Rapport de ZHPDiag v1.27.1421 par Nicolas Coolman, Update du 16/12/2010
Run by lamdjed at 2016-12-03 18:53:44
Web site : http://www.premiumorange.com/zeb-help-process/zhpdiag.html
Contact : nicolascoolman@yahoo.fr

---\\ Web Browser
MSIE: Internet Explorer v8.0.7601.17514
OPIE: Opera vStable 41.0.2353.69 (Defaut)
GCIE: Google Chrome v54.0.2840.99

---\\ System Information
Windows 7 Ultimate Edition, 32-bit Service Pack 1 (Build 7601)
Processor: x86 Family 15 Model 6 Stepping 5, GenuineIntel
Operating System: 32 Bits
Boot mode: Normal (Normal boot)
Total RAM: 2047 MB (45% free)
System drive C: has 7 GB (17%) free of 39 GB

---\\ Logged in mode
Computer Name: LAMDJED-PC
User Name: lamdjed
All Users Names: lamdjed, HomeGroupUser$, Administrateur,
Unselected Option: O1,O45,O61,O62,O65,O82
Logged in as Administrator

---\\ DOS/Devices
A:\ Floppy drive, Flash card reader, USB Key (Not Inserted)
C:\ Hard drive, Flash drive, Thumb drive (Free 7 Go of 39 Go)
D:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 39 Go)
E:\ Hard drive, Flash drive, Thumb drive (Free 39 Go of 39 Go)
F:\ Hard drive, Flash drive, Thumb drive (Free 4 Go of 32 Go)
G:\ CD-ROM drive (Not Inserted)
H:\ Floppy drive, Flash card reader, USB Key (Not Inserted)


---\\ Security Center & Tools Informations
[HKLM\SOFTWARE\Microsoft\Security Center] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UpdatesDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] UacDisableNotify: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] NoActiveDesktopChanges: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoFolderOptions: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced] Start_ShowSearch: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK


---\\ Recherche particulière de fichiers génériques
[MD5.40D777B7A95E00593EB1568C68514493] - (.Microsoft Corporation - Explorateur Windows.) (.2010-11-20 13:17:09.) -- C:\Windows\Explorer.exe [2616320]
[MD5.B5C5DCAD3899512020D135600129D665] - (.Microsoft Corporation - Application de démarrage de Windows.) (.2009-07-14 02:14:45.) -- C:\Windows\System32\Wininit.exe [96256]
[MD5.6D13E1406F50C66E2A95D97F22C47560] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.2010-11-20 13:17:54.) -- C:\Windows\System32\Winlogon.exe [286720]
[MD5.338C86357871C167A96AB976519BF59E] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.2009-07-14 02:26:15.) -- C:\Windows\System32\drivers\atapi.sys [21584]
[MD5.33C3093D09017CFE2E219F2472BFF6EB] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.2010-11-20 13:30:06.) -- C:\Windows\System32\drivers\ntfs.sys [1211264]


---\\ Processus lancés
[MD5.933E558B679914DC302005F22D8F0306] - (.SRS Labs, Inc. - SRS Audio Sandbox control panel.) -- C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe [3216664]
[MD5.56B1B54136D8EC5967728EA6242390E8] - (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe [4810520]
[MD5.65ED3F523D233634D6D83B068C6DB0DF] - (.NVIDIA Corporation - NVIDIA Settings.) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe [1821504]
[MD5.6876E47591927FBF0B679631F7C82BBC] - (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Internet Security\egui.exe [6846592]
[MD5.04E079F6AF9F84215596E22C6DF03EEC] - (.Pas de propriétaire - Pas de description.) -- C:\Users\lamdjed\Desktop\Selfishnet win 7 (1)\SelfishNetv0.2-beta_vista.exe [253952]
[MD5.3DDC1784EA5963EFBDF5D528D53820B4] - (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe [3911248]
[MD5.E9C6EF9437ECB30911488F9313AD821A] - (.Tonec Inc. - Internet Download Manager agent for click m.) -- C:\Program Files\Internet Download Manager\IEMonitor.exe [269848]
[MD5.FC2343B581874C0ABB3AC090292DF403] - (.Google Inc. - Google Chrome.) -- C:\Program Files\Google\Chrome\Application\chrome.exe [921192]
[MD5.A80C173AC5C75706BB74AE4D78F2A53D] - (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe [164864]
[MD5.806A8E35707BEA615B209001E544F0F0] - (.Nicolas Coolman - Diagnostic Tool.) -- C:\Program Files\ZHPDiag\ZHPDiag.exe [620544]


---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2)
P2 - FPN: [HKLM] [@adobe.com/AuthorwarePlayer] - (.Macromedia, Inc. - Macromedia Authorware Web Player Netscape plug-in, version 2004.) -- C:\Windows\system32\Macromed\AUTHORWA\np32asw.dll
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\Macromed\Flash\NPSWF32_23_0_0_207.dll
P2 - FPN: [HKLM] [@adobe.com/ShockwavePlayer] - (.Adobe Systems, Inc. - Adobe Shockwave for Director Netscape plug-in, version 12.2.4.194.) -- C:\Windows\system32\Adobe\Director\np32dsw_1224194.dll
P2 - FPN: [HKLM] [@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf] - (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (.not file.)
P2 - FPN: [HKLM] [@java.com/DTPlugin,version=11.11.2] - (.Oracle Corporation - NPRuntime Script Plug-in Library for Java(TM) Deploy.) -- C:\Program Files\Java\jre8\bin\dtplugin\npDeployJava1.dll
P2 - FPN: [HKLM] [@java.com/JavaPlugin,version=11.11.2] - (.Oracle Corporation - Next Generation Java Plug-in 11.11.2 for Mozilla browsers.) -- C:\Program Files\Java\jre8\bin\plugin2\npjp2.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=3] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@tools.google.com/Google Update;version=9] - (.Google Inc. - Google Update.) -- C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.3] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.2.1] - (.VideoLAN - VLC media player Web Plugin.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll
P2 - FPN: [HKLM] [Adobe Reader] - (.Adobe Systems Inc. - Adobe PDF Plug-In For Firefox and Netscape 10.1.4.) -- C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
M0 - MFSP: prefs.js [lamdjed - ag0ihun1.default] http://www.msn.com/?pc=SK2M&ocid=SK2MDHP&osmkt=fr-fr
M2 - MFEP: prefs.js [lamdjed - ag0ihun1.default\bingsearch.full@microsoft.com] [] Bing Search v (.Microsoft Corporation.)
M2 - MFEP: prefs.js [lamdjed - ag0ihun1.default\cacaoweb@cacaoweb.org] [] cacaoweb v1.0.34 (.http://www.cacaoweb.org/.)


---\\ Internet Explorer, Démarrage,Recherche,URSearchHook (R0,R1,R3)
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131073464211236673&GUID=00000000-0000-0000-0000-000000000000
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (8.00.7600.16385 (win7_rtm.090713-1255)) -- C:\Windows\System32\ieframe.dll


---\\ Modification d'une valeur Ini (Changed inifile value, mapped to Registry) (F2)
F2 - REG:system.ini: UserInit=C:\Windows\System32\Userinit.exe,
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe
F2 - REG:system.ini: VMApplet=C:\WINDOWS\system32\SystemPropertiesPerformance.exe


---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} . (.Internet Download Manager, Tonec Inc. - IDM Browser Helper Object.) -- C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre8\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre8\bin\jp2ssv.dll


---\\ Applications démarrées par registre & par dossier (O4)
O4 - HKCU\..\Run: [SRS Audio Sandbox] . (.SRS Labs, Inc. - SRS Audio Sandbox control panel.) -- C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\Sidebar.exe
O4 - HKUS\S-1-5-21-2776931520-2553299329-4176664162-1001\..\Run: [SRS Audio Sandbox] . (.SRS Labs, Inc. - SRS Audio Sandbox control panel.) -- C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe
O4 - HKUS\S-1-5-21-2776931520-2553299329-4176664162-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] Clé orpheline
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] Clé orpheline
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe


---\\ Autres liens utilisateurs (O4)
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\Cheat Engine 6.4.lnk . (.Pas de propriétaire.) -- C:\Program Files\Cheat Engine 6.4\Cheat Engine.exe (.not file.)
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\Counter-Strike WaRzOnE.lnk . (.Valve.) -- C:\Games\Counter-Strike\hl.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\CS Dedicated Server CLI.lnk . (.Valve.) -- C:\Games\Counter-Strike\hlds.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\CS Dedicated Server GUI.lnk . (.Valve.) -- C:\Games\Counter-Strike\hlds.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\Half-Life WaRzOnE.lnk . (.Valve.) -- C:\Games\Counter-Strike\hl.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\Internet Download Manager.lnk . (.Tonec Inc..) -- C:\Program Files\Internet Download Manager\IDMan.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\Microsoft Office Excel 2007.lnk . (.Pas de propriétaire.) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\Microsoft Office Word 2007.lnk . (.Pas de propriétaire.) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\MSI Afterburner.lnk . (.Pas de propriétaire.) -- C:\Program Files\MSI Afterburner\MSIAfterburner.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\PotPlayer.lnk . (.Daum Communications.) -- C:\Program Files\Daum\PotPlayer\PotPlayerMini.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\Screenleap.lnk . (.Screenleap, Inc..) -- C:\Users\lamdjed\AppData\Local\Screenleap\Screenleap.exe
O4 - Global Startup: C:\Documents And Settings\lamdjed\Desktop\µTorrent.lnk . (.BitTorrent Inc..) -- C:\Users\lamdjed\AppData\Roaming\uTorrent\uTorrent.exe
O4 - Global Startup: C:\Users\lamdjed\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\Cheat Engine 6.4.lnk . (.Pas de propriétaire.) -- C:\Program Files\Cheat Engine 6.4\Cheat Engine.exe (.not file.)
O4 - Global Startup: C:\Users\lamdjed\Desktop\Counter-Strike WaRzOnE.lnk . (.Valve.) -- C:\Games\Counter-Strike\hl.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\CS Dedicated Server CLI.lnk . (.Valve.) -- C:\Games\Counter-Strike\hlds.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\CS Dedicated Server GUI.lnk . (.Valve.) -- C:\Games\Counter-Strike\hlds.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\Half-Life WaRzOnE.lnk . (.Valve.) -- C:\Games\Counter-Strike\hl.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\Internet Download Manager.lnk . (.Tonec Inc..) -- C:\Program Files\Internet Download Manager\IDMan.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\Microsoft Office Excel 2007.lnk . (.Pas de propriétaire.) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\xlicons.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\Microsoft Office Word 2007.lnk . (.Pas de propriétaire.) -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE}\wordicon.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\MSI Afterburner.lnk . (.Pas de propriétaire.) -- C:\Program Files\MSI Afterburner\MSIAfterburner.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\PotPlayer.lnk . (.Daum Communications.) -- C:\Program Files\Daum\PotPlayer\PotPlayerMini.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\Screenleap.lnk . (.Screenleap, Inc..) -- C:\Users\lamdjed\AppData\Local\Screenleap\Screenleap.exe
O4 - Global Startup: C:\Users\lamdjed\Desktop\µTorrent.lnk . (.BitTorrent Inc..) -- C:\Users\lamdjed\AppData\Roaming\uTorrent\uTorrent.exe
O4 - Global Startup: C:\Users\lamdjed\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk . (.Google Inc..) -- C:\Program Files\Google\Chrome\Application\chrome.exe
O4 - Global Startup: C:\Users\lamdjed\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk . (.Microsoft Corporation.) -- C:\Program Files\Internet Explorer\iexplore.exe
O4 - Global Startup: C:\Users\lamdjed\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - Clé orpheline
O4 - Global Startup: C:\Users\lamdjed\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - Clé orpheline
O4 - Global Startup: C:\Users\lamdjed\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk . (.BitTorrent Inc..) -- C:\Users\lamdjed\AppData\Roaming\uTorrent\uTorrent.exe


---\\ Lignes supplémentaires dans le menu contextuel d'Internet Explorer (O8)
O8 - Extra context menu item: Télécharger avec IDM . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Télécharger tous les liens avec Internet Download Manager . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Internet Download Manager\IEGetAll.htm


---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} . (.Pas de propriétaire - Pas de description.) -- C:\PROGRA~1\MICROS~2\Office12\REFBARH.ICO


---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d’affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Fournisseur d’espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll


---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS1\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: DhcpDomain = domain.name
O17 - HKLM\System\CS1\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: DhcpDomain = domain.name
O17 - HKLM\System\CS2\Services\Tcpip\..\{42C7788F-78A6-4B9E-A344-18522812BF04}: DhcpDomain = domain.name
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1


---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.


---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) - {1984DD45-52CF-49cd-AB77-18F378FEA264} . (.Stardock - Stardock Fences Shell Extension.) -- C:\Program Files\Stardock\Fences\FencesMenu.dll


---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: (AIPS) . (.Arcai.com - Arp Intelligent Protection Service.) - C:\Program Files\netcut\services\AIPS.exe
O23 - Service: (Backupper Service) . (.AOMEI Tech Co., Ltd. - AOMEI Backupper Schedule task service.) - C:\Program Files\AOMEI Backupper Standard Edition 2.0.1\ABService.exe
O23 - Service: (DigitalWave.Update.Service) . (.Digital Wave Ltd. - Digital Wave Update Service.) - C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
O23 - Service: (ekrn) . (.ESET - ESET Service.) - C:\Program Files\ESET\ESET Internet Security\ekrn.exe
O23 - Service: (gupdate) . (.Google Inc. - Programme d'installation de Google.) - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: (LiveUpdateSvc) . (.IObit - Product Updater.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: (NvNetworkService) . (.NVIDIA Corporation - NVIDIA Network Service.) - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: (NvStreamSvc) . (.NVIDIA Corporation - NVIDIA Streamer Service.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
O23 - Service: (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 309.0.) - C:\Windows\system32\nvvsvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) . (.Riverbed Technology, Inc. - Remote Packet Capture Daemon.) - C:\Program Files\WinPcap\rpcapd.exe


---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(.Pas de propriétaire - Pas de description.) - (.not file.)


---\\ Tâches planifiées en automatique (O39)
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\Adobe Flash Player Updater.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\DriverCure.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ParetoLogic Registration3.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ParetoLogic Update Version3 Startup Task.job
O39 - APT:Automatic Planified Task - C:\Windows\Tasks\ParetoLogic Update Version3.job
[MD5.1EA0A3CB91B98F79E65B51615EF63A07] [APT] [Adobe Flash Player PPAPI Notifier] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashUtil32_23_0_0_207_pepper.exe
[MD5.7760EB1D134ECD2DCD83C067816F4B18] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
[MD5.00000000000000000000000000000000] [APT] [Bluetooth Driver Installer] (.Pas de propriétaire.) -- C:\Users\lamdjed\AppData\Local\Temp\is-9L06Q.tmp\prsetup.exe (.not file.)
[MD5.56B1B54136D8EC5967728EA6242390E8] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe
[MD5.00000000000000000000000000000000] [APT] [Driver Booster SkipUAC (lamdjed)] (.Pas de propriétaire.) -- C:\Program Files\IObit\Driver Booster\DriverBooster.exe (.not file.)
[MD5.75F03DCF0F6A9BB0B9EA6B10963E566A] [APT] [DriverCure] (.ParetoLogic.) -- C:\Program Files\ParetoLogic\DriverCure\DriverCure.exe
[MD5.D663176B9297A432309140315169274C] [APT] [DriverPack Notifier] (.Pas de propriétaire.) -- C:\Program Files\DriverPack Notifier\DriverPackNotifier.exe
[MD5.A8FD9222E4D72596BB37DA8BE95C0BA4] [APT] [GoogleUpdateTaskMachineCore] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.A8FD9222E4D72596BB37DA8BE95C0BA4] [APT] [GoogleUpdateTaskMachineUA] (.Google Inc..) -- C:\Program Files\Google\Update\GoogleUpdate.exe
[MD5.C99A4C0F9715D8F7B85BC79807DD95FD] [APT] [Opera scheduled Autoupdate 1462467951] (.Opera Software.) -- C:\Program Files\Opera\launcher.exe
[MD5.77EE69389AFE64098EB8068CB151D29B] [APT] [ParetoLogic Update Version3] (.Pas de propriétaire.) -- C:\Program Files\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe
[MD5.77EE69389AFE64098EB8068CB151D29B] [APT] [ParetoLogic Update Version3 Startup Task] (.Pas de propriétaire.) -- C:\Program Files\Common Files\ParetoLogic\UUS3\Pareto_Update3.exe
[MD5.170B3A9108687B26DA2D8901C6948A18] [APT] [{004F60A7-BD24-4FC0-AB1E-8795BB2225EC}] (.Pas de propriétaire.) -- D:\GTA SAND\gta_sa.exe
[MD5.00000000000000000000000000000000] [APT] [{5BC19B9F-DA53-4E4F-949B-7A265B51B487}] (.Pas de propriétaire.) -- C:\Users\lamdjed\AppData\Local\Temp\Temp1_CamStudio Install.zip\CamStudio Install.exe (.not file.)
[MD5.C99A4C0F9715D8F7B85BC79807DD95FD] [APT] [{9278959B-9B09-4BE9-96CC-0DD4690055FB}] (.Opera Software.) -- c:\program files\opera\launcher.exe
[MD5.00000000000000000000000000000000] [APT] [{95951F26-DFD9-44CE-877B-0F681D397D88}] (.Pas de propriétaire.) -- D:\Pro Evolution Soccer 2016\PES2016.exe (.not file.)
[MD5.00000000000000000000000000000000] [APT] [{C404A4FC-8078-4815-B3E9-C10ADE6D5CEE}] (.Pas de propriétaire.) -- C:\Program Files\Mozilla Firefox\firefox.exe (.not file.)
[MD5.F34B1C7E8450F06D82B339BDB2CF7B09] [APT] [{D013986C-2A85-4C2A-BE4F-38536056D0DD}] (.ELAN Microelectronics Corp..) -- C:\Program Files\Elantech\ETDUn_inst.exe


---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Windows Mail\WinMail.exe
O40 - ASIC: Google Chrome - {8A69D345-D564-463c-AFF1-A69D9E530F96} . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Google\Chrome\Application\54.0.2840.99\Installer\chrmstp.exe


