cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

~ ZHPDiag v2015.12.25.196 Par Nicolas Coolman (2015/12/25)
~ Démarré par user (Administrator) (2015/12/25 17:19:35)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\user\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\user\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows VISTA, 32-bit Service Pack 2 (Build 6002)

---\\ Navigateurs Internet (2) - 0s
MFIE: Mozilla Firefox 43.0.1 (x86 fr) v43.0.1
MSIE: Internet Explorer v9.0.8112.16421

---\\ Informations sur les produits Windows (9) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows Operating System - Vista, OEM_SLP channel
System Locked Preinstallation (OEM_SLP) : OK
Windows ID Activation : OK
~ Windows Partial Key : 6CJ97
Windows License : OK
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Logiciels de protection (3) - 9s
Avast Free Antivirus v10.4.2233
Malwarebytes Anti-Malware version 2.2.0.1024
Windows Defender VISTA (Activate)

---\\ Logiciels d'optimisation (1) - 10s
CCleaner v5.10

---\\ Surveillance de Logiciels (2) - 10s
Adobe Flash Player 20 NPAPI
Adobe Reader X

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 15 Model 107 Stepping 2, AuthenticAMD
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2881.336 MB (27% free)
System Restore: Activé (Enable)
System drive C: has 72 GB () free of 139 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PC-DE-USER
~ User Name: user
~ Logged in as Administrator

---\\ Enumération des unités disques (2) - 0s
~ Drive C: has 72 GB free of 139 GB (System)
~ Drive E: has 54 GB free of 139 GB

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (24) - 3s
[MD5.D07D4C3038F3578FFCE1C0237F2A1253] - 11/04/2009 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2926592] ©
[MD5.4B555106290BD117334E9A08761C035A] - 02/11/2006 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] ©
[MD5.101BA3EA053480BB5D957EF37C06B5ED] - 21/01/2008 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [96768] ©
[MD5.E6F509BE5D637B02EF5CDE5E16EB55ED] - 12/11/2015 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [1129472] ©
[MD5.898E7C06A350D4A1A64A9EA264D55452] - 11/04/2009 - (.Microsoft Corporation - Application d'ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [314368] ©
[MD5.85E861D0B88DB2B54ACB0839654C09F7] - 02/03/2011 - (.Microsoft Corporation - DNS DLL de l'API Client.) -- C:\Windows\System32\dnsapi.dll [168448] ©
[MD5.95F5FF73B076576C41740F1A842B9B57] - 21/01/2008 - (.Microsoft Corporation - DLL client de l'API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.4A0978779958D8FE8F5849F452BCC812] - 13/10/2015 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [273408] ©
[MD5.1F05B78AB91C9075565A9D8A4B880BC4] - 11/04/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [19944] =>.Microsoft Windows®
[MD5.7ADD03E75BEB9E6DD102C3081D29840A] - 21/01/2008 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70144] ©
[MD5.6B4BFFB9BECD728097024276430DB314] - 11/04/2009 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [67072] ©
[MD5.622C41A07CA7E6DD91770F50D532CB6C] - 14/04/2011 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [75264] ©
[MD5.062452B7FFD68C8C042A6261FE8DFF4A] - 11/04/2009 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [561152] ©
[MD5.22D56C8184586B7A1F6FA60BE5F5A2BD] - 21/01/2008 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [54784] ©
[MD5.8793643A67B42CEC66490B2A0CF92D68] - 21/01/2008 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [100864] ©
[MD5.1B864548B2ACEC1C0BB29B615CC42978] - 09/01/2015 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [107008] ©
[MD5.ECD64230A59CBD93C85F1CD1CAB9F3F6] - 11/04/2009 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [185856] ©
[MD5.2C1121F2B87E9A6B12485DF53CD848C7] - 03/03/2013 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1082232] =>.Microsoft Windows®
[MD5.0FA9B5055484649D63C303FE404E5F4D] - 02/11/2006 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [79360] ©
[MD5.A214ADBAF4CB47DD2728859EF31F26B0] - 21/01/2008 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [76288] ©
[MD5.FBC0BACD9C3D7F6956853F64A66E252D] - 21/01/2008 - (.Microsoft Corporation - Microsoft RDP Device redirector.) -- C:\Windows\System32\drivers\rdpdr.sys [248832] ©
[MD5.7B75299A4D201D6A6533603D6914AB04] - 11/04/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [66560] ©
[MD5.EC565DFA3D9C45D8083B72DEC5B33710] - 13/10/2015 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [72192] ©
[MD5.786DB5771F05EF300390399F626BF30A] - 21/08/2012 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [224640] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (14) - 5s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: Avast Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.®
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
O23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) . (.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe ©
O23 - Service: eDataSecurity Service (eDataSecurity Service) . (.Egis Incorporated - Acer eDataSecurity Management Service.) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe =>.EGIS TECHNOLOGY INC.®
O23 - Service: Empowering Technology Service (ETService) . (.Copyright © 2007 - Acer Empowering Technology Framework Servic.) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
O23 - Service: ForceWare Intelligent Application Manager (IAM) (ForceWare Intelligent Application Manager (IAM)) . (.Copyright 2004 - app_filter Module.) - C:\Program Files\bin32\nSvcAppFlt.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company - .) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe ©
O23 - Service: (MBAMService) . (.Malwarebytes - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
O23 - Service: ForceWare IP service (nSvcIp) . (.Copyright 2002-2006 NVIDIA - NVIDIA Corporation.) - C:\Program Files\bin32\nSvcIp.exe
O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) . (.NewTech InfoSystems, Inc. - NTI Backup Now 5 BackupSvc Application.) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe =>.NewTech Infosystems, Inc®
O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (...) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 175.1.) - C:\Windows\System32\nvvsvc.exe ©
O23 - Service: TeamViewer 10 (TeamViewer) . (.TeamViewer GmbH - TeamViewer 10.) - C:\Program Files\TeamViewer\TeamViewer_Service.exe =>.TeamViewer®

---\\ Processus lancés (12) - 25s
[MD5.88426F9A9BF0AD2358C3CC4FBB1B1C62] - (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 175.1.) -- C:\Windows\System32\nvvsvc.exe [118784] [PID.980] ©
[MD5.09E6AFFAE6C0E9158BF05C7D08D0107A] - (.NewTech Infosystems, Inc. - NTI Backup Now 5 Agent service..) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe [16384] [PID.2292] ©
[MD5.20D3741680AB88269BADCDB161B36705] - (.Copyright © 2007 - Acer Empowering Technology Framework Servic.) -- C:\Program Files\Acer\Empowering Technology\Service\ETService.exe [24576] [PID.2372]
[MD5.793FF718477345CD5D232C50BED1E452] - (.Hewlett-Packard Company - .) -- C:\Program Files\Common Files\LightScribe\LSSrvc.exe [61440] [PID.2448] ©
[MD5.DF1C10A75DF7E50195FC417F88A33227] - (...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [131072] [PID.2652]
[MD5.283195C5301EADBCF56DEE637573ED12] - (.Copyright 2004 - app_filter Module.) -- C:\Program Files\bin32\nSvcAppFlt.exe [598016] [PID.2912]
[MD5.3C7BD1EC817D300A8826D49C406D5894] - (.Copyright 2002-2006 NVIDIA - NVIDIA Corporation.) -- C:\Program Files\bin32\nSvcIp.exe [163840] [PID.3040]
[MD5.151B2D097C7182898387994CEA34890B] - (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe [5369856] [PID.2768] ©
[MD5.5673EC459FA2F335A05594249609BB2B] - (...) -- C:\Program Files\Acer\Empowering Technology\SysMonitor.exe [319488] [PID.3000]
[MD5.2DFA4AD2E8693A6ECA601CA827F7EA12] - (.Copyright © 2007 - Acer Empowering Technology Framework Launch.) -- C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe [319488] [PID.3348]
[MD5.96D934A9167925D6F1EAAC61DD0047EC] - (.Panasonic Corporation - AutoStartService.) -- C:\Program Files\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe [230576] [PID.3744] {417B9EEF284FA8577E5BC3B3571B5B9D} ©
[MD5.EF7229D381AE39A88A88D2AFB40ACCD7] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\user\ZHPDiag3.exe [2041856] [PID.5836] ©

