~ ZHPDiag v2016.1.31.23 Par Nicolas Coolman (2016/01/30) ~ Démarré par kiki (Administrator) (2017/05/10 09:51:51) ~ Site: http://www.nicolascoolman.fr ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Pas de fichier réseau ~ Mode: Scanner ~ Rapport: C:\Users\kiki\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\kiki\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601) ---\\ Navigateurs Internet (2) - 0s GCIE: Google Chrome v58.0.3029.110 MSIE: Internet Explorer v11.0.9600.18638 ---\\ Informations sur les produits Windows (4) - 4s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection (1) - 20s Windows Defender W7 (Deactivate) ---\\ Logiciels d'optimisation (1) - 20s CCleaner v5.29 ---\\ Surveillance de Logiciels (2) - 21s Adobe Flash Player 25 PPAPI Adobe Acrobat Reader DC - Français ---\\ Informations sur le système (6) - 0s ~ Operating System: Intel64 Family 6 Model 37 Stepping 5, GenuineIntel ~ Operating System: 64-bit ~ Boot mode: Normal (Normal boot) Total RAM: 3855.216 MB (24% free) System Restore: Activé (Enable) System drive C: has 26 GB () free of 149 GB ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: KIKI-PC ~ User Name: kiki ~ Logged in as Administrator ---\\ Enumération des unités disques (3) - 0s ~ Drive C: has 26 GB free of 149 GB (System) ~ Drive D: has 54 GB free of 445 GB ~ Drive F: has 5 GB free of 7 GB ---\\ Etat du Centre de Sécurité Windows (11) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 9s [MD5.38AE1B3C38FAEF56FE4907922F0385BA] - 29/08/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [3229696] =>.Microsoft Corporation [MD5.DD81D91FF3B0763C392422865C9AC12E] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [45568] =>.Microsoft Corporation [MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] =>.Microsoft Corporation [MD5.1C5E7DFE2DF454E1C04C8A6B0CCF8297] - 25/03/2017 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [3241472] =>.Microsoft Corporation [MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - 17/07/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [455168] =>.Microsoft Corporation [MD5.067FA52BFB59A56110A12312EF9AF243] - 21/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] =>.Microsoft Corporation [MD5.492D07D79E7024CA310867B526D9636D] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [357888] =>.Microsoft Corporation [MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [270336] =>.Microsoft Corporation [MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 26/01/2011 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation [MD5.9A4A1EEE802BF2F878EE8EAB407B21B7] - 13/10/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [497664] =>.Microsoft Corporation [MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows® [MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation [MD5.F036CE71586E93D94DAB220D7BDF4416] - 21/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] =>.Microsoft Corporation [MD5.9B38580063D281A99E68EF5813022A5F] - 08/09/2016 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [106496] =>.Microsoft Corporation [MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 21/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] =>.Microsoft Corporation [MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] =>.Microsoft Corporation [MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] =>.Microsoft Corporation [MD5.2EB36DF5E373FCD1783F941A85803F9F] - 08/03/2017 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [159744] =>.Microsoft Corporation [MD5.E47D571FEC2C76E867935109AB2A770C] - 11/05/2016 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [262144] =>.Microsoft Corporation [MD5.47B2D0B31BDC3EBE6090228E2BA3764D] - 11/01/2016 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1684416] {33000000354C94FF5B25BE5277000000000035} =>.Microsoft Corporation [MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] =>.Microsoft Corporation [MD5.471815800AE33E6F1C32FB1B97C490CA] - 21/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] =>.Microsoft Corporation [MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] =>.Microsoft Corporation [MD5.AA77EB517D2F07A947294F260E3ACA83] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [118272] =>.Microsoft Corporation [MD5.0D08D2F3B3FF84E433346669B5E0F639] - 21/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (14) - 3s O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - Avast Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe =>.Intel Corporation - Mobile Wireless Group® O23 - Service: France Telecom Routing Table Service (FTRTSVC) . (.France Telecom SA - .) - C:\Program Files (x86)\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe =>.France Telecom SA O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: Service Installer TrueKey (InstallerService) . (.McAfee, Inc. - Intel Security True Key.) - C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe =>.McAfee, Inc.® O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 327.0.) - C:\Windows\System32\nvvsvc.exe =>.NVIDIA Corporation® O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe =>.NVIDIA Corporation® O23 - Service: Razer Game Manager (Razer Game Manager Service) . (.Razer Inc - GameManagerService.) - C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe =>.Intel Corporation - Mobile Wireless Group® O23 - Service: Razer Central Service (RzActionSvc) . (.Razer Inc. - Razer Central Service.) - C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. O23 - Service: RzKLService (RzKLService) . (.Razer Inc. - RzKLService.exe.) - C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies O23 - Service: Intel(R) PROSet/Wireless ZeroConfig Service (ZcfgSvc7) . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Zero Config Servic.) - C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe =>.Intel(R) Corporation ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (21) - 21s SR - Auto [25/04/2017] [ 83056] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated SS - Demand [10/05/2017] [ 271864] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated SR - Demand [10/05/2017] [ 7346208] aswbIDSAgent (aswbIDSAgent) . (.AVAST Software s.r.o..) - C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe {07C70F7CAB145BC1ED385FBE69FA3130} =>.Avast Software s.r.o. SR - Auto [10/05/2017] [ 263304] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software SR - Auto [18/01/2011] [ 1515792] Intel(R) PROSet/Wireless Event Log (EvtEng) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\EvtEng.exe =>.Intel Corporation - Mobile Wireless Group® SS - Auto [03/03/2009] [ 65536] France Telecom Routing Table Service (FTRTSVC) . (.France Telecom SA.) - C:\Program Files (x86)\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe =>.France Telecom SA SS - Auto [18/09/2016] [ 153752] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [18/09/2016] [ 153752] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [04/04/2005] [ 69632] InstallDriver Table Manager (IDriverT) . (.Macrovision Corporation.) - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe =>.Macrovision Corporation SR - Auto [02/03/2017] [ 189840] Service Installer TrueKey (InstallerService) . (.McAfee, Inc..) - C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe =>.McAfee, Inc.® SR - Disabl [02/03/2017] [ 47688] Service Installer Wrapper TrueKey (InstallerWrapperService) . (.McAfee, Inc..) - C:\Program Files\TrueKey\InstallerWrapperService.exe =>.McAfee, Inc.