---\\ Pilotes lancés au démarrage (O41)
O41 - Driver: C:\Windows\system32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Ancillary Function Driver for WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: (blbdrive) . (.Microsoft Corporation - BLB Drive Driver.) - C:\Windows\System32\DRIVERS\blbdrive.sys
O41 - Driver: (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\system32\cscsvc.dll (CSC) . (.Microsoft Corporation - Windows Client Side Caching Driver.) - C:\Windows\System32\drivers\csc.sys
O41 - Driver: C:\Windows\system32\drivers\dfsc.sys (DfsC) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: C:\Windows\system32\drivers\discache.sys (discache) . (.Microsoft Corporation - System Indexer/Cache Driver.) - C:\Windows\System32\drivers\discache.sys
O41 - Driver: (eamonm) . (.ESET - Amon monitor.) - C:\Windows\System32\DRIVERS\eamonm.sys
O41 - Driver: (ehdrv) . (.ESET - ESET Helper driver.) - C:\Windows\System32\DRIVERS\ehdrv.sys
O41 - Driver: (epfw) . (.ESET - ESET Personal Firewall driver.) - C:\Windows\System32\DRIVERS\epfw.sys
O41 - Driver: (EpfwLWF) . (.ESET - Epfw NDIS LightWeight Filter.) - C:\Windows\System32\DRIVERS\EpfwLWF.sys
O41 - Driver: (epfwwfp) . (.ESET - ESET Personal Firewall driver.) - C:\Windows\System32\DRIVERS\epfwwfp.sys
O41 - Driver: (HWiNFO32) . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) - C:\Windows\system32\drivers\HWiNFO32.sys
O41 - Driver: (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\system32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\system32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\System32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\system32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) . (.Microsoft Corporation - RDP Miniport.) - C:\Windows\System32\DRIVERS\RDPCDD.sys
O41 - Driver: C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) . (.Microsoft Corporation - RDP Encoder Miniport.) - C:\Windows\System32\drivers\rdpencdd.sys
O41 - Driver: C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) . (.Microsoft Corporation - RDP Reflector Driver Miniport.) - C:\Windows\System32\drivers\rdprefmp.sys
O41 - Driver: C:\Windows\system32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\System32\DRIVERS\tdx.sys
O41 - Driver: (TermDD) . (.Microsoft Corporation - Remote Desktop Server Driver.) - C:\Windows\system32\drivers\termdd.sys
O41 - Driver: (VgaSave) . (.Microsoft Corporation - VGA/Super VGA Video Driver.) - C:\Windows\system32\drivers\vga.sys
O41 - Driver: C:\Windows\system32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\System32\DRIVERS\wanarp.sys
O41 - Driver: (WfpLwf) . (.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - C:\Windows\System32\DRIVERS\wfplwf.sys


---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {31B9D218-FED2-4C6C-B19F-7294FFC130B0}
O42 - Logiciel: Adobe Flash Player 23 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX
O42 - Logiciel: Adobe Flash Player 23 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Flash Player 23 PPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player PPAPI
O42 - Logiciel: Adobe Reader X (10.1.4) - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AA1000000001}
O42 - Logiciel: Adobe Shockwave Player + Authorware Web Player - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player + Authorware Web Player
O42 - Logiciel: Adobe Shockwave Player 12.2 - (.Adobe Systems, Inc..) [HKLM] -- Adobe Shockwave Player
O42 - Logiciel: Bandisoft MPEG-1 Decoder - (.Bandisoft.com.) [HKLM] -- BandiMPEG1
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner
O42 - Logiciel: DpFileList UPDATE 2016 - (.Proiter.) [HKLM] -- DpFileList UPDATE 2016 2.0.0
O42 - Logiciel: DriverPack Notifier - (.DriverPack Solution.) [HKLM] -- DriverPack Notifier
O42 - Logiciel: ESET Internet Security - (.ESET, spol. s r.o..) [HKLM] -- {82ECE869-6759-43F2-9690-F60DBC47890A}
O42 - Logiciel: ETDWare PS/2-X86 10.4.6.3_WHQL - (.ELAN Microelectronic Corp..) [HKLM] -- Elantech
O42 - Logiciel: Fences - (.Stardock Corporation.) [HKLM] -- Fences
O42 - Logiciel: Fences - (.Stardock Corporation.) [HKLM] -- {10CD364B-FFCC-48BE-B469-B9622A033075}
O42 - Logiciel: Free Video Cutter Joiner 10.6 - (.DVDVideoMedia, Inc..) [HKLM] -- {8C5A4758-C782-4200-B337-DB3466D33ADD}}_is1
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM] -- {60EC980A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Internet Download Manager - (.Tonec Inc..) [HKLM] -- Internet Download Manager
O42 - Logiciel: Java 8 Update 11 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218011FF}
O42 - Logiciel: MSI Afterburner 4.1.1 - (.MSI Co., LTD.) [HKLM] -- Afterburner
O42 - Logiciel: Metric Collection SDK 35 - (.Lenovo Group Limited.) [HKLM] -- {C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}
O42 - Logiciel: Microsoft .NET Framework 4.5 - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033
O42 - Logiciel: Microsoft .NET Framework 4.5 - (.Microsoft Corporation.) [HKLM] -- {9F612429-4A00-3D44-88CF-146DA2EE1F92}
O42 - Logiciel: Microsoft .NET Framework 4.5 FRA Language Pack - (.Microsoft Corporation.) [HKLM] -- {1D7029B7-B42B-3012-B74A-904C81A3662D}
O42 - Logiciel: Microsoft Office Access MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0015-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Excel MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0016-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office InfoPath MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0044-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Outlook MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001A-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office PowerPoint MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0018-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- PROPLUS
O42 - Logiciel: Microsoft Office Professional Plus 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0011-0000-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Arabic) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0401-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Dutch) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0413-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (English) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0409-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (German) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0407-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proof (Spanish) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001F-0C0A-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Proofing (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-002C-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Publisher MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-0019-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Shared MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-006E-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Office Word MUI (French) 2007 - (.Microsoft Corporation.) [HKLM] -- {90120000-001B-040C-0000-0000000FF1CE}
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM] -- {710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 - (.Microsoft Corporation.) [HKLM] -- {1F1C2DFC-2D24-3E06-BCB8-725134ADF989}
O42 - Logiciel: Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 - (.Microsoft Corporation.) [HKLM] -- {9BE518E6-ECC6-35A9-88E4-87755C07200F}
O42 - Logiciel: Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 - (.Microsoft Corporation.) [HKLM] -- {196BB40D-1578-3D01-B289-BEFC77A11A1E}
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 - (.?????????? ??????????.) [HKLM] -- {f0080ca2-80ae-4958-b6eb-e8fa916d744a}
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 - (.Microsoft Corporation.) [HKLM] -- {33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM] -- {B175520C-86A2-35A7-8619-86DC379688B9}
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM] -- {BD95A8CD-1D9F-35AD-981A-3E7925026EBB}
O42 - Logiciel: Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 - (.Microsoft Corporation.) [HKLM] -- {f65db027-aff3-4070-886a-0d87064aabb1}
O42 - Logiciel: Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM] -- {F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}
O42 - Logiciel: Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 - (.Microsoft Corporation.) [HKLM] -- {13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}
O42 - Logiciel: Module linguistique de Microsoft .NET Framework 4.5 - FRA - (.Microsoft Corporation.) [HKLM] -- {92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036
O42 - Logiciel: NVIDIA PhysX System Software 9.15.0428 - (.NVIDIA Corporation.) [HKLM] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NX PAD Driver - (.NEC.) [HKLM] -- {9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}
O42 - Logiciel: NirSoft Wireless Network Watcher - (.Pas de propriétaire.) [HKLM] -- NirSoft Wireless Network Watcher
O42 - Logiciel: Opera Stable 41.0.2353.69 - (.Opera Software.) [HKLM] -- Opera 41.0.2353.69
O42 - Logiciel: ParetoLogic DriverCure - (.ParetoLogic, Inc..) [HKLM] -- {1E0D8F69-A6AB-4934-9B2D-159D9F97BA4A}
O42 - Logiciel: PotPlayer v1.6.49343 x86 - (.Daum Corp..) [HKLM] -- PotPlayer
O42 - Logiciel: Realtek AC'97 Audio - (.Realtek Semiconductor Corp..) [HKLM] -- {FB08F381-6533-4108-B7DD-039E11FBC27E}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: RivaTuner Statistics Server 6.3.0 - (.Unwinder.) [HKLM] -- RTSS
O42 - Logiciel: SAM CoDeC Pack - (.www.SamLab.ws.) [HKLM] -- SAM CoDeC Pack
O42 - Logiciel: SRS Audio Sandbox - (.SRS Labs, Inc..) [HKLM] -- {542C6F13-6861-4010-9EBC-6F068D397AD8}
O42 - Logiciel: VLC media player 2.1.3 - (.VideoLAN.) [HKLM] -- VLC media player
O42 - Logiciel: Virtual Audio Cable 4.10 - (.Pas de propriétaire.) [HKLM] -- Virtual Audio Cable 4.10
O42 - Logiciel: Visual Studio 2012 x86 Redistributables - (.AVG Technologies CZ, s.r.o..) [HKLM] -- {98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}
O42 - Logiciel: WinPcap 4.1.3 - (.Riverbed Technology, Inc..) [HKLM] -- WinPcapInst
O42 - Logiciel: WinRAR 5.10 (32-bit) - (.win.rar GmbH.) [HKLM] -- WinRAR archiver
O42 - Logiciel: swMSM - (.Adobe Systems, Inc.) [HKLM] -- {612C34C7-5E90-47D8-9B5C-0F717DD82726}
O42 - Logiciel: x264vfw - H.264/MPEG-4 AVC codec (remove only) - (.Pas de propriétaire.) [HKLM] -- x264vfw
O42 - Logiciel: µTorrent - (.BitTorrent Inc..) [HKCU] -- uTorrent

---\\ HKCU & HKLM Software Keys
[HKCU\Software\7-Zip]
[HKCU\Software\AC3Filter]
[HKCU\Software\AOMEI]
[HKCU\Software\AppDataLow\Software\Adobe]
[HKCU\Software\AppDataLow\Software\Microsoft]
[HKCU\Software\AppDataLow\Software]
[HKCU\Software\AppDataLow\Yandex]
[HKCU\Software\AppDataLow]
[HKCU\Software\Arcai.com]
[HKCU\Software\Avg Secure Update]
[HKCU\Software\Avg]
[HKCU\Software\Baidu]
[HKCU\Software\BandiMPEG1]
[HKCU\Software\BitTorrent]
[HKCU\Software\Bluetooth Driver Installer]
[HKCU\Software\Chedot]
[HKCU\Software\Chromium]
[HKCU\Software\Cineform]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\DSP-worx]
[HKCU\Software\DVDVideoSoft]
[HKCU\Software\Digital River]
[HKCU\Software\DownloadManager]
[HKCU\Software\DriverSupport]
[HKCU\Software\Drivers]
[HKCU\Software\ESET]
[HKCU\Software\EaseUS]
[HKCU\Software\EpmNewsInfo]
[HKCU\Software\Foxit Software]
[HKCU\Software\GNU]
[HKCU\Software\Gabest]
[HKCU\Software\Google]
[HKCU\Software\IGA]
[HKCU\Software\IM Providers]
[HKCU\Software\Install]
[HKCU\Software\Intel]
[HKCU\Software\JavaSoft]
[HKCU\Software\Lenovo]
[HKCU\Software\Licenses]
[HKCU\Software\Local AppWizard-Generated Applications]
[HKCU\Software\MPC-BE]
[HKCU\Software\MSI]
[HKCU\Software\Macromedia]
[HKCU\Software\MainConcept]
[HKCU\Software\MediaChance]
[HKCU\Software\MediaInfo]
[HKCU\Software\Mirillis]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\NCH Software]
[HKCU\Software\NCH Swift Sound]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Opera Software]
[HKCU\Software\ParetoLogic]
[HKCU\Software\Piriform]
[HKCU\Software\PixelPlanet]
[HKCU\Software\Policies]
[HKCU\Software\Psiphon3]
[HKCU\Software\QtProject]
[HKCU\Software\RealNetworks]
[HKCU\Software\Realtek]
[HKCU\Software\Revenger inc.]
[HKCU\Software\Rtp]
[HKCU\Software\SAMP]
[HKCU\Software\SamLab.ws]
[HKCU\Software\Skype]
[HKCU\Software\Stardock]
[HKCU\Software\Synaptics]
[HKCU\Software\System32]
[HKCU\Software\TechSmith]
[HKCU\Software\Tencent]
[HKCU\Software\The Silicon Realms Toolworks]
[HKCU\Software\Trolltech]
[HKCU\Software\Unwinder]
[HKCU\Software\VB and VBA Program Settings]
[HKCU\Software\Valve]
[HKCU\Software\Wargaming.net]
[HKCU\Software\WinAVI]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Win]
[HKCU\Software\Wondershare]
[HKCU\Software\Yandex]
[HKCU\Software\drpsu]
[HKCU\Software\ej-technologies]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\AMD]
[HKLM\Software\ATI Technologies]
[HKLM\Software\AVG]
[HKLM\Software\Alps]
[HKLM\Software\AppDataLow]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Arcai]
[HKLM\Software\BCL Technologies]
[HKLM\Software\Baidu]
[HKLM\Software\Caphyon]
[HKLM\Software\Chedot]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\CloudOPTInfo]
[HKLM\Software\Comodo]
[HKLM\Software\CyberGhost]
[HKLM\Software\DTS]
[HKLM\Software\DVDVideoSoft]
[HKLM\Software\Digital River]
[HKLM\Software\DigitalWave]
[HKLM\Software\Dolby]
[HKLM\Software\ESET]
[HKLM\Software\Electronic Arts]
[HKLM\Software\EuMus Design]
[HKLM\Software\Fortemedia]
[HKLM\Software\Foxit Software]
[HKLM\Software\GNU]
[HKLM\Software\Google]
[HKLM\Software\Huawei technologies]
[HKLM\Software\IObit]
[HKLM\Software\InstalledOptions]
[HKLM\Software\Intel]
[HKLM\Software\JavaSoft]
[HKLM\Software\KONAMIPES6]
[HKLM\Software\Khronos]
[HKLM\Software\Knowles]
[HKLM\Software\Lenovo]
[HKLM\Software\MSI]
[HKLM\Software\Macromedia]
[HKLM\Software\MimarSinan]
[HKLM\Software\Monect]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NCH Software]
[HKLM\Software\NCH Swift Sound]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Nahimic]
[HKLM\Software\Netscape]
[HKLM\Software\Nuance]
[HKLM\Software\ODBC]
[HKLM\Software\Opera Software]
[HKLM\Software\ParetoLogic]
[HKLM\Software\Piriform]
[HKLM\Software\Policies]
[HKLM\Software\RealNetworks]
[HKLM\Software\Realtek Semiconductor Corp.]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Skype]
[HKLM\Software\Software]
[HKLM\Software\SonicFocus]
[HKLM\Software\Sonic]
[HKLM\Software\SoundResearch]
[HKLM\Software\Stardock]
[HKLM\Software\Symantec]
[HKLM\Software\TechSmith]
[HKLM\Software\Tencent]
[HKLM\Software\Ubisoft]
[HKLM\Software\Unwinder]
[HKLM\Software\Valve]
[HKLM\Software\VideoLAN]
[HKLM\Software\WafCX]
[HKLM\Software\WanDrv]
[HKLM\Software\Waves Audio]
[HKLM\Software\WinPcap]
[HKLM\Software\WinRAR]
[HKLM\Software\Wondershare]
[HKLM\Software\Wow6432Node]
[HKLM\Software\drpsu]
[HKLM\Software\mozilla.org]


