluous.PopcornTime C:\Program Files (x86)\Popcorn Time\Updater.exe =>.Superfluous.PopcornTime HKLM\SYSTEM\CurrentControlSet\Services\WANARE =>.Superfluous.InterSectAlliance C:\Users\TOSHIBA-PC\AppData\Local\WANARE\Snare.dll =>.Superfluous.InterSectAlliance HKLM\SYSTEM\CurrentControlSet\Services\KMS-R@1n =>HackTool.WinActivator C:\Windows\KMS-R@1n.exe =>HackTool.WinActivator HKLM\SYSTEM\CurrentControlSet\Services\QQRepair129d =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair129d =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\QQRepair13f7 =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair13f7 =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\QQRepair24ea =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\QQRepair24ea =>.Superfluous.Tencent HKLM\SYSTEM\CurrentControlSet\Services\TAOFrame =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\TAOFrame.exe =>.Superfluous.Tencent C:\Program Files\Common Files\xqjp335z\b2c0aigcwpodj.exe =>.Superfluous.Linkury C:\Windows\System32\Tasks\lbe2wvr0 =>.Superfluous.Linkury C:\Windows\System32\Tasks\UncheckitTaskMN =>.Superfluous.Elex C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\QQPCTray.exe =>.Superfluous.Tencent C:\IQIYI Video\LStyle\npWebPlayer.dll =>.Superfluous.IQIYIVideo HKCU\SOFTWARE\MozillaPlugins\@iqiyi.com/npWebPlayer =>.Superfluous.IQIYIVideo HKLM\SOFTWARE\MozillaPlugins\@iqiyi.com/npWebPlayer =>.Superfluous.IQIYIVideo C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3198\npQQPhoneManagerExt.dll =>.Superfluous.Tencent HKLM\SOFTWARE\MozillaPlugins\@qq.com/npAndroidAssistant =>.Superfluous.Tencent C:\Program Files (x86)\Tencent\QQPCMgr\10.8.16208.227\npQMExtensionsMozilla.dll =>.Superfluous.Tencent HKLM\SOFTWARE\MozillaPlugins\@qq.com/QQPCMgr =>.Superfluous.Tencent HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} =>.Superfluous.Orphan HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} =>.Superfluous.Orphan HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KMSpico v8.7_is1 =>HackTool.KMSpico HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OLBPre =>PUP.Optional.MyPCBackup HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.9cV12.09 =>Adware.CrossRider HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Popcorn Time_is1 =>.Superfluous.PopcornTime HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0F7B5011-72EC-493D-A7BF-546591047E8E} =>Adware.aMULEcustom HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BB26F52E-34C5-4937-9240-471C59CC81E6} =>.Superfluous.WinSnare HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.9cV12.09 =>Adware.CrossRider HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Popcorn Time_is1 =>.Superfluous.PopcornTime HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0F7B5011-72EC-493D-A7BF-546591047E8E} =>Adware.aMULEcustom HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2} =>PUP.Optional.GlobalUpdate HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BB26F52E-34C5-4937-9240-471C59CC81E6} =>.Superfluous.WinSnare HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Packages =>Adware.InstallCore C:\Program Files\KMSpico =>HackTool.KMSpico C:\Program Files (x86)\amuleCexx =>Adware.aMULEcustom C:\Program Files (x86)\amulell =>Adware.aMULEcustom C:\Program Files (x86)\bilibili =>.Superfluous.Empty C:\Program Files (x86)\CinemaP-1.9cV12.09 =>Adware.CrossRider C:\Program Files (x86)\globalUpdate =>PUP.Optional.GlobalUpdate C:\Program Files (x86)\OLBPre =>PUP.Optional.MyPCBackup C:\Program Files (x86)\Popcorn Time =>.Superfluous.PopcornTime C:\Program Files (x86)\WinSnare(4.1.0) =>.Superfluous.WinSnare C:\Program Files (x86)\WinSnare(4.4.5) =>.Superfluous.WinSnare C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico =>HackTool.KMSpico C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Popcorn Time =>.Superfluous.PopcornTime C:\ProgramData\BluetoothPoint =>PUP.Optional.BluetoothPoint C:\ProgramData\ByteFence =>.Superfluous.ByteFence C:\ProgramData\IQIYI Video =>.Superfluous.IQIYIVideo C:\ProgramData\Tencent =>.Superfluous.Tencent C:\Program Files (x86)\Common Files\Tencent =>.Superfluous.Tencent C:\Users\TOSHIBA-PC\AppData\Roaming\0V1L2Z2Z1T1I1L1T =>Adware.InstallCore C:\Users\TOSHIBA-PC\AppData\Roaming\aMule =>Adware.aMULEcustom C:\Users\TOSHIBA-PC\AppData\Roaming\cpuminer =>PUP.Optional.CPUminer C:\Users\TOSHIBA-PC\AppData\Roaming\eCyber =>.Superfluous.Elex C:\Users\TOSHIBA-PC\AppData\Roaming\Elex-tech =>.Superfluous.Elex C:\Users\TOSHIBA-PC\AppData\Roaming\IQIYI Video =>.Superfluous.IQIYIVideo C:\Users\TOSHIBA-PC\AppData\Roaming\Kyubey =>Adware.CrossRider