~ ZHPDiag v2017.5.21.84 Par Nicolas Coolman (2017/05/21) ~ Démarré par client (Administrator) (2017/05/25 05:22:47) ~ Web: https://www.nicolascoolman.com ~ Blog: https://nicolascoolman.eu/ ~ Facebook: https://www.facebook.com/nicolascoolman1 ~ Etat de la version: Version OK ~ Mode: Scanner ~ Rapport: C:\Users\client\Desktop\ZHPDiag.txt ~ Rapport: C:\Users\client\AppData\Roaming\ZHP\ZHPDiag.txt ~ UAC: Activate ~ Démarrage du système: Normal (Normal boot) Windows Se7en Titan, 32-bit (Build 7600) =>.Microsoft Corporation ---\\ Navigateurs Internet (3) - 1s ~ GCIE: Google Chrome v58.0.3029.110 ~ MFIE: Mozilla Firefox 53.0.3 (x86 fr) ~ MSIE: Internet Explorer v9.0.8112.16421 ---\\ Informations sur les produits Windows (10) - 0s ~ Windows Server License Manager Script : OK ~ Licence Script File Génération : OK ~ Windows Operating System - Windows(R) 7, OEM_SLP channel System Locked Preinstallation (OEM_SLP) : OK Windows ID Activation : OK ~ Windows Partial Key : HYRR2 Windows License : OK ~ Windows Remaining Initializations Number : 1 Windows Automatic Updates : OK Windows Activation Technologies : OK ---\\ Logiciels de protection (2) - 12s ESET NOD32 Antivirus v10.0.390.0 (Protection) Malwarebytes version 3.0.6.1469 v3.0.6.1469 (Protection) ---\\ Logiciels de protection et autres (Superflus) (1) - 14s ~ SUPERAntiSpyware v6.0.1232 (Superfluous) ---\\ Logiciels d'optimisation (1) - 16s ~ CCleaner v5.30 (Optimize) ---\\ Surveillance de Logiciels (1) - 16s ~ Adobe Flash Player 25 PPAPI (Surveillance) ---\\ Logiciels de partage P2P (1) - 18s ~ µTorrent v3.4.9.43388 (P2P) ---\\ Informations sur le système (6) - 0s ~ Operating System: x86 Family 15 Model 4 Stepping 3, GenuineIntel ~ Operating System: 32-bit ~ Boot mode: Normal (Normal boot) Total RAM: 2028.792 MB (30% free) : OK =>.RAM Value System Restore: Activé (Enable) System drive C: has 56 GB (36%) free of 152 GB : OK =>.Disk Space ---\\ Mode de connexion au système (3) - 0s ~ Computer Name: CLIENT-PC ~ User Name: client ~ Logged in as Administrator ---\\ Enumération des unités disques (2) - 0s ~ Drive C: has 56 GB free of 152 GB (System) ~ Drive D: has 44 GB free of 78 GB ---\\ Etat du Centre de Sécurité Windows (12) - 0s [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK [HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoResolveSearch: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK [HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK [HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK [HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK ---\\ Recherche particulière de fichiers génériques (25) - 7s [MD5.2626FC9755BE22F805D3CFA0CE3EE727] - 31/10/2009 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2614272] =>.Microsoft Corporation [MD5.51138BEEA3E2C21EC44D0932C71762A8] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] =>.Microsoft Corporation [MD5.B5C5DCAD3899512020D135600129D665] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [96256] =>.Microsoft Corporation [MD5.C8ADAA6948993D839D14524847EA5B75] - 30/10/2013 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [1129472] =>.Microsoft Corporation [MD5.37CDB7E72EB66BA85A87CBE37E7F03FD] - 28/10/2009 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [285696] =>.Microsoft Corporation [MD5.58C94EAE54BF0C5E2B80B2E5E7744D4C] - 14/07/2009 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [193024] =>.Microsoft Corporation [MD5.62390F4ACE9E2B63E3CA26B7F7497897] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [269824] =>.Microsoft Corporation [MD5.D8714A5FB3141F8226D16861F20C5AC4] - 14/07/2009 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [19968] =>.Microsoft Corporation [MD5.0DB7A48388D54D154EBEC120461A0FCD] - 25/04/2011 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [338944] =>.Microsoft Corporation [MD5.338C86357871C167A96AB976519BF59E] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [21584] =>.Microsoft Windows® [MD5.77EA11B065E0A8AB902D78145CA51E10] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70656] =>.Microsoft Corporation [MD5.BA6E70AA0E6091BC39DE29477D866A77] - 14/07/2009 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [108544] =>.Microsoft Corporation [MD5.83D1ECEA8FAAE75604C0FA49AC7AD996] - 27/04/2011 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [78336] =>.Microsoft Corporation [MD5.717A2207FD6F13AD3E664C7D5A43C7BF] - 14/07/2009 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [108544] =>.Microsoft Corporation [MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [80896] =>.Microsoft Corporation [MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [101888] =>.Microsoft Corporation [MD5.CA7570E42522E24324A12161DB14EC02] - 04/05/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [123392] =>.Microsoft Corporation [MD5.DD52A733BF4CA5AF84562A5E2F963B91] - 14/07/2009 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [187904] =>.Microsoft Corporation [MD5.A8F59428E9F361C7AC42A94AC1560BC9] - 12/04/2013 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1210728] =>.Microsoft Windows® [MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [79360] =>.Microsoft Corporation [MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 14/07/2009 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] =>.Microsoft Corporation [MD5.C5FF95883FFEF704D50C40D21CFB3AB5] - 14/07/2009 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [133120] =>.Microsoft Corporation [MD5.3E21C083B8A01CB70BA1F09303010FCE] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [71168] =>.Microsoft Corporation [MD5.CB39E896A2A83702D1737BFD402B3542] - 14/07/2009 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [74240] =>.Microsoft Corporation [MD5.59F06B4968E58BC83DFC56CA4517960E] - 06/09/2012 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [245616] =>.Microsoft Windows® ---\\ Liste des services NT non Microsoft et non désactivés (8) - 6s O23 - Service: SAS Core Service (!SASCORE) . (.SUPERAntiSpyware.com - Core Service.) - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE =>.SUPERAntiSpyware.com® O23 - Service: (AdobeUpdateService) . (.Adobe Systems Incorporated - Adobe Update Service.) - C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe =>.Adobe Systems Incorporated® O23 - Service: Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) - C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Systems Incorporated® O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe =>.ESET, spol. s r.o.® O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® O23 - Service: Malwarebytes Service (MBAMService) . (.Malwarebytes - Malwarebytes Service.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation® O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Software Sarl® O23 - Service: VIA Karaoke digital mixer Service (VIAKaraokeService) . (.VIA Technologies, Inc. - Service binary.) - C:\Windows\System32\viakaraokesrv.exe =>.VIA Technologies Inc.® ---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (14) - 266s SR - Auto [11/02/2017] [ 143776] SAS Core Service (!SASCORE) . (.SUPERAntiSpyware.com.) - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE =>.SUPERAntiSpyware.com® SS - Demand [13/05/2017] [ 271864] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [03/06/2016] [ 737984] (AdobeUpdateService) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe =>.Adobe Systems Incorporated® SR - Auto [27/02/2017] [ 2227312] Adobe Genuine Software Integrity Service (AGSService) . (.Adobe Systems, Incorporated.) - C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe =>.Adobe Systems Incorporated® SS - Demand [29/09/2016] [ 211520] DiskDrill Watcher (cfbackd) . (.CleverFiles.) - C:\Program Files\CleverFiles\Disk Drill\cfbackd.w32.exe =>.508 Software, LLC® SR - Auto [14/12/2016] [ 2241992] ESET Service (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe =>.ESET, spol. s r.o.® SS - Demand [05/11/2013] [ 654848] FLEXnet Licensing Service (FLEXnet Licensing Service) . (.Macrovision Europe Ltd..) - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe =>.Macrovision Europe Ltd. SS - Auto [15/02/2017] [ 153752] Service Google Update (gupdate) (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SS - Demand [15/02/2017] [ 153752] Service Google Update (gupdatem) (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe =>.Google Inc® SR - Auto [20/01/2017] [ 3303888] Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation® SS - Demand [23/05/2017] [ 173512] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation® SS - Demand [01/03/2013] [ 118520] Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.Riverbed Technology, Inc..) - C:\Program Files\WinPcap\rpcapd.exe =>.Riverbed Technology, Inc.® SS - Auto [23/03/2016] [ 327808] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files\Skype\Updater\Updater.exe =>.Skype Software Sarl® SR - Auto [23/03/2016] [ 327808] VIA Karaoke digital mixer Service (VIAKaraokeService) . (.VIA Technologies, Inc..) - C:\Windows\System32\viakaraokesrv.exe =>.VIA Technologies Inc.® ---\\ Tâches planifiées en automatique (62) - 74s [MD5.6DC44621EA6A06A7EC2F71C5D788FF3F] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [1278456] (.Activate.) =>.Adobe Systems Incorporated® [MD5.99CE7A1C3AB82125EE3FDB446418865B] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [271864] (.Activate.) =>.Adobe Systems Incorporated® [MD5.A0E32171EFB9432D0746F5EF728BB0FB] [APT] [AdobeAAMUpdater-1.0-client-PC-client] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128] (.Activate.) =>.Adobe Systems Incorporated® [MD5.00000000000000000000000000000000] [APT] [avast! Emergency Update] (...) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.E5550587CC154E805433DFC99CE7937E] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [7619288] (.Activate.) =>.Piriform Ltd® [MD5.78DAD939AB2154B13ADC3715571B62EC] [APT] [GlaryInitialize 5] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities 5\Initialize.exe [134608] (.Activate.) =>.Glarysoft LTD® [MD5.2D8BBF6C7241AAD9EDE7708EBB7B43A4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [153752] (.Activate.) =>.Google Inc® [MD5.2D8BBF6C7241AAD9EDE7708EBB7B43A4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe [153752] (.Activate.) =>.Google Inc® [MD5.732715B4BA6250BAFD1A5814C083C6A9] [APT] [GU5SkipUAC] (.Glarysoft Ltd.) -- C:\Program Files\Glary Utilities 5\Integrator.exe [898000] (.Activate.) =>.Glarysoft LTD® [MD5.00000000000000000000000000000000] [APT] [Microsoft_Hardware_Launch_ipoint_exe] (...) -- c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [Microsoft_Hardware_Launch_itype_exe] (...) -- c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{0DEC856A-B27D-44C4-B25D-ABC7C5E4C3FF}] (...) -- C:\Users\client\Desktop\VMware-workstation-full-10.0.1-1379776.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{2051E5F7-18E7-4FD4-BD3A-6BD4A5F1456F}] (...) -- C:\Users\client\Desktop\Vinyl_V680D\SETUP.EXE (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{21E1B64B-3F2D-4888-A8FA-3100FB83FF9E}] (...) -- C:\Users\client\Desktop\OnLineRecovery_JF620_v9.0.0.19.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.9710FABEF9AD37A3AA966AF53BCBDD1A] [APT] [{249582B0-5DF6-49A0-87DE-24A9AC8CC4F6}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe [517064] (.Activate.) =>.Mozilla Corporation® [MD5.C155A13687144076286989EF078112C2] [APT] [{26F2F708-815B-423A-8593-029898D3F113}] (.Nicolas Coolman.) -- C:\Program Files\ZHPFix\ZHPhep.exe [1917440] (.Activate.) =>.Nicolas Coolman [MD5.00000000000000000000000000000000] [APT] [{26F8F9FC-0696-40C8-860F-87DCD370D39E}] (...) -- C:\Users\client\Desktop\usr-gsm-support.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{3FBB019C-89AE-45B0-B727-1C97812DD50B}] (...) -- C:\Users\client\Desktop\AcroPro80_efg.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.9710FABEF9AD37A3AA966AF53BCBDD1A] [APT] [{4C603556-D639-4D56-B3F9-19D1BBC9C102}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe [517064] (.Activate.) =>.Mozilla Corporation® [MD5.00000000000000000000000000000000] [APT] [{5395AF44-E8EC-45A6-A1A5-ACF9D4F9CAD2}] (...) -- D:\CM6206(XP (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.9710FABEF9AD37A3AA966AF53BCBDD1A] [APT] [{5727FF09-B215-482D-A1EE-F0BAD803F749}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe [517064] (.Activate.) =>.Mozilla Corporation® [MD5.9710FABEF9AD37A3AA966AF53BCBDD1A] [APT] [{733F508A-C6D3-46B6-AC46-B45542F37F9B}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe [517064] (.Activate.) =>.Mozilla Corporation® [MD5.00000000000000000000000000000000] [APT] [{80FCD633-E8A4-482C-855C-62E74FC9DFBD}] (...) -- C:\Users\client\Desktop\ca_setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{A1F37516-2B52-435D-A310-75D09E8B6F40}] (...) -- C:\Users\client\Desktop\ZHPFix.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.9710FABEF9AD37A3AA966AF53BCBDD1A] [APT] [{A5DCEB8F-5AB3-4EDE-B436-90F83D146B13}] (.Mozilla Corporation.) -- c:\program files\mozilla firefox\firefox.exe [517064] (.Activate.) =>.Mozilla Corporation® [MD5.00000000000000000000000000000000] [APT] [{AD0BF75A-A394-481D-9852-4AA3F8F7B135}] (...) -- C:\Users\client\Desktop\Vinyl_V680D\SETUP.EXE (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{B2333C23-53E8-4172-AC95-9AA5BA297E8A}] (...) -- C:\Users\client\Desktop\nb_driver_t1028_win7_touchpad_7.0.6.1\setup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{C324062C-5F47-4A49-9565-AFAB9D37B9A2}] (...) -- D:\CH340SER.EXE (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{C3ADB6DB-E4C2-48ED-B650-982275B976F4}] (...) -- C:\Users\client\Desktop\VIA_Audio_V6017200_XPVistaWin7\AsusSetup.