Rapport de ZHPDiag v2015.1.9.4

Transcription

~ Rapport de ZHPDiag v2015.1.9.4 - Nicolas Coolman (09/01/2015)
~ Lancé par Morgan et Ségo (22/10/2015 21:14:12)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum http://forum.nicolascoolman.fr
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Deactivate by program
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.18059
MFIE: Mozilla Firefox 41.0.2 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)
Windows Server License Manager Script : OK
---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 2.1.8.1057
Windows Defender W7 (Activate)
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
Vuze v5.6.2.0 =>P2P.Azureus
---\\ Surveillance de Logiciels
Adobe Flash Player 19 NPAPI
Adobe Reader XI
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6124 MB (72% free)
System Restore: Activé (Enable)
System drive C: has 303 GB (21%) free of 1385 GB
---\\ Mode de connexion au système
~ Computer Name: MORGANETSÉGO-HP
~ User Name: Morgan et Ségo
~ All Users Names: Morgan et Ségo, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Morgan et Ségo\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Morgan et Ségo\AppData\Roaming\
~ %Desktop% : C:\Users\Morgan et Ségo\Desktop\
~ %Favorites% : C:\Users\Morgan et Ségo\Favorites\
~ %LocalAppData% : C:\Users\Morgan et Ségo\AppData\Local\
~ %StartMenu% : C:\Users\Morgan et Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 303 Go of 1385 Go)
D: Hard drive, Flash drive, Thumb drive (Free 1 Go of 12 Go)
E: CD-ROM drive (Not Inserted)
F: Floppy drive, Flash card reader, USB Key (Not Inserted)
H: CD-ROM drive (Not Inserted)
I: Hard drive, Flash drive, Thumb drive (Free 0 Go of 466 Go)
J: Floppy drive, Flash card reader, USB Key (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]
NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDD
EN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWA
LL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto
Update\Results\Install] LastSuccessTime : OK
~ Security Center: 49 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.332FEAB1435662FC6C672E25BEB37BE3] - (.Microsoft Corporation - Explorateur Windows.)
(.25/02/2011 - 07:19:30.) -- C:\Windows\Explorer.exe [2871808]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage
de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.BD06D875FB79E92DAF724C91DE743AFA] - (.Microsoft Corporation - Extensions Internet pour
Win32.) (.16/09/2015 - 04:11:12.) -- C:\Windows\System32\wininet.dll [2487808]
[MD5.8CEBD9D0A0A879CDE9F36F4383B7CAEA] - (.Microsoft Corporation - Application d’ouverture
de session Windows.) (.17/07/2014 - 03:07:24.) -- C:\Windows\System32\Winlogon.exe [455168]
[MD5.067FA52BFB59A56110A12312EF9AF243] - (.Microsoft Corporation - Bibliothèque de licences.)
(.21/11/2010 - 04:24:16.) -- C:\Windows\System32\sppcomapi.dll [232448]
[MD5.FA886682CFC5D36718D3E436AACF10B9] - (.Microsoft Corporation - Ancillary Function Driver
for WinSock.) (.30/05/2014 - 07:45:52.) -- C:\Windows\system32\Drivers\AFD.sys [497152]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport
Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System
Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.F036CE71586E93D94DAB220D7BDF4416] - (.Microsoft Corporation - SCSI CD-ROM Driver.)
(.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.9BB2EF44EAA163B29C4A4587887A0FE4] - (.Microsoft Corporation - DFS Namespace Client
Driver.) (.21/11/2010 - 04:24:32.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - (.Microsoft Corporation - High Definition Audio Bus
Driver.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.)
(.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address
Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.ACB6782973BD93760D597FC7BB37E692] - (.Microsoft Corporation - Windows NT SMB
Minirdr.) (.29/09/2015 - 02:50:29.) -- C:\Windows\system32\Drivers\MRxSmb.sys [159232]
[MD5.09594D1089C523423B32A4229263F068] - (.Microsoft Corporation - MBT Transport driver.)
(.21/11/2010 - 04:23:51.) -- C:\Windows\system32\Drivers\netBT.sys [261632]
[MD5.1A29A59A4C5BA6F8C85062A613B7E2B2] - (.Microsoft Corporation - Pilote du système de
fichiers NT.) (.24/01/2014 - 03:37:55.) -- C:\Windows\system32\Drivers\ntfs.sys [1684928]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.)
(.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.471815800AE33E6F1C32FB1B97C490CA] - (.Microsoft Corporation - RAS L2TP mini-port/callmanager driver.) (.21/11/2010 - 04:24:33.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [129536]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.)
(.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.70988118145F5F10EF24720B97F35F65] - (.Microsoft Corporation - TDI Translation Driver.)
(.11/11/2014 - 02:46:26.) -- C:\Windows\system32\Drivers\tdx.sys [119296]
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - (.Microsoft Corporation - Pilote de cliché instantané
du volume.) (.21/11/2010 - 04:23:47.) -- C:\Windows\system32\Drivers\volsnap.sys [295808]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 1/4420
~ Mes musiques (My Musics) : 5/17803
~ Mes Videos (My Videos) : 1/578
~ Mes Favoris (My Favorites) : 1/90
~ Mes Documents (My Documents) : 1/51912
~ Mon Bureau (My Desktop) : 1/72310
~ Menu demarrer (Programs) : 1/76
~ Hidden Files: Scanned in 00mn 13s
---\\ Processus lancés
[MD5.143ECB242AF6ECE366AB477828E29D44] - (...) -- C:\Program Files (x86)\Orange\Orange
Installer\OrangeInstaller.exe [561320] [PID.1472]
[MD5.554A50B5310E702029D3A675459108FF] - (.Hewlett-Packard - hpsysdrv.) -- C:\Program Files
(x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768] [PID.2216]
[MD5.5516C26A6AF8EB4E2CAB48EC98A74398] - (.Hewlett-Packard - hpwuSchd Application.) -C:\Program Files (x86)\Hp\HP Software Update\hpwuschd2.exe [54576] [PID.3180]
[MD5.155A00191CA61465772017F58B85BFF8] - (.Mindjet - MindManager Topic Alerts.) -C:\Program Files (x86)\Mindjet\MindManager 14\MmReminderService.exe [42312] [PID.3360]
[MD5.E6B65C40F24E207DF5937AA3641CA381] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files
(x86)\ZHPDiag\ZHPDiag.exe [8151040] [PID.4236]
~ Processes Running: Scanned in 00mn 00s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Morgan et Ségo\AppData\Roaming\Mozilla\Firefox\Profiles\0cc2m69k.default\prefs.js
M3 - MFPP: Plugins - [Morgan et Ségo] -- C:\Users\Morgan et
Ségo\AppData\Roaming\Mozilla\Firefox\Profiles\0cc2m69k.default\searchplugins\bing.xml
M0 - MFSP: prefs.js [Morgan et Ségo - 0cc2m69k.default] http://www.google.fr
M2 - MFEP: Extension [Morgan et Ségo - 0cc2m69k.default] {1018e4d6-728f-4b20-ad5637578a4de76b}.xpi
M2 - MFEP: Extension [Morgan et Ségo - 0cc2m69k.default] {d10d0bf8-f5b5-c8b4-a8b22b9879e08c5d}.xpi =>.Adblock Plus Extension Mozilla Firefox
P2 - FPN:Firefox Plugin Navigator . (.Microsoft Corporation - np-mswmp.) -- C:\Program Files
(x86)\Mozilla Firefox\Plugins\np-mswmp.dll
P2 - FPN:Firefox Plugin Navigator . (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape
11.0.13.) -- C:\Program Files (x86)\Mozilla Firefox\Plugins\nppdf32.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.40728.0.) -c:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll
P2 - FPN: [HKCU] [ubisoft.com/uplaypc] - (.Ubisoft - Uplay PC Plugin.) -- C:\Program Files
(x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll
~ Firefox Browser: 11 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page =
http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://g.uk.msn.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs =
http://google.com
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page =
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page =
about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page =
about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.18057
(winblue_ltsb.150915-1629)) -- C:\Windows\SysWOW64\ieframe.dll
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,EnabledV8 = 0
~ IE Browser: 19 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy =
wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (0)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: HP Print Enhancer [64Bits] - {0347C33E-8762-4905-BF09-768834316C61} . (.HewlettPackard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital
Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: PDF Architect 3 Helper [64Bits] - {06E08260-0695-4EC1-A74B-1310D8899D93} . (.pdfforge
GmbH - PDF Architect 3.) -- C:\Program Files (x86)\PDF Architect 3\creator-ie-helper.dll
O2 - BHO: CmjBrowserHelperObject Object [64Bits] - {6FE6A929-59D1-4763-91AD-29B61CFFB35B} .
(.Mindjet - Internet Explorer add-in.) -- C:\Program Files (x86)\Mindjet\MindManager
14\Mm8InternetExplorer.dll
O2 - BHO: Java(tm) Plug-In SSV Helper [64Bits] - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} .
(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files
(x86)\Java\jre1.8.0_40\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} .
(.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common
Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper [64Bits] - {DBC80044-A445-435b-BC74-9C25C1C588A9} .
(.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files
(x86)\Java\jre1.8.0_40\bin\jp2ssv.dll
O2 - BHO: HP Network Check Helper [64Bits] - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} .
(.Hewlett-Packard - HP Network Check IE Plug-in.) -- C:\Program Files (x86)\Hewlett-Packard\HP
Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll
O2 - BHO: HP Smart BHO Class [64Bits] - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} . (.HewlettPackard Co. - HP Smart Web Printing add-on for Internet E.) -- C:\Program Files (x86)\HP\Digital
Imaging\Smart Web Printing\hpswp_BHO.dll
~ BHO: 20 Scanned in 00mn 00s
---\\ Internet Explorer Toolbars (O3)
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Clé
orpheline
~ Toolbar: Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\Desktop [Public]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files
(x86)\Vuze\Azureus.exe =>P2P.Azureus
O4 - GS\Program [Public]: Snapfish.lnk . (...) -- C:\Program Files (x86)\HewlettPackard\Shared\WizLink.exe
O4 - GS\Program [Public]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -- C:\Program Files
(x86)\Vuze\Azureus.exe =>P2P.Azureus
O4 - GS\QuickLaunch [Morgan et Ségo]: Vuze.lnk . (.Azureus Software, Inc - Vuze Launcher.) -C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus
O4 - GS\Desktop [Morgan et Ségo]: TéléchargementVUZE.lnk . (...) -- C:\Users\Morgan et
Ségo\Téléchargements VUZE =>P2P.Azureus
~ Global Startup: 5 Scanned in 00mn 00s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [hpsysdrv] . (.Hewlett-Packard - hpsysdrv.) -- c:\program files (x86)\hewlettpackard\HP odometer\hpsysdrv.exe =>.Hewlett-Packard Co
O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech, Inc. - Logitech Download Assistant.) -C:\Windows\System32\LogiLDA.dll
O4 - HKLM\..\Run: [egui] . (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Smart
Security\egui.exe
O4 - HKCU\..\Run: [Orange Installer] . (...) -- C:\Program Files (x86)\Orange\Orange
Installer\OrangeInstaller.exe
O4 - HKCU\..\Run: [OrangeInside] . (.Orange - Executable Orange Inside.) -- C:\Users\Morgan et
Ségo\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control
Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
=>.Advanced Micro Devices, Inc
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd
Application.) -- c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard
Co
O4 - HKLM\..\Wow6432Node\Run: [amd_dc_opt] . (.AMD - AMD Dual-Core Optimizer.) -- C:\Program
Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
O4 - HKLM\..\Wow6432Node\Run: [MMReminderService] . (.Mindjet - MindManager Topic Alerts.) -C:\Program Files (x86)\Mindjet\MindManager 14\MMReminderService.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-4281688307-3740234833-3217094874-1000\..\Run: [Orange Installer] . (...) -C:\Program Files (x86)\Orange\Orange Installer\OrangeInstaller.exe
O4 - HKUS\S-1-5-21-4281688307-3740234833-3217094874-1000\..\Run: [OrangeInside] . (.Orange Executable Orange Inside.) -- C:\Users\Morgan et
Ségo\AppData\Roaming\Orange\OrangeInside\one\OrangeInside.exe
~ Application: Scanned in 00mn 00s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: @C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll,-102 [64Bits] - {255101845A38-4A99-B273-DCA8EEF6CD08} . (...) -- C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPNetworkCheck\Resources\Icons\HP.ico
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location
Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim
d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de
noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de
noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service
Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID
Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows
Live\WLIDNSP.dll =>.Microsoft Corporation
O10 - WLSP:\000000000008\Winsock LSP File . (.Microsoft Corp. - Microsoft® Windows Live ID
Namespace Provider.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows
Live\WLIDNSP.dll =>.Microsoft Corporation
~ Winsock: 8 Scanned in 00mn 00s
---\\ Site dans la Zone de confiance d'Internet Explorer (O15)
O15 - Trusted Zone: [HKCU\...\Domains] *.localhost
O15 - Trusted Zone: [HKCU\...\Domains] http.webcompanion.com
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{033C26A7-42C4-43B4-9D68-321FEDA2C41B}:
NameServer = 37.59.72.228,108.61.210.58
O17 - HKLM\System\CCS\Services\Tcpip\..\{033C26A7-42C4-43B4-9D68-321FEDA2C41B}:
DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{033C26A7-42C4-43B4-9D68-321FEDA2C41B}:
NameServer = 37.59.72.228,108.61.210.58
DhcpNameServer = 192.168.1.1 192.168.1.1
NameServer = 37.59.72.228,108.61.210.58
DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) -O18 - Filter: text/xml [64Bits] - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft
Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft
Shared\OFFICE12\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) C:\Windows\System32\atiesrxx.exe
O23 - Service: ESET Service (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET Smart
Security\x86\ekrn.exe
O23 - Service: HP Support Assistant Service (HP Support Assistant Service) . (.Hewlett-Packard
Company - HP Support Assistant Service.) - C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\hpsa_service.exe =>.Hewlett-Packard Co
O23 - Service: HP Client Services (HPClientSvc) . (.Hewlett-Packard Company - HP Client Services.) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard
Company - LightScribe Service.) - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel
Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management
Engine Components\LMS\LMS.exe
O23 - Service: (MBAMService) . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
O23 - Service: PnkBstrA (PnkBstrA) . (...) - C:\Windows\SysWOW64\PnkBstrA.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel
Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine
Components\UNS\UNS.exe
~ Services: 11 Scanned in 00mn 02s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.2EED3542F86F77D56569504B37C8108A] [APT] [Adobe Acrobat Update Task] (.Adobe Systems
Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1045720]
[MD5.8C194A201698B4B4F77D974549819D1F] [APT] [Adobe Flash Player Updater] (.Adobe Systems
Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
[269000]
[MD5.AF51D4FE088A3EFA5303B36FFFD0581B] [APT] [HPCeeScheduleForMorgan et S‚go] (.HewlettPackard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [91704]
[MD5.00000000000000000000000000000000] [APT] [Launch HTC Sync Loader] (...) -- C:\Program
Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [LaunchPreSignup] (...) -- C:\Program Files
(x86)\OLBPre\OLBPre.exe (.not file.) [0]
[MD5.24A63F38DF514E6774A850A0710760A4] [APT] [ServicePlan] (...) -- C:\Program Files
(x86)\Hewlett-Packard\HP Setup\RemEngine.exe [38456]
[MD5.00000000000000000000000000000000] [APT] [{287B7070-7DBB-406A-9847-8CD9E23EE3F3}]
(...) -- C:\Users\Morgan et Ségo\Downloads\DAMN_NFO_Viewer_v2-10-0032-RC3.exe (.not file.) [0]
[MD5.A88EC2A33D59251C4FB9508BE4831F38] [APT] [{69526F76-D191-4FEB-82F1-F4F94F0D81C7}]
(.Nicolas Coolman.) -- C:\Users\Morgan et Ségo\Downloads\ZHPDiag2(1).exe [6868593]
[MD5.14DCA74CB34502CA919966F31FBB8B0D] [APT] [{D5138257-2B7C-4E41-AE351EAE7B8CAD30}] (.Mozilla Corporation.) -- c:\program files (x86)\mozilla firefox\firefox.exe
[377000]
[MD5.3E53CC4591B043C8D42FB3D771D55FCE] [APT] [Critical Actions Pending] (.Hewlett-Packard
Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [542008]
[MD5.3E53CC4591B043C8D42FB3D771D55FCE] [APT] [HP Support Assistant Quick Start] (.HewlettPackard Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
[542008]
[MD5.3E53CC4591B043C8D42FB3D771D55FCE] [APT] [PC Health Analysis] (.Hewlett-Packard
Company.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [542008]
[MD5.16F1F09240540D9409DA192839C9D786] [APT] [Update Check] (.Hewlett-Packard Company.) - C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe
[630584]
[MD5.04C5EAE303D6E50B05F059E810E96F23] [APT] [WarrantyChecker_DeviceScan] (.HewlettPackard.) -- C:\Program Files (x86)\Hewlett-Packard\HP Support
Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [969232]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe
Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: - (..) -- C:\Windows\Tasks\HPCeeScheduleForMorgan et Ségo.job [368]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\HPCeeScheduleForMorgan et Ségo [368]
~ Scheduled Task: 32 Scanned in 00mn 01s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} .
(.Microsoft Corporation - Ressources du Lecteur Windows Media.) -C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft
Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Internet Explorer [64Bits] - {2D46B6DC-2207-486B-B523-A557E6D54B47} . (.Microsoft
Corporation - Interpréteur de commandes Windows.) -- C:\Windows\system32\cmd.exe
=>.Microsoft Corporation
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft
Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft
Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} .