® SS - Demand [18/01/2011] [ 340240] Wireless PAN DHCP Server (MyWiFiDHCPDNS) . (.Copyright (C) 2005-2010 by Achal Dhir.) - C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe =>.Intel Corporation - Mobile Wireless Group® SR - Auto [30/08/2013] [ 920864] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe =>.NVIDIA Corporation SR - Auto [05/09/2013] [ 1364256] NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe =>.NVIDIA Corporation® SR - Auto [19/04/2017] [ 147792] Razer Game Manager (Razer Game Manager Service) . (.Razer Inc.) - C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc SR - Auto [18/01/2011] [ 845584] Intel(R) PROSet/Wireless Registry Service (RegSrvc) . (.Intel(R) Corporation.) - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe =>.Intel Corporation - Mobile Wireless Group® SR - Auto [14/04/2017] [ 183680] Razer Central Service (RzActionSvc) . (.Razer Inc..) - C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. SR - Auto [28/04/2017] [ 252176] RzKLService (RzKLService) . (.Razer Inc..) - C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. SS - Auto [14/03/2017] [ 317400] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies SR - Auto [18/01/2011] [ 992256] Intel(R) PROSet/Wireless ZeroConfig Service (ZcfgSvc7) . (.Intel(R) Corporation.) - C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe =>.Intel(R) Corporation ---\\ Tâches planifiées en automatique (25) - 6s [MD5.AFC094098B6D856151002051E31867D8] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1162360] {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated [MD5.6DC44621EA6A06A7EC2F71C5D788FF3F] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [1278456] {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated [MD5.99CE7A1C3AB82125EE3FDB446418865B] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [271864] {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated [MD5.866FF7A49542CDBBF7EE0FD4FD0ADC02] [APT] [Avast Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2326672] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software [MD5.FFE2D028D996BC6279A2E4894F9FCBFD] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [7456984] =>.Piriform Ltd® [MD5.CC27D5C902407CB560FE33AEC67B1144] [APT] [DivXUpdate] (.DivX, LLC.) -- C:\Program Files (x86)\Common Files\DivX Shared\Qt4.8\DivXUpdate.exe [1779680] {17CD1E87AC76E39936777B06E2D28AEF} =>.DivX, LLC [MD5.549E70189FA7B3034A8E58A48CB353C0] [APT] [elbyExecuteWithUAC] (.Copyright (C) 2013 Elaborate Bytes AG.) -- C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ExecuteWithUAC.exe [77824] [MD5.A8FD9222E4D72596BB37DA8BE95C0BA4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752] =>.Google Inc® [MD5.A8FD9222E4D72596BB37DA8BE95C0BA4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752] =>.Google Inc® [MD5.B087C25AFD565F0DC01FCAF565FE19C7] [APT] [HP Photo Creations Messager] (...) -- C:\ProgramData\HP Photo Creations\MessageCheck.exe [153768] =>.Visan Industries® [MD5.F485EE3C484D9874E9DD75E6B4FEE332] [APT] [SafeZone scheduled Autoupdate 1475040363] (.Avast Software.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe [927264] =>.AVAST Software s.r.o.® [MD5.E14B8ED52224CBB5B64C1087C35451A8] [APT] [{7F54390F-F80F-4FE9-B440-C9E3C81952D2}] (...) -- C:\Users\kiki\AppData\Roaming\{A1299792-847B-FAE4-EF4D-DD36339F2008}\updater.exe [969472] [MD5.283E10FD63971145CC1E750FFA46180E] [APT] [AVAST Software\Avast settings backup] (.AVAST Software.) -- C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [826808] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O39 - APT: HP Photo Creations Messager - (...) -- C:\Windows\Tasks\HP Photo Creations Messager.job [254] O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [4476] =>.Adobe Systems Incorporated O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier [4618] =>.Adobe Systems Incorporated O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [4484] =>.Adobe Systems Incorporated O39 - APT: Avast Emergency Update - (.AVAST Software.) -- C:\Windows\System32\Tasks\Avast Emergency Update [3914] =>.AVAST Software O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2786] =>.Piriform Ltd O39 - APT: DivXUpdate - (.DivX, LLC.) -- C:\Windows\System32\Tasks\DivXUpdate [3640] =>.DivX, LLC O39 - APT: elbyExecuteWithUAC - (.Copyright (C) 2013 Elaborate Bytes AG.) -- C:\Windows\System32\Tasks\elbyExecuteWithUAC [2990] O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3372] =>.Google Inc. O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3500] =>.Google Inc. O39 - APT: HP Photo Creations Messager - (...) -- C:\Windows\System32\Tasks\HP Photo Creations Messager [3112] O39 - APT: SafeZone scheduled Autoupdate 1475040363 - (.Avast Software.) -- C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1475040363 [3916] =>.AVAST Software ---\\ Processus lancés (48) - 5s [MD5.FB50E60564ED30DDC855F0CE435C8467] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 327.0.) -- C:\Windows\System32\nvvsvc.exe [920864] [PID.300] =>.NVIDIA Corporation® [MD5.AD610408E266F16BEBF2974422279DED] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Event Log Service.) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe [1515792] [PID.1212] =>.Intel Corporation - Mobile Wireless Group® [MD5.F73AE30945F674DF57D2CBFD6397C85F] - (.NVIDIA Corporation - NVIDIA User Experience Driver Component.) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe [1171744] [PID.1256] =>.NVIDIA Corporation® [MD5.FB50E60564ED30DDC855F0CE435C8467] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 327.0.) -- C:\Windows\System32\nvvsvc.exe [920864] [PID.1268] =>.NVIDIA Corporation® [MD5.C7F95C33FF2DE28A7CCAF1E9D6EBBFAE] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Zero Config Servic.) -- C:\Program Files\Intel\WiFi\bin\ZCfgSvc7.exe [992256] [PID.1648] =>.Intel(R) Corporation [MD5.D961A7C05A76302E782B1B0CF6546BA7] - (.AVAST Software - Avast Service.) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304] [PID.1704] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software [MD5.1F376536F535A11A0982EFB94833CB17] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [167704] [PID.1344] =>.Intel Corporation® [MD5.480F020ED238D739DF8FB0BC283743B3] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [392472] [PID.2080] =>.Intel Corporation® [MD5.BB9083D20B1BFB39CA0B35406CF8D554] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [416024] [PID.2152] =>.Intel Corporation® [MD5.E17981BFC1F07187274EA6678C5EA254] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Framework.) -- C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1934608] [PID.2212] =>.Intel Corporation - Mobile Wireless Group® [MD5.E17981BFC1F07187274EA6678C5EA254] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Framework.) -- C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1934608] [PID.2220] =>.Intel Corporation - Mobile Wireless Group® [MD5.8FE697AB8A4C28D79C1CDB97C6FB1A17] - (.AVAST Software - Avast Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe [8470464] [PID.2352] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software [MD5.CD6869A28C07FBF35FD0EBACF2FCF069] - (.Orange - Executable Orange Inside.) -- C:\Users\kiki\AppData\Roaming\Orange\OrangeInside\OrangeInside.exe [687616] [PID.2596] =>.Orange [MD5.8D6BA8E7676038A27FD4ECF12CC744B0] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [83056] [PID.2604] {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated [MD5.A0327AA1960EB88668B252C3CDAB75B6] - (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe [2676584] [PID.2612] =>.Hewlett Packard® [MD5.606980BBCEC634D77A40137B0FF69C0F] - (.Avanquest Software - Avanquest Message.) -- C:\Users\kiki\AppData\Local\Avanquest\Avanquest Message\AQNotif.exe [497896] [PID.2620] =>.AVANQUEST SOFTWARE® [MD5.34D296AFC913E302953C70463EF09A48] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [96056] [PID.2492] =>.Hewlett-Packard Company® [MD5.BB8609D796C1D93561DBFBB11A920168] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [2450208] [PID.2424] =>.NVIDIA Corporation® [MD5.638AE77DC319958727FBEA403D37B2D6] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe [9532120] [PID.2324] =>.Piriform Ltd® [MD5.74DABA636D9CB10C0D665E456A3392D2] - (.Razer Inc - GameManagerService.) -- C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [147792] [PID.3292] {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc [MD5.68C6BC0D56D4FCCD277CC541CC08F010] - (.Intel(R) Corporation - Intel(R) PROSet/Wireless Registry Service.) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [845584] [PID.3700] =>.Intel Corporation - Mobile Wireless Group® [MD5.CE227232F799E8E3C14DBF7CFF4B252E] - (.Razer Inc. - Razer Central Service.) -- C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [183680] [PID.3736] {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. [MD5.FB9071F22DD9E4EEADD4629F61936BA9] - (.Razer Inc. - RzKLService.exe.) -- C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [252176] [PID.3900] {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. [MD5.A760C2AFBA1A71E0F7310A6E900CB0E4] - (.AVAST Software s.r.o. - Avast Behavior Shield.) -- C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208] [PID.3660] {07C70F7CAB145BC1ED385FBE69FA3130} =>.Avast Software s.r.o. [MD5.E392694F568E64D1C6D4E7B0C3201951] - (.Razer - RazerCortex.) -- C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [307904] [PID.1064] {1834B81889070312B5C4CA72EA419A5E} =>.Razer [MD5.0D817F41811A079871A2CADF1E231866] - (.Razer Inc. - Razer Central.) -- C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe [4264296] [PID.5916] {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. [MD5.EE78B435B297699FD2389435D9000AF3] - (.Razer Inc. - .) -- C:\Program Files (x86)\Razer\Razer Cortex\PMRunner32.exe [154512] [PID.2880] {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. [MD5.B30B0CE1329092EDE2CCBFF44B83613B] - (.Razer Inc. - .) -- C:\Program Files (x86)\Razer\Razer Cortex\x64\PMRunner64.exe [157144] [PID.5280] {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. [MD5.FA9128108E8D2BC66AD0126CB2A2393B] - (.The CefSharp Authors - CefSharp.BrowserSubprocess.) -- C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe [18296] [PID.5148] {1834B81889070312B5C4CA72EA419A5E} [MD5.B5CE48139C5172A4E87B9A3A329DD2BF] - (.Copyright © 2012-2017 - RazerGamecasterEngine.) -- C:\Program Files (x86)\Razer\Razer Cortex\RazerGamecasterEngine.exe [350760] [PID.908] {1834B81889070312B5C4CA72EA419A5E} [MD5.C63E582366EAD77978BFFD959A66DBB8] - (.NVIDIA Corporation - NVIDIA Settings Update Manager.) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [1364256] [PID.2200] =>.NVIDIA Corporation® [MD5.A7F01DC98171EC28627293135180B97F] - (.Razer Inc. - .) -- C:\Program Files (x86)\Razer\Razer Cortex\FPSRunner32.exe [159192] [PID.2692] {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. [MD5.E6E1423383298D034CE650078DF8594C] - (.Razer Inc. - .) -- C:\Program Files (x86)\Razer\Razer Cortex\x64\FPSRunner64.exe [161272] [PID.5836] {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. [MD5.88722A5C10EE18C093275503BED05D7C] - (.Razer, Inc. - Applet Runner.) -- C:\Program Files (x86)\Razer\Razer Cortex\RzFpsApplet\RzFpsApplet.exe [254264] [PID.1952] {1834B81889070312B5C4CA72EA419A5E} =>.Razer, Inc. [MD5.55E960B2C975E406D6190BC9FFCADA3D] - (.Razer, Inc. - RazerIngameEngine.) -- C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe [259856] [PID.6896] {1834B81889070312B5C4CA72EA419A5E} =>.Razer, Inc. [MD5.FC20509C2501716E07C3CFA5C11F88B5] - (.Razer, Inc. - Razer Chromium Render Process.) -- C:\Users\kiki\AppData\Local\Razer\InGameEngine\cache\RzFpsApplet\RzCefRenderProcess.exe [275728] [PID.6992] {1834B81889070312B5C4CA72EA419A5E} =>.Razer, Inc. [MD5.FC20509C2501716E07C3CFA5C11F88B5] - (.Razer, Inc. - Razer Chromium Render Process.) -- C:\Users\kiki\AppData\Local\Razer\InGameEngine\cache\RzFpsApplet\RzCefRenderProcess.exe [275728] [PID.6312] {1834B81889070312B5C4CA72EA419A5E} =>.Razer, Inc. [MD5.FC20509C2501716E07C3CFA5C11F88B5] - (.Razer, Inc. - Razer Chromium Render Process.) -- C:\Users\kiki\AppData\Local\Razer\InGameEngine\cache\RzFpsApplet\RzCefRenderProcess.exe [275728] [PID.6756] {1834B81889070312B5C4CA72EA419A5E} =>.Razer, Inc. [MD5.FC20509C2501716E07C3CFA5C11F88B5] - (.Razer, Inc. - Razer Chromium Render Process.) -- C:\Users\kiki\AppData\Local\Razer\InGameEngine\cache\RzFpsApplet\RzCefRenderProcess.exe [275728] [PID.6616] {1834B81889070312B5C4CA72EA419A5E} =>.Razer, Inc. [MD5.1CA324A5728212EE7CEB4E99F4ADCCAA] - (.McAfee, Inc. - Intel Security True Key.) -- C:\Program Files\TrueKey\InstallerWrapperService.exe [47688] [PID.7092] =>.McAfee, Inc.® [MD5.0FFC55BD7C6A0BC17072D2EC7D9FB341] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640] [PID.6980] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.0FFC55BD7C6A0BC17072D2EC7D9FB341] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640] [PID.2000] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.0FFC55BD7C6A0BC17072D2EC7D9FB341] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640] [PID.3200] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.0FFC55BD7C6A0BC17072D2EC7D9FB341] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640] [PID.6636] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.0FFC55BD7C6A0BC17072D2EC7D9FB341] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640] [PID.4748] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.810A931437004A89C98DBAA02AAB8D0A] - (.McAfee, Inc. - Intel Security True Key.) -- C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe [189840] [PID.1688] =>.McAfee, Inc.® [MD5.0FFC55BD7C6A0BC17072D2EC7D9FB341] - (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1143640] [PID.8068] {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. [MD5.FF9CE0FC9E3B4BC22001764A9EFE4741] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\kiki\Desktop\ZHPDiag3.exe [2105344] [PID.4572] =>.Nicolas Coolman ---\\ Google Chrome, Démarrage,Recherche,Extensions (13) - 0s G0 - GCSP: Preferences [User Data\Default][HomePage] http://5-edge-chat.facebook.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://ad.atdmt.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://external-fra3-1.xx.fbcdn.net G0 - GCSP: Preferences [User Data\Default][HomePage] http://graph.facebook.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://scontent-fra3-1.xx.fbcdn.net G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.facebook.com G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com G2 - GCE: Preference [User Data\Default] [efaidnbmnnnibpcajpcglclefindmkaj] __MSG_web2pdfExtnName__ G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (1) - 1s P2 - FPN: [HKLM] [@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin] - (...) -- C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\19.2.0\\npsitesafety.dll =>Toolbar.AVGSearch ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (16) - 0s R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/ R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/ R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://fr.search.yahoo.com/ R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/ R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} Orphean R3 - URLSearchHook: (no name) - {5f5f9a78-33ab-4f11-870b-181a1ba75525} Orphean ---\\ Internet Explorer,Proxy Management (5) - 0s R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1 R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (21) ---\\ Browser Helper Object de navigateur (BHO) (1) - 0s O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software ---\\ Applications lancées au démarrage du système (20) - 1s O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation® O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation® O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation® O4 - HKLM\..\Run: [IntelPROSet] . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Framework.) -- C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe =>.Intel Corporation - Mobile Wireless Group® O4 - HKLM\..\Run: [IntelPAN] . (.Intel(R) Corporation - Intel(R) PROSet/Wireless Framework.) -- C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe =>.Intel Corporation - Mobile Wireless Group® O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (.not file.) O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - AvLaunch component.) -- C:\Program Files\AVAST Software\Avast\AvLaunch.exe {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O4 - HKCU\..\Run: [HP Photosmart 5510 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe =>.Hewlett Packard® O4 - HKCU\..\Run: [Avanquest Message] . (.Avanquest Software - Avanquest Message.) -- C:\Users\kiki\AppData\Local\Avanquest\Avanquest Message\AQNotif.exe =>.AVANQUEST SOFTWARE® O4 - HKCU\..\Run: [RazerCortex] . (.Razer Inc. - CortexLauncher.exe.) -- C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Company® O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-292777159-3259599612-2998717008-1000\..\Run: [HP Photosmart 5510 series (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe =>.Hewlett Packard® O4 - HKUS\S-1-5-21-292777159-3259599612-2998717008-1000\..\Run: [Avanquest Message] . (.Avanquest Software - Avanquest Message.) -- C:\Users\kiki\AppData\Local\Avanquest\Avanquest Message\AQNotif.exe =>.AVANQUEST SOFTWARE® O4 - HKUS\S-1-5-21-292777159-3259599612-2998717008-1000\..