---\\ Contenu des dossiers ProgramFiles/ProgramData (O43)
O43 - CFD: 2015-10-01 - 14:52:26 ----D- C:\Program Files\Adobe
O43 - CFD: 2016-02-24 - 21:32:32 ----D- C:\Program Files\AOMEI Backupper Standard Edition 2.0.1
O43 - CFD: 2015-12-05 - 15:59:42 ----D- C:\Program Files\Apoint2K
O43 - CFD: 2016-05-08 - 22:36:56 ----D- C:\Program Files\AVG
O43 - CFD: 2016-11-15 - 20:25:20 ----D- C:\Program Files\AvRack
O43 - CFD: 2016-07-25 - 00:26:06 ----D- C:\Program Files\BandiMPEG1
O43 - CFD: 2015-10-03 - 00:40:38 ----D- C:\Program Files\CamStudio
O43 - CFD: 2016-11-30 - 11:22:38 ----D- C:\Program Files\CCleaner
O43 - CFD: 2016-12-02 - 22:30:20 ----D- C:\Program Files\Common Files
O43 - CFD: 2016-02-26 - 15:49:24 ----D- C:\Program Files\Comodo
O43 - CFD: 2016-07-26 - 16:12:24 ----D- C:\Program Files\Counter-Strike 1.6
O43 - CFD: 2016-06-29 - 15:13:00 ----D- C:\Program Files\CyberGhost 5
O43 - CFD: 2015-12-05 - 16:19:22 ----D- C:\Program Files\Daum
O43 - CFD: 2015-11-19 - 23:04:10 ----D- C:\Program Files\directx
O43 - CFD: 2015-10-16 - 14:06:48 ----D- C:\Program Files\Driver Support
O43 - CFD: 2016-11-15 - 18:38:20 ----D- C:\Program Files\DriverPack Notifier
O43 - CFD: 2016-11-26 - 16:03:18 ----D- C:\Program Files\DVD Maker
O43 - CFD: 2016-05-01 - 20:03:30 ----D- C:\Program Files\DVDVideoMedia
O43 - CFD: 2016-01-03 - 17:21:16 ----D- C:\Program Files\DVDVideoSoft
O43 - CFD: 2015-10-03 - 12:31:18 ----D- C:\Program Files\EaseUS
O43 - CFD: 2016-05-19 - 19:56:20 ----D- C:\Program Files\Easeware
O43 - CFD: 2015-12-05 - 16:02:32 ----D- C:\Program Files\Elantech
O43 - CFD: 2016-11-25 - 00:07:54 ----D- C:\Program Files\ESET
O43 - CFD: 2015-09-30 - 20:48:34 -SH-D- C:\Program Files\Fichiers communs
O43 - CFD: 2016-12-02 - 19:24:30 ----D- C:\Program Files\Foxit Software
O43 - CFD: 2016-10-31 - 19:47:04 ----D- C:\Program Files\Google
O43 - CFD: 2016-11-17 - 11:16:20 --H-D- C:\Program Files\InstallShield Installation Information
O43 - CFD: 2015-11-13 - 16:50:10 ----D- C:\Program Files\Internet Download Manager
O43 - CFD: 2016-11-26 - 16:03:18 ----D- C:\Program Files\Internet Explorer
O43 - CFD: 2016-06-16 - 10:57:28 ----D- C:\Program Files\IObit
O43 - CFD: 2015-12-05 - 16:15:12 ----D- C:\Program Files\Java
O43 - CFD: 2016-08-28 - 11:33:02 ----D- C:\Program Files\Lenovo
O43 - CFD: 2009-07-14 - 08:50:26 ----D- C:\Program Files\Microsoft Games
O43 - CFD: 2015-09-30 - 22:44:52 ----D- C:\Program Files\Microsoft Office
O43 - CFD: 2015-10-03 - 01:01:36 ----D- C:\Program Files\Microsoft Silverlight
O43 - CFD: 2015-09-30 - 22:44:48 ----D- C:\Program Files\Microsoft Visual Studio
O43 - CFD: 2015-09-30 - 22:40:44 ----D- C:\Program Files\Microsoft Visual Studio 8
O43 - CFD: 2015-09-30 - 22:45:14 ----D- C:\Program Files\Microsoft Works
O43 - CFD: 2015-10-01 - 14:01:30 ----D- C:\Program Files\Microsoft.NET
O43 - CFD: 2016-11-24 - 18:38:30 ----D- C:\Program Files\Mirillis
O43 - CFD: 2016-11-24 - 10:56:46 ----D- C:\Program Files\Mozilla Firefox
O43 - CFD: 2015-09-30 - 22:45:02 ----D- C:\Program Files\MSBuild
O43 - CFD: 2016-11-26 - 13:55:08 ----D- C:\Program Files\MSI Afterburner
O43 - CFD: 2016-04-06 - 17:46:14 ----D- C:\Program Files\NCH Software
O43 - CFD: 2016-10-13 - 22:39:04 ----D- C:\Program Files\netcut
O43 - CFD: 2015-10-16 - 14:46:34 ----D- C:\Program Files\NirSoft
O43 - CFD: 2016-11-28 - 18:34:56 ----D- C:\Program Files\NVIDIA Corporation
O43 - CFD: 2016-11-26 - 14:00:00 ----D- C:\Program Files\Opera
O43 - CFD: 2016-04-10 - 11:54:30 ----D- C:\Program Files\Origin Games
O43 - CFD: 2016-12-02 - 22:30:16 ----D- C:\Program Files\ParetoLogic
O43 - CFD: 2016-01-01 - 11:17:54 ----D- C:\Program Files\PC Remote Receiver
O43 - CFD: 2015-11-09 - 12:03:06 ----D- C:\Program Files\PES 2006
O43 - CFD: 2016-11-23 - 23:51:00 ----D- C:\Program Files\Proiter
O43 - CFD: 2016-11-17 - 11:16:22 ----D- C:\Program Files\Realtek
O43 - CFD: 2016-11-15 - 20:25:14 ----D- C:\Program Files\Realtek AC97
O43 - CFD: 2016-11-15 - 20:25:22 ----D- C:\Program Files\Realtek Sound Manager
O43 - CFD: 2009-07-14 - 05:52:32 ----D- C:\Program Files\Reference Assemblies
O43 - CFD: 2015-10-03 - 18:40:04 ----D- C:\Program Files\RivaTuner Statistics Server
O43 - CFD: 2015-12-05 - 16:14:04 ----D- C:\Program Files\SAM CoDeC Pack
O43 - CFD: 2016-11-20 - 19:39:48 ----D- C:\Program Files\SRS Labs
O43 - CFD: 2016-02-22 - 19:31:20 ----D- C:\Program Files\Stardock
O43 - CFD: 2016-11-15 - 18:04:48 --H-D- C:\Program Files\Temp
O43 - CFD: 2016-12-02 - 14:13:30 ----D- C:\Program Files\Ubisoft
O43 - CFD: 2009-07-14 - 05:53:24 --H-D- C:\Program Files\Uninstall Information
O43 - CFD: 2015-10-03 - 19:05:52 ----D- C:\Program Files\USB-AV Antivirus
O43 - CFD: 2015-12-05 - 16:12:08 ----D- C:\Program Files\utvideo
O43 - CFD: 2015-11-19 - 00:23:20 ----D- C:\Program Files\VideoLAN
O43 - CFD: 2015-11-04 - 19:03:54 ----D- C:\Program Files\Virtual Audio Cable
O43 - CFD: 2016-10-31 - 18:58:20 ----D- C:\Program Files\WinAVI
O43 - CFD: 2016-11-26 - 16:03:10 ----D- C:\Program Files\Windows Defender
O43 - CFD: 2016-11-26 - 16:03:18 ----D- C:\Program Files\Windows Journal
O43 - CFD: 2016-11-26 - 16:03:18 ----D- C:\Program Files\Windows Mail
O43 - CFD: 2016-11-26 - 16:03:18 ----D- C:\Program Files\Windows Media Player
O43 - CFD: 2015-09-30 - 20:48:34 ----D- C:\Program Files\Windows NT
O43 - CFD: 2016-11-26 - 16:03:18 ----D- C:\Program Files\Windows Photo Viewer
O43 - CFD: 2016-11-26 - 16:03:18 ----D- C:\Program Files\Windows Portable Devices
O43 - CFD: 2016-11-26 - 16:03:18 ----D- C:\Program Files\Windows Sidebar
O43 - CFD: 2016-03-22 - 22:29:30 ----D- C:\Program Files\WinPcap
O43 - CFD: 2016-11-24 - 00:51:10 ----D- C:\Program Files\WinRAR
O43 - CFD: 2015-12-05 - 16:12:14 ----D- C:\Program Files\x264vfw
O43 - CFD: 2015-12-05 - 16:12:22 ----D- C:\Program Files\Xvid
O43 - CFD: 2016-12-03 - 18:54:30 ----D- C:\Program Files\ZHPDiag
O43 - CFD: 2016-11-30 - 14:25:42 ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 2015-10-06 - 11:37:42 ----D- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 2016-05-08 - 22:36:50 ----D- C:\Program Files\Common Files\AV
O43 - CFD: 2015-09-30 - 22:44:46 ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2016-01-03 - 17:21:08 ----D- C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 2016-11-15 - 20:13:42 ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2016-05-19 - 14:03:58 ----D- C:\Program Files\Common Files\IObit
O43 - CFD: 2016-08-06 - 02:15:04 ----D- C:\Program Files\Common Files\LENOVO
O43 - CFD: 2015-10-03 - 18:40:14 ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2016-12-02 - 22:30:20 ----D- C:\Program Files\Common Files\ParetoLogic
O43 - CFD: 2015-11-02 - 15:26:58 ----D- C:\Program Files\Common Files\Saonix
O43 - CFD: 2009-07-14 - 03:37:06 ----D- C:\Program Files\Common Files\Services
O43 - CFD: 2009-07-14 - 03:37:06 ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 2016-11-21 - 19:34:08 ----D- C:\Program Files\Common Files\Steam
O43 - CFD: 2015-09-30 - 22:40:20 ----D- C:\Program Files\Common Files\System
O43 - CFD: 2016-12-02 - 14:28:08 ----D- C:\Program Files\Common Files\XpressUpdate
O43 - CFD: 2016-11-22 - 01:24:10 ----D- C:\ProgramData\AirDroid
O43 - CFD: 2016-02-24 - 21:32:28 ----D- C:\ProgramData\AomeiBR
O43 - CFD: 2016-11-22 - 01:25:20 ----D- C:\ProgramData\Apple
O43 - CFD: 2009-07-14 - 05:53:56 -SH-D- C:\ProgramData\Application Data
O43 - CFD: 2015-12-17 - 20:21:34 ----D- C:\ProgramData\Ashampoo
O43 - CFD: 2016-05-08 - 22:36:56 ----D- C:\ProgramData\Avg
O43 - CFD: 2015-11-11 - 23:53:34 ----D- C:\ProgramData\Baidu
O43 - CFD: 2015-10-03 - 00:56:32 ----D- C:\ProgramData\boost_interprocess
O43 - CFD: 2015-09-30 - 20:48:34 -SH-D- C:\ProgramData\Bureau
O43 - CFD: 2016-11-23 - 23:51:06 ----D- C:\ProgramData\Caphyon
O43 - CFD: 2016-03-31 - 20:10:16 --H-D- C:\ProgramData\Common Files
O43 - CFD: 2009-07-14 - 05:53:56 -SH-D- C:\ProgramData\Desktop
O43 - CFD: 2009-07-14 - 05:53:56 -SH-D- C:\ProgramData\Documents
O43 - CFD: 2016-12-03 - 11:56:56 ----D- C:\ProgramData\DriverCure
O43 - CFD: 2016-11-25 - 00:07:54 ----D- C:\ProgramData\ESET
O43 - CFD: 2015-09-30 - 20:48:34 -SH-D- C:\ProgramData\Favoris
O43 - CFD: 2009-07-14 - 05:53:56 -SH-D- C:\ProgramData\Favorites
O43 - CFD: 2015-11-13 - 16:50:00 ----D- C:\ProgramData\IDM
O43 - CFD: 2016-05-19 - 13:56:48 ----D- C:\ProgramData\IObit
O43 - CFD: 2015-10-04 - 19:08:20 ----D- C:\ProgramData\KONAMI
O43 - CFD: 2016-10-31 - 19:02:12 ----D- C:\ProgramData\Lavasoft
O43 - CFD: 2016-12-02 - 14:29:16 ----D- C:\ProgramData\Lenovo
O43 - CFD: 2015-12-18 - 17:43:44 ----D- C:\ProgramData\Logs
O43 - CFD: 2015-09-30 - 20:48:34 -SH-D- C:\ProgramData\Menu Démarrer
O43 - CFD: 2016-05-08 - 22:36:50 ----D- C:\ProgramData\MFAData
O43 - CFD: 2016-05-11 - 21:58:00 -S--D- C:\ProgramData\Microsoft
O43 - CFD: 2015-09-30 - 22:49:04 ----D- C:\ProgramData\Microsoft Help
O43 - CFD: 2015-12-27 - 00:14:48 ----D- C:\ProgramData\Mirillis
O43 - CFD: 2015-09-30 - 20:48:34 -SH-D- C:\ProgramData\Modèles
O43 - CFD: 2016-04-06 - 17:45:56 ----D- C:\ProgramData\NCH Software
O43 - CFD: 2016-11-28 - 17:19:34 ----D- C:\ProgramData\NVIDIA
O43 - CFD: 2016-11-28 - 18:34:46 ----D- C:\ProgramData\NVIDIA Corporation
O43 - CFD: 2016-06-16 - 11:12:08 ----D- C:\ProgramData\Origin
O43 - CFD: 2016-03-05 - 10:15:56 ----D- C:\ProgramData\Package Cache
O43 - CFD: 2016-12-02 - 22:30:30 ----D- C:\ProgramData\ParetoLogic
O43 - CFD: 2016-10-22 - 20:15:28 ----D- C:\ProgramData\PixelPlanet
O43 - CFD: 2016-11-28 - 17:16:42 ----D- C:\ProgramData\ProductData
O43 - CFD: 2016-10-02 - 19:30:02 ----D- C:\ProgramData\Screenleap
O43 - CFD: 2016-06-16 - 10:59:32 ----D- C:\ProgramData\Skype
O43 - CFD: 2016-11-19 - 22:51:58 ----D- C:\ProgramData\SRS Labs
O43 - CFD: 2016-02-22 - 19:33:24 ----D- C:\ProgramData\Stardock
O43 - CFD: 2009-07-14 - 05:53:56 -SH-D- C:\ProgramData\Start Menu
O43 - CFD: 2015-10-04 - 19:08:08 ----D- C:\ProgramData\Steam
O43 - CFD: 2016-03-25 - 20:06:58 ----D- C:\ProgramData\TEMP
O43 - CFD: 2009-07-14 - 05:53:56 -SH-D- C:\ProgramData\Templates
O43 - CFD: 2016-05-24 - 12:08:10 ----D- C:\ProgramData\Unified Remote
O43 - CFD: 2016-11-30 - 14:25:42 ----D- C:\Program Files\Common Files\Adobe
O43 - CFD: 2015-10-06 - 11:37:42 ----D- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 2016-05-08 - 22:36:50 ----D- C:\Program Files\Common Files\AV
O43 - CFD: 2015-09-30 - 22:44:46 ----D- C:\Program Files\Common Files\DESIGNER
O43 - CFD: 2016-01-03 - 17:21:08 ----D- C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 2016-11-15 - 20:13:42 ----D- C:\Program Files\Common Files\InstallShield
O43 - CFD: 2016-05-19 - 14:03:58 ----D- C:\Program Files\Common Files\IObit
O43 - CFD: 2016-08-06 - 02:15:04 ----D- C:\Program Files\Common Files\LENOVO
O43 - CFD: 2015-10-03 - 18:40:14 ----D- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 2016-12-02 - 22:30:20 ----D- C:\Program Files\Common Files\ParetoLogic
O43 - CFD: 2015-11-02 - 15:26:58 ----D- C:\Program Files\Common Files\Saonix
O43 - CFD: 2009-07-14 - 03:37:06 ----D- C:\Program Files\Common Files\Services
O43 - CFD: 2009-07-14 - 03:37:06 ----D- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 2016-11-21 - 19:34:08 ----D- C:\Program Files\Common Files\Steam
O43 - CFD: 2015-09-30 - 22:40:20 ----D- C:\Program Files\Common Files\System
O43 - CFD: 2016-12-02 - 14:28:08 ----D- C:\Program Files\Common Files\XpressUpdate


