~ ZHPDiag v2016.1.31.23 Par Nicolas Coolman (2016/01/30)
~ Démarré par Romain (Administrator) (2018/11/02 21:11:18)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Pas de fichier réseau
~ Mode: Scanner
~ Rapport: C:\Users\Romain\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Romain\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Home Premium, 64-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (2) - 1s
MFIE: Mozilla Firefox 63.0.1 (x64 fr)
MSIE: Internet Explorer v11.0.9600.19155

---\\ Informations sur les produits Windows (4) - 3s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK

---\\ Logiciels de protection (2) - 7s
McAfee AntiVirus Plus v16.0 R15
Windows Defender W7 (Deactivate)

---\\ Surveillance de Logiciels (2) - 9s
Adobe Flash Player 31 ActiveX
Adobe Acrobat Reader DC - Français

---\\ Informations sur le système (6) - 0s
~ Operating System: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 4042.608 MB (28% free)
System Restore: Activé (Enable)
System drive C: has 600 GB () free of 695 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: PC-ROMAIN
~ User Name: Romain
~ Logged in as Administrator

---\\ Enumération des unités disques (1) - 0s
~ Drive C: has 600 GB free of 695 GB (System)

---\\ Etat du Centre de Sécurité Windows (11) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (25) - 2s
[MD5.38AE1B3C38FAEF56FE4907922F0385BA] - 29/08/2016 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [3229696] =>.Microsoft Corporation
[MD5.C36BB659F08F046B139C8D1B980BF1AC] - 30/03/2017 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [46080] =>.Microsoft Corporation
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [129024] =>.Microsoft Corporation
[MD5.56157A462C8A3AEBA22150DC858D5CD8] - 18/09/2018 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [4510720] =>.Microsoft Corporation
[MD5.11D6A262B617130F7C16E308C12E0D41] - 01/01/2018 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [455680] =>.Microsoft Corporation
[MD5.067FA52BFB59A56110A12312EF9AF243] - 21/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [232448] =>.Microsoft Corporation
[MD5.9B86DF86D1EFF32893BC3FB49BFAA993] - 08/06/2018 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [357888] =>.Microsoft Corporation
[MD5.4A35D7B172AFF9C6B362D7297568836A] - 08/06/2018 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\Syswow64\dnsapi.dll [269824] =>.Microsoft Corporation
[MD5.0D57D091E06BB1E58E72E5D08479FDDF] - 07/06/2012 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] =>.Microsoft Corporation
[MD5.0DC2A9882540DEA4A55B08785E09D8FC] - 04/04/2017 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [496128] =>.Microsoft Corporation
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [24128] =>.Microsoft Windows®
[MD5.B8BD2BB284668C84865658C77574381A] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [92160] =>.Microsoft Corporation
[MD5.F036CE71586E93D94DAB220D7BDF4416] - 21/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [147456] =>.Microsoft Corporation
[MD5.63705A08981F7EDD376241D6E0A9C2AC] - 25/04/2018 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [115200] =>.Microsoft Corporation
[MD5.97BFED39B6B79EB12CDDBFEED51F56BB] - 21/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [122368] =>.Microsoft Corporation
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [105472] =>.Microsoft Corporation
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [116224] =>.Microsoft Corporation
[MD5.D8FE82385B0D8C0C195B20A8CA029136] - 11/09/2018 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [161280] =>.Microsoft Corporation
[MD5.734837208CAFD6E0959A7A0333C95C9D] - 11/08/2017 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [262656] =>.Microsoft Corporation
[MD5.854121FF6840DB681910D072F92640B7] - 09/09/2018 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1680072] {33000000550D89C9E5CB24146C000100000055} =>.Microsoft Corporation
[MD5.0086431C29C35BE1DBC43F52CC273887] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [97280] =>.Microsoft Corporation
[MD5.471815800AE33E6F1C32FB1B97C490CA] - 21/11/2010 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [129536] =>.Microsoft Corporation
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [93184] =>.Microsoft Corporation
[MD5.4DD986720F7CB7A8A5D1226793097B9A] - 29/07/2017 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [117248] =>.Microsoft Corporation
[MD5.0D08D2F3B3FF84E433346669B5E0F639] - 21/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [295808] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (19) - 1s
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) . (.Adobe Systems Incorporated - Adobe Photoshop Elements 9.0 (component).) - C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe =>.Adobe Systems Incorporated®
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe =>.AMD
O23 - Service: Dritek WMI Service (DsiWMIService) . (.Dritek System Inc. - Dritek WMI Service.) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe =>.Dritek System Inc.®
O23 - Service: ePower Service (ePowerSvc) . (.Acer Incorporated - ePowerSvc.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe =>.Acer Incorporated®
O23 - Service: GREGService (GREGService) . (.Acer Incorporated - Global Registration Service.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe =>.Acer Incorporated®
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation - IAStorDataSvc.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation®
O23 - Service: Live Updater Service (Live Updater Service) . (.Acer Incorporated - Updater Service.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe =>.Acer Incorporated®
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
O23 - Service: McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (.McAfee, Inc. - McAfee WebAdvisor.) - C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
O23 - Service: McAfee AP Service (McAPExe) . (.McAfee, Inc. - McAfee Access Protection.) - C:\Program Files\Common Files\McAfee\VSCore_18_6\mcapexe.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
O23 - Service: McAfee CSP Service (mccspsvc) . (.McAfee, Inc. - McAfee CSP Service Host.) - C:\Program Files\Common Files\McAfee\CSP\3.0.127.0\McCSPServiceHost.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
O23 - Service: McAfee Service Controller (mfemms) . (.McAfee, LLC - McAfee Management Service.) - C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe {587CD21A05D34D3DDFAA9128521CF4FC}
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, LLC - McAfee Process Validation Service.) - C:\Windows\System32\mfevtps.exe {587CD21A05D34D3DDFAA9128521CF4FC}
O23 - Service: McAfee Module Core Service (ModuleCoreService) . (.McAfee, Inc. - McAfee Module Core Service.) - C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe =>.Nero AG®
O23 - Service: McAfee PEF Service (PEFService) . (.McAfee, Inc. - McAfee PEF Service.) - C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®

---\\ Services non Microsoft (SR=Démarré,SS=Stoppé) (27) - 22s

SR - Auto [30/09/2010] [ 169408] Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe =>.Adobe Systems Incorporated®
SR - Auto [14/08/2018] [ 83984] Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated
SS - Demand [02/11/2018] [ 335872] Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated
SR - Auto [13/10/2011] [ 204288] (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\atiesrxx.exe =>.AMD
SS - Demand [10/08/2017] [ 1511728] ClientAnalyticsService (ClientAnalyticsService) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
SR - Auto [01/07/2011] [ 353360] Dritek WMI Service (DsiWMIService) . (.Dritek System Inc..) - C:\Program Files (x86)\Launch Manager\dsiwmis.exe =>.Dritek System Inc.®
SR - Auto [02/08/2011] [ 872552] ePower Service (ePowerSvc) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe =>.Acer Incorporated®
SS - Demand [24/10/2018] [ 218472] GamesAppService (GamesAppService) . (.WildTangent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe {11984CF828E0BD485E2D4259A57F28B4} =>.WildTangent, Inc.
SR - Auto [30/05/2011] [ 36456] GREGService (GREGService) . (.Acer Incorporated.) - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe =>.Acer Incorporated®
SR - Auto [13/01/2011] [ 13336] Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe =>.Intel Corporation®
SR - Auto [22/04/2011] [ 244624] Live Updater Service (Live Updater Service) . (.Acer Incorporated.) - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe =>.Acer Incorporated®
SR - Auto [01/02/2011] [ 326168] Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation®
SR - Auto [27/09/2018] [ 604824] McAfee SiteAdvisor Service (McAfee SiteAdvisor Service) . (.McAfee, Inc..) - C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
SR - Auto [30/08/2018] [ 728808] McAfee AP Service (McAPExe) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\VSCore_18_6\mcapexe.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
SS - Demand [26/01/2012] [ 332080] McAfee Activation Service (McAWFwk) . (.McAfee, Inc..) - c:\Program Files\McAfee\MSC\McAWFwk.exe =>.McAfee, Inc.®
SR - Auto [29/06/2018] [ 2159464] McAfee CSP Service (mccspsvc) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\CSP\3.0.127.0\McCSPServiceHost.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
SS - Disabl [31/08/2012] [ 201304] McAfee OOBE Service (McOobeSv) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe =>.McAfee, Inc.®
SS - Demand [22/08/2018] [ 366968] McAfee Firewall Core Service (mfefire) . (.McAfee, LLC.) - C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe {587CD21A05D34D3DDFAA9128521CF4FC}
SR - Auto [22/08/2018] [ 539512] McAfee Service Controller (mfemms) . (.McAfee, LLC.) - C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe {587CD21A05D34D3DDFAA9128521CF4FC}
SR - Auto [22/08/2018] [ 490360] McAfee Validation Trust Protection Service (mfevtp) . (.McAfee, LLC.) - C:\Windows\system32\mfevtps.exe
SR - Auto [07/08/2018] [ 1690976] McAfee Module Core Service (ModuleCoreService) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
SS - Demand [31/10/2018] [ 216528] Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Foundation
SR - Auto [29/03/2011] [ 598312] @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) . (.Nero AG.) - C:\Program Files (x86)\Nero\Update\NASvc.exe =>.Nero AG®
SR - Auto [25/07/2018] [ 1316024] McAfee PEF Service (PEFService) . (.McAfee, Inc..) - C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
SS - Auto [16/01/2017] [ 317400] Skype Updater (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies
SR - Auto [01/02/2011] [ 2656280] Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe =>.Intel Corporation®