\Run: [RazerCortex] . (.Razer Inc. - CortexLauncher.exe.) -- C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. O4 - HKUS\S-1-5-21-292777159-3259599612-2998717008-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® ---\\ Raccourcis Global Startup (19) - 5s O4 - GS\Desktop [Administrateur]: Microsoft Office Word 2007.lnk . (...) C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\kiki\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: Chromium.lnk . (.The Chromium Authors - Chromium.) C:\Users\kiki\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A. O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\Desktop [kiki]: Microsoft Office Word 2007.lnk . (...) C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\Desktop [kiki]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\kiki\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [kiki]: Chromium.lnk . (.The Chromium Authors - Chromium.) C:\Users\kiki\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors O4 - GS\Quicklaunch [kiki]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\sendTo [kiki]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A. O4 - GS\TaskBar [kiki]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe =>.Piriform Ltd® O4 - GS\CommonDesktop [Public]: EA Download Manager.lnk . (.Electronic Arts - EA Download Manager.) C:\Program Files (x86)\Electronic Arts\EADM\Core.exe =>.Electronic Arts O4 - GS\CommonDesktop [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O4 - GS\CommonDesktop [Public]: Les Sims™ 3.lnk . (.Electronic Arts, Inc. - Sims 3Launcher Starter Application.) C:\Program Files (x86)\Electronic Arts\Les Sims 3\Game\Bin\Sims3Launcher.exe =>.Electronic Arts® O4 - GS\CommonDesktop [Public]: Multiplication.lnk . (.IAMANYS - Multiplication.) C:\Program Files (x86)\Multiplication\Multiplication.exe O4 - GS\CommonDesktop [Public]: Skype.lnk . (...) C:\Windows\Installer\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}\SkypeIcon.exe O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc ---\\ Modification Domaine/Adresses DNS (2) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8A81B3D6-1BCE-4C1E-B2B9-CE8E298166CF}: DhcpNameServer = 192.168.1.1 192.168.1.1 ---\\ Protocole additionnel (23) - 1s O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation O18 - Handler: viprotocol [64Bits] - {B658800C-F66E-4EF3-AB85-6C0C227862A9} . (.AVG Secure Search - ViProtocol.) -- C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\19.2.0\ViProtocol.dll =>.AVG Technologies CZ, s.r.o.® O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 0s O20 - AppInit_DLLs: . (.NVIDIA Corporation - NVIDIA shim initialization dll, Version 327.) - C:\Windows\System32\nvinitx.dll ---\\ Logiciels installés (54) - 11s O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {25A60C59-0FDC-4D73-81F4-D4A6D4E0CB92} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 25 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Flash Player 25 PPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player PPAPI {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824225037} =>.Adobe Systems Incorporated O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} =>.Atheros Communications Inc.® O42 - Logiciel: Avanquest Message - (.Avanquest Software.) [HKCU][64Bits] -- {20573C69-4A68-4BEF-A23D-365CB66924CE} =>.AVANQUEST SOFTWARE® O42 - Logiciel: Avast Antivirus Gratuit - (.AVAST Software.) [HKLM][64Bits] -- Avast Antivirus {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O42 - Logiciel: Bing Search Engine - (...) [HKLM][64Bits] -- {8DA36563-DD23-B4E3-6CA3-C463BC2317E3} O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: Chromium - (.Chromium.) [HKCU][64Bits] -- Chromium =>.Chromium O42 - Logiciel: Configuration DivX - (.DivX, LLC.) [HKLM][64Bits] -- DivX Setup {17CD1E87AC76E39936777B06E2D28AEF} =>.DivX, LLC O42 - Logiciel: EA Download Manager - (.Electronic Arts, Inc..) [HKLM][64Bits] -- EADM =>.Electronic Arts, Inc. O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: HP FWUpdateEDO2 - (.Hewlett-Packard.) [HKLM][64Bits] -- {415FA9AD-DA10-4ABE-97B6-5051D4795C90} =>.Hewlett-Packard O42 - Logiciel: HP Photo Creations - (.HP Photo Creations.) [HKLM][64Bits] -- HP Photo Creations =>.Visan Industries® O42 - Logiciel: HP Photosmart 5510 series Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {E02964EA-0E1B-4620-A26E-CBAB0341B1BB} =>.Hewlett Packard O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {912D30CF-F39E-4B31-AD9A-123C6B794EE2} =>.Hewlett-Packard O42 - Logiciel: HPDiagnosticAlert - (.Microsoft.) [HKLM][64Bits] -- {B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D} =>.Microsoft O42 - Logiciel: Intel PROSet Wireless - (...) [HKLM][64Bits] -- ProInst O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation® O42 - Logiciel: Karaoke CD+G Creator - (.Doblon.) [HKLM][64Bits] -- {F19082BE-3928-40B8-B985-C6E230010912}_is1 =>.Doblon O42 - Logiciel: KaraWin Free - (...) [HKLM][64Bits] -- {B4D1A85D-FE27-41D1-A599-781F91F6B352} O42 - Logiciel: Les Sims™ 3 - (.Electronic Arts.) [HKLM][64Bits] -- {C05D8CDB-417D-4335-A38C-A0659EDFD6B8} =>.Electronic Arts O42 - Logiciel: Les Sims™ 3 Accès VIP - (.Electronic Arts.) [HKLM][64Bits] -- {45057FCE-5784-48BE-8176-D9D00AF56C3C} =>.Electronic Arts® O42 - Logiciel: Les Sims™ 3 Ambitions - (.Electronic Arts.) [HKLM][64Bits] -- {910F4A29-1134-49E0-AD8B-56E4A3152BD1} =>.Electronic Arts® O42 - Logiciel: Les Sims™ 3 Inspiration Loft Kit - (.Electronic Arts.) [HKLM][64Bits] -- {71828142-5A24-4BD0-97E7-976DA08CE6CF} =>.Electronic Arts® O42 - Logiciel: Les Sims™ 3 Showtime - (.Electronic Arts.) [HKLM][64Bits] -- {3BBFD444-5FAB-49F6-98B1-A1954E831399} =>.Electronic Arts® O42 - Logiciel: Les Sims™ 3 Île de Rêve - (.Electronic Arts.) [HKLM][64Bits] -- {DB21639E-FE55-432C-BCA2-0C5249E3F79E} =>.Electronic Arts® O42 - Logiciel: Logiciel de base du périphérique HP Photosmart 5510 series - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {94641C2B-3419-4B5A-97E1-757BA7D2ECAD} =>.Hewlett-Packard Co. O42 - Logiciel: Logiciel Intel(R) PROSet/Wireless WiFi - (.Intel Corporation.) [HKLM][64Bits] -- {4BC80A19-FF32-4F26-9985-A821A2B29C18} =>.Intel Corporation O42 - Logiciel: Microsoft WSE 3.0 Runtime - (.Microsoft Corp..) [HKLM][64Bits] -- {E3E71D07-CD27-46CB-8448-16D4FB29AA13} =>.Microsoft Corp. O42 - Logiciel: Mises à jour NVIDIA 1.14.17 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update =>.NVIDIA Corporation O42 - Logiciel: Multiplication - (.IAMANYS.) [HKLM][64Bits] -- {09D2C433-2866-4F06-BAC5-14DD0DF9791A}_is1 O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Optimus 1.14.17 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Pilote graphique 327.02 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver =>.NVIDIA Corporation O42 - Logiciel: NVIDIA Update Components - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update =>.NVIDIA Corporation O42 - Logiciel: Orange - Logiciels Internet - (...) [HKLM][64Bits] -- {ORAHSS}.UninstallSuite {288E1EDEF00915DD49B82E89C4AB7451} O42 - Logiciel: Orange Inside - (.Orange.) [HKCU][64Bits] -- Orange Inside =>.Orange O42 - Logiciel: Panneau de configuration NVIDIA 327.02 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel =>.NVIDIA Corporation O42 - Logiciel: PhotoFiltre 7 - (...) [HKCU][64Bits] -- PhotoFiltre 7 O42 - Logiciel: PhotoPrinter 2.0 LE - (...) [HKLM][64Bits] -- PhotoPrinter 2.0 LE O42 - Logiciel: Razer Cortex - (.Razer Inc..) [HKLM][64Bits] -- Razer Cortex_is1 {1834B81889070312B5C4CA72EA419A5E} =>.Razer Inc. O42 - Logiciel: SafeZone Stable 3.55.2393.596 - (.Avast Software.) [HKLM][64Bits] -- SafeZone 3.55.2393.596 =>.AVAST Software s.r.o.® O42 - Logiciel: Search the Web (Yahoo) - (...) [HKLM][64Bits] -- a92e2408 O42 - Logiciel: Skype™ 7.35 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {3B7E914A-93D5-4A29-92BB-AF8C3F66C431} =>.Skype Technologies S.A. O42 - Logiciel: VC80CRTRedist - 8.0.50727.6195 - (.DivX, Inc.) [HKLM][64Bits] -- {933B4015-4618-4716-A828-5289FC03165F} =>.DivX, Inc O42 - Logiciel: VirtualCloneDrive - (.Elaborate Bytes.) [HKLM][64Bits] -- VirtualCloneDrive =>.Elaborate Bytes O42 - Logiciel: Yahoo! Powered - (...) [HKLM][64Bits] -- winsearch O42 - Logiciel: Zoo Tycoon 2 - Animaux disparus - (.Microsoft Game Studios.) [HKLM][64Bits] -- {15292416-A464-4FBA-BB96-7298EAACFC07} =>.Microsoft Game Studios O42 - Logiciel: Zoo Tycoon 2 - Animaux disparus - (.Microsoft Game Studios.) [HKLM][64Bits] -- InstallShield_{15292416-A464-4FBA-BB96-7298EAACFC07} =>.Microsoft Game Studios ---\\ HKCU & HKLM Software Keys (109) - 11s HKLM\SOFTWARE\Wow6432Node\Adobe HKLM\SOFTWARE\Wow6432Node\ArcSoft HKLM\SOFTWARE\Wow6432Node\Atheros Communications Inc. HKLM\SOFTWARE\Wow6432Node\Avanquest HKLM\SOFTWARE\Wow6432Node\AVAST Software HKLM\SOFTWARE\Wow6432Node\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard HKLM\SOFTWARE\Wow6432Node\AVG Security Toolbar =>Toolbar.AVGSearch HKLM\SOFTWARE\Wow6432Node\Avnex