C:\Users\TOSHIBA-PC\AppData\Roaming\SimpleFiles =>PUP.Optional.SimpleFiles C:\Users\TOSHIBA-PC\AppData\Roaming\Tencent =>.Superfluous.Tencent C:\Users\TOSHIBA-PC\AppData\Roaming\WinSAPSvc =>PUP.Optional.Youndoo C:\Users\TOSHIBA-PC\AppData\Roaming\WinSnare =>.Superfluous.WinSnare C:\Users\TOSHIBA-PC\AppData\Local\CrashRpt =>.Superfluous.CrashReports C:\Users\TOSHIBA-PC\AppData\Local\DriverTuner =>.Superfluous.DriverTuner C:\Users\TOSHIBA-PC\AppData\Local\globalUpdate =>PUP.Optional.GlobalUpdate C:\Users\TOSHIBA-PC\AppData\Local\PopcornTime =>.Superfluous.PopcornTime C:\Users\TOSHIBA-PC\AppData\Local\SysassistByHotWheel =>PUP.Optional.Generic C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign0ed3e739d1e455a6 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign1264b81c492d34b0 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign133f32e3d3e277b1 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign1bc8dca6cf628e10 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign3db9e1c43b308eb7 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign4b47e0cedd282958 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign4bd12f93fd920e9a =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign5f7ab8db72eb1bff =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsign7735845a940be252 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsigna0864c2090947050 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsignb71ab54e7543c80c =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsignf8ad2622649b2f2f =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Local\Tempzxpsignfe3bcdbc82d04c24 =>.Superfluous.Temporary C:\Users\TOSHIBA-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\amuleC =>Adware.aMULEcustom C:\Windows\Prefetch\KMS-R@1NHOOK.EXE-18725FF6.pf =>HackTool.AutoKMS C:\Windows\Prefetch\TENCENTDL.EXE-C83FB433.pf =>.Superfluous.Tencent C:\Windows\Prefetch\UNCHECKITBSN.EXE-33B57A7E.pf =>.Superfluous.Elex C:\Windows\Prefetch\UNCHECKITHELPER.EXE-3F106257.pf =>.Superfluous.Elex C:\Windows\Prefetch\UNCHECKITSVC.EXE-20564D03.pf =>.Superfluous.Elex C:\Windows\Prefetch\WINZIPER.EXE-C207A8A3.pf =>.Superfluous.WinZipper C:\Windows\System32\drivers\AntiRkX64.sys =>.Superfluous.Tencent C:\Windows\System32\drivers\iSafeKrnlBoot.sys =>.Superfluous.Elex C:\Windows\System32\drivers\iSafeNetFilter.sys =>.Superfluous.Elex C:\Windows\System32\drivers\TAOAccelerator64.sys =>.Superfluous.Tencent C:\Windows\System32\drivers\TAOKernel64.sys =>.Superfluous.Tencent C:\Windows\System32\drivers\TFsFltX64.sys =>.Superfluous.Tencent C:\Users\TOSHIBA-PC\AppData\Roaming\WinSAPSvc\WinSAP.dll =>PUP.Optional.Youndoo HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\Open\command =>Hijacker.StartpageIng123 HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\Open\command =>Hijacker.StartpageIng123 HKLM\Software\Microsoft\Internet Explorer\SearchScopes\ielnksrch =>.Superfluous.Linkury C:\Program Files\KMSpico\KMSELDI.exe =>HackTool.KMSpico [HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{072B1272-FA7C-4D74-9ECA-19F0A822CEA2} =>HackTool.KMSpico [HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{485306C2-5D9A-471D-A34C-6DCF7599552E} =>HackTool.KMSpico [HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{24BB0759-79DC-4AA8-A1F4-141FD446C46D} =>HackTool.WinActivator [HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\firewallRules]:{CF994CF0-FC55-4EB2-A916-AACD49D40B81} =>HackTool.WinActivator HKLM\Software\Classes\Installer\Products\93BAD29AC2E44034A96BCB446EB8552E =>PUP.Optional.GlobalUpdate HKLM\Software\Classes\Installer\Features\93BAD29AC2E44034A96BCB446EB8552E =>PUP.Optional.GlobalUpdate C:\Windows\Installer\{BB26F52E-34C5-4937-9240-471C59CC81E6}\_853F67D554F05449430E7E.exe =>.Superfluous.WinSnare HKLM\Software\Classes\Installer\Products\E25F62BB5C437394290474C195CC186E =>.Superfluous.WinSnare HKLM\Software\Classes\Installer\Features\E25F62BB5C437394290474C195CC186E =>.Superfluous.WinSnare C:\Windows\Installer\40e8af7.msi =>.Superfluous.WinSnare C:\Windows\Installer\5955edd.msi =>Adware.aMULEcustom C:\Windows\Installer\5db1432.msi =>Adware.aMULEcustom C:\Windows\Installer\9dd5203.msi =>PUP.Optional.GlobalUpdate HKLM64\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 =>.Superfluous.ByteFence HKLM64\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS =>.Superfluous.ByteFence HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BluetoothPoint_RASAPI32 =>PUP.Optional.BluetoothPoint HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\BluetoothPoint_RASMANCS =>PUP.Optional.BluetoothPoint