---\\ Tâches planifiées en automatique (24) - 6s
[MD5.BD7AE0AFFBB3A6FD52D956A5694C8073] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1190424] {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated
[MD5.4F0426D1C579E02DC2F501F58EA57AE2] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335872] {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated
[MD5.BB7481A1306823D1B6592263F1AB8DD7] [APT] [AdobeAAMUpdater-1.0-PC-Romain-Romain] (.Adobe Systems Incorporated.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [497648] =>.Adobe Systems Incorporated®
[MD5.00000000000000000000000000000000] [APT] [Balance Comp] (...) -- C:\Users\Romain\AppData\Local\Balance Comp\Bin\BalanceComp.dll (.not file.) [0]
[MD5.D2BF8B1568789A25CE8889A645499FD8] [APT] [DeviceDetector] (.CyberLink.) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [986208] =>.CyberLink
[MD5.773C7B3C1622899B1329626A449493E7] [APT] [McAfee DAT Built in test] (.McAfee, LLC..) -- C:\Program Files\Common Files\McAfee\AMContent\scanners\x86_64\datrep\1.0.6.319\mcdatrep.exe [1752216] {587CD21A05D34D3DDFAA9128521CF4FC}
[MD5.2E1277385DF339EB327829E6EF852787] [APT] [McAfeeLogon] (.McAfee, Inc..) -- C:\Program Files\Common Files\McAfee\MSC\McUICnt.exe [300136] =>.McAfee, Inc.®
[MD5.BD97D50D72A9DFABD7307EEF6EBD54A0] [APT] [NBAgent] (.Nero AG.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1409424] =>.Nero AG®
[MD5.00000000000000000000000000000000] [APT] [Super Optimizer Schedule] (...) -- C:\Program Files (x86)\Super Optimizer\SupOptLauncher.exe (.not file.) [0] =>PUP.Optional.SuperOptimizer
[MD5.00000000000000000000000000000000] [APT] [Superclean] (...) -- c:\programdata\{9f943aa5-d8d6-9f5c-9f94-43aa5d8dea97}\hqghumeaylnlf.exe (.not file.) [0] =>PUP.Optional.Adwareplugin
[MD5.D43F43491A31934858195D51861C836F] [APT] [Wealneofiu] (.Copyright © 2015.) -- C:\ProgramData\Wealneofiu\1.0.1.0\mreailux.exe [158208] =>Heuristic.PullUpdate
[MD5.E650685E82F2375ED2A21DB9A95C0635] [APT] [McAfee\DAD.Execute.Updates] (.McAfee, Inc..) -- C:\Program Files\Common Files\McAfee\DynamicAppDownloader\DADUpdater.exe [1984896] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
O39 - APT: Superclean - (...) -- C:\Windows\Tasks\Superclean.job [342] (.Orphean.) =>PUP.Optional.Adwareplugin
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [4476] =>.Adobe Systems Incorporated
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [4484] =>.Adobe Systems Incorporated
O39 - APT: AdobeAAMUpdater-1.0-PC-Romain-Romain - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-PC-Romain-Romain [3506] =>.Adobe Systems Incorporated
O39 - APT: Balance Comp - (...) -- C:\Windows\System32\Tasks\Balance Comp [3086] (.Orphean.)
O39 - APT: DeviceDetector - (.CyberLink.) -- C:\Windows\System32\Tasks\DeviceDetector [3200] =>.CyberLink
O39 - APT: McAfee DAT Built in test - (.McAfee, LLC..) -- C:\Windows\System32\Tasks\McAfee DAT Built in test [3522]
O39 - APT: McAfeeLogon - (.McAfee, Inc..) -- C:\Windows\System32\Tasks\McAfeeLogon [3268] =>.McAfee, Inc.
O39 - APT: NBAgent - (.Nero AG.) -- C:\Windows\System32\Tasks\NBAgent [2806] =>.Nero AG
O39 - APT: Super Optimizer Schedule - (...) -- C:\Windows\System32\Tasks\Super Optimizer Schedule [3254] (.Orphean.) =>PUP.Optional.SuperOptimizer
O39 - APT: Superclean - (...) -- C:\Windows\System32\Tasks\Superclean [3256] (.Orphean.) =>PUP.Optional.Adwareplugin
O39 - APT: Wealneofiu - (.Copyright © 2015.) -- C:\Windows\System32\Tasks\Wealneofiu [3440] =>Heuristic.PullUpdate

---\\ Processus lancés (51) - 5s
[MD5.83A3A504CF2911D6AAF0A9B6E485E1F2] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [204288] [PID.524] =>.AMD
[MD5.74C73CAC26C39F4304690E16FE82DC3B] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [487936] [PID.1208] =>.AMD
[MD5.1474F121C3DF1232D3E7239C03691EE6] - (.Adobe Systems Incorporated - Adobe Photoshop Elements 9.0 (component).) -- C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe [169408] [PID.1592] =>.Adobe Systems Incorporated®
[MD5.696A8431DD22EDE385D7AB84E0EAF4C9] - (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [83984] [PID.1660] {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated
[MD5.9DD3A22F804697606C2B7FF9E912FF6B] - (.Dritek System Inc. - Dritek WMI Service.) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe [353360] [PID.1760] =>.Dritek System Inc.®
[MD5.48425C93B6F36529707206E4FA680CF3] - (.Acer Incorporated - ePowerSvc.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [872552] [PID.1804] =>.Acer Incorporated®
[MD5.21ACFD2B4BF6C0F4D9080A437E400E88] - (.Dritek System Inc. - Launch Manager utility process.) -- C:\Program Files (x86)\Launch Manager\LMutilps32.exe [418896] [PID.1812] =>.Dritek System Inc.®
[MD5.C9B2D1D3F86FD3673EF847DEF73B6F9E] - (.Acer Incorporated - Global Registration Service.) -- C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe [36456] [PID.1860] =>.Acer Incorporated®
[MD5.B705C7097F9A0EC941D02DCE7C7D426C] - (.Acer Incorporated - Updater Service.) -- C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [244624] [PID.1924] =>.Acer Incorporated®
[MD5.6579616DD46A5ADDB2036F2EEFC6CC1D] - (.McAfee, LLC - McAfee Management Service.) -- C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [539512] [PID.1976] {587CD21A05D34D3DDFAA9128521CF4FC}
[MD5.E317B44FBA0097F6A608839EADDF82E3] - (.McAfee, Inc. - McAfee Module Core Service.) -- C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1690976] [PID.2020] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.E6F259CBB0D2774E7D337E84E7A2AF97] - (.McAfee, Inc. - McAfee PEF Service.) -- C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe [1316024] [PID.1152] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.25A8F0D7DD3195DEAF311767F37176CD] - (.McAfee, Inc. - McAfee Management Service Host.) -- C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHOST.exe [493248] [PID.1964] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.6BB9EA284B2E88AE04386611D0F5F0A3] - (.McAfee, LLC - McAfee Process Validation Service.) -- C:\Windows\System32\mfevtps.exe [490360] [PID.2072] {587CD21A05D34D3DDFAA9128521CF4FC}
[MD5.6BB9EA284B2E88AE04386611D0F5F0A3] - (.McAfee, LLC - McAfee Process Validation Service.) -- C:\Windows\System32\mfevtps.exe [490360] [PID.2084] {587CD21A05D34D3DDFAA9128521CF4FC}
[MD5.61C4D22A3159D637C343704759109E8C] - (.McAfee, Inc. - McAfee Protected Module Host.) -- C:\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe [1438856] [PID.2120] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.44D1D8D98C28106357AC2F08E1D446AB] - (.McAfee, LLC - McAfee Core Firewall Service.) -- C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [366968] [PID.2436] {587CD21A05D34D3DDFAA9128521CF4FC}
[MD5.CD0C3EB4B9CB721B1BDF26DE75BFF0DB] - (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11785832] [PID.3436] =>.Realtek Semiconductor Corp®
[MD5.31F52459AA89317FFB57EBAF9B4DD8BC] - (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe [167704] [PID.3444] =>.Intel Corporation®
[MD5.39AC970429FB9E56A29655FA8B959E90] - (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe [392472] [PID.3456] =>.Intel Corporation®
[MD5.7CA105C4CCDFCA407859B2DF3D05A645] - (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe [416024] [PID.3464] =>.Intel Corporation®
[MD5.4FFA2884411F1B6755E15AE623904650] - (.Synaptics Incorporated - Synaptics TouchPad Enhancements.) -- C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2280232] [PID.3476] =>.Synaptics Incorporated®
[MD5.CF7479D5023E65C20370AA99D7F57A96] - (.Intel Corporation - igfxsrvc Module.) -- C:\Windows\System32\igfxsrvc.exe [510232] [PID.3520] =>.Intel Corporation®
[MD5.F0474296AC4E0E6BDE733C1B8513E41A] - (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [1831016] [PID.3640] =>.Acer Incorporated®
[MD5.810E5EF1BAA42F105CFD54608A1D61D4] - (.McAfee, Inc. - McAfee CSP Service Host.) -- C:\Program Files\Common Files\McAfee\CSP\3.0.127.0\McCSPServiceHost.exe [2159464] [PID.3784] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.9ABC4E3B00CFA3A47D5569F5B49FE42F] - (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe [1103440] [PID.3948] =>.Dritek System Inc.®
[MD5.FCEC6F664FA7E5FE323165FBC9314470] - (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040] [PID.4008] =>.Oracle America, Inc.®
[MD5.9E635265543E06272B0C6DE1F76E04AB] - (.Synaptics Incorporated - Synaptics Pointing Device Helper.) -- C:\Program Files\Synaptics\SynTP\SynTPHelper.exe [121128] [PID.4060] =>.Synaptics Incorporated®
[MD5.D1E9DCC8FA99DCB18A27ADEB2F447676] - (.Intel Corporation - igfxext Module.) -- C:\Windows\System32\igfxext.exe [239896] [PID.3108] =>.Intel Corporation®
[MD5.A7D638F45317CB04FC6D718714050F50] - (.Dritek System Inc. - MMDx64Fx Application.) -- C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe [240208] [PID.3872] =>.Dritek System Inc.®
[MD5.A824317EA303679481EF1039A5D66212] - (.Dritek System Inc. - Launch Manager Worker.) -- C:\Program Files (x86)\Launch Manager\LMworker.exe [343632] [PID.792] =>.Dritek System Inc.®
[MD5.BE7919E8505F8AF593BDD195E616FB95] - (.Acer Incorporated - ePowerEvent.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe [467560] [PID.612] =>.Acer Incorporated®
[MD5.EC40CDF2E1D320EFE52E8A01BD3E2CE2] - (.McAfee, Inc. - McAfee WebAdvisor.) -- C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe [604824] [PID.4268] {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
[MD5.44AE7978D264B573B8F7941BB3F4AD1D] - (.McAfee, Inc. - McAfee Access Protection.) -- C:\Program Files\Common Files\McAfee\VSCore_18_6\mcapexe.exe [728808] [PID.4340] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.B943BA1E1F226522A8BB0CA62B16EE0B] - (.McAfee, Inc. - McAfee Cloud AV.) -- C:\Program Files\McAfee\MfeAV\MfeAVSvc.exe [4216728] [PID.4400] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.D0EA9A0C7DEC83B8EACE88C198387CFE] - (.McAfee, Inc. - McAfee WebAdvisor.) -- C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe [2565432] [PID.4900] {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
[MD5.C64BBD8FD3A16765475B885CC5F7F9A4] - (.McAfee LLC. - McAfee Scanner service.) -- C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1396472] [PID.4908] {587CD21A05D34D3DDFAA9128521CF4FC}
[MD5.E317B44FBA0097F6A608839EADDF82E3] - (.McAfee, Inc. - McAfee Module Core Service.) -- C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1690976] [PID.5568] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.D2BF8B1568789A25CE8889A645499FD8] - (.CyberLink - MediaEspresso DeviceDetector.) -- C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [986208] [PID.5840] =>.CyberLink
[MD5.C861851A0BBD9903E324487011AA3705] - (.Advanced Micro Devices Inc. - Catalyst Control Center: Monitoring program.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe [299008] [PID.6132] =>.Advanced Micro Devices Inc.
[MD5.D28C5A1411BB0B47E05E0D6AAF896690] - (.ATI Technologies Inc. - Catalyst Control Center: Host application.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe [299008] [PID.2144] =>.ATI Technologies Inc.
[MD5.983FC69644DDF0486C8DFEA262948D1A] - (.Intel Corporation - IAStorDataSvc.) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [13336] [PID.5196] =>.Intel Corporation®
[MD5.50C7CE53EF461870410355F1F2E7D515] - (.Intel Corporation - Local Manageability Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [326168] [PID.5924] =>.Intel Corporation®
[MD5.13AA2130F2A104DD775EAD0F0EE5417B] - (.Nero AG - NeroUpdate.) -- C:\Program Files (x86)\Nero\Update\NASvc.exe [598312] [PID.5336] =>.Nero AG®
[MD5.374EBDA379A8F38E0CFC2211611E7167] - (.Intel Corporation - User Notification Service.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2656280] [PID.4876] =>.Intel Corporation®
[MD5.AE75112D11D4DE598F63572DBAE146A6] - (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2459120] [PID.6520] {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated
[MD5.AE75112D11D4DE598F63572DBAE146A6] - (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) -- C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe [2459120] [PID.3684] {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated
[MD5.965DE41763305849815FCE255DE85A0B] - (.McAfee, Inc. - McAfee.) -- C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe [744784] [PID.8172] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.AB7CEFCF9D5D217536E907A3CE586FFA] - (.McAfee, Inc. - McAfee Host.) -- C:\Program Files\Common Files\McAfee\Platform\Core\mchost.exe [585760] [PID.8048] {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
[MD5.F53893199B2F63B648DA05BB8D08FD3A] - (.Adobe Systems Incorporated - Adobe® Flash® Player Installer/Uninstaller.) -- C:\Windows\System32\Macromed\Flash\FlashUtil64_31_0_0_122_ActiveX.exe [1025536] [PID.7436] {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated
[MD5.FF9CE0FC9E3B4BC22001764A9EFE4741] - (.Nicolas Coolman - ZHPDiag.) -- C:\Users\Romain\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TNPK79VZ\ZHPDiag3.exe [2105344] [PID.7380] =>.Nicolas Coolman