(.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -C:\Windows\System32\msieftp.dll
O40 - ASIC: Enable TLS1.1 and 1.2 [64Bits] - {66C64F22-FC60-4E6C-A6B5-F0D580E680CE} . (.Microsoft
Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} .
(.Microsoft Corporation - Ressources du Lecteur Windows Media.) -C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Disable SSL3 [64Bits] - {7D715857-A67C-4C2F-A929-038448584D63} . (.Microsoft
Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -C:\Windows\System32\ie4uinit.exe
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} .
(.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} .
(.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft
Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\system32\mscories.dll
~ Active Setup: 12 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary
Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) C:\Windows\system32\drivers\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) C:\Windows\System32\DRIVERS\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS
Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\System32\drivers\discache.sys (discache) . (.Microsoft Corporation System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (dtsoftbus01) . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) C:\Windows\System32\DRIVERS\dtsoftbus01.sys
O41 - Driver: (eamonm) . (.ESET - Amon monitor.) - C:\Windows\System32\DRIVERS\eamonm.sys
O41 - Driver: (ehdrv) . (.ESET - ESET Helper driver.) - C:\Windows\System32\DRIVERS\ehdrv.sys
O41 - Driver: (EpfwLWF) . (.ESET - Epfw NDIS LightWeight Filter.) C:\Windows\System32\DRIVERS\EpfwLWF.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT
Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI
Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du soussystème de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP
Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\System32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\System32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation
Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote
Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) C:\Windows\System32\DRIVERS\wfplwf.sys
O41 - Driver: Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets
2.0 (ws2ifsl) . (.Microsoft Corporation - Couche IFS Winsock2.) C:\Windows\system32\drivers\ws2ifsl.sys
~ Drivers: 72 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: "FIFA 14" - (...) [HKLM][64Bits] -- {6049054B-DB11-48E1-A583-9A565D5C8856}_is1
O42 - Logiciel: 64 Bit HP CIO Components Installer - (.Hewlett-Packard.) [HKLM][64Bits] -- {FF21C3E697FD-474F-9518-8DCBE94C2854}
O42 - Logiciel: ATI Catalyst Install Manager - (.ATI Technologies, Inc..) [HKLM][64Bits] -- {3001791D2CA6-6FE3-BE0F-8EA7522B32D4}
O42 - Logiciel: ATI Stream SDK v2 Developer - (.ATI Technologies Inc..) [HKLM][64Bits] -- {80C27FE9C6C4-F5C8-EAD3-09E7E0102E78}
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {47FA2C44-D148-4DBCAF60-B91934AA4842}
O42 - Logiciel: Adobe Flash Player 19 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 19 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Reader XI (11.0.13) - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] - {AC76BA86-7AD7-1036-7B44-AB0000000001}
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -{AC76BA86-0804-1033-1959-001824157129}
O42 - Logiciel: Advanced Word 2000 Password Recovery - (...) [HKLM][64Bits] -- Advanced Word 2000
Password Recovery
O42 - Logiciel: Agatha Christie - Peril at End House - (.WildTangent.) [HKLM][64Bits] -- WT089362
=>.WildTangent
O42 - Logiciel: Archiveur WinRAR - (...) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: Batman : Arkham City™ - (.WB Games.) [HKLM][64Bits] -- GFWL_{57520FA0-AC56469B-9983-FF1000008300}
O42 - Logiciel: Batman : Arkham City™ - (.WB Games.) [HKLM][64Bits] -- {57520FA0-A73E-4165-BCA2D71000038301}
O42 - Logiciel: Batman : Arkham City™ - (.WB Games.) [HKLM][64Bits] -- {57520FA0-AC56-469B-9983FF1000008300}
O42 - Logiciel: Batman Arkham Origins Blackgate Deluxe Edition - (...) [HKLM][64Bits] -QmF0bWFuQXJraGFtT3JpZ2luc0JsYWNrZ2F0ZURlbHV4ZUVkaXRpb24=_is1
O42 - Logiciel: Batman: Arkham Asylum - (.Eidos Interactive Limited.) [HKLM][64Bits] -- {4E79A60F15D2-4BEC-91AD-E41EC42E61B0}
O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT089453 =>.WildTangent
O42 - Logiciel: Big Rig Europe - (.WildTangent.) [HKLM][64Bits] -- WT089497 =>.WildTangent
O42 - Logiciel: Bit Che - (.Convivea, Inc..) [HKLM][64Bits] -- {D9DA5C41-964F-455F-B5E73664519440E8}_is1
O42 - Logiciel: Blasterball 3 - (.WildTangent.) [HKLM][64Bits] -- WT089308 =>.WildTangent
O42 - Logiciel: Bounce Symphony - (.WildTangent.) [HKLM][64Bits] -- WT087330 =>.WildTangent
O42 - Logiciel: Cake Mania - (.WildTangent.) [HKLM][64Bits] -- WT089359 =>.WildTangent
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {3D4C2961-3353-4C56B0B8-82AC1923695F}
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT089454 =>.WildTangent
O42 - Logiciel: Cities Skylines - (...) [HKLM][64Bits] -- Cities Skylines_is1
O42 - Logiciel: Cities XXL - (.Focus.) [HKLM][64Bits] -- {3E056E5D-3C4E-4B33-A0D9D5F275D01020}_is1
O42 - Logiciel: Crazy Chicken Kart 2 - (.WildTangent.) [HKLM][64Bits] -- WT089492 =>.WildTangent
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: DAEMON Tools Pro - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Pro
O42 - Logiciel: Deadpool - (.Activision.) [HKLM][64Bits] -- Deadpool_is1
O42 - Logiciel: Diner Dash 2 Restaurant Rescue - (.WildTangent.) [HKLM][64Bits] -- WT087536
=>.WildTangent
O42 - Logiciel: Dragonball Xenoverse - (.Bandai Namco.) [HKLM][64Bits] -- {15408A01-2A1A-43DEBE47-2367DD0E72B7}_is1
O42 - Logiciel: Dual-Core Optimizer - (.AMD.) [HKLM][64Bits] -- {9FD6F1A8-5550-46AF-8509271DF0E768B5}
O42 - Logiciel: ESET Smart Security - (.ESET, spol s r. o..) [HKLM][64Bits] -- {7C4B5814-9E71-44819769-00B8C11D0656}
O42 - Logiciel: EaseUS Partition Master 10.2 Trial Edition - (.EaseUS.) [HKLM][64Bits] -- EaseUS
Partition Master Trial Edition_is1
O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WT087361 =>.WildTangent
O42 - Logiciel: Far Cry 3 - (.Ubisoft.) [HKLM][64Bits] -- {E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}
O42 - Logiciel: Far Cry 4 version 0.1.0 - (.dzrepack.) [HKLM][64Bits] -- Far Cry 4_is1
O42 - Logiciel: Farm Frenzy - (.WildTangent.) [HKLM][64Bits] -- WT089328 =>.WildTangent
O42 - Logiciel: Fishdom - (.WildTangent.) [HKLM][64Bits] -- WT089493 =>.WildTangent
O42 - Logiciel: Game Dev Tycoon v1.5.12 - (.Mythix Games.) [HKLM][64Bits] -- {BA9346EC-F6AC4BD6-BBAE-2058BEC87644}_is1
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games Inc..) [HKLM][64Bits] -- {5454083B-1308-4485BF17-1110000D8301}
O42 - Logiciel: Grand Theft Auto IV - (.Rockstar Games Inc..) [HKLM][64Bits] -- {5454083B-1308-4485BF17-1110000D8302}
O42 - Logiciel: HP Auto - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {CC4D56B7-6F18-470B8734-ABCD75BCF4F1}
O42 - Logiciel: HP Client Services - (.Hewlett-Packard.) [HKLM][64Bits] -- {2856A1C2-70C5-4EC3-AFF7E5B51E5530A2}
O42 - Logiciel: HP Customer Experience Enhancements - (.Hewlett-Packard.) [HKLM][64Bits] -{07FA4960-B038-49EB-891B-9F95930AA544}
O42 - Logiciel: HP Deskjet All-In-One Driver Software 13.0 Rel. 1 - (.HP.) [HKLM][64Bits] -- {EB7738200871-46A8-9B96-F2B04F8B34F0}
O42 - Logiciel: HP Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent hp Master Uninstall
=>.WildTangent
O42 - Logiciel: HP Imaging Device Functions 13.0 - (.HP.) [HKLM][64Bits] -- HP Imaging Device
Functions
O42 - Logiciel: HP Product Detection - (.HP.) [HKLM][64Bits] -- {A436F67F-687E-4736-BD2B537121A804CF}
O42 - Logiciel: HP Setup - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {210A03F5-B2ED-4947B27E-516F50CBB292}
O42 - Logiciel: HP Setup Manager - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {AE856388-AFAD4753-81DF-D96B19D0A17C}
O42 - Logiciel: HP Smart Web Printing 4.51 - (.HP.) [HKLM][64Bits] -- HP Smart Web Printing
O42 - Logiciel: HP Solution Center 13.0 - (.HP.) [HKLM][64Bits] -- HP Solution Center & Imaging
Support Tools
O42 - Logiciel: HP Support Assistant - (.Hewlett-Packard Company.) [HKLM][64Bits] -- {E35A3B1378CD-4967-8AC8-AA9FDA693EDE} =>.Hewlett-Packard Co
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {DE77FE3F-A33D-499A-87AD5FC406617B40}
O42 - Logiciel: HP Vision Hardware Diagnostics - (.Hewlett-Packard.) [HKLM][64Bits] -- {D79A02E96713-4335-9668-AAC7474C0C0E}
O42 - Logiciel: Hewlett-Packard ACLM.NET v1.2.2.3 - (.Hewlett-Packard Company.) [HKLM][64Bits] -{6F340107-F9AA-47C6-B54C-C3A19F11553F}
O42 - Logiciel: HydraVision - (.ATI Technologies Inc..) [HKLM][64Bits] -- {751D221F-7C37-C83F-1973A1F92A0F4DF6}
O42 - Logiciel: ImgBurn - (.LIGHTNING UK!.) [HKLM][64Bits] -- ImgBurn
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -{65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Java 8 Update 40 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA487B4-2F83218040F0}
O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM][64Bits] -- WT087490 =>.WildTangent
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD4B93-8A23-AA9EB2FEFCE4}
O42 - Logiciel: LEGO - The Hobbit - (...) [HKLM][64Bits] -- TEVHT1RoZUhvYmJpdA==_is1
O42 - Logiciel: LEGO Batman 3 - Beyond Gotham DLC Pack - (...) [HKLM][64Bits] -TEVHT0JhdG1hbjNCZXlvbmRHb3RoYW0=_is1
O42 - Logiciel: LEGO MARVEL Super Heroes - (.Warner Bros. Games.) [HKLM][64Bits] -- LEGO MARVEL
Super Heroes_is1
O42 - Logiciel: LEGO Star Wars III The Clone Wars - (.LucasArts.) [HKLM][64Bits] -- LEGO Star Wars III
The Clone Wars
O42 - Logiciel: LEGO® Batman™ - (.Warner Bros. Interactive Entertainment.) [HKLM][64Bits] -InstallShield_{398AB469-77FC-4935-820B-D419388C0A6A}
O42 - Logiciel: LEGO® Batman™ 2: DC Super Heroes - (.Warner Bros. Interactive Entertainment.)
[HKLM][64Bits] -- {4E2EA555-3DAE-4BE1-96BF-6A632ACFE8DE}
O42 - Logiciel: LEGO® Harry Potter™: Années 5 à 7 - (.WB Games.) [HKLM][64Bits] -- {5C5A944F-096E4ADD-B8E8-887F18BA6228}
O42 - Logiciel: LEGO® Pirates des Caraïbes Le Jeu Vidéo - (.Disney Interactive Studios.) [HKLM][64Bits]
-- {64958DA4-79D3-43FD-AF06-720DAD044F9E}
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{C59C179C-668D-49A9B6EA-0121CCFC1243}
O42 - Logiciel: LabelPrint - (.CyberLink Corp..) [HKLM][64Bits] -- {C59C179C-668D-49A9-B6EA0121CCFC1243}
O42 - Logiciel: LightScribe System Software - (.LightScribe.) [HKLM][64Bits] -- {E0E55FC1-C53D-4F8DB14B-B59C312747C8}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6587A14BD9BD9}
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD824D-4B8E-BD72-8C5DCDC52A71}
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6F4DC-41A2-901E-8C11F044BDEC}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2721691) - (.Microsoft Corporation.) [HKLM][64Bits] -{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}
O42 - Logiciel: MSXML 4.0 SP3 Parser (KB2758694) - (.Microsoft Corporation.) [HKLM][64Bits] -{1D95BA90-F4F8-47EC-A882-441C99D30C1E}
O42 - Logiciel: MSXML 4.0 SP3 Parser - (.Microsoft Corporation.) [HKLM][64Bits] -- {196467F1-C11F4F76-858B-5812ADC83B94}
O42 - Logiciel: Magic Desktop - (.EasyBits Software AS.) [HKLM][64Bits] -- EasyBits Magic Desktop
=>.EasyBits Software AS
O42 - Logiciel: Mah Jong Medley - (.WildTangent.) [HKLM][64Bits] -- WT087393 =>.WildTangent
O42 - Logiciel: Malwarebytes Anti-Malware version 2.1.8.1057 - (.Malwarebytes Corporation.)
[HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Mes créations photo myPIX.com - (.CEWE COLOR AG u Co. OHG.) [HKLM][64Bits] -Mes créations photo myPIX.com
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-48108F2D-D047E6B7D68E}
O42 - Logiciel: Micro Application - Architecte 3DHD Expert Cad - (...) [HKLM][64Bits] -- {2C7FB3E3A653-48A0-B290-885659E6ED5C}
O42 - Logiciel: Microsoft Games for Windows - LIVE Redistributable - (.Microsoft Corporation.)
[HKLM][64Bits] -- {832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}
O42 - Logiciel: Microsoft Games for Windows Marketplace - (.Microsoft Corporation.) [HKLM][64Bits]
-- {4CB0307C-565E-4441-86BE-0DF2E4FB828C}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C264A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Xbox 360 Accessories 1.2 - (.Microsoft.) [HKLM][64Bits] -- {45CD67FD-32184207-A0A2-BC41245189E3}
O42 - Logiciel: Mindjet 14 - (.Mindjet.) [HKLM][64Bits] -- {C8C60C45-CE6C-4344-B32D38690A02B311}
O42 - Logiciel: Mozilla Firefox 41.0.2 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 41.0.2 (x86
fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: MusicStation - (.Hewlett-Packard.) [HKLM][64Bits] -- MusicStationNetstaller
O42 - Logiciel: Mystery P.I. - The London Caper - (.WildTangent.) [HKLM][64Bits] -- WT089460
=>.WildTangent
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {7B5AA67E-FEA0-40BB-BAB5CA56645A589C}
O42 - Logiciel: Namco All-Stars PAC-MAN - (.WildTangent.) [HKLM][64Bits] -- WT089484
=>.WildTangent
O42 - Logiciel: Next Generation Visualisations - (. Microsoft.) [HKLM][64Bits] -- {2E376AD9-5C494F7D-A0BA-6A44E8FA5A3B}
O42 - Logiciel: OpenAL - (...) [HKLM][64Bits] -- OpenAL
O42 - Logiciel: Orange Inside - (.Orange.) [HKCU][64Bits] -- Orange Inside
O42 - Logiciel: Orange Installer - (.Orange.) [HKLM][64Bits] -- Orange Installer
O42 - Logiciel: PDF Architect 3 - (.pdfforge GmbH.) [HKLM][64Bits] -- PDF Architect 3
O42 - Logiciel: PDF Architect 3 Create Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {38BA288BC4F4-4C62-9237-4BFAB374F966}
O42 - Logiciel: PDF Architect 3 Edit Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {5183F03D-90FA493B-A074-F0F78B8486AD}
O42 - Logiciel: PDF Architect 3 View Module - (.pdfforge GmbH.) [HKLM][64Bits] -- {EB24E9E7-4BC14FD7-BF86-BDE07A7A03D7}
O42 - Logiciel: PDF-XChange 2012 - (.Tracker Software Products Ltd.) [HKLM][64Bits] -- {504022CD6A58-42D5-ACC9-966F695AAD93}_is1
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM][64Bits] -- {0001B4FD-9EA3-4D90-A79EFD14BA3AB01D}
O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WT087394 =>.WildTangent
O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WT089458
=>.WildTangent
O42 - Logiciel: PlayReady PC Runtime amd64 - (.Microsoft Corporation.) [HKLM][64Bits] -{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WT087396 =>.WildTangent
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{40BF1E83-20EB-11D897C5-0009C5020658}
O42 - Logiciel: Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF1E83-20EB-11D8-97C50009C5020658}
O42 - Logiciel: PressReader - (. NewspaperDirect Inc..) [HKLM][64Bits] -- {912CED74-88D3-4C5BACB0-132318649765}
O42 - Logiciel: PunkBuster Services - (.Even Balance, Inc..) [HKLM][64Bits] -- PunkBusterSvc
O42 - Logiciel: Rapture3D 2.4.8 Game - (.Blue Ripple Sound.) [HKLM][64Bits] -- {D2FCA41E-AC014DCD-B3A7-DC9E32363065}}_is1
O42 - Logiciel: Rayman Origins - (...) [HKLM][64Bits] -- Rayman Origins_is1
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits]
-- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Recovery Manager - (.CyberLink Corp..) [HKLM][64Bits] -- {44B2A0AB-412E-4F8C-B058D1E8AECCDFF5}
O42 - Logiciel: Revo Uninstaller Pro 3.0.8 - (.VS Revo Group, Ltd..) [HKLM][64Bits] -- {67579783-0FB74F7B-B881-E5BE47C9DBE0}_is1
O42 - Logiciel: SAMSUNG USB Driver for Mobile Phones - (.SAMSUNG Electronics Co., Ltd..)
[HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}
O42 - Logiciel: Skype™ 7.3 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD9CC8-5EC50AECF6B7}
O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT087510 =>.WildTangent
O42 - Logiciel: SpywareBlaster 5.0 - (.BrightFort LLC.) [HKLM][64Bits] -- SpywareBlaster_is1
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- {048298C9-A4D3-490B-9FF9AB023A9238F3}
O42 - Logiciel: The LEGO Movie - Videogame - (.Warner Bros. Interactive Entertainment.)
[HKLM][64Bits] -- The LEGO Movie - Videogame_is1
O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM][64Bits] -- {7A2BB1C8-903D-45859F3B-CADD67D07D37}
O42 - Logiciel: TomTom HOME - (.Nom de votre société.) [HKLM][64Bits] -- {BB05590A-6602-43F3A400-77EA0976BC0A}
O42 - Logiciel: TomTom HOME Visual Studio Merge Modules - (.TomTom International B.V..)
[HKLM][64Bits] -- {8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}
O42 - Logiciel: Total Video Converter 3.71 100812 - (.EffectMatrix Inc..) [HKLM][64Bits] -- Total Video
Converter 3.71_is1
O42 - Logiciel: Tropico 5 - (...) [HKLM][64Bits] -- Tropico 5_is1
O42 - Logiciel: Ubisoft Game Launcher - (.UBISOFT.) [HKLM][64Bits] -- {888F1505-C2B3-4FDE-835D36353EBD4754}
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent
O42 - Logiciel: Uplay - (.Ubisoft.) [HKLM][64Bits] -- Uplay
O42 - Logiciel: VDownloader 4.1.1403.0 - (.Vitzo Limited.) [HKLM][64Bits] -- {A7E19604-93AF-46118C9F-CE509C2B286E}_is1
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Virtual Villagers - The Secret City - (.WildTangent.) [HKLM][64Bits] -- WT087513
=>.WildTangent
O42 - Logiciel: VirtualDJ PRO Full - (.Atomix Productions.) [HKLM][64Bits] -- {4769E972-2E92-49C5B6F9-465EFD0C4D94}
O42 - Logiciel: Vuze - (.Azureus Software, Inc..) [HKLM][64Bits] -- 8461-7759-5462-8226
=>P2P.Azureus
O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WT087519 =>.WildTangent
O42 - Logiciel: WildTangent Games App (HP Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp =>.WildTangent
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM][64Bits] -{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} =>.Microsoft Corporation
O42 - Logiciel: Wondershare Photo Recovery(build 2.0.2) - (.Wondershare Software.) [HKLM][64Bits]
-- Wondershare Photo Recovery_is1
O42 - Logiciel: Zinio Reader 4 - (.Zinio LLC.) [HKLM][64Bits] -ZinioReader4.9310D8F796442B71068C511E15D70529A702D19D.1
O42 - Logiciel: Zinio Reader 4 - (.Zinio LLC.) [HKLM][64Bits] -- {465210C4-595A-BD80-44E8E0457D9D8432}
O42 - Logiciel: Zuma Deluxe - (.WildTangent.) [HKLM][64Bits] -- WT089455 =>.WildTangent
O42 - Logiciel: Zuma's Revenge! - (.AllSmartGames.) [HKLM][64Bits] -- Zuma's Revenge!1.0
O42 - Logiciel: msvcrt_installer - (.SAH.) [HKLM][64Bits] -- {6068A42A-C1CF-45F2-98595DB16287FE5D}
~ Logic: 103 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\ATI]
[HKCU\Software\Activision]
[HKCU\Software\Adobe]
[HKCU\Software\AppDataLow\Software\JavaSoft]
[HKCU\Software\AppDataLow]
[HKCU\Software\Azureus] =>P2P.Azureus
[HKCU\Software\BVRP Software]
[HKCU\Software\Blizzard Entertainment]
[HKCU\Software\BlueRippleSound]
[HKCU\Software\CeWe Color]
[HKCU\Software\Cheat Engine]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Colossal Order]
[HKCU\Software\CyberLink]
[HKCU\Software\Cygnus Solutions]
[HKCU\Software\DAMN]
[HKCU\Software\DC2_USERS]
[HKCU\Software\DSS]
[HKCU\Software\DT Soft]
[HKCU\Software\Disney Interactive Studios]
[HKCU\Software\EMU]
[HKCU\Software\ESET]
[HKCU\Software\EaseUS]
[HKCU\Software\EasyBits]
[HKCU\Software\FLT]
[HKCU\Software\GRE]
[HKCU\Software\HP]
[HKCU\Software\Haemimont Games]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\ImgBurn]
[HKCU\Software\JavaSoft]
[HKCU\Software\Leadertech]
[HKCU\Software\Licenses]
[HKCU\Software\LightScribe]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\LogiShrd]
[HKCU\Software\LucasArts]
[HKCU\Software\MDO]
[HKCU\Software\Macromedia]
[HKCU\Software\Magnet]
[HKCU\Software\Malwarebytes' Anti-Malware]
[HKCU\Software\Micro Application]
[HKCU\Software\Mindjet]
[HKCU\Software\Mirage]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\OrangeInside]
[HKCU\Software\Orange]
[HKCU\Software\PDF Architect 3]
[HKCU\Software\PDFCreator.net]
[HKCU\Software\Policies]
[HKCU\Software\PopCap]
[HKCU\Software\Razer]
[HKCU\Software\Realtek]
[HKCU\Software\SWiSHzone.com]
[HKCU\Software\Safe Browser]
[HKCU\Software\Safer Networking Limited]
[HKCU\Software\SecuROM]
[HKCU\Software\Skype]
[HKCU\Software\SpinTop]
[HKCU\Software\THEGFW]
[HKCU\Software\The Silicon Realms Toolworks]
[HKCU\Software\Tracker Software]
[HKCU\Software\Trolltech]
[HKCU\Software\Ubisoft]
[HKCU\Software\VS Revo Group]
[HKCU\Software\Valve]
[HKCU\Software\VirtualDJ]
[HKCU\Software\WB Games]
[HKCU\Software\Warner Bros. Interactive Entertainment]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKCU\Software\ej-technologies]
[HKCU\Software\mb Software AG]
[HKCU\Software\tvp]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\ATI]
[HKLM\Software\CBSTEST]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\Cyberlink]
[HKLM\Software\ESET]
[HKLM\Software\Hewlett-Packard]
[HKLM\Software\ICE]
[HKLM\Software\IM Providers]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Logishrd]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\PDF Tools AG]
[HKLM\Software\PDFCreator.net]
[HKLM\Software\Policies]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SAMSUNG]
[HKLM\Software\SRS Labs]
[HKLM\Software\Sonic]
[HKLM\Software\Tracker Software]
[HKLM\Software\VDownloader]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\AMD]
[HKLM\Software\Wow6432Node\ATI Technologies]
[HKLM\Software\Wow6432Node\ATI]
[HKLM\Software\Wow6432Node\Activision]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Azureus] =>P2P.Azureus
[HKLM\Software\Wow6432Node\BlueRippleSound]
[HKLM\Software\Wow6432Node\Bunndle]
[HKLM\Software\Wow6432Node\C07ft5Y]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Cygnus Solutions]
[HKLM\Software\Wow6432Node\DAMN]
[HKLM\Software\Wow6432Node\DT Soft]
[HKLM\Software\Wow6432Node\Disney Interactive Studios]
[HKLM\Software\Wow6432Node\EA Sports]
[HKLM\Software\Wow6432Node\EASEUS]
[HKLM\Software\Wow6432Node\ESET]
[HKLM\Software\Wow6432Node\EasyBits]
[HKLM\Software\Wow6432Node\Eidos Interactive Limited]
[HKLM\Software\Wow6432Node\Electronic Arts]
[HKLM\Software\Wow6432Node\Even Balance]
[HKLM\Software\Wow6432Node\FlexCell Studio]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HPS]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\JavaSoft]
[HKLM\Software\Wow6432Node\JreMetrics]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Lavasoft]
[HKLM\Software\Wow6432Node\Licenses]
[HKLM\Software\Wow6432Node\LightScribe]
[HKLM\Software\Wow6432Node\LogMeInRescueCallingCard]
[HKLM\Software\Wow6432Node\LucasArts]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware (Trial)]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\Maxis]
[HKLM\Software\Wow6432Node\Micro Application]
[HKLM\Software\Wow6432Node\Mindjet]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NAVIGON]
[HKLM\Software\Wow6432Node\NVIDIA Corporation]
[HKLM\Software\Wow6432Node\NewspaperDirect]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Origin Games]
[HKLM\Software\Wow6432Node\PDF Architect 2]
[HKLM\Software\Wow6432Node\PDFCreator]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Rockstar Games]
[HKLM\Software\Wow6432Node\RocksteadyLtd]
[HKLM\Software\Wow6432Node\Safer Networking Limited]
[HKLM\Software\Wow6432Node\Sega]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\Software FX, Inc.]
[HKLM\Software\Wow6432Node\Sports Interactive Ltd]
[HKLM\Software\Wow6432Node\SpywareBlaster]
[HKLM\Software\Wow6432Node\Symantec]
[HKLM\Software\Wow6432Node\Ubisoft]
[HKLM\Software\Wow6432Node\Valve]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\VirtualDJ]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\WB Games]
[HKLM\Software\Wow6432Node\Warner Bros Interactive Entertainment]
[HKLM\Software\Wow6432Node\Warner Bros. Interactive Entertainment]
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\Win32 Services]
[HKLM\Software\Wow6432Node\Windows]
[HKLM\Software\Wow6432Node\Wondershare]
[HKLM\Software\Wow6432Node\ej-technologies]
[HKLM\Software\Wow6432Node\iTinySoft]
[HKLM\Software\Wow6432Node\magnet]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node\webtogo]
[HKLM\Software\Wow6432Node]
~ Key Software: 457 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 30/12/2012 - 19:23:39 - [0] ----D C:\Program Files (x86)\Activision
O43 - CFD: 01/11/2014 - 10:47:59 - [] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 26/10/2013 - 09:13:55 - [0] ----D C:\Program Files (x86)\AGEIA Technologies
O43 - CFD: 31/01/2012 - 10:18:08 - [] ----D C:\Program Files (x86)\AMD
O43 - CFD: 23/07/2011 - 13:26:32 - [] ----D C:\Program Files (x86)\ATI Stream
O43 - CFD: 23/07/2011 - 13:26:32 - [] ----D C:\Program Files (x86)\ATI Technologies
O43 - CFD: 13/11/2013 - 01:32:31 - [] ----D C:\Program Files (x86)\aw2000pr
O43 - CFD: 02/04/2014 - 16:57:21 - [] ----D C:\Program Files (x86)\Batman Arkham Origins Blackgate
Deluxe Edition
O43 - CFD: 09/10/2013 - 21:04:55 - [0] ----D C:\Program Files (x86)\Bethesda Softworks
O43 - CFD: 01/05/2012 - 13:05:35 - [] ----D C:\Program Files (x86)\Bit Che
O43 - CFD: 15/11/2011 - 20:46:58 - [] ----D C:\Program Files (x86)\BRS
O43 - CFD: 20/03/2014 - 19:52:41 - [0] ----D C:\Program Files (x86)\Capcom
O43 - CFD: 18/06/2015 - 18:49:10 - [] ----D C:\Program Files (x86)\Cities Skylines
O43 - CFD: 25/05/2015 - 19:00:55 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 23/07/2011 - 13:31:10 - [] ----D C:\Program Files (x86)\Cyberlink
O43 - CFD: 05/05/2012 - 17:23:49 - [] ----D C:\Program Files (x86)\DAEMON Tools Pro
O43 - CFD: 12/11/2011 - 17:44:06 - [] ----D C:\Program Files (x86)\DAMN NFO Viewer
O43 - CFD: 29/06/2013 - 13:35:27 - [] ----D C:\Program Files (x86)\Deadpool
O43 - CFD: 21/07/2013 - 16:22:43 - [] ----D C:\Program Files (x86)\Disney Interactive Studios
O43 - CFD: 16/11/2014 - 11:59:05 - [] ----D C:\Program Files (x86)\dzrepack
O43 - CFD: 18/03/2015 - 17:14:08 - [] ----D C:\Program Files (x86)\EaseUS
O43 - CFD: 13/02/2013 - 19:09:47 - [] ----D C:\Program Files (x86)\EasyBits For Kids
O43 - CFD: 01/01/2013 - 12:14:34 - [] ----D C:\Program Files (x86)\Eidos
O43 - CFD: 31/01/2012 - 12:53:16 - [0] ----D C:\Program Files (x86)\ESET
O43 - CFD: 08/02/2015 - 09:43:34 - [0] ----D C:\Program Files (x86)\Focus Home Interactive
O43 - CFD: 18/01/2014 - 20:57:38 - [] ----D C:\Program Files (x86)\Hewlett-Packard
O43 - CFD: 11/01/2015 - 10:30:07 - [0] ----D C:\Program Files (x86)\Hobbyist Software
O43 - CFD: 15/11/2011 - 19:04:58 - [] ----D C:\Program Files (x86)\Hp
O43 - CFD: 23/07/2011 - 13:36:25 - [] ----D C:\Program Files (x86)\HP Games
O43 - CFD: 01/05/2012 - 12:14:12 - [] ----D C:\Program Files (x86)\ImgBurn
O43 - CFD: 18/01/2014 - 21:02:05 - [] --H-D C:\Program Files (x86)\InstallShield Installation
Information
O43 - CFD: 23/07/2011 - 13:25:57 - [] ----D C:\Program Files (x86)\Intel
O43 - CFD: 14/10/2015 - 03:26:35 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 14/03/2015 - 08:39:48 - [] ----D C:\Program Files (x86)\Java
O43 - CFD: 30/12/2012 - 19:30:57 - [0] ----D C:\Program Files (x86)\Kalypso Media
O43 - CFD: 15/08/2015 - 11:04:25 - [] ----D C:\Program Files (x86)\Lavasoft
O43 - CFD: 10/04/2014 - 17:20:58 - [] ----D C:\Program Files (x86)\LEGO - The Hobbit
O43 - CFD: 19/11/2014 - 23:23:03 - [] ----D C:\Program Files (x86)\LEGO Batman 3 - Beyond Gotham
O43 - CFD: 24/10/2013 - 17:39:11 - [] ----D C:\Program Files (x86)\LEGO MARVEL Super Heroes
O43 - CFD: 01/09/2013 - 21:07:51 - [] ----D C:\Program Files (x86)\LucasArts
O43 - CFD: 23/07/2015 - 21:35:53 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 11/01/2015 - 10:10:29 - [0] ----D C:\Program Files (x86)\Malwarebytes' Anti-Malware
O43 - CFD: 23/09/2012 - 18:11:24 - [] ----D C:\Program Files (x86)\Micro Application
O43 - CFD: 11/11/2011 - 17:48:51 - [0] ----D C:\Program Files (x86)\Microsoft
O43 - CFD: 15/11/2011 - 20:47:47 - [] ----D C:\Program Files (x86)\Microsoft Games for Windows LIVE
O43 - CFD: 11/11/2011 - 19:09:25 - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 12/08/2015 - 03:33:21 - [] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 23/07/2011 - 13:39:53 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact
Edition
O43 - CFD: 11/11/2011 - 01:34:45 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 11/11/2011 - 01:32:50 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 11/11/2011 - 11:36:44 - [] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 11/11/2011 - 01:34:35 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 04/11/2013 - 17:54:52 - [0] ----D C:\Program Files (x86)\MILESTONE
O43 - CFD: 14/12/2014 - 21:59:38 - [] ----D C:\Program Files (x86)\Mindjet
O43 - CFD: 17/10/2015 - 12:35:09 - [] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 22/10/2015 - 19:58:18 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 11/11/2011 - 01:34:47 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 29/10/2012 - 22:08:53 - [] ----D C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 27/05/2013 - 22:40:33 - [] ----D C:\Program Files (x86)\myPIX
O43 - CFD: 15/12/2014 - 15:26:38 - [] ----D C:\Program Files (x86)\Mythix Games
O43 - CFD: 23/07/2011 - 13:37:34 - [] ----D C:\Program Files (x86)\NewspaperDirect
O43 - CFD: 26/10/2013 - 09:13:55 - [] ----D C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 10/11/2011 - 20:02:21 - [] R---D C:\Program Files (x86)\Online Services
O43 - CFD: 15/11/2011 - 20:46:49 - [] ----D C:\Program Files (x86)\OpenAL
O43 - CFD: 25/04/2014 - 22:38:42 - [] ----D C:\Program Files (x86)\Orange
O43 - CFD: 09/08/2015 - 12:58:20 - [] ----D C:\Program Files (x86)\PDF Architect 3
O43 - CFD: 09/08/2015 - 12:25:10 - [] ----D C:\Program Files (x86)\PDFCreator
O43 - CFD: 05/04/2014 - 14:21:00 - [0] ----D C:\Program Files (x86)\R.G. Mechanics
O43 - CFD: 23/07/2011 - 13:24:59 - [] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 25/05/2015 - 19:00:55 - [] R---D C:\Program Files (x86)\Skype
O43 - CFD: 06/12/2014 - 17:34:26 - [0] ----D C:\Program Files (x86)\Sony Ericsson
O43 - CFD: 23/07/2015 - 23:12:23 - [] ----D C:\Program Files (x86)\SpywareBlaster
O43 - CFD: 02/01/2014 - 01:42:38 - [] ----D C:\Program Files (x86)\Steam
O43 - CFD: 23/07/2011 - 13:25:18 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 06/12/2014 - 21:11:10 - [] ----D C:\Program Files (x86)\The LEGO Movie - Videogame
O43 - CFD: 28/04/2015 - 19:33:40 - [] ----D C:\Program Files (x86)\TomTom HOME 2
O43 - CFD: 31/07/2014 - 19:44:30 - [] ----D C:\Program Files (x86)\TomTom International B.V
O43 - CFD: 06/04/2013 - 08:30:23 - [] ----D C:\Program Files (x86)\Total Video Converter
O43 - CFD: 24/05/2014 - 07:42:38 - [] ----D C:\Program Files (x86)\Tropico 5
O43 - CFD: 14/05/2013 - 20:40:11 - [] ----D C:\Program Files (x86)\Ubisoft
O43 - CFD: 14/07/2009 - 06:57:06 - [0] --H-D C:\Program Files (x86)\Uninstall Information
O43 - CFD: 11/11/2011 - 17:26:13 - [] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 12/11/2011 - 14:39:27 - [] ----D C:\Program Files (x86)\VirtualDJ
O43 - CFD: 10/08/2015 - 08:16:35 - [] ----D C:\Program Files (x86)\Vuze =>P2P.Azureus
O43 - CFD: 18/03/2013 - 18:59:56 - [] ----D C:\Program Files (x86)\Warner Bros. Interactive
Entertainment
O43 - CFD: 30/12/2012 - 11:17:07 - [] ----D C:\Program Files (x86)\WB Games
O43 - CFD: 24/03/2013 - 12:35:08 - [] ----D C:\Program Files (x86)\WildTangent Games
O43 - CFD: 10/07/2013 - 03:28:44 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 23/07/2011 - 13:40:12 - [] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 11/11/2011 - 01:36:34 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft
Corporation
O43 - CFD: 10/06/2015 - 03:24:31 - [] ----D C:\Program Files (x86)\Windows Media Player
=>.Microsoft Corporation
O43 - CFD: 14/07/2009 - 07:32:38 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 11/11/2011 - 01:36:34 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2010 - 05:31:38 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 11/11/2011 - 01:36:34 - [] ----D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 11/11/2011 - 01:24:00 - [] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 06/12/2014 - 17:13:03 - [] ----D C:\Program Files (x86)\Wondershare
O43 - CFD: 11/01/2015 - 11:45:59 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 23/07/2011 - 13:37:31 - [] ----D C:\Program Files (x86)\Zinio Reader 4
O43 - CFD: 05/04/2014 - 10:22:20 - [] ----D C:\Program Files (x86)\Zuma's Revenge!