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{CA1B7E8D-1A62-4317-8203-E29EE31644C0}] (...) -- C:\Users\client\Downloads\ZHPFix(1).exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{D3A3DAD9-BBA1-4D21-9452-E13866EA6BF4}] (...) -- C:\Users\client\Desktop\usr-gsm-support_2.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty [MD5.00000000000000000000000000000000] [APT] [{F3700C19-6195-4331-9193-7CEBF6F33CCC}] (...) -- C:\Users\client\Desktop\VMware-workstation-full-9.0.3-1410761.exe (.not file.) [0] (.Activate.) =>.Superfluous.Empty O39 - APT: Adobe Flash Player PPAPI Notifier - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier [4626] =>.Adobe Systems Incorporated® O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [4486] =>.Adobe Systems Incorporated® O39 - APT: AdobeAAMUpdater-1.0-client-PC-client - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-client-PC-client [3496] =>.Adobe Systems Incorporated® O39 - APT: avast! Emergency Update - (...) -- C:\Windows\System32\Tasks\avast! Emergency Update [3926] (.Orphan.) =>.Superfluous.Orphan O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2774] =>.Piriform Ltd® O39 - APT: GlaryInitialize 5 - (.Glarysoft Ltd.) -- C:\Windows\System32\Tasks\GlaryInitialize 5 [3304] =>.Glarysoft LTD® O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [3360] =>.Google Inc® O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [3488] =>.Google Inc® O39 - APT: GU5SkipUAC - (.Glarysoft Ltd.) -- C:\Windows\System32\Tasks\GU5SkipUAC [2964] =>.Glarysoft LTD® O39 - APT: {0DEC856A-B27D-44C4-B25D-ABC7C5E4C3FF} - (...) -- C:\Windows\System32\Tasks\{0DEC856A-B27D-44C4-B25D-ABC7C5E4C3FF} [3210] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {2051E5F7-18E7-4FD4-BD3A-6BD4A5F1456F} - (...) -- C:\Windows\System32\Tasks\{2051E5F7-18E7-4FD4-BD3A-6BD4A5F1456F} [3168] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {21E1B64B-3F2D-4888-A8FA-3100FB83FF9E} - (...) -- C:\Windows\System32\Tasks\{21E1B64B-3F2D-4888-A8FA-3100FB83FF9E} [3170] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {249582B0-5DF6-49A0-87DE-24A9AC8CC4F6} - (.Mozilla Corporation.) -- C:\Windows\System32\Tasks\{249582B0-5DF6-49A0-87DE-24A9AC8CC4F6} [3130] =>.Mozilla Corporation® O39 - APT: {26F2F708-815B-423A-8593-029898D3F113} - (.Nicolas Coolman.) -- C:\Windows\System32\Tasks\{26F2F708-815B-423A-8593-029898D3F113} [3128] =>.Nicolas Coolman O39 - APT: {26F8F9FC-0696-40C8-860F-87DCD370D39E} - (...) -- C:\Windows\System32\Tasks\{26F8F9FC-0696-40C8-860F-87DCD370D39E} [3138] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {3FBB019C-89AE-45B0-B727-1C97812DD50B} - (...) -- C:\Windows\System32\Tasks\{3FBB019C-89AE-45B0-B727-1C97812DD50B} [3134] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {4C603556-D639-4D56-B3F9-19D1BBC9C102} - (.Mozilla Corporation.) -- C:\Windows\System32\Tasks\{4C603556-D639-4D56-B3F9-19D1BBC9C102} [3062] =>.Mozilla Corporation® O39 - APT: {5395AF44-E8EC-45A6-A1A5-ACF9D4F9CAD2} - (...) -- C:\Windows\System32\Tasks\{5395AF44-E8EC-45A6-A1A5-ACF9D4F9CAD2} [3122] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {5727FF09-B215-482D-A1EE-F0BAD803F749} - (.Mozilla Corporation.) -- C:\Windows\System32\Tasks\{5727FF09-B215-482D-A1EE-F0BAD803F749} [3062] =>.Mozilla Corporation® O39 - APT: {733F508A-C6D3-46B6-AC46-B45542F37F9B} - (.Mozilla Corporation.) -- C:\Windows\System32\Tasks\{733F508A-C6D3-46B6-AC46-B45542F37F9B} [3080] =>.Mozilla Corporation® O39 - APT: {80FCD633-E8A4-482C-855C-62E74FC9DFBD} - (...) -- C:\Windows\System32\Tasks\{80FCD633-E8A4-482C-855C-62E74FC9DFBD} [3124] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {A1F37516-2B52-435D-A310-75D09E8B6F40} - (...) -- C:\Windows\System32\Tasks\{A1F37516-2B52-435D-A310-75D09E8B6F40} [3120] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {A5DCEB8F-5AB3-4EDE-B436-90F83D146B13} - (.Mozilla Corporation.) -- C:\Windows\System32\Tasks\{A5DCEB8F-5AB3-4EDE-B436-90F83D146B13} [3060] =>.Mozilla Corporation® O39 - APT: {AD0BF75A-A394-481D-9852-4AA3F8F7B135} - (...) -- C:\Windows\System32\Tasks\{AD0BF75A-A394-481D-9852-4AA3F8F7B135} [3166] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {B2333C23-53E8-4172-AC95-9AA5BA297E8A} - (...) -- C:\Windows\System32\Tasks\{B2333C23-53E8-4172-AC95-9AA5BA297E8A} [3270] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {C324062C-5F47-4A49-9565-AFAB9D37B9A2} - (...) -- C:\Windows\System32\Tasks\{C324062C-5F47-4A49-9565-AFAB9D37B9A2} [3042] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {C3ADB6DB-E4C2-48ED-B650-982275B976F4} - (...) -- C:\Windows\System32\Tasks\{C3ADB6DB-E4C2-48ED-B650-982275B976F4} [3250] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {CA1B7E8D-1A62-4317-8203-E29EE31644C0} - (...) -- C:\Windows\System32\Tasks\{CA1B7E8D-1A62-4317-8203-E29EE31644C0} [3134] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {D3A3DAD9-BBA1-4D21-9452-E13866EA6BF4} - (...) -- C:\Windows\System32\Tasks\{D3A3DAD9-BBA1-4D21-9452-E13866EA6BF4} [3166] (.Orphan.) =>.Superfluous.Orphan O39 - APT: {F3700C19-6195-4331-9193-7CEBF6F33CCC} - (...) -- C:\Windows\System32\Tasks\{F3700C19-6195-4331-9193-7CEBF6F33CCC} [3182] (.Orphan.) =>.Superfluous.Orphan ---\\ Applications lancées au démarrage du système (10) - 9s O4 - HKLM\..\Run: [Malwarebytes TrayApp] . (.Malwarebytes - Malwarebytes Tray Application.) -- C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe =>.Malwarebytes Corporation® O4 - HKLM\..\Run: [Format USB Or Flash Drive Software.exe] (.Orphan.) =>.Superfluous.Orphan O4 - HKCU\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files\Glary Utilities 5\StartupManager.exe =>.Glarysoft LTD® O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd® O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation O4 - HKUS\S-1-5-21-1232685658-3022869609-2679843856-1000\..\Run: [GUDelayStartup] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files\Glary Utilities 5\StartupManager.exe =>.Glarysoft LTD® O4 - HKUS\S-1-5-21-1232685658-3022869609-2679843856-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd® ---\\ Processus lancés (19) - 23s [MD5.407EA7642C77C84A25BFBE7D6986499A] - (.ESET - ESET Service.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2241992] [PID.712] =>.ESET, spol. s r.o.® [MD5.12A819FD070C26877A2C2D32EEF276F9] - (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [6852224] [PID.1684] =>.ESET, spol. s r.o.® [MD5.4570BB456EEA6AB2A92F60644DFB031B] - (.SUPERAntiSpyware.com - Core Service.) -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [143776] [PID.1836] =>.SUPERAntiSpyware.com® [MD5.8A910356CAE9606D1F40F25570B284AF] - (.Adobe Systems Incorporated - Adobe Update Service.) -- C:\Program Files\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [737984] [PID.1872] =>.Adobe Systems Incorporated® [MD5.A32EA26C90A47B2BC93D7B0B94994B11] - (.Adobe Systems, Incorporated - Adobe Genuine Software Integrity Service.) -- C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312] [PID.1952] =>.Adobe Systems Incorporated® [MD5.4439C5975D551B52FEB296FD04366C83] - (.VIA Technologies, Inc. - Service binary.) -- C:\Windows\System32\viakaraokesrv.exe [27760] [PID.1244] =>.VIA Technologies Inc.® [MD5.5E7C103F8475C4289847D15E129C20F7] - (.Microsoft Corp. - Microsoft® Windows Live ID Service.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [1713904] [PID.1504] =>.Microsoft Corporation® [MD5.ADED0E73F165B8353690F8055A51154D] - (.Malwarebytes - Malwarebytes Service.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3303888] [PID.1356] =>.Malwarebytes Corporation® [MD5.A6A21A7D544675E98C040DA18904CF50] - (.Malwarebytes - Malwarebytes Tray Application.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe [2780112] [PID.2192] =>.Malwarebytes Corporation® [MD5.DAF0C7D1F4E9B057C8151D0B92A6BDA5] - (.Microsoft Corp. - Microsoft® Windows Live ID Service Monitor.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE [194304] [PID.2208] =>.Microsoft Corporation® [MD5.637657735864768EB5378B5AA51919A2] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [976216] [PID.2520] =>.Google Inc® [MD5.637657735864768EB5378B5AA51919A2] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [976216] [PID.1820] =>.Google Inc® [MD5.637657735864768EB5378B5AA51919A2] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [976216] [PID.1712] =>.Google Inc® [MD5.637657735864768EB5378B5AA51919A2] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [976216] [PID.2844] =>.Google Inc® [MD5.637657735864768EB5378B5AA51919A2] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [976216] [PID.4036] =>.Google Inc® [MD5.6C88188108262E1C54DBECBF1D82C710] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\client\AppData\Roaming\ZHP\ZHPDiag3.exe [2731520] [PID.2188] =>.Nicolas Coolman [MD5.637657735864768EB5378B5AA51919A2] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [976216] [PID.3912] =>.Google Inc® [MD5.637657735864768EB5378B5AA51919A2] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [976216] [PID.620] =>.Google Inc® [MD5.637657735864768EB5378B5AA51919A2] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [976216] [PID.3352] =>.Google Inc® ---\\ Google Chrome, Démarrage,Recherche,Extensions (12) - 1s G0 - GCSP: Preferences [User Data\Default][HomePage] http://apis.google.com =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://consent.google.com =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://fonts.googleapis.com =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://id.google.fr =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://ssl.gstatic.com =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.com =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.dz =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.google.fr =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.gstatic.com =>.Google Inc. G0 - GCSP: Preferences [User Data\Default][HomePage] http://www.nicolascoolman.com =>.Nicolas Coolman G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Chrome manifest =>.Google Inc. G2 - GCE: Preference [User Data\Default] [pkedcjkdefgpdelpbcmbmeomcjbeemfm] Chrome Media Router =>.Google Inc. ---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (1) - 11s P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_20_0_0_286.dll =>.Adobe Systems Incorporated ---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (11) - 1s R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://google.com =>.Google Inc. R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/ =>.Bing.com R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com =>.Google Inc. R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/ =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://google.com =>.Google Inc. R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com =>.Google Inc. R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk =>.Microsoft Corporation R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.com =>.Google Inc. R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab =>.Microsoft Corporation R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphan =>.Microsoft Internet Explorer ---\\ Internet Explorer,Proxy Management (7) - 0s R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 0 R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll R5 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0 R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies [] =>.Microsoft ---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 1s F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation ---\\ Etude du fichier hosts (1) - 0s ~ Le fichier hôte est sain (The hosts file is clean) (36) ---\\ Browser Helper Object de navigateur (BHO) (3) - 3s O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll =>.Tonec Inc.® O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_112\bin\ssv.dll =>.Oracle America, Inc.® O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_112\bin\jp2ssv.dll =>.Oracle America, Inc.® ---\\ Raccourcis Global Startup (80) - 205s O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\client\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [Administrateur]: Data Doctor Recovery - SIM Card (Demo).lnk . (.Pro Data Doctor Pvt. Ltd. - Data Doctor Recovery - SIM Card (Demo).) C:\Program Files\Data Doctor Recovery - SIM Card (Demo)\Data Doctor Recovery - SIM Card (Demo).exe =>.Pro Data Doctor Pvt. Ltd.® O4 - GS\Quicklaunch [Administrateur]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD® O4 - GS\Quicklaunch [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [Administrateur]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Quicklaunch [Administrateur]: Microsoft Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE /recycle =>.Microsoft Corporation® O4 - GS\Quicklaunch [Administrateur]: Renee Undeleter.lnk . (.Rene.E Laboratory - Recover your important files immediately!.) C:\Program Files\Rene.E Laboratory\Undeleter\ReneeUndeleter.exe =>.Rene.E Laboratory Co., Ltd.® O4 - GS\Quicklaunch [Administrateur]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\client\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [Administrateur]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\sendTo [Administrateur]: MediaInfo.lnk . (...) C:\Program Files\K-Lite Codec Pack\Tools\mediainfo.exe O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl® O4 - GS\TaskBar [Administrateur]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [Administrateur]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\TaskBar [Administrateur]: Microsoft Word 2010.lnk . (...) C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\TaskBar [Administrateur]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\TaskBar [Administrateur]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\Desktop [client]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\client\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman O4 - GS\Quicklaunch [client]: Data Doctor Recovery - SIM Card (Demo).lnk . (.Pro Data Doctor Pvt. Ltd. - Data Doctor Recovery - SIM Card (Demo).) C:\Program Files\Data Doctor Recovery - SIM Card (Demo)\Data Doctor Recovery - SIM Card (Demo).exe =>.Pro Data Doctor Pvt. Ltd.