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 0s
P2 - FPN: [HKLM] [@mcafee.com/MSC,version=10] - (.McAfee Total Protection MIME Plugin.) -- c:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll =>.McAfee Total Protection MIME Plugin
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.WildTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll =>.WildTangent

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (17) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKEY_USERS\S-1-5-21-3727906638-1823552192-502375355-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = preserve
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=userinit.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=C:\Windows\SysWOW64\SystemPropertiesPerformance.exe (.Microsoft Corporation.) =>.Microsoft Corporation

---\\ Etude du fichier hosts (1) - 1s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (7) - 0s
O2 - BHO: (no name) [64Bits] - {4F524A2D-5637-4300-76A7-7A786E7484D7} (Orphean)
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O2 - BHO: Windows Live ID Sign-in Helper [64Bits] - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®
O2 - BHO: McAfee WebAdvisor [64Bits] - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} . (.McAfee, Inc. - WebAdvisor.) -- c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL =>.Microsoft Corporation®
O2 - BHO: BetterPriceChEcc [64Bits] - {E46B0FCD-F3AD-5E6D-8956-EF29E6ED8E20} (Orphean) =>PUP.Optional.BetterPriceChec
O2 - BHO: BetteruPriceaChhec [64Bits] - {EB6FC493-456F-801D-D023-D8775C704E82} (Orphean) =>PUP.Optional.BetterPriceChec

---\\ Internet Explorer, Barre d'outil (1) - 0s
O3 - Toolbar: 0xE3EFEB7F196B494398D2FFB09D4B49CA001F060000 - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} . (...) -- (.not file.)

---\\ Applications lancées au démarrage du système (20) - 1s
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp®
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\System32\igfxtray.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\System32\hkcmd.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\System32\igfxpers.exe =>.Intel Corporation®
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated®
O4 - HKLM\..\Run: [Power Management] . (.Acer Incorporated - ePowerTray.) -- C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe =>.Acer Incorporated®
O4 - HKLM\..\Wow6432Node\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe =>.Advanced Micro Devices, Inc.®
O4 - HKLM\..\Wow6432Node\Run: [LManager] . (.Dritek System Inc. - Launch Manager.) -- C:\Program Files (x86)\Launch Manager\LManager.exe =>.Dritek System Inc.®
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation®
O4 - HKLM\..\Wow6432Node\Run: [mcui_exe] . (.McAfee, Inc. - McAfee Security Center.) -- C:\Program Files\McAfee.com\Agent\mcagent.exe {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\sidebar.exe =>.Microsoft Corporation
O4 - HKUS\.DEFAULT\..\RunOnce: [{91140000-0011-0000-0000-0000000FF1CE}] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\.DEFAULT\..\RunOnce: [{90140000-0018-040C-0000-0000000FF1CE}] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [{91140000-0011-0000-0000-0000000FF1CE}] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-18\..\RunOnce: [{90140000-0018-040C-0000-0000000FF1CE}] . (.Microsoft Corporation - Interpréteur de commandes Windows.) -- C:\Windows\System32\cmd.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation

---\\ Raccourcis Global Startup (11) - 4s
O4 - GS\Desktop [Administrateur]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Romain\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\sendTo [Administrateur]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A.
O4 - GS\TaskBar [Administrateur]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation
O4 - GS\TaskBar [Administrateur]: Microsoft Word 2010.lnk . (...) C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\Desktop [Romain]: ZHPDiag.lnk . (.Nicolas Coolman - ZHPDiag.) C:\Users\Romain\AppData\Roaming\ZHP\ZHPDiag3.exe =>.Nicolas Coolman
O4 - GS\sendTo [Romain]: Skype.lnk . (.Skype Technologies S.A. - Skype.) C:\Program Files (x86)\Skype\Phone\Skype.exe {330000008AF4BE0B29747A0FA000000000008A} =>.Skype Technologies S.A.
O4 - GS\TaskBar [Romain]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation
O4 - GS\TaskBar [Romain]: Microsoft Word 2010.lnk . (...) C:\Windows\Installer\{91140000-0011-0000-0000-0000000FF1CE}\wordicon.exe =>.Microsoft Corporation®
O4 - GS\CommonDesktop [Public]: Acrobat Reader DC.lnk . (.Adobe Systems Incorporated - Adobe Acrobat Reader DC.) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe {068983642C953E46F7BDCE4143F133C1} =>.Adobe Systems Incorporated
O4 - GS\CommonDesktop [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation
O4 - GS\SystemTools [Public]: Task Scheduler.lnk . (...) C:\Windows\system32\taskschd.msc

---\\ Modification Domaine/Adresses DNS (4) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0986F95D-9591-49A0-969F-CD8B10B25FB7}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D9BF0341-3F50-4088-8D45-2FE4729B14EA}: DhcpNameServer = 192.168.1.250
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D9BF0341-3F50-4088-8D45-2FE4729B14EA}: DhcpDomain = PXE.ACER.COM

---\\ Protocole additionnel (29) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: dssrequest [64Bits] - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - WebAdvisor.) -- c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: livecall [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll =>.Microsoft Corporation
O18 - Handler: ms-help [64Bits] - {314111c7-a502-11d2-bbca-00c04f8ec294} . (.Microsoft Corporation - Microsoft® Help Data Services Module.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll =>.Microsoft Corporation®
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll =>.Microsoft Corporation
O18 - Handler: msnim [64Bits] - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: sacore [64Bits] - {5513F07E-936B-4E52-9B00-067394E91CC5} . (.McAfee, Inc. - WebAdvisor.) -- c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\SysWOW64\MSVidCtl.dll =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.dll =>.Microsoft Corporation
O18 - Handler: wlmailhtml [64Bits] - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation®
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (.Microsoft Corporation - Windows Live Album Download Protocol Handle.) -- C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll =>.Microsoft Corporation®
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-mfe-ipt [64Bits] - {3EF5086B-5478-4598-A054-786C45D75692} . (.McAfee, Inc. - McAfee MSC IE plugin DLL.) -- c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL =>.Microsoft Corporation®

---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (1) - 1s
O20 - AppInit_DLLs: . (...) - C:\PROGRA~2\SearchProtect\SearchProtect\bin\SPVC64Loader.dll (.not file.) =>PUP.Optional.SearchProtect