HKLM\SOFTWARE\Wow6432Node\AVS4YOU HKLM\SOFTWARE\Wow6432Node\DivX HKLM\SOFTWARE\Wow6432Node\Elaborate Bytes HKLM\SOFTWARE\Wow6432Node\Electronic Arts HKLM\SOFTWARE\Wow6432Node\Eset HKLM\SOFTWARE\Wow6432Node\FRANCE TELECOM HKLM\SOFTWARE\Wow6432Node\Freemake HKLM\SOFTWARE\Wow6432Node\Google HKLM\SOFTWARE\Wow6432Node\HaaliMkx HKLM\SOFTWARE\Wow6432Node\Hewlett-Packard HKLM\SOFTWARE\Wow6432Node\IM Providers HKLM\SOFTWARE\Wow6432Node\Info-Concept HKLM\SOFTWARE\Wow6432Node\InstallShield HKLM\SOFTWARE\Wow6432Node\Intel HKLM\SOFTWARE\Wow6432Node\K5 HKLM\SOFTWARE\Wow6432Node\Karasoft HKLM\SOFTWARE\Wow6432Node\Khronos HKLM\SOFTWARE\Wow6432Node\Macromedia HKLM\SOFTWARE\Wow6432Node\MOVAVI HKLM\SOFTWARE\Wow6432Node\Mozilla HKLM\SOFTWARE\Wow6432Node\MozillaPlugins HKLM\SOFTWARE\Wow6432Node\NCH Software HKLM\SOFTWARE\Wow6432Node\NCH Swift Sound HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation HKLM\SOFTWARE\Wow6432Node\ODBC HKLM\SOFTWARE\Wow6432Node\Origin Games HKLM\SOFTWARE\Wow6432Node\Piriform HKLM\SOFTWARE\Wow6432Node\Razer HKLM\SOFTWARE\Wow6432Node\RocketLife HKLM\SOFTWARE\Wow6432Node\ShapeCollage HKLM\SOFTWARE\Wow6432Node\Sims HKLM\SOFTWARE\Wow6432Node\Skype HKLM\SOFTWARE\Wow6432Node\Software HKLM\SOFTWARE\Wow6432Node\Visan HKLM\SOFTWARE\Wow6432Node\Volatile HKLM\SOFTWARE\Wow6432Node\WafCX HKLM\SOFTWARE\Wow6432Node\Wondershare HKLM\SOFTWARE\Wow6432Node\RegisteredApplications HKCU\SOFTWARE\Adobe HKCU\SOFTWARE\AnvSoft HKCU\SOFTWARE\AppDataLow HKCU\SOFTWARE\Avanquest HKCU\SOFTWARE\AVAST Software HKCU\SOFTWARE\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard HKCU\SOFTWARE\Avnex HKCU\SOFTWARE\AVS4YOU HKCU\SOFTWARE\BugSplat HKCU\SOFTWARE\cacaoweb =>.Superfluous.CacaoWeb HKCU\SOFTWARE\Chromium HKCU\SOFTWARE\csastats HKCU\SOFTWARE\Cygnus Solutions HKCU\SOFTWARE\DivX HKCU\SOFTWARE\DivXNetworks HKCU\SOFTWARE\Doblon HKCU\SOFTWARE\Elaborate Bytes HKCU\SOFTWARE\Electronic Arts HKCU\SOFTWARE\Freemake HKCU\SOFTWARE\FreeTime HKCU\SOFTWARE\GNU HKCU\SOFTWARE\Google HKCU\SOFTWARE\Hewlett-Packard HKCU\SOFTWARE\HP HKCU\SOFTWARE\IAMANYS HKCU\SOFTWARE\ICSW1.22 =>Adware.InstallCore HKCU\SOFTWARE\IM Providers HKCU\SOFTWARE\Intel HKCU\SOFTWARE\Karawin HKCU\SOFTWARE\LAV HKCU\SOFTWARE\LogMontagePhoto HKCU\SOFTWARE\Macromedia HKCU\SOFTWARE\MainConcept HKCU\SOFTWARE\MOVAVI HKCU\SOFTWARE\MozillaPlugins HKCU\SOFTWARE\NCH Software HKCU\SOFTWARE\NCH Swift Sound HKCU\SOFTWARE\Netscape HKCU\SOFTWARE\NVIDIA Corporation HKCU\SOFTWARE\ODBC HKCU\SOFTWARE\Orange HKCU\SOFTWARE\OrangeInside HKCU\SOFTWARE\PhotoFiltre 7 HKCU\SOFTWARE\Piriform HKCU\SOFTWARE\PowerCDGPlayer HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\QtProject HKCU\SOFTWARE\Razer HKCU\SOFTWARE\Samsung HKCU\SOFTWARE\ShapeCollage HKCU\SOFTWARE\Skype HKCU\SOFTWARE\SplitmediaLabs HKCU\SOFTWARE\Trolltech HKCU\SOFTWARE\VB and VBA Program Settings HKCU\SOFTWARE\Visan HKCU\SOFTWARE\WalaSoft HKCU\SOFTWARE\winOKE Ltd HKCU\SOFTWARE\Wondershare HKCU\SOFTWARE\Wow6432Node HKCU\SOFTWARE\Xilisoft HKCU\SOFTWARE\ZebHelpProcess Helper HKCU\SOFTWARE\AppDataLow\Software HKCU\SOFTWARE\AppDataLow\Software\ConduitSearchScopes =>PUP.Optional.Conduit ---\\ Contenu des dossiers Programmes (211) - 24s O43 - CFD: 27/01/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated® O43 - CFD: 05/08/2016 - [] D -- C:\Program Files (x86)\Anvsoft O43 - CFD: 16/06/2016 - [] D -- C:\Program Files (x86)\ArcSoft O43 - CFD: 27/01/2016 - [] D -- C:\Program Files (x86)\Avanquest O43 - CFD: 13/08/2016 - [0] D -- C:\Program Files (x86)\AVS4YOU O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Cisco O43 - CFD: 10/05/2017 - [] D -- C:\Program Files (x86)\Common Files O43 - CFD: 01/08/2016 - [] D -- C:\Program Files (x86)\DivX {17CD1E87AC76E39936777B06E2D28AEF} O43 - CFD: 04/04/2017 - [] D -- C:\Program Files (x86)\Doblon O43 - CFD: 16/09/2016 - [] D -- C:\Program Files (x86)\DriverDoc O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Elaborate Bytes O43 - CFD: 13/09/2016 - [] D -- C:\Program Files (x86)\Electronic Arts =>.Electronic Arts, Inc.® O43 - CFD: 13/08/2016 - [0] D -- C:\Program Files (x86)\Freemake O43 - CFD: 18/09/2016 - [] D -- C:\Program Files (x86)\Google =>.Google Inc® O43 - CFD: 28/01/2016 - [] D -- C:\Program Files (x86)\HP =>.Hewlett-Packard Company® O43 - CFD: 16/09/2015 - [] D -- C:\Program Files (x86)\HP Photo Creations =>.Visan Industries® O43 - CFD: 04/04/2017 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.Electronic Arts® O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation® O43 - CFD: 13/04/2017 - [] D -- C:\Program Files (x86)\Internet Explorer O43 - CFD: 05/04/2017 - [] D -- C:\Program Files (x86)\Karaoke5 O43 - CFD: 04/04/2017 - [] D -- C:\Program Files (x86)\Karasoft O43 - CFD: 13/09/2015 - [] D -- C:\Program Files (x86)\Microsoft Games =>.Microsoft Corporation® O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation® O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8 O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Microsoft Works O43 - CFD: 04/01/2016 - [] D -- C:\Program Files (x86)\Microsoft WSE O43 - CFD: 16/09/2015 - [] D -- C:\Program Files (x86)\Microsoft.NET O43 - CFD: 05/08/2016 - [] D -- C:\Program Files (x86)\Movie Maker 2.6 O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\MSBuild O43 - CFD: 19/02/2016 - [] D -- C:\Program Files (x86)\Multiplication O43 - CFD: 03/04/2017 - [] D -- C:\Program Files (x86)\NCH Software O43 - CFD: 04/01/2016 - [] D -- C:\Program Files (x86)\NVIDIA Corporation =>.NVIDIA Corporation® O43 - CFD: 12/09/2016 - [] D -- C:\Program Files (x86)\OrangeHSS O43 - CFD: 04/01/2016 - [] D -- C:\Program Files (x86)\Origin =>.Electronic Arts, Inc.® O43 - CFD: 04/12/2015 - [] D -- C:\Program Files (x86)\PhotoFiltre 7 O43 - CFD: 08/05/2017 - [] D -- C:\Program Files (x86)\Razer {1834B81889070312B5C4CA72EA419A5E} O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies O43 - CFD: 01/08/2016 - [] D -- C:\Program Files (x86)\Samsung O43 - CFD: 12/09/2016 - [] D -- C:\Program Files (x86)\Securitoo O43 - CFD: 10/05/2017 - [] RD -- C:\Program Files (x86)\Skype {330000008AF4BE0B29747A0FA000000000008A} O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information O43 - CFD: 14/09/2015 - [] D -- C:\Program Files (x86)\Windows Defender O43 - CFD: 26/01/2011 - [] D -- C:\Program Files (x86)\Windows Mail O43 - CFD: 13/10/2016 - [] D -- C:\Program Files (x86)\Windows Media Player O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT O43 - CFD: 26/01/2011 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation® O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Portable Devices O43 - CFD: 26/01/2011 - [] D -- C:\Program Files (x86)\Windows Sidebar O43 - CFD: 03/04/2017 - [] D -- C:\Program Files (x86)\winOKE Ltd O43 - CFD: 02/01/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 16/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ArcSoft PhotoPrinter LE O43 - CFD: 27/09/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software O43 - CFD: 03/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Axara O43 - CFD: 10/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner O43 - CFD: 01/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX O43 - CFD: 02/01/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes O43 - CFD: 16/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON O43 - CFD: 13/09/2016 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games O43 - CFD: 28/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP O43 - CFD: 02/01/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless O43 - CFD: 03/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Karaoke CD+G Creator O43 - CFD: 04/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KaraWin Free O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 02/01/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office O43 - CFD: 19/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Multiplication O43 - CFD: 04/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin O43 - CFD: 04/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7 O43 - CFD: 08/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer O43 - CFD: 15/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup O43 - CFD: 04/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Walaoke O43 - CFD: 03/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\winOKE 3.28 O43 - CFD: 27/01/2016 - [] D -- C:\ProgramData\Adobe O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data O43 - CFD: 