O43 - CFD: 01/11/2014 - 10:48:26 - [] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 29/10/2012 - 22:31:34 - [] ----D C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 13/11/2011 - 10:10:16 - [] ----D C:\Program Files (x86)\Common Files\Blizzard
Entertainment
O43 - CFD: 15/05/2014 - 03:05:59 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 01/09/2013 - 16:06:02 - [0] --H-D C:\Program Files (x86)\Common Files\EAInstaller
O43 - CFD: 15/11/2011 - 19:04:25 - [] ----D C:\Program Files (x86)\Common Files\Hewlett-Packard
O43 - CFD: 15/11/2011 - 19:04:26 - [] ----D C:\Program Files (x86)\Common Files\HP
O43 - CFD: 22/09/2012 - 09:50:11 - [] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 14/03/2015 - 08:37:53 - [] ----D C:\Program Files (x86)\Common Files\Java
O43 - CFD: 13/01/2012 - 18:59:54 - [] ----D C:\Program Files (x86)\Common Files\LightScribe
O43 - CFD: 11/11/2011 - 19:08:10 - [] ----D C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 01/05/2012 - 12:44:13 - [] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 23/07/2011 - 13:25:58 - [] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 25/05/2015 - 19:00:55 - [] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 14/07/2009 - 05:20:08 - [] ----D C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 14/03/2013 - 04:22:59 - [] ----D C:\Program Files (x86)\Common Files\Steam
O43 - CFD: 12/07/2012 - 03:04:36 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 23/07/2011 - 13:38:57 - [] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 18/06/2015 - 18:49:10 - [] ----D C:\ProgramData\.mono
O43 - CFD: 01/11/2014 - 10:47:59 - [] ----D C:\ProgramData\Adobe
O43 - CFD: 10/01/2012 - 13:31:39 - [] ----D C:\ProgramData\animationEngine
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 23/07/2011 - 13:27:33 - [] ----D C:\ProgramData\ATI
O43 - CFD: 12/11/2011 - 22:23:39 - [] ----D C:\ProgramData\Blizzard Entertainment
O43 - CFD: 06/09/2015 - 19:44:36 - [] ----D C:\ProgramData\BlueStacksSetup
O43 - CFD: 08/05/2012 - 17:46:34 - [] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 02/04/2014 - 19:10:43 - [] ----D C:\ProgramData\Caphyon
O43 - CFD: 17/10/2014 - 14:58:06 - [] ----D C:\ProgramData\Codemasters
O43 - CFD: 05/05/2012 - 17:37:27 - [] ----D C:\ProgramData\CyberLink
O43 - CFD: 11/11/2011 - 01:27:53 - [] ----D C:\ProgramData\DAEMON Tools Lite =>.DT Soft Ltd
O43 - CFD: 05/05/2012 - 17:20:39 - [] ----D C:\ProgramData\DAEMON Tools Pro
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 15/11/2011 - 20:59:26 - [] -SH-D C:\ProgramData\DSS
O43 - CFD: 24/11/2011 - 00:21:57 - [] ----D C:\ProgramData\EA Core
O43 - CFD: 21/12/2013 - 13:55:07 - [] ----D C:\ProgramData\Electronic Arts
O43 - CFD: 04/08/2015 - 14:44:33 - [] ----D C:\ProgramData\ESET
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Favorites
O43 - CFD: 18/01/2014 - 20:54:56 - [] ----D C:\ProgramData\Hewlett-Packard
O43 - CFD: 16/04/2013 - 10:26:49 - [] ----D C:\ProgramData\HP
O43 - CFD: 15/11/2011 - 19:05:07 - [] ----D C:\ProgramData\HP Product Assistant
O43 - CFD: 24/06/2013 - 17:13:27 - [] ----D C:\ProgramData\hps
O43 - CFD: 23/07/2011 - 13:25:57 - [] ----D C:\ProgramData\intel
O43 - CFD: 19/06/2013 - 22:08:33 - [] ----D C:\ProgramData\Licenses
O43 - CFD: 15/01/2012 - 16:29:18 - [] ----D C:\ProgramData\LightScribe
O43 - CFD: 11/01/2015 - 10:10:29 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 07/08/2015 - 11:54:56 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 14/10/2015 - 03:07:04 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 14/12/2014 - 22:00:09 - [] ----D C:\ProgramData\Mindjet
O43 - CFD: 06/05/2012 - 10:31:13 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 01/05/2012 - 12:44:56 - [0] ----D C:\ProgramData\Nero
O43 - CFD: 11/11/2011 - 17:55:45 - [] ----D C:\ProgramData\Norton
O43 - CFD: 23/07/2011 - 13:40:53 - [] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 14/03/2015 - 08:39:59 - [] ----D C:\ProgramData\Oracle
O43 - CFD: 31/05/2014 - 08:21:08 - [] ----D C:\ProgramData\Orbit
O43 - CFD: 08/02/2015 - 09:56:47 - [] ----D C:\ProgramData\Package Cache
O43 - CFD: 09/08/2015 - 12:54:48 - [] ----D C:\ProgramData\PDF Architect 3
O43 - CFD: 31/08/2012 - 21:37:52 - [0] ----D C:\ProgramData\PDFC
O43 - CFD: 28/05/2015 - 05:02:33 - [] ----D C:\ProgramData\Recovery
O43 - CFD: 15/05/2012 - 20:55:41 - [] ----D C:\ProgramData\RELOADED
O43 - CFD: 27/12/2013 - 12:37:34 - [] ----D C:\ProgramData\Samsung
O43 - CFD: 02/01/2012 - 23:01:54 - [] -SH-D C:\ProgramData\SecuROM
O43 - CFD: 25/05/2015 - 19:00:42 - [] ----D C:\ProgramData\Skype
O43 - CFD: 05/04/2014 - 10:22:38 - [] ----D C:\ProgramData\SpinTop Games
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 05/10/2013 - 17:15:19 - [] ----D C:\ProgramData\Steam
O43 - CFD: 11/11/2011 - 01:12:57 - [] ----D C:\ProgramData\Sun
O43 - CFD: 23/07/2015 - 23:12:33 - [] ---AD C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - 07:08:56 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 01/06/2013 - 09:53:14 - [] ----D C:\ProgramData\tmp
O43 - CFD: 31/07/2014 - 19:46:17 - [] ----D C:\ProgramData\TomTom
O43 - CFD: 31/01/2012 - 09:47:31 - [0] ----D C:\ProgramData\Ubisoft
O43 - CFD: 01/09/2013 - 15:55:49 - [] ----D C:\ProgramData\VS Revo Group
O43 - CFD: 15/11/2011 - 19:10:14 - [] ----D C:\ProgramData\WEBREG
O43 - CFD: 24/12/2012 - 15:44:13 - [] ----D C:\ProgramData\WildTangent
O43 - CFD: 18/01/2014 - 20:56:00 - [] ----D C:\ProgramData\{18165758-115C-4DC0-9EC2FF89F725767F}
O43 - CFD: 12/12/2014 - 09:11:16 - [] R---D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Accessories
Menu\Programs\Administrative Tools
O43 - CFD: 12/07/2012 - 14:42:48 - [] ----D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Advanced Word 2000 Password Recovery
Menu\Programs\ATI Stream SDK v2
Menu\Programs\Bit Che
O43 - CFD: 26/12/2013 - 23:57:11 - [0] ----D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\BitTorrent =>P2P.BitTorrent
Menu\Programs\Blue Ripple Sound
Menu\Programs\Catalyst Control Center
Menu\Programs\Cities Skylines
Menu\Programs\Deadpool
Menu\Programs\dzrepack
Menu\Programs\EaseUS Partition Master 10.2
Menu\Programs\Eidos
Menu\Programs\eReaders
Menu\Programs\ESET
Menu\Programs\FIFA 14
Menu\Programs\Game Dev Tycoon
Menu\Programs\Games
Menu\Programs\HP
Menu\Programs\HP Help and Support
Menu\Programs\HP Manuels de l'utilisateur
Menu\Programs\ImgBurn
Menu\Programs\Java
O43 - CFD: 17/08/2015 - 09:02:29 - [0] ----D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Lavasoft
Menu\Programs\LEGO MARVEL Super Heroes
Menu\Programs\LightScribe Direct Disc Labeling
Menu\Programs\LucasArts
Menu\Programs\Maintenance
Menu\Programs\Malwarebytes Anti-Malware
Menu\Programs\Mephisto
Menu\Programs\Mes créations photo myPIX.com
Menu\Programs\Micro Application
Menu\Programs\Microsoft Games for Windows Marketplace
Menu\Programs\Microsoft Office
Menu\Programs\Microsoft Silverlight
Menu\Programs\Microsoft Xbox 360 Accessories
Menu\Programs\Mindjet 14
Menu\Programs\Online Services
O43 - CFD: 23/07/2011 - 13:28:37 - [] -S--D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\PC Help & Tools
Menu\Programs\PDF Architect 3
Menu\Programs\PDFCreator
Menu\Programs\Recovery Manager
Menu\Programs\Revo Uninstaller Pro
Menu\Programs\Skype
Menu\Programs\SpywareBlaster
Menu\Programs\Startup
Menu\Programs\Steam
O43 - CFD: 21/11/2010 - 09:16:41 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start
Menu\Programs\Tablet PC
Menu\Programs\The LEGO Movie - Videogame
Menu\Programs\TomTom
Menu\Programs\Total Video Converter
Menu\Programs\Tropico 5
Menu\Programs\Ubisoft
Menu\Programs\VDownloader
Menu\Programs\VideoLAN
Menu\Programs\Windows Live
Menu\Programs\WinRAR
Menu\Programs\Wondershare
Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 18/06/2015 - 18:49:10 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\.mono
O43 - CFD: 29/10/2012 - 22:09:10 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Adobe
O43 - CFD: 10/11/2011 - 20:08:03 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\ATI
O43 - CFD: 22/01/2014 - 19:21:06 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Awem
O43 - CFD: 22/10/2015 - 19:58:19 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Azureus
=>P2P.Azureus
O43 - CFD: 26/12/2013 - 23:57:11 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\BitTorrent
=>P2P.BitTorrent
O43 - CFD: 11/11/2011 - 17:33:05 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Convivea
O43 - CFD: 23/02/2012 - 15:55:25 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\CyberLink
O43 - CFD: 22/08/2012 - 18:08:27 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\DAEMON
Tools Lite =>.DT Soft Ltd
O43 - CFD: 08/02/2015 - 09:47:42 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\DAEMON
Tools Pro
O43 - CFD: 21/07/2013 - 16:41:53 - [] ----D C:\Users\Morgan et
Ségo\AppData\Roaming\DisneyInteractiveStudios
O43 - CFD: 23/09/2012 - 18:16:37 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\EASYTools
O43 - CFD: 10/11/2011 - 20:22:17 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\ESET
O43 - CFD: 30/12/2012 - 19:27:38 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\HewlettPackard
O43 - CFD: 11/01/2015 - 10:40:43 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Hobbyist
Software
O43 - CFD: 15/11/2011 - 19:16:05 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\HP
O43 - CFD: 17/01/2014 - 13:32:37 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\HP Support
Assistant =>.Hewlett-Packard Co
O43 - CFD: 18/11/2012 - 17:00:04 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\hpqLog
O43 - CFD: 17/01/2014 - 13:32:37 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\HpUpdate
O43 - CFD: 10/11/2011 - 20:06:39 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Identities
O43 - CFD: 01/05/2012 - 12:41:15 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\ImgBurn
O43 - CFD: 07/06/2012 - 17:51:06 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Kalypso
Media
O43 - CFD: 21/01/2012 - 23:19:14 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Leadertech
O43 - CFD: 18/08/2012 - 10:07:48 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\LucasArts
O43 - CFD: 23/07/2011 - 13:37:31 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Macromedia
O43 - CFD: 11/01/2015 - 10:10:34 - [0] ----D C:\Users\Morgan et
Ségo\AppData\Roaming\Malwarebytes
O43 - CFD: 21/11/2010 - 09:16:41 - [0] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Media
Center Programs
O43 - CFD: 12/03/2015 - 09:02:54 - [] -S--D C:\Users\Morgan et Ségo\AppData\Roaming\Microsoft
O43 - CFD: 10/11/2011 - 20:17:15 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Mozilla
O43 - CFD: 08/05/2012 - 17:46:51 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\NAVIGON
Fresh
O43 - CFD: 01/05/2012 - 12:44:56 - [0] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Nero
O43 - CFD: 25/04/2014 - 22:38:41 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Orange
O43 - CFD: 08/11/2012 - 19:29:38 - [0] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Outlook
O43 - CFD: 09/08/2015 - 12:58:21 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\PDF
Architect 3
O43 - CFD: 09/08/2015 - 12:54:45 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\pdfforge
O43 - CFD: 12/11/2012 - 23:04:59 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\PunkBuster
O43 - CFD: 02/01/2012 - 20:48:56 - [] R-H-D C:\Users\Morgan et Ségo\AppData\Roaming\SecuROM
O43 - CFD: 25/05/2015 - 19:04:33 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Skype
O43 - CFD: 16/11/2011 - 15:18:26 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Sports
Interactive
O43 - CFD: 08/02/2015 - 10:01:29 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Steam
O43 - CFD: 31/07/2014 - 19:46:15 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\TomTom
O43 - CFD: 21/07/2014 - 18:31:29 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Tropico 5
O43 - CFD: 08/02/2014 - 13:36:08 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\ttales
Ségo\AppData\Roaming\VDownloader
O43 - CFD: 21/10/2015 - 09:38:11 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\vlc
O43 - CFD: 25/05/2015 - 19:08:11 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\VS Revo
Group
O43 - CFD: 16/11/2014 - 20:20:21 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\Warner
Bros. Interactive Entertainment
O43 - CFD: 30/12/2012 - 11:25:58 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\WB Games
O43 - CFD: 24/12/2012 - 15:45:24 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\WildTangent
O43 - CFD: 11/11/2011 - 22:35:53 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\WinBatch
O43 - CFD: 11/11/2011 - 01:25:25 - [0] ----D C:\Users\Morgan et Ségo\AppData\Roaming\WinRAR
O43 - CFD: 22/10/2015 - 21:14:34 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\ZHP
=>.Nicolas Coolman
O43 - CFD: 13/02/2013 - 19:09:23 - [] ----D C:\Users\Morgan et Ségo\AppData\Roaming\_MDLogs
O43 - CFD: 03/08/2012 - 17:44:39 - [0] ----D C:\Users\Morgan et Ségo\AppData\Local\2012
O43 - CFD: 01/05/2014 - 08:23:22 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Activision
O43 - CFD: 21/06/2015 - 08:40:20 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Adobe
O43 - CFD: 10/11/2011 - 20:01:29 - [] -SH-D C:\Users\Morgan et Ségo\AppData\Local\Application
Data
O43 - CFD: 10/11/2011 - 20:08:03 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\ATI
O43 - CFD: 03/06/2015 - 18:55:09 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\BANDAI NAMCO
Games
O43 - CFD: 16/11/2011 - 15:19:25 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Chromium
O43 - CFD: 18/06/2015 - 18:49:09 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Colossal Order
O43 - CFD: 24/09/2015 - 14:08:35 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\CrashDumps
O43 - CFD: 03/02/2013 - 12:46:43 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Diagnostics
O43 - CFD: 28/04/2015 - 19:31:50 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Downloaded
Installations
Ségo\AppData\Local\ElevatedDiagnostics
O43 - CFD: 07/12/2014 - 12:58:51 - [] -SH-D C:\Users\Morgan et
Ségo\AppData\Local\EmieBrowserModeList
O43 - CFD: 03/06/2014 - 21:42:23 - [] -SH-D C:\Users\Morgan et Ségo\AppData\Local\EmieSiteList
O43 - CFD: 03/06/2014 - 21:42:23 - [] -SH-D C:\Users\Morgan et Ségo\AppData\Local\EmieUserList
O43 - CFD: 14/08/2013 - 17:41:45 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\EMU
O43 - CFD: 10/11/2011 - 20:22:17 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\ESET
O43 - CFD: 03/08/2012 - 17:44:39 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\FLT
O43 - CFD: 08/02/2015 - 10:01:30 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Focus Home
Interactive
O43 - CFD: 02/01/2015 - 20:24:12 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Game Dev
Tycoon - Steam
O43 - CFD: 21/12/2013 - 13:54:53 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Game Updater
O43 - CFD: 09/05/2014 - 19:02:05 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\GDQUQ
O43 - CFD: 15/08/2012 - 21:57:00 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\GermaniXSoft
O43 - CFD: 17/02/2013 - 09:51:58 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Google
O43 - CFD: 02/06/2015 - 19:11:57 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\GWX
O43 - CFD: 17/02/2012 - 13:11:36 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Hewlett-Packard
O43 - CFD: 10/11/2011 - 20:07:05 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\HewlettPackard_Company
O43 - CFD: 10/11/2011 - 20:01:29 - [] -SH-D C:\Users\Morgan et Ségo\AppData\Local\Historique
O43 - CFD: 15/11/2011 - 19:16:05 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\HP
O43 - CFD: 13/11/2011 - 10:43:45 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\LucasArts
O43 - CFD: 13/06/2012 - 14:50:19 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Macromedia
O43 - CFD: 07/08/2015 - 11:54:56 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Microsoft
O43 - CFD: 11/03/2012 - 19:11:31 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Microsoft
Games
O43 - CFD: 18/06/2013 - 21:29:06 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Microsoft Help
O43 - CFD: 14/12/2014 - 22:01:33 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Mindjet
O43 - CFD: 02/10/2013 - 07:22:31 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Mozilla
O43 - CFD: 31/08/2012 - 13:32:52 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\PDFC
O43 - CFD: 20/10/2015 - 21:01:33 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\PDFCreator
O43 - CFD: 17/02/2013 - 10:05:45 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Programs
O43 - CFD: 30/11/2012 - 16:14:10 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\PunkBuster
O43 - CFD: 10/11/2011 - 20:06:26 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\RemEngine
O43 - CFD: 26/12/2013 - 20:17:30 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Setup Integrity
Check
O43 - CFD: 05/04/2014 - 14:20:58 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\SKIDROW
O43 - CFD: 25/05/2015 - 19:01:06 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Skype
O43 - CFD: 16/11/2011 - 15:18:26 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Sports
Interactive
O43 - CFD: 22/10/2015 - 21:03:56 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Temp
O43 - CFD: 10/11/2011 - 20:01:29 - [] -SH-D C:\Users\Morgan et Ségo\AppData\Local\Temporary
Internet Files
O43 - CFD: 31/07/2014 - 19:46:15 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\TomTom
O43 - CFD: 04/12/2012 - 18:20:48 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Ubisoft Game
Launcher
O43 - CFD: 15/08/2015 - 12:10:09 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\VDownloader
O43 - CFD: 02/09/2014 - 22:32:53 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\VirtualStore
O43 - CFD: 11/11/2011 - 17:40:19 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\VS Revo Group
O43 - CFD: 18/03/2013 - 19:05:00 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Warner Bros.