---\\ Logiciels installés (141) - 18s
O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {0A5B39D2-7ED6-4779-BCC9-37F381139DB3} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe AIR =>.Adobe Systems Incorporated®
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {F302F4F0-588D-6501-1ACF-BE3FDCC9135D} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Community Help - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1 =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Flash Player 31 ActiveX - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player ActiveX {06F04788031055D31DEFFEFCD026D6C5} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Photoshop Elements 9 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {007F778D-F15C-4EAB-AE92-071D21FAF632} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Photoshop Elements 9 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Photoshop Elements 9 =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Premiere Elements 9 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {EB9955F8-467C-47FC-90F8-12CD5DF684C3} =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Premiere Elements 9 - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- PremElem90 =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-0804-1033-1959-001824298644} =>.Adobe Systems Incorporated
O42 - Logiciel: Agatha Christie - Death on the Nile - (.WildTangent.) [HKLM][64Bits] -- WTA-5c6bfd67-7381-429b-b4a1-e84e5b666fbe =>.WildTangent Inc®
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM][64Bits] -- {503F672D-6C84-448A-8F8F-4BC35AC83441} =>.Advanced Micro Devices Inc.
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {EA4954FD-C685-1C7D-16F3-9BC2FD5E6BD3} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Atheros Communications Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549} =>.Atheros Communications Inc.
O42 - Logiciel: Balance Comp - (.Kingdom Browser corp.) [HKCU][64Bits] -- {9563BC59-9556-4805-8CD4-886781779D8D}
O42 - Logiciel: Bejeweled 2 Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-5c7d5361-bf39-49fa-bc82-a03350d308fc =>.WildTangent Inc®
O42 - Logiciel: BetteerPRRiceCoheuc - (."".) [HKLM][64Bits] -- {4E5FE462-1A84-47B4-3411-C72434AAD86C} =>PUP.Optional.BetterPriceChec
O42 - Logiciel: Catalyst Control Center - (.Nom de votre société.) [HKLM][64Bits] -- {E3201FB8-4969-30D4-EFC2-B153EAEA6487}
O42 - Logiciel: Catalyst Control Center - Branding - (.ATI.) [HKLM][64Bits] -- {57CA189D-BAEB-49BC-AE75-CE70E9B775E1} =>.ATI
O42 - Logiciel: Catalyst Control Center InstallProxy - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C68FF4E9-C858-14E1-27B2-BEB8C3982FBA} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Localization All - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {F8D6C194-6F77-F864-18E2-6EFF3BD6A18D} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Catalyst Control Center Profiles Mobile - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {87DDB284-DB4B-FC20-B78E-A66B008132BD} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Chinese Standard - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4C90AC57-A494-7E1A-57A6-6B53167BDC3C} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Chinese Traditional - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {9958978D-994A-06A7-F34F-1E8276A78754} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Czech - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {479F7070-9F87-4A05-E1C3-E9B8781F75B3} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Danish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {A9AF76B6-CC38-F234-FE9B-670439204BDA} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Dutch - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {4A2AFE1D-59B9-0300-0052-21BA66BB2FF5} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help English - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {D4E0052F-D2F6-CC47-216E-0F98AA3D02FD} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Finnish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {AA36E9DD-AFB7-E41D-21B6-E042E72FBC50} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help French - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {AA6BB7D8-CD01-01CF-6380-98F856E505BD} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help German - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {C7ECA0F4-805E-358E-09EA-DF586A547EB1} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Greek - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {ED0D8922-7F6C-2B5C-A09A-3FE459E4DDB1} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Hungarian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {42B25C20-2D3F-BEE2-3627-B13CC30BDB38} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Italian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {768C6D38-F6B8-F35C-1D4E-CE764B85B178} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Japanese - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {546DB8EB-CA28-144F-AB99-1EE2D6A47342} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Korean - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {314F6B36-C0B5-E70A-A8DC-E1A126552409} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Norwegian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {B4B6C5E2-7341-DEC2-75DD-DE3C5C885B50} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Polish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {0A81E705-4FF9-DC83-302D-50F3B847F77B} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Portuguese - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {FCA8077C-65B4-0F40-5BCF-8CACC67899AF} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Russian - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {74257E77-412D-ACF4-C279-82936D687083} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Spanish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {9838502B-CB01-F07C-355E-6A99B472AF6F} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Swedish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {63A137AC-FD79-7A5E-3CD5-5605F74AB9E0} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Thai - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {6F9B77F8-DF26-DB18-98B6-171225AA0CDD} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: CCC Help Turkish - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {EBE4F079-3395-110E-CC67-E1826AA32934} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: ccc-utility64 - (.Advanced Micro Devices, Inc..) [HKLM][64Bits] -- {9A853BA3-28A2-99D5-B125-75891A08D26A} =>.Advanced Micro Devices, Inc.
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-13d6fdbe-0899-46d2-b009-c2c4ea9cc0e9 =>.WildTangent Inc®
O42 - Logiciel: Combat Arms - (.FlexibleShopper.) [HKLM][64Bits] -- {A30F3754-C0DC-8242-F3A9-52B360AE9798} =>PUP.Optional.FlexibleShoper
O42 - Logiciel: Crazy Chicken Kart 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-a255c8f2-1a26-44b8-8dcd-af0a3bf288d9 =>.WildTangent Inc®
O42 - Logiciel: CyberLink MediaEspresso - (.CyberLink Corp..) [HKLM][64Bits] -- {E3739848-5329-48E3-8D28-5BBD6E8BE384} =>.CyberLink®
O42 - Logiciel: CyberLink MediaEspresso - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384} =>.CyberLink®
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} =>.Microsoft
O42 - Logiciel: DealsFactor - (.DealsFactor.) [HKLM][64Bits] -- {37476589-E48E-439E-A706-56189E2ED4C4}_is1
O42 - Logiciel: downloadiitkeEpp - (.dowinloaditkeep.) [HKLM][64Bits] -- {1C52B8B6-FFA2-12F6-0A5A-E8301F96A568} =>PUP.Optional.DownloadItKeep
O42 - Logiciel: Elements 9 Organizer - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {433EACD8-4747-4A6A-826A-FFA9F39B0D40} =>.Adobe Systems Incorporated
O42 - Logiciel: Elements STI Installer - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {25175695-4B20-4298-9F34-C2C57CD277B3} =>.Adobe Systems Incorporated®
O42 - Logiciel: Elements STI Installer - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {E2AE009D-37E5-4724-A6B8-0ED6A6BA4F68} =>.Adobe Systems Incorporated®
O42 - Logiciel: FATE - (.WildTangent.) [HKLM][64Bits] -- WTA-1295246f-d9d8-45c7-a8ff-9d5873e186e4 =>.WildTangent Inc®
O42 - Logiciel: FileParade bundle uninstaller - (.FileParade.) [HKLM][64Bits] -- FileParade bundle uninstaller =>PUP.Optional.FileParadeBundle
O42 - Logiciel: Final Drive: Nitro - (.WildTangent.) [HKLM][64Bits] -- WTA-0d582a0b-a0c0-4109-aa81-1480a0030b9f =>.WildTangent Inc®
O42 - Logiciel: HomeMedia - (.CyberLink Corporation.) [HKLM][64Bits] -- {AA4BF92B-2AAF-11DA-9D78-000129760D75} =>.CyberLink Corporation
O42 - Logiciel: Identity Card - (.Packard Bell.) [HKLM][64Bits] -- Identity Card =>.Acer Incorporated®
O42 - Logiciel: Insaniquarium Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-057a4a30-7f3e-4a78-a61b-2c13c76e7e38 =>.WildTangent Inc®
O42 - Logiciel: Intel(R) Display Audio Driver - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA} =>.Intel Corporation®
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A} =>.Intel Corporation®
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC} =>.Intel Corporation®
O42 - Logiciel: Java 8 Update 65 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A24AE4-039D-4CA4-87B4-2F83218065F0} =>.Oracle Corporation
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A03706F-666A-4037-7777-5F2748764D10} =>.Oracle Corporation
O42 - Logiciel: Jewel Match 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-5138730a-2f5b-4501-b91e-ebab2f6537f9 =>.WildTangent Inc®
O42 - Logiciel: Jewel Quest Solitaire - (.WildTangent.) [HKLM][64Bits] -- WTA-1b44ed7f-bf4b-4e86-8cc1-73a3950a226c =>.WildTangent Inc®
O42 - Logiciel: John Deere Drive Green - (.WildTangent.) [HKLM][64Bits] -- WTA-8883a0f1-84da-4eb3-bc72-13ef181a46cd =>.WildTangent Inc®
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM][64Bits] -- {1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4} =>.Microsoft Corporation
O42 - Logiciel: Launch Manager - (.Packard Bell.) [HKLM][64Bits] -- LManager =>.Dritek System Inc.®
O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM][64Bits] -- {3E75652D-99B1-417E-B163-BEF33CAD3F16} =>.Riot Games
O42 - Logiciel: League of Legends - (.Riot Games.) [HKLM][64Bits] -- League of Legends 3.0.1 =>.Riot Games
O42 - Logiciel: LoucKyeCOOuPuoon - (."".) [HKLM][64Bits] -- {BA5D43C9-D633-D0EC-CFEA-2ABA974B333D} =>PUP.Optional.LuckyCoupon
O42 - Logiciel: LuckyShopoperi - (.LuckySHopPer.) [HKLM][64Bits] -- {AE9B04F2-E9E8-162C-829B-52C116B3EFCC} =>PUP.Optional.LuckyShopper
O42 - Logiciel: McAfee AntiVirus Plus - (.McAfee, Inc..) [HKLM][64Bits] -- MSC {6385A608FBD858EB4471A022CCE76B8F} =>.McAfee, Inc.
O42 - Logiciel: McAfee WebAdvisor - (.McAfee, Inc..) [HKLM][64Bits] -- {35ED3F83-4BDC-4c44-8EC6-6A8301C7413A} {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
O42 - Logiciel: Mesh Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- {8C6D6116-B724-4810-8F2D-D047E6B7D68E} =>.Microsoft Corporation
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM][64Bits] -- {95120000-00B9-0409-1000-0000000FF1CE} =>.Microsoft Corporation
O42 - Logiciel: Mozilla Firefox 63.0.1 (x64 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 63.0.1 (x64 fr) {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService =>.Mozilla
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} =>.Microsoft
O42 - Logiciel: MSVCRT_amd64 - (.Microsoft.) [HKLM][64Bits] -- {D0B44725-3666-492D-BEF6-587A14BD9BD9} =>.Microsoft
O42 - Logiciel: MSXML 4.0 SP2 (KB954430) - (.Microsoft Corporation.) [HKLM][64Bits] -- {86493ADD-824D-4B8E-BD72-8C5DCDC52A71} =>.Microsoft Corporation
O42 - Logiciel: MSXML 4.0 SP2 (KB973688) - (.Microsoft Corporation.) [HKLM][64Bits] -- {F662A8E6-F4DC-41A2-901E-8C11F044BDEC} =>.Microsoft Corporation
O42 - Logiciel: Mystery of Mortlake Mansion - (.WildTangent.) [HKLM][64Bits] -- WTA-a3b7d9d0-d0d1-4112-8bc3-16d98a260ad7 =>.WildTangent Inc®
O42 - Logiciel: Nero BackItUp 10 - (.Nero AG.) [HKLM][64Bits] -- {68AB6930-5BFF-4FF6-923B-516A91984FE6} =>.Nero AG
O42 - Logiciel: Nero BackItUp 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {08C8666B-C502-4AB3-B4CB-D74AC42D14FE} =>.Nero AG
O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM][64Bits] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38} =>.Nero AG
O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A} =>.Nero AG
O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM][64Bits] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F} =>.Nero AG
O42 - Logiciel: Nero DiscSpeed 10 - (.Nero AG.) [HKLM][64Bits] -- {34490F4E-48D0-492E-8249-B48BECF0537C} =>.Nero AG
O42 - Logiciel: Nero DiscSpeed 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C18A0418-442A-4186-AF98-D08F5054A2FC} =>.Nero AG
O42 - Logiciel: Nero Express 10 - (.Nero AG.) [HKLM][64Bits] -- {70550193-1C22-445C-8FA4-564E155DB1A7} =>.Nero AG
O42 - Logiciel: Nero Express 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {33643918-7957-4839-92C7-EA96CB621A98} =>.Nero AG
O42 - Logiciel: Nero Multimedia Suite 10 Essentials - (.Nero AG.) [HKLM][64Bits] -- {62BF4BD3-B1F6-4FA2-8388-CC0647ACBF86} =>.Nero AG
O42 - Logiciel: Nero Multimedia Suite 10 Essentials - (.Nero AG.) [HKLM][64Bits] -- {68AFA3A7-9265-4ABD-994A-ACA413E3715C} =>.Nero AG
O42 - Logiciel: Nero RescueAgent 10 - (.Nero AG.) [HKLM][64Bits] -- {E337E787-CF61-4B7B-B84F-509202A54023} =>.Nero AG
O42 - Logiciel: Nero RescueAgent 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {92E25238-61A3-4ACD-A407-3C480EEF47A7} =>.Nero AG
O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM][64Bits] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65} =>.Nero AG
O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702} =>.Nero AG
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A} =>.Nero AG
O42 - Logiciel: Packard Bell Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent packardbell Master Uninstall =>.WildTangent Inc
O42 - Logiciel: Packard Bell Power Management - (.Packard Bell.) [HKLM][64Bits] -- {3DB0448D-AD82-4923-B305-D001E521A964} =>.Acer Incorporated®
O42 - Logiciel: Packard Bell Recovery Management - (.Packard Bell.) [HKLM][64Bits] -- {7F811A54-5A09-4579-90E1-C93498E230D9} =>.Acer Incorporated®
O42 - Logiciel: Packard Bell Registration - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Registration =>.Acer Incorporated®
O42 - Logiciel: Packard Bell ScreenSaver - (.Packard Bell .) [HKLM][64Bits] -- Packard Bell Screensaver =>.Packard Bell
O42 - Logiciel: Packard Bell Social Networks - (.CyberLink Corp..) [HKLM][64Bits] -- {64EF903E-D00A-414C-94A4-FBA368FFCDC9} =>.CyberLink®
O42 - Logiciel: Packard Bell Social Networks - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9} =>.CyberLink®
O42 - Logiciel: Packard Bell Updater - (.Packard Bell.) [HKLM][64Bits] -- {EE171732-BEB4-4576-887D-CB62727F01CA} =>.Acer Incorporated®
O42 - Logiciel: Penguins! - (.WildTangent.) [HKLM][64Bits] -- WTA-db1f4025-e28c-448c-9ae0-209b53188a4b =>.WildTangent Inc®
O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-df45e371-3b0e-49d4-b25e-57474bb828d8 =>.WildTangent Inc®
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-ba15a63e-6e4b-4014-98eb-cb35b1073883 =>.WildTangent Inc®
O42 - Logiciel: PX Profile Update - (.AMD.) [HKLM][64Bits] -- {FE9A8A35-DBD4-9D26-84A2-CFF68BEFAAB6} =>.AMD
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} =>.Realtek Semiconductor Corp.
O42 - Logiciel: Realtek USB 2.0 Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {96AE7E41-E34E-47D0-AC07-1091A8127911} =>.Realtek Semiconductor Corp®
O42 - Logiciel: saFeerrweb - (."".) [HKLM][64Bits] -- {5F488658-35A7-2AB8-A756-560BA8F103C3} =>PUP.Optional.SafeWeb
O42 - Logiciel: saVinnshop - (."".) [HKLM][64Bits] -- {70BD2558-27DA-8B02-02D0-D8704ECD2EDF} =>PUP.Optional.SavinShop
O42 - Logiciel: Search Protect - (.Client Connect LTD.) [HKLM][64Bits] -- SearchProtect =>PUP.Optional.SearchProtect
O42 - Logiciel: Shared C Run-time for x64 - (.McAfee.) [HKLM][64Bits] -- {EF79C448-6946-4D71-8134-03407888C054} =>.McAfee
O42 - Logiciel: Skype™ 7.32 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {FC965A47-4839-40CA-B618-18F486F042C6} =>.Skype Technologies S.A.
O42 - Logiciel: Slingo Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-c51f17ea-f14f-4ed4-afb8-7626df918a19 =>.WildTangent Inc®
O42 - Logiciel: speed browser - (.Eager Wire Apps, LLC.) [HKLM][64Bits] -- Browser =>PUP.Optional.SpeedBrowser
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey =>.Synaptics Incorporated
O42 - Logiciel: toopdeeale - (."".) [HKLM][64Bits] -- {9B149088-3FB6-875E-C1A4-A25A6E9D278D} =>PUP.Optional.Deeal
O42 - Logiciel: Torchlight - (.WildTangent.) [HKLM][64Bits] -- WTA-c4524f43-bd3b-43a7-b2f8-d0e821739267 =>.WildTangent Inc®
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App {11984CF828E0BD485E2D4259A57F28B4} =>.WildTangent Inc
O42 - Logiciel: Video Web Camera - (.CyberLink Corp..) [HKLM][64Bits] -- {01FB4998-33C4-4431-85ED-079E3EEFE75D} =>.CyberLink®
O42 - Logiciel: Video Web Camera - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D} =>.CyberLink®
O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-6ac5203e-d70a-4ab1-a015-e4a9c8d4e98e =>.WildTangent Inc®
O42 - Logiciel: Wajam - (.Wajam.) [HKLM][64Bits] -- Wajam =>PUP.Optional.Wajam
O42 - Logiciel: Websteroids - (.Creative Island Media, LLC.) [HKLM][64Bits] -- Websteroids =>.Creative Island Media, LLC
O42 - Logiciel: Wedding Dash - (.WildTangent.) [HKLM][64Bits] -- WTA-6f9518b3-b942-4a64-b30d-814dd47a13e2 =>.WildTangent Inc®
O42 - Logiciel: Welcome 6 - (.UNKNOWN.) [HKLM][64Bits] -- {8CC1C3D3-24E8-FA93-646B-9C060425A364}
O42 - Logiciel: Welcome 6 - (.UNKNOWN.) [HKLM][64Bits] -- welcome6
O42 - Logiciel: Welcome Center - (.Packard Bell.) [HKLM][64Bits] -- Packard Bell Welcome Center =>.Acer Incorporated®
O42 - Logiciel: WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-packardbell =>.WildTangent Inc®
O42 - Logiciel: WildTangent ShortcutProvider - (.WildTangent.) [HKLM][64Bits] -- {80831F60-19D7-43B3-A60C-5CAF8C478DF6} {11984CF828E0BD485E2D4259A57F28B4} =>.WildTangent Inc
O42 - Logiciel: WWowCoupon - (.WowCoupon.) [HKLM][64Bits] -- {1B8A71D1-31D4-EE6A-C32F-836E0BFFA6D3} =>PUP.Optional.WOwCoupon