---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.45D95401AA205FEACC8A0521DC3A79B7] - 2016-11-09 - 19:34:50 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerApp.exe [796352]
O44 - LFC:[MD5.DB4383219FA0264E7BDD6E463CC0E9B1] - 2016-11-09 - 19:34:50 ---A- . (.Adobe Systems Incorporated - Adobe Flash Player Control Panel Applet.) -- C:\Windows\System32\FlashPlayerCPLApp.cpl [142528]
O44 - LFC:[MD5.B447DFE249DAD3577A9CCCC6960A57D2] - 2016-11-14 - 21:09:37 ---A- . (.DTS - DTS Boost COM DLL.) -- C:\Windows\System32\DTSBoostDLL.dll [1220200]
O44 - LFC:[MD5.3B7950071A28E861C877BA77742D9577] - 2016-11-14 - 21:09:37 ---A- . (.DTS - DTS GFX APO.) -- C:\Windows\System32\DTSGFXAPONS.dll [218728]
O44 - LFC:[MD5.4CB970E9423433CC834BF54588E0AA5A] - 2016-11-14 - 21:09:37 ---A- . (.DTS - DTS NEO:PC COM DLL.) -- C:\Windows\System32\DTSNeoPCDLL.dll [458344]
O44 - LFC:[MD5.C45E7C12A5C6CA76AD577A1D8E982283] - 2016-11-14 - 21:09:37 ---A- . (.Dolby Laboratories - Dolby PCEE4 ASL Analog x86.) -- C:\Windows\System32\R4EEA32A.dll [88408]
O44 - LFC:[MD5.AD49F27A24E90E1549FA7089F8D4B0E7] - 2016-11-14 - 21:09:37 ---A- . (.Dolby Laboratories - Dolby PCEE4 COM DLL x86.) -- C:\Windows\System32\R4EED32A.dll [345944]
O44 - LFC:[MD5.DA070B7D24C1C437487B7EA5977B4C83] - 2016-11-14 - 21:09:37 ---A- . (.Dolby Laboratories - Dolby PCEE4 Control Panel x86.) -- C:\Windows\System32\R4EEP32A.dll [3296600]
O44 - LFC:[MD5.01B187108DDCB9A977D9142684FF7551] - 2016-11-14 - 21:09:37 ---A- . (.Dolby Laboratories - Dolby PCEE4 GFX APO x86.) -- C:\Windows\System32\R4EEG32A.dll [61272]
O44 - LFC:[MD5.E16A9D9FEF615233F7B5C5274556C05B] - 2016-11-14 - 21:09:37 ---A- . (.Dolby Laboratories - Dolby PCEE4 LFX APO x86.) -- C:\Windows\System32\R4EEL32A.dll [103256]
O44 - LFC:[MD5.C619CDFA5CDC5A346C89870010A2391C] - 2016-11-14 - 21:09:37 ---A- . (.Dolby Laboratories, Inc. - PCEE3 DAA Control Panel x86.) -- C:\Windows\System32\RP3DAA32.dll [295768]
O44 - LFC:[MD5.A258F7B2B84E88118369B0B2196CC257] - 2016-11-14 - 21:09:37 ---A- . (.SRS Labs, Inc. - WOW HD COM object for Windows.) -- C:\Windows\System32\SRSWOW.dll [140528]
O44 - LFC:[MD5.2CCEAF03E8AF4543171D236DF21DC29A] - 2016-11-14 - 21:09:38 ---A- . (.Andrea Electronics Corporation - Capture Noise Filters (32-bit).) -- C:\Windows\System32\AERTACap.dll [175200]
O44 - LFC:[MD5.6353994C972CB58EB01854C6FDFAC80D] - 2016-11-14 - 21:09:38 ---A- . (.Andrea Electronics Corporation - Render Noise Filters (32-bit).) -- C:\Windows\System32\AERTARen.dll [96160]
O44 - LFC:[MD5.4A635AE3CC50F6BF1317957D1FEE975A] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS Bass Enhancement COM DLL.) -- C:\Windows\System32\DTSBassEnhancementDLL.dll [654952]
O44 - LFC:[MD5.C77A4CA13CF78E242C5844D045EDFDA0] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS GFX APO.) -- C:\Windows\System32\DTSGFXAPO.dll [218728]
O44 - LFC:[MD5.5A65D120056B4B814E703E100FDE14C6] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS Gain Compensator COM DLL.) -- C:\Windows\System32\DTSGainCompensatorDLL.dll [389736]
O44 - LFC:[MD5.5328523AC3FE93F61054823D90DA73A5] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS LFX APO.) -- C:\Windows\System32\DTSLFXAPO.dll [218216]
O44 - LFC:[MD5.255A4B9B8008773D0B143E22A21AB4FA] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS Limiter COM DLL.) -- C:\Windows\System32\DTSLimiterDLL.dll [375400]
O44 - LFC:[MD5.5ADA836A4F9E4C0CF9CC1BFDBAA9D37F] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS Surround Sensation Headphone COM DLL.) -- C:\Windows\System32\DTSS2HeadphoneDLL.dll [1292904]
O44 - LFC:[MD5.C1D3FC8F45C3AA7F0F03DA2A0D384524] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS Surround Sensation Speaker COM DLL.) -- C:\Windows\System32\DTSS2SpeakerDLL.dll [1509480]
O44 - LFC:[MD5.426246A4B6A7D1A1D12AAB6BB2E483C5] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS Symmetry COM DLL.) -- C:\Windows\System32\DTSSymmetryDLL.dll [631400]
O44 - LFC:[MD5.BAF09FCD09873CF0A3ADF4752F6B144B] - 2016-11-14 - 21:09:38 ---A- . (.DTS - DTS Voice Clarity COM DLL.) -- C:\Windows\System32\DTSVoiceClarityDLL.dll [601704]
O44 - LFC:[MD5.E232507C219A1957880D4EB6D022FAC7] - 2016-11-14 - 21:09:38 ---A- . (.Dolby Laboratories, Inc. - Dolby PCEE3 COM DLL x86.) -- C:\Windows\System32\RTEED32A.dll [170840]
O44 - LFC:[MD5.A6686775084244141483AEA0391508D2] - 2016-11-14 - 21:09:38 ---A- . (.Dolby Laboratories, Inc. - Dolby PCEE3 Control Panel x86.) -- C:\Windows\System32\RTEEP32A.dll [359768]
O44 - LFC:[MD5.3DE99987154319C901A6537BA8777CB9] - 2016-11-14 - 21:09:38 ---A- . (.Dolby Laboratories, Inc. - Dolby PCEE3 GFX APO x86.) -- C:\Windows\System32\RTEEG32A.dll [64856]
O44 - LFC:[MD5.5B18398DEDE4A4A78651CD34F0A217A5] - 2016-11-14 - 21:09:38 ---A- . (.Dolby Laboratories, Inc. - Dolby PCEE3 LFX APO x86.) -- C:\Windows\System32\RTEEL32A.dll [78680]
O44 - LFC:[MD5.4F92047498EFEA076E3745C291481975] - 2016-11-14 - 21:09:38 ---A- . (.Dolby Laboratories, Inc. - PCEE3 DHT Control Panel x86.) -- C:\Windows\System32\RP3DHT32.dll [295768]
O44 - LFC:[MD5.BEB707543D3996C6185B1656F63CCF27] - 2016-11-14 - 21:09:38 ---A- . (.Fortemedia Corporation - Fortemedia SAMSoft sAPO.) -- C:\Windows\System32\FMAPO.dll [1740352]
O44 - LFC:[MD5.272BF8E5DBDAF0614CC367A25EA3B256] - 2016-11-14 - 21:09:38 ---A- . (.SRS Labs, Inc. - COM object implementing SRS Headphone 360.) -- C:\Windows\System32\SRSHP360.dll [173296]
O44 - LFC:[MD5.029F36DE21AFBDD2865CC657E252EBA7] - 2016-11-14 - 21:09:38 ---A- . (.SRS Labs, Inc. - TruSurround HD and HD4 COM object for Windo.) -- C:\Windows\System32\SRSTSHD.dll [185584]
O44 - LFC:[MD5.8C83CED38F8CAC3E8D5A953C03BCF4B4] - 2016-11-14 - 21:09:38 ---A- . (.SRS Labs, Inc. - TruSurroundXT Module.) -- C:\Windows\System32\SRSTSXT.dll [345328]
O44 - LFC:[MD5.CE1E84AA03EE50362D3C69382DCFA294] - 2016-11-14 - 21:09:38 ---A- . (.Waves Audio Ltd. - General Library for Plug-Ins.) -- C:\Windows\System32\WavesLib.dll [1783056]
O44 - LFC:[MD5.84AB243EBB8839C268BA45975BD6558C] - 2016-11-14 - 21:09:38 ---A- . (.Waves Audio Ltd. - MaxxAudio APO.) -- C:\Windows\System32\MaxxAudioAPO.dll [132368]
O44 - LFC:[MD5.57C588F098C811E9459AC7034349AF6F] - 2016-11-14 - 21:09:38 ---A- . (.Waves Audio Ltd. - MaxxAudio APO.) -- C:\Windows\System32\MaxxAudioAPO20.dll [232792]
O44 - LFC:[MD5.EE03F5DEF3A7EFC3B798122DEBDD1017] - 2016-11-14 - 21:09:38 ---A- . (.Waves Audio Ltd. - MaxxAudio APO.) -- C:\Windows\System32\MaxxAudioAPO30.dll [259928]
O44 - LFC:[MD5.6C75723CB2309D23A3A16EF9F45B2F49] - 2016-11-14 - 21:09:38 ---A- . (.Waves Audio Ltd. - MaxxVolumeSD APO.) -- C:\Windows\System32\MaxxVolumeSDAPO.dll [252760]
O44 - LFC:[MD5.9335AF3270D9EF424EA70E6010A39D27] - 2016-11-14 - 21:11:20 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\AcpiServiceVnA.dll [188696]
O44 - LFC:[MD5.9B4E630C9CB0D8B4658C41D9B3E1EE1A] - 2016-11-14 - 21:11:22 ---A- . (.Conexant Systems Inc. - Conexant APO.) -- C:\Windows\System32\CX32APO.dll [1490960]
O44 - LFC:[MD5.C9BFB937FBD30048B3EFCCFDCDFF1FB1] - 2016-11-14 - 21:11:28 ---A- . (.Dolby Laboratories - Dolby DAX2 APO Property Page.) -- C:\Windows\System32\DolbyDAX2APOProp.dll [850264]
O44 - LFC:[MD5.FB13EC7EB39FFB503DB388756449BEDD] - 2016-11-14 - 21:11:28 ---A- . (.Dolby Laboratories - Dolby DAX2 APO.) -- C:\Windows\System32\DolbyDAX2APOv201.dll [1782616]
O44 - LFC:[MD5.5621C963326142870CA6A9DCF035AE5E] - 2016-11-14 - 21:11:28 ---A- . (.Dolby Laboratories - Dolby DAX2 APO.) -- C:\Windows\System32\DolbyDAX2APOv211.dll [1861976]
O44 - LFC:[MD5.C4253E499E501E9A06D164C303CDF5AE] - 2016-11-14 - 21:11:44 ---A- . (.Dolby Laboratories - Dolby DAX2 HiFi API.) -- C:\Windows\System32\HiFiDAX2API.dll [294744]
O44 - LFC:[MD5.F2EBB448935A1E2C955B01895E7A5A8F] - 2016-11-14 - 21:11:44 ---A- . (.ICEpower a/s - ICEpower ICEsound audio effects.) -- C:\Windows\System32\ICEsoundAPO.dll [296560]
O44 - LFC:[MD5.207334C1E5FB83C012E877F57D94F82C] - 2016-11-14 - 21:11:47 ---A- . (.Waves Audio Ltd. - MaxxAudio APO.) -- C:\Windows\System32\MaxxAudioAPO60.dll [1160112]
O44 - LFC:[MD5.DBD0BFA768451298629A9DA13033DB02] - 2016-11-14 - 21:11:48 ---A- . (.Waves Audio Ltd. - MaxxAudio APO.) -- C:\Windows\System32\MaxxAudioAPO70.dll [2370480]
O44 - LFC:[MD5.029366F4A3F3CDA59E419CEF863D8D4B] - 2016-11-14 - 21:11:54 ---A- . (.Waves Audio Ltd. - MaxxVoice APO.) -- C:\Windows\System32\MaxxVoiceAPO30.dll [11899824]
O44 - LFC:[MD5.8C6039F95F04FB50C9DB8C888BADCA83] - 2016-11-14 - 21:11:58 ---A- . (.Waves Audio Ltd. - MaxxVoice APO.) -- C:\Windows\System32\MaxxVoiceAPO40.dll [11785136]
O44 - LFC:[MD5.9B5944C94F01E70007823B91AD98E643] - 2016-11-14 - 21:12:00 ---A- . (.Nahimic Inc - Nahimic APO lfx dll.) -- C:\Windows\System32\NAHIMICAPOlfx.dll [4713224]
O44 - LFC:[MD5.98B3FDAED341CE30AAA534CA385517FB] - 2016-11-14 - 21:12:00 ---A- . (.Sony Corporation - Sony MISS APO(32bit).) -- C:\Windows\System32\MISS_APO.dll [852016]
O44 - LFC:[MD5.8EFA36770AF57FA9AA65841053577C44] - 2016-11-14 - 21:12:01 ---A- . (.Nahimic Inc - Nahimic APO Settings Communication Dll.) -- C:\Windows\System32\NahimicAPONSControl.dll [945456]
O44 - LFC:[MD5.811FB86C92666EED9C742DD68B71CAC6] - 2016-11-14 - 21:12:01 ---A- . (.Nahimic Inc - Nahimic APO lfx dll.) -- C:\Windows\System32\NAHIMICV2apo.dll [5073344]
O44 - LFC:[MD5.01FF3FE6E7A893661AF6C5D6246C1368] - 2016-11-14 - 21:12:10 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) LFX/GFX DSP component.) -- C:\Windows\System32\RltkAPO.dll [2585816]
O44 - LFC:[MD5.4B540CD34B883C174008F33F249D6773] - 2016-11-14 - 21:12:14 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Coinstaller.) -- C:\Windows\System32\RtkCoLDR.dll [13416]
O44 - LFC:[MD5.AA4AF9F45BC6D6002EC6FF0813B29BDB] - 2016-11-14 - 21:12:16 ---A- . (.Sound Research, Corp. - SEAPO.DLL.) -- C:\Windows\System32\SEAPO32.dll [372368]
O44 - LFC:[MD5.90057B1D85470C7FF99F9BAD02615265] - 2016-11-14 - 21:12:16 ---A- . (.Sound Research, Corp. - SECOMN.DLL.) -- C:\Windows\System32\SECOMN32.dll [555664]
O44 - LFC:[MD5.896948FF2B281C242665AC07DC4B13A8] - 2016-11-14 - 21:12:16 ---A- . (.Sound Research, Corp. - SEHDRA.DLL.) -- C:\Windows\System32\SEHDRA32.dll [704656]
O44 - LFC:[MD5.8F8B0AD16B154448D81A88FF736B53BD] - 2016-11-14 - 21:12:18 ---A- . (.Synopsys, Inc. - SRAPO.DLL.) -- C:\Windows\System32\SRAPO.dll [388752]
O44 - LFC:[MD5.48435D12B45AB1F954CB579D1EA15D52] - 2016-11-14 - 21:12:18 ---A- . (.Synopsys, Inc. - SRCOM.DLL.) -- C:\Windows\System32\SRCOM.dll [329360]
O44 - LFC:[MD5.316C6609984802B43C34209FE5256BCC] - 2016-11-14 - 21:12:18 ---A- . (.Synopsys, Inc. - SRRPTR.DLL.) -- C:\Windows\System32\SRRPTR.dll [1055888]
O44 - LFC:[MD5.47AC41518B5DCD65FCED33A129CDB1C1] - 2016-11-14 - 21:12:18 ---A- . (.TOSHIBA Corporation - TOSHIBA Audio Enhancement APO.) -- C:\Windows\System32\tadefxapo.dll [134584]
O44 - LFC:[MD5.38136C24E80EA6C7C0A227A2AD433FA7] - 2016-11-14 - 21:12:18 ---A- . (.TOSHIBA Corporation - TOSHIBA Audio Enhancement.) -- C:\Windows\System32\tosade.dll [1379760]
O44 - LFC:[MD5.FD6EEA9E5084065A7783CE4E6FB5524E] - 2016-11-14 - 21:12:18 ---A- . (.TOSHIBA Corporation - TOSHIBA Speaker Audio Enhancement Maximizer.) -- C:\Windows\System32\tossaemaxapo32.dll [220088]
O44 - LFC:[MD5.CCE71ECBB86E9E15E5C427F92474ADC9] - 2016-11-15 - 18:10:07 ---A- . (.Dolby Laboratories - Dolby DS1PC Control Panel x86.) -- C:\Windows\System32\DDPP32A.dll [6178136]
O44 - LFC:[MD5.1C18A78B9AAA3383D788945358228EB8] - 2016-11-15 - 18:10:07 ---A- . (.Dolby Laboratories - Dolby Digital Plus API x86.) -- C:\Windows\System32\DDPA32.dll [220504]
O44 - LFC:[MD5.79DB77A727F588792CC8E8D1C27CF9A9] - 2016-11-15 - 18:10:07 ---A- . (.Dolby Laboratories - Dolby Digital Plus APO x86.) -- C:\Windows\System32\DDPO32A.dll [269144]
O44 - LFC:[MD5.4B4F0C254B5EF76237D37B57AEBD80DD] - 2016-11-15 - 18:10:07 ---A- . (.Dolby Laboratories - Dolby Digital Plus COM DLL x86.) -- C:\Windows\System32\DDPD32A.dll [1439064]
O44 - LFC:[MD5.5DC63593D7C091F6744291903720AABD] - 2016-11-15 - 18:10:07 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\audioLibVc.dll [502584]
O44 - LFC:[MD5.7A5345F14918540DEA7D69CA25AD8A6D] - 2016-11-15 - 18:10:07 ---A- . (.Real Sound Lab SIA - CONEQ™ Media Suite APO GUI Library.) -- C:\Windows\System32\CONEQMSAPOGUILibrary.dll [92584]
O44 - LFC:[MD5.142F7805ABD1B80E75E4DC2919BAC0F4] - 2016-11-15 - 18:10:14 ---A- . (.Waves Audio Ltd. - MaxxAudio APO Shell.) -- C:\Windows\System32\MaxxAudioAPOShell.dll [859392]
O44 - LFC:[MD5.8CFD1ADD4FE46F2E219F0FCCD1A17B77] - 2016-11-15 - 18:10:14 ---A- . (.Waves Audio Ltd. - MaxxAudio APO.) -- C:\Windows\System32\MaxxAudioAPO40.dll [873728]
O44 - LFC:[MD5.826A9FA7271E55CF2AED9CA1A4562D1B] - 2016-11-15 - 18:10:14 ---A- . (.Waves Audio Ltd. - MaxxAudio APO.) -- C:\Windows\System32\MaxxAudioAPO50.dll [1097984]
O44 - LFC:[MD5.B6C3E25A5083D00B0F00D5953FCDE7FD] - 2016-11-15 - 18:10:14 ---A- . (.Waves Audio Ltd. - Waves Realtek App.) -- C:\Windows\System32\MaxxAudioRealtek2.dll [1677568]
O44 - LFC:[MD5.A7CDADF164A6911790E93437B4670741] - 2016-11-15 - 18:10:15 ---A- . (.Waves Audio Ltd. - MaxxSpeech APO.) -- C:\Windows\System32\MaxxSpeechAPO.dll [642304]
O44 - LFC:[MD5.6C08E20C80F1DF74AB2EBA3DFA7CB870] - 2016-11-15 - 18:10:15 ---A- . (.Waves Audio Ltd. - MaxxVoice APO.) -- C:\Windows\System32\MaxxVoiceAPO20.dll [761088]
O44 - LFC:[MD5.25ACE332F1CC0130A14448B1E78D00D8] - 2016-11-15 - 18:10:15 ---A- . (.Waves Audio Ltd. - Pas de description.) -- C:\Windows\System32\MaxxAudioVnA.dll [27368704]
O44 - LFC:[MD5.BCE8E0061E4C5CAAD5B2E2F76904DC98] - 2016-11-15 - 18:10:15 ---A- . (.Waves Audio Ltd. - Pas de description.) -- C:\Windows\System32\MaxxAudioVnN.dll [3443968]
O44 - LFC:[MD5.468F7BE75A621681F0A41CD6C8BE6C88] - 2016-11-15 - 18:10:20 ---A- . (.ASUSTeKcomputer.Inc Inc - Nahimic APO lfx dll.) -- C:\Windows\System32\RTKSMlfx.dll [4222104]
O44 - LFC:[MD5.481468E567F174546989A0B30E255924] - 2016-11-15 - 18:10:20 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Coinstaller.) -- C:\Windows\System32\RtkCoInstII.dll [122072]
O44 - LFC:[MD5.6E04D1B9120F7F811A6756BC3A2E27E1] - 2016-11-15 - 18:10:21 ---A- . (.ASUSTeKcomputer.Inc Inc - Nahimic APO Settings Communication Dll.) -- C:\Windows\System32\RTKSMSettingsIPC.dll [798520]
O44 - LFC:[MD5.05BEB35AB91598CEDB855FBE7B6340F0] - 2016-11-15 - 18:10:21 ---A- . (.DTS, Inc. - DTS Studio Sound.) -- C:\Windows\System32\sl3apo32.dll [823040]
O44 - LFC:[MD5.DD4CAC4964AA30D4D546655F6191439E] - 2016-11-15 - 18:10:21 ---A- . (.DTS, Inc. - DTS Studio Sound.) -- C:\Windows\System32\sltech32.dll [604928]
O44 - LFC:[MD5.75E8525FB95924C92786CAF2B4A02A44] - 2016-11-15 - 18:10:21 ---A- . (.SRS Labs, Inc. - SRS Labs.) -- C:\Windows\System32\slcnt32.dll [938752]
O44 - LFC:[MD5.FF0F1ABF60362922ADEB97B1F97FFE64] - 2016-11-15 - 18:10:21 ---A- . (.Sony Corporation - Sony SFSS APO(32bit).) -- C:\Windows\System32\SFSS_APO.dll [912432]
O44 - LFC:[MD5.C5BBD33D408D932049F8AAB062E614DB] - 2016-11-15 - 18:10:21 ---A- . (.TODO: - TODO: .) -- C:\Windows\System32\slprp32.dll [218368]
O44 - LFC:[MD5.1EF2A77F3F4951CC25EEEA882376A769] - 2016-11-15 - 18:10:29 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\drivers\rtvienna.dat [5681192]
O44 - LFC:[MD5.950F61ED7C6DBFAD41059F754AF35469] - 2016-11-15 - 20:14:32 ---A- . (.Realtek Semiconductor Corp. - Hide Windows.) -- C:\Windows\HideWin.exe [319488]
O44 - LFC:[MD5.B8D51A5F2961AE381723F964978AA848] - 2016-11-15 - 20:24:55 R---- . (.Realtek Semiconductor Corp. - Driver Removing for Windows x64 or x86_32.) -- C:\Windows\alcrmv.exe [217088]
O44 - LFC:[MD5.A3CF502659EF4EBA42C70E832ED967ED] - 2016-11-15 - 20:24:55 R---- . (.Realtek Semiconductor Corp. - Driver Update for Windows x64 or x86_32.) -- C:\Windows\alcupd.exe [315392]
O44 - LFC:[MD5.B8252B042AB6DCE281D079253A404A38] - 2016-11-15 - 20:25:18 R---- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\avrack.ini [164]
O44 - LFC:[MD5.43C3571EADA5BC1EDEAD7CA22AD66F30] - 2016-11-15 - 20:28:41 R---- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ChCfg.exe [49152]
O44 - LFC:[MD5.C99E22EFE74C8B3EFF93E227472FE247] - 2016-11-15 - 20:28:41 R---- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\alsndmgr.wav [141016]
O44 - LFC:[MD5.BB47824F9B42B7EF93E4F7129782A48E] - 2016-11-15 - 20:28:41 R---- . (.Pas de propriétaire - RtlCPAPI Module.) -- C:\Windows\System32\RtlCPAPI.dll [147456]
O44 - LFC:[MD5.00696C0AB6AABA7FD4E64AB61BE95F6A] - 2016-11-15 - 20:28:41 R---- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\Windows\System32\drivers\alcxwdm.sys [4027456]
O44 - LFC:[MD5.3390B4635D37163CB5B2C0A13403B58B] - 2016-11-15 - 20:28:41 R---- . (.Realtek Semiconductor Corp. - Realtek AC97 Audio Control Panel.) -- C:\Windows\System32\alsndmgr.cpl [18804736]
O44 - LFC:[MD5.336402653D18149456C1AF57A6529A99] - 2016-11-15 - 20:28:41 R---- . (.Realtek Semiconductor Corp. - Realtek Audio Control Panel.) -- C:\Windows\System32\RTLCPL.exe [10528768]
O44 - LFC:[MD5.FB1BC9A15A3DF6CFD446E1B3BD0B5099] - 2016-11-15 - 20:28:41 R---- . (.Realtek Semiconductor Corp. - Realtek Sound Manager.) -- C:\Windows\soundman.exe [577536]
O44 - LFC:[MD5.065CE3024B01A15BD17B33B4B75384E9] - 2016-11-17 - 11:39:16 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Control Panel.) -- C:\Windows\System32\RTSndMgr.cpl [1497704]
O44 - LFC:[MD5.F735CA9865575F95BEF73BD6D1C040A9] - 2016-11-17 - 11:39:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\drivers\RTAIODAT.DAT [150996]
O44 - LFC:[MD5.C64ABAD6127CB916FD14BB5B8AA9096F] - 2016-11-17 - 11:39:17 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Coinstaller Resource.) -- C:\Windows\System32\RCoRes.dat [1873920]
O44 - LFC:[MD5.3781415D2B09DB870C0B9DFEB29A88D9] - 2016-11-17 - 11:39:51 ---A- . (.DTS - DTS GFX APO.) -- C:\Windows\System32\DTSU2PGFX32.dll [390656]
O44 - LFC:[MD5.040BE746CB773CBBDE5A5EF313C1C5EA] - 2016-11-17 - 11:39:51 ---A- . (.DTS - DTS LFX APO.) -- C:\Windows\System32\DTSU2PLFX32.dll [413696]
O44 - LFC:[MD5.2014F956A83FD7CB04CBDDC6BB82D706] - 2016-11-17 - 11:39:51 ---A- . (.DTS - DTS LFX APO.) -- C:\Windows\System32\DTSU2PREC32.dll [327168]
O44 - LFC:[MD5.56056DF5DC4CFCCA657E57E8FF3714B0] - 2016-11-17 - 11:39:52 ---A- . (.Knowles Acoustics - Knowles HD Audio APO.) -- C:\Windows\System32\KAAPORT.dll [357712]
O44 - LFC:[MD5.5FC70DE2608FE8DD15366A9E3EB75899] - 2016-11-17 - 11:39:53 ---A- . (.Waves Audio Ltd. - Pas de description.) -- C:\Windows\System32\MaxxAudioEQ.dll [1836376]
O44 - LFC:[MD5.3DB3BD3BE8DC7DE94EC9D946DCA7F5A3] - 2016-11-17 - 11:39:53 ---A- . (.Waves Audio Ltd. - Pas de description.) -- C:\Windows\System32\MaxxAudioRealtek.dll [3327320]
O44 - LFC:[MD5.5672B184D89ED8677F3D747B644D04BC] - 2016-11-17 - 11:39:54 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) LFX/GFX DSP component.) -- C:\Windows\System32\RtkAPO.dll [4238440]
O44 - LFC:[MD5.00B608C21351E1F5D5C6E025E2CFD60D] - 2016-11-17 - 11:39:55 ---A- . (.Realtek Semiconductor Corp. - Realtek APO API.) -- C:\Windows\System32\RtkApoApi.dll [1329768]
O44 - LFC:[MD5.83F85F296F53705157043574F286B686] - 2016-11-17 - 11:39:55 ---A- . (.Realtek Semiconductor Corp. - Realtek HD Audio Coinstaller.) -- C:\Windows\System32\RtkCoInst.dll [83048]
O44 - LFC:[MD5.D4890A2D1C3326D04657DC0EF974AF70] - 2016-11-17 - 11:39:55 ---A- . (.Realtek Semiconductor Corp. - Realtek LFX/GFX DSP UI component for Window.) -- C:\Windows\System32\RtkPgExt.dll [2276968]
O44 - LFC:[MD5.D9397A5E3929F61FFA83F07285C414C5] - 2016-11-17 - 11:39:55 ---A- . (.Synopsys, Inc. - SFAPO.DLL.) -- C:\Windows\System32\SFAPO.dll [68960]
O44 - LFC:[MD5.736B9CBB1AF8324171CFA3787A024588] - 2016-11-17 - 11:39:55 ---A- . (.Synopsys, Inc. - SFCOM.DLL.) -- C:\Windows\System32\SFCOM.dll [74080]
O44 - LFC:[MD5.4D7D49A61594B8A643EA8EAF74F2150C] - 2016-11-17 - 11:39:55 ---A- . (.Synopsys, Inc. - SFNHK.DLL.) -- C:\Windows\System32\SFNHK.dll [214368]
O44 - LFC:[MD5.DCE348E0AD1C6D9519B59B6056D31821] - 2016-11-17 - 11:39:56 ---A- . (.TOSHIBA CORPORATION. - Tepeq APO.) -- C:\Windows\System32\TepeqAPO.dll [58264]
O44 - LFC:[MD5.30C17DB11AF0C94F0F6AABB7446A58F3] - 2016-11-17 - 11:39:56 ---A- . (.TOSHIBA Corporation - TOSHIBA Audio Enhancement APO.) -- C:\Windows\System32\tadefxapo2.dll [178624]
O44 - LFC:[MD5.3D17D174130ED402BF9D052EC5A84DFF] - 2016-11-17 - 11:39:57 ---A- . (.Waves Audio Ltd. - General Library for Plug-Ins.) -- C:\Windows\System32\WavesGUILib.dll [1725784]
O44 - LFC:[MD5.345AC48D17F5C2F2AA1EE50D34C3978B] - 2016-11-17 - 11:40:00 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHDA.sys [3546664]
O44 - LFC:[MD5.174AAAEB00A5982DF968824ED92D5621] - 2016-11-27 - 18:21:31 ---A- . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\Windows\System32\drivers\nvvad32v.sys [50744]
O44 - LFC:[MD5.3CFC92C43EE7723A3CD0C84FDD2DCA2D] - 2016-11-27 - 18:21:31 ---A- . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\Windows\System32\nvaudcap32v.dll [102976]
O44 - LFC:[MD5.7D920148FF8EA7A9A6CDFA68E1F0118A] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\PerfStringBackup.INI [7330736]
O44 - LFC:[MD5.AF61EABC9C08C5AAA605AEFCCF398BA9] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc001.dat [94026]
O44 - LFC:[MD5.538C079717BBC8C3F43A67D7CE5F2CCC] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc007.dat [148370]
O44 - LFC:[MD5.0DBBBF3E2434821AE25446EA94990AD1] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc009.dat [121398]
O44 - LFC:[MD5.8430093410FA540CCB79C679138C15DE] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00C.dat [149440]
O44 - LFC:[MD5.63A74988EE6F416DFE08BADF83EE4216] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc00E.dat [170528]
O44 - LFC:[MD5.C353F704CA4A298CC894730EA9F2EE4C] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc010.dat [146100]
O44 - LFC:[MD5.15CFD6C5CE4FB6D10925C618BC126849] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc013.dat [152356]
O44 - LFC:[MD5.E2A6771742D0EDE11FF3D7240C7E3BC6] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc019.dat [150096]
O44 - LFC:[MD5.141ED7E6F0AB414E1C33B5DE739D6E32] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfc01F.dat [139254]
O44 - LFC:[MD5.D836D2C8326A313D77E17313A4A4B2CB] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh001.dat [470204]
O44 - LFC:[MD5.BA20F3FA690337E4AA1C1D293EB75697] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh007.dat [688398]
O44 - LFC:[MD5.1AFED3FE03A8B3E40E736FF3398446DD] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh009.dat [653526]
O44 - LFC:[MD5.7D0DEE9137E259A626187548CADC9B83] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00C.dat [746916]
O44 - LFC:[MD5.3CE9F3DE4E98FBC081421F8BB1D465AF] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh00E.dat [674944]
O44 - LFC:[MD5.204DF1946493312F6B6A9B438D00CC2C] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh010.dat [731236]
O44 - LFC:[MD5.487614337C3B38FF867EB56D60C0A049] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh013.dat [734688]
O44 - LFC:[MD5.FE6DBE598BB8411655B4C8EF11B1727D] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh019.dat [715790]
O44 - LFC:[MD5.4926FEE6F8882AB0E20C660DD12EB8DF] - 2016-12-01 - 23:16:04 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\perfh01F.dat [647872]
O44 - LFC:[MD5.2B60678F0899254156FBD84332E58F0E] - 2016-12-02 - 10:04:14 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\FNTCACHE.DAT [411352]
O44 - LFC:[MD5.A8229625276989A62ACE4D8A423392C0] - 2016-12-03 - 13:41:19 -S-A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.7A1C4E2867EB43929D7B76140CCF4EAB] - 2016-12-03 - 13:49:38 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [13536]
O44 - LFC:[MD5.7A1C4E2867EB43929D7B76140CCF4EAB] - 2016-12-03 - 13:49:38 --HA- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [13536]