09/10/2016 - [] D -- C:\ProgramData\Avanquest Software O43 - CFD: 16/03/2017 - [] D -- C:\ProgramData\AVAST Software O43 - CFD: 27/01/2016 - [] D -- C:\ProgramData\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard O43 - CFD: 27/01/2016 - [] D -- C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch O43 - CFD: 05/08/2016 - [] D -- C:\ProgramData\AVS4YOU O43 - CFD: 02/01/2011 - [0] SHD -- C:\ProgramData\Bureau O43 - CFD: 27/01/2016 - [] HD -- C:\ProgramData\Common Files O43 - CFD: 27/01/2016 - [] D -- C:\ProgramData\Configuration O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop O43 - CFD: 05/08/2016 - [] D -- C:\ProgramData\DivX O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents O43 - CFD: 14/09/2015 - [] D -- C:\ProgramData\EA Core O43 - CFD: 04/01/2016 - [] D -- C:\ProgramData\Electronic Arts O43 - CFD: 16/06/2016 - [] D -- C:\ProgramData\EPSON O43 - CFD: 02/01/2011 - [0] SHD -- C:\ProgramData\Favoris O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites O43 - CFD: 13/08/2016 - [0] D -- C:\ProgramData\Freemake O43 - CFD: 16/09/2015 - [] D -- C:\ProgramData\HP O43 - CFD: 16/09/2015 - [] D -- C:\ProgramData\HP Photo Creations O43 - CFD: 02/01/2011 - [] D -- C:\ProgramData\Intel O43 - CFD: 02/01/2011 - [0] SHD -- C:\ProgramData\Menu Démarrer O43 - CFD: 02/10/2016 - [] SD -- C:\ProgramData\Microsoft O43 - CFD: 13/09/2015 - [] D -- C:\ProgramData\Microsoft Games O43 - CFD: 02/01/2011 - [] D -- C:\ProgramData\Microsoft Help O43 - CFD: 02/01/2011 - [0] SHD -- C:\ProgramData\Modèles O43 - CFD: 01/08/2016 - [] D -- C:\ProgramData\Movavi Video Suite 15 O43 - CFD: 03/04/2017 - [] D -- C:\ProgramData\NCH Software O43 - CFD: 01/08/2016 - [] D -- C:\ProgramData\NortonInstaller O43 - CFD: 04/01/2016 - [] D -- C:\ProgramData\NVIDIA O43 - CFD: 02/01/2011 - [] D -- C:\ProgramData\NVIDIA Corporation O43 - CFD: 04/01/2016 - [] D -- C:\ProgramData\Origin O43 - CFD: 15/03/2017 - [] D -- C:\ProgramData\Package Cache O43 - CFD: 08/05/2017 - [] D -- C:\ProgramData\Razer O43 - CFD: 13/04/2017 - [] D -- C:\ProgramData\Recisio O43 - CFD: 10/05/2017 - [] D -- C:\ProgramData\Skype O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu O43 - CFD: 10/05/2017 - [0] D -- C:\ProgramData\SWCUTemp O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates O43 - CFD: 01/08/2016 - [] D -- C:\ProgramData\Wondershare O43 - CFD: 10/05/2017 - [] D -- C:\ProgramData\{2F9EEAFD-A5DC-603B-231A-FE79B95875B7} O43 - CFD: 10/05/2017 - [] D -- C:\ProgramData\{C8360D55-4274-8793-C4B2-19D15EF0921F} O43 - CFD: 17/09/2015 - [] D -- C:\Program Files (x86)\Common Files\Adobe O43 - CFD: 03/04/2017 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR O43 - CFD: 13/04/2017 - [] D -- C:\Program Files (x86)\Common Files\AV O43 - CFD: 27/01/2016 - [] D -- C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch O43 - CFD: 13/08/2016 - [] D -- C:\Program Files (x86)\Common Files\AVSMedia O43 - CFD: 03/04/2017 - [] D -- C:\Program Files (x86)\Common Files\AxaraMedia O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER O43 - CFD: 01/08/2016 - [] D -- C:\Program Files (x86)\Common Files\DivX Shared O43 - CFD: 04/04/2017 - [] D -- C:\Program Files (x86)\Common Files\Doblon O43 - CFD: 12/09/2016 - [] D -- C:\Program Files (x86)\Common Files\France Telecom O43 - CFD: 04/04/2017 - [] D -- C:\Program Files (x86)\Common Files\InstallShield O43 - CFD: 02/01/2011 - [] D -- C:\Program Files (x86)\Common Files\Intel O43 - CFD: 13/09/2015 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Games O43 - CFD: 18/09/2016 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared O43 - CFD: 08/05/2017 - [] D -- C:\Program Files (x86)\Common Files\Razer O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services O43 - CFD: 10/05/2017 - [] D -- C:\Program Files (x86)\Common Files\Skype O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines O43 - CFD: 14/09/2015 - [] D -- C:\Program Files (x86)\Common Files\System O43 - CFD: 27/01/2016 - [] D -- C:\Users\kiki\AppData\Roaming\Adobe O43 - CFD: 05/08/2016 - [] D -- C:\Users\kiki\AppData\Roaming\Anvsoft O43 - CFD: 27/01/2016 - [] D -- C:\Users\kiki\AppData\Roaming\Avanquest Software O43 - CFD: 17/09/2015 - [] D -- C:\Users\kiki\AppData\Roaming\AVAST Software O43 - CFD: 05/08/2016 - [] D -- C:\Users\kiki\AppData\Roaming\AVS4YOU O43 - CFD: 03/04/2017 - [] D -- C:\Users\kiki\AppData\Roaming\AxaraMedia O43 - CFD: 10/05/2017 - [] D -- C:\Users\kiki\AppData\Roaming\cacaoweb =>.Superfluous.CacaoWeb O43 - CFD: 27/01/2016 - [] D -- C:\Users\kiki\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant O43 - CFD: 03/04/2017 - [] D -- C:\Users\kiki\AppData\Roaming\com.simplestways.superstring2 O43 - CFD: 02/08/2016 - [] D -- C:\Users\kiki\AppData\Roaming\DivX O43 - CFD: 04/04/2017 - [] D -- C:\Users\kiki\AppData\Roaming\Doblon O43 - CFD: 02/10/2016 - [] D -- C:\Users\kiki\AppData\Roaming\fr.orange.assistancelivebox O43 - CFD: 11/02/2016 - [] D -- C:\Users\kiki\AppData\Roaming\HpUpdate O43 - CFD: 02/01/2011 - [] D -- C:\Users\kiki\AppData\Roaming\Identities O43 - CFD: 02/01/2011 - [] D -- C:\Users\kiki\AppData\Roaming\Intel O43 - CFD: 01/08/2016 - [] D -- C:\Users\kiki\AppData\Roaming\Intelli-studio O43 - CFD: 02/01/2011 - [] D -- C:\Users\kiki\AppData\Roaming\Macromedia O43 - CFD: 21/11/2010 - [0] D -- C:\Users\kiki\AppData\Roaming\Media Center Programs O43 - CFD: 09/01/2017 - [] SD -- C:\Users\kiki\AppData\Roaming\Microsoft O43 - CFD: 13/09/2015 - [] D -- C:\Users\kiki\AppData\Roaming\Microsoft Games O43 - CFD: 03/04/2017 - [] D -- C:\Users\kiki\AppData\Roaming\NCH Software O43 - CFD: 03/04/2017 - [] D -- C:\Users\kiki\AppData\Roaming\NVIDIA O43 - CFD: 27/01/2016 - [] D -- C:\Users\kiki\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy O43 - CFD: 10/02/2016 - [] D -- C:\Users\kiki\AppData\Roaming\Orange O43 - CFD: 14/09/2015 - [] D -- C:\Users\kiki\AppData\Roaming\Origin O43 - CFD: 09/10/2016 - [] D -- C:\Users\kiki\AppData\Roaming\PDF Pro 10 9 O43 - CFD: 18/09/2016 - [] D -- C:\Users\kiki\AppData\Roaming\PhotoFiltre 7 O43 - CFD: 23/11/2016 - [] D -- C:\Users\kiki\AppData\Roaming\Skype O43 - CFD: 16/09/2016 - [] D -- C:\Users\kiki\AppData\Roaming\Solvusoft O43 - CFD: 04/04/2017 - [0] D -- C:\Users\kiki\AppData\Roaming\WalaSoft O43 - CFD: 03/04/2017 - [] D -- C:\Users\kiki\AppData\Roaming\Xilisoft O43 - CFD: 10/05/2017 - [] D -- C:\Users\kiki\AppData\Roaming\ZHP O43 - CFD: 27/02/2017 - [] D -- C:\Users\kiki\AppData\Roaming\{A1299792-847B-FAE4-EF4D-DD36339F2008} O43 - CFD: 14/01/2017 - [] D -- C:\Users\kiki\AppData\Roaming\{DFEAE951-FAB8-8427-918E-A3F54D5C5ECB} O43 - CFD: 10/05/2017 - [] D -- C:\Users\kiki\AppData\Local\Adobe O43 - CFD: 02/01/2011 - [0] SHD -- C:\Users\kiki\AppData\Local\Application Data O43 - CFD: 18/09/2016 - [] D -- C:\Users\kiki\AppData\Local\Apps O43 - CFD: 28/01/2016 - [] D -- C:\Users\kiki\AppData\Local\Avanquest O43 - CFD: 27/01/2016 - [] D -- C:\Users\kiki\AppData\Local\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard O43 - CFD: 17/09/2015 - [] D -- C:\Users\kiki\AppData\Local\CEF O43 - CFD: 05/08/2016 - [] D -- C:\Users\kiki\AppData\Local\chromium O43 - CFD: 03/04/2017 - [] D -- C:\Users\kiki\AppData\Local\com.simplestways.superstring2 O43 - CFD: 03/04/2017 - [0] D -- C:\Users\kiki\AppData\Local\Conduit O43 - CFD: 01/08/2016 - [] D -- C:\Users\kiki\AppData\Local\converter O43 - CFD: 18/09/2016 - [0] D -- C:\Users\kiki\AppData\Local\Deployment O43 - CFD: 10/05/2017 - [] D -- C:\Users\kiki\AppData\Local\Diagnostics O43 - CFD: 10/05/2017 - [] D -- C:\Users\kiki\AppData\Local\ElevatedDiagnostics O43 - CFD: 01/08/2016 - [] D -- C:\Users\kiki\AppData\Local\fontconfig O43 - CFD: 05/08/2016 - [] D -- C:\Users\kiki\AppData\Local\FreemakeVideoConverter O43 - CFD: 28/10/2016 - [] D -- C:\Users\kiki\AppData\Local\Google O43 - CFD: 17/09/2015 - [] D -- C:\Users\kiki\AppData\Local\GWX O43 - CFD: 02/01/2011 - [0] SHD -- C:\Users\kiki\AppData\Local\Historique O43 - CFD: 16/09/2015 - [] D -- C:\Users\kiki\AppData\Local\HP O43 - CFD: 18/09/2016 - [] D -- C:\Users\kiki\AppData\Local\Microsoft O43 - CFD: 05/01/2016 - [] D -- C:\Users\kiki\AppData\Local\Microsoft Help O43 - CFD: 01/08/2016 - [] D -- C:\Users\kiki\AppData\Local\Movavi O43 - CFD: 27/01/2016 - [] D -- C:\Users\kiki\AppData\Local\Programs O43 - CFD: 08/05/2017 - [] D -- C:\Users\kiki\AppData\Local\Razer O43 - CFD: 17/12/2016 - [] D -- C:\Users\kiki\AppData\Local\reto O43 - CFD: 14/01/2017 - [] D -- C:\Users\kiki\AppData\Local\Setup41317286 