---\\ HKCU & HKLM Software Keys (90) - 18s
HKLM\SOFTWARE\Wow6432Node\Adobe
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\Atheros Communications Inc.
HKLM\SOFTWARE\Wow6432Node\ATI
HKLM\SOFTWARE\Wow6432Node\ATI Technologies
HKLM\SOFTWARE\Wow6432Node\Browser =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\Caphyon
HKLM\SOFTWARE\Wow6432Node\Contrôle Parental
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\Dritek
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Licenses
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\McAfee.com
HKLM\SOFTWARE\Wow6432Node\McAfeeInstaller
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\Nero
HKLM\SOFTWARE\Wow6432Node\Network Associates
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\OEM
HKLM\SOFTWARE\Wow6432Node\Packard Bell
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Riot Games
HKLM\SOFTWARE\Wow6432Node\SearchProtect =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\SECURITOO
HKLM\SOFTWARE\Wow6432Node\SiteAdvisor
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\Sonic
HKLM\SOFTWARE\Wow6432Node\SPPDCOM =>.Superfluous.PCSpeedUp
HKLM\SOFTWARE\Wow6432Node\SweetIM =>PUP.Optional.SweetIM
HKLM\SOFTWARE\Wow6432Node\Symantec
HKLM\SOFTWARE\Wow6432Node\Volatile
HKLM\SOFTWARE\Wow6432Node\WaIntEnhance =>PUP.Optional.WaEnhance
HKLM\SOFTWARE\Wow6432Node\Wajam =>PUP.Optional.Wajam
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\Yahoo =>.Yahoo!
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Acer
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\Browser =>PUP.Optional.CrossRider
HKCU\SOFTWARE\BrowserChoice
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\Condut
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\Dritek
HKCU\SOFTWARE\Evernote
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\Hewlett-Packard
HKCU\SOFTWARE\IM
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\Logitech
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MainConcept
HKCU\SOFTWARE\MCAFEE
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Nero
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\OEM
HKCU\SOFTWARE\Packard Bell
HKCU\SOFTWARE\ProtectedStorage
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\skypeapp-80db6c42e8da
HKCU\SOFTWARE\Super Optimizer =>PUP.Optional.SuperOptimizer
HKCU\SOFTWARE\SweetIM =>PUP.Optional.SweetIM
HKCU\SOFTWARE\Symantec
HKCU\SOFTWARE\Synaptics
HKCU\SOFTWARE\teras games
HKCU\SOFTWARE\Wajam =>PUP.Optional.Wajam
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\DynConIE =>PUP.Optional.DynConIE
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programmes (166) - 27s
O43 - CFD: 11/11/2016 - [] D -- C:\Program Files (x86)\Adobe =>.Adobe Systems Incorporated®
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\AMD APP
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\ATI Technologies
O43 - CFD: 07/09/2015 - [] D -- C:\Program Files (x86)\Combat Arms
O43 - CFD: 17/02/2017 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\CyberLink
O43 - CFD: 01/11/2018 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information =>.Macrovision Corporation®
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\Intel =>.Intel Corporation®
O43 - CFD: 02/11/2018 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 08/11/2015 - [] D -- C:\Program Files (x86)\Java =>.Oracle America, Inc.®
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\Launch Manager =>.Dritek System Inc.®
O43 - CFD: 02/08/2013 - [] D -- C:\Program Files (x86)\McAfee =>.McAfee, Inc.®
O43 - CFD: 02/08/2013 - [] D -- C:\Program Files (x86)\McAfee.com =>.McAfee, Inc.®
O43 - CFD: 01/11/2018 - [0] D -- C:\Program Files (x86)\Microsoft
O43 - CFD: 22/08/2012 - [] D -- C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 22/08/2012 - [] D -- C:\Program Files (x86)\Microsoft Office =>.Microsoft Corporation®
O43 - CFD: 22/08/2012 - [] D -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 22/08/2012 - [] D -- C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 22/08/2012 - [] D -- C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 22/08/2012 - [] D -- C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 22/08/2012 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 02/11/2018 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service {0C5396DCB2949C70FAC48AB08A07338E}
O43 - CFD: 22/08/2012 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 24/08/2012 - [0] D -- C:\Program Files (x86)\MSXML 4.0
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\Nero =>.Nero AG®
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\Packard Bell =>.Acer Incorporated®
O43 - CFD: 01/11/2018 - [] D -- C:\Program Files (x86)\Packard Bell Games
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\Realtek =>.Realtek Semiconductor Corp®
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 17/02/2017 - [] RD -- C:\Program Files (x86)\Skype {330000008AF4BE0B29747A0FA000000000008A}
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\Social Networks =>.CyberLink®
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\SymSilent =>.Symantec Corporation®
O43 - CFD: 20/10/2011 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files (x86)\Uninstall Information
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\Video Web Camera =>.CyberLink®
O43 - CFD: 11/09/2012 - [] D -- C:\Program Files (x86)\Welcome 6
O43 - CFD: 01/11/2018 - [] D -- C:\Program Files (x86)\WildTangent Games =>.WildTangent Inc®
O43 - CFD: 02/08/2013 - [] D -- C:\Program Files (x86)\Windows Defender
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\Windows Live =>.Microsoft Corporation®
O43 - CFD: 07/06/2012 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 02/11/2018 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 07/06/2012 - [] D -- C:\Program Files (x86)\Windows Photo Viewer =>.Microsoft Corporation®
O43 - CFD: 21/11/2010 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 07/06/2012 - [] D -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 20/10/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 02/08/2013 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 06/06/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
O43 - CFD: 20/10/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink MediaEspresso
O43 - CFD: 12/01/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 11/09/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hatier
O43 - CFD: 20/10/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HomeMedia
O43 - CFD: 20/10/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 08/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 02/11/2018 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
O43 - CFD: 22/08/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 20/10/2011 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 14/01/2013 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support
O43 - CFD: 22/08/2012 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 05/01/2016 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 06/06/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Social Networks
O43 - CFD: 02/08/2013 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 06/06/2012 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Web Camera
O43 - CFD: 20/10/2011 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 11/11/2016 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 02/08/2013 - [] D -- C:\ProgramData\ATI
O43 - CFD: 22/08/2012 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 02/11/2018 - [] HD -- C:\ProgramData\CanonBJ
O43 - CFD: 06/06/2012 - [] D -- C:\ProgramData\CLSK
O43 - CFD: 22/08/2012 - [] D -- C:\ProgramData\CyberLink
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 31/03/2014 - [] D -- C:\ProgramData\Downloaded Installations
O43 - CFD: 20/10/2011 - [0] D -- C:\ProgramData\Evernote
O43 - CFD: 22/08/2012 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 06/06/2012 - [] D -- C:\ProgramData\install_clap
O43 - CFD: 01/11/2018 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 22/08/2012 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 02/11/2018 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 02/11/2018 - [] D -- C:\ProgramData\Microsoft Help
O43 - CFD: 22/08/2012 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 20/10/2011 - [] D -- C:\ProgramData\Nero
O43 - CFD: 22/08/2012 - [] D -- C:\ProgramData\Norton
O43 - CFD: 20/10/2011 - [] D -- C:\ProgramData\NortonInstaller
O43 - CFD: 22/08/2012 - [] D -- C:\ProgramData\oem
O43 - CFD: 08/11/2015 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 20/10/2011 - [] D -- C:\ProgramData\Packard Bell
O43 - CFD: 08/11/2015 - [] D -- C:\ProgramData\Radio
O43 - CFD: 16/12/2015 - [] D -- C:\ProgramData\regid.1986-12.com.adobe
O43 - CFD: 28/11/2015 - [] D -- C:\ProgramData\Riot Games
O43 - CFD: 17/02/2017 - [] D -- C:\ProgramData\Skype
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 03/03/2014 - [] D -- C:\ProgramData\Sun
O43 - CFD: 06/06/2012 - [] D -- C:\ProgramData\Temp
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 06/06/2015 - [] D -- C:\ProgramData\Wealneofiu =>Heuristic.PullUpdate
O43 - CFD: 15/11/2013 - [] D -- C:\ProgramData\WildTangent
O43 - CFD: 11/11/2016 - [] D -- C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 02/08/2013 - [] D -- C:\Program Files (x86)\Common Files\Adobe AIR
O43 - CFD: 22/05/2014 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 08/11/2015 - [] D -- C:\Program Files (x86)\Common Files\Java
O43 - CFD: 19/10/2017 - [] D -- C:\Program Files (x86)\Common Files\McAfee
O43 - CFD: 02/11/2018 - [] D -- C:\Program Files (x86)\Common Files\microsoft shared
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\Common Files\PX Storage Engine
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\Services
O43 - CFD: 17/02/2017 - [] D -- C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 06/06/2012 - [] D -- C:\Program Files (x86)\Common Files\Sonic Shared
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files (x86)\Common Files\SpeechEngines
O43 - CFD: 02/11/2018 - [] D -- C:\Program Files (x86)\Common Files\System
O43 - CFD: 20/10/2011 - [] D -- C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 11/11/2015 - [] D -- C:\Users\Romain\AppData\Roaming\.ascentia
O43 - CFD: 16/12/2015 - [] D -- C:\Users\Romain\AppData\Roaming\Adobe
O43 - CFD: 02/08/2013 - [] D -- C:\Users\Romain\AppData\Roaming\ATI
O43 - CFD: 07/11/2015 - [] D -- C:\Users\Romain\AppData\Roaming\CyberLink
O43 - CFD: 22/08/2012 - [] D -- C:\Users\Romain\AppData\Roaming\Identities
O43 - CFD: 29/11/2015 - [] D -- C:\Users\Romain\AppData\Roaming\LolClient
O43 - CFD: 20/10/2011 - [] D -- C:\Users\Romain\AppData\Roaming\Macromedia
O43 - CFD: 21/11/2010 - [0] D -- C:\Users\Romain\AppData\Roaming\Media Center Programs
O43 - CFD: 02/11/2018 - [] SD -- C:\Users\Romain\AppData\Roaming\Microsoft
O43 - CFD: 02/11/2018 - [] D -- C:\Users\Romain\AppData\Roaming\Mozilla
O43 - CFD: 29/11/2015 - [] D -- C:\Users\Romain\AppData\Roaming\Riot Games
O43 - CFD: 22/08/2012 - [] D -- C:\Users\Romain\AppData\Roaming\Screensaver
O43 - CFD: 01/11/2018 - [] D -- C:\Users\Romain\AppData\Roaming\Skype
O43 - CFD: 26/10/2012 - [] D -- C:\Users\Romain\AppData\Roaming\SNS
O43 - CFD: 08/11/2015 - [] D -- C:\Users\Romain\AppData\Roaming\Sun
O43 - CFD: 06/03/2014 - [] D -- C:\Users\Romain\AppData\Roaming\welcome6
O43 - CFD: 12/10/2012 - [] D -- C:\Users\Romain\AppData\Roaming\WildTangent
O43 - CFD: 02/11/2018 - [] D -- C:\Users\Romain\AppData\Roaming\ZHP
O43 - CFD: 11/11/2016 - [] D -- C:\Users\Romain\AppData\Local\Adobe
O43 - CFD: 22/08/2012 - [0] SHD -- C:\Users\Romain\AppData\Local\Application Data
O43 - CFD: 02/08/2013 - [] D -- C:\Users\Romain\AppData\Local\ATI
O43 - CFD: 20/09/2015 - [] D -- C:\Users\Romain\AppData\Local\Balance Comp
O43 - CFD: 11/11/2016 - [] D -- C:\Users\Romain\AppData\Local\CEF
O43 - CFD: 13/02/2016 - [] D -- C:\Users\Romain\AppData\Local\CrashDumps
O43 - CFD: 07/11/2015 - [] D -- C:\Users\Romain\AppData\Local\Cyberlink
O43 - CFD: 01/11/2018 - [] D -- C:\Users\Romain\AppData\Local\Diagnostics
O43 - CFD: 02/11/2018 - [] D -- C:\Users\Romain\AppData\Local\ElevatedDiagnostics
O43 - CFD: 08/11/2015 - [0] SHD -- C:\Users\Romain\AppData\Local\EmieSiteList
O43 - CFD: 08/11/2015 - [0] SHD -- C:\Users\Romain\AppData\Local\EmieUserList
O43 - CFD: 01/11/2018 - [] D -- C:\Users\Romain\AppData\Local\Evernote
O43 - CFD: 05/02/2015 - [] D -- C:\Users\Romain\AppData\Local\Google
O43 - CFD: 07/09/2015 - [] D -- C:\Users\Romain\AppData\Local\GWX
O43 - CFD: 22/08/2012 - [0] SHD -- C:\Users\Romain\AppData\Local\Historique
O43 - CFD: 02/11/2018 - [] D -- C:\Users\Romain\AppData\Local\Microsoft
O43 - CFD: 05/04/2014 - [] D -- C:\Users\Romain\AppData\Local\Microsoft Games
O43 - CFD: 22/08/2012 - [0] D -- C:\Users\Romain\AppData\Local\Microsoft Help
O43 - CFD: 02/11/2018 - [] D -- C:\Users\Romain\AppData\Local\Mozilla
O43 - CFD: 23/05/2014 - [] D -- C:\Users\Romain\AppData\Local\Packages
O43 - CFD: 06/03/2014 - [] D -- C:\Users\Romain\AppData\Local\Programs
O43 - CFD: 08/11/2015 - [] D -- C:\Users\Romain\AppData\Local\SearchProtect =>PUP.Optional.SearchProtect
O43 - CFD: 05/01/2016 - [0] D -- C:\Users\Romain\AppData\Local\Skype
O43 - CFD: 02/11/2018 - [] D -- C:\Users\Romain\AppData\Local\Temp
O43 - CFD: 22/08/2012 - [0] SHD -- C:\Users\Romain\AppData\Local\Temporary Internet Files
O43 - CFD: 07/11/2015 - [] D -- C:\Users\Romain\AppData\Local\VirtualStore
O43 - CFD: 01/11/2018 - [] D -- C:\Users\Romain\AppData\Local\YSearchUtil
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 02/11/2018 - [] RD -- C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 02/11/2018 - [] RD -- C:\Users\Romain\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ ShellIconOverlayIdentifiers (SIOI) (7) - 1s
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll =>.Microsoft Corporation
O106 - SIOI: Groove Explorer Icon Overlay 1 (GFS Unread Stub) [Groove Explorer Icon Overlay 1 (GFS Unread Stub)] - {99FD978C-D287-4F50-827F-B2C658EDA8E7}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 2 (GFS Stub) [Groove Explorer Icon Overlay 2 (GFS Stub)] - {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 2.5 (GFS Unread Folder) [Groove Explorer Icon Overlay 2.5 (GFS Unread Folder)] - {920E6DB1-9907-4370-B3A0-BAFC03D81399}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 3 (GFS Folder) [Groove Explorer Icon Overlay 3 (GFS Folder)] - {16F3DD56-1AF5-4347-846D-7C10C4192619}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Groove Explorer Icon Overlay 4 (GFS Unread Mark) [Groove Explorer Icon Overlay 4 (GFS Unread Mark)] - {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}. (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL =>.Microsoft Corporation®
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll =>.Microsoft Corporation