® O4 - GS\Quicklaunch [client]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD® O4 - GS\Quicklaunch [client]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\Quicklaunch [client]: Launch Internet Explorer Browser.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\Quicklaunch [client]: Microsoft Outlook.lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE /recycle =>.Microsoft Corporation® O4 - GS\Quicklaunch [client]: Renee Undeleter.lnk . (.Rene.E Laboratory - Recover your important files immediately!.) C:\Program Files\Rene.E Laboratory\Undeleter\ReneeUndeleter.exe =>.Rene.E Laboratory Co., Ltd.® O4 - GS\Quicklaunch [client]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) C:\Users\client\AppData\Roaming\uTorrent\uTorrent.exe =>.BitTorrent Inc® O4 - GS\sendTo [client]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe /SendTo =>.Microsoft Corporation O4 - GS\sendTo [client]: MediaInfo.lnk . (...) C:\Program Files\K-Lite Codec Pack\Tools\mediainfo.exe O4 - GS\sendTo [client]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files\Skype\Phone\Skype.exe /sendto: =>.Skype Software Sarl® O4 - GS\TaskBar [client]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\TaskBar [client]: Internet Explorer.lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\TaskBar [client]: Microsoft Word 2010.lnk . (...) C:\Windows\Installer\{90140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation® O4 - GS\TaskBar [client]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\TaskBar [client]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\CommonDesktop [Public]: Format USB Or Flash Drive Software.lnk . (.Sobolsoft - .) C:\Program Files\Format USB Or Flash Drive Software\Format USB Or Flash Drive Software.exe =>.Sobolsoft O4 - GS\Accessories [Public]: Command Prompt.lnk . (.Microsoft Corporation - Interpréteur de commandes Windows.) C:\Windows\system32\cmd.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\Windows\system32\notepad.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Windows Explorer.lnk . (.Microsoft Corporation - Explorateur Windows.) C:\Windows\explorer.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Internet Explorer (No Add-ons).lnk . (.Microsoft Corporation - Internet Explorer.) C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O4 - GS\SystemTools [Public]: Private Character Editor.lnk . (.Microsoft Corporation - Éditeur de caractères privés.) C:\Windows\system32\eudcedit.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Calculator.lnk . (.Microsoft Corporation - Calculatrice de Windows.) C:\Windows\system32\calc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: displayswitch.lnk . (.Microsoft Corporation - Afficher le commutateur.) C:\Windows\system32\displayswitch.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - Accessoire du panneau de saisie mathématiqu.) C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Mobility Center.lnk . (.Microsoft Corporation - Centre de mobilité Windows.) C:\Windows\system32\mblctr.exe /open =>.Microsoft Corporation O4 - GS\Accessories [Public]: NetworkProjection.lnk . (.Microsoft Corporation - Connect to a Network Projector.) C:\Windows\system32\NetProj.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\Windows\system32\mspaint.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\Windows\system32\mstsc.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture.) C:\Windows\system32\SnippingTool.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sound Recorder.lnk . (.Microsoft Corporation - Magnétophone Windows.) C:\Windows\system32\SoundRecorder.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sticky Notes.lnk . (.Microsoft Corporation - Pense-bête.) C:\Windows\system32\StikyNot.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Sync Center.lnk . (.Microsoft Corporation - Microsoft Sync Center.) C:\Windows\System32\mobsync.exe =>.Microsoft Corporation O4 - GS\Accessories [Public]: Welcome Center.lnk . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) C:\Windows\system32\rundll32.exe %SystemRoot%\system32\OobeFldr.dll,ShowWelcomeCenter LaunchedBy_StartMenuShortcut =>.Microsoft Corporation O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files\Windows NT\Accessories\wordpad.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\Windows\system32\charmap.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: dfrgui.lnk . (.Microsoft Corporation - Défragmenteur de disque Microsoft®.) C:\Windows\system32\dfrgui.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Disk Cleanup.lnk . (.Microsoft Corporation - Gestionnaire de nettoyage de disque pour Wi.) C:\Windows\system32\cleanmgr.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Resource Monitor.lnk . (.Microsoft Corporation - Moniteur de ressources et de performances.) C:\Windows\system32\perfmon.exe /res =>.Microsoft Corporation O4 - GS\SystemTools [Public]: System Information.lnk . (.Microsoft Corporation - Informations système.) C:\Windows\system32\msinfo32.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: System Restore.lnk . (.Microsoft Corporation - Restauration du système de Microsoft® Windo.) C:\Windows\system32\rstrui.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc /s =>..Microsoft Corporation O4 - GS\SystemTools [Public]: Windows Easy Transfer Reports.lnk . (.Microsoft Corporation - Application post-migration de transfert de.) C:\Windows\system32\migwiz\postmig.exe =>.Microsoft Corporation O4 - GS\SystemTools [Public]: Windows Easy Transfer.lnk . (.Microsoft Corporation - Application Transfert de fichiers et paramè.) C:\Windows\system32\migwiz\migwiz.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Acrobat Distiller 8.lnk . (...) C:\Windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Distiller.exe O4 - GS\ProgramsCommon [Public]: Adobe Acrobat 8 Professional.lnk . (...) C:\Windows\Installer\{AC76BA86-1033-F400-7760-000000000003}\_SC_Acrobat.exe O4 - GS\ProgramsCommon [Public]: Adobe Creative Cloud.lnk . (.Adobe Systems Incorporated - Adobe Creative Cloud.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe =>.Adobe Systems Incorporated® O4 - GS\ProgramsCommon [Public]: Adobe LiveCycle Designer 8.0.lnk . (.Adobe Systems Incorporated - Adobe LiveCycle Designer.) C:\Program Files\Adobe\Acrobat 8.0\Designer 8.0\FormDesigner.exe {5C8DD1540A69B806B3355A5FA8A60577} =>.Adobe Systems Incorporated O4 - GS\ProgramsCommon [Public]: Adobe Photoshop CC 2015 (32 Bit).lnk . (.Adobe Systems, Incorporated - Adobe Photoshop CC 2015.) C:\Program Files\Adobe\Adobe Photoshop CC 2015 (32 Bit)\Photoshop.exe =>.Adobe Systems Incorporated® O4 - GS\ProgramsCommon [Public]: Glary Utilities 5.lnk . (.Glarysoft Ltd - Glary Utilities 5.) C:\Program Files\Glary Utilities 5\Integrator.exe =>.Glarysoft LTD® O4 - GS\ProgramsCommon [Public]: Google Chrome.lnk . (.Google Inc. - Google Chrome.) C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O4 - GS\ProgramsCommon [Public]: HD VDeck.lnk . (.VIA - VIA HD Audio CPL.) C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe =>.VIA O4 - GS\ProgramsCommon [Public]: Media Center.lnk . (.Microsoft Corporation - Windows Media Center.) C:\Windows\ehome\ehshell.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Microsoft Keyboard Layout Creator 1.4.lnk . (.Microsoft Corporation - Microsoft Keyboard Layout Creator.) C:\Program Files\Microsoft Keyboard Layout Creator 1.4\MSKLC.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Movie Maker.lnk . (.Microsoft Corporation - Movie Maker.) C:\Program Files\Windows Live\Photo Gallery\MovieMaker.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Mozilla Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O4 - GS\ProgramsCommon [Public]: pc-CRACK 4.0 Beta.lnk . (...) C:\Windows\Installer\{210ABC94-5D29-41D7-8CBE-26A22C4D5576}\_9398806E9E61C48BB23294.exe O4 - GS\ProgramsCommon [Public]: pc-CRACK Users Guide.lnk . (...) C:\Windows\Installer\{210ABC94-5D29-41D7-8CBE-26A22C4D5576}\_89D00D60E90EF2DBC124D8.exe O4 - GS\ProgramsCommon [Public]: Photo Gallery.lnk . (.Microsoft Corporation - Photo Gallery.) C:\Program Files\Windows Live\Photo Gallery\WLXPhotoGallery.exe =>.Microsoft Corporation® O4 - GS\ProgramsCommon [Public]: Sidebar.lnk . (.Microsoft Corporation - Gadgets du Bureau Windows.) C:\Program Files\Windows Sidebar\sidebar.exe /showgadgets =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows DVD Maker.lnk . (.Microsoft Corporation - Création de DVD Windows.) C:\Program Files\DVD Maker\DVDMaker.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\system32\WFS.exe =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur Windows Media.) C:\Program Files\Windows Media Player\wmplayer.exe /prefetch:1 =>.Microsoft Corporation O4 - GS\ProgramsCommon [Public]: XPS Viewer.lnk . (.Microsoft Corporation - Visionneuse XPS.) C:\Windows\system32\xpsrchvw.exe =>.Microsoft Corporation ---\\ Modification Domaine/Adresses DNS (4) - 0s O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 46.17.102.16 8.8.8.8 =>.France Google Cloud O17 - HKLM\System\CCS\Services\Tcpip\..\{D73332AF-C0E9-47B4-8375-15E9211AF3A9}: NameServer = 216.146.35.35,193.251.169.83 =>.Hewlett-Packard O17 - HKLM\System\CCS\Services\Tcpip\..\{95961062-6E8B-4125-81EA-26287B5EA443}: DhcpNameServer = 192.168.1.1 =>.Local IP Adress O17 - HKLM\System\CCS\Services\Tcpip\..\{D73332AF-C0E9-47B4-8375-15E9211AF3A9}: DhcpNameServer = 46.17.102.16 8.8.8.8 =>.France Google Cloud ---\\ Protocole additionnel (26) - 4s O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll =>.Microsoft Corporation® O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll =>.Microsoft Corporation O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation® O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll =>.Microsoft Corporation® O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} . (.Microsoft Corporation - Skype Click to Call IE Add-on.) -- C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll =>.Skype Software Sarl® O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll =>.Microsoft Corporation O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Photo Gallery Album Download Protocol Handl.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation® O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation® O18 - Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation® ---\\ Logiciels installés (99) - 293s O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent =>.BitTorrent Inc® O42 - Logiciel: Adobe Acrobat 8 Professional - English, Français, Deutsch - (.Adobe Systems.) [HKLM] -- {AC76BA86-1033-F400-7760-000000000003} =>.Adobe Systems O42 - Logiciel: Adobe Acrobat 8.1.0 Professional - (.Adobe Systems.) [HKLM] -- Adobe Acrobat 8 Professional - English, Français, Deutsch =>.Adobe Systems O42 - Logiciel: Adobe Creative Cloud - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Creative Cloud =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 20 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 23 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Flash Player 25 PPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player PPAPI =>.Adobe Systems Incorporated® O42 - Logiciel: Adobe Photoshop CC 2015 (32 Bit) - (.Adobe Systems Incorporated.) [HKLM] -- {2614BC86-757D-4293-9E25-E4E16F370A9E} =>.Adobe Systems Incorporated® O42 - Logiciel: Any Video Recorder version 1.0.4 - (.anvsoft, Inc..) [HKLM] -- {17D86E62-4849-49BC-83D2-FA369CEEA9D9}_is1 =>.AnvSoft Co., Ltd.® O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} =>.Atheros Communications Inc.® O42 - Logiciel: Auto Hide IP - (..) [HKLM] -- AutoHideIP O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>.Piriform Ltd® O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft O42 - Logiciel: Dailymotion Video Downloader 3.38 - (.DownloadToolz, Inc..) [HKLM] -- Dailymotion Video Downloader_is1 =>.DownloadToolz, Inc. O42 - Logiciel: Data Doctor Recovery - SIM Card (Demo) - (.Pro Data Doctor Pvt. Ltd..) [HKLM] -- {56FE9BA1-FD2F-4C78-9FA0-6EBA28B22905}_is1 O42 - Logiciel: Data Doctor Recovery - SIM Card (Evaluation) 3.0.1.5 - (..) [HKLM] -- Data Doctor Recovery - SIM Card (Evaluation) 3.0.1.5 O42 - Logiciel: Disk Drill 2.0.0.285 - (.CleverFiles.) [HKLM] -- {396B3F71-9DEC-4806-983B-4A174E7C4B2F} =>.CleverFiles O42 - Logiciel: ESET NOD32 Antivirus - (.ESET, spol. s r.o..) [HKLM] -- {9844448A-A932-43BE-946B-BD9706850601} =>.ESET, spol. s r.o. O42 - Logiciel: FEBio - (.University of Utah.) [HKLM] -- {0756F91D-E301-4990-8328-681A6B4EC987} O42 - Logiciel: FEBio - (.University of Utah.) [HKLM] -- {1EF8396B-1E77-4253-A9BE-3EC8C933C489} O42 - Logiciel: Format USB Or Flash Drive Software - (.Sobolsoft.) [HKLM] -- Format USB Or Flash Drive Software_is1 =>.Sobolsoft O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM] -- {439B34FF-F74E-4807-B5E2-4B758551DA6B} =>.Microsoft Corporation O42 - Logiciel: GetDataBack 4.25 - (.