C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_d19tqk5t6qcjac.cloudfront.net_0.localstorage =>.Superfluous.CloudfrontNet C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_ad.smartwebads.com_0.localstorage =>PUP.Optional.SmartWebSearch C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.dll-files.com_0.localstorage =>PUP.Optional.DllFilesFixer C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_fr.uptodown.com_0.localstorage =>PUP.Optional.UpToDown C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_pcsx2.fr.uptodown.com_0.localstorage =>PUP.Optional.UpToDown C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_static.audienceinsights.net_0.localstorage =>.Superfluous.AudienceInsights C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.nuesearch.com_0.localstorage =>Hijacker.Browser C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.nuesearch.com_0.localstorage-journal =>Hijacker.Browser C:\Users\TOSHIBA-PC\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.radiorage.com_0.localstorage =>.Superfluous.MindSpark ---\\ Récapitulatif des éléments trouvés sur votre station (44) - 0s https://nicolascoolman.eu/2017/03/28/superfluous-elex/ =>.Superfluous.Elex https://nicolascoolman.eu/2017/03/10/adware-amulecustom/ =>Adware.aMULEcustom https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider https://nicolascoolman.eu/2017/02/23/tencentadressbar/ =>.Superfluous.Tencent https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.InterSectAlliance https://nicolascoolman.eu/2017/02/26/superfluous-popcorntime/ =>.Superfluous.PopcornTime https://nicolascoolman.eu/2017/01/13/hacktool-winactivator/ =>HackTool.WinActivator https://www.anti-malware.top/2016/08/02/superfluous-linkury/ =>.Superfluous.Linkury https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.IQIYIVideo https://nicolascoolman.eu/2017/01/26/hijacker-browser/ =>PUP.Optional.Browser https://nicolascoolman.eu/2017/02/02/hijacker-browser-2/ =>Hijacker.Browser https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/ =>HackTool.KMSpico https://www.nicolascoolman.com/fr/pup-mypcbackup/ =>PUP.Optional.MyPCBackup https://www.nicolascoolman.com/fr/pup-globalupdate/ =>PUP.Optional.GlobalUpdate https://nicolascoolman.eu/2017/01/12/superfluous-winsnare/ =>.Superfluous.WinSnare https://nicolascoolman.eu/2017/03/12/adware-installcore-2/ =>Adware.InstallCore https://www.nicolascoolman.com/fr/pup-optional-dllfilesfixer/ =>PUP.Optional.DllFilesFixer https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.BrowserExtensions https://www.nicolascoolman.com/fr/pup-optional-bluetoothpoint/ =>PUP.Optional.BluetoothPoint https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.OurSurfing https://www.anti-malware.top/2016/05/05/superfluous-taiwanshuimu/ =>.Superfluous.TaiwanShuiMu https://www.nicolascoolman.com/fr/pup-optional-simplefiles/ =>PUP.Optional.SimpleFiles https://www.anti-malware.top/2016/05/20/pup-optional-wdsmanpro/ =>PUP.Optional.WdsManPro https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.WinSaber https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.WinZipper https://www.anti-malware.top/2016/05/12/adware-yessearches/ =>Adware.YesSearches https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.CrossBrowser https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Downloader https://www.nicolascoolman.com/fr/pup-vittalia/ =>PUP.Optional.Vittalia https://nicolascoolman.eu/2017/03/13/superfluous-bytefence/ =>.Superfluous.ByteFence https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Empty https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.CPUminer https://nicolascoolman.eu/2017/03/11/superfluous-youndoo/ =>PUP.Optional.Youndoo https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.CrashReports https://www.anti-malware.top/2016/06/04/superfluous-drivertuner/ =>.Superfluous.DriverTuner https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Generic https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Temporary https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS https://nicolascoolman.eu/2017/03/06/hijacker-startpageing123/ =>Hijacker.StartpageIng123 https://nicolascoolman.eu/2017/02/02/superfluous-cloudfrontnet/ =>.Superfluous.CloudfrontNet https://www.nicolascoolman.com/fr/pup-smartwebsearch/ =>PUP.Optional.SmartWebSearch https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.UpToDown https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.AudienceInsights https://nicolascoolman.eu/2017/01/15/superfluous-mindspark/ =>.Superfluous.MindSpark ~ Unselected Options: O82, ~ End of the scan, 76571 items in 03mn53s (1538)(0)