---\\ Déni du service (Local Security Authority) (LSA) (O48)
O48 - LSA:Local Security Authority Authentication Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll
O48 - LSA:Local Security Authority Notification Packages . (.Microsoft Corporation - Moteur du client de l’Éditeur de configuration de sécurité Windows.) -- C:\Windows\System32\scecli.dll
O48 - LSA:Local Security Authority Security Packages . (.Microsoft Corporation - Microsoft Authentication Package v1.0.) -- C:\Windows\System32\msv1_0.dll


---\\ MountPoints2 Shell Key (MPSK) (O51)
O51 - MPSK:{13ffdbc2-acaf-11e6-8900-001e90121511}\Shell\AutoRun\command. (.Pas de propriétaire - Pas de description.) -- J:\DriverPackSolution.exe (.not file.)


---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"msacm.l3acm"="L3codeca.acm" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\L3codeca.acm
O52 - TDSD: \Drivers32\"vidc.cvid"="iccvid.dll" . (.Radius Inc. - Codec Cinepak®.) -- C:\Windows\System32\iccvid.dll
O52 - TDSD: \Drivers32\"VIDC.RTV1"="rtvcvfw32.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\rtvcvfw32.dll
O52 - TDSD: \Drivers32\"vidc.tscc"="C:\Windows\system32\tsccvid.dll" . (.TechSmith Corporation - TechSmith Screen Capture Codec.) -- C:\Windows\system32\tsccvid.dll
O52 - TDSD: \Drivers32\"vidc.tsc2"="C:\Windows\system32\tsc2_codec32.dll" . (.TechSmith Corporation - TechSmith Screen Codec 2.) -- C:\Windows\system32\tsc2_codec32.dll
O52 - TDSD: \Drivers32\"vidc.ffds"="ff_vfw.dll" . (.Pas de propriétaire - ffdshow VFW.) -- C:\Windows\System32\ff_vfw.dll
O52 - TDSD: \Drivers32\"msacm.avis"="ff_acm.acm" . (.Pas de propriétaire - ffdshow ACM codec.) -- C:\Windows\System32\ff_acm.acm
O52 - TDSD: \Drivers32\"msacm.aacacm"="AACACM.acm" . (.fccHandler - AAC ACM Codec.) -- C:\Windows\System32\AACACM.acm
O52 - TDSD: \Drivers32\"msacm.ac3acm"="AC3ACM.acm" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\AC3ACM.acm
O52 - TDSD: \Drivers32\"VIDC.CSCD"="CamCodec.dll" . (.CamStudio Group - CamStudio Lossless Video Codec.) -- C:\Windows\System32\CamCodec.dll
O52 - TDSD: \Drivers32\"VIDC.CFHD"="CFHD.dll" . (.CineForm Inc. - CineForm VFW CODEC.) -- C:\Windows\System32\CFHD.dll
O52 - TDSD: \Drivers32\"msacm.lameacm"="LameACM.acm" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\LameACM.acm
O52 - TDSD: \Drivers32\"VIDC.LAGS"="lagarith.dll" . (.Pas de propriétaire - Lagarith.) -- C:\Windows\System32\lagarith.dll
O52 - TDSD: \Drivers32\"VIDC.MLCY"="mlc.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\mlc.dll
O52 - TDSD: \Drivers32\"VIDC.ULRA"="C:\Windows\system32\utv_vcm.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\utv_vcm.dll
O52 - TDSD: \Drivers32\"VIDC.ULRG"="C:\Windows\system32\utv_vcm.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\utv_vcm.dll
O52 - TDSD: \Drivers32\"VIDC.ULY0"="C:\Windows\system32\utv_vcm.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\utv_vcm.dll
O52 - TDSD: \Drivers32\"VIDC.ULY2"="C:\Windows\system32\utv_vcm.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\utv_vcm.dll
O52 - TDSD: \Drivers32\"VIDC.ULH0"="C:\Windows\system32\utv_vcm.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\utv_vcm.dll
O52 - TDSD: \Drivers32\"VIDC.ULH2"="C:\Windows\system32\utv_vcm.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\utv_vcm.dll
O52 - TDSD: \Drivers32\"VIDC.UQY2"="C:\Windows\system32\utv_vcm.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\utv_vcm.dll
O52 - TDSD: \Drivers32\"vidc.x264"="C:\PROGRA~1\x264vfw\x264vfw.dll" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \Drivers32\"vidc.XVID"="xvidvfw.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll
O52 - TDSD: \Drivers32\"VIDC.VP80"="vp8vfw.dll" . (.Optima SC Inc. - Google VP8 VFW Video Codec.) -- C:\Windows\System32\vp8vfw.dll
O52 - TDSD: \Drivers32\"VIDC.IV50"="ir50_32.dll" . (.Intel Corporation - Intel Indeo® video 5.10.) -- C:\Windows\System32\ir50_32.dll
O52 - TDSD: \Drivers32\"VIDC.IV41"="ir41_32.dll" . (.Intel Corporation - Intel Indeo(R) Video Interactive 32-bit Driver.) -- C:\Windows\System32\ir41_32.dll
O52 - TDSD: \Drivers32\"msacm.iac2"="iac25_32.ax" . (.Intel Corporation - Indeo® audio software.) -- C:\Windows\System32\iac25_32.ax
O52 - TDSD: \Drivers32\"VIDC.GEOX"="GeoCodec.dll" . (.GeoVision - GeoVision(R) Codec.) -- C:\Windows\System32\GeoCodec.dll
O52 - TDSD: \Drivers32\"VIDC.GEOV"="GeoCodec.dll" . (.GeoVision - GeoVision(R) Codec.) -- C:\Windows\System32\GeoCodec.dll
O52 - TDSD: \Drivers32\"VIDC.GEOS"="GeoCodecD.dll" . (.GeoVision - GeoVision(R) Codec.) -- C:\Windows\System32\GeoCodecD.dll
O52 - TDSD: \Drivers32\"VIDC.VMnc"="vmnc.dll" . (.VMware, Inc. - VMware Movie decoder.) -- C:\Windows\System32\vmnc.dll
O52 - TDSD: \Drivers32\"VIDC.FICV"="ficvdec_x86.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\ficvdec_x86.dll
O52 - TDSD: \Drivers32\"vidc.mjpg"="bdmjpeg.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\bdmjpeg.dll
O52 - TDSD: \Drivers32\"vidc.mpeg"="bdmpegv.dll" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\bdmpegv.dll
O52 - TDSD: \Drivers32\"msacm.bdmpeg"="bdmpega.acm" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\bdmpega.acm
O52 - TDSD: \drivers.desc\"C:\Windows\System32\l3codeca.acm"="Fraunhofer IIS MPEG Layer-3 Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\l3codeca.acm
O52 - TDSD: \drivers.desc\"rtvcvfw64.dll"="RivaTuner Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\rtvcvfw64.dll
O52 - TDSD: \drivers.desc\"rtvcvfw32.dll"="RivaTuner Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\rtvcvfw32.dll
O52 - TDSD: \drivers.desc\"tsccvid.dll"="TechSmith Screen Capture Codec" . (.TechSmith Corporation - TechSmith Screen Capture Codec.) -- C:\Windows\System32\tsccvid.dll
O52 - TDSD: \drivers.desc\"tsc2_codec32.dll"="TechSmith Screen Codec 2" . (.TechSmith Corporation - TechSmith Screen Codec 2.) -- C:\Windows\System32\tsc2_codec32.dll
O52 - TDSD: \drivers.desc\"ff_vfw.dll"="FFDShow Video Encoder" . (.Pas de propriétaire - ffdshow VFW.) -- C:\Windows\System32\ff_vfw.dll
O52 - TDSD: \drivers.desc\"ff_acm.acm"="FFDShow ACM Codec" . (.Pas de propriétaire - ffdshow ACM codec.) -- C:\Windows\System32\ff_acm.acm
O52 - TDSD: \drivers.desc\"AACACM.acm"="AAC ACM Codec" . (.fccHandler - AAC ACM Codec.) -- C:\Windows\System32\AACACM.acm
O52 - TDSD: \drivers.desc\"AC3ACM.acm"="AC-3 ACM Codec" . (.fccHandler - AC-3 ACM Codec.) -- C:\Windows\System32\AC3ACM.acm
O52 - TDSD: \drivers.desc\"CamCodec.dll"="CamStudio Lossless Codec" . (.CamStudio Group - CamStudio Lossless Video Codec.) -- C:\Windows\System32\CamCodec.dll
O52 - TDSD: \drivers.desc\"CFHD.dll"="CineForm HD CODEC" . (.CineForm Inc. - CineForm VFW CODEC.) -- C:\Windows\System32\CFHD.dll
O52 - TDSD: \drivers.desc\"LameACM.acm"="Lame ACM MP3 Codec" . (.http://www.mp3dev.org/ - Lame MP3 codec engine.) -- C:\Windows\System32\LameACM.acm
O52 - TDSD: \drivers.desc\"L3codeca.acm"="MPEG Layer-3 Professional Audio Codec" . (.Fraunhofer Institut Integrierte Schaltungen - MPEG Layer-3 Audio Codec for MSACM.) -- C:\Windows\System32\L3codeca.acm
O52 - TDSD: \drivers.desc\"lagarith.dll"="Lagarith lossless codec [LAGS]" . (.Pas de propriétaire - Lagarith.) -- C:\Windows\System32\lagarith.dll
O52 - TDSD: \drivers.desc\"mlc.dll"="MLC Lossless Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\mlc.dll
O52 - TDSD: \drivers.desc\"C:\PROGRA~1\x264vfw\x264vfw.dll"="x264vfw - H.264/MPEG-4 AVC codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"xvidvfw.dll"="Xvid MPEG-4 Video Codec" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\xvidvfw.dll
O52 - TDSD: \drivers.desc\"vp8vfw.dll"="VP8 Video Codec" . (.Optima SC Inc. - Google VP8 VFW Video Codec.) -- C:\Windows\System32\vp8vfw.dll
O52 - TDSD: \drivers.desc\"ir50_32.dll"="Ligos Indeo XP v.5.2 codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"ir41_32.dll"="Indeo Video v.4.1 codec" . (.Pas de propriétaire - Pas de description.) -- (.not file.)
O52 - TDSD: \drivers.desc\"GeoCodec.dll"="GeoVision MPEG4" . (.GeoVision - GeoVision(R) Codec.) -- C:\Windows\System32\GeoCodec.dll
O52 - TDSD: \drivers.desc\"GeoCodecD.dll"="GeoVision MPEG4 Decoder" . (.GeoVision - GeoVision(R) Codec.) -- C:\Windows\System32\GeoCodecD.dll
O52 - TDSD: \drivers.desc\"vmnc.dll"="VMnc lossless codec [VMnc]" . (.VMware, Inc. - VMware Movie decoder.) -- C:\Windows\System32\vmnc.dll
O52 - TDSD: \drivers.desc\"bdmjpeg.dll"="Bandi Motion Jpeg" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\bdmjpeg.dll
O52 - TDSD: \drivers.desc\"bdmpegv.dll"="Bandi MPEG-1 Video" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\bdmpegv.dll
O52 - TDSD: \drivers.desc\"bdmpega.acm"="Bandi MPEG-1 Audio" . (.Pas de propriétaire - Pas de description.) -- C:\Windows\System32\bdmpega.acm