O43 - CFD: 01/08/2016 - [] D -- C:\Users\kiki\AppData\Local\Suite O43 - CFD: 10/05/2017 - [] D -- C:\Users\kiki\AppData\Local\Temp O43 - CFD: 02/01/2011 - [0] SHD -- C:\Users\kiki\AppData\Local\Temporary Internet Files O43 - CFD: 01/08/2016 - [] D -- C:\Users\kiki\AppData\Local\VideoEditor O43 - CFD: 16/06/2016 - [] D -- C:\Users\kiki\AppData\Local\VirtualStore O43 - CFD: 05/08/2016 - [0] D -- C:\Users\kiki\AppData\Local\WMTools Downloaded Files O43 - CFD: 01/08/2016 - [] D -- C:\Users\kiki\AppData\Local\Wondershare O43 - CFD: 17/12/2016 - [] D -- C:\Users\kiki\AppData\Local\{8C45BA19-A8ED-D6A1-C575-F349E11D0FD1} O43 - CFD: 05/08/2016 - [] D -- C:\Users\kiki\AppData\Local\{A1749728-85DC-FB90-E844-DE78CC2C22E0} O43 - CFD: 14/01/2017 - [] D -- C:\Users\kiki\AppData\Local\{DFB7E9EB-FB1F-8553-9687-A0BBB2EF5C23} O43 - CFD: 14/07/2009 - [] RD -- C:\Users\kiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories O43 - CFD: 13/10/2016 - [] RD -- C:\Users\kiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools O43 - CFD: 14/07/2009 - [] RD -- C:\Users\kiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance O43 - CFD: 04/12/2015 - [0] D -- C:\Users\kiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7 O43 - CFD: 13/10/2016 - [] RD -- C:\Users\kiki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup ---\\ ShellIconOverlayIdentifiers (SIOI) (4) - 0s O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation O106 - SIOI: avast [00asw] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - Avast Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - Avast Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software ---\\ Enumération des clés StartupReg (1) - 1s O53 - SMSR:HKLM\...\startupreg\VirtualCloneDrive [Key] . (.Elaborate Bytes AG - Virtual CloneDrive Daemon.) -- C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe =>.Elaborate Bytes AG ---\\ Liste des pilotes du système (65) - 43s O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] =>.Microsoft Windows® O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] =>.Microsoft Windows® O58 - SDL:2011/03/11 08:41:12 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] =>.Microsoft Windows® O58 - SDL:2017/05/10 06:43:32 A . (.AVAST Software s.r.o. - IDS Application Activity Monitor Driver..) -- C:\Windows\System32\drivers\aswbidsdrivera.sys [311808] {07C70F7CAB145BC1ED385FBE69FA3130} =>.Avast Software s.r.o. O58 - SDL:2017/05/10 06:43:32 A . (.AVAST Software s.r.o. - Application Activity Monitor Helper Driver.) -- C:\Windows\System32\drivers\aswbidsha.sys [190256] {07C70F7CAB145BC1ED385FBE69FA3130} =>.Avast Software s.r.o. O58 - SDL:2017/05/10 06:43:32 A . (.AVAST Software s.r.o. - Logging Driver.) -- C:\Windows\System32\drivers\aswbloga.sys [334576] {07C70F7CAB145BC1ED385FBE69FA3130} =>.Avast Software s.r.o. O58 - SDL:2017/05/10 06:43:32 A . (.AVAST Software s.r.o. - Universal Driver.) -- C:\Windows\System32\drivers\aswbuniva.sys [49016] {07C70F7CAB145BC1ED385FBE69FA3130} =>.Avast Software s.r.o. O58 - SDL:2017/05/10 06:44:10 A . (.AVAST Software - Avast HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [38296] {07C70F7CAB145BC1ED385FBE69FA3130} =>.ALWIL Software O58 - SDL:2017/05/10 06:43:40 A . (.AVAST Software - Avast Keyboard Filter Driver.) -- C:\Windows\System32\drivers\aswKbd.sys [32600] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O58 - SDL:2017/05/10 06:44:10 A . (.AVAST Software - Avast File System Minifilter for Windows 20.) -- C:\Windows\System32\drivers\aswMonFlt.sys [128648] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O58 - SDL:2017/05/10 06:44:09 A . (.AVAST Software - Avast WFP Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr2.sys [101152] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O58 - SDL:2017/05/10 06:44:10 A . (.AVAST Software - Avast Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [75704] {07C70F7CAB145BC1ED385FBE69FA3130} =>.ALWIL Software O58 - SDL:2017/05/10 06:43:40 A . (.AVAST Software - Avast Virtualization Driver.) -- C:\Windows\System32\drivers\aswSnx.sys [1007160] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O58 - SDL:2017/05/10 06:44:10 A . (.AVAST Software - Avast self protection module.) -- C:\Windows\System32\drivers\aswSP.sys [569192] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O58 - SDL:2017/05/10 06:44:10 A . (.AVAST Software - Stream Filter.) -- C:\Windows\System32\drivers\aswStm.sys [158368] {07C70F7CAB145BC1ED385FBE69FA3130} =>.AVAST Software O58 - SDL:2017/05/10 06:44:10 A . (.AVAST Software - Avast VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [339696] {07C70F7CAB145BC1ED385FBE69FA3130} =>.ALWIL Software O58 - SDL:2009/06/10 22:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] =>.Broadcom Corporation O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] =>.Brother Industries, Ltd. O58 - SDL:2009/06/10 22:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] =>.Brother Industries, Ltd. O58 - SDL:2009/07/14 03:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] =>.Brother Industries Ltd. O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] =>.Brother Industries Ltd. O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] =>.Brother Industries Ltd. O58 - SDL:2009/06/10 22:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] =>.Brother Industries Ltd. O58 - SDL:2009/06/10 22:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] =>.Broadcom Corporation O58 - SDL:2009/07/14 03:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] =>.Microsoft Windows® O58 - SDL:2014/12/21 00:31:04 A . (.Elaborate Bytes AG - ElbyCD Windows x64 I/O driver.) -- C:\Windows\System32\drivers\ElbyCDIO.sys [40344] =>.Elaborate Bytes AG® O58 - SDL:2009/07/14 03:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] =>.Microsoft Windows® O58 - SDL:2009/06/10 22:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] =>.Broadcom Corporation O58 - SDL:2009/06/10 22:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] =>.Hauppauge Computer Works, Inc. O58 - SDL:2009/09/17 19:54:54 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] =>.Intel Corporation® O58 - SDL:2010/11/21 05:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] =>.Microsoft Windows® O58 - SDL:2011/03/11 08:41:26 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] =>.Microsoft Windows® O58 - SDL:2011/08/09 09:32:02 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [12289472] =>.Intel Corporation O58 - SDL:2009/07/14 03:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] =>.Microsoft Windows® O58 - SDL:2010/02/26 17:32:14 A . (.Intel Corporation - Intel(R) Turbo Boost Technology Driver.) -- C:\Windows\System32\drivers\Impcd.sys [158976] =>.Intel Corporation O58 - SDL:2010/10/15 02:28:16 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [317440] =>.Intel(R) Corporation O58 - SDL:2011/03/23 11:20:58 A . (.Atheros Communications, Inc. - Atheros L1c PCI-E Gigabit Ethernet Controll.) -- C:\Windows\System32\drivers\L1C62x64.sys [77936] =>.Atheros Communications Inc.® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] =>.Microsoft Windows® O58 - SDL:2011/01/04 12:29:46 A . (.Intel Corporation - Intel® Wireless WiFi Link Driver.) -- C:\Windows\System32\drivers\NETwNs64.sys [8507392] =>.Intel Corporation O58 - SDL:2009/07/14 03:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] =>.Microsoft Windows® O58 - SDL:2013/09/05 03:36:46 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvlddmkm.sys [11273504] =>.NVIDIA Corporation® O58 - SDL:2013/09/05 03:37:00 A . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version.) -- C:\Windows\System32\drivers\nvpciflt.sys [30496] =>.NVIDIA Corporation® O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] =>.Microsoft Windows® O58 - SDL:2011/03/11 08:41:34 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] =>.Microsoft Windows® O58 - SDL:2016/10/08 08:56:09 A . (.Razer, Inc. - Razer Overlay Support.) -- C:\Windows\System32\drivers\rzpnk.sys [137840] =>.Razer Inc.