µBaD Torrent Ripper.) [HKLM] -- GetDataBack 4.25 NTFS FAT_is1 O42 - Logiciel: GetDataBack for FAT - (.Runtime Software.) [HKLM] -- {2EEEC858-21F8-419B-8FE2-820621BFFCD7} =>.Runtime Software O42 - Logiciel: Glary Utilities PRO 5.76 - (.Glarysoft Ltd.) [HKLM] -- Glary Utilities 5 =>.Glarysoft LTD® O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome =>.Google Inc® O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA} =>.Google Inc. O42 - Logiciel: HashCheck Shell Extension (x86-32) - (.Kai Liu.) [HKLM] -- HashCheck Shell Extension =>.Kai Liu O42 - Logiciel: HSPA USB Modem - (.HSPA.) [HKLM] -- {06ADE2A0-E46A-4A84-A211-64CF50520185} =>.HSPA O42 - Logiciel: HSPA USB Modem - (.HSPA.) [HKLM] -- InstallShield_{06ADE2A0-E46A-4A84-A211-64CF50520185} =>.HSPA O42 - Logiciel: HyperCam 2 - (.Hyperionics Technology LLC.) [HKLM] -- HyperCam 2 =>.Hyperionics Technology, LLC® O42 - Logiciel: HyperSnap 7 - (.Hyperionics Technology LLC.) [HKLM] -- HyperSnap 7 =>.Hyperionics Technology, LLC® O42 - Logiciel: HyperSnap 8 - (.Hyperionics Technology LLC.) [HKLM] -- HyperSnap 8 {65F568B76D05C29C8D35B9E659DA13CF} =>.Hyperionics Technology LLC O42 - Logiciel: inSSIDer - (.MetaGeek.) [HKLM] -- {65A5E87D-7A3F-4819-807D-B86990D5F369} =>.MetaGeek O42 - Logiciel: InstantPhotoSketch 2.0 - (.CPSSoftware.) [HKLM] -- {5A76F86F-C0E5-4755-BD6C-4FC627F17033}_is1 =>.CPSSoftware O42 - Logiciel: Intel(R) Graphics Media Accelerator Driver - (.Intel Corporation.) [HKLM] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation - Software and Firmware Products® O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager =>.Tonec Inc.® O42 - Logiciel: Java 8 Update 112 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F32180112F0} =>.Oracle Corporation O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation O42 - Logiciel: KbTester - (.Planche.) [HKCU] -- 1b17bee6732db0e0 =>.Planche O42 - Logiciel: K-Lite Mega Codec Pack 4.1.4 - (.KLite Inc.) [HKLM] -- KLiteCodecPack_is1 =>.KLite Inc O42 - Logiciel: Kodi - (.XBMC-Foundation.) [HKCU] -- Kodi =>.XBMC-Foundation O42 - Logiciel: MA Keyboard 1.02 - (.Morillon Alain.) [HKLM] -- MA Keyboard_is1 O42 - Logiciel: Ma-Config.com - (.Cybelsoft.) [HKLM] -- {96EB95A2-5245-4EA2-B6EA-B8BA2FBF64C4} =>.CybelSoft O42 - Logiciel: Magical Jelly Bean PasswdFinder - (.PasswdFinder.) [HKLM] -- PasswdFinder_is1 =>.Superfluous.KeyFinder O42 - Logiciel: Malwarebytes version 3.0.6.1469 - (.Malwarebytes.) [HKLM] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1 =>.Malwarebytes Corporation® O42 - Logiciel: Media Player Codec Pack 4.3.9 - (.Media Player Codec Pack.) [HKLM] -- Media Player - Codec Pack =>.Cole Williams Software Limited® O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} =>.Microsoft Corporation O42 - Logiciel: Microsoft Keyboard Layout Creator 1.4 - (.Microsoft Corp..) [HKLM] -- {99E66BC9-E4B6-485F-ABFC-31EFCE36DFDF} =>.Microsoft Corp. O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} =>.Microsoft Corporation O42 - Logiciel: Mozilla Firefox 53.0.3 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 53.0.3 (x86 fr) =>.Mozilla Corporation® O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService =>.Mozilla O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} =>.Microsoft O42 - Logiciel: Notepad++ - (.Notepad++ Team.) [HKLM] -- Notepad++ =>.Notepad++ Team O42 - Logiciel: OCCT 4.4.3 - (.Ocbase.com.) [HKLM] -- OCCT =>.Ocbase.com O42 - Logiciel: Online TV Player 5 - (.Online TV Player.com.) [HKLM] -- Online TV Player 3_is1 =>.Online TV Player.com O42 - Logiciel: pc-CRACK 4.0 Beta - (.Structural Integrity Associates.) [HKLM] -- {210ABC94-5D29-41D7-8CBE-26A22C4D5576} O42 - Logiciel: PDF Password Remover v3.0 - (.VeryPDF.com Inc.) [HKLM] -- PDF Password Remover v3.0_is1 =>.VeryPDF.com Inc O42 - Logiciel: PDF Password Remover v3.1 - (.VeryPDF.com Inc.) [HKLM] -- PDF Password Remover v3.1_is1 =>.VeryPDF.com Inc O42 - Logiciel: PDF-XChange 2012 Pro - (.Tracker Software Products Ltd.) [HKLM] -- {F92F0AAB-2EF6-412C-8BF4-0B11EB535280}_is1 =>.Tracker Software Products (Canada) Ltd® O42 - Logiciel: PL-2303 Vista Driver Installer - (.Prolific.) [HKLM] -- {EEC010D0-1252-4E1D-BAD9-F1B8F414535C} =>.Prolific O42 - Logiciel: Platform - (.VIA Technologies, Inc..) [HKLM] -- {20D4A895-748C-4D88-871C-FDB1695B0169} =>.VIA Technologies, Inc. O42 - Logiciel: PostView - (.University of Utah.) [HKLM] -- {4CCD7780-331F-459F-B61D-BE7263097F98} O42 - Logiciel: PreView - (.University of Utah.) [HKLM] -- {2B0AB9D3-31B7-446B-8F04-14E6CE4BCB8B} O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} =>.Realtek Semiconductor Corp® O42 - Logiciel: RecoveRx version 3.2 - (.Transcend Information, Inc..) [HKLM] -- {3DE055DA-690F-43B8-9B7B-54E7D70806F9}_is1 {11213C5906C4F7CB18B0AF17D3032DCF41B7} O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva =>.Piriform Ltd® O42 - Logiciel: Renee Undeleter 2016.10.14.215 - (.Rene.E Laboratory.) [HKLM] -- {EE1F41BE-6DBD-44AE-9F97-4D7F9227329D}_is1 =>.Rene.E Laboratory O42 - Logiciel: Revo Uninstaller Pro 3.1.7 - (.VS Revo Group, Ltd..) [HKLM] -- {67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1 =>.VS Revo Group, Ltd. O42 - Logiciel: Satellite Tracker Version 2.4.8 - (..) [HKLM] -- Satellite Tracker_is1 O42 - Logiciel: SDFormatter - (.SD Association.) [HKLM] -- {179324FF-7B16-4BA8-9836-055CAAEE4F08} =>.SD Association O42 - Logiciel: SetEdit21174 (remove only) - (..) [HKLM] -- SetEdit21174 O42 - Logiciel: SetEditAtSat (remove only) - (..) [HKLM] -- SetEditAtSat O42 - Logiciel: Skype Click to Call - (.Microsoft Corporation.) [HKLM] -- {6D1221A9-17BF-4EC0-81F2-27D30EC30701} =>.Microsoft Corporation O42 - Logiciel: Skype™ 7.22 - (.Skype Technologies S.A..) [HKLM] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A. O42 - Logiciel: Solid Converter v9 - (.Solid Documents.) [HKLM] -- {14CFE370-0717-44B9-BD78-88C59D91A749}_is1 =>.Solid Documents O42 - Logiciel: SolidWordAddIn - (.Solid Documents.) [HKLM] -- {ddad9751-a580-432a-a4c2-893b44e4b0ba}_is1 =>.Solid Documents O42 - Logiciel: SpeedFan (remove only) - (.Almico Software.) [HKLM] -- SpeedFan =>.Almico Software O42 - Logiciel: Super Hide IP - (..) [HKLM] -- SuperHideIP O42 - Logiciel: SUPERAntiSpyware - (.SUPERAntiSpyware.com.) [HKLM] -- {CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA} =>.SUPERAntiSpyware.com® O42 - Logiciel: SV Media Player HD Version 1.0.2 - (.SV LTD.) [HKLM] -- SV Media Player HD Version 1.0.2 O42 - Logiciel: Tifinaghino Dev By Zizwar - (.Aucune.) [HKLM] -- {E51EEAF0-115C-4C70-A848-ADD1857A012F} O42 - Logiciel: Tifino version Lite 0.7 - (..) [HKCU] -- Tifino version Lite 0.7 O42 - Logiciel: TP-LINK Wireless Client Utility - (.TP-LINK.) [HKLM] -- {7A2A107B-9695-423F-9462-8F17C178BD35} =>.TP-LINK O42 - Logiciel: TP-LINK Wireless Configuration Utility - (.TP-LINK.) [HKLM] -- {319D91C6-3D44-436C-9F79-36C0D22372DC} =>.TP-LINK O42 - Logiciel: Transcend Recovery V1.17 - (..) [HKLM] -- Transcend Recovery_is1 O42 - Logiciel: VIA Gestionnaire de périphériques de plate-forme - (.VIA Technologies, Inc..) [HKLM] -- InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169} =>.VIA Technologies, Inc. O42 - Logiciel: VirtualCamera - (.MorningSound Software.) [HKLM] -- VirtualCamera O42 - Logiciel: Vistumbler - (.Vistumbler.net.) [HKLM] -- Vistumbler =>.Vistumbler.net O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player =>.VideoLAN O42 - Logiciel: WinPcap 4.1.3 - (.Riverbed Technology, Inc..) [HKLM] -- WinPcapInst =>.Riverbed Technology, Inc. O42 - Logiciel: WinRAR 5.40 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver =>.win.rar GmbH® O42 - Logiciel: WJChess2D - (.JeffProd.com.) [HKLM] -- WJChess2D O42 - Logiciel: Youtube Downloader HD v. 2.9.9.28 - (.YoutubeDownloaderHD.com.) [HKLM] -- Youtube Downloader HD_is1 =>.YoutubeDownloaderHD.com O42 - Logiciel: ZebHelpProcess 2015 - (.Nicolas Coolman.) [HKLM] -- ZebHelpProcess_is1 =>.Nicolas Coolman O42 - Logiciel: ZedTV version 2.7.8 - (.zedsoft.) [HKLM] -- {7B4E06B9-2FA4-4F3E-85C5-1DCF1BA4B999}_is1 =>.ZedSoft O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPFix_is1 =>.Nicolas Coolman O42 - Logiciel: ZSMC USB PC Camera (ZS211) - (.ZSMC.) [HKLM] -- {44D02D8B-FFB3-4245-8D26-68D10B4C4023} =>.Macrovision Corporation® ---\\ HKCU & HKLM Software Keys (169) - 294s HKLM\SOFTWARE\Adobe =>.Adobe HKLM\SOFTWARE\Alienware =>.Alienware HKLM\SOFTWARE\AMD =>.AMD HKLM\SOFTWARE\Atheros =>.Qualcomm Atheros HKLM\SOFTWARE\ATI Technologies =>.ATI Technologies HKLM\SOFTWARE\AutoHideIP HKLM\SOFTWARE\Borland =>.Borland HKLM\SOFTWARE\CleverFiles =>.CleverFiles HKLM\SOFTWARE\Codec Tweak Tool =>.KLite Inc HKLM\SOFTWARE\cybelsoft =>.CybelSoft HKLM\SOFTWARE\EASEUS =>.EaseUS Software HKLM\SOFTWARE\ESET =>.ESET HKLM\SOFTWARE\Flash Memory Toolkit HKLM\SOFTWARE\Gabest =>.Gabest HKLM\SOFTWARE\GlarySoft =>.Glarysoft HKLM\SOFTWARE\GNU =>.GNU HKLM\SOFTWARE\Google =>.Google HKLM\SOFTWARE\Greatis =>.Greatis Software HKLM\SOFTWARE\HaaliMkx =>.Haali Media HKLM\SOFTWARE\HSPA =>.HSPA HKLM\SOFTWARE\Hyperionics =>.Hyperionics HKLM\SOFTWARE\IM Providers =>.IM Providers HKLM\SOFTWARE\InstallShield =>.InstallShield HKLM\SOFTWARE\Intel =>.Intel HKLM\SOFTWARE\Internet Download Manager =>.Tonec Inc HKLM\SOFTWARE\InterVideo =>.InterVideo HKLM\SOFTWARE\IPHider HKLM\SOFTWARE\JavaSoft =>.JavaSoft HKLM\SOFTWARE\JreMetrics =>.JreMetrics HKLM\SOFTWARE\KLCodecPack =>.KLite Inc HKLM\SOFTWARE\LAV =>.LAV Inc HKLM\SOFTWARE\Licenses =>.Microsoft Corporation HKLM\SOFTWARE\Logitech =>.Logitech HKLM\SOFTWARE\Macromedia =>.Macromedia HKLM\SOFTWARE\Macrovision =>.Macrovision HKLM\SOFTWARE\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware HKLM\SOFTWARE\Malwarebytes' Anti-Malware (Trial) =>.Malwarebytes HKLM\SOFTWARE\MAXSOFT-OCRON =>.Maxsoft-Ocron, Inc HKLM\SOFTWARE\McAfee.com =>.McAfee Inc. HKLM\SOFTWARE\Media Player - Codec Pack HKLM\SOFTWARE\MOVAVI =>.Movavi HKLM\SOFTWARE\Moyea HKLM\SOFTWARE\Mozilla =>.Mozilla HKLM\SOFTWARE\mozilla.org =>.mozilla.org HKLM\SOFTWARE\MozillaPlugins =>.MozillaPlugins HKLM\SOFTWARE\Norton =>.Symantec Corporation HKLM\SOFTWARE\Notepad++ =>.Don Ho HKLM\SOFTWARE\ODBC =>.DB Connectivity Solutions HKLM\SOFTWARE\Panda Software =>.Panda Software HKLM\SOFTWARE\PegasusImaging =>.Accusoft Entreprise HKLM\SOFTWARE\Pinnacle Systems =>.Pinnacle Systems, Inc. HKLM\SOFTWARE\Piriform =>.Piriform HKLM\SOFTWARE\QSound Labs, Inc. HKLM\SOFTWARE\RealNetworks =>.RealNetworks HKLM\SOFTWARE\Realtek =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\RegisteredApplications =>.Microsoft Corporation HKLM\SOFTWARE\Rene.E Laboratory =>.Rene.E Laboratory HKLM\SOFTWARE\RTLSetup =>.Realtek Semiconductor Corp. HKLM\SOFTWARE\Runtime Software =>.Runtime Software HKLM\SOFTWARE\S3R521 HKLM\SOFTWARE\SetEdit21174 HKLM\SOFTWARE\SetEditAtSat HKLM\SOFTWARE\Skype =>.Skype HKLM\SOFTWARE\Software =>.Unknow HKLM\SOFTWARE\SolidDocuments =>.SolidDocuments HKLM\SOFTWARE\Sonic =>.Sonic HKLM\SOFTWARE\SpeedFan =>.Almico Software HKLM\SOFTWARE\SUPERAntiSpyware.com =>.SUPERAntiSpyware.com HKLM\SOFTWARE\SuperHideIP HKLM\SOFTWARE\ThinPrint =>.ThinPrint HKLM\SOFTWARE\Tracker Software =>.Tracker Software HKLM\SOFTWARE\VIA Technologies, Inc =>.VIA Technologies, Inc HKLM\SOFTWARE\VideoLAN =>.VideoLAN HKLM\SOFTWARE\vLite HKLM\SOFTWARE\VMware, Inc. =>.VMware, Inc. HKLM\SOFTWARE\Volatile =>.Microsoft Corporation HKLM\SOFTWARE\WafCX =>.WafCX HKLM\SOFTWARE\WebSupergoo HKLM\SOFTWARE\WinPcap =>.Riverbed Technology HKLM\SOFTWARE\WinRAR =>.WinRAR HKLM\SOFTWARE\Wow6432Node =>.Microsoft Corporation HKLM\SOFTWARE\ZSMC =>.ZSMC Corporation HKCU\SOFTWARE\AC3filter =>.Vigovsky Alexander HKCU\SOFTWARE\Adobe =>.Adobe HKCU\SOFTWARE\Apowersoft =>.Apowersoft HKCU\SOFTWARE\AppDataLow =>.Microsoft Corporation HKCU\SOFTWARE\ASProtect =>.ASPack Software HKCU\SOFTWARE\BDUSBImmunizer HKCU\SOFTWARE\Bitdefender =>.Bitdefender HKCU\SOFTWARE\BitTorrent HKCU\SOFTWARE\Borland =>.Borland HKCU\SOFTWARE\Bytescout =>.ByteScout HKCU\SOFTWARE\Chromium =>.Chromium HKCU\SOFTWARE\CleverFiles =>.CleverFiles HKCU\SOFTWARE\Commercial Research HKCU\SOFTWARE\CrystalIdea Software =>.CrystalIdea Software HKCU\SOFTWARE\cybelsoft =>.CybelSoft HKCU\SOFTWARE\DivXNetworks =>.DivXNetworks HKCU\SOFTWARE\DownloadManager =>.DownloadManager HKCU\SOFTWARE\DownloadToolz =>.DownloadToolz Inc HKCU\SOFTWARE\Eption HKCU\SOFTWARE\ESET =>.ESET HKCU\SOFTWARE\FAC HKCU\SOFTWARE\FK HKCU\SOFTWARE\Gabest =>.Gabest HKCU\SOFTWARE\Glarysoft =>.Glarysoft HKCU\SOFTWARE\GNU =>.GNU HKCU\SOFTWARE\Google =>.Google HKCU\SOFTWARE\Greatis =>.Greatis Software HKCU\SOFTWARE\GSpot Appliance Corp =>.GSpot Appliance Corp. HKCU\SOFTWARE\Haali =>.Haali Media HKCU\SOFTWARE\Hyperionics =>.Hyperionics HKCU\SOFTWARE\IM Providers =>.IM Providers HKCU\SOFTWARE\Intel =>.Intel HKCU\SOFTWARE\JavaSoft =>.JavaSoft HKCU\SOFTWARE\JEDI-VCL =>.JEDI Project HKCU\SOFTWARE\JoyfaxServer HKCU\SOFTWARE\Kodi =>.XBMC Foundation HKCU\SOFTWARE\Lagarith =>.Lagarith HKCU\SOFTWARE\LAV =>.LAV Inc HKCU\SOFTWARE\Licenses =>.Microsoft Corporation HKCU\SOFTWARE\Logitech =>.Logitech HKCU\SOFTWARE\Macromedia =>.Macromedia HKCU\SOFTWARE\Magical Jelly Bean Software HKCU\SOFTWARE\MAkeyboard =>.Alain Morillon HKCU\SOFTWARE\Malwarebytes =>.Malwarebytes HKCU\SOFTWARE\Malwarebytes' Anti-Malware =>.Malwarebytes' Anti-Malware HKCU\SOFTWARE\MCAFEE =>.McAfee Inc. HKCU\SOFTWARE\Media Player - Codec Pack HKCU\SOFTWARE\MediaInfo =>.Jérôme Martinez HKCU\SOFTWARE\Mirage =>.Mirage Game HKCU\SOFTWARE\MorningSound HKCU\SOFTWARE\MOVAVI =>.Movavi HKCU\SOFTWARE\Moyea HKCU\SOFTWARE\Mozilla =>.Mozilla HKCU\SOFTWARE\MozillaPlugins =>.MozillaPlugins HKCU\SOFTWARE\MPC-HC =>.MPC-HC Team HKCU\SOFTWARE\Netscape =>.Netscape HKCU\SOFTWARE\ODBC =>.DB Connectivity Solutions HKCU\SOFTWARE\Ongkara software HKCU\SOFTWARE\Opera Software =>.Opera Software HKCU\SOFTWARE\Pinnacle Systems =>.Pinnacle Systems, Inc. HKCU\SOFTWARE\Piriform =>.Piriform HKCU\SOFTWARE\PUSH Entertainment =>.PUSH Entertainment HKCU\SOFTWARE\QtProject =>.QtProject HKCU\SOFTWARE\RandyRants HKCU\SOFTWARE\RealNetworks =>.RealNetworks HKCU\SOFTWARE\RocketDock =>.Punk Software HKCU\SOFTWARE\Samsung =>.Samsung Electronics HKCU\SOFTWARE\Skype =>.Skype HKCU\SOFTWARE\SolidDocuments =>.SolidDocuments HKCU\SOFTWARE\SpeedFan =>.Almico Software HKCU\SOFTWARE\SyedSoft HKCU\SOFTWARE\Tracker Software =>.Tracker Software HKCU\SOFTWARE\Trolltech =>.Trolltech HKCU\SOFTWARE\usr HKCU\SOFTWARE\VB and VBA Program Settings =>.Microsoft Corporation HKCU\SOFTWARE\VIA =>.VIA HKCU\SOFTWARE\VirtualDub.org =>.VirtualDub.org HKCU\SOFTWARE\VS Revo Group =>.VS Revo Group HKCU\SOFTWARE\WinRAR =>.WinRAR HKCU\SOFTWARE\WinRAR SFX =>.RarLab HKCU\SOFTWARE\WOI HKCU\SOFTWARE\Wow6432Node =>.Microsoft Corporation HKCU\SOFTWARE\ZebHelpProcess Helper =>.Nicolas Coolman HKCU\SOFTWARE\ZHP =>.Nicolas Coolman HKCU\SOFTWARE\AppDataLow\Software =>.Microsoft Corporation HKCU\SOFTWARE\AppDataLow\Software\JavaSoft =>.JavaSoft HKCU\SOFTWARE\AppDataLow\Software\ThinPrint =>.ThinPrint ---\\ Contenu des dossiers Programmes (400) - 512s O43 - CFD: 15/07/2016 - [] D -- C:\Program Files\Adobe =>.Adobe Systems Incorporated® O43 - CFD: 09/11/2016 - [] D -- C:\Program Files\Any Video Recorder =>.JunTu Software Inc.