---\\ ShareTools MSconfig StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
O53 - SMSR:HKLM\...\startupreg\AirDroid 3 [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\AirDroid\AirDroid.exe
O53 - SMSR:HKLM\...\startupreg\Apoint [Key] . (.Alps Electric Co., Ltd. - Alps Pointing-device Driver.) -- C:\Program Files\Apoint2K\Apoint.exe
O53 - SMSR:HKLM\...\startupreg\AvgUi [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\AVG\Framework\Common\avguirnx.exe
O53 - SMSR:HKLM\...\startupreg\BingSvc [Key] . (.© 2015 Microsoft Corporation - Microsoft Bing Service.) -- C:\Users\lamdjed\AppData\Local\Microsoft\BingSvc\BingSvc.exe
O53 - SMSR:HKLM\...\startupreg\CCleaner Monitoring [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\CCleaner\CCleaner.exe
O53 - SMSR:HKLM\...\startupreg\Chedot [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Users\lamdjed\AppData\Local\Chedot\Application\chedot.exe
O53 - SMSR:HKLM\...\startupreg\CNAP2 Launcher [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\spool\DRIVERS\W32X86\3\CNAP2LAK.exe
O53 - SMSR:HKLM\...\startupreg\DriverPack Notifier [Key] . (.Pas de propriétaire - Software and Drivers.) -- C:\Program Files\DriverPack Notifier\DriverPackNotifier.exe
O53 - SMSR:HKLM\...\startupreg\EADM [Key] . (.Pas de propriétaire - Pas de description.) -- "D:\Origin\Origin.exe
O53 - SMSR:HKLM\...\startupreg\ETDCtrl [Key] . (.ELAN Microelectronics Corp. - ETD Control Center.) -- C:\Program Files\Elantech\ETDCtrl.exe
O53 - SMSR:HKLM\...\startupreg\ic-0.753300af92361c.exe -start [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Users\lamdjed\AppData\Local\Temp\64888085\ic-0.753300af92361c.exe
O53 - SMSR:HKLM\...\startupreg\IDMan [Key] . (.Tonec Inc. - Internet Download Manager (IDM).) -- C:\Program Files\Internet Download Manager\IDMan.exe
O53 - SMSR:HKLM\...\startupreg\NvBackend [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
O53 - SMSR:HKLM\...\startupreg\PixelPlanet PdfPrinter-Monitor [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Common Files\PixelPlanet\PdfPrinter 7\PdfPrinterMonitor.exe
O53 - SMSR:HKLM\...\startupreg\PWRISOVM.EXE [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\PowerISO\PWRISOVM.exe
O53 - SMSR:HKLM\...\startupreg\RTHDVCPL [Key] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
O53 - SMSR:HKLM\...\startupreg\Screenleap [Key] . (.Screenleap, Inc. - Screenleap Application.) -- C:\Users\lamdjed\AppData\Local\Screenleap\Screenleap.exe
O53 - SMSR:HKLM\...\startupreg\ShadowPlay [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\nvspcap.dll
O53 - SMSR:HKLM\...\startupreg\Skype [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Skype\Phone\Skype.exe
O53 - SMSR:HKLM\...\startupreg\SRS Audio Sandbox [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\SRS Labs\Audio Sandbox\SRSSSC.exe
O53 - SMSR:HKLM\...\startupreg\Steam [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Steam\steam.exe
O53 - SMSR:HKLM\...\startupreg\SynTPEnh [Key] . (.Pas de propriétaire - Pas de description.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O53 - SMSR:HKLM\...\startupreg\Unified Remote V3 [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Unified Remote 3\RemoteServerWin.exe
O53 - SMSR:HKLM\...\startupreg\uTorrent [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Users\lamdjed\AppData\Roaming\uTorrent\uTorrent.exe
O53 - SMSR:HKLM\...\startupreg\Windows Defender [Key] . (.Microsoft Corporation - Windows Defender User Interface.) -- C:\Program Files\Windows Defender\MSASCui.exe
O53 - SMSR:HKLM\...\startupreg\World of Tanks [Key] . (.Pas de propriétaire - Pas de description.) -- "C:\Games\World_of_Tanks\WargamingGameUpdater.exe


---\\ Microsoft Control Security Providers (MCSP) (O54)
O54 - MCSP:[HKLM\...\CurrentControlSet\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll
O54 - MCSP:[HKLM\...\ControlSet001\Control] - (SecurityProviders) - (.Microsoft Corporation - Credential Delegation Security Package.) -- C:\Windows\system32\credssp.dll


---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorAdmin"=5
O55 - MWPS:[HKLM\...\Policies\System] - "ConsentPromptBehaviorUser"=3
O55 - MWPS:[HKLM\...\Policies\System] - "EnableInstallerDetection"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableLUA"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableSecureUIAPaths"=1
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "EnableVirtualization"=1
O55 - MWPS:[HKLM\...\Policies\System] - "PromptOnSecureDesktop"=1
O55 - MWPS:[HKLM\...\Policies\System] - "ValidateAdminCodeSignatures"=0
O55 - MWPS:[HKLM\...\Policies\System] - "dontdisplaylastusername"=0
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticecaption"=
O55 - MWPS:[HKLM\...\Policies\System] - "legalnoticetext"=
O55 - MWPS:[HKLM\...\Policies\System] - "scforceoption"=0
O55 - MWPS:[HKLM\...\Policies\System] - "shutdownwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "undockwithoutlogon"=1
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0


---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKCU\...\policies\Explorer] - "NoDriveTypeAutoRun"=0
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoDriveTypeAutoRun"=221