® O58 - SDL:2009/06/10 22:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2009/07/14 03:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] =>.Microsoft Windows® O58 - SDL:2014/05/03 18:53:40 A . (.Elaborate Bytes AG - Virtual CloneDrive storage miniport.) -- C:\Windows\System32\drivers\VClone.sys [34816] =>.Elaborate Bytes AG O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] =>.Microsoft Windows® O58 - SDL:2009/07/14 03:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] =>.Microsoft Windows® ---\\ Derniers fichiers modifiés ou crées (Utilisateur) (1) - 12s O61 - LFC: 2017/05/10 08:44:58 A . (..) -- C:\Users\kiki\AppData\Local\Razer\Accounts\AllAccounts.bin [768] ---\\ Associations Shell Spawning (10) - 0s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe {330000014096A9EE7056FECC07000100000140} =>.Microsoft Corporation O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (16) - 0s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.The Chromium Authors - Chromium.) -- C:\Users\kiki\AppData\Local\Chromium\Application\chrome.exe =>.The Chromium Authors O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe {2A9C21ACAAA63A3C58A7B9322BEE948D} =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\Launcher.exe =>.AVAST Software s.r.o.® O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.The Chromium Authors - Chromium.) -- C:\Users\kiki\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.The Chromium Authors - Chromium.) -- C:\Users\kiki\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.The Chromium Authors - Chromium.) -- C:\Users\kiki\AppData\Local\chromium\Application\chrome.exe =>.The Chromium Authors O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Avast Software - Avast SafeZone Browser.) -- C:\Program Files\AVAST Software\SZBrowser\launcher.exe =>.AVAST Software ---\\ Recherche d'infection sur les navigateurs (6) - 1s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Yahoo! Powered) - http://fr.search.yahoo.com/ =>.Yahoo Search O69 - SBI: SearchScopes [HKCU] {2f23ab71-4ac6-41f2-a955-ea576e553146} - (Bing) - http://www.bing.com/ O69 - SBI: SearchScopes [HKCU] {95B7759C-8C7F-4BF1-B163-73684A933233} - (AVG Secure Search) - http://mysearch.avg.com/ =>PUP.Optional.MyWebSearch O69 - SBI: SearchScopes [HKCU] {D001A408-ACBB-4930-85FF-672776E81A6B} - (AxaraMedia Customized Web Search) - http://search.conduit.com/ =>PUP.Optional.Conduit O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Yahoo! Powered) - http://fr.search.yahoo.com/ =>.Yahoo Search O69 - SBI: SearchScopes [HKLM] {2f23ab71-4ac6-41f2-a955-ea576e553146} - (@ieframe.dll,-12512) - http://www.bing.com/ ---\\ Enumère les services démarrés par Svchost (32) - 1s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [794624] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [859648] =>.Microsoft Corporation O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680448] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] =>.Microsoft Corporation O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [683520] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2651136] =>.Microsoft Corporation O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110016] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] =>.Microsoft Corporation ---\\ Liste des exceptions du parefeu Windows (19) - 4s O87 - FAEL: "TCP Query User{C6A1A4C8-1AB1-461D-8106-7B349ADBB9B8}C:\users\kiki\downloads\ffinstonline.exe" [In-None-P6-TRUE] .(.Free Time Co., Ltd. - Format Factory Online Installer.) -- C:\users\kiki\downloads\ffinstonline.exe {6404DB61004532252326E3EE1DAB5AB2} O87 - FAEL: "UDP Query User{1BAC3254-4AEF-4E49-8FB2-C4E0AB01418A}C:\users\kiki\downloads\ffinstonline.exe" [In-None-P17-TRUE] .(.Free Time Co., Ltd. - Format Factory Online Installer.) -- C:\users\kiki\downloads\ffinstonline.exe {6404DB61004532252326E3EE1DAB5AB2} O87 - FAEL: "{2B98013B-A943-4C50-B41F-78DEC0272914}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\FormatFactory\FormatFactory.exe (.not file.) O87 - FAEL: "{0EA59044-0749-452F-8CA1-968994EA74DF}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (.not file.) O87 - FAEL: "{8E063D28-5533-42D5-A86E-7E2D6680CECA}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\FormatFactory\FormatFactory.exe (.not file.) O87 - FAEL: "{6A1DA102-5C99-4278-88CC-B9FD5D542362}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (.not file.) O87 - FAEL: "{CFF985D5-B55C-4988-B506-82FE45E1CC78}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\FormatFactory\FFModules\Package\PTInstOnline.exe (.not file.) O87 - FAEL: "TCP Query User{AF667901-E72C-4C76-A805-75C8E6996E6F}D:\assistance livebox\dist\st2.exe" [In-None-P6-TRUE] .(...) -- D:\assistance livebox\dist\st2.exe (.not file.) O87 - FAEL: "UDP Query User{0808BAF2-4A7B-4BC3-A7D4-9FB80C022D2D}D:\assistance livebox\dist\st2.exe" [In-None-P17-TRUE] .(...) -- D:\assistance livebox\dist\st2.exe (.not file.) O87 - FAEL: "TCP Query User{13E7D05A-648C-44B8-BEC5-8EAE9FF94BEF}C:\users\kiki\appdata\local\google\chrome\application\chrome.exe" [In-None-P6-TRUE] .(...) -- C:\users\kiki\appdata\local\google\chrome\application\chrome.exe (.not file.) O87 - FAEL: "UDP Query User{B6FC2C69-C2A7-40F5-B731-C2ECCAA47478}C:\users\kiki\appdata\local\google\chrome\application\chrome.exe" [In-None-P17-TRUE] .(...) -- C:\users\kiki\appdata\local\google\chrome\application\chrome.exe (.not file.) O87 - FAEL: "TCP Query User{8C7A6F5E-DFDD-4BB6-A9D5-111164C230BE}C:\users\kiki\appdata\local\google\chrome\application\chrome.exe" [In-None-P6-TRUE] .(...) -- C:\users\kiki\appdata\local\google\chrome\application\chrome.exe (.not file.) O87 - FAEL: "UDP Query User{66AF1090-6F61-45A8-BFE4-5E1B643B7877}C:\users\kiki\appdata\local\google\chrome\application\chrome.exe" [In-None-P17-TRUE] .(...) -- C:\users\kiki\appdata\local\google\chrome\application\chrome.exe (.not file.) O87 - FAEL: "{50F02B86-518F-4BE8-B92A-A30010F8C798}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AxaraMedia\MP4VideoConverter\MP4VideoConverter.exe (.not file.) O87 - FAEL: "{AB55B8B5-690A-4738-BB8A-DEF7B7F4EFB9}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AxaraMedia\MP4VideoConverter\MP4VideoConverter.exe (.not file.) O87 - FAEL: "{8A28F1F6-2763-4793-93D2-6CC0D86D570A}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AxaraMedia\MP4VideoConverter\Activation.exe (.not file.) O87 - FAEL: "{B627BD6E-D1C5-4EE7-A6AC-4EA79A85E15C}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AxaraMedia\MP4VideoConverter\Activation.exe (.not file.) O87 - FAEL: "{70638830-FA3D-4258-AF47-ED56ED8B416F}" [In-None-P6-TRUE] .(...) -- C:\Program Files (x86)\AxaraMedia\MP4VideoConverter\Updater.exe (.not file.) O87 - FAEL: "{84C8E5B2-3D8A-40C4-A941-D637F94FFC19}" [In-None-P17-TRUE] .(...) -- C:\Program Files (x86)\AxaraMedia\MP4VideoConverter\Updater.exe (.not file.) ---\\ Recherche de clés de registre Tracing (2) - 1s HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 =>.Superfluous.ByteTechnologies HKLM\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS =>.Superfluous.ByteTechnologies ---\\ Scan Additionnel (17) - 0s HKLM\SOFTWARE\Wow6432Node\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard HKLM\SOFTWARE\Wow6432Node\AVG Security Toolbar =>Toolbar.AVGSearch HKCU\SOFTWARE\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard HKCU\SOFTWARE\cacaoweb =>.Superfluous.CacaoWeb HKCU\SOFTWARE\ICSW1.22 =>Adware.InstallCore HKCU\SOFTWARE\ProductSetup =>Adware.InstallCore HKCU\SOFTWARE\AppDataLow\Software\ConduitSearchScopes =>PUP.Optional.Conduit C:\ProgramData\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard C:\ProgramData\AVG Secure Search =>Toolbar.AVGSearch C:\Program Files (x86)\Common Files\AVG Secure Search =>Toolbar.AVGSearch C:\Users\kiki\AppData\Roaming\cacaoweb =>.Superfluous.CacaoWeb C:\Users\kiki\AppData\Roaming\OpenCandy =>PUP.Optional.OpenCandy C:\Users\kiki\AppData\Local\AVG SafeGuard toolbar =>Toolbar.AVGSafeGuard HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233} =>PUP.Optional.MyWebSearch HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{D001A408-ACBB-4930-85FF-672776E81A6B} =>PUP.Optional.Conduit HKLM64\SOFTWARE\Microsoft\Tracing\ByteFence_RASAPI32 =>.Superfluous.ByteTechnologies HKLM64\SOFTWARE\Microsoft\Tracing\ByteFence_RASMANCS =>.Superfluous.ByteTechnologies ---\\ Récapitulatif des éléments trouvés sur votre station (8) - 0s http://www.nicolascoolman.fr/?p=5143 =>Toolbar.AVGSearch http://www.nicolascoolman.fr/?p=5143 =>Toolbar.AVGSafeGuard http://www.nicolascoolman.fr/?p=338 =>.Superfluous.CacaoWeb http://www.nicolascoolman.fr/?p=279 =>Adware.InstallCore http://www.nicolascoolman.fr/?p=210 =>PUP.Optional.Conduit http://www.nicolascoolman.fr/?p=197 =>PUP.Optional.OpenCandy http://www.nicolascoolman.fr/?p=220 =>PUP.Optional.MyWebSearch http://www.nicolascoolman.fr/?p=5145 =>.Superfluous.ByteTechnologies ~ End of the scan, 20604 items in 00h03mn53s (867)(0)