---\\ Liste des pilotes du système (67) - 87s
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [491088] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [339536] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver (X64).) -- C:\Windows\System32\drivers\adpu320.sys [182864] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [15440] =>.Microsoft Windows®
O58 - SDL:2011/07/14 06:35:47 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [107904] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:20 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [194128] =>.Microsoft Windows®
O58 - SDL:2011/07/14 06:35:47 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [27008] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [87632] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:52:21 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [97856] =>.Microsoft Windows®
O58 - SDL:2011/06/02 04:37:32 A . (.Atheros Communications, Inc. - Atheros Extensible Wireless LAN device driv.) -- C:\Windows\System32\drivers\athrx.sys [2750464] =>.Atheros Communications, Inc.
O58 - SDL:2011/10/13 01:38:44 A . (.ATI Technologies Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [10207232] =>.ATI Technologies Inc.
O58 - SDL:2011/10/13 00:18:10 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [317952] =>.Advanced Micro Devices, Inc.
O58 - SDL:2009/06/10 21:34:23 A . (.Broadcom Corporation - Broadcom NetXtreme Gigabit Ethernet NDIS6.x.) -- C:\Windows\System32\drivers\b57nd60a.sys [270848] =>.Broadcom Corporation
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [18432] =>.Brother Industries, Ltd.
O58 - SDL:2009/06/10 21:41:06 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [8704] =>.Brother Industries, Ltd.
O58 - SDL:2009/07/14 02:19:07 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [286720] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [47104] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [14976] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:41:10 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [14720] =>.Brother Industries Ltd.
O58 - SDL:2009/06/10 21:34:28 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbda.sys [468480] =>.Broadcom Corporation
O58 - SDL:2009/10/20 02:00:00 N . (.Sonic Solutions - CDR4 64-bit CD and DVD Place Holder Driver.) -- C:\Windows\System32\drivers\cdr4_xp.sys [10224] =>.Sonic Solutions®
O58 - SDL:2009/10/20 02:00:00 N . (.Sonic Solutions - CDRAL 64-bit Place Holder Driver (see PxHel.) -- C:\Windows\System32\drivers\cdralw2k.sys [10224] =>.Sonic Solutions®
O58 - SDL:2018/08/27 09:44:54 A . (.McAfee, LLC - McAfee Personal Firewall IDS Plugin.) -- C:\Windows\System32\drivers\cfwids.sys [78640] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2009/07/14 02:52:31 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:47:48 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [530496] =>.Microsoft Windows®
O58 - SDL:2009/06/10 21:34:33 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbda.sys [3286016] =>.Broadcom Corporation
O58 - SDL:2009/06/10 21:31:59 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [31232] =>.Hauppauge Computer Works, Inc.
O58 - SDL:2010/10/20 01:34:26 A . (.Intel Corporation - Intel(R) Management Engine Interface.) -- C:\Windows\System32\drivers\HECIx64.sys [56344] =>.Intel Corporation®
O58 - SDL:2018/05/02 05:53:12 A . (.McAfee, Inc. - McAfee HIP IPS Driver.) -- C:\Windows\System32\drivers\HipShieldK.sys [226984] {587CD21A05D34D3DDFAA9128521CF4FC} =>.McAfee, Inc.
O58 - SDL:2010/11/21 04:23:47 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [78720] =>.Microsoft Windows®
O58 - SDL:2011/01/13 01:51:44 A . (.Intel Corporation - Intel Rapid Storage Technology driver - x64.) -- C:\Windows\System32\drivers\iaStor.sys [439320] =>.Intel Corporation®
O58 - SDL:2011/07/14 06:35:47 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\Windows\System32\drivers\iaStorV.sys [410496] =>.Microsoft Windows®
O58 - SDL:2011/08/09 01:32:02 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdkmd64.sys [12289472] =>.Intel Corporation
O58 - SDL:2011/08/09 01:32:02 A . (.Intel Corporation - Intel Graphics Kernel Mode Driver.) -- C:\Windows\System32\drivers\igdpmd64.sys [12289472] =>.Intel Corporation
O58 - SDL:2009/07/14 02:48:04 A . (.Intel Corp./ICP vortex GmbH - Intel/ICP Raid Storport Driver.) -- C:\Windows\System32\drivers\iirsp.sys [44112] =>.Microsoft Windows®
O58 - SDL:2010/10/14 18:28:16 A . (.Intel(R) Corporation - Intel(R) Display Audio Driver.) -- C:\Windows\System32\drivers\IntcDAud.sys [317440] =>.Intel(R) Corporation
O58 - SDL:2010/09/27 08:24:44 A . (.Atheros Communications, Inc. - Atheros L1c PCI-E Gigabit Ethernet Controll.) -- C:\Windows\System32\drivers\L1C62x64.sys [76912] =>.Atheros Communications Inc.®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT FC Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_fc.sys [114752] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas.sys [106560] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_sas2.sys [65600] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - LSI Fusion-MPT SCSI Driver (StorPort).) -- C:\Windows\System32\drivers\lsi_scsi.sys [115776] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation - MEGASAS RAID Controller Driver for Windows.) -- C:\Windows\System32\drivers\megasas.sys [35392] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:48:04 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\Windows\System32\drivers\MegaSR.sys [284736] =>.Microsoft Windows®
O58 - SDL:2018/08/27 09:44:54 A . (.McAfee, LLC - McAfee Arbitrary Access Control Driver.) -- C:\Windows\System32\drivers\mfeaack.sys [507696] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2018/08/27 09:44:54 A . (.McAfee, LLC - Anti-Virus File System Filter Driver.) -- C:\Windows\System32\drivers\mfeavfk.sys [368944] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2018/08/13 03:26:18 A . (.McAfee LLC. - McAfee Driver Cleaning Driver.) -- C:\Windows\System32\drivers\mfeclnrk.sys [32544] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2018/08/27 09:44:54 A . (.McAfee, LLC - McAfee Core Firewall Engine Driver.) -- C:\Windows\System32\drivers\mfefirek.sys [534832] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2018/08/27 09:44:54 A . (.McAfee, LLC - McAfee Link Driver.) -- C:\Windows\System32\drivers\mfehidk.sys [969008] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2018/08/13 03:26:18 A . (.McAfee LLC. - Event Driver.) -- C:\Windows\System32\drivers\mfencbdc.sys [557344] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2018/08/13 03:26:18 A . (.McAfee LLC. - Detection driver.) -- C:\Windows\System32\drivers\mfencrk.sys [110368] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2018/08/27 09:44:54 A . (.McAfee, LLC - AAC Protected Launch Plugin Driver.) -- C:\Windows\System32\drivers\mfeplk.sys [117040] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2018/08/27 09:44:54 A . (.McAfee, LLC - Anti-Virus Mini-Firewall Driver.) -- C:\Windows\System32\drivers\mfewfpk.sys [254256] {587CD21A05D34D3DDFAA9128521CF4FC}
O58 - SDL:2009/07/14 02:48:26 A . (.IBM Corporation - IBM ServeRAID Controller Driver.) -- C:\Windows\System32\drivers\nfrd960.sys [51264] =>.Microsoft Windows®
O58 - SDL:2011/07/14 06:35:47 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\Windows\System32\drivers\nvraid.sys [148352] =>.Microsoft Windows®
O58 - SDL:2011/07/14 06:35:47 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\Windows\System32\drivers\nvstor.sys [166272] =>.Microsoft Windows®
O58 - SDL:2010/03/19 02:00:00 N . (.Sonic Solutions - Px Engine Device Driver for 64-bit Windows.) -- C:\Windows\System32\drivers\PxHlpa64.sys [55856] =>.Sonic Solutions®
O58 - SDL:2009/07/14 02:45:46 A . (.QLogic Corporation - QLogic Fibre Channel Stor Miniport Driver.) -- C:\Windows\System32\drivers\ql2300.sys [1524816] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:45 A . (.QLogic Corporation - QLogic iSCSI Storport Miniport Driver.) -- C:\Windows\System32\drivers\ql40xx.sys [128592] =>.Microsoft Windows®
O58 - SDL:2011/03/15 11:30:06 A . (.Realtek Semiconductor Corp. - Realtek(r) High Definition Audio Function D.) -- C:\Windows\System32\drivers\RTKVHD64.sys [2814952] =>.Realtek Semiconductor Corp®
O58 - SDL:2010/07/20 10:43:22 A . (.Realtek Semiconductor Corp. - Realtek USB Mass Storage Driver for 2K/XP/V.) -- C:\Windows\System32\drivers\RtsUStor.sys [247400] =>.Realtek Semiconductor Corp®
O58 - SDL:2009/06/10 21:37:19 A . (.Macrovision Corporation, Macrovision Europe Limited, - Macrovision SECURITY Driver.) -- C:\Windows\System32\drivers\secdrv.sys [23040] =>.Macrovision Corporation, Macrovision Europe Limited,
O58 - SDL:2009/07/14 02:45:45 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\Windows\System32\drivers\sisraid2.sys [43584] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:46 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\Windows\System32\drivers\sisraid4.sys [80464] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:55 A . (.Promise Technology - Promise SuperTrak EX Series Driver for Win.) -- C:\Windows\System32\drivers\stexstor.sys [24656] =>.Microsoft Windows®
O58 - SDL:2010/07/29 14:30:48 A . (.Synaptics Incorporated - Synaptics Touchpad Driver.) -- C:\Windows\System32\drivers\SynTP.sys [1383472] =>.Synaptics Incorporated®
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies, Inc. - VIA Generic PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\viaide.sys [17488] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:45:55 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\Windows\System32\drivers\vsmraid.sys [161872] =>.Microsoft Windows®