---\\ Liste des Drivers Système (SDL) (O58)
O58 - SDL:[MD5.21E785EBD7DC90A06391141AAC7892FB] - 2009-07-14 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\system32\drivers\adp94xx.sys [422976]
O58 - SDL:[MD5.0C676BC278D5B59FF5ABD57BBE9123F2] - 2009-07-14 - 02:26:17 ---A- . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\system32\drivers\adpahci.sys [297552]
O58 - SDL:[MD5.7C7B5EE4B7B822EC85321FE23A27DB33] - 2009-07-14 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\system32\drivers\adpu320.sys [146512]
O58 - SDL:[MD5.00696C0AB6AABA7FD4E64AB61BE95F6A] - 2007-01-25 - 09:37:16 R---- . (.Realtek Semiconductor Corp. - Realtek AC'97 Audio Driver (WDM).) -- C:\Windows\system32\drivers\alcxwdm.sys [4027456]
O58 - SDL:[MD5.0D40BCF52EA90FC7DF2AEAB6503DEA44] - 2009-07-14 - 02:26:15 ---A- . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\system32\drivers\aliide.sys [14400]
O58 - SDL:[MD5.E7F4D42D8076EC60E21715CD11743A0D] - 2010-11-20 - 13:29:13 ---A- . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\system32\drivers\amdsata.sys [80256]
O58 - SDL:[MD5.EA43AF0C423FF267355F74E7A53BDABA] - 2009-07-14 - 02:26:15 ---A- . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller Driver for Windows fa.) -- C:\Windows\system32\drivers\amdsbs.sys [159312]
O58 - SDL:[MD5.146459D2B08BFDCBFA856D9947043C81] - 2010-11-20 - 13:29:15 ---A- . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\system32\drivers\amdxata.sys [22400]
O58 - SDL:[MD5.C03BA4A5E790E2D7BA16E2F137D78FF9] - 2016-05-19 - 13:55:38 ---A- . (.Alcor Micro, Corp. - Alocr Micro USB Mass Storage Driver.) -- C:\Windows\system32\drivers\AmUStor.sys [69120]
O58 - SDL:[MD5.2169C48AD3B97CC6D4DE4F38E4BFFC06] - 2007-05-08 - 08:26:40 ---A- . (.Alps Electric Co., Ltd. - Alps Touch Pad Driver.) -- C:\Windows\system32\drivers\Apfiltr.sys [158720]
O58 - SDL:[MD5.2932004F49677BD84DBC72EDB754FFB3] - 2009-07-14 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\system32\drivers\arc.sys [76368]
O58 - SDL:[MD5.5D6F36C46FD283AE1B57BD2E9FEB0BC7] - 2009-07-14 - 02:26:15 ---A- . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\system32\drivers\arcsas.sys [86608]
O58 - SDL:[MD5.BD8869EB9CDE6BBE4508D869929869EE] - 2009-07-13 - 23:02:49 ---A- . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gigabit Ethernet..) -- C:\Windows\system32\drivers\b57nd60x.sys [229888]
O58 - SDL:[MD5.9F9ACC7F7CCDE8A15C282D3F88B43309] - 2009-07-13 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower Filter Driver.) -- C:\Windows\system32\drivers\BrFiltLo.sys [13568]
O58 - SDL:[MD5.56801AD62213A41F6497F96DEE83755A] - 2009-07-13 - 23:53:28 ---A- . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper Filter Driver.) -- C:\Windows\system32\drivers\BrFiltUp.sys [5248]
O58 - SDL:[MD5.845B8CE732E67F3B4133164868C666EA] - 2009-07-14 - 01:57:25 ---A- . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\system32\drivers\BrSerId.sys [272128]
O58 - SDL:[MD5.203F0B1E73ADADBBB7B7B1FABD901F6B] - 2009-07-13 - 23:53:32 ---A- . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\system32\drivers\BrSerWdm.sys [62336]
O58 - SDL:[MD5.BD456606156BA17E60A04E18016AE54B] - 2009-07-13 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\system32\drivers\BrUsbMdm.sys [12160]
O58 - SDL:[MD5.AF72ED54503F717A43268B3CC5FAEC2E] - 2009-07-13 - 23:53:33 ---A- . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\system32\drivers\BrUsbSer.sys [11904]
O58 - SDL:[MD5.1A231ABEC60FD316EC54C66715543CEC] - 2009-07-13 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\system32\drivers\bxvbdx.sys [430080]
O58 - SDL:[MD5.C537B1DB64D495B9B4717B4D6D9EDBF2] - 2009-07-14 - 02:26:21 ---A- . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\cmdide.sys [15952]
O58 - SDL:[MD5.48CA0EF55ECA320EF7862B75B91662FE] - 2009-12-01 - 04:11:28 ---A- . (.C-Media Inc - C-Media Audio WDM Driver.) -- C:\Windows\system32\drivers\cmudax3.sys [1872192]
O58 - SDL:[MD5.8B30250D573A8F6B4BD23195160D8707] - 2009-07-14 - 02:20:28 ---A- . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\system32\drivers\djsvs.sys [70720]
O58 - SDL:[MD5.A574CC849C6F63251B328680A623CFA8] - 2016-10-13 - 15:39:14 ---A- . (.ESET - Amon monitor.) -- C:\Windows\system32\drivers\eamonm.sys [179336]
O58 - SDL:[MD5.7576E5B1873C51D479E8E21EEEB45B31] - 2016-10-13 - 15:39:14 ---A- . (.ESET - Devmon monitor.) -- C:\Windows\system32\drivers\edevmon.sys [164480]
O58 - SDL:[MD5.98807A2D7AD4247475C23597C01703B9] - 2016-10-13 - 15:39:14 ---A- . (.ESET - ESET Helper driver.) -- C:\Windows\system32\drivers\ehdrv.sys [139392]
O58 - SDL:[MD5.C8E6676CEC030922713E1AE526487213] - 2016-10-13 - 15:39:14 ---A- . (.ESET - ESET OPP Keyboard Filter.) -- C:\Windows\system32\drivers\ekbdflt.sys [43144]
O58 - SDL:[MD5.0ED67910C8C326796FAA00B2BF6D9D3C] - 2009-07-14 - 02:20:28 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\system32\drivers\elxstor.sys [453712]
O58 - SDL:[MD5.25712E18B50A529D16C3EA111065B674] - 2016-10-13 - 15:39:14 ---A- . (.ESET - ESET Personal Firewall driver.) -- C:\Windows\system32\drivers\epfw.sys [68232]
O58 - SDL:[MD5.A3E8BF2FF120D4861B1B2C1C98800A02] - 2016-10-13 - 15:39:14 ---A- . (.ESET - Epfw NDIS LightWeight Filter.) -- C:\Windows\system32\drivers\EpfwLWF.sys [51848]
O58 - SDL:[MD5.312E3526581156796B266904C59269F4] - 2016-10-13 - 15:39:14 ---A- . (.ESET - ESET Personal Firewall driver.) -- C:\Windows\system32\drivers\epfwwfp.sys [78472]
O58 - SDL:[MD5.327E4FA625C2E7561D39A02814674FF1] - 2012-04-27 - 17:16:24 ---A- . (.ELAN Microelectronics Corp. - ETD Kernel Center.) -- C:\Windows\system32\drivers\ETD.sys [224592]
O58 - SDL:[MD5.024E1B5CAC09731E4D868E64DBFB4AB0] - 2009-07-13 - 23:02:48 ---A- . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\system32\drivers\evbdx.sys [3100160]
O58 - SDL:[MD5.560B07041FA335481C4D5DE7D2FDA159] - 2016-02-16 - 10:04:26 ---A- . (.Huawei Technologies Co., Ltd. - Filter Driver.) -- C:\Windows\system32\drivers\ew_usbccgpfilter.sys [15360]
O58 - SDL:[MD5.C44E3C2BAB6837DB337DDEE7544736DB] - 2009-07-13 - 23:54:14 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\system32\drivers\hcw85cir.sys [26624]
O58 - SDL:[MD5.CEBFACF76E17FAEBA25FADF477CEB40C] - 2016-03-22 - 09:42:46 ---A- . (.Windows (R) Win 7 DDK provider - Filter Driver for HID-KMDF Interface.) -- C:\Windows\system32\drivers\hidkmdf.sys [5632]
O58 - SDL:[MD5.295FDC419039090EB8B49FFDBB374549] - 2009-07-14 - 02:20:28 ---A- . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Driver.) -- C:\Windows\system32\drivers\HpSAMD.sys [67152]
O58 - SDL:[MD5.06C9C9DE9AB51DAA5A83A838C7A58ADF] - 2012-01-05 - 00:01:56 ---A- . (.AnchorFree Inc. - Expat Shield Routing Driver.) -- C:\Windows\system32\drivers\hssdrv.sys [37376]
O58 - SDL:[MD5.6FFB351C9C9BB88E91785F4CD7396D31] - 2015-10-04 - 21:12:56 ---A- . (.REALiX(tm) - HWiNFO x86 Kernel Driver.) -- C:\Windows\system32\drivers\HWiNFO32.SYS [23840]
O58 - SDL:[MD5.F8003EDBC99F0618EDF9EBAFFA013A1B] - 2016-02-16 - 10:04:26 ---A- . (.Huawei Technologies Co., Ltd. - ew_cdcacm Driver.) -- C:\Windows\system32\drivers\hw_cdcacm.sys [112512]
O58 - SDL:[MD5.A688A69EDEC88B7517D76CF25C0A1DA5] - 2016-02-16 - 10:04:26 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\system32\drivers\hw_quusbmdm.sys [195200]
O58 - SDL:[MD5.DF18F4F309F516A6B953D706DDF4EB99] - 2016-02-16 - 10:04:26 ---A- . (.Huawei Technologies Co., Ltd. - USB NDIS Miniport Driver.) -- C:\Windows\system32\drivers\hw_quusbnet.sys [249856]
O58 - SDL:[MD5.59E2CD43D0B11050289E6EB0808FFC52] - 2016-02-16 - 10:04:26 ---A- . (.Huawei Technologies Co., Ltd. - USB Modem/Serial Device Driver.) -- C:\Windows\system32\drivers\hw_usbdev.sys [102272]
O58 - SDL:[MD5.A3CAE5D281DB4CFF7CFF8233507EE5AD] - 2010-11-20 - 13:29:54 ---A- . (.Intel Corporation - Intel Matrix Storage Manager driver - ia32.) -- C:\Windows\system32\drivers\iaStorV.sys [332160]
O58 - SDL:[MD5.48ADA0D72D0B4C1A6686D6D948F6E15E] - 2015-06-12 - 05:00:58 ---A- . (.Tonec Inc. - Internet Download Manager WFP Driver.) -- C:\Windows\system32\drivers\idmwfp.sys [123968]
O58 - SDL:[MD5.4173FF5708F3236CF25195FECD742915] - 2009-07-14 - 02:20:36 ---A- . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\system32\drivers\iirsp.sys [41040]
O58 - SDL:[MD5.EB119A53CCF2ACC000AC71B065B78FEF] - 2009-07-14 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_fc.sys [95824]
O58 - SDL:[MD5.8ADE1C877256A22E49B75D1CC9161F9C] - 2009-07-14 - 02:20:37 ---A- . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas.sys [89168]
O58 - SDL:[MD5.DC9DC3D3DAA0E276FD2EC262E38B11E9] - 2009-07-14 - 02:20:36 ---A- . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_sas2.sys [54864]
O58 - SDL:[MD5.0A036C7D7CAB643A7F07135AC47E0524] - 2009-07-14 - 02:20:36 ---A- . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\system32\drivers\lsi_scsi.sys [96848]
O58 - SDL:[MD5.0FFF5B045293002AB38EB1FD1FC2FB74] - 2009-07-14 - 02:20:36 ---A- . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows 7 for x86.) -- C:\Windows\system32\drivers\megasas.sys [30800]
O58 - SDL:[MD5.DCBAB2920C75F390CAF1D29F675D03D6] - 2009-07-14 - 02:20:36 ---A- . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\system32\drivers\MegaSR.sys [235584]
O58 - SDL:[MD5.02AD778516057639E21782008FDC44CC] - 2013-12-03 - 09:15:00 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\drivers\monectdevices.sys [14104]
O58 - SDL:[MD5.1D85C4B390B0EE09C7A46B91EFB2C097] - 2009-07-14 - 02:20:44 ---A- . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\system32\drivers\nfrd960.sys [44624]
O58 - SDL:[MD5.25401B0C9576C8456B3E0BBD74FF0771] - 2013-03-01 - 02:48:42 ---A- . (.Riverbed Technology, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) -- C:\Windows\system32\drivers\npf.sys [36600]
O58 - SDL:[MD5.1624DEA4C6755689EAD20673248863F0] - 2014-01-12 - 10:05:46 ---A- . (.Windows (R) Win 7 DDK provider - Serial Port Enumerator.) -- C:\Windows\system32\drivers\nuvserenum.sys [17920]
O58 - SDL:[MD5.7474E2EE95A7630DC30779E1A0B4A57B] - 2014-01-12 - 10:05:46 ---A- . (.Nuvoton Technology Corp. - Nuvoton Serial Device Driver (WDM).) -- C:\Windows\system32\drivers\nuvserial.sys [76288]
O58 - SDL:[MD5.BF62C1ED8591E5BD6361E9BD23E252CA] - 2015-10-04 - 21:51:52 ---A- . (.NVIDIA Corporation - NVIDIA Windows Kernel Mode Driver, Version 309.08.) -- C:\Windows\system32\drivers\nvlddmkm.sys [10964624]
O58 - SDL:[MD5.AF2EEC9580C1D32FB7EAF105D9784061] - 2010-11-20 - 13:30:06 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\system32\drivers\nvraid.sys [117120]
O58 - SDL:[MD5.9283C58EBAA2618F93482EB5DABCEC82] - 2010-11-20 - 13:30:06 ---A- . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\system32\drivers\nvstor.sys [143744]
O58 - SDL:[MD5.174AAAEB00A5982DF968824ED92D5621] - 2016-04-14 - 06:38:19 ---A- . (.NVIDIA Corporation - NVIDIA Virtual Audio Driver.) -- C:\Windows\system32\drivers\nvvad32v.sys [50744]
O58 - SDL:[MD5.BE6D953C9A1E6CAF0C7397A2CDBF99A4] - 2006-12-25 - 21:30:20 R--A- . (.Windows (R) Codename Longhorn DDK provider - Generic Port I/O.) -- C:\Windows\system32\drivers\PortIo.sys [6656]
O58 - SDL:[MD5.AB95ECF1F6659A60DDC166D8315B0751] - 2009-07-14 - 02:19:04 ---A- . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\system32\drivers\ql2300.sys [1383488]
O58 - SDL:[MD5.B4DD51DD25182244B86737DC51AF2270] - 2009-07-14 - 02:19:04 ---A- . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\system32\drivers\ql40xx.sys [106064]
O58 - SDL:[MD5.345AC48D17F5C2F2AA1EE50D34C3978B] - 2011-10-18 - 19:53:14 ---A- . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function Driver.) -- C:\Windows\system32\drivers\RTKVHDA.sys [3546664]
O58 - SDL:[MD5.90A3935D05B494A5A39D37E71F09A677] - 2009-07-13 - 21:50:20 ---A- . (.Macrovision Corporation, Macrovision Europe - Macrovision SECURITY Driver.) -- C:\Windows\system32\drivers\secdrv.sys [20480]
O58 - SDL:[MD5.6F0C643C7F49F2091B01D014EAE72E1A] - 2009-07-13 - 23:02:53 ---A- . (.Silicon Integrated Systems Corp. - NDIS 6.0 Miniport Driver for SiS191/SiS190 Ethernet Device.) -- C:\Windows\system32\drivers\SiSGB6.sys [48128]
O58 - SDL:[MD5.A9F0486851BECB6DDA1D89D381E71055] - 2009-07-14 - 02:19:04 ---A- . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\system32\drivers\sisraid2.sys [40016]
O58 - SDL:[MD5.3727097B55738E2F554972C3BE5BC1AA] - 2009-07-14 - 02:19:04 ---A- . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\system32\drivers\sisraid4.sys [77888]
O58 - SDL:[MD5.25ECEA986742275ECB23A1CB6BC87A61] - 2009-12-15 - 14:41:30 ---A- . (.Pas de propriétaire - SRS WOW HD, TSXT, CSII, Mobile HD Standalone driver.) -- C:\Windows\system32\drivers\SRS_SSCFilter_i386.sys [268912]
O58 - SDL:[MD5.54946449A0EB74915A4BB34F7EE51A5A] - 2009-09-21 - 00:43:48 ---A- . (.MCCI Corporation - SAMSUNG Mobile USB Device 1.0 Driver.) -- C:\Windows\system32\drivers\ss_bus.sys [98560]
O58 - SDL:[MD5.01FAF94DE32A4D2944BD845F462EE5B8] - 2009-09-21 - 00:43:48 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\ss_cm.sys [12416]
O58 - SDL:[MD5.01FAF94DE32A4D2944BD845F462EE5B8] - 2009-09-21 - 00:43:48 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\ss_cmnt.sys [12416]
O58 - SDL:[MD5.4450BC0B2E9D7D9B90E3C3DE4EA00A78] - 2009-09-21 - 00:43:48 ---A- . (.MCCI Corporation - SAMSUNG Mobile USB Modem 1.0 Filter Driver.) -- C:\Windows\system32\drivers\ss_mdfl.sys [14848]
O58 - SDL:[MD5.30B8D0DD01EAD1243F329CAF7D7D1517] - 2009-09-21 - 00:43:50 ---A- . (.MCCI Corporation - SAMSUNG Mobile USB Modem 1.0 Driver.) -- C:\Windows\system32\drivers\ss_mdm.sys [123776]
O58 - SDL:[MD5.B629928BB05B91CFF8378F277603F75A] - 2009-09-21 - 00:43:50 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\ss_wh.sys [12288]
O58 - SDL:[MD5.B629928BB05B91CFF8378F277603F75A] - 2009-09-21 - 00:43:50 ---A- . (.MCCI Corporation - Windows 2000/XP support functions.) -- C:\Windows\system32\drivers\ss_whnt.sys [12288]
O58 - SDL:[MD5.DB32D325C192B801DF274BFD12A7E72B] - 2009-07-14 - 02:19:04 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\system32\drivers\stexstor.sys [21072]
O58 - SDL:[MD5.432D9D823C4C26B6070C41BAD4404CE4] - 2013-08-22 - 13:40:22 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\system32\drivers\tap0901.sys [35288]
O58 - SDL:[MD5.0C3B2A9C4BD2DD9A6C2E4084314DD719] - 2012-01-05 - 00:01:54 ---A- . (.AnchorFree Inc - TAP-Win32 Virtual Network Driver.) -- C:\Windows\system32\drivers\taphss.sys [32768]
O58 - SDL:[MD5.432D9D823C4C26B6070C41BAD4404CE4] - 2014-12-11 - 21:53:08 ---A- . (.The OpenVPN Project - TAP-Windows Virtual Network Driver.) -- C:\Windows\system32\drivers\tapwp01.sys [35288]
O58 - SDL:[MD5.C312C33958400F8DBE04306127833D88] - 2016-03-22 - 09:42:54 ---A- . (.Windows (R) Win 7 DDK provider - HID mini driver for Unified Virtual HID.) -- C:\Windows\system32\drivers\uvhid.sys [23992]
O58 - SDL:[MD5.E43574F6A56A0EE11809B48C09E4FD3C] - 2009-07-14 - 02:19:10 ---A- . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\system32\drivers\viaide.sys [16976]
O58 - SDL:[MD5.6B93B103242C3C30F850F53DBE39ED88] - 2015-11-04 - 19:01:45 ---A- . (.Eugene V. Muzychenko - Kernel-mode WDM driver.) -- C:\Windows\system32\drivers\vrtaucbl.sys [50728]
O58 - SDL:[MD5.9DFA0CC2F8855A04816729651175B631] - 2009-07-14 - 02:19:11 ---A- . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\system32\drivers\vsmraid.sys [141904]
O58 - SDL:[MD5.DEB88D6B0D7CE5FB78FC4AB88E6B0C43] - 2013-05-07 - 14:27:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ambakdrv.sys [26424]
O58 - SDL:[MD5.9059308FD5FE4317B6C489CA570567CB] - 2013-05-07 - 14:27:10 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ammntdrv.sys [129720]
O58 - SDL:[MD5.9D6956A382EE791013B3FE4B7206D8C7] - 2013-02-06 - 15:52:48 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\amwrtdrv.sys [14392]
O58 - SDL:[MD5.8AAD333C876590293F72B315E162BCC7] - 2009-07-13 - 22:40:41 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\ANSI.SYS [9029]
O58 - SDL:[MD5.0FE9F16075C9ACB941C957B7C649176E] - 2009-07-13 - 22:40:44 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\country.sys [27097]
O58 - SDL:[MD5.E6BC0F98FECEF245A0010D350C1A0B9B] - 2009-07-13 - 22:40:40 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\HIMEM.SYS [4768]
O58 - SDL:[MD5.492090267B9608C62B956CD29BE3AFB7] - 2009-07-13 - 22:40:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEY01.SYS [42809]
O58 - SDL:[MD5.FBBCFEC1379C5C02D88A361993EDF1B8] - 2009-07-13 - 22:40:43 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\KEYBOARD.SYS [42537]
O58 - SDL:[MD5.FFFF296A08DBF2AC0126C62E3778AC0D] - 2009-07-13 - 22:40:23 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS.SYS [27866]
O58 - SDL:[MD5.CF9ED169FF86D935E47999E82359E898] - 2009-07-13 - 22:40:31 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS404.SYS [29146]
O58 - SDL:[MD5.03B945AC0481CD8BB161C3569D8ED1C3] - 2009-07-13 - 22:40:35 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS411.SYS [29370]
O58 - SDL:[MD5.BBC957DC18C17CC027EB80B7C77F2AEA] - 2009-07-13 - 22:40:39 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS412.SYS [29274]
O58 - SDL:[MD5.3CFFAEFFF23B0D208214A6D3061A5B1B] - 2009-07-13 - 22:40:27 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTDOS804.SYS [29146]
O58 - SDL:[MD5.2E4112FB7D1B76E11ADFD7487B5D0E95] - 2009-07-13 - 22:40:11 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO.SYS [33952]
O58 - SDL:[MD5.A98EBD4C2DF983665BF2D1AF49949974] - 2009-07-13 - 22:40:15 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO404.SYS [34672]
O58 - SDL:[MD5.3F7E6406EDEF197C5CAAB2240EEF6F48] - 2009-07-13 - 22:40:17 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO411.SYS [35776]
O58 - SDL:[MD5.3E64D681B776CC57BDC38A46D881F85B] - 2009-07-13 - 22:40:19 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO412.SYS [35536]
O58 - SDL:[MD5.D86B6435729231C171432B4E77801BDB] - 2009-07-13 - 22:40:13 ---A- . (.Pas de propriétaire - Pas de description.) -- C:\Windows\system32\NTIO804.SYS [34672]


---\\ Liste des outils de nettoyage (LATC) (O63)
O63 - Logiciel: ZHPDiag 1.27 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1