Interactive Entertainment
O43 - CFD: 10/01/2015 - 20:38:41 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\Windows Live
O43 - CFD: 14/12/2014 - 21:57:59 - [] ----D C:\Users\Morgan et Ségo\AppData\Local\{8FD03FA1F403-4E95-A073-48DD56550E68}
O43 - CFD: 14/07/2009 - 06:54:32 - [] R---D C:\Users\Morgan et
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced Word 2000 Password
Recovery
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
Ségo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zuma's Revenge!
~ 2 Dossier CLSID vide (CLSID Empty Folder)
~ Program Folder: 357 Scanned in 00mn 00s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.07AA9916D3383D7E040A88665A6DF67F] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-file-l1-2-0.dll [11616]
O44 - LFC:[MD5.966F1686B72929B452C7C0999791D42F] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
O44 - LFC:[MD5.3C40A9D1AE0B5E72B2F90761A0FD49CF] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-localization-l1-2-0.dll
[14176]
O44 - LFC:[MD5.25CD5A26EA59E6F4C082B8945B16FC3A] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-1.dll
[12128]
O44 - LFC:[MD5.6B9E8A0DA794B28096305C1A081B5A97] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-synch-l1-2-0.dll [12128]
O44 - LFC:[MD5.CF403B7B90696AB2DED707FFDEA27112] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-timezone-l1-1-0.dll
[11616]
O44 - LFC:[MD5.D158B27D44E83917ADBB38D50A5C40B3] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-xstate-l2-1-0.dll [11616]
O44 - LFC:[MD5.ED14B64C94F543974B7FDC592FA0594B] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-conio-l1-1-0.dll [12640]
O44 - LFC:[MD5.1908861649E67CDC20C563C234A89914] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-convert-l1-1-0.dll [15712]
O44 - LFC:[MD5.AF851DFD0D9FECB76FF2B403F3C30F5B] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-environment-l1-1-0.dll
[12128]
O44 - LFC:[MD5.0F143310FADE4DE116070A3917A79C18] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-filesystem-l1-1-0.dll
[13664]
O44 - LFC:[MD5.F97E7878A2B372291B1269D80327BBF6] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-heap-l1-1-0.dll [12640]
O44 - LFC:[MD5.761DDD8669A661D57D9CF9C335949C06] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-locale-l1-1-0.dll [12128]
O44 - LFC:[MD5.56556659C691DD043DBE24B0A195D64C] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-math-l1-1-0.dll [20832]
O44 - LFC:[MD5.E9F6D776545843A9817D8ACF38D06D09] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-multibyte-l1-1-0.dll
[19808]
O44 - LFC:[MD5.653CB5DF3CEC6A4A0E402B33D8AA5C08] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-private-l1-1-0.dll [63840]
O44 - LFC:[MD5.6631C212F79350458589A5281374B38B] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-process-l1-1-0.dll [12640]
O44 - LFC:[MD5.BBAE7B5436D6D1B0FC967FF67E35415F] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-runtime-l1-1-0.dll [16224]
O44 - LFC:[MD5.53E9526AF1FDCE39F799BFE9217397A8] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-stdio-l1-1-0.dll [17760]
O44 - LFC:[MD5.ECCF5973B80D771A79643732017CEA9A] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-string-l1-1-0.dll [17760]
O44 - LFC:[MD5.090DD0BB2BDDEE3EAAE5B6FF15FAE209] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-time-l1-1-0.dll [14176]
O44 - LFC:[MD5.CC337898E64D9078CB697AC19F995C7F] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-crt-utility-l1-1-0.dll [12128]
O44 - LFC:[MD5.32B2264317EA6200DA5DEEEC7DCB0EEB] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-eventing-provider-l1-1-0.dll
[11616]
O44 - LFC:[MD5.2381E189321EAD521FF71E72D08A6B17] - 14/10/2015 - 00:32:26 ---A- . (.Microsoft
Corporation - Microsoft® C Runtime Library.) -- C:\Windows\System32\ucrtbase.dll [984448]
O44 - LFC:[MD5.B17B1E5FB5CE63DA4DB4D49E3683487F] - 14/10/2015 - 00:34:28 ---A- . (.Microsoft
Corporation - AppID Certificate Store Verification Task.) -C:\Windows\System32\appidcertstorecheck.exe [17920]
O44 - LFC:[MD5.27DABFB4A6B0140C34DBEC713469592B] - 14/10/2015 - 00:34:28 ---A- . (.Microsoft
Corporation - AppID Driver.) -- C:\Windows\System32\Drivers\appid.sys [61440]
O44 - LFC:[MD5.7030F95F994B2F2CCC1C521E342369DB] - 14/10/2015 - 00:34:28 ---A- . (.Microsoft
Corporation - AppID Policy Converter Task.) -- C:\Windows\System32\appidpolicyconverter.exe
[147456]
O44 - LFC:[MD5.B6C85437FDC8EC6464BE359D41BBC3F7] - 14/10/2015 - 00:34:28 ---A- . (.Microsoft
Corporation - DLL des API d’identité de l’application.) -- C:\Windows\System32\appidapi.dll [59392]
O44 - LFC:[MD5.7503BAD9B2A08B8A95319F7C0CA9F869] - 14/10/2015 - 00:34:28 ---A- . (.Microsoft
Corporation - MUI Callback for Bcd.) -- C:\Windows\System32\setbcdlocale.dll [63488]
O44 - LFC:[MD5.ABC373B9C6275D45F17DB559408FFD1B] - 14/10/2015 - 00:34:28 ---A- . (.Microsoft
Corporation - Service d’identité de l’application.) -- C:\Windows\System32\appidsvc.dll [32768]
O44 - LFC:[MD5.87FEDB1FF42C3A10FFE2CE95AB2AF306] - 14/10/2015 - 00:34:29 ---A- . (.Microsoft
Corporation - Application de démarrage Reprise à partir d.) -- C:\Windows\System32\winresume.efi
[616360]
O44 - LFC:[MD5.541B7C53EDA8F84790A593B13FB32E56] - 14/10/2015 - 00:34:29 ---A- . (.Microsoft
Corporation - OS Loader.) -- C:\Windows\System32\winload.efi [692672]
O44 - LFC:[MD5.7CDA2FE5F02370B5879DF8D35133B0E1] - 14/10/2015 - 00:35:21 ---A- . (.Microsoft
Corporation - DLL des événements d’audit de la sécurité.) -- C:\Windows\System32\msaudite.dll
[146432]
O44 - LFC:[MD5.DD01EBF9D35E614CAEA1BF4876B07134] - 14/10/2015 - 00:35:21 ---A- . (.Microsoft
Corporation - DLL du schéma d’audit de sécurité.) -- C:\Windows\System32\adtschema.dll [686080]
O44 - LFC:[MD5.B5D2DF46AB955A070F67FF192C52E7BD] - 14/10/2015 - 00:35:21 ---A- . (.Microsoft
Corporation - Nom d’audit des objets système.) -- C:\Windows\System32\msobjs.dll [60416]
O44 - LFC:[MD5.023394934150F7EC547EBCC2107EEA5F] - 14/10/2015 - 00:35:22 ---A- . (.Microsoft
Corporation - ApiSet Schema DLL.) -- C:\Windows\System32\apisetschema.dll [6656]
O44 - LFC:[MD5.BD1CB2585FDABDFE0E811B0C7BB940B7] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll [3072]
O44 - LFC:[MD5.1B792635489640A2D75615A6E68D42F9] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll [3072]
O44 - LFC:[MD5.2BEB157197C39E8DB24E37FF7BCB4EA2] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll [3072]
O44 - LFC:[MD5.8A8B62F00408087B07C5BB63B5E2E048] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[3072]
O44 - LFC:[MD5.35A753F0F4CB0AABC979631ED2023B8D] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[3072]
O44 - LFC:[MD5.AEE42458FCFCF3C343A14D5CBFCC7DC7] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll [3072]
O44 - LFC:[MD5.8EB4808486176097C78C3C472321A4E1] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
O44 - LFC:[MD5.89C439CE01FA0D7C3DB464591DCCB317] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll [3072]
O44 - LFC:[MD5.691B107327E8E05C684B2A6D2D98BB03] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll [3584]
O44 - LFC:[MD5.3F722A3FA03B022D874327D1C868A9B6] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[3072]
O44 - LFC:[MD5.05264C2276A3E895B51DABCC0AA77653] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll [3072]
O44 - LFC:[MD5.7A55A28F611B0D227E32DD3DB090390E] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[3584]
O44 - LFC:[MD5.CBE770BF21CD5B96F712EC52F4AEB361] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[4096]
O44 - LFC:[MD5.448B9A618089CF09780066A96176B003] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[4096]
O44 - LFC:[MD5.20C0A856894D1584C055DFB47AB918D1] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll [3584]
O44 - LFC:[MD5.2A361BDB365E44F9FF3A921090DD1AE0] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll [3584]
O44 - LFC:[MD5.4A34F0F89D792A9082C750CF1F3A5605] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[3584]
O44 - LFC:[MD5.580FAB0A22A1595E0C230C494B85406D] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-10.dll [3584]
O44 - LFC:[MD5.6E6DC9B90A112A4650E89843F258073E] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[4608]
O44 - LFC:[MD5.DFF5A4B2F4027C2EB3B6F82900C5E0F4] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll [3072]
O44 - LFC:[MD5.C1AF13EE9B493E86D3922F36348F6B66] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[3584]
O44 - LFC:[MD5.C1C3645B78801C3169862759A63E8BC7] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll [3072]
O44 - LFC:[MD5.B7CCCE621E6A565BF374878BC1FE7DC6] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll [4096]
O44 - LFC:[MD5.1F2DE8EF4CAD87C530588D97E36AC322] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll [4096]
O44 - LFC:[MD5.39FA75416812EDAFB61B40EA96DD3F8E] - 14/10/2015 - 00:35:22 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll [6144]
O44 - LFC:[MD5.FCFE939A325054DFC69E1D8C58751A62] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - AMD64 Wow64 CPU.) -- C:\Windows\System32\wow64cpu.dll [13312]
O44 - LFC:[MD5.3CF93F8BA5016A86073F7ACE4A225D69] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Base cryptographic API DLL.) -- C:\Windows\System32\cryptbase.dll [44032]
O44 - LFC:[MD5.96DE914D834FD7809A1720AF5D913C96] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Bibliothèque de chiffrement Windows.) -- C:\Windows\System32\ncrypt.dll [309760]
O44 - LFC:[MD5.C0EC18A77CBE5505019AF1BEB6CE824D] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll [22016]
O44 - LFC:[MD5.D2E2A613EBD0C959E72556C3A63A6B4A] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Gestionnaire de sessions Windows.) -- C:\Windows\System32\smss.exe [112640]
O44 - LFC:[MD5.4E10C0CD94FD2E9F04B0AA11C4DB1592] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - LSA SSPI RPC interface DLL.) -- C:\Windows\System32\sspisrv.dll [29184]
O44 - LFC:[MD5.5424EC756808C1002457033D969115C7] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Local Security Authority Process.) -- C:\Windows\System32\lsass.exe [31232]
O44 - LFC:[MD5.8C0376974AA28398FF501E78C04ACB30] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Longhorn SMB 2.0 Redirector.) -- C:\Windows\System32\Drivers\mrxsmb20.sys
[129024]
O44 - LFC:[MD5.262BF7BB7D0E44CFAA9B12A1E0A6EDF1] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Longhorn SMB Downlevel SubRdr.) -- C:\Windows\System32\Drivers\mrxsmb10.sys
[290816]
O44 - LFC:[MD5.D2BF3CD0F66139B5F1BA1D35C6613E78] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
[315392]
O44 - LFC:[MD5.E43F36D0B4C674FEA2C992564A3E0F28] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Microsoft Digest Access.) -- C:\Windows\System32\wdigest.dll [210944]
O44 - LFC:[MD5.8F15F0D6F42A2B8A58EDD1AA55D7FB98] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Microsoft® Windows System Restore Client Li.) -- C:\Windows\System32\srclient.dll
[50176]
O44 - LFC:[MD5.23682AD752DE308760672C84A7E74554] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Processus d'exécution client-serveur.) -- C:\Windows\System32\csrsrv.dll [43520]
O44 - LFC:[MD5.95E4E6C645175731B1DC8084329121AA] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Programme de stratégie d’audit.) -- C:\Windows\System32\auditpol.exe [64000]
O44 - LFC:[MD5.8260FD420E49C1E3DD6539BCEA2B376E] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Security Support Provider Interface.) -- C:\Windows\System32\secur32.dll [28160]
O44 - LFC:[MD5.E9CCB68290F27837A3D7058FEB51F7A8] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Security Support Provider Interface.) -- C:\Windows\System32\sspicli.dll [136192]
O44 - LFC:[MD5.06AA22DBBD294BB40F01E23BF826AA9C] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Web Service Security Package.) -- C:\Windows\System32\TSpkg.dll [86528]
O44 - LFC:[MD5.E91002F7EC3A9BF7F62BF1E215A32451] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Wow64 Console and Win32 API Logging.) -- C:\Windows\System32\wow64win.dll
[362496]
O44 - LFC:[MD5.78461527B753B9A6043038AEF25745D3] - 14/10/2015 - 00:35:23 ---A- . (.Microsoft
Corporation - Émulation 16 bits sur NT64.) -- C:\Windows\System32\ntvdm64.dll [16384]
O44 - LFC:[MD5.AC4CDA9F338074B4427685FD2FE9361F] - 14/10/2015 - 00:35:23 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[4608]
O44 - LFC:[MD5.1B4CE4932D45DC5E71FC6065B1150A36] - 14/10/2015 - 00:35:23 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll [3072]
O44 - LFC:[MD5.274844FA4FEBF58360D28FDDDB035B42] - 14/10/2015 - 00:35:23 --HA- . (.Microsoft
Corporation - ApiSet Stub DLL.) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll [3072]
O44 - LFC:[MD5.F337ACC4CF6B9DFBE46D9A7E54E10756] - 14/10/2015 - 00:35:24 ---A- . (.Microsoft
Corporation - Bibliothèque principale de Restauration du.) -- C:\Windows\System32\srcore.dll
[503808]
O44 - LFC:[MD5.4AD1C61152A0199E3D7F9A82C07AC629] - 14/10/2015 - 00:35:24 ---A- . (.Microsoft
Corporation - DLL serveur de Windows multi-utilisateurs.) -- C:\Windows\System32\winsrv.dll
[215040]
O44 - LFC:[MD5.5401C9D2F4B0A98B60259C621DDF1EB6] - 14/10/2015 - 00:35:24 ---A- . (.Microsoft
Corporation - Hôte de la fenêtre de la console.) -- C:\Windows\System32\conhost.exe [338432]
O44 - LFC:[MD5.365480590A46ECB0E4BF1DBD7BC69713] - 14/10/2015 - 00:35:24 ---A- . (.Microsoft
Corporation - Package de sécurité Kerberos.) -- C:\Windows\System32\kerberos.dll [729088]
O44 - LFC:[MD5.5B9427E47B86AFDA813A8D252713FC35] - 14/10/2015 - 00:35:24 ---A- . (.Microsoft
Corporation - Restauration du système de Microsoft® Windo.) -- C:\Windows\System32\rstrui.exe
[296960]
O44 - LFC:[MD5.338FD40323ADD43B5C94B4A6CB91874B] - 14/10/2015 - 00:35:24 ---A- . (.Microsoft
Corporation - Runtime d’appel de procédure distante.) -- C:\Windows\System32\rpcrt4.dll
[1216512]
O44 - LFC:[MD5.EE035334B7A58C7F748C3D0394574A35] - 14/10/2015 - 00:35:24 ---A- . (.Microsoft
Corporation - TLS / SSL Security Provider.) -- C:\Windows\System32\schannel.dll [342016]
O44 - LFC:[MD5.A06A96A26FE0BE22B08B641362296B68] - 14/10/2015 - 00:35:25 ---A- . (.Microsoft
Corporation - DLL du client API BASE Windows NT.) -- C:\Windows\System32\KernelBase.dll
[424960]
O44 - LFC:[MD5.CD349AD99C801523B55030AC234CC1EF] - 14/10/2015 - 00:35:25 ---A- . (.Microsoft
Corporation - Win32 Emulation on NT64.) -- C:\Windows\System32\wow64.dll [243712]
O44 - LFC:[MD5.91DDAFAFCEC3E360881FE35AF06B9EE4] - 14/10/2015 - 00:35:26 ---A- . (.Microsoft
Corporation - DLL Couche NT.) -- C:\Windows\System32\ntdll.dll [1730496]
O44 - LFC:[MD5.ACB6782973BD93760D597FC7BB37E692] - 14/10/2015 - 00:35:26 ---A- . (.Microsoft
Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\Drivers\mrxsmb.sys [159232]
O44 - LFC:[MD5.6C190505923A971F0474F8BA8DA50789] - 14/10/2015 - 00:35:27 ---A- . (.Microsoft