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (5) - 2s
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\nppdf32.FRA
P2 - EXT: (...) -- C:\Program Files\Mozilla Firefox\Plugins\QuickTimePlugin.class
P2 - EXT FILE: (...) -- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\c6yrzfoe.default-1442043120891\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_20_0_0_235.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (9) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (6) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local;*.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: VMApplet=rundll32 shell32,Control_RunDLL "sysdm.cpl"

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (20)

---\\ Browser Helper Object de navigateur (BHO) (5) - 1s
O2 - BHO: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} . (.CANON INC. - Easy-WebPrint EX.) -- C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll =>.Canon Inc.®
O2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} . (.Egis - ActiveToolBand Module.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll =>.EGIS TECHNOLOGY INC.®
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll =>.AVAST Software a.s.®
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jp2ssv.dll =>.Sun Microsystems, Inc.®

---\\ Applications lancées au démarrage du système (30) - 2s
O4 - HKLM\..\Run: [Windows Defender] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe =>.Microsoft Windows®
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - HD Audio Control Panel.) -- C:\Windows\RtHDVCpl.exe ©
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] . (...) -- C:\Program Files\Acer\Empowering Technology\SysMonitor.exe
O4 - HKLM\..\Run: [EmpoweringTechnology] . (.Copyright © 2007 - Acer Empowering Technology Framework Launch.) -- C:\Program Files\Acer\Empowering Technology\Framework.Launcher.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] . (.Egis Incorporated - Acer eDataSecurity Management Loader.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe =>.EGIS TECHNOLOGY INC.®
O4 - HKLM\..\Run: [BkupTray] . (.Copyright (c)2005-2007, NewTech Infosystems, Inc. All - NTI Backup Now 5 Tray Module.) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe =>.NewTech Infosystems, Inc®
O4 - HKLM\..\Run: [NvCplDaemon] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\RUNDLL32.EXE ©
O4 - HKLM\..\Run: [NvMediaCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\RUNDLL32.EXE ©
O4 - HKLM\..\Run: [eRecoveryService] (Orphean)
O4 - HKLM\..\Run: [WarReg_PopUp] . (.Acer Incorporated - WR_PopUp.) -- C:\Program Files\Acer\WR_PopUp\WarReg_PopUp.exe ©
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Sun Microsystems, Inc. - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre6\bin\jusched.exe =>.Sun Microsystems, Inc.®
O4 - HKLM\..\Run: [AppleSyncNotifier] . (.Apple Inc. - AppleSyncNotifier.) -- C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe =>.Apple Inc.®
O4 - HKLM\..\Run: [CanonMyPrinter] . (.CANON INC. - Canon My Printer.) -- C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE =>.Canon Inc.®
O4 - HKLM\..\Run: [CanonSolutionMenu] . (.CANON INC. - CNSLMAIN.) -- C:\Program Files\Canon\SolutionMenu\CNSLMAIN.EXE =>.Canon Inc.®
O4 - HKLM\..\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe =>.AVAST Software a.s.®
O4 - HKLM\..\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files\QuickTime\QTTask.exe ©
O4 - HKCU\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKCU\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe ©
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd®
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - HKCU\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\wmpnscfg.exe ©
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-20\..\Run: [WindowsWelcomeCenter] . (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe ©
O4 - HKUS\S-1-5-21-1315508788-926914473-269510555-1000\..\Run: [Sidebar] . (.Microsoft Corporation - Volet Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-21-1315508788-926914473-269510555-1000\..\Run: [ehTray.exe] . (.Microsoft Corporation - Media Center Tray Applet.) -- C:\Windows\ehome\ehtray.exe ©
O4 - HKUS\S-1-5-21-1315508788-926914473-269510555-1000\..\Run: [DAEMON Tools Lite] . (.DT Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd®
O4 - HKUS\S-1-5-21-1315508788-926914473-269510555-1000\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - HKUS\S-1-5-21-1315508788-926914473-269510555-1000\..\Run: [WMPNSCFG] . (.Microsoft Corporation - Application de configuration du service Par.) -- C:\Program Files\Windows Media Player\wmpnscfg.exe ©

---\\ Modification Domaine/Adresses DNS (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0D9E239F-8E1F-490E-8A2E-36C9885FFF89}: DhcpNameServer = 192.168.1.1 192.168.1.1