® O43 - CFD: 07/06/2016 - [] D -- C:\Program Files\AutoHideIP O43 - CFD: 25/03/2017 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd O43 - CFD: 08/01/2017 - [] D -- C:\Program Files\CleverFiles =>.508 Software, LLC® O43 - CFD: 13/03/2017 - [] D -- C:\Program Files\Common Files =>.Microsoft Corporation O43 - CFD: 29/01/2014 - [] D -- C:\Program Files\CounterPath =>.CounterPath O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\Data Doctor Recovery - SIM Card (Demo) =>.Pro Data Doctor Pvt. Ltd.® O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\Data Doctor Recovery - SIM Card (Evaluation) O43 - CFD: 02/12/2015 - [] D -- C:\Program Files\DownloadToolz =>.DownloadToolz Inc O43 - CFD: 13/03/2017 - [] D -- C:\Program Files\DrWeb O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\DVD Maker =>.Aone Software O43 - CFD: 28/12/2016 - [] D -- C:\Program Files\EaseUS =>.EaseUS Software O43 - CFD: 15/03/2017 - [] D -- C:\Program Files\ESET =>.ESET, spol. s r.o.® O43 - CFD: 14/01/2014 - [] D -- C:\Program Files\FEBio1p8 O43 - CFD: 13/06/2014 - [] D -- C:\Program Files\FEBio2p0 O43 - CFD: 14/03/2013 - [0] SHD -- C:\Program Files\Fichiers communs =>.Microsoft Corporation O43 - CFD: 31/12/2013 - [] D -- C:\Program Files\Flash O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\Format USB Or Flash Drive Software O43 - CFD: 31/03/2015 - [] D -- C:\Program Files\Free Window Registry Repair =>.RegSofts Software O43 - CFD: 25/05/2017 - [] D -- C:\Program Files\Glary Utilities 5 =>.GlarySoft O43 - CFD: 14/12/2016 - [0] D -- C:\Program Files\Glarysoft =>.GlarySoft O43 - CFD: 15/02/2017 - [] D -- C:\Program Files\Google =>.Google Inc® O43 - CFD: 14/03/2015 - [] D -- C:\Program Files\Holmes O43 - CFD: 11/03/2017 - [] D -- C:\Program Files\Horloge O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\HSPA USB Modem =>.Legitimate O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\HyperCam 2 =>.Hyperionics O43 - CFD: 12/04/2017 - [] D -- C:\Program Files\HyperSnap 7 =>.Hyperionics Technology, LLC® O43 - CFD: 12/04/2017 - [] D -- C:\Program Files\HyperSnap 8 {65F568B76D05C29C8D35B9E659DA13CF} O43 - CFD: 01/12/2015 - [] HD -- C:\Program Files\InstallShield Installation Information =>.InstallShield Software O43 - CFD: 25/02/2016 - [] D -- C:\Program Files\InstantPhotoSketch O43 - CFD: 02/11/2013 - [] D -- C:\Program Files\Intel =>.Intel Corporation O43 - CFD: 09/07/2015 - [] D -- C:\Program Files\Internet Download Manager =>.Tonec Inc O43 - CFD: 18/03/2017 - [] D -- C:\Program Files\Internet Explorer =>.Microsoft Corporation O43 - CFD: 13/11/2016 - [] D -- C:\Program Files\Java =>.Oracle O43 - CFD: 03/11/2013 - [] D -- C:\Program Files\JeffProd =>.JeffProd O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\K-Lite Codec Pack =>.KLite Inc O43 - CFD: 27/02/2017 - [] D -- C:\Program Files\Kodi =>.XBMC Foundation O43 - CFD: 24/03/2015 - [] D -- C:\Program Files\MA Keyboard O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\ma-config.com =>.Ma-Config.com O43 - CFD: 18/05/2017 - [] D -- C:\Program Files\Malwarebytes =>.Malwarebytes O43 - CFD: 01/12/2015 - [0] D -- C:\Program Files\MarkAny =>.MarkAny O43 - CFD: 02/09/2015 - [] D -- C:\Program Files\MetaGeek =>.MetaGeek O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\Microsoft Analysis Services =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Microsoft Games =>.Microsoft Corporation O43 - CFD: 12/10/2015 - [] D -- C:\Program Files\Microsoft Keyboard Layout Creator 1.4 =>.Microsoft Corporation O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation O43 - CFD: 12/04/2017 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation O43 - CFD: 02/05/2016 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition =>.Microsoft Corporation O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\Microsoft Sync Framework =>.Microsoft Corporation O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\Microsoft Synchronization Services =>.Microsoft Corporation O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\Microsoft Visual Studio 8 =>.Microsoft Corporation O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\Microsoft.NET =>.Microsoft Corporation O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla O43 - CFD: 24/05/2017 - [] D -- C:\Program Files\Mozilla Maintenance Service =>.Mozilla O43 - CFD: 30/10/2013 - [] D -- C:\Program Files\MSBuild =>.Microsoft Corporation O43 - CFD: 18/08/2015 - [] D -- C:\Program Files\Notepad++ =>.Don Ho O43 - CFD: 15/02/2017 - [] D -- C:\Program Files\OCCTPT =>.Tetedeiench O43 - CFD: 30/11/2015 - [] D -- C:\Program Files\Online TV Player 5 O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\PasswdFinder =>.Superfluous.KeyFinder O43 - CFD: 07/06/2016 - [] D -- C:\Program Files\PDF Password Remover v3.0 O43 - CFD: 01/06/2016 - [] D -- C:\Program Files\PDF Password Remover v3.1 O43 - CFD: 13/06/2014 - [] D -- C:\Program Files\PostView1p5 O43 - CFD: 13/06/2014 - [] D -- C:\Program Files\PreViewv1p14 O43 - CFD: 25/04/2013 - [] D -- C:\Program Files\Realtek =>.Realtek O43 - CFD: 29/12/2016 - [] D -- C:\Program Files\Recuva =>.Piriform O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies =>.Microsoft Corporation O43 - CFD: 10/01/2017 - [] D -- C:\Program Files\Rene.E Laboratory =>.Rene.E Laboratory Co., Ltd.® O43 - CFD: 30/12/2014 - [] D -- C:\Program Files\RocketDock =>.Punk Software O43 - CFD: 28/12/2016 - [] D -- C:\Program Files\Runtime Software =>.Runtime Software O43 - CFD: 20/08/2016 - [] D -- C:\Program Files\sbqh O43 - CFD: 28/12/2016 - [] D -- C:\Program Files\SDA =>.TRENDY Co.® O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\SetEditAtSat O43 - CFD: 27/05/2016 - [] RD -- C:\Program Files\Skype =>.Skype O43 - CFD: 05/03/2015 - [] D -- C:\Program Files\SolidDocuments =>.Solid Documents® O43 - CFD: 13/11/2016 - [] D -- C:\Program Files\SpeedFan =>.Almico Software O43 - CFD: 03/04/2015 - [] D -- C:\Program Files\Structural Integrity Associates O43 - CFD: 13/04/2017 - [] D -- C:\Program Files\SUPERAntiSpyware =>.SUPERAntiSpyware O43 - CFD: 08/09/2015 - [] D -- C:\Program Files\SuperHideIP O43 - CFD: 03/03/2014 - [] D -- C:\Program Files\SV LTD O43 - CFD: 31/05/2016 - [] D -- C:\Program Files\SysTools PDF Unlocker O43 - CFD: 14/03/2015 - [] D -- C:\Program Files\Tab Hibernation O43 - CFD: 29/10/2013 - [] D -- C:\Program Files\TP-LINK =>.TP-LINK O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\Tracker Software =>.Tracker Software O43 - CFD: 23/05/2016 - [] D -- C:\Program Files\Transcend =>.Transcend O43 - CFD: 10/12/2016 - [] D -- C:\Program Files\UnHackMe =>.Greatis O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information =>.Microsoft Corporation O43 - CFD: 02/04/2014 - [] D -- C:\Program Files\usr O43 - CFD: 05/02/2014 - [] D -- C:\Program Files\uTorrent =>.BitTorrent Inc® O43 - CFD: 03/03/2015 - [] D -- C:\Program Files\VIA =>.VIA O43 - CFD: 10/09/2014 - [] D -- C:\Program Files\VideoLAN =>.VideoLan Team O43 - CFD: 21/09/2015 - [] D -- C:\Program Files\Vimicro =>.Vimicro O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\VirtualCamera O43 - CFD: 31/08/2016 - [] D -- C:\Program Files\Vistumbler O43 - CFD: 17/02/2015 - [] D -- C:\Program Files\VMware =>.VMware O43 - CFD: 11/12/2016 - [] D -- C:\Program Files\VS Revo Group =>.VS Revo Group O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Corporation O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\Windows Journal =>.Microsoft Corporation O43 - CFD: 02/05/2016 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\Windows Mail =>.Microsoft Corporation O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\Windows Media Player =>.Microsoft Corporation O43 - CFD: 14/03/2013 - [] D -- C:\Program Files\Windows NT =>.Microsoft Corporation O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\Windows Photo Viewer =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Windows Portable Devices =>.Microsoft Corporation O43 - CFD: 18/09/2015 - [] D -- C:\Program Files\Windows Sidebar =>.Microsoft Corporation O43 - CFD: 27/11/2015 - [] D -- C:\Program Files\Wino O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\WinPcap =>.Riverbed Technology O43 - CFD: 13/11/2016 - [] D -- C:\Program Files\WinRAR =>.win.rar GmbH® O43 - CFD: 03/07/2016 - [] D -- C:\Program Files\Youtube Downloader HD =>.Regensoft O43 - CFD: 10/01/2017 - [] D -- C:\Program Files\ZebHelpProcess =>.Nicolas Coolman O43 - CFD: 30/11/2015 - [] D -- C:\Program Files\ZedTV =>.ZedSoft O43 - CFD: 28/04/2016 - [] D -- C:\Program Files\ZHPFix =>.Nicolas Coolman O43 - CFD: 29/11/2010 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation O43 - CFD: 29/11/2010 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 09/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Any Video Recorder O43 - CFD: 05/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Auto Hide IP O43 - CFD: 25/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner =>.Piriform Ltd O43 - CFD: 08/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cleverfiles Disk Drill =>.Clever Software O43 - CFD: 02/04/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Data Doctor Recovery - SIM Card (Demo) O43 - CFD: 22/08/2014 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Digital Clock O43 - CFD: 02/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Download Toolz O43 - CFD: 15/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET =>.ESET O43 - CFD: 14/01/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FEBio 1.8 O43 - CFD: 13/06/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FEBio2 O43 - CFD: 06/09/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow =>.Open Source O43 - CFD: 25/03/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FK O43 - CFD: 24/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Format USB Or Flash Drive Software O43 - CFD: 29/11/2010 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games =>.Microsoft Corporation O43 - CFD: 25/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5 =>.GlarySoft O43 - CFD: 28/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter =>.Mike Matsnev O43 - CFD: 26/09/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HSPA USB Modem =>.Legitimate O43 - CFD: 12/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HyperSnap 8 O43 - CFD: 25/02/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InstantPhotoSketch O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager =>.Tonec Inc O43 - CFD: 13/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java =>.Oracle O43 - CFD: 03/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JeffProd =>.JeffProd O43 - CFD: 14/03/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack =>.KLite Inc O43 - CFD: 24/03/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MA Keyboard O43 - CFD: 14/03/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ma-config.com =>.Ma-Config.com O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation O43 - CFD: 18/05/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes =>.Malwarebytes O43 - CFD: 31/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Player - Codec Pack =>.Media Player Codec Pack O43 - CFD: 02/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetaGeek =>.MetaGeek O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office =>.Microsoft Corporation O43 - CFD: 12/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight =>.Microsoft Corporation O43 - CFD: 22/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ =>.Don Ho O43 - CFD: 15/02/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OCCT =>.Adrien Mercier O43 - CFD: 30/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Online TV Player 5 O43 - CFD: 08/01/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PasswdFinder O43 - CFD: 07/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Password Remover v3.0 O43 - CFD: 01/06/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Password Remover v3.1 O43 - CFD: 31/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange 5 Pro O43 - CFD: 13/06/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PostView 1.5 O43 - CFD: 13/06/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PreView 1.14 O43 - CFD: 29/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva =>.Piriform O43 - CFD: 10/01/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rene.E Laboratory =>.Rene.E Laboratory O43 - CFD: 14/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro =>.VS Revo Group O43 - CFD: 28/10/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RocketDock =>.Punk Software