Corporation - DLL serveur LSA.) -- C:\Windows\System32\lsasrv.dll [1461760]
O44 - LFC:[MD5.3A8C03156C3E31E70EF84E48CA179B46] - 14/10/2015 - 00:35:27 ---A- . (.Microsoft
Corporation - Kernel Security Support Provider Interface.) -C:\Windows\System32\Drivers\ksecdd.sys [97112]
O44 - LFC:[MD5.C6330F7C2E92A00E6773E82F79078AFC] - 14/10/2015 - 00:35:27 ---A- . (.Microsoft
Corporation - Kernel Security Support Provider Interface.) -C:\Windows\System32\Drivers\ksecpkg.sys [157016]
O44 - LFC:[MD5.11C18D613F66CB5CE829B821599ED339] - 14/10/2015 - 00:35:28 ---A- . (.Microsoft
Corporation - DLL du client API BASE Windows NT.) -- C:\Windows\System32\kernel32.dll [1164800]
O44 - LFC:[MD5.3FE5671328B8A655F766D872D12DC373] - 14/10/2015 - 00:35:31 ---A- . (.Microsoft
Corporation - NT Kernel & System.) -- C:\Windows\System32\ntoskrnl.exe [5569472]
O44 - LFC:[MD5.ECB1C858D9989C4F19FDCE3B7F8BA1F7] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - API du client Windows Update.) -- C:\Windows\System32\wuapi.dll [696320]
O44 - LFC:[MD5.5F1A7C984117F478F7411BDD98411B58] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - Windows Setup UI.) -- C:\Windows\System32\WinSetupUI.dll [91136]
O44 - LFC:[MD5.96983751026F0940CAEEB15901B49FF2] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - Windows Update Application Launcher.) -- C:\Windows\System32\wuapp.exe [37888]
O44 - LFC:[MD5.C64C6AA9F061E89AE6CA1B484AC3F94E] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - Windows Update Vista Web Control.) -- C:\Windows\System32\wuwebv.dll [192512]
O44 - LFC:[MD5.DA4450EE180CBDFB800FB230978BBC58] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - Windows Update WUDriver Stub.) -- C:\Windows\System32\wudriver.dll [98816]
O44 - LFC:[MD5.7A2E35CA7131819A8CCE1FA1368D7813] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - Windows Update client proxy stub 2.) -- C:\Windows\System32\wups2.dll [37888]
O44 - LFC:[MD5.74F288D562E78E1062D4AA2A6C3AB74C] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - Windows Update client proxy stub for intern.) -C:\Windows\System32\wu.upgrade.ps.dll [12288]
O44 - LFC:[MD5.B322CE702FA01DA60876BC5D417B15FE] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - Windows Update client proxy stub.) -- C:\Windows\System32\wups.dll [36864]
O44 - LFC:[MD5.64B432FB351118B222A5342A7A461696] - 14/10/2015 - 00:35:48 ---A- . (.Microsoft
Corporation - Windows Update.) -- C:\Windows\System32\wuauclt.exe [140288]
O44 - LFC:[MD5.291778E1A36716182AFBC1731B2DFEAB] - 14/10/2015 - 00:35:49 ---A- . (.Microsoft
Corporation - Agent de mise à jour automatique Windows Up.) -C:\Windows\System32\wuaueng.dll [2607104]
O44 - LFC:[MD5.2FFBB9A44A8BA9CBC9589C31E0A36605] - 14/10/2015 - 00:35:49 ---A- . (.Microsoft
Corporation - Expérience utilisateur du client Windows Up.) -- C:\Windows\System32\wucltux.dll
[3168768]
O44 - LFC:[MD5.0F08BB62CD162883E9A3004BBE7914BD] - 14/10/2015 - 00:39:10 ---A- . (.Microsoft
Corporation - ExplorerFrame.) -- C:\Windows\System32\ExplorerFrame.dll [1866752]
O44 - LFC:[MD5.885B08E5EC912D2680F533094B87770D] - 14/10/2015 - 00:39:11 ---A- . (.Microsoft
Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll [14176768]
O44 - LFC:[MD5.99BA96F5AC545D857E662A9FC576D919] - 14/10/2015 - 01:07:38 ---A- . (.Microsoft
Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [25851904]
O44 - LFC:[MD5.58DD42AC31D1F86D303BAAF5955A59BA] - 14/10/2015 - 01:07:39 ---A- . (.Microsoft
Corporation - Convertisseur Microsoft HTML.) -- C:\Windows\System32\html.iec [417792]
O44 - LFC:[MD5.0783994A921469A6E97F3117AA0934DD] - 14/10/2015 - 01:07:39 ---A- . (.Microsoft
Corporation - DAC for Trident DOM.) -- C:\Windows\System32\MshtmlDac.dll [88064]
O44 - LFC:[MD5.BEA081F4F2D507D6461B142AB11995B3] - 14/10/2015 - 01:07:39 ---A- . (.Microsoft
Corporation - DLL de gestion d'utilisateur local et de co.) -- C:\Windows\System32\msrating.dll
[199680]
O44 - LFC:[MD5.BD06D875FB79E92DAF724C91DE743AFA] - 14/10/2015 - 01:07:40 ---A- . (.Microsoft
Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [2487808]
O44 - LFC:[MD5.454669BB12162610D93954BCC942A41C] - 14/10/2015 - 01:07:40 ---A- . (.Microsoft
Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript.dll [817664]
O44 - LFC:[MD5.E36C7069B9C56DF9A53DD4FA5DCDDE72] - 14/10/2015 - 01:07:40 ---A- . (.Microsoft
Corporation - Microsoft (R) JScript.) -- C:\Windows\System32\jscript9.dll [5990912]
O44 - LFC:[MD5.1DE918244ED8AB9D3F2C4B9A1F91A24D] - 14/10/2015 - 01:07:40 ---A- . (.Microsoft
Corporation - Microsoft ® JScript Diagnostics.) -- C:\Windows\System32\jscript9diag.dll [814080]
O44 - LFC:[MD5.373B3EFBBF1A2706F8660C4DE4202694] - 14/10/2015 - 01:07:41 ---A- . (.Microsoft
Corporation - Contrôleur de site Web.) -- C:\Windows\System32\webcheck.dll [262144]
O44 - LFC:[MD5.5175A9C2C71D49394424C07CA856B803] - 14/10/2015 - 01:07:41 ---A- . (.Microsoft
Corporation - Microsoft (R) HTML Media DLL.) -- C:\Windows\System32\mshtmlmedia.dll [1359360]
O44 - LFC:[MD5.4A9FFAC9325EFFDEFD7E8C0830B0ABEC] - 14/10/2015 - 01:07:41 ---A- . (.Microsoft
Corporation - Microsoft® HTML Editing Component.) -- C:\Windows\System32\mshtmled.dll
[92160]
O44 - LFC:[MD5.BC92D9D88959542FBAF1F8CF21F86B38] - 14/10/2015 - 01:07:41 ---A- . (.Microsoft
Corporation - Navigateur Internet.) -- C:\Windows\System32\ieframe.dll [14458368]
O44 - LFC:[MD5.B0917E6238C1675E48CFE64947DD9FD9] - 14/10/2015 - 01:07:41 ---A- . (.Microsoft
Corporation - Outil d’installation sans assistance d’IE 7.) -- C:\Windows\System32\ieUnatt.exe
[144384]
O44 - LFC:[MD5.84C63F3D2D488A918A947E06BD1105EF] - 14/10/2015 - 01:07:42 ---A- . (.Microsoft
Corporation - JScript Proxy Auto-Configuration.) -- C:\Windows\System32\jsproxy.dll [54784]
O44 - LFC:[MD5.A865136AC6436533E0A4A3C67F259401] - 14/10/2015 - 01:07:42 ---A- . (.Microsoft
Corporation - Microsoft ® VBScript.) -- C:\Windows\System32\vbscript.dll [585728]
O44 - LFC:[MD5.88D3F690043A1AA43F33DEC6DDA82178] - 14/10/2015 - 01:07:42 ---A- . (.Microsoft
Corporation - Moteur de l’interface utilisateur d’Interne.) -- C:\Windows\System32\ieui.dll [616960]
O44 - LFC:[MD5.F6F91F217D760981017E4AA4F1C7E633] - 14/10/2015 - 01:07:43 ---A- . (.Microsoft
Corporation - IOD Version Map.) -- C:\Windows\System32\iesetup.dll [66560]
O44 - LFC:[MD5.0FA614470B3A78FC5B8F3F3F742B9837] - 14/10/2015 - 01:07:43 ---A- . (.Microsoft
Corporation - Microsoft SmartScreen Filter.) -- C:\Windows\System32\ieapfltr.dll [800768]
O44 - LFC:[MD5.7C3050383491011FEDD40961A37A2D99] - 14/10/2015 - 01:07:43 ---A- . (.Microsoft
Corporation - Panneau de configuration Internet.) -- C:\Windows\System32\inetcpl.cpl [2126336]
O44 - LFC:[MD5.E91FD3ACC10C971CBA991FCD058ABB58] - 14/10/2015 - 01:07:43 ---A- . (.Microsoft
Corporation - Run time utility for Internet Explorer.) -- C:\Windows\System32\iertutil.dll [2886656]
O44 - LFC:[MD5.8A2A46DD0C51E5D2D0A2EF2AA289DA4D] - 14/10/2015 - 01:07:44 ---A- .
(.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll
[1546752]
O44 - LFC:[MD5.12C1DECE9502828C0A5ADB50AB1673A0] - 14/10/2015 - 01:07:44 ---A- . (.Microsoft
Corporation - IE ETW Collector Service Resources.) -- C:\Windows\System32\ieetwcollectorres.dll
[4096]
O44 - LFC:[MD5.6E1EEB1CE2F9F3AB14A9E8A6B1E82455] - 14/10/2015 - 01:07:44 ---A- . (.Microsoft
Corporation - Microsoft Feeds Manager.) -- C:\Windows\System32\msfeeds.dll [801280]
O44 - LFC:[MD5.2A898891EB7FBCF0774F0B96AAD05561] - 14/10/2015 - 01:07:44 ---A- . (.Microsoft
Corporation - Microsoft Spell Checking Facility.) -C:\Windows\System32\MsSpellCheckingFacility.exe [968704]
O44 - LFC:[MD5.3295B811A0260C0A5B346ECB73C5FCF0] - 14/10/2015 - 01:07:44 ---A- . (.Microsoft
Corporation - Object Control Viewer.) -- C:\Windows\System32\occache.dll [152064]
O44 - LFC:[MD5.4AEB3F2FB0CC23A18ED997F6C0476819] - 14/10/2015 - 01:07:44 ---A- . (.Microsoft
Corporation - Personnalisation d’IEAK.) -- C:\Windows\System32\iedkcs32.dll [391784]
O44 - LFC:[MD5.521E1A87D4F750FD9694DBF3AB37B38F] - 14/10/2015 - 01:07:45 ---A- . (.Microsoft
Corporation - JavaScript Performance Collection Agent.) -C:\Windows\System32\JavaScriptCollectionAgent.dll [77824]
O44 - LFC:[MD5.3A0773E21355B41176ACAD8BB099D9B3] - 14/10/2015 - 01:07:46 ---A- . (.Microsoft
Corporation - IE ETW Collector Proxy Stub Resources.) -- C:\Windows\System32\ieetwproxystub.dll
[48640]
O44 - LFC:[MD5.9AEE2A881FD10E6A463588303D8027AD] - 14/10/2015 - 01:07:46 ---A- . (.Microsoft
Corporation - IE ETW Collector Service.) -- C:\Windows\System32\ieetwcollector.exe [114688]
O44 - LFC:[MD5.80E9DF296F127B3BC965EBC5A2C8F044] - 14/10/2015 - 01:07:46 ---A- . (.Microsoft
Corporation - Microsoft® MSHTML Typelib.) -- C:\Windows\System32\mshtml.tlb [2724864]
O44 - LFC:[MD5.9E0D0522908C1106E0D77708CB9926FE] - 14/10/2015 - 01:07:46 ---A- . (.Microsoft
Corporation - Traitement de RunOnce complet avec interfac.) -- C:\Windows\System32\iernonce.dll
[34304]
O44 - LFC:[MD5.BF8A5B4E696F4E8F3B2B5E9902467418] - 14/10/2015 - 01:07:46 ---A- . (.Microsoft
Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe
[720896]
O44 - LFC:[MD5.AC7245FDFFBDF7B58FBD9606EA3FE228] - 14/10/2015 - 02:07:10 ---A- . (.Microsoft
Corporation - Outil de suppression de logiciels malveilla.) -- C:\Windows\System32\MRT.exe
[143481208]
O44 - LFC:[MD5.46B2BEDC85241B200DBD649A3F51228D] - 14/10/2015 - 02:29:16 ---A- . (...) -C:\Windows\PFRO.log [9250]
O44 - LFC:[MD5.14A5CC0EE60278D483A88124B88F3524] - 14/10/2015 - 21:07:38 ---A- . (.Microsoft
Corporation - Application Experience Program Inventory Co.) -- C:\Windows\System32\aeinv.dll
[1163776]
O44 - LFC:[MD5.21C89857E5671990BBF2B430BD75B9C9] - 14/10/2015 - 21:07:38 ---A- . (.Microsoft
Corporation - Compatibility Appraiser.) -- C:\Windows\System32\appraiser.dll [1291264]
O44 - LFC:[MD5.952D66DCA6CB744381B7298F8AAE994F] - 14/10/2015 - 21:07:38 ---A- . (.Microsoft
Corporation - Compatibility Upgrade Migration Host.) -- C:\Windows\System32\acmigration.dll
[73216]
O44 - LFC:[MD5.1AC3E0E57844764B0CA6D2BF0F76C773] - 14/10/2015 - 21:07:38 ---A- . (.Microsoft
Corporation - Device Inventory Library.) -- C:\Windows\System32\devinv.dll [503808]
O44 - LFC:[MD5.9F780E22C79AACBF3A93F6ACDE2A4E0A] - 14/10/2015 - 21:07:38 ---A- . (.Microsoft
Corporation - General Telemetry.) -- C:\Windows\System32\generaltel.dll [766464]
O44 - LFC:[MD5.AFE7905DD772DEA54B9C443C6634740A] - 14/10/2015 - 21:07:38 ---A- . (.Microsoft
Corporation - Inventory Agent.) -- C:\Windows\System32\invagent.dll [700416]
O44 - LFC:[MD5.F03EA93F045D009830C890010750B34A] - 14/10/2015 - 21:07:38 ---A- . (.Microsoft
Corporation - Microsoft Compatibility Telemetry.) -- C:\Windows\System32\CompatTelRunner.exe
[25432]
O44 - LFC:[MD5.77D4540D4B97B56191DFBC4BD0CD94F1] - 22/10/2015 - 19:33:21 ---A- . (...) -C:\Windows\ntbtlog.txt [48822]
O44 - LFC:[MD5.95513E58D2DED61AEBA9F35EF811BC91] - 22/10/2015 - 19:40:49 -S-A- . (...) -C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.37AED0D013C6B4C9389E038BC836F60A] - 22/10/2015 - 19:40:52 ---A- . (...) -C:\Windows\setupact.log [14409]
O44 - LFC:[MD5.AFE3863FA1F2806D773A348D3B3946B4] - 22/10/2015 - 19:52:56 ---A- . (...) -C:\PhysicalDisk0_MBR.bin [512]
O44 - LFC:[MD5.56E521C62116316B012F012DD99DC385] - 22/10/2015 - 20:03:57 ---A- . (...) -C:\Windows\WindowsUpdate.log [1148925]
O44 - LFC:[MD5.66076D27FE26641EEE0E4DF88898628A] - 22/10/2015 - 20:12:23 ---A- . (...) -C:\Windows\System32\PerfStringBackup.INI [6312]
O44 - LFC:[MD5.30DCE23C08C00FDC295DE452DA912B86] - 22/10/2015 - 20:12:23 ---A- . (...) -C:\Windows\System32\perfc009.dat [1480970]
O44 - LFC:[MD5.1483D74BC41B588E556194798793571A] - 22/10/2015 - 20:12:23 ---A- . (...) -C:\Windows\System32\perfc00C.dat [1711684]
O44 - LFC:[MD5.0AD1D401DA8EF73C2D49A547FAB820F8] - 22/10/2015 - 20:12:23 ---A- . (...) -C:\Windows\System32\perfh009.dat [2076358]
O44 - LFC:[MD5.AD55EB6610A7F184BF6ECC04900E71DE] - 22/10/2015 - 20:12:23 ---A- . (...) -C:\Windows\System32\perfh00C.dat [5522826]
~ Files: 165 Scanned in 00mn 02s
---\\ Derniers fichiers créés dans Windows Prefetcher (O45)
O45 - LFCP:[MD5.DEC010BBB4D724B62C2F2460157FB543] - 21/10/2015 - 15:50:02 ---A- C:\Windows\Prefetch\AZUREUS.EXE-997C5496.pf =>P2P.Azureus
O45 - LFCP:[MD5.26A51DB8F956BD0FE0D6F7690FF6919E] - 22/10/2015 - 02:42:51 ---A- C:\Windows\Prefetch\AZUREUSTOR.EXE-DEE63CC4.pf =>P2P.Azureus
~ Prefetcher: 2 Scanned in 00mn 00s
---\\ Déni du service (Local Security Authority) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft
Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client
de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Package de sécurité
Kerberos.) -- C:\Windows\System32\kerberos.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft
Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - TLS / SSL Security
Provider.) -- C:\Windows\System32\schannel.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Digest
Access.) -- C:\Windows\System32\wdigest.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Web Service Security
Package.) -- C:\Windows\System32\tspkg.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Pku2u Security
Package.) -- C:\Windows\System32\pku2u.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corp. - LiveSSP.) -C:\Windows\System32\livessp.dll
~ LSA: 9 Scanned in 00mn 00s
---\\ Contrôle du Safe Boot (CSB) (O49)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\sermouse.sys . (.Microsoft Corporation - Pilote
de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vga.sys . (.Microsoft Corporation - VGA/Super
VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\vgasave.sys . (...) -C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgr.sys . (.Microsoft Corporation - Volume
Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Minimal\volmgrx.sys . (.Microsoft Corporation - Pilote
d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\ipnat.sys . (.Microsoft Corporation - IP Network
Address Translator.) -- C:\Windows\System32\Drivers\ipnat.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\nsiproxy.sys . (.Microsoft Corporation - NSI
Proxy.) -- C:\Windows\System32\Drivers\nsiproxy.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\rdpencdd.sys . (.Microsoft Corporation - RDP
Encoder Miniport.) -- C:\Windows\System32\Drivers\rdpencdd.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\sermouse.sys . (.Microsoft Corporation - Pilote
de filtre souris série.) -- C:\Windows\System32\Drivers\sermouse.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vga.sys . (.Microsoft Corporation - VGA/Super
VGA Video Driver.) -- C:\Windows\System32\Drivers\vga.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\vgasave.sys . (...) -C:\Windows\System32\Drivers\vgasave.sys (.not file.)