---\\ Protocole additionnel (26) - 1s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation®
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll ©
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation®
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Logiciels installés (64) - 16s
O42 - Logiciel: 7-Zip 9.22beta - (...) [HKLM] -- 7-Zip
O42 - Logiciel: Acer eDataSecurity Management - (.Egis Inc..) [HKLM] -- {A5633652-3795-4829-BB0B-644F0279E279} =>.EGIS TECHNOLOGY INC.®
O42 - Logiciel: Acer Empowering Technology - (.Acer Incorporated.) [HKLM] -- {8F1B6239-FEA0-450A-A950-B05276CE177C} =>.Acer Incorporated®
O42 - Logiciel: Acer eRecovery Management - (.Acer Incorporated.) [HKLM] -- {7F811A54-5A09-4579-90E1-C93498E230D9} =>.Acer Incorporated®
O42 - Logiciel: Acer ScreenSaver - (.Acer Incorporated.) [HKLM] -- {79DD56FC-DB8B-47F5-9C80-78B62E05F9BC} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {31B9D218-FED2-4C6C-B19F-7294FFC130B0} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Flash Player 10 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 20 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Reader X (10.1.16) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001} ©
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824161310} ©
O42 - Logiciel: ALTools Update - (.ESTsoft Corp..) [HKLM] -- ALUpdate_is1 ©
O42 - Logiciel: ALZip - (.ESTsoft Corp..) [HKLM] -- ALZip_is1 ©
O42 - Logiciel: Apple Application Support - (.Apple Inc..) [HKLM] -- {2DC94AFD-A6E2-4AB4-9132-4A3F8E07B386} ©
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} ©
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM] -- Avast =>.AVAST Software a.s.®
O42 - Logiciel: avast! Antivirus v4.8 - (.Alwil Software.) [HKLM] -- avast! ©
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM] -- {2A981294-F14C-4F0F-9627-D793270922F8} ©
O42 - Logiciel: Canon Easy-WebPrint EX - (...) [HKLM] -- Easy-WebPrint EX =>.Canon Inc.®
O42 - Logiciel: Canon MP Navigator EX 3.0 - (...) [HKLM] -- MP Navigator EX 3.0 =>.Canon Inc.®
O42 - Logiciel: Canon MP550 series MP Drivers - (...) [HKLM] -- {1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series =>.Canon Inc.®
O42 - Logiciel: Canon Utilities Easy-PhotoPrint EX - (...) [HKLM] -- Easy-PhotoPrint EX =>.Canon Inc.®
O42 - Logiciel: Canon Utilities My Printer - (...) [HKLM] -- CanonMyPrinter =>.Canon Inc.®
O42 - Logiciel: Canon Utilities Solution Menu - (...) [HKLM] -- CanonSolutionMenu =>.Canon Inc.®
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner =>.Piriform Ltd®
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} ©
O42 - Logiciel: Enregistrement utilisateur de Canon MP550 series - (...) [HKLM] -- Enregistrement utilisateur de Canon MP550 series =>.Canon Inc.®
O42 - Logiciel: eSobi v2 - (.esobi Inc..) [HKLM] -- {15D967B5-A4BE-42AE-9E84-64CD062B25AA} ©
O42 - Logiciel: eSobi v2 - (.esobi Inc..) [HKLM] -- InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA} ©
O42 - Logiciel: Java(TM) 6 Update 17 - (.Sun Microsystems, Inc..) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83216016FF} ©
O42 - Logiciel: LightScribe 1.4.142.1 - (.http://www.lightscribe.com.) [HKLM] -- {CE386A4E-D0DA-4208-8235-BCE43275C694} ©
O42 - Logiciel: Malwarebytes Anti-Malware version 2.2.0.1024 - (.Malwarebytes.) [HKLM] -- Malwarebytes Anti-Malware_is1 ©
O42 - Logiciel: Micromega Software System EasyScan - (...) [HKLM] -- Micromega Software EasyScan
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU] -- OneDriveSetup.exe =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM] -- {6B1CB38D-E2E4-4a30-933D-EFDEBA76AD9C} ©
O42 - Logiciel: MobileMe Control Panel - (.Apple Inc..) [HKLM] -- {3AC54383-31D1-4907-961B-B12CBB1D0AE8} ©
O42 - Logiciel: Mozilla Firefox 43.0.1 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 43.0.1 (x86 fr) =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} ©
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} ©
O42 - Logiciel: myCANAL - (.player.canalplus.fr.) [HKCU] -- 167068493.player.canalplus.fr =>.Microsoft Corporation®
O42 - Logiciel: NTI Backup Now 5 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403} ©
O42 - Logiciel: NTI Backup Now Standard - (.NewTech Infosystems.) [HKLM] -- {12EFA1A4-AC3B-443C-8143-237EDE760403} ©
O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM] -- {2413930C-8309-47A6-BC61-5EF27A4222BC} ©
O42 - Logiciel: NTI Media Maker 8 - (.NewTech Infosystems.) [HKLM] -- InstallShield_{2413930C-8309-47A6-BC61-5EF27A4222BC} ©
O42 - Logiciel: NVIDIA Drivers - (...) [HKLM] -- NVIDIA Drivers
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- {7CFA46E3-CC2F-4355-82AE-6012DC3633FD} ©
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- InstallShield_{7CFA46E3-CC2F-4355-82AE-6012DC3633FD} ©
O42 - Logiciel: OGA Notifier 2.0.0048.0 - (.Microsoft Corporation.) [HKLM] -- {B2544A03-10D0-4E5E-BA69-0362FFC20D18} ©
O42 - Logiciel: OpenOffice 4.1.1 - (.Apache Software Foundation.) [HKLM] -- {121727D5-FDF3-4723-BA57-EB383440ED72} ©
O42 - Logiciel: PHOTOfunSTUDIO 8.3 PE - (.Panasonic Corporation.) [HKLM] -- {5F07A881-4A7F-4F16-AF9E-F2202B504A91} {417B9EEF284FA8577E5BC3B3571B5B9D} ©
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM] -- {627FFC10-CE0A-497F-BA2B-208CAC638010} ©
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} ©
O42 - Logiciel: Segoe UI - (.Microsoft Corp.) [HKLM] -- {5DD4FCBD-A3C1-4155-9E17-4161C70AAABA} ©
O42 - Logiciel: Spelling Dictionaries Support For Adobe Reader 8 - (.Adobe Systems.) [HKLM] -- {AC76BA86-7AD7-5464-3428-800000000003} ©
O42 - Logiciel: TeamViewer 10 - (.TeamViewer.) [HKLM] -- TeamViewer =>.TeamViewer®
O42 - Logiciel: Turbo Pizza - (.Oberon Media.) [HKLM] -- {82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113009953} ©
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM] -- VLC media player ©
O42 - Logiciel: Windows Media Player Firefox Plugin - (.Microsoft Corp.) [HKLM] -- {69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4} ©
O42 - Logiciel: WinZip 12.1 - (.WinZip Computing, S.L. .) [HKLM] -- {CD95F661-A5C4-44F5-A6AA-ECDD91C240B8} ©
O42 - Logiciel: Xvid 1.2.2 final uninstall - (.Xvid team (Koepi).) [HKLM] -- Xvid_is1 ©

---\\ HKCU & HKLM Software Keys (127) - 16s
HKLM\SOFTWARE\7-Zip
HKLM\SOFTWARE\Acer
HKLM\SOFTWARE\Acer Incorporated
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\ALXSoftware
HKLM\SOFTWARE\America Online
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\Apple Computer, Inc.
HKLM\SOFTWARE\Apple Inc.
HKLM\SOFTWARE\AVAST Software
HKLM\SOFTWARE\C07ft5Y
HKLM\SOFTWARE\Canon
HKLM\SOFTWARE\ChilipokerFR
HKLM\SOFTWARE\CyberLink
HKLM\SOFTWARE\DT Soft
HKLM\SOFTWARE\ej-technologies
HKLM\SOFTWARE\ESTsoft
HKLM\SOFTWARE\FiveSphere
HKLM\SOFTWARE\Full Tilt Poker
HKLM\SOFTWARE\GEAR Software
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\Hauppauge
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\LightScribe
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\magnet
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\MazFX
HKLM\SOFTWARE\Micromega Software System
HKLM\SOFTWARE\MimarSinan
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\Mozilla Firefox 3.0.4
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\muvee Technologies
HKLM\SOFTWARE\NewTech Infosystems
HKLM\SOFTWARE\Nico Mak Computing
HKLM\SOFTWARE\Notepad
HKLM\SOFTWARE\NVIDIA Corporation
HKLM\SOFTWARE\Oberon Media
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\OpenOffice
HKLM\SOFTWARE\Panasonic
HKLM\SOFTWARE\Piriform
HKLM\SOFTWARE\PostgreSQL
HKLM\SOFTWARE\PTECH
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RVG Software
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\SolidStateNetworks
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\SRS Labs
HKLM\SOFTWARE\TeamViewer
HKLM\SOFTWARE\Trolltech
HKLM\SOFTWARE\VideoLAN
HKLM\SOFTWARE\Waves Audio
HKLM\SOFTWARE\Windows
HKLM\SOFTWARE\WOW6432Node
HKLM\SOFTWARE\XHEO INC
HKLM\SOFTWARE\Yahoo =>.Yahoo!
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\Ace Poker Solutions
HKCU\SOFTWARE\Acer
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\AVAST Software
HKCU\SOFTWARE\Canon
HKCU\SOFTWARE\CanonBJ
HKCU\SOFTWARE\Casino
HKCU\SOFTWARE\ChilipokerFR
HKCU\SOFTWARE\CocoonSoftware
HKCU\SOFTWARE\DT Soft
HKCU\SOFTWARE\EasyBits
HKCU\SOFTWARE\ej-technologies
HKCU\SOFTWARE\ESTsoft
HKCU\SOFTWARE\FatBet
HKCU\SOFTWARE\freeplayer.org
HKCU\SOFTWARE\Full Tilt Poker
HKCU\SOFTWARE\Full Tilt Poker.fr
HKCU\SOFTWARE\GNU
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\HoldemManager
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\kde.org
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\LuckyJeux
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\MGS
HKCU\SOFTWARE\Micromega Software System
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\Nico Mak Computing
HKCU\SOFTWARE\NoiQpoker
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OpenOffice
HKCU\SOFTWARE\Panasonic
HKCU\SOFTWARE\Partouche
HKCU\SOFTWARE\PartyFrance =>Casino.OnlineGames
HKCU\SOFTWARE\PartyGaming =>Casino.OnlineGames
HKCU\SOFTWARE\PatchPoker
HKCU\SOFTWARE\PC SOFT
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\PokerStove
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\VB and VBA Program Settings
HKCU\SOFTWARE\WinZip Computing
HKCU\SOFTWARE\XHEO INC
HKCU\SOFTWARE\Yahoo =>.Yahoo!
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\Canon
HKCU\SOFTWARE\AppDataLow\Software\Yahoo