O43 - CFD: 28/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software =>.Runtime Software O43 - CFD: 03/05/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Satellite Tracker O43 - CFD: 28/12/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SDFormatter =>.SD Association O43 - CFD: 28/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SetEdit21174 O43 - CFD: 21/10/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SetEditAtSat O43 - CFD: 30/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint =>.Microsoft Corporation O43 - CFD: 07/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype =>.Skype O43 - CFD: 05/03/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SolidDocuments =>.SolidDocuments O43 - CFD: 26/11/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpeedFan =>.Almico Software O43 - CFD: 12/04/2017 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation O43 - CFD: 30/12/2014 - [0] HD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-Disabled =>.Microsoft Corporation O43 - CFD: 08/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super Hide IP O43 - CFD: 13/04/2017 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware =>.SUPERAntiSpyware O43 - CFD: 14/07/2009 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC =>.Wacom Technology O43 - CFD: 29/10/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK =>.TP-LINK O43 - CFD: 23/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transcend =>.Transcend O43 - CFD: 23/05/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transcend Recovery O43 - CFD: 15/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN =>.VideoLan Team O43 - CFD: 24/01/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VirtualCamera O43 - CFD: 31/08/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vistumbler O43 - CFD: 31/12/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinPcap =>.Riverbed Technology O43 - CFD: 13/11/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR O43 - CFD: 03/07/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Youtube Downloader HD =>.Regensoft O43 - CFD: 30/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZedTV =>.ZedSoft O43 - CFD: 21/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZSMC USB PC Camera (ZS211) O43 - CFD: 23/05/2016 - [] D -- C:\ProgramData\Adobe =>.Adobe O43 - CFD: 31/03/2015 - [] D -- C:\ProgramData\Apple =>.Apple Inc. O43 - CFD: 26/03/2015 - [] D -- C:\ProgramData\Apple Computer =>.Apple Inc. O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data =>.Microsoft Corporation O43 - CFD: 05/06/2016 - [] D -- C:\ProgramData\AutoHideIP O43 - CFD: 31/03/2015 - [] D -- C:\ProgramData\AVAST Software =>.AVAST Software O43 - CFD: 29/03/2015 - [] D -- C:\ProgramData\B0FFCDD9-5261-4e59-B29A-17A4FABDEBAB O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\BDLogging =>.Bitdefender O43 - CFD: 15/03/2015 - [] D -- C:\ProgramData\Bitdefender =>.Bitdefender O43 - CFD: 11/07/2016 - [] D -- C:\ProgramData\boost_interprocess =>.boost.org O43 - CFD: 14/03/2013 - [0] SHD -- C:\ProgramData\Bureau =>.Microsoft Corporation O43 - CFD: 26/11/2013 - [] HD -- C:\ProgramData\Common Files =>.Microsoft Corporation O43 - CFD: 12/12/2014 - [] D -- C:\ProgramData\C__Users_client_Desktop_Anciennes données de Firefox_AutoHideIP-5.3.9.8(GrizzTutorials)_Crack_AutoHideIP.exe O43 - CFD: 12/12/2014 - [] D -- C:\ProgramData\C__Users_client_Downloads_Documents_Super Hide IP 3.0.6.2 + Crack_Super Hide IP 3.0.6.2_Crack_SuperHideIP.exe O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop =>.Microsoft Corporation O43 - CFD: 13/03/2017 - [] D -- C:\ProgramData\Doctor Web O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents =>.Microsoft Corporation O43 - CFD: 15/03/2017 - [] D -- C:\ProgramData\ESET =>.ESET O43 - CFD: 07/05/2017 - [] D -- C:\ProgramData\F-Secure =>.F-Secure O43 - CFD: 14/03/2013 - [0] SHD -- C:\ProgramData\Favoris =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites =>.Microsoft Corporation O43 - CFD: 25/03/2017 - [] D -- C:\ProgramData\FLEXnet =>.Flexera Software O43 - CFD: 11/12/2016 - [] D -- C:\ProgramData\GlarySoft =>.GlarySoft O43 - CFD: 02/11/2013 - [0] D -- C:\ProgramData\IDM =>.IDM O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\JoyFaxClient O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\JoyFaxEditor O43 - CFD: 21/02/2016 - [] D -- C:\ProgramData\JoyFaxServer O43 - CFD: 16/02/2017 - [] D -- C:\ProgramData\Labography O43 - CFD: 31/03/2015 - [] D -- C:\ProgramData\Logishrd =>.Logitech Inc. O43 - CFD: 14/03/2013 - [] D -- C:\ProgramData\ma-config.com =>.Ma-Config.com O43 - CFD: 18/05/2017 - [] D -- C:\ProgramData\Malwarebytes =>.Malwarebytes O43 - CFD: 19/11/2013 - [] D -- C:\ProgramData\McAfee =>.McAfee O43 - CFD: 14/03/2013 - [0] SHD -- C:\ProgramData\Menu Démarrer =>.Microsoft Corporation O43 - CFD: 16/02/2017 - [] SD -- C:\ProgramData\Microsoft =>.Microsoft Corporation O43 - CFD: 13/05/2017 - [] D -- C:\ProgramData\Microsoft Help =>.Microsoft Corporation O43 - CFD: 14/03/2013 - [0] SHD -- C:\ProgramData\Modèles =>.Microsoft Corporation O43 - CFD: 03/12/2015 - [0] D -- C:\ProgramData\Movavi Video Editor 10 SE =>.Movavi O43 - CFD: 02/12/2015 - [] D -- C:\ProgramData\Movavi Video Editor 11 =>.Movavi O43 - CFD: 02/11/2013 - [] D -- C:\ProgramData\Mozilla =>.Mozilla Corporation O43 - CFD: 31/03/2015 - [] D -- C:\ProgramData\Norton =>.Symantec Corporation O43 - CFD: 31/03/2015 - [] D -- C:\ProgramData\NortonInstaller =>.Symantec O43 - CFD: 13/11/2016 - [] D -- C:\ProgramData\Oracle =>.Oracle O43 - CFD: 27/02/2017 - [] D -- C:\ProgramData\Package Cache =>.Microsoft Corporation O43 - CFD: 03/12/2015 - [] D -- C:\ProgramData\Pinnacle =>.Pinnacle Systems, Inc. O43 - CFD: 14/03/2013 - [0] D -- C:\ProgramData\Real =>.RealNetworks Inc. O43 - CFD: 23/05/2016 - [] D -- C:\ProgramData\regid.1986-12.com.adobe =>.Adobe Inc. O43 - CFD: 10/10/2015 - [] D -- C:\ProgramData\Samsung =>.Samsung Electronics O43 - CFD: 21/04/2016 - [] D -- C:\ProgramData\Skype =>.Skype O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu =>.Microsoft Corporation O43 - CFD: 13/11/2016 - [] D -- C:\ProgramData\Sun =>.Oracle O43 - CFD: 13/01/2017 - [] D -- C:\ProgramData\SUPERAntiSpyware.com =>.SUPERAntiSpyware.com O43 - CFD: 12/12/2014 - [] D -- C:\ProgramData\SuperHideIP O43 - CFD: 15/03/2015 - [0] AD -- C:\ProgramData\TEMP =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates =>.Microsoft Corporation O43 - CFD: 29/10/2013 - [] D -- C:\ProgramData\TP-LINK =>.TP-LINK O43 - CFD: 17/02/2015 - [] D -- C:\ProgramData\VMware =>.VMware O43 - CFD: 14/12/2016 - [] D -- C:\ProgramData\VS Revo Group =>.VS Revo Group O43 - CFD: 08/07/2016 - [] D -- C:\Program Files\Common Files\Adobe =>.Adobe O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\Common Files\Bitdefender =>.Bitdefender O43 - CFD: 01/01/2016 - [] D -- C:\Program Files\Common Files\Borland Shared =>.Borland O43 - CFD: 15/03/2015 - [] D -- C:\Program Files\Common Files\DESIGNER =>.Designer O43 - CFD: 02/07/2014 - [] D -- C:\Program Files\Common Files\InstallShield =>.InstallShield O43 - CFD: 13/11/2016 - [] D -- C:\Program Files\Common Files\Java =>.Oracle O43 - CFD: 05/11/2013 - [] D -- C:\Program Files\Common Files\Macrovision Shared =>.Rovi Corporation O43 - CFD: 01/05/2016 - [] D -- C:\Program Files\Common Files\microsoft shared =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\Services =>.Microsoft Corporation O43 - CFD: 05/04/2016 - [] D -- C:\Program Files\Common Files\Skype =>.Skype O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\SpeechEngines =>.Microsoft Corporation O43 - CFD: 31/03/2015 - [0] D -- C:\Program Files\Common Files\Symantec Shared =>.Symantec Corporation O43 - CFD: 12/04/2017 - [] D -- C:\Program Files\Common Files\System =>.Microsoft Corporation O43 - CFD: 13/09/2014 - [] D -- C:\Program Files\Common Files\Windows Live =>.Microsoft Corporation O43 - CFD: 23/05/2016 - [] D -- C:\Users\client\AppData\Roaming\Adobe =>.Adobe O43 - CFD: 13/12/2016 - [] D -- C:\Users\client\AppData\Roaming\AnvSoft =>.AnvSoft Inc O43 - CFD: 13/02/2017 - [] D -- C:\Users\client\AppData\Roaming\Apowersoft =>.Apowersoft O43 - CFD: 26/03/2015 - [] D -- C:\Users\client\AppData\Roaming\Apple Computer =>.Apple Inc. O43 - CFD: 05/06/2016 - [] D -- C:\Users\client\AppData\Roaming\AutoHideIP O43 - CFD: 15/03/2015 - [] D -- C:\Users\client\AppData\Roaming\Bitdefender =>.Bitdefender O43 - CFD: 26/11/2013 - [] D -- C:\Users\client\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant =>.Adobe Inc. O43 - CFD: 22/05/2016 - [] D -- C:\Users\client\AppData\Roaming\CoSoSys O43 - CFD: 13/03/2017 - [0] D -- C:\Users\client\AppData\Roaming\CrystalIdea Software =>.CrystalIdea Software O43 - CFD: 12/12/2014 - [] D -- C:\Users\client\AppData\Roaming\C__Users_client_Desktop_Anciennes données de Firefox_AutoHideIP-5.3.9.8(GrizzTutorials)_Crack_AutoHideIP.exe O43 - CFD: 12/12/2014 - [] D -- C:\Users\client\AppData\Roaming\C__Users_client_Downloads_Documents_Super Hide IP 3.0.6.2 + Crack_Super Hide IP 3.0.6.2_Crack_SuperHideIP.exe O43 - CFD: 28/12/2014 - [0] D -- C:\Users\client\AppData\Roaming\DiskDefrag =>.Auslogics O43 - CFD: 03/12/2015 - [] D -- C:\Users\client\AppData\Roaming\DivX =>.DivX O43 - CFD: 13/08/2016 - [] D -- C:\Users\client\AppData\Roaming\DMCache =>.DMCache O43 - CFD: 14/04/2017 - [] D -- C:\Users\client\AppData\Roaming\ESET =>.ESET O43 - CFD: 14/02/2017 - [] D -- C:\Users\client\AppData\Roaming\GlarySoft =>.GlarySoft O43 - CFD: 03/04/2016 - [] D -- C:\Users\client\AppData\Roaming\Hyperionics =>.Hyperionics O43 - CFD: 14/03/2013 - [] D -- C:\Users\client\AppData\Roaming\Identities =>.Microsoft Corporation O43 - CFD: 08/04/2016 - [] D -- C:\Users\client\AppData\Roaming\IDM =>.IDM O43 - CFD: 26/02/2015 - [] D -- C:\Users\client\AppData\Roaming\inkscape =>.inkscape.org O43 - CFD: 03/03/2015 - [] D -- C:\Users\client\AppData\Roaming\InstallShield =>.InstallShield O43 - CFD: 02/03/2017 - [] D -- C:\Users\client\AppData\Roaming\Kodi =>.XBMC Foundation O43 - CFD: 17/12/2015 - [] D -- C:\Users\client\AppData\Roaming\Labography O43 - CFD: 23/03/2015 - [] D -- C:\Users\client\AppData\Roaming\Logishrd =>.Logitech Inc. O43 - CFD: 23/03/2015 - [] D -- C:\Users\client\AppData\Roaming\Logitech =>.Logitech O43 - CFD: 29/10/2013 - [] D -- C:\Users\client\AppData\Roaming\Macromedia =>.Macromedia O43 - CFD: 24/03/2015 - [0] D -- C:\Users\client\AppData\Roaming\MAKeyboard =>.Alain Morillon O43 - CFD: 14/07/2009 - [0] D -- C:\Users\client\AppData\Roaming\Media Center Programs =>.Microsoft Corporation O43 - CFD: 03/12/2016 - [0] D -- C:\Users\client\AppData\Roaming\Media Player Classic =>.Microsoft Corporation O43 - CFD: 04/12/2016 - [] SD -- C:\Users\client\AppData\Roaming\Microsoft =>.Microsoft Corporation O43 - CFD: 03/12/2015 - [] D -- C:\Users\client\AppData\Roaming\MOVAVI =>.Movavi O43 - CFD: 02/12/2015 - [] D -- C:\Users\client\AppData\Roaming\Moyea O43 - CFD: 24/03/2014 - [] D -- C:\Users\client\AppData\Roaming\Mozilla =>.Mozilla Corporation O43 - CFD: 21/07/2016 - [0] D -- C:\Users\client\AppData\Roaming\MPC-HC =>.MPC-HC Team O43 - CFD: 13/11/2016 - [] D -- C:\Users\client\AppData\Roaming\Notepad++ =>.Don Ho O43 - CFD: 09/09/2014 - [] D -- C:\Users\client\AppData\Roaming\Oracle =>.Oracle O43 - CFD: 28/01/2016 - [] D -- C:\Users\client\AppData\Roaming\QuickScan =>.Bitdefender O43 - CFD: 26/02/2014 - [] D -- C:\Users\client\AppData\Roaming\Real =>.RealNetworks Inc. O43 - CFD: 01/12/2015 - [] D -- C:\Users\client\AppData\Roaming\Samsung =>.Samsung Electronics O43 - CFD: 16/05/2016 - [] D -- C:\Users\client\AppData\Roaming\Skype =>.Skype O43 - CFD: 21/12/2016 - [0] D -- C:\Users\client\AppData\Roaming\Smart PC Solutions =>.Smart PC Solutions O43 - CFD: 21/04/2016 - [] D -- C:\Users\client\AppData\Roaming\Software Tool O43 - CFD: 06/03/2015 - [] D -- C:\Users\client\AppData\Roaming\SolidDocuments =>.SolidDocuments O43 - CFD: 01/01/2015 - [] D -- C:\Users\client\AppData\Roaming\sparta111 =>.Legitimate O43 - CFD: 10/10/2015 - [] D -- C:\Users\client\AppData\Roaming\Sun =>.Oracle O43 - CFD: 13/01/2017 - [] D -- C:\Users\client\AppData\Roaming\SUPERAntiSpyware.com =>.SUPERAntiSpyware.com O43 - CFD: 12/12/2014 - [] D -- C:\Users\client\AppData\Roaming\SuperHideIP O43 - CFD: 15/03/2015 - [] D -- C:\Users\client\AppData\Roaming\TP-LINK =>.TP-LINK O43 - CFD: 06/04/2017 - [] D -- C:\Users\client\AppData\Roaming\uTorrent O43 - CFD: 30/10/2013 - [] D -- C:\Users\client\AppData\Roaming\Video Wallpaper O43 - CFD: 19/05/2017 - [] D -- C:\Users\client\AppData\Roaming\vlc =>.VideoLan Team O43 - CFD: 17/02/2015 - [] D -- C:\Users\client\AppData\Roaming\VMware =>.VMware O43 - CFD: 29/01/2014 - [] D -- C:\Users\client\AppData\Roaming\VoipCheapCom O43 - CFD: 30/10/2013 - [] D -- C:\Users\client\AppData\Roaming\WinRAR =>.WinRAR O43 - CFD: 25/04/2017 - [] D -- C:\Users\client\AppData\Roaming\Youtube Downloader HD =>.Regensoft O43 - CFD: 25/05/2017 - [] D -- C:\Users\client\AppData\Roaming\ZHP =>.Nicolas Coolman O43 - CFD: 13/05/2017 - [] D -- C:\Users\client\AppData\Local\Adobe =>.Adobe O43 - CFD: 26/03/2015 - [] D -- C:\Users\client\AppData\Local\Apple =>.Apple Inc. O43 - CFD: 26/03/2015 - [] D -- C:\Users\client\AppData\Local\Apple Computer =>.Apple Inc. O43 - CFD: 14/03/2013 - [0] SHD -- C:\Users\client\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 20/03/2015 - [] D -- C:\Users\client\AppData\Local\Apps =>.Microsoft Corporation O43 - CFD: 06/12/2015 - [] D -- C:\Users\client\AppData\Local\Ball Plugin O43 - CFD: 13/02/2017 - [] D -- C:\Users\client\AppData\Local\CEF =>.CEF O43 - CFD: 29/01/2014 - [] D -- C:\Users\client\AppData\Local\CounterPath =>.CounterPath O43 - CFD: 29/01/2014 - [] D -- C:\Users\client\AppData\Local\CounterPath Corporation O43 - CFD: 20/03/2015 - [0] D -- C:\Users\client\AppData\Local\Deployment =>.Microsoft Corporation O43 - CFD: 21/05/2017 - [0] D -- C:\Users\client\AppData\Local\Diagnostics =>.Microsoft Corporation O43 - CFD: 03/02/2017 - [] D -- C:\Users\client\AppData\Local\DiskDrill =>.Clever Software O43 - CFD: 28/12/2016 - [] D -- C:\Users\client\AppData\Local\Downloaded Installations =>.Microsoft Corporation O43 - CFD: 02/05/2017 - [] D -- C:\Users\client\AppData\Local\ElevatedDiagnostics =>.Microsoft Corporation O43 - CFD: 21/03/2015 - [] D -- C:\Users\client\AppData\Local\Eption O43 - CFD: 13/04/2017 - [] D -- C:\Users\client\AppData\Local\ESET =>.ESET O43 - CFD: 13/04/2017 - [] D -- C:\Users\client\AppData\Local\F-Secure =>.F-Secure O43 - CFD: 08/05/2017 - [0] D -- C:\Users\client\AppData\Local\FSDART =>.Games Software O43 - CFD: 15/02/2017 - [] D -- C:\Users\client\AppData\Local\Google =>.Google O43 - CFD: 14/03/2013 - [0] SHD -- C:\Users\client\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 05/03/2015 - [] D -- C:\Users\client\AppData\Local\IsolatedStorage =>.id Software O43 - CFD: 02/11/2013 - [] D -- C:\Users\client\AppData\Local\Macromedia =>.Macromedia O43 - CFD: 02/09/2015 - [] D -- C:\Users\client\AppData\Local\MetaGeek,_LLC =>.MetaGeek, LLC O43 - CFD: 13/02/2017 - [] D -- C:\Users\client\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 10/05/2016 - [] D -- C:\Users\client\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 02/12/2015 - [] D -- C:\Users\client\AppData\Local\Movavi =>.Movavi O43 - CFD: 02/11/2013 - [] D -- C:\Users\client\AppData\Local\Mozilla =>.Mozilla Corporation O43 - CFD: 16/03/2015 - [] D -- C:\Users\client\AppData\Local\MSKLC =>.Microsoft Corporation O43 - CFD: 15/02/2017 - [] D -- C:\Users\client\AppData\Local\OCCT_-_Ocbase_-_Adrien_Me =>.Tetedeiench O43 - CFD: 31/10/2013 - [] D -- C:\Users\client\AppData\Local\Programs =>.Microsoft Corporation O43 - CFD: 14/03/2013 - [0] D -- C:\Users\client\AppData\Local\Real =>.RealNetworks Inc. O43 - CFD: 01/12/2015 - [0] D -- C:\Users\client\AppData\Local\Samsung =>.Samsung Electronics O43 - CFD: 07/01/2016 - [0] D -- C:\Users\client\AppData\Local\Skype =>.Skype O43 - CFD: 02/10/2015 - [0] D -- C:\Users\client\AppData\Local\Sparta =>.Sparta O43 - CFD: 25/05/2017 - [] D -- C:\Users\client\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 14/03/2013 - [0] SHD -- C:\Users\client\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 02/12/2015 - [] D -- C:\Users\client\AppData\Local\VideoEditor =>.Oposoft.com O43 - CFD: 28/12/2016 - [] D -- C:\Users\client\AppData\Local\VirtualStore =>.Microsoft Corporation O43 - CFD: 17/02/2015 - [] D -- C:\Users\client\AppData\Local\VMware =>.VMware O43 - CFD: 11/12/2016 - [] D -- C:\Users\client\AppData\Local\VS Revo Group =>.VS Revo Group O43 - CFD: 21/05/2016 - [] D -- C:\Users\client\AppData\Local\Windows Live =>.Microsoft Corporation O43 - CFD: 21/03/2015 - [] D -- C:\Users\client\AppData\Local\YkgPack O43 - CFD: 25/05/2017 - [] D -- C:\Users\client\AppData\Local\ZHP =>.Nicolas Coolman O43 - CFD: 31/10/2013 - [0] D -- C:\Users\client\AppData\Local\Programs\Common =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] RD -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories =>.Microsoft Corporation O43 - CFD: 30/10/2013 - [] RD -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools =>.Administrative Tools O43 - CFD: 02/04/2014 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Data Doctor Recovery - SIM Card (Evaluation) O43 - CFD: 18/08/2014 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FK O43 - CFD: 26/03/2015 - [0] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Window Registry Repair =>.RegSofts Software O43 - CFD: 06/09/2014 - [0] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter =>.Mike Matsnev O43 - CFD: 26/11/2013 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HyperCam 2 =>.Hyperionics O43 - CFD: 12/04/2017 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HyperSnap 7 O43 - CFD: 15/03/2015 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager =>.Tonec Inc O43 - CFD: 03/11/2013 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JeffProd =>.JeffProd O43 - CFD: 27/02/2017 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi =>.XBMC Foundation O43 - CFD: 24/03/2015 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MA Keyboard O43 - CFD: 14/07/2009 - [] RD -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance =>.Microsoft Corporation O43 - CFD: 15/02/2017 - [0] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OCCT =>.Adrien Mercier O43 - CFD: 20/03/2015 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Planche =>.Planche O43 - CFD: 18/10/2014 - [0] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SetEdit21174 O43 - CFD: 21/10/2014 - [0] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SetEditAtSat O43 - CFD: 09/07/2015 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan =>.Almico Software O43 - CFD: 12/04/2017 - [] RD -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup =>.Microsoft Corporation O43 - CFD: 24/01/2014 - [0] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualCamera O43 - CFD: 27/11/2015 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wino O43 - CFD: 13/11/2016 - [] D -- C:\Users\client\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR =>.WinRAR O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 14/03/2013 - [0] SHD -- C:\Users\Default\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\History =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 13/05/2016 - [0] D -- C:\Users\Default\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Application Data =>.Microsoft Corporation O43 - CFD: 14/03/2013 - [0] SHD -- C:\Users\Default User\AppData\Local\Historique =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\History =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [] D -- C:\Users\Default User\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 13/05/2016 - [0] D -- C:\Users\Default User\AppData\Local\Microsoft Help =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] D -- C:\Users\Default User\AppData\Local\Temp =>.Microsoft Corporation O43 - CFD: 14/07/2009 - [0] SHD -- C:\Users\Default User\AppData\Local\Temporary Internet Files =>.Microsoft Corporation O43 - CFD: 08/07/2016 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Adobe =>.Adobe O43 - CFD: 28/10/2015 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\ESET =>.ESET O43 - CFD: 03/04/2014 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Google =>.Google O43 - CFD: 01/05/2016 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Local\Microsoft =>.Microsoft Corporation O43 - CFD: 26/03/2015 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Apple Computer =>.Apple Inc. O43 - CFD: 31/08/2016 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\ESET =>.ESET O43 - CFD: 30/10/2014 - [] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\McAfee =>.McAfee O43 - CFD: 01/05/2016 - [] SD -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\Microsoft =>.Microsoft Corporation O43 - CFD: 15/03/2015 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\QuickScan =>.Bitdefender O43 - CFD: 17/02/2015 - [0] D -- C:\Windows\System32\Config\systemprofile\AppData\Roaming\VMware =>.VMware ---\\ ShellIconOverlayIdentifiers (SIOI) (1) - 1s O106 - SIOI: IDM Shell Extension [IDM Shell Extension] - {CDC95B92-E27C-4745-A8C5-64A52A78855D}. (.Tonec Inc. - Internet Download Manager module.) -- C:\Program Files\Internet Download Manager\IDMShellExt.dll =>.Tonec Inc.® ---\\ Enumération des clés StartupReg (30) - 19s O53 - SMSR:HKLM\...\startupreg\Acrobat Assistant 8.0 [Key] . (.Adobe Systems Inc. - AcroTray.) -- C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe =>.Adobe Systems Inc. O53 - SMSR:HKLM\...\startupreg\Adobe Creative Cloud [Key] . (.Adobe Systems Incorporated - Adobe Creative Cloud.) -- C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\AdobeAAMUpdater-1.0 [Key] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated O53 - SMSR:HKLM\...\startupreg\Auto Hide IP [Key] . (.AutoHideIP.Com - Auto Hide IP.) -- C:\Program Files\AutoHideIP\AutoHideIP.exe O53 - SMSR:HKLM\...\startupreg\BCSSync [Key] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation O53 - SMSR:HKLM\...\startupreg\CCleaner Monitoring [Key] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd O53 - SMSR:HKLM\...\startupreg\Codec Pack Update Checker [Key] . (...) -- C:\Windows\system32\Codecs\UpdateChecker.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\Domino [Key] . (.Copyright (C) - .) -- C:\Windows\Domino.exe O53 - SMSR:HKLM\...\startupreg\EvtMgr6 [Key] . (...) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\GUDelayStartup [Key] . (.Glarysoft Ltd - Glary Utilities StartupManager.) -- C:\Program Files\Glary Utilities 5\StartupManager.exe =>.Glarysoft Ltd O53 - SMSR:HKLM\...\startupreg\HDAudDeck [Key] . (.VIA - VIA HD Audio CPL.) -- C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe =>.VIA O53 - SMSR:HKLM\...\startupreg\Horloge [Key] . (...) -- C:\Program Files\Horloge\Horloge.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\HotKeysCmds [Key] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation O53 - SMSR:HKLM\...\startupreg\HSPALauncher [Key] . (.Copyright (C) 2010 - HSDPALauncher MFC Application.) -- C:\Program Files\HSPA USB Modem\HSPALauncher.exe O53 - SMSR:HKLM\...\startupreg\IDMan [Key] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe =>.Tonec Inc. O53 - SMSR:HKLM\...\startupreg\IgfxTray [Key] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation O53 - SMSR:HKLM\...\startupreg\IPHider [Key] . (...) -- C:\Program Files\IP Hider\IP Hider.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\JoyFaxProc [Key] . (...) -- C:\Program Files\Joyfax\Joyfax Client\JoyFaxProc.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\KiesTrayAgent [Key] . (...) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\makeyboard [Key] . (.Morillon Alain - MA Keyboard.) -- C:\Program Files\MA Keyboard\MAKB.exe O53 - SMSR:HKLM\...\startupreg\MalTray [Key] . (...) -- C:\Program Files\Glarysoft\Malware Hunter\mhtray.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\MsnMsgr [Key] . (.Microsoft Corporation - Windows Live Messenger.) -- C:\Program Files\Windows Live\Messenger\msnmsgr.exe =>.Microsoft Corporation O53 - SMSR:HKLM\...\startupreg\Persistence [Key] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files\Skype\Phone\Skype.exe =>.Skype Technologies S.A. O53 - SMSR:HKLM\...\startupreg\SunJavaUpdateSched [Key] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle Corporation O53 - SMSR:HKLM\...\startupreg\SUPERAntiSpyware [Key] . (.SUPERAntiSpyware - SUPERAntiSpyware Application.) -- C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe =>.SUPERAntiSpyware O53 - SMSR:HKLM\...\startupreg\Tango [Key] . (...) -- C:\Program Files\Tango\Tango.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\uTorrent [Key] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\client\AppData\Roaming\uTorrent\uTorrent.exe O53 - SMSR:HKLM\...\startupreg\Viber [Key] . (...) -- C:\Users\client\AppData\Local\Viber\Viber.exe (.not file.) O53 - SMSR:HKLM\...\startupreg\ZSSnp211 [Key] . (.ZSMCSNAP - ZSMCSNAP.) -- C:\Windows\ZSSnp211.exe ---\\ Liste des pilotes du système (102) - 37s O58 - SDL:2017/04/30 23:54:46 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\Windows\System32\drivers\0A176B2F.sys [220088] =>.Malwarebytes Corporation® O58 - SDL:2015/06/26 02:42:31 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\34B067CF.sys [98520] =>.Malwarebytes Corporation® (.Superfluous.Orphan) O58 - SDL:2017/05/01 21:24:55 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\Windows\System32\drivers\357546A0.sys [220088] =>.Malwarebytes Corporation® O58 - SDL:2015/03/15 04:26:41 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\3BEA47D6.sys [114904] =>.Malwarebytes Corporation® (.Superfluous.Orphan) O58 - SDL:2014/05/07 23:11:55 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\48230029.sys [107736] =>.Malwarebytes Corporation® (.Superfluous.Orphan) O58 - SDL:2015/02/14 22:26:03 A . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\66653B18.sys [114904] =>.Malwarebytes Corporation® (.Superfluous.Orphan) O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] =>.Microsoft Windows® O58 - SDL:2011/03/11 06:43:46 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] =>.Microsoft Windows® O58 - SDL:2011/03/11 06:43:46 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400] =>.Microsoft Windows® O58 - SDL:2012/05/17 13:01:08 A . (.AnvSoft Inc. - AnvSoft Virtual Audio Device.) -- C:\Windows\System32\drivers\anvsnddrv.sys [32896] =>.Anvsoft Inc. O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] =>.Microsoft Windows® O58 - SDL:2010/01/05 19:20:10 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athur.sys [1500160] =>.Atheros Communications, Inc. O58 - SDL:2009/07/13 23:09:17 A . (.ATI Technologies Inc. - Pilote en mode noyau ATI Radeon.) -- C:\Windows\System32\drivers\atikmdag.sys [4194816] =>.ATI Technologies Inc. O58 - SDL:2009/07/13 23:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] =>.Broadcom Corporation O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom 802.11 Network Adapter wireless dr.) -- C:\Windows\System32\drivers\BCMWL6.SYS [1131008] =>.Broadcom Corporation O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] =>.Brother Industries, Ltd. O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] =>.Brother Industries, Ltd. O58 - SDL:2009/07/14 01:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] =>.Brother Industries Ltd. O58 - SDL:2009/07/13 23:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] =>.Brother Industries Ltd. O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] =>.Brother Industries Ltd. O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] =>.Brother Industries Ltd. O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] =>.Broadcom Corporation O58 - SDL:2009/06/03 00:00:00 A . (.www.winchiphead.com - WDM for CH341 serial, by W.ch.) -- C:\Windows\System32\drivers\CH341SER.SYS [39632] =>.www.winchiphead.com O58 - SDL:2009/07/14 02:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] =>.Microsoft Windows® O58 - SDL:2008/08/29 17:54:40 A . (.Mobile Connector - USB Modem/Serial Device Driver.) -- C:\Windows\System32\drivers\cmusbser.sys [103552] =>.Mobile Connector O58 - SDL:2009/07/14 02:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] =>.Microsoft Windows® O58 - SDL:2017/01/17 09:15:38 A . (.ESET - Amon monitor.) -- C:\Windows\System32\drivers\eamonm.sys [113544] =>.ESET, spol. s r.o.