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgr.sys . (.Microsoft Corporation - Volume
Manager Driver.) -- C:\Windows\System32\Drivers\volmgr.sys
O49 - CSB:Control Safe Boot HKLM\...\CCS\Network\volmgrx.sys . (.Microsoft Corporation - Pilote
d’extension du gestionnaire de volumes.) -- C:\Windows\System32\Drivers\volmgrx.sys
~ CSB: 13 Scanned in 00mn 00s
---\\ Clé de registre Shell MountPoints2 (MPSK) (O51)
O51 - MPSK:{a2ed70f4-96a7-11e1-bd91-2c27d74203c4}\AutoRun\command. (...) -- H:\setup.exe
(.not file.)
---\\ Recherche d'infection sur les pilotes (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="C:\Windows\System32\l3codeca.acm" . (.Fraunhofer
Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3
Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -C:\Windows\System32\l3codeca.acm
~ TDSD: 2 Scanned in 00mn 00s
---\\ Enumération des clés de registre StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\DAEMON Tools Pro Agent [Key] . (.DT Soft Ltd - DAEMON Tools Pro
Agent.) -- C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
O53 - SMSR:HKLM\...\startupreg\Easybits Recovery [Key] . (.EasyBits Software AS - Pas de
description.) -- C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe =>.EasyBits Software AS
O53 - SMSR:HKLM\...\startupreg\HTC Sync Loader [Key] . (...) -- C:\Program Files (x86)\HTC\HTC Sync
3.0\htcUPCTLoader.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\RGSC [Key] . (...) -- C:\Program Files (x86)\Rockstar Games\Rockstar
Games Social Club\RGSCLauncher.exe (.not file.)
O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (.Valve Corporation - Steam Client Bootstrapper
(buildbot_winslav.) -- C:\Program Files (x86)\Steam\Steam.exe
~ SMSR Keys: 5 Scanned in 00mn 00s
---\\ Enumération des clés de registre SecurityProviders (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation Credential Delegation Security Package.) -- C:\Windows\System32\credssp.dll
~ MSCP: 2 Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesSystem (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=0
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
O55 - MWPS:[HKLM\...\Policies\System] - "HideFastUserSwitching"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableLockWorkstation"=0
O55 - MWPS:[HKCU\...\Policies\System] - "DisableChangePassword"=0
~ MWPS: 19 Scanned in 00mn 00s
---\\ Enumération des clés de registre PoliciesExplorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=145
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktop"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
O56 - MWPE:[HKLM\...\policies\Explorer] - "ForceActiveDesktopOn"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "EnableShellExecuteHooks"=1
~ MWPE Keys: 10 Scanned in 00mn 00s
---\\ Liste des pilotes du système (SDL) (O58)
O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.)
-- C:\Windows\System32\Drivers\adp94xx.sys [491088]
O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -C:\Windows\System32\Drivers\adpahci.sys [339536]
O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).)
-- C:\Windows\System32\Drivers\adpu320.sys [182864]
O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -C:\Windows\System32\Drivers\aliide.sys [15440]
O58 - SDL:11/03/2011 - 07:41:12 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -C:\Windows\System32\Drivers\amdsata.sys [107904]
O58 - SDL:14/07/2009 - 02:52:20 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible
Controller Driver for Windows -.) -- C:\Windows\System32\Drivers\amdsbs.sys [194128]
O58 - SDL:11/03/2011 - 07:41:12 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -C:\Windows\System32\Drivers\amdxata.sys [27008]
O58 - SDL:02/11/2009 - 18:16:50 ---A- . (.HTC, Corporation - ADB Interface.) -C:\Windows\System32\Drivers\ANDROIDUSB.sys [33736]
O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -C:\Windows\System32\Drivers\arc.sys [87632]
O58 - SDL:14/07/2009 - 02:52:21 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -C:\Windows\System32\Drivers\arcsas.sys [97856]
O58 - SDL:24/09/2010 - 16:46:32 ---A- . (.ATI Technologies, Inc. - ATI High Definition Audio Function
Driver.) -- C:\Windows\System32\Drivers\AtihdW76.sys [116752]
O58 - SDL:23/11/2010 - 18:53:44 ---A- . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -C:\Windows\System32\Drivers\atikmdag.sys [7886848]
O58 - SDL:23/11/2010 - 17:46:42 ---A- . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport
Driver.) -- C:\Windows\System32\Drivers\atikmpag.sys [285696]
O58 - SDL:10/06/2009 - 21:34:23 ---A- . (.Broadcom Corporation - Broadcom NetXtreme Gigabit
Ethernet NDIS6.x Unified Driver..) -- C:\Windows\System32\Drivers\b57nd60a.sys [270848]
O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage
Bulk-Only Lower Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltLo.sys [18432]
O58 - SDL:10/06/2009 - 21:41:06 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage
Bulk-Only Upper Filter Driver.) -- C:\Windows\System32\Drivers\BrFiltUp.sys [8704]
O58 - SDL:14/07/2009 - 02:19:07 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -C:\Windows\System32\Drivers\BrSerId.sys [286720]
O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM
version).) -- C:\Windows\System32\Drivers\BrSerWdm.sys [47104]
O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -C:\Windows\System32\Drivers\BrUsbMdm.sys [14976]
O58 - SDL:10/06/2009 - 21:41:10 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -C:\Windows\System32\Drivers\BrUsbSer.sys [14720]
O58 - SDL:10/06/2009 - 21:34:28 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.)
-- C:\Windows\System32\Drivers\bxvbda.sys [468480]
O58 - SDL:14/07/2009 - 02:52:31 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -C:\Windows\System32\Drivers\cmdide.sys [17488]
O58 - SDL:29/05/2012 - 14:53:30 ---A- . (.Windows (R) Codename Longhorn DDK provider - hpvhd
64bit support driver.) -- C:\Windows\System32\Drivers\cpqdfw.sys [27456]
O58 - SDL:01/03/2010 - 22:59:50 ---A- . (...) -- C:\Windows\System32\Drivers\cqcpu.sys [24376]
O58 - SDL:05/05/2012 - 16:21:17 ---A- . (.DT Soft Ltd - DAEMON Tools Virtual Bus Driver.) -C:\Windows\System32\Drivers\dtsoftbus01.sys [272448]
O58 - SDL:14/07/2015 - 14:29:08 ---A- . (.ESET - Amon monitor.) -C:\Windows\System32\Drivers\eamonm.sys [255240]
O58 - SDL:14/07/2015 - 14:29:08 ---A- . (.ESET - Devmon monitor.) -C:\Windows\System32\Drivers\edevmon.sys [251632]
O58 - SDL:14/07/2015 - 14:29:08 ---A- . (.ESET - ESET Helper driver.) -C:\Windows\System32\Drivers\ehdrv.sys [178520]
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:14/07/2015 - 14:29:08 ---A- . (.ESET - ESET Personal Firewall driver.) -C:\Windows\System32\Drivers\epfw.sys [231520]
O58 - SDL:14/07/2015 - 14:29:08 ---A- . (.ESET - Epfw NDIS LightWeight Filter.) -C:\Windows\System32\Drivers\EpfwLWF.sys [53360]
O58 - SDL:14/07/2015 - 14:29:08 ---A- . (.ESET - ESET Personal Firewall driver.) -C:\Windows\System32\Drivers\epfwwfp.sys [72400]
O58 - SDL:10/06/2009 - 21:34:33 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE
VBD.) -- C:\Windows\System32\Drivers\evbda.sys [3286016]
O58 - SDL:06/04/2009 - 08:13:46 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash
Driver Filter.) -- C:\Windows\System32\Drivers\ggflt.sys [13352]
O58 - SDL:06/04/2009 - 08:13:46 ---A- . (.Sony Ericsson Mobile Communications - SEMC USB Flash
Driver.) -- C:\Windows\System32\Drivers\ggsemc.sys [27176]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885
Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:19/10/2010 - 12:34:26 ---A- . (.Intel Corporation - Intel(R) Management Engine Interface.) - C:\Windows\System32\Drivers\HECIx64.sys [56344]
O58 - SDL:21/11/2010 - 04:23:47 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA
Controller Media Driver.) -- C:\Windows\System32\Drivers\HpSAMD.sys [78720]
O58 - SDL:25/06/2010 - 16:08:10 ---A- . (.Windows (R) Win 7 DDK provider - RawPacket NDIS Protocol
Driver.) -- C:\Windows\System32\Drivers\htcnprot.sys [36928]
O58 - SDL:30/11/2011 - 03:40:32 ---A- . (.Intel Corporation - Intel Rapid Storage Technology driver x64.) -- C:\Windows\System32\Drivers\iaStor.sys [568600]
O58 - SDL:11/03/2011 - 07:41:26 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver x64.) -- C:\Windows\System32\Drivers\iaStorV.sys [410496]
O58 - SDL:10/06/2009 - 21:37:05 ---A- . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -C:\Windows\System32\Drivers\igdkmd64.sys [6108416]
O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport
Driver.) -- C:\Windows\System32\Drivers\iirsp.sys [44112]
O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -C:\Windows\System32\Drivers\lsi_fc.sys [114752]
O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -C:\Windows\System32\Drivers\lsi_sas.sys [106560]
O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -C:\Windows\System32\Drivers\lsi_sas2.sys [65600]
O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -C:\Windows\System32\Drivers\lsi_scsi.sys [115776]
O58 - SDL:18/06/2015 - 07:41:40 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Windows\System32\Drivers\mbam.sys [25816]
O58 - SDL:18/06/2015 - 07:41:44 ---A- . (.Malwarebytes Corporation - Malwarebytes Chameleon
Protection Driver.) -- C:\Windows\System32\Drivers\mbamchameleon.sys [109272]
O58 - SDL:27/07/2015 - 03:22:43 ---A- . (.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - C:\Windows\System32\Drivers\MBAMSwissArmy.sys [113880]
O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for
Windows 7\Server 2008 R2 for.) -- C:\Windows\System32\Drivers\megasas.sys [35392]
O58 - SDL:14/07/2009 - 02:48:04 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) - C:\Windows\System32\Drivers\MegaSR.sys [284736]
O58 - SDL:18/06/2015 - 07:41:56 ---A- . (.Malwarebytes Corporation - Malwarebytes Web Access
Control.) -- C:\Windows\System32\Drivers\mwac.sys [63704]
O58 - SDL:14/07/2009 - 02:48:26 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -C:\Windows\System32\Drivers\nfrd960.sys [51264]
O58 - SDL:17/08/2011 - 10:04:34 ---A- . (.Nokia - Nokia USB Phone Bus Driver.) -C:\Windows\System32\Drivers\nmwcdnsux64.sys [171008]
O58 - SDL:11/03/2011 - 07:41:34 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -C:\Windows\System32\Drivers\nvraid.sys [148352]
O58 - SDL:11/03/2011 - 07:41:34 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata
Performance Driver.) -- C:\Windows\System32\Drivers\nvstor.sys [166272]
O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport
Driver.) -- C:\Windows\System32\Drivers\ql2300.sys [1524816]
O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.)