---\\ Contenu des dossiers Programmes (248) - 54s
O43 - CFD: 06/11/2009 - [] D -- C:\Program Files\7-Zip
O43 - CFD: 23/06/2009 - [] D -- C:\Program Files\Acer
O43 - CFD: 09/04/2011 - [0] D -- C:\Program Files\Acer Arcade Live
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\Acer GameZone
O43 - CFD: 22/06/2009 - [] D -- C:\Program Files\Acer Incorporated
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\Adobe =>.Adobe Systems, Incorporated®
O43 - CFD: 29/09/2015 - [] D -- C:\Program Files\Apple Software Update =>.Apple Inc.®
O43 - CFD: 26/12/2014 - [] D -- C:\Program Files\AVAST Software =>.AVAST Software a.s.®
O43 - CFD: 01/12/2009 - [] D -- C:\Program Files\B2BPOKER
O43 - CFD: 10/10/2009 - [] D -- C:\Program Files\Betfair =>.Microsoft Corporation®
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\bin32
O43 - CFD: 23/03/2011 - [] D -- C:\Program Files\Bonjour =>.Apple Inc.®
O43 - CFD: 30/08/2010 - [] D -- C:\Program Files\Canon =>.Canon Inc.®
O43 - CFD: 30/08/2010 - [] HD -- C:\Program Files\CanonBJ
O43 - CFD: 04/10/2015 - [] D -- C:\Program Files\CCleaner =>.Piriform Ltd®
O43 - CFD: 05/04/2015 - [] D -- C:\Program Files\Common Files
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\CyberLink
O43 - CFD: 27/10/2010 - [] D -- C:\Program Files\DAEMON Tools Lite =>.DT Soft Ltd®
O43 - CFD: 30/08/2010 - [] D -- C:\Program Files\EasyScan
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\eSobi {6069D69533CBC44260FAF998535FA497}
O43 - CFD: 06/11/2009 - [] D -- C:\Program Files\ESTsoft {211670CBFB606D88A36BC9831D019ABD}
O43 - CFD: 29/10/2010 - [] D -- C:\Program Files\FatBet
O43 - CFD: 03/08/2009 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 27/10/2010 - [] D -- C:\Program Files\Firaxis Games
O43 - CFD: 05/04/2015 - [] HD -- C:\Program Files\InstallShield Installation Information =>.Macrovision Corporation®
O43 - CFD: 10/12/2015 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\iTunes
O43 - CFD: 19/12/2009 - [] D -- C:\Program Files\Java =>.Sun Microsystems, Inc.®
O43 - CFD: 09/05/2008 - [0] D -- C:\Program Files\log
O43 - CFD: 25/12/2015 - [] D -- C:\Program Files\Malwarebytes Anti-Malware =>.Malwarebytes Corporation®
O43 - CFD: 27/09/2009 - [] D -- C:\Program Files\MiaouMedia
O43 - CFD: 27/12/2014 - [] D -- C:\Program Files\Microsoft =>.Microsoft Corporation®
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 27/12/2014 - [] D -- C:\Program Files\Microsoft Office =>.Microsoft Corporation®
O43 - CFD: 26/12/2014 - [] D -- C:\Program Files\Microsoft OneDrive =>.Microsoft Corporation®
O43 - CFD: 10/12/2015 - [] D -- C:\Program Files\Microsoft Silverlight =>.Microsoft Corporation®
O43 - CFD: 05/04/2015 - [] D -- C:\Program Files\Microsoft SQL Server Compact Edition
O43 - CFD: 05/04/2015 - [] D -- C:\Program Files\Microsoft Synchronization Services
O43 - CFD: 17/01/2010 - [] D -- C:\Program Files\Microsoft Works
O43 - CFD: 25/06/2010 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 12/08/2010 - [] D -- C:\Program Files\Movie Maker
O43 - CFD: 22/12/2015 - [] D -- C:\Program Files\Mozilla Firefox =>.Mozilla Corporation®
O43 - CFD: 30/08/2015 - [] D -- C:\Program Files\Mozilla Firefox(8)
O43 - CFD: 22/12/2015 - [] D -- C:\Program Files\Mozilla Maintenance Service =>.Mozilla Corporation®
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 06/08/2009 - [0] D -- C:\Program Files\MSXML 4.0
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\NewTech Infosystems =>.NewTech Infosystems, Inc®
O43 - CFD: 17/03/2015 - [] D -- C:\Program Files\OpenOffice 4
O43 - CFD: 05/04/2015 - [] D -- C:\Program Files\Panasonic {417B9EEF284FA8577E5BC3B3571B5B9D}
O43 - CFD: 20/07/2011 - [] D -- C:\Program Files\PokerStars
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\PokerStars.FR
O43 - CFD: 25/09/2009 - [] D -- C:\Program Files\PostgreSQL
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\profile
O43 - CFD: 19/09/2015 - [] D -- C:\Program Files\QuickTime
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\Realtek
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 15/03/2015 - [0] D -- C:\Program Files\RelayLogistics
O43 - CFD: 23/09/2009 - [] D -- C:\Program Files\RVG Software
O43 - CFD: 06/08/2009 - [] D -- C:\Program Files\SiteAdvisor
O43 - CFD: 29/10/2010 - [] D -- C:\Program Files\Sports Interactive
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\TableNinja
O43 - CFD: 14/09/2015 - [] D -- C:\Program Files\TeamViewer =>.TeamViewer®
O43 - CFD: 02/11/2006 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 28/05/2010 - [] D -- C:\Program Files\VideoLAN
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\Vuze {28226C88B085FFF18FF1981B84A844C0}
O43 - CFD: 12/11/2009 - [] D -- C:\Program Files\Windows Calendar
O43 - CFD: 12/11/2009 - [] D -- C:\Program Files\Windows Collaboration
O43 - CFD: 12/11/2009 - [] D -- C:\Program Files\Windows Defender =>.Microsoft Windows®
O43 - CFD: 06/12/2015 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 27/12/2014 - [] D -- C:\Program Files\Windows Live =>.Microsoft Corporation®
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 11/06/2015 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 03/08/2009 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 12/11/2009 - [] D -- C:\Program Files\Windows Photo Gallery
O43 - CFD: 18/11/2009 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 12/11/2009 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 17/09/2009 - [] D -- C:\Program Files\WinZip {2091EC663B9B070DEF16CA9A237B705B}
O43 - CFD: 28/05/2010 - [] D -- C:\Program Files\Wizards of the Coast
O43 - CFD: 24/12/2009 - [] D -- C:\Program Files\Xvid
O43 - CFD: 25/12/2014 - [0] D -- C:\Program Files\Yahoo!
O43 - CFD: 29/10/2010 - [] HD -- C:\Program Files\Zero G Registry
O43 - CFD: 06/11/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
O43 - CFD: 24/02/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
O43 - CFD: 25/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer GameZone
O43 - CFD: 09/05/2008 - [] AD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AcerSystem
O43 - CFD: 24/02/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 26/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
O43 - CFD: 07/12/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Antivirus
O43 - CFD: 30/08/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series
O43 - CFD: 30/08/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MP550 series Manual
O43 - CFD: 30/08/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
O43 - CFD: 30/08/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enregistrement utilisateur de Canon MP550 series
O43 - CFD: 09/05/2008 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eSobi v2
O43 - CFD: 06/11/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESTsoft
O43 - CFD: 21/01/2008 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Extras and Upgrades
O43 - CFD: 19/01/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FatBet
O43 - CFD: 16/08/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FpTest
O43 - CFD: 25/12/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 16/08/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomePlayer
O43 - CFD: 02/11/2006 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 25/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 16/09/2010 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Live Add-in
O43 - CFD: 10/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 10/12/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Backup Now 5
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NTI Media Maker 8
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
O43 - CFD: 17/03/2015 - [] SD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
O43 - CFD: 05/04/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panasonic
O43 - CFD: 19/09/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 05/04/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 02/11/2006 - [] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 01/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 17/09/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
O43 - CFD: 24/12/2009 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid
O43 - CFD: 24/03/2015 - [0] D -- C:\ProgramData\1803528019
O43 - CFD: 28/12/2014 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 17/09/2009 - [] D -- C:\ProgramData\Apple
O43 - CFD: 17/09/2009 - [] D -- C:\ProgramData\Apple Computer
O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 26/12/2014 - [] D -- C:\ProgramData\AVAST Software