® O58 - SDL:2014/09/22 08:20:06 A . (.ESET - Devmon monitor.) -- C:\Windows\System32\drivers\edevmon.sys [190368] =>.ESET, spol. s r.o.® O58 - SDL:2017/01/17 09:15:38 A . (.ESET - ESET Helper driver.) -- C:\Windows\System32\drivers\ehdrv.sys [140984] =>.ESET, spol. s r.o.® O58 - SDL:2009/07/14 02:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] =>.Microsoft Windows® O58 - SDL:2017/01/17 09:15:38 A . (.ESET - ESET Personal Firewall driver.) -- C:\Windows\System32\drivers\epfwwfpr.sys [62528] =>.ESET, spol. s r.o.® O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] =>.Broadcom Corporation O58 - SDL:2017/05/25 04:34:30 A . (.Malwarebytes - Malwarebytes Anti-Ransomware Protection.) -- C:\Windows\System32\drivers\farflt.sys [96704] =>.Malwarebytes Corporation® O58 - SDL:2015/07/09 02:46:25 A . (.Glarysoft Ltd - The driver for the Startup Manager tool.) -- C:\Windows\System32\drivers\GUBootStartup.sys [17472] =>.Glarysoft Ltd® O58 - SDL:2016/07/22 19:55:45 A . (.Glarysoft Ltd - The driver for the Startup Manager tool.) -- C:\Windows\System32\drivers\GUSBootStartup.sys [17472] =>.Glarysoft Ltd® O58 - SDL:2009/07/13 23:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] =>.Hauppauge Computer Works, Inc. O58 - SDL:2009/07/14 02:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] =>.Microsoft Windows® O58 - SDL:2011/03/11 06:43:55 A . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\System32\drivers\iaStorV.sys [332160] =>.Microsoft Windows® O58 - SDL:2015/03/03 02:02:12 A . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\System32\drivers\idmwfp.sys [117800] =>.Tonec Inc.® O58 - SDL:2012/11/14 00:43:36 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd32.sys [9037312] =>.Intel Corporation O58 - SDL:2009/07/14 02:20:36 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41040] =>.Microsoft Windows® O58 - SDL:2010/10/21 14:57:18 A . (.Atheros Communications, Inc. - Atheros L1c PCI-E Gigabit Ethernet Controll.) -- C:\Windows\System32\drivers\L1C62x86.sys [68208] =>.Atheros Communications Inc.® O58 - SDL:2014/03/19 01:24:16 A . (.Logitech, Inc. - Logitech HID Filter Driver..) -- C:\Windows\System32\drivers\LHidFilt.Sys [43800] =>.Logitech® O58 - SDL:2014/03/19 01:24:18 A . (.Logitech, Inc. - Logitech Mouse Filter Driver..) -- C:\Windows\System32\drivers\LMouFilt.Sys [37528] =>.Logitech® O58 - SDL:2015/03/31 01:29:09 A . (.Logitech, Inc. - Logitech Non-Plug and Play Driver..) -- C:\Windows\System32\drivers\LNonPnP.sys [16400] =>.Logitech® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [95824] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:37 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89168] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [54864] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96848] =>.Microsoft Windows® O58 - SDL:2014/03/19 01:24:24 A . (.Logitech, Inc. - Logitech USB Filter Driver..) -- C:\Windows\System32\drivers\LUsbFilt.sys [28312] =>.Logitech® O58 - SDL:2017/05/18 23:05:38 A . (...) -- C:\Windows\System32\drivers\mbae.sys [59904] =>.Malwarebytes Corporation® O58 - SDL:2017/05/25 04:34:15 A . (.Malwarebytes - Malwarebytes Real-Time Protection.) -- C:\Windows\System32\drivers\mbam.sys [39360] =>.Malwarebytes Corporation® O58 - SDL:2017/05/20 05:14:45 A . (.Malwarebytes - Malwarebytes Chameleon.) -- C:\Windows\System32\drivers\MBAMChameleon.sys [161216] =>.Malwarebytes Corporation® O58 - SDL:2017/05/25 04:34:13 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [220088] =>.Malwarebytes Corporation® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [30800] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:20:36 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [235584] =>.Microsoft Windows® O58 - SDL:2007/10/28 20:21:54 A . (.Marvell Semiconductor, Inc - ExtSta NDIS 6.0 driver.) -- C:\Windows\System32\drivers\MRVW24B.sys [310016] O58 - SDL:2017/05/25 05:40:39 A . (.Malwarebytes - Malwarebytes Web Protection.) -- C:\Windows\System32\drivers\mwac.sys [64288] =>.Malwarebytes Corporation® O58 - SDL:2009/07/14 02:20:44 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [44624] =>.Microsoft Windows® O58 - SDL:2013/03/01 02:48:42 A . (.Riverbed Technology, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\System32\drivers\npf.sys [36600] =>.Riverbed Technology, Inc.® O58 - SDL:2011/03/11 06:44:01 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [117120] =>.Microsoft Windows® O58 - SDL:2011/03/11 06:44:01 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [143744] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:19:04 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1383488] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:19:04 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106064] =>.Microsoft Windows® O58 - SDL:2009/12/30 11:21:18 A . (.VS Revo Group - Revo Uninstaller Minifilter.) -- C:\Windows\System32\drivers\revoflt.sys [27192] =>.VS Revo Group® O58 - SDL:2011/06/10 06:34:52 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.20 32-bit Dr.) -- C:\Windows\System32\drivers\Rt86win7.sys [394856] =>.Realtek Semiconductor Corp® O58 - SDL:2009/07/13 21:50:20 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] =>.Macrovision Corporation, Macrovision Europe Limited, O58 - SDL:2007/07/31 18:45:50 A . (.Prolific Technology Inc. - USB-to-Serial Cable Driver.) -- C:\Windows\System32\drivers\ser2pl.sys [76800] =>.Prolific Technology Inc. O58 - SDL:2009/07/13 23:02:53 A . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190.) -- C:\Windows\System32\drivers\SiSGB6.sys [48128] =>.Silicon Integrated Systems Corp. O58 - SDL:2009/07/14 02:19:04 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [40016] =>.Microsoft Windows® O58 - SDL:2009/07/14 02:19:04 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [77888] =>.Microsoft Windows® O58 - SDL:2013/03/14 10:01:13 A . (.Duplex Secure Ltd. - SCSI Pass Through Direct Host.) -- C:\Windows\System32\drivers\sptd.sys [420920] =>.Duplex Secure Ltd® O58 - SDL:2009/07/14 02:19:04 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [21072] =>.Microsoft Windows® O58 - SDL:2009/06/02 16:54:04 A . (.VIA Technologies, Inc. - VIA High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\viahduaa.sys [1056256] =>.VIA Technologies, Inc. O58 - SDL:2009/07/14 02:19:10 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [16976] =>.Microsoft Windows® O58 - SDL:2007/02/21 13:53:22 A . (.MorningSound Co., Ltd. - VirtualCamera Driver.) -- C:\Windows\System32\drivers\VirtualCam.sys [192512] O58 - SDL:2009/07/31 17:40:00 A . (.Creative Technology Ltd. - Creative Audio Driver.) -- C:\Windows\System32\drivers\VMfilt32.sys [17920] =>.Creative Technology Ltd. O58 - SDL:2009/07/14 02:19:11 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [141904] =>.Microsoft Windows® O58 - SDL:2007/06/13 09:24:16 A . (.ZSMC.Corporation - Video and Capture Device Driver.) -- C:\Windows\System32\drivers\ZS211.sys [1469312] O58 - SDL:2009/07/13 22:40:41 A . (...) -- C:\Windows\System32\ANSI.SYS [9029] =>.Microsoft Corporation O58 - SDL:2010/01/05 19:20:10 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\athur.sys [1500160] =>.Atheros Communications, Inc. O58 - SDL:2009/07/13 22:40:44 A . (...) -- C:\Windows\System32\country.sys [27097] =>.Microsoft Corporation O58 - SDL:1996/04/03 20:33:26 A . (...) -- C:\Windows\System32\giveio.sys [5248] =>.ImageSurfer Software O58 - SDL:2009/07/13 22:40:40 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:43 A . (...) -- C:\Windows\System32\KEY01.SYS [42809] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:43 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:23 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:31 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:35 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:39 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:27 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:11 A . (...) -- C:\Windows\System32\NTIO.SYS [33952] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:15 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:17 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:19 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536] =>.Microsoft Corporation O58 - SDL:2009/07/13 22:40:13 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672] =>.Microsoft Corporation O58 - SDL:2012/12/29 21:59:38 A . (.Almico Software - SpeedFan x32 Driver.) -- C:\Windows\System32\speedfan.sys [24184] =>.SOKNO S.R.L.® ---\\ Associations Shell Spawning (10) - 1s O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %* O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation® O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S ---\\ Menu de démarrage Internet (12) - 1s O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc® O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- iexplore.exe O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe =>.Google Inc. O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation ---\\ Recherche d'infection sur les navigateurs (3) - 17s O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/ =>.Bing.com O69 - SBI: SearchScopes [HKLM] {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} - (Microsoft (Bing)) - http://www.bing.com/ =>.Bing.com ---\\ Enumère les services démarrés par Svchost (33) - 3s O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464] =>.Microsoft Corporation O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584] =>.Microsoft Corporation O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [67584] =>.Microsoft Corporation O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [168448] =>.Microsoft Corporation O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [591360] =>.Microsoft Corporation O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [667136] =>.Microsoft Corporation O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [473088] =>.Microsoft Corporation O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] =>.Microsoft Corporation O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [285184] =>.Microsoft Corporation O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264] =>.Microsoft Corporation O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [49664] =>.Microsoft Corporation O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [300544] =>.Microsoft Corporation O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [241664] =>.Microsoft Corporation O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [543232] =>.Microsoft Corporation O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1933848] =>.Microsoft Windows Component Publisher® O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [589312] =>.Microsoft Corporation O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192] =>.Microsoft Corporation O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [497152] =>.Microsoft Corporation O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [21504] =>.Microsoft Corporation O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [46592] =>.Microsoft Corporation O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [114688] =>.Microsoft Corporation O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [49664] =>.Microsoft Corporation O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440] =>.Microsoft Corporation O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304] =>.Microsoft Corporation O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [163328] =>.Microsoft Corporation O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [749056] =>.Microsoft Corporation O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [71168] =>.Microsoft Corporation O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [99328] =>.Microsoft Corporation O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [168960] =>.Microsoft Corporation O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102912] =>.Microsoft Corporation O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [37376] =>.Microsoft Corporation O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800] =>.Microsoft Corporation O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504] =>.Microsoft Corporation ---\\ Scan Additionnel (1) - 3s ~ Aucun élément malicieux ou superflu trouvé. ---\\ Récapitulatif des éléments trouvés sur votre station (2) - 0s https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.KeyFinder https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.Superfluous.Orphan ~ Unselected Options: O40, O50, O82, ~ End of the scan, 41178 items in 28mn07s (1283)(0)