---\\ Derniers fichiers modifiés ou crées (Utilisateur) (6) - 20s
O61 - LFC: 2018/11/02 18:46:24 A . (..) -- C:\Users\Romain\AppData\Roaming\Mozilla\Firefox\Profiles\rgesotw7.default\gmp-gmpopenh264\1.7.1\gmpopenh264.dll [972752] {0C5396DCB2949C70FAC48AB08A07338E}
O61 - LFC: 2018/11/02 20:48:25 A . (..) -- C:\Users\Romain\AppData\Local\Mozilla\Firefox\Profiles\rgesotw7.default\startupCache\scriptCache-child.bin [701588]
O61 - LFC: 2018/11/02 20:48:25 A . (..) -- C:\Users\Romain\AppData\Local\Mozilla\Firefox\Profiles\rgesotw7.default\startupCache\scriptCache.bin [4852220]
O61 - LFC: 2018/11/02 20:48:25 A . (..) -- C:\Users\Romain\AppData\Local\Mozilla\Firefox\Profiles\rgesotw7.default\startupCache\urlCache.bin [2524]
O61 - LFC: 2018/11/02 18:36:50 A . (..) -- C:\Users\Romain\AppData\Local\Microsoft\Internet Explorer\UrlBlockManager\urlblocklist.bin [0]
O61 - LFC: 2018/11/02 18:01:19 A . (..) -- C:\Users\Romain\AppData\Local\ATI\ACE\Manifest.Bin [30145]