O43 - CFD: 29/09/2009 - [] D -- C:\ProgramData\Azureus
O43 - CFD: 16/09/2009 - [] D -- C:\ProgramData\Boss Media
O43 - CFD: 03/08/2009 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 11/09/2009 - [] HD -- C:\ProgramData\CanonBJ
O43 - CFD: 17/08/2011 - [] HD -- C:\ProgramData\CanonIJEGV
O43 - CFD: 30/08/2010 - [] HD -- C:\ProgramData\CanonIJScan
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 27/10/2010 - [] D -- C:\ProgramData\DAEMON Tools Lite
O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 25/12/2014 - [0] D -- C:\ProgramData\eMule
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\eSobi
O43 - CFD: 06/11/2009 - [] D -- C:\ProgramData\Estsoft
O43 - CFD: 19/01/2010 - [] D -- C:\ProgramData\FatBetPoker
O43 - CFD: 03/08/2009 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\FloodLightGames
O43 - CFD: 17/09/2009 - [] D -- C:\ProgramData\Google
O43 - CFD: 25/12/2015 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 07/12/2009 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 03/08/2009 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 27/12/2014 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 10/12/2015 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 26/12/2014 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 03/08/2009 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 25/12/2014 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 25/12/2014 - [] D -- C:\ProgramData\NVIDIA
O43 - CFD: 13/10/2009 - [] D -- C:\ProgramData\Office Genuine Advantage
O43 - CFD: 13/04/2015 - [] D -- C:\ProgramData\Panasonic
O43 - CFD: 13/03/2011 - [] D -- C:\ProgramData\QuickMediaConverter
O43 - CFD: 05/08/2009 - [] D -- C:\ProgramData\SiteAdvisor
O43 - CFD: 24/03/2015 - [] D -- C:\ProgramData\Skype
O43 - CFD: 18/10/2011 - [] D -- C:\ProgramData\Skype Extras
O43 - CFD: 29/10/2010 - [] D -- C:\ProgramData\Sports Interactive
O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 02/11/2006 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 12/06/2015 - [] D -- C:\ProgramData\WindowsSearch
O43 - CFD: 17/09/2009 - [] D -- C:\ProgramData\WinZip
O43 - CFD: 15/12/2009 - [] D -- C:\ProgramData\XHEO INC
O43 - CFD: 09/05/2008 - [] D -- C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
O43 - CFD: 20/09/2010 - [] D -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
O43 - CFD: 17/09/2009 - [] D -- C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 19/09/2015 - [] D -- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\Common Files\Apple
O43 - CFD: 30/08/2010 - [] D -- C:\Program Files\Common Files\CANON
O43 - CFD: 26/12/2014 - [] D -- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 09/04/2011 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\Common Files\LightScribe
O43 - CFD: 27/12/2014 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 09/05/2008 - [] D -- C:\Program Files\Common Files\muvee Technologies
O43 - CFD: 05/04/2015 - [] D -- C:\Program Files\Common Files\Panasonic
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 02/11/2006 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 25/12/2014 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 05/08/2009 - [] D -- C:\Program Files\Common Files\Windows Live
O43 - CFD: 09/05/2008 - [] D -- C:\Users\user\AppData\Roaming\Acer GameZone Console
O43 - CFD: 25/12/2014 - [] D -- C:\Users\user\AppData\Roaming\Adobe
O43 - CFD: 28/05/2010 - [] D -- C:\Users\user\AppData\Roaming\Apple Computer
O43 - CFD: 26/12/2014 - [] D -- C:\Users\user\AppData\Roaming\AVAST Software
O43 - CFD: 04/10/2015 - [] D -- C:\Users\user\AppData\Roaming\Azureus
O43 - CFD: 30/08/2010 - [] D -- C:\Users\user\AppData\Roaming\Canon
O43 - CFD: 13/03/2011 - [] D -- C:\Users\user\AppData\Roaming\CocoonSoftware
O43 - CFD: 04/10/2015 - [] D -- C:\Users\user\AppData\Roaming\DAEMON Tools Lite
O43 - CFD: 25/12/2014 - [0] D -- C:\Users\user\AppData\Roaming\EncryptStick
O43 - CFD: 06/11/2009 - [] D -- C:\Users\user\AppData\Roaming\ESTsoft
O43 - CFD: 16/08/2010 - [] D -- C:\Users\user\AppData\Roaming\FileZilla
O43 - CFD: 20/02/2011 - [] D -- C:\Users\user\AppData\Roaming\fr.barrierepoker.air.D043989C8F5E91300BF71855036B28F854BB8613.1
O43 - CFD: 27/04/2011 - [] D -- C:\Users\user\AppData\Roaming\HEM Data
O43 - CFD: 18/10/2011 - [] D -- C:\Users\user\AppData\Roaming\HoldemManager
O43 - CFD: 03/08/2009 - [] D -- C:\Users\user\AppData\Roaming\Identities
O43 - CFD: 05/04/2015 - [] D -- C:\Users\user\AppData\Roaming\InstallShield
O43 - CFD: 03/08/2009 - [] D -- C:\Users\user\AppData\Roaming\Macromedia
O43 - CFD: 02/11/2006 - [0] D -- C:\Users\user\AppData\Roaming\Media Center Programs
O43 - CFD: 12/04/2011 - [] D -- C:\Users\user\AppData\Roaming\Microgaming
O43 - CFD: 14/12/2015 - [] SD -- C:\Users\user\AppData\Roaming\Microsoft
O43 - CFD: 25/12/2014 - [] D -- C:\Users\user\AppData\Roaming\Mozilla
O43 - CFD: 04/10/2010 - [] D -- C:\Users\user\AppData\Roaming\Mozilla-Cache
O43 - CFD: 29/03/2011 - [0] D -- C:\Users\user\AppData\Roaming\My Games
O43 - CFD: 17/03/2015 - [] D -- C:\Users\user\AppData\Roaming\OpenOffice
O43 - CFD: 16/08/2010 - [] D -- C:\Users\user\AppData\Roaming\Partouche
O43 - CFD: 24/03/2015 - [] D -- C:\Users\user\AppData\Roaming\Skype
O43 - CFD: 18/10/2011 - [] D -- C:\Users\user\AppData\Roaming\skypePM
O43 - CFD: 29/10/2010 - [] D -- C:\Users\user\AppData\Roaming\Sports Interactive
O43 - CFD: 22/12/2015 - [] D -- C:\Users\user\AppData\Roaming\vlc
O43 - CFD: 21/09/2010 - [] D -- C:\Users\user\AppData\Roaming\wam.04351C371E530C3762CBA45FA283ED972DCDEFB6.1
O43 - CFD: 17/11/2009 - [] D -- C:\Users\user\AppData\Roaming\Wizards of the Coast
O43 - CFD: 25/12/2015 - [0] D -- C:\Users\user\AppData\Roaming\Yahoo!
O43 - CFD: 25/12/2015 - [] D -- C:\Users\user\AppData\Roaming\ZHP
O43 - CFD: 02/07/2015 - [] D -- C:\Users\user\AppData\Local\Adobe
O43 - CFD: 17/09/2009 - [] D -- C:\Users\user\AppData\Local\Apple
O43 - CFD: 28/05/2010 - [] D -- C:\Users\user\AppData\Local\Apple Computer
O43 - CFD: 03/08/2009 - [0] SHD -- C:\Users\user\AppData\Local\Application Data
O43 - CFD: 16/09/2009 - [] D -- C:\Users\user\AppData\Local\Boss Media
O43 - CFD: 15/08/2010 - [] D -- C:\Users\user\AppData\Local\cache
O43 - CFD: 25/09/2015 - [] D -- C:\Users\user\AppData\Local\Canal.MyCanal
O43 - CFD: 10/10/2009 - [] D -- C:\Users\user\AppData\Local\Downloaded Installations
O43 - CFD: 25/12/2014 - [] D -- C:\Users\user\AppData\Local\eMule
O43 - CFD: 16/08/2010 - [] D -- C:\Users\user\AppData\Local\FreeMi
O43 - CFD: 14/08/2010 - [] D -- C:\Users\user\AppData\Local\FullTiltPoker
O43 - CFD: 27/02/2011 - [] D -- C:\Users\user\AppData\Local\FullTiltPoker.fr
O43 - CFD: 28/12/2009 - [] D -- C:\Users\user\AppData\Local\Google
O43 - CFD: 03/08/2009 - [0] SHD -- C:\Users\user\AppData\Local\Historique
O43 - CFD: 25/07/2010 - [] D -- C:\Users\user\AppData\Local\In The Money
O43 - CFD: 23/09/2009 - [] D -- C:\Users\user\AppData\Local\IsolatedStorage
O43 - CFD: 25/12/2014 - [] D -- C:\Users\user\AppData\Local\Macromedia
O43 - CFD: 14/12/2015 - [] D -- C:\Users\user\AppData\Local\Microsoft
O43 - CFD: 30/12/2014 - [] D -- C:\Users\user\AppData\Local\Microsoft Help
O43 - CFD: 10/08/2009 - [] D -- C:\Users\user\AppData\Local\Mozilla
O43 - CFD: 29/05/2010 - [] D -- C:\Users\user\AppData\Local\Neuf
O43 - CFD: 20/07/2011 - [] D -- C:\Users\user\AppData\Local\P5
O43 - CFD: 05/04/2015 - [] D -- C:\Users\user\AppData\Local\Panasonic
O43 - CFD: 20/07/2011 - [] D -- C:\Users\user\AppData\Local\PokerStars
O43 - CFD: 25/12/2014 - [] D -- C:\Users\user\AppData\Local\PokerStars.FR
O43 - CFD: 03/08/2009 - [] D -- C:\Users\user\AppData\Local\PowerCinema
O43 - CFD: 24/03/2015 - [] D -- C:\Users\user\AppData\Local\Skype
O43 - CFD: 25/12/2015 - [] D -- C:\Users\user\AppData\Local\Temp
O43 - CFD: 03/08/2009 - [0] SHD -- C:\Users\user\AppData\Local\Temporary Internet Files
O43 - CFD: 05/08/2009 - [] D -- C:\Users\user\AppData\Local\VirtualStore
O43 - CFD: 13/03/2011 - [] D -- C:\Users\user\AppData\Local\WDSetup
O43 - CFD: 08/08/2015 - [] D -- C:\Users\user\AppData\Local\Windows Live
O43 - CFD: 23/09/2009 - [] D -- C:\Users\user\AppData\Local\Xenocode
O43 - CFD: 25/12/2014 - [] D -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 14/12/2015 - [] RD -- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ Derniers fichiers créés dans Windows Prefetcher (1) - 11s
O45 - LFCP:[MD5.59A2A74B58AE413F80EEC266F084F023] 23/12/2015 A -- C:\Windows\Prefetch\FILEOPENER.EXE-2764257F.pf =>Adware.InstallCore