---\\ Liste des services Legacy (LALS) (O64)
O64 - Services: CurCS - C:\Windows\system32\drivers\afd.sys (AFD) .(.Microsoft Corporation - Ancillary Function Driver for WinSock.) - LEGACY_AFD
O64 - Services: CurCS - C:\Windows\system32\ammntdrv.sys - ammntdrv (ammntdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_AMMNTDRV
O64 - Services: CurCS - C:\Windows\system32\amwrtdrv.sys - amwrtdrv (amwrtdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_AMWRTDRV
O64 - Services: CurCS - (.not file.) - avfwot (avfwot) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVFWOT
O64 - Services: CurCS - (.not file.) - avkmgr (avkmgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_AVKMGR
O64 - Services: CurCS - C:\Windows\system32\Drivers\BEEP.sys - (.not file.) - Beep (Beep) .(.Pas de propriétaire - Pas de description.) - LEGACY_BEEP
O64 - Services: CurCS - C:\Windows\system32\browser.dll (bowser) .(.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) - LEGACY_BOWSER
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\cdfs.sys - CD/DVD File System Reader (cdfs) .(.Microsoft Corporation - CD-ROM File System Driver.) - LEGACY_CDFS
O64 - Services: CurCS - C:\Windows\system32\clfs.sys (CLFS) .(.Microsoft Corporation - Common Log File System Driver.) - LEGACY_CLFS
O64 - Services: CurCS - C:\Windows\System32\Drivers\cng.sys - CNG (CNG) .(.Microsoft Corporation - Kernel Cryptography, Next Generation.) - LEGACY_CNG
O64 - Services: CurCS - C:\Windows\system32\cscsvc.dll (CSC) .(.Microsoft Corporation - DLL du service CSC.) - LEGACY_CSC
O64 - Services: CurCS - C:\Windows\system32\drivers\dfsc.sys (DfsC) .(.Microsoft Corporation - DFS Namespace Client Driver.) - LEGACY_DFSC
O64 - Services: CurCS - C:\Windows\system32\drivers\discache.sys (discache) .(.Microsoft Corporation - System Indexer/Cache Driver.) - LEGACY_DISCACHE
O64 - Services: CurCS - C:\Windows\system32\drivers\dxgkrnl.sys - LDDM Graphics Subsystem (DXGKrnl) .(.Microsoft Corporation - DirectX Graphics Kernel.) - LEGACY_DXGKRNL
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\eamonm.sys - eamonm (eamonm) .(.ESET - Amon monitor.) - LEGACY_EAMONM
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ehdrv.sys - ehdrv (ehdrv) .(.ESET - ESET Helper driver.) - LEGACY_EHDRV
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\epfw.sys - epfw (epfw) .(.ESET - ESET Personal Firewall driver.) - LEGACY_EPFW
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\EpfwLWF.sys - ESET Personal Firewall (EpfwLWF) .(.ESET - Epfw NDIS LightWeight Filter.) - LEGACY_EPFWLWF
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\epfwwfp.sys - epfwwfp (epfwwfp) .(.ESET - ESET Personal Firewall driver.) - LEGACY_EPFWWFP
O64 - Services: CurCS - C:\Windows\system32\Drivers\FASTFAT.sys - (.not file.) - FAT12/16/32 File System Driver (fastfat) .(.Pas de propriétaire - Pas de description.) - LEGACY_FASTFAT
O64 - Services: CurCS - C:\Windows\system32\drivers\fileinfo.sys (FileInfo) .(.Microsoft Corporation - FileInfo Filter Driver.) - LEGACY_FILEINFO
O64 - Services: CurCS - C:\Windows\system32\drivers\fltmgr.sys (FltMgr) .(.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) - LEGACY_FLTMGR
O64 - Services: CurCS - C:\Windows\system32\Drivers\FS_REC.sys - Fs_Rec (Fs_Rec) .(.Pas de propriétaire - Pas de description.) - LEGACY_FS_REC
O64 - Services: CurCS - C:\Windows\system32\drivers\fvevol.sys (fvevol) .(.Microsoft Corporation - BitLocker Drive Encryption Driver.) - LEGACY_FVEVOL
O64 - Services: CurCS - C:\Windows\system32\drivers\http.sys (HTTP) .(.Microsoft Corporation - HTTP Pile du protocole.) - LEGACY_HTTP
O64 - Services: CurCS - C:\Windows\system32\drivers\HWiNFO32.sys - HWiNFO32/64 Kernel Driver (HWiNFO32) .(.REALiX(tm) - HWiNFO x86 Kernel Driver.) - LEGACY_HWINFO32
O64 - Services: CurCS - C:\Windows\system32\drivers\hwpolicy.sys (hwpolicy) .(.Microsoft Corporation - Hardware Policy Driver.) - LEGACY_HWPOLICY
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\idmwfp.sys - IDMWFP (IDMWFP) .(.Tonec Inc. - Internet Download Manager WFP Driver.) - LEGACY_IDMWFP
O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecdd.sys - KSecDD (KSecDD) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECDD
O64 - Services: CurCS - C:\Windows\System32\Drivers\ksecpkg.sys - KSecPkg (KSecPkg) .(.Microsoft Corporation - Kernel Security Support Provider Interface.) - LEGACY_KSECPKG
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\lltdio.sys - Link-Layer Topology Discovery Mapper I/O Driver (lltdio) .(.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) - LEGACY_LLTDIO
O64 - Services: CurCS - C:\Windows\system32\drivers\luafv.sys (luafv) .(.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) - LEGACY_LUAFV
O64 - Services: CurCS - C:\Windows\system32\drivers\mountmgr.sys (mountmgr) .(.Microsoft Corporation - Gestionnaire des points de montage.) - LEGACY_MOUNTMGR
O64 - Services: CurCS - (.not file.) - MpKsla637ab44 (MpKsla637ab44) .(.Pas de propriétaire - Pas de description.) - LEGACY_MPKSLA637AB44
O64 - Services: CurCS - C:\Windows\system32\FirewallAPI.dll (mpsdrv) .(.Microsoft Corporation - API du Pare-feu Windows.) - LEGACY_MPSDRV
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb10) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB10
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (mrxsmb20) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_MRXSMB20
O64 - Services: CurCS - C:\Windows\system32\Drivers\MSFS.sys - Msfs (Msfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_MSFS
O64 - Services: CurCS - C:\Windows\System32\drivers\msisadrv.sys - msisadrv (msisadrv) .(.Microsoft Corporation - ISA Driver.) - LEGACY_MSISADRV
O64 - Services: CurCS - C:\Windows\system32\drivers\mup.sys (Mup) .(.Microsoft Corporation - Multiple UNC Provider Driver.) - LEGACY_MUP
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\nwifi.sys - NativeWiFi Filter (NativeWifiP) .(.Microsoft Corporation - Pilote de miniport WiFi natif.) - LEGACY_NATIVEWIFIP
O64 - Services: CurCS - C:\Windows\system32\drivers\ndis.sys (NDIS) .(.Microsoft Corporation - Pilote NDIS 6.20.) - LEGACY_NDIS
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\ndisuio.sys - NDIS Usermode I/O Protocol (Ndisuio) .(.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) - LEGACY_NDISUIO
O64 - Services: CurCS - C:\Windows\system32\Drivers\NDPROXY.sys - NDProxy (NDProxy) .(.Pas de propriétaire - Pas de description.) - LEGACY_NDPROXY
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\netbios.sys - NetBIOS Interface (NetBIOS) .(.Microsoft Corporation - NetBIOS interface driver.) - LEGACY_NETBIOS
O64 - Services: CurCS - C:\Windows\system32\drivers\netbt.sys (NetBT) .(.Microsoft Corporation - MBT Transport driver.) - LEGACY_NETBT
O64 - Services: CurCS - C:\Windows\System32\drivers\npf.sys - NetGroup Packet Filter Driver (NPF) .(.Riverbed Technology, Inc. - npf.sys (NT5/6 x86) Kernel Driver.) - LEGACY_NPF
O64 - Services: CurCS - C:\Windows\system32\Drivers\NPFS.sys - Npfs (Npfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NPFS
O64 - Services: CurCS - C:\Windows\system32\drivers\nsiproxy.sys (nsiproxy) .(.Microsoft Corporation - NSI Proxy.) - LEGACY_NSIPROXY
O64 - Services: CurCS - C:\Windows\system32\Drivers\NTFS.sys - Ntfs (Ntfs) .(.Pas de propriétaire - Pas de description.) - LEGACY_NTFS
O64 - Services: CurCS - C:\Windows\system32\Drivers\NULL.sys - Null (Null) .(.Pas de propriétaire - Pas de description.) - LEGACY_NULL
O64 - Services: CurCS - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys - NvStreamKms (NvStreamKms) .(.NVIDIA Corporation - Nvidia Streaming Kernel Service.) - LEGACY_NVSTREAMKMS
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\parvdm.sys - Parvdm (Parvdm) .(.Microsoft Corporation - Pilote parallèle VDM.) - LEGACY_PARVDM
O64 - Services: CurCS - C:\Windows\System32\drivers\pcw.sys - Performance Counters for Windows Driver (pcw) .(.Microsoft Corporation - Performance Counters for Windows Driver.) - LEGACY_PCW
O64 - Services: CurCS - C:\Windows\System32\drivers\peauth.sys - PEAUTH (PEAUTH) .(.Microsoft Corporation - Protected Environment Authentication and Au.) - LEGACY_PEAUTH
O64 - Services: CurCS - C:\Windows\system32\drivers\pacer.sys (Psched) .(.Microsoft Corporation - Planificateur de paquets QoS.) - LEGACY_PSCHED
O64 - Services: CurCS - (.not file.) - QQSysMon (QQSysMon) .(.Pas de propriétaire - Pas de description.) - LEGACY_QQSYSMON
O64 - Services: CurCS - C:\Windows\system32\drivers\qwavedrv.sys (QWAVEdrv) .(.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) - LEGACY_QWAVEDRV
O64 - Services: CurCS - C:\Windows\system32\wkssvc.dll (rdbss) .(.Microsoft Corporation - DLL du service Station de travail.) - LEGACY_RDBSS
O64 - Services: CurCS - C:\Windows\system32\DRIVERS\RDPCDD.sys (RDPCDD) .(.Microsoft Corporation - RDP Miniport.) - LEGACY_RDPCDD
O64 - Services: CurCS - C:\Windows\system32\drivers\RDPENCDD.sys (RDPENCDD) .(.Microsoft Corporation - RDP Encoder Miniport.) - LEGACY_RDPENCDD
O64 - Services: CurCS - C:\Windows\system32\drivers\RdpRefMp.sys (RDPREFMP) .(.Microsoft Corporation - RDP Reflector Driver Miniport.) - LEGACY_RDPREFMP
O64 - Services: CurCS - (.not file.) - RegFilter (RegFilter) .(.Pas de propriétaire - Pas de description.) - LEGACY_REGFILTER
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\rspndr.sys - Link-Layer Topology Discovery Responder (rspndr) .(.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) - LEGACY_RSPNDR
O64 - Services: CurCS - C:\Program Files\MSI Afterburner\RTCore32.sys - RTCore32 (RTCore32) .(.Pas de propriétaire - Pas de description.) - LEGACY_RTCORE32
O64 - Services: CurCS - (.not file.) - SCDEmu (SCDEmu) .(.Pas de propriétaire - Pas de description.) - LEGACY_SCDEMU
O64 - Services: CurCS - C:\Windows\system32\Drivers\SECDRV.sys - (.not file.) - Security Driver (secdrv) .(.Pas de propriétaire - Pas de description.) - LEGACY_SECDRV
O64 - Services: CurCS - (.not file.) - SmartDefragDriver (SmartDefragDriver) .(.Pas de propriétaire - Pas de description.) - LEGACY_SMARTDEFRAGDRIVER
O64 - Services: CurCS - C:\Windows\system32\Drivers\SPLDR.sys - (.not file.) - Security Processor Loader Driver (spldr) .(.Pas de propriétaire - Pas de description.) - LEGACY_SPLDR
O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV
O64 - Services: CurCS - C:\Windows\system32\srvsvc.dll (srv2) .(.Microsoft Corporation - DLL du service Serveur.) - LEGACY_SRV2
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\srvnet.sys - srvnet (srvnet) .(.Microsoft Corporation - Server Network driver.) - LEGACY_SRVNET
O64 - Services: CurCS - C:\Windows\system32\vmstorfltres.dll (storflt) .(.Microsoft Corporation - Fichier DLL de ressources du filtre de stoc.) - LEGACY_STORFLT
O64 - Services: CurCS - (.not file.) - Tencent Auto Optimize Platform. (TAOKernelDriver) .(.Pas de propriétaire - Pas de description.) - LEGACY_TAOKERNELDRIVER
O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (Tcpip) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TCPIP
O64 - Services: CurCS - C:\Windows\System32\drivers\tcpipreg.sys - TCP/IP Registry Compatibility (tcpipreg) .(.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) - LEGACY_TCPIPREG
O64 - Services: CurCS - C:\Windows\system32\tcpipcfg.dll (tdx) .(.Microsoft Corporation - Objets de configuration du réseau.) - LEGACY_TDX
O64 - Services: CurCS - (.not file.) - TFsFlt (TFsFlt) .(.Pas de propriétaire - Pas de description.) - LEGACY_TFSFLT
O64 - Services: CurCS - (.not file.) - TSDefenseBt (TSDefenseBt) .(.Pas de propriétaire - Pas de description.) - LEGACY_TSDEFENSEBT
O64 - Services: CurCS - (.not file.) - tencent TsFltMgr (TsFltMgr) .(.Pas de propriétaire - Pas de description.) - LEGACY_TSFLTMGR
O64 - Services: CurCS - (.not file.) - TSKsp (TSKSP) .(.Pas de propriétaire - Pas de description.) - LEGACY_TSKSP
O64 - Services: CurCS - (.not file.) - TSSysKit (TSSysKit) .(.Pas de propriétaire - Pas de description.) - LEGACY_TSSYSKIT
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\udfs.sys - udfs (udfs) .(.Microsoft Corporation - UDF File System Driver.) - LEGACY_UDFS
O64 - Services: CurCS - C:\Windows\system32\drivers\vga.sys - VgaSave (VgaSave) .(.Microsoft Corporation - VGA/Super VGA Video Driver.) - LEGACY_VGASAVE
O64 - Services: CurCS - C:\Windows\system32\vmbusres.dll (vmbus) .(.Microsoft Corporation - Fichier DLL de ressources de bus VMBus.) - LEGACY_VMBUS
O64 - Services: CurCS - C:\Windows\system32\drivers\volmgrx.sys (volmgrx) .(.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) - LEGACY_VOLMGRX
O64 - Services: CurCS - C:\Windows\System32\drivers\volsnap.sys - Volumes de stockage (volsnap) .(.Microsoft Corporation - Pilote de cliché instantané du volume.) - LEGACY_VOLSNAP
O64 - Services: CurCS - C:\Windows\system32\rascfg.dll (Wanarpv6) .(.Microsoft Corporation - Objets de configuration RAS.) - LEGACY_WANARPV6
O64 - Services: CurCS - C:\Windows\System32\drivers\Wdf01000.sys - Kernel Mode Driver Frameworks service (Wdf01000) .(.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) - LEGACY_WDF01000
O64 - Services: CurCS - C:\Windows\System32\DRIVERS\wfplwf.sys - WFP Lightweight Filter (WfpLwf) .(.Microsoft Corporation - WFP NDIS 6.20 Lightweight Filter Driver.) - LEGACY_WFPLWF
O64 - Services: CurCS - C:\Windows\System32\drivers\WudfPf.sys - User Mode Driver Frameworks Platform Driver (WudfPf) .(.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) - LEGACY_WUDFPF


---\\ Observateur d'évènement d'application (OEA) (O66)
O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - Programme d’installation pour les modules Windows.) -- C:\Windows\servicing\TrustedInstaller.exe
O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - Processus hôte pour les services Windows.) -- C:\Windows\system32\svchost.exe
O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - vshost.exe.) -- C:\Program Files\Proiter\DpFileList UPDATE 2016\DpFileList UPDATE 2016.vshost.exe
O66 - EventLog: ID=1000 (Application Error) - (.Pas de propriétaire - DpFileList UPDATE 2016.) -- C:\Program Files\Proiter\DpFileList UPDATE 2016\DpFileList UPDATE 2016.exe
O66 - EventLog: ID=1000 (Application Error) - (.Opera Software - Opera Internet Browser.) -- C:\Program Files\Opera\41.0.2353.69\opera.exe
O66 - EventLog: ID=1000 (Application Error) - (.ESET - ESET Main GUI.) -- C:\Program Files\ESET\ESET Internet Security\egui.exe
O66 - EventLog: ID=1000 (Application Error) - (.Microsoft Corporation - Lecteur Windows Media.) -- C:\Program Files\Windows Media Player\wmplayer.exe


---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Opera\Launcher.exe
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.bat> [HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.cpl> [HKCR\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> [HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.com> [HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.exe> [HKCR\..\open\Command] "%1" %* (.not file.)
O67 - Shell Spawning: <.html> [HKCR\..\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Opera\Launcher.exe
O67 - Shell Spawning: <.js> [HKCR\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\WScript.exe
O67 - Shell Spawning: <.reg> [HKCR\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe


---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Google\Chrome\Application\chrome.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Opera\Opera.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Program Files\Opera\Launcher.exe (.not file.)
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Pas de propriétaire - Pas de description.) -- "C:\Users\lamdjed\AppData\Local\Torch\Application\torch.exe (.not file.)


---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC


---\\ Recherche des services démarrés par Svchost (SSS) (O83)
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [62464]
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de cartes à puce Microsoft.) -- C:\Windows\System32\certprop.dll [67584]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [168960]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [593408]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [674304]
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [473600]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’accès distant.) -- C:\Windows\System32\rasauto.dll [90624]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [286208]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [75264]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements système (SENS).) -- C:\Windows\System32\sens.dll [49664]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à Microsoft NAT.) -- C:\Windows\System32\ipnathlp.dll [300544]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM).) -- C:\Windows\System32\tapisrv.dll [242176]
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du serveur hôte de session Burea.) -- C:\Windows\System32\termsrv.dll [521216]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Update.) -- C:\Windows\system32\wuaueng.dll [1933848]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière-plan.) -- C:\Windows\System32\qmgr.dll [585728]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [328192]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur un réseau IPv4..) -- C:\Windows\System32\iphlpsvc.dll [499712]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secondaire.) -- C:\Windows\system32\seclogon.dll [21504]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [47104]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [114688]
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédias.) -- C:\Windows\system32\mmcss.dll [49664]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [61440]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [98304]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [164352]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [750592]
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [71168]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à distance.) -- C:\Windows\system32\sessenv.dll [113664]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [168960]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [102400]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [37376]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [76800]
O83 - Search Svchost Services: AppMgmt (AppMgmt) . (.Microsoft Corporation - Service Installation de logiciels.) -- C:\Windows\System32\appmgmts.dll [149504]


---\\ Recherche particuliere à la racine de certains dossiers (SPRF) (O84)
[MD5.FB9DA1DD951232244203558A96E8FF66] [SPRF] (.Pas de propriétaire - AntiDust Tool.) -- C:\Program Files\AntiDust.exe [50330]
[MD5.B4FEC4E889C49693E5A1568E021C2E11] [SPRF] (.ParetoLogic Inc. - Universal Installer.) -- C:\Users\lamdjed\AppData\Local\Temp\Update.exe [3080088]


---\\ Etat général des services non Microsoft (EGS) (SR=Running, SS=Stopped)
SR - | Auto 2012-07-27 63960 | "C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
SS - | Demand 2016-11-09 270016 | C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
SR - | Auto 2011-07-28 262144 | C:\Program Files\netcut\services\AIPS.exe (AIPS) . (.Arcai.com.) - C:\Program Files\netcut\services\AIPS.exe
SR - | Auto 2014-07-03 29912 | C:\Program Files\AOMEI Backupper Standard Edition 2.0.1\ABService.exe (Backupper Service) . (.AOMEI Tech Co., Ltd..) - C:\Program Files\AOMEI Backupper Standard Edition 2.0.1\ABService.exe
SR - | Auto 2015-12-24 388968 | "C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe (DigitalWave.Update.Service) . (.Digital Wave Ltd..) - C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe
SR - | Auto 2016-10-11 2225368 | "C:\Program Files\ESET\ESET Internet Security\ekrn.exe (ekrn) . (.ESET.) - C:\Program Files\ESET\ESET Internet Security\ekrn.exe
SS - | Auto 2016-10-31 153752 | "C:\Program Files\Google\Update\GoogleUpdate.exe (gupdate) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 2016-10-31 153752 | "C:\Program Files\Google\Update\GoogleUpdate.exe (gupdatem) . (.Google Inc..) - C:\Program Files\Google\Update\GoogleUpdate.exe
SS - | Demand 2015-01-15 505088 | "C:\Program Files\Common Files\LENOVO\easyplussdk\bin\EPHotspot.exe (Lenovo EasyPlus Hotspot) . (.Lenovo.) - C:\Program Files\Common Files\LENOVO\easyplussdk\bin\EPHotspot.exe
SS - | Auto 2016-04-21 2960672 | C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe (LiveUpdateSvc) . (.IObit.) - C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
SR - | Auto 2016-06-15 1881144 | "C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
SR - | Demand 2016-06-15 2905656 | "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NvStreamNetworkSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
SR - | Auto 2016-06-15 2018360 | "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
SR - | Auto 2015-01-31 633672 | "C:\Windows\system32\nvvsvc.exe (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 2013-03-01 118520 | "C:\Program Files\WinPcap\rpcapd.exe (rpcapd) . (.Riverbed Technology, Inc..) - C:\Program Files\WinPcap\rpcapd.exe
SR - | Auto 2009-07-14 20992 | C:\Program Files\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SR - | Auto 2009-07-14 20992 | C:\Windows\system32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\system32\svchost.exe


---\\ Recherche Master Boot Record Infection (MBR)(O80)
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.1 by Gmer, http://www.gmer.net
Run by lamdjed at 2016-12-03 18:56:14

device: opened successfully
user: MBR read successfully

Disk trace:
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS pciide.sys
1 nt!IofCallDriver[0x83047003] -> \Device\Harddisk0\DR0[0x85E21030]
3 CLASSPNP[0x89EA959E] -> nt!IofCallDriver[0x83047003] -> [0x85D1F830]
5 ACPI[0x896413D4] -> nt!IofCallDriver[0x83047003] -> \Device\Ide\IdeDeviceP1T0L0-1[0x85D5E908]
kernel: MBR read successfully
user & kernel MBR OK


---\\ Recherche Master Boot Record Infection (MBRCheck)(O80)
Written by ad13, http://ad13.geekstog
Run by lamdjed at 2016-12-03 18:56:14
Use the desktop link 'MBRCheck' to have full report




End of the scan (1311 lines in 02mn 29s)(0)