-- C:\Windows\System32\Drivers\ql40xx.sys [128592]
O58 - SDL:30/12/2009 - 10:21:26 ---A- . (.VS Revo Group - Revo Uninstaller Minifilter.) -C:\Windows\System32\Drivers\revoflt.sys [31800]
O58 - SDL:16/02/2012 - 05:42:00 ---A- . (.Realtek - Realtek 8136/8168/8169 NDIS 6.20 64-bit Driver.) - C:\Windows\System32\Drivers\Rt64win7.sys [676968]
O58 - SDL:20/09/2011 - 11:53:34 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition
Audio Function Driver.) -- C:\Windows\System32\Drivers\RTKVHD64.sys [3074664]
O58 - SDL:10/06/2009 - 21:37:19 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision
SECURITY Driver.) -- C:\Windows\System32\Drivers\secdrv.sys [23040]
O58 - SDL:14/07/2009 - 02:45:45 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport
Driver.) -- C:\Windows\System32\Drivers\sisraid2.sys [43584]
O58 - SDL:14/07/2009 - 02:45:46 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) - C:\Windows\System32\Drivers\sisraid4.sys [80464]
O58 - SDL:22/01/2014 - 07:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB
Composite Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudbus.sys [108800]
O58 - SDL:22/01/2014 - 07:52:10 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG
Android Modem Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudmdm.sys
[206080]
O58 - SDL:22/01/2014 - 07:52:12 ---A- . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSUNG USB
Mobile Logging Device Driver (MSS Ver.3).) -- C:\Windows\System32\Drivers\ssudserd.sys [206080]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver
for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -C:\Windows\System32\Drivers\viaide.sys [17488]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X8664.) -- C:\Windows\System32\Drivers\vsmraid.sys [161872]
O58 - SDL:18/11/2014 - 14:39:06 ---A- . (...) -- C:\Windows\System32\epmntdrv.sys [18528]
O58 - SDL:18/11/2014 - 14:39:06 ---A- . (...) -- C:\Windows\System32\EuGdiDrv.sys [10848]
O58 - SDL:18/11/2014 - 14:39:06 ---A- . (...) -- C:\Windows\SysWOW64\epmntdrv.sys [15968]
O58 - SDL:18/11/2014 - 14:39:06 ---A- . (...) -- C:\Windows\SysWOW64\EuGdiDrv.sys [10208]
~ Drivers: 75 Scanned in 00mn 00s
---\\ Derniers fichiers modifiés ou crées (Utilisateur) (O61)
O61 - LFC: 15/10/2015 - 21:14:41 ---A- . (...) -- C:\Users\Morgan et
Ségo\AppData\Local\Temp\e4jE22D.tmp_dir1444917883\i4jdel.exe [35680]
O61 - LFC: 15/10/2015 - 21:14:43 ---A- . (...) -- C:\Users\Morgan et Ségo\Téléchargements
VUZE\Watch Dogs\Watch_Dogs\bin\GFSDK_SSAO.win64.dll [139792] =>P2P.Azureus
O61 - LFC: 15/10/2015 - 21:14:43 ---A- . (...) -- C:\Users\Morgan et Ségo\Téléchargements
VUZE\Watch Dogs\Watch_Dogs\bin\GFSDK_TXAA.win64.dll [100368] =>P2P.Azureus
O61 - LFC: 15/10/2015 - 21:14:43 ---A- . (.RAD Game Tools, Inc..) -- C:\Users\Morgan et
Ségo\Téléchargements VUZE\Watch Dogs\Watch_Dogs\bin\bink2w64.dll [437776] =>P2P.Azureus
O61 - LFC: 15/10/2015 - 21:14:43 ---A- . (.Ubisoft Entertainment.) -- C:\Users\Morgan et
Ségo\Téléchargements VUZE\Watch Dogs\Watch_Dogs\bin\gpudatabase.dll [60944]
=>P2P.Azureus
Ségo\Téléchargements VUZE\Watch Dogs\Watch_Dogs\bin\systemdetection64.dll [298512]
=>P2P.Azureus
Ségo\Téléchargements VUZE\Watch Dogs\Watch_Dogs\bin\watch_dogs.exe [137744]
=>P2P.Azureus
O61 - LFC: 15/10/2015 - 21:14:43 ---A- . (.Ubisoft.) -- C:\Users\Morgan et Ségo\Téléchargements
VUZE\Watch Dogs\Watch_Dogs\bin\uplay_r1_loader64.dll [528184] =>P2P.Azureus
Ségo\AppData\Local\Adobe\Acrobat\11.0\UserCache.bin [114306]
O61 - LFC: 20/10/2015 - 21:14:42 ---A- . (...) -- C:\Users\Morgan et Ségo\Desktop\Protection
PC\2015-10-21\plugins\azemp\vuzeplayer.exe [4177856] =>P2P.Azureus
PC\2015-10-21\plugins\azitunes\jacob-1.17-M2-x64.dll [224056]
PC\2015-10-21\plugins\azitunes\libProcessAccess.dll [13624]
PC\2015-10-21\plugins\azitunes\libProcessAccess64.dll [15160]
PC\2015-10-21\plugins\aznettor\AzureusTor.exe [1392456] =>P2P.Azureus
PC\2015-10-21\plugins\azutp\win32\utp.dll [28160]
PC\2015-10-21\plugins\azutp\x64\utp.dll [32256]
PC\2015-10-21\restart.bat [196]
O61 - LFC: 20/10/2015 - 21:14:42 ---A- . (.Georgia Institute of Technology.) -- C:\Users\Morgan et
Ségo\Desktop\Protection PC\2015-10-21\plugins\mlab\ShaperProbeC.exe [310208]
O61 - LFC: 20/10/2015 - 21:14:42 ---A- . (.Microsoft Corporation.) -- C:\Users\Morgan et
Ségo\Desktop\Protection PC\2015-10-21\plugins\azutp\win32\msvcr100.dll [770384]
Ségo\Desktop\Protection PC\2015-10-21\plugins\azutp\x64\msvcr100.dll [827728]
Ségo\AppData\Local\Temp\i4jdel0.exe [35680]
PC\2015-10-22\plugins\azemp\vuzeplayer.exe [4177856] =>P2P.Azureus
PC\2015-10-22\plugins\azitunes\libProcessAccess.dll [13624]
PC\2015-10-22\plugins\azitunes\libProcessAccess64.dll [15160]
PC\2015-10-22\plugins\aznettor\AzureusTor.exe [1392456] =>P2P.Azureus
PC\2015-10-22\plugins\azutp\win32\utp.dll [28160]
PC\2015-10-22\plugins\azutp\x64\utp.dll [32256]
PC\2015-10-22\restart.bat [196]
O61 - LFC: 21/10/2015 - 21:14:42 ---A- . (.Georgia Institute of Technology.) -- C:\Users\Morgan et
Ségo\Desktop\Protection PC\2015-10-22\plugins\mlab\ShaperProbeC.exe [310208]
Ségo\Desktop\Protection PC\2015-10-22\plugins\azutp\win32\msvcr100.dll [770384]
Ségo\Desktop\Protection PC\2015-10-22\plugins\azutp\x64\msvcr100.dll [827728]
~ 4098 Fichiers temporaires (Temporary files)
~ 360 Fichiers cookies (Cookies files)
~ Files: 34 Scanned in 00mn 01s
---\\ Liste des outils de désinfection (LATC) (O63)
O63 - Logiciel: ZHPDiag 2015 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ Liste les services legacy du registre (LALS) (O64)
O64 - Services: CurCS - 23/11/2010 - C:\Windows\System32\DRIVERS\atikmdag.sys (amdkmdag)
.(.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) - LEGACY_AMDKMDAG
O64 - Services: CurCS - 14/07/2015 - C:\Windows\System32\DRIVERS\eamonm.sys (eamonm)
.(.ESET - Amon monitor.) - LEGACY_EAMONM
O64 - Services: CurCS - 14/07/2015 - C:\Windows\System32\DRIVERS\ehdrv.sys (ehdrv) .(.ESET ESET Helper driver.) - LEGACY_EHDRV
O64 - Services: CurCS - 14/07/2015 - C:\Windows\System32\DRIVERS\epfw.sys (epfw) .(.ESET - ESET
Personal Firewall driver.) - LEGACY_EPFW
O64 - Services: CurCS - 14/07/2015 - C:\Windows\System32\DRIVERS\EpfwLWF.sys (EpfwLWF)
.(.ESET - Epfw NDIS LightWeight Filter.) - LEGACY_EPFWLWF
O64 - Services: CurCS - 14/07/2015 - C:\Windows\System32\DRIVERS\epfwwfp.sys (epfwwfp) .(.ESET
- ESET Personal Firewall driver.) - LEGACY_EPFWWFP
O64 - Services: CurCS - 18/06/2015 - C:\Windows\system32\drivers\mbam.sys (MBAMProtector)
.(.Malwarebytes Corporation - Malwarebytes Anti-Malware.) - LEGACY_MBAMPROTECTOR
~ Legacy: 80 Scanned in 00mn 00s
---\\ Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur
du composant logiciel enfichable Observateur d’événements.) -C:\Windows\System32\eventvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corporation Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ®
Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du
Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> <FirefoxHTML>[HKCU\..\open\Command] (.Mozilla Corporation Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
~ FASS Keys: 11 Scanned in 00mn 00s
---\\ Menu de démarrage Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla
Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command]
(.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
---\\ Recherche d'infection sur les navigateurs internet (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {2DFC8BAE-F9D7-4118-83C1-3E365420E95E} - (Propositions de
recherche Amazon.fr) - http://www.amazon.fr
O69 - SBI: SearchScopes [HKCU] {468DDDEE-5A83-4742-9334-33198F5F2EAD} - (Bing) http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {D944BB61-2E34-4DBF-A683-47E505C587DC} - (eBay) http://rover.ebay.com =>Toolbar.eBay
---\\ Enumère les fichiers Crack & Keygen (CKF) (O82)
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\BATTARKCTY.DLC.PACK.MULTI9-SKIDROW.rar =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe.cat =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe.cdf =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe.cfg =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe.config =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BmLauncher.exe =>.Crack,Keygen
C:\Users\Morgan et Ségo\Téléchargements
VUZE\EaseUS.Partition.Master.v10.2.Multilingual.Incl.Keygen-TSZ\epm_trial.exe =>.Crack,Keygen
VUZE\EaseUS.Partition.Master.v10.2.Multilingual.Incl.Keygen-TSZ\Keygen.exe =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\BATTARKCTY.DLC.PACK.MULTI9-SKIDROW.rar =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe.cat =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe.cdf =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe.cfg =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BatmanAC.exe.config =>.Crack,Keygen
C:\Users\Morgan et Ségo\Documents\My Games\Batman.Arkham.City-CloneDVDCRACKED\Crack\Binaries\Win32\BmLauncher.exe =>.Crack,Keygen
VUZE\EaseUS.Partition.Master.v10.2.Multilingual.Incl.Keygen-TSZ\epm_trial.exe =>.Crack,Keygen
VUZE\EaseUS.Partition.Master.v10.2.Multilingual.Incl.Keygen-TSZ\Keygen.exe =>.Crack,Keygen
~ Files: Scanned in 00mn 15s
---\\ Enumère les service demarrés par Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service
Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de
propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll
[80384]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de
propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll
[80384]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du
service Serveur.) -- C:\Windows\System32\srvsvc.dll [236032]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de
groupe.) -- C:\Windows\System32\gpsvc.dll [777728]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -C:\Windows\System32\ikeext.dll [859648]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio
Windows.) -- C:\Windows\System32\Audiosrv.dll [680960]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de
numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [99328]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de
connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification
d’événements système (SENS).) -- C:\Windows\System32\sens.dll [64512]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants
de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [359424]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie
Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [316928]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire
des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll
[683520]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour
automatique Windows Update.) -- C:\Windows\System32\wuaueng.dll [2607104]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent
en arrière-plan.) -- C:\Windows\System32\qmgr.dll [849920]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll
des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une
connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [569344]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service
d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [30720]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations
d’application.) -- C:\Windows\System32\appinfo.dll [70656]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte
iSCSI.) -- C:\Windows\System32\iscsiexe.dll [156672]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de
classes multimédias.) -- C:\Windows\System32\mmcss.dll [67584]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -C:\Windows\System32\wbem\WMIsvc.dll [242688]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service
Configuration des services Bureau à distance.) -- C:\Windows\System32\sessenv.dll [121856]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service
Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost
Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur
de tâches.) -- C:\Windows\System32\schedsvc.dll [1110016]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.)
-- C:\Windows\System32\kmsvc.dll [90624]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et
solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -C:\Windows\System32\profsvc.dll [210432]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des
thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll [44544]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -C:\Windows\System32\bdesvc.dll [100864]
~ Services: 32 Scanned in 00mn 00s
---\\ Liste des exceptions du parefeu (FirewallRules) (O87)
O87 - FAEL: "{9661F2A0-2423-411D-98E3-03CC96D44BE9}" | In - Private - P6 - TRUE | .(.Azureus
Software, Inc - Vuze Launcher.) -- C:\Program Files (x86)\Vuze\Azureus.exe =>P2P.Azureus
O87 - FAEL: "{888B3340-6478-47AD-8C64-28479827ED50}" | In - Private - P17 - TRUE | .(.Azureus
O87 - FAEL: "{CBA92A66-0116-45F7-B991-73C440D18017}" | In - Public - P6 - TRUE | .(.Azureus
O87 - FAEL: "{760F54E7-8685-432B-892A-0EA6D142AC70}" | In - Public - P17 - TRUE | .(.Azureus
~ Firewall: 4 Scanned in 00mn 00s
---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 17/10/2015 269000 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.)
- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Disabled 10/07/1658 0 | (ezSharedSvc) . (.EasyBits Software AS.) C:\Windows\System32\ezSharedSvcHost.exe =>.EasyBits Software AS
SS - | Demand 12/10/2010 206072 | (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files
(x86)\WildTangent Games\App\GamesAppService.exe
SS - | Auto 19/05/2015 99128 | (HP Support Assistant Service) . (.Hewlett-Packard Company.) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe =>.HewlettPackard Co
SS - | Demand 13/05/2013 1129760 | (hpqwmiex) . (.Hewlett-Packard Company.) - C:\Program Files
(x86)\Hewlett-Packard\Shared\hpqwmiex.exe
SS - | Disabled 18/06/2015 1871160 | (MBAMScheduler) . (.Malwarebytes Corporation.) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
SS - | Auto 18/06/2015 1133880 | (MBAMService) . (.Malwarebytes Corporation.) - C:\Program Files
(x86)\Malwarebytes Anti-Malware\mbamservice.exe
SS - | Demand 16/10/2015 147624 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program
Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Disabled 10/07/1658 0 | (NAUpdate) . (...) - C:\Program Files (x86)\Nero\Update\NASvc.exe
SS - | Demand 24/04/2015 2244312 | (PDF Architect 3) . (.pdfforge GmbH.) - C:\Program Files
(x86)\PDF Architect 3\ws.exe
SS - | Demand 24/04/2015 901336 | (PDF Architect 3 CrashHandler) . (.pdfforge GmbH.) C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe
SS - | Disabled 24/04/2015 740568 | (PDF Architect 3 Creator) . (.pdfforge GmbH.) - C:\Program Files
(x86)\PDF Architect 3\creator-ws.exe
SS - | Auto 18/02/2015 315488 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files
(x86)\Skype\Updater\Updater.exe
SS - | Demand 25/02/2013 543144 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files
(x86)\Common Files\Steam\SteamService.exe
SS - | Disabled 19/12/2014 93040 | (TomTomHOMEService) . (.TomTom.) - C:\Program Files
(x86)\TomTom HOME 2\TomTomHOMEService.exe
SR - | Auto 14/09/2015 82128 | (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program
Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
SR - | Auto 23/11/2010 203264 | (AMD External Events Utility) . (.AMD.) C:\Windows\System32\atiesrxx.exe
SR - | Auto 08/07/2015 1353720 | (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET Smart
Security\x86\ekrn.exe
SR - | Auto 11/10/2010 346168 | (HPClientSvc) . (.Hewlett-Packard Company.) - C:\Program
Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
SR - | Demand 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll
(hpqcxs08) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll
(hpqddsvc) . (.Hewlett-Packard Co..) - C:\Windows\System32\svchost.exe
SR - | Auto 04/03/2011 73728 | (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program
Files (x86)\Common Files\LightScribe\LSSrvc.exe
SR - | Auto 01/02/2011 326168 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R)
Management Engine Components\LMS\LMS.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZinw12.dll (Net Driver HPZ12) . (.HewlettPackard.) - C:\Windows\System32\svchost.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\system32\HPZipm12.dll (Pml Driver HPZ12) . (.HewlettPackard.) - C:\Windows\System32\svchost.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SR - | Auto 01/02/2011 2656280 | (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R)
Management Engine Components\UNS\UNS.exe
SR - | Auto 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) .
(.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media
Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft
Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 05s
---\\ Recherche d'infection sur le Master Boot Record (MBR)(O80)
Run by Morgan et Ségo at 22/10/2015 21:15:07
~ OS 64 not supported by MBR tool
~ MBR: 0 Scanned in 00mn 00s
---\\ Recherche d'infection sur le Master Boot Record (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by Morgan et Ségo at 22/10/2015 21:15:09
********* Dump file Name *********
C:\PhysicalDisk0_MBR.bin
~ MBR: Scanned in 00mn 02s
---\\ Liste des émulateurs de CD/DVD (MBR Hook)
O42 - Logiciel: DAEMON Tools Pro - (.DT Soft Ltd.) [HKLM][64Bits] -- DAEMON Tools Pro
~ Emulateurs: Scanned in 00mn 02s
---\\ Scan Additionnel (O88)
Database Version : 13008 - (09/01/2015)
Clés trouvées (Keys found) : 3
Valeurs trouvées (Values found) : 4
Dossiers trouvés (Folders found) : 5
Fichiers trouvés (Files found) : 2
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\8461-7759-5462-8226]
=>P2P.Azureus^
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C9A6357B-25CC-4BCF-96C178736985D412}] =>Toolbar.Orange
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{B7FCA997-D0FB-4FE08AFD-255E89CF9671}] =>Toolbar.Yahoo
C:\Program Files (x86)\Vuze =>P2P.Azureus^
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitTorrent =>P2P.BitTorrent^
C:\Users\Morgan et Ségo\AppData\Roaming\Azureus =>P2P.Azureus^
C:\Users\Morgan et Ségo\AppData\Roaming\BitTorrent =>P2P.BitTorrent^
C:\Users\Morgan et Ségo\AppData\Roaming\Mozilla\Firefox\Profiles\0cc2m69k.default\Smartbar
=>Hijacker.SmartBar
[HKCU\Software\Azureus] =>P2P.Azureus^
[HKLM\Software\Wow6432Node\Azureus] =>P2P.Azureus^
~ Additionnel Scan: 444129 Items scanned in 00mn 13s
---\\ Informations complémentaires sur les modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer,
Proxy Management (R5)
~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects de
navigateur (O2)
~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer Toolbars (O3)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Applications lancées au
démarrage du système (O4)
~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.Clé de registre Shell MountPoints2
(MPSK) (O51)
~ AMI: 5 Scanned in 00mn 00s
---\\ Récapitulatif des détections trouvées sur votre station
http://www.nicolascoolman.fr/blog/ =>Toolbar.Yahoo
http://nicolascoolman.fr/hijacker-smartbar =>Hijacker.SmartBar
~ MSI: 2 link(s) detected in 00mn 00s
End of the scan (1726 lines in 01mn 15s)(18)

Rapport de ZHPDiag v2015.1.9.4

Transcription

Documents pareils

SeafLog.txt - Bloc-notes scan pour danakil

1. RASHED, R., et Chr. HOUZEL - Recherche et

Rapport de ZHPDiag v1.31.095 par Nicolas Coolman, Update du 24

Windows Product Information

Rapport de ZHPDiag v1.28.1367 par Nicolas Coolman

Web Browser - Forums CNET France

Windows 8 - CDRom non reconnu Tapez dans l`invite