---\\ ShellIconOverlayIdentifiers (SIOI) (6) - 0s
O106 - SIOI: UpToDateOverlayHandler Class [ SkyDrive1] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\user\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512_2\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: SyncingOverlayHandler Class [ SkyDrive2] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\user\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512_2\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: ErrorOverlayHandler Class [ SkyDrive3] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\user\AppData\Local\Microsoft\SkyDrive\17.0.4041.0512_2\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: avast [00avast] - {472083B0-C522-11CF-8763-00608CC02F24}. (.AVAST Software - avast! Shell Extension.) -- C:\Program Files\AVAST Software\Avast\ashShell.dll =>.AVAST Software a.s.®
O106 - SIOI: DragDropProtect Class [egisPSDP] - {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA}. (.Egis Incorporated - Acer eDataSecurity Management PSD DragDrop.) -- C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\PSDProtect.dll =>.EGIS TECHNOLOGY INC.®
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - Extension d'environnement du périphérique d.) -- C:\Windows\System32\EhStorShell.dll ©

---\\ Liste des pilotes du système (87) - 42s
O58 - SDL:2008/01/21 03:23:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422968] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:25 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [300600] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:26 A . (.Adaptec, Inc. - Adaptec LH Ultra160 Driver (x86).) -- C:\Windows\System32\drivers\adpu160m.sys [101432] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:27 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [149560] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:00 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [17464] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:23 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [79416] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:24 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [79928] =>.Microsoft Windows®
O58 - SDL:2015/09/24 17:33:21 A . (.AVAST Software - avast! HWID.) -- C:\Windows\System32\drivers\aswHwid.sys [24016] =>.AVAST Software a.s.®
O58 - SDL:2015/09/24 17:33:21 A . (.AVAST Software - avast! File System Minifilter for Windows 2.) -- C:\Windows\System32\drivers\aswMonFlt.sys [76000] =>.AVAST Software a.s.®
O58 - SDL:2015/09/24 17:33:20 A . (.AVAST Software - avast! TDI Redirect Driver.) -- C:\Windows\System32\drivers\aswRdr.sys [55200] =>.AVAST Software a.s.®
O58 - SDL:2015/09/24 17:33:21 A . (.AVAST Software - avast! Revert.) -- C:\Windows\System32\drivers\aswRvrt.sys [49776] =>.AVAST Software a.s.®
O58 - SDL:2015/12/05 16:53:40 A . (.AVAST Software - avast! Virtualization Driver.) -- C:\Windows\System32\drivers\aswsnx.sys [794952] =>.AVAST Software a.s.®
O58 - SDL:2015/12/05 16:53:40 A . (.AVAST Software - avast! self protection module.) -- C:\Windows\System32\drivers\aswsp.sys [435464] =>.AVAST Software a.s.®
O58 - SDL:2015/09/24 17:33:22 A . (.AVAST Software - avast! Stream Filter.) -- C:\Windows\System32\drivers\aswStmXP.sys [157888] =>.AVAST Software a.s.®
O58 - SDL:2015/09/24 17:33:22 A . (.AVAST Software - avast! TDI Filter Driver.) -- C:\Windows\System32\drivers\aswTdi.sys [57888] =>.AVAST Software a.s.®
O58 - SDL:2015/09/24 17:33:21 A . (.AVAST Software - avast! VM Monitor.) -- C:\Windows\System32\drivers\aswVmm.sys [208664] =>.AVAST Software a.s.®
O58 - SDL:2006/11/02 09:24:45 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] ©
O58 - SDL:2006/11/02 09:24:46 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] ©
O58 - SDL:2006/11/02 09:25:24 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [71808] ©
O58 - SDL:2006/11/02 09:24:44 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] ©
O58 - SDL:2006/11/02 09:24:44 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] ©
O58 - SDL:2006/11/02 09:24:47 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] ©
O58 - SDL:2008/01/21 03:23:00 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [19000] =>.Microsoft Windows®
O58 - SDL:2006/11/02 10:50:11 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [71272] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:24 A . (.Intel Corporation - Pilote désérialisé NDIS 6 de la carte Intel.) -- C:\Windows\System32\drivers\E1G60I32.sys [118784] ©
O58 - SDL:2008/01/21 03:23:22 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [342584] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:26 A . (.Hewlett-Packard Company - Smart Array Storport Driver.) -- C:\Windows\System32\drivers\HpCISSs.sys [40504] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:23 A . (.Intel Corporation - Intel Matrix Storage Manager driver (base).) -- C:\Windows\System32\drivers\iaStorV.sys [235064] =>.Microsoft Windows®
O58 - SDL:2006/11/02 10:50:17 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [41576] =>.Microsoft Windows®
O58 - SDL:2008/04/25 12:23:40 A . (.Acer, Inc. - int15.) -- C:\Windows\System32\drivers\int15.sys [15392] =>.Acer Incorporated®
O58 - SDL:2008/04/25 12:23:40 A . (.Acer, Inc. - int15.) -- C:\Windows\System32\drivers\int15_64.sys [17952] =>.Acer Incorporated®
O58 - SDL:2006/11/02 10:50:07 A . (.Integrated Technology Express, Inc. - ITE IT8211 ATA/ATAPI SCSI miniport.) -- C:\Windows\System32\drivers\iteatapi.sys [35944] =>.Microsoft Windows®
O58 - SDL:2006/11/02 10:50:09 A . (.Integrated Technology Express, Inc. - ITE IT8212 ATA RAID SCSI miniport.) -- C:\Windows\System32\drivers\iteraid.sys [35944] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:23 A . (.LSI Logic - LSI Logic Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [96312] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:25 A . (.LSI Logic - LSI Logic Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [89656] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:23 A . (.LSI Logic - LSI Logic Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [96312] =>.Microsoft Windows®
O58 - SDL:2015/10/05 09:50:04 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\mbam.sys [23256] =>.Malwarebytes Corporation®
O58 - SDL:2015/10/05 09:50:08 A . (.Malwarebytes - Malwarebytes Chameleon Protection Driver.) -- C:\Windows\System32\drivers\mbamchameleon.sys [94936] =>.Malwarebytes Corporation®
O58 - SDL:2015/12/25 17:16:00 A . (.Malwarebytes - Malwarebytes Anti-Malware.) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys [170200] =>.Malwarebytes Corporation®
O58 - SDL:2008/01/21 03:23:27 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [31288] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:27 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [386616] =>.Microsoft Windows®
O58 - SDL:2006/11/02 10:49:59 A . (.LSI Logic Corporation - MegaRAID RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\Mraid35x.sys [33384] =>.Microsoft Windows®
O58 - SDL:2015/10/05 09:50:12 A . (.Malwarebytes Corporation - Malwarebytes Web Access Control.) -- C:\Windows\System32\drivers\mwac.sys [51928] =>.Malwarebytes Corporation®
O58 - SDL:2006/11/02 10:50:19 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [45160] =>.Microsoft Windows®
O58 - SDL:2015/09/24 17:32:04 A . (.AVAST Software - avast! NG snapshot driver.) -- C:\Windows\System32\drivers\ngvss.sys [107984] =>.AVAST Software a.s.®
O58 - SDL:2008/01/30 10:52:06 A . (.NewTech Infosystems, Inc. - NTI CD-ROM Filter Driver.) -- C:\Windows\System32\drivers\NTIDrvr.sys [14848] =>.NewTech Infosystems, Inc®
O58 - SDL:2006/11/02 08:36:50 A . (.N-trig Innovative Technologies - Pilote intégré de digitalisateur de tablett.) -- C:\Windows\System32\drivers\ntrigdigi.sys [20608] ©
O58 - SDL:2008/04/22 01:49:00 A . (.NVIDIA Corporation - NVIDIA HDMI Audio Driver.) -- C:\Windows\System32\drivers\nvhda32v.sys [43552] =>.NVIDIA Corporation®
O58 - SDL:2008/04/22 01:49:00 A . (.NVIDIA Corporation - NVIDIA Compatible Windows Vista Kernel Mode.) -- C:\Windows\System32\drivers\nvlddmkm.sys [7451040] ©
O58 - SDL:2008/01/29 06:55:00 A . (.NVIDIA Corporation - NVIDIA MCP Networking Function Driver..) -- C:\Windows\System32\drivers\nvmfdx32.sys [1042464] =>.NVIDIA Corporation®
O58 - SDL:2008/01/21 03:23:21 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [102968] =>.Microsoft Windows®
O58 - SDL:2007/10/12 09:53:10 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) SMU Microcontroller Driv.) -- C:\Windows\System32\drivers\nvsmu.sys [13312] ©
O58 - SDL:2008/01/21 03:23:21 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [45112] =>.Microsoft Windows®
O58 - SDL:2008/01/25 13:02:02 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor32.sys [140832] =>.NVIDIA Corporation®
O58 - SDL:2008/03/04 22:38:42 A . (.Egis Incorporated - Acer eDataSecurity Management PSD Filter Dr.) -- C:\Windows\System32\drivers\psdfilter.sys [18992] =>.EGIS TECHNOLOGY INC.®
O58 - SDL:2008/03/04 22:38:44 A . (.Egis Incorporated - Acer eDataSecurity Management PSD Named Pip.) -- C:\Windows\System32\drivers\PSDNServ.sys [16944] =>.EGIS TECHNOLOGY INC.®
O58 - SDL:2008/03/04 22:38:44 A . (.Egis Incorporated - Acer eDataSecurity Management PSD Virtual D.) -- C:\Windows\System32\drivers\PSDVdisk.sys [60464] =>.EGIS TECHNOLOGY INC.®
O58 - SDL:2008/01/21 03:23:24 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1122360] =>.Microsoft Windows®
O58 - SDL:2006/11/02 10:50:35 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [106088] =>.Microsoft Windows®
O58 - SDL:2008/03/26 11:35:54 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [2103512] =>.Realtek Semiconductor Corp®
O58 - SDL:2006/11/02 07:37:21 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [20480] ©
O58 - SDL:2008/01/21 03:23:26 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [74808] =>.Microsoft Windows®
O58 - SDL:2010/10/27 19:29:04 A . (...) -- C:\Windows\System32\drivers\sptd.sys [691696]
O58 - SDL:2006/11/02 10:50:05 A . (.LSI Logic - LSI Logic 8XX SCSI Miniport Driver.) -- C:\Windows\System32\drivers\symc8xx.sys [35944] =>.Microsoft Windows®
O58 - SDL:2006/11/02 10:49:56 A . (.LSI Logic - LSI Logic Hi-Perf SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_hi.sys [31848] =>.Microsoft Windows®
O58 - SDL:2006/11/02 10:50:03 A . (.LSI Logic - LSI Logic Ultra160 SCSI Miniport Driver.) -- C:\Windows\System32\drivers\sym_u3.sys [34920] =>.Microsoft Windows®
O58 - SDL:2008/01/30 10:51:50 A . (.NewTech Infosystems Corporation - NTI CDROM Filter Driver.) -- C:\Windows\System32\drivers\UBHelper.sys [13824] =>.NewTech Infosystems, Inc®
O58 - SDL:2008/01/21 03:23:20 A . (.ULi Electronics Inc. - ULi SATA Controller Driver.) -- C:\Windows\System32\drivers\uliahci.sys [238648] =>.Microsoft Windows®
O58 - SDL:2006/11/02 10:50:35 A . (.Promise Technology, Inc. - Promise Ultra/Sata Series Driver for Win200.) -- C:\Windows\System32\drivers\ulsata.sys [98408] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:23 A . (.Promise Technology, Inc. - Promise SATAII150 Series Windows Drivers.) -- C:\Windows\System32\drivers\ulsata2.sys [115816] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:00 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [20024] =>.Microsoft Windows®
O58 - SDL:2008/01/21 03:23:23 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [130616] =>.Microsoft Windows®
O58 - SDL:2006/11/02 08:09:42 A . (...) -- C:\Windows\System32\ANSI.SYS [9029]
O58 - SDL:2006/11/02 08:09:45 A . (...) -- C:\Windows\System32\country.sys [27097]
O58 - SDL:2006/11/02 08:09:41 A . (...) -- C:\Windows\System32\HIMEM.SYS [4768]
O58 - SDL:2006/11/02 08:09:44 A . (...) -- C:\Windows\System32\KEY01.SYS [42809]
O58 - SDL:2006/11/02 08:09:44 A . (...) -- C:\Windows\System32\KEYBOARD.SYS [42537]
O58 - SDL:2006/11/02 08:09:29 A . (...) -- C:\Windows\System32\NTDOS.SYS [27866]
O58 - SDL:2006/11/02 08:09:35 A . (...) -- C:\Windows\System32\NTDOS404.SYS [29146]
O58 - SDL:2006/11/02 08:09:38 A . (...) -- C:\Windows\System32\NTDOS411.SYS [29370]
O58 - SDL:2006/11/02 08:09:40 A . (...) -- C:\Windows\System32\NTDOS412.SYS [29274]
O58 - SDL:2006/11/02 08:09:31 A . (...) -- C:\Windows\System32\NTDOS804.SYS [29146]
O58 - SDL:2006/11/02 08:09:20 A . (...) -- C:\Windows\System32\NTIO.SYS [33952]
O58 - SDL:2006/11/02 08:09:23 A . (...) -- C:\Windows\System32\NTIO404.SYS [34672]
O58 - SDL:2006/11/02 08:09:24 A . (...) -- C:\Windows\System32\NTIO411.SYS [35776]
O58 - SDL:2006/11/02 08:09:26 A . (...) -- C:\Windows\System32\NTIO412.SYS [35536]
O58 - SDL:2006/11/02 08:09:22 A . (...) -- C:\Windows\System32\NTIO804.SYS [34672]

---\\ Associations Shell Spawning (11) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe ©
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe ©
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe =>.Microsoft Corporation®
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft (R) Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe ©
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S
O67 - Shell Spawning: <.html> [HKCU\..\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe =>.Mozilla Corporation®

---\\ Menu de démarrage Internet (8) - 0s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe ©
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe ©
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe ©

---\\ Recherche d'infection sur les navigateurs (3) - 16s
O69 - SBI: SearchScopes [HKCU] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} [DefaultScope] - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (@ieframe.dll,-12512) - http://www.bing.com/
O69 - SBI: SearchScopes [HKLM] {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} [DefaultScope] - (Google) - http://www.google.com/

---\\ Enumère les services démarrés par Svchost (31) - 0s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [24576] ©
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [62976] ©
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] ©
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] ©
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [40448] ©
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll [125952] ©
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [576512] ©
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL [444928] ©
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\audiosrv.dll [316928] ©
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [90624] ©
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d'accès distant.) -- C:\Windows\System32\rasmans.dll [262144] ©
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [68608] ©
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [47104] ©
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l'application d'assistance à.) -- C:\Windows\System32\ipnathlp.dll [288256] ©
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [242688] ©
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes Termi.) -- C:\Windows\System32\termsrv.dll [449536] ©
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll [1933848] =>.Microsoft Windows Component Publisher®
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [758784] ©
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [247808] ©
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [200704] ©
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d'ouverture de session secon.) -- C:\Windows\System32\seclogon.dll [19968] ©
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [33280] ©
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll [111616] ©
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\System32\mmcss.dll [45056] ©
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll [153600] ©
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [57344] ©
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll [162304] ©
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll [602112] ©
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service de configuration des services Termi.) -- C:\Windows\System32\SessEnv.dll [84992] ©
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [81920] ©
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\System32\KMSVC.DLL [68096] ©

---\\ Liste des exceptions du parefeu Windows (2) - 3s
O87 - FAEL: "{EF4F573B-DB47-4635-B3BF-FEB2070B6865}" [In-None-P6-TRUE] .(...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
O87 - FAEL: "{6AEEC8E4-82E8-4C7B-A265-0761020E8073}" [In-None-P17-TRUE] .(...) -- C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (18) - 85s

SR - Auto [28/10/2015] [ 82128] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
SS - Demand [09/12/2015] [ 269504] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe =>.Adobe Systems Incorporated®
SR - Auto [24/09/2015] [ 146600] Avast Antivirus (avast! Antivirus) . (.AVAST Software.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe =>.AVAST Software a.s.®
SR - Demand [24/09/2015] [ 3219136] AvastVBox COM Service (AvastVBoxSvc) . (.Avast Software.) - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe =>.AVAST Software a.s.®
SR - Auto [07/10/2010] [ 345376] Service Bonjour (Bonjour Service) . (.Apple Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.®
SR - Auto [03/03/2008] [ 16384] NTI Backup Now 5 Agent Service (BUNAgentSvc) . (.NewTech Infosystems, Inc..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exe ©
SR - Auto [04/03/2008] [ 500784] eDataSecurity Service (eDataSecurity Service) . (.Egis Incorporated.) - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe =>.EGIS TECHNOLOGY INC.®
SR - Auto [25/04/2008] [ 24576] Empowering Technology Service (ETService) . (.Copyright © 2007.) - C:\Program Files\Acer\Empowering Technology\Service\ETService.exe
SR - Auto [29/01/2008] [ 598016] ForceWare Intelligent Application Manager (IAM) (ForceWare Intelligent Application Manager (IAM)) . (.Copyright 2004.) - C:\Program Files\bin32\nSvcAppFlt.exe
SR - Auto [17/01/2007] [ 61440] LightScribeService Direct Disc Labeling Service (LightScribeService) . (.Hewlett-Packard Company.) - C:\Program Files\Common Files\LightScribe\LSSrvc.exe ©
SS - Auto [05/10/2015] [ 1135416] (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
SS - Demand [21/12/2015] [ 147624] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe =>.Mozilla Corporation®
SR - Auto [29/01/2008] [ 163840] ForceWare IP service (nSvcIp) . (.Copyright 2002-2006 NVIDIA.) - C:\Program Files\bin32\nSvcIp.exe
SR - Auto [06/04/2008] [ 50424] NTI Backup Now 5 Backup Service (NTIBackupSvc) . (.NewTech InfoSystems, Inc..) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe =>.NewTech Infosystems, Inc®
SR - Auto [04/04/2008] [ 131072] NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) . (...) - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
SR - Auto [22/04/2008] [ 118784] NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\System32\nvvsvc.exe ©
SR - Auto [11/09/2015] [ 5702416] TeamViewer 10 (TeamViewer) . (.TeamViewer GmbH.) - C:\Program Files\TeamViewer\TeamViewer_Service.exe =>.TeamViewer®

---\\ Scan Additionnel (3) - 0s
HKCU\SOFTWARE\PartyFrance =>Casino.OnlineGames
HKCU\SOFTWARE\PartyGaming =>Casino.OnlineGames
C:\Windows\Prefetch\FILEOPENER.EXE-2764257F.pf =>Adware.InstallCore

---\\ Récapitulatif des éléments trouvés sur votre station (2) - 0s
http://www.nicolascoolman.fr/?p=4664 =>Casino.OnlineGames
http://www.nicolascoolman.fr/?p=279 =>Adware.InstallCore

~ End of the scan, 29259 items in 00h05mn47s (822)(0)

Publicité


Signaler le contenu de ce document

Publicité