---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> [HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> [HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> [HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> [HKLM\..\open\Command] (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe =>PUP.Optional.SpeedBrowser
O67 - Shell Spawning: <.js> [HKLM\..\open\Command] (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.reg> [HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> [HKLM\..\open\Command] (...) -- "%1" /S

---\\ Menu de démarrage Internet (12) - 1s
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe {0C5396DCB2949C70FAC48AB08A07338E} =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe {33000001B1DDEDBA54E965B85F0001000001B1} =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\Shell\open\Command] (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe =>PUP.Optional.SpeedBrowser
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ShowIconsCommand] (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe (.not file.) =>PUP.Optional.SpeedBrowser
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\ReinstallCommand] (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe (.not file.) =>PUP.Optional.SpeedBrowser
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe =>.Mozilla Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe =>.Microsoft Corporation
O68 - StartMenuInternet: [HKLM\..\InstallInfo\HideIconsCommand] (...) -- C:\Program Files (x86)\speed browser\Application\chrome.exe (.not file.) =>PUP.Optional.SpeedBrowser

---\\ Recherche d'infection sur les navigateurs (7) - 4s
O69 - SBI: SearchScopes [HKCU] {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} [DefaultScope] - (Bing) - http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {0C1712AB-D304-4B92-89E7-3A42FC9220DF} - (Yahoo Search) - http://fr.search.yahoo.com/ =>.Yahoo Search
O69 - SBI: SearchScopes [HKCU] {1423A7BF-5C3B-42B1-A425-20E3D8D80A81} - (Recherche sécurisée) - http://fr.search.yahoo.com/ =>.Yahoo Search
O69 - SBI: SearchScopes [HKCU] {69E6EE16-16DC-4ACC-BF38-44703F71B8A1} - (Google) - http://www.google.com/
O69 - SBI: SearchScopes [HKCU] {8E1BAA55-55E6-487A-887B-F1F7BA14B1F5} - (Ask Search) - http://www.search.ask.com/ =>Toolbar.Ask
O69 - SBI: SearchScopes [HKCU] - (Conduit Search) - http://search.conduit.com/ =>PUP.Optional.Conduit
O69 - SBI: SearchScopes [HKLM] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (Bing) - http://www.bing.com/

---\\ Enumère les services démarrés par Svchost (32) - 1s
O83 - Search Svchost Services: AeLookupSvc (AeLookupSvc) . (.Microsoft Corporation - Service Expérience d’application.) -- C:\Windows\System32\aelupsvc.dll [72192] =>.Microsoft Corporation
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll [80384] =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\system32\srvsvc.dll [236032] =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll [794624] =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\ikeext.dll [863232] =>.Microsoft Corporation
O83 - Search Svchost Services: AudioSrv (AudioSrv) . (.Microsoft Corporation - Service Audio Windows.) -- C:\Windows\System32\Audiosrv.dll [680448] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll [99328] =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire de connexions d’accès distant.) -- C:\Windows\System32\rasmans.dll [344064] =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll [97792] =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll [64512] =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll [359424] =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll [316928] =>.Microsoft Corporation
O83 - Search Svchost Services: TermService (TermService) . (.Microsoft Corporation - Gestionnaire des connexions distantes du se.) -- C:\Windows\System32\termsrv.dll [687616] =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\system32\wuaueng.dll [2651648] =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll [849920] =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll [370688] =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll [569344] =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\system32\seclogon.dll [30720] =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll [70144] =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\system32\iscsiexe.dll [156672] =>.Microsoft Corporation
O83 - Search Svchost Services: MMCSS (MMCSS) . (.Microsoft Corporation - Service Planificateur de classes multimédia.) -- C:\Windows\system32\mmcss.dll [67584] =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\system32\wbem\WMIsvc.dll [242688] =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll [121856] =>.Microsoft Corporation
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll [136704] =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll [111104] =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\system32\schedsvc.dll [1110528] =>.Microsoft Corporation
O83 - Search Svchost Services: hkmsvc (hkmsvc) . (.Microsoft Corporation - Service Gestion des clés.) -- C:\Windows\system32\kmsvc.dll [90624] =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports et solutions aux problèmes.) -- C:\Windows\System32\wercplsupport.dll [84480] =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\system32\profsvc.dll [210432] =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\system32\themeservice.dll [44544] =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll [100864] =>.Microsoft Corporation

---\\ Recherche de clés de registre Tracing (6) - 3s
HKLM\SOFTWARE\Microsoft\Tracing\Websteroids64_RASAPI32 =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Microsoft\Tracing\Websteroids64_RASMANCS =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebsteroidsService_RASAPI32 =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebsteroidsService_RASMANCS =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Websteroids_RASAPI32 =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Websteroids_RASMANCS =>PUP.Optional.InternetUpdater

---\\ Scan Additionnel (56) - 0s
C:\ProgramData\Wealneofiu\1.0.1.0\mreailux.exe =>Heuristic.PullUpdate
C:\Windows\Tasks\Superclean.job =>PUP.Optional.Adwareplugin
C:\Windows\System32\Tasks\Super Optimizer Schedule =>PUP.Optional.SuperOptimizer
C:\Windows\System32\Tasks\Superclean =>PUP.Optional.Adwareplugin
C:\Windows\System32\Tasks\Wealneofiu =>Heuristic.PullUpdate
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E46B0FCD-F3AD-5E6D-8956-EF29E6ED8E20} =>PUP.Optional.BetterPriceChec
HKLM64\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EB6FC493-456F-801D-D023-D8775C704E82} =>PUP.Optional.BetterPriceChec
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Browser =>PUP.Optional.SpeedBrowser
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileParade bundle uninstaller =>PUP.Optional.FileParadeBundle
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wajam =>PUP.Optional.Wajam
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1B8A71D1-31D4-EE6A-C32F-836E0BFFA6D3} =>PUP.Optional.WOwCoupon
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1C52B8B6-FFA2-12F6-0A5A-E8301F96A568} =>PUP.Optional.DownloadItKeep
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4E5FE462-1A84-47B4-3411-C72434AAD86C} =>PUP.Optional.BetterPriceChec
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5F488658-35A7-2AB8-A756-560BA8F103C3} =>PUP.Optional.SafeWeb
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{70BD2558-27DA-8B02-02D0-D8704ECD2EDF} =>PUP.Optional.SavinShop
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9B149088-3FB6-875E-C1A4-A25A6E9D278D} =>PUP.Optional.Deeal
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A30F3754-C0DC-8242-F3A9-52B360AE9798} =>PUP.Optional.FlexibleShoper
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AE9B04F2-E9E8-162C-829B-52C116B3EFCC} =>PUP.Optional.LuckyShopper
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BA5D43C9-D633-D0EC-CFEA-2ABA974B333D} =>PUP.Optional.LuckyCoupon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Browser =>PUP.Optional.SpeedBrowser
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\FileParade bundle uninstaller =>PUP.Optional.FileParadeBundle
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Wajam =>PUP.Optional.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1B8A71D1-31D4-EE6A-C32F-836E0BFFA6D3} =>PUP.Optional.WOwCoupon
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{1C52B8B6-FFA2-12F6-0A5A-E8301F96A568} =>PUP.Optional.DownloadItKeep
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{4E5FE462-1A84-47B4-3411-C72434AAD86C} =>PUP.Optional.BetterPriceChec
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{5F488658-35A7-2AB8-A756-560BA8F103C3} =>PUP.Optional.SafeWeb
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{70BD2558-27DA-8B02-02D0-D8704ECD2EDF} =>PUP.Optional.SavinShop
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{9B149088-3FB6-875E-C1A4-A25A6E9D278D} =>PUP.Optional.Deeal
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{A30F3754-C0DC-8242-F3A9-52B360AE9798} =>PUP.Optional.FlexibleShoper
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AE9B04F2-E9E8-162C-829B-52C116B3EFCC} =>PUP.Optional.LuckyShopper
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{BA5D43C9-D633-D0EC-CFEA-2ABA974B333D} =>PUP.Optional.LuckyCoupon
HKLM\SOFTWARE\Wow6432Node\Browser =>PUP.Optional.CrossRider
HKLM\SOFTWARE\Wow6432Node\SearchProtect =>PUP.Optional.SearchProtect
HKLM\SOFTWARE\Wow6432Node\SPPDCOM =>.Superfluous.PCSpeedUp
HKLM\SOFTWARE\Wow6432Node\SweetIM =>PUP.Optional.SweetIM
HKLM\SOFTWARE\Wow6432Node\WaIntEnhance =>PUP.Optional.WaEnhance
HKLM\SOFTWARE\Wow6432Node\Wajam =>PUP.Optional.Wajam
HKCU\SOFTWARE\Browser =>PUP.Optional.CrossRider
HKCU\SOFTWARE\Conduit =>PUP.Optional.Conduit
HKCU\SOFTWARE\Super Optimizer =>PUP.Optional.SuperOptimizer
HKCU\SOFTWARE\SweetIM =>PUP.Optional.SweetIM
HKCU\SOFTWARE\Wajam =>PUP.Optional.Wajam
HKCU\SOFTWARE\AppDataLow\Software\DynConIE =>PUP.Optional.DynConIE
C:\ProgramData\Wealneofiu =>Heuristic.PullUpdate
C:\Users\Romain\AppData\Local\SearchProtect =>PUP.Optional.SearchProtect
HKLM64\SOFTWARE\Classes\BrowserHTM =>PUP.Optional.SpeedBrowser
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8E1BAA55-55E6-487A-887B-F1F7BA14B1F5} =>Toolbar.Ask
HKCU\Software\Microsoft\Internet Explorer\SearchScopes\ =>PUP.Optional.Conduit
HKLM64\SOFTWARE\Microsoft\Tracing\Websteroids64_RASAPI32 =>PUP.Optional.InternetUpdater
HKLM64\SOFTWARE\Microsoft\Tracing\Websteroids64_RASMANCS =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebsteroidsService_RASAPI32 =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebsteroidsService_RASMANCS =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Websteroids_RASAPI32 =>PUP.Optional.InternetUpdater
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Websteroids_RASMANCS =>PUP.Optional.InternetUpdater

---\\ Récapitulatif des éléments trouvés sur votre station (24) - 0s
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SuperOptimizer
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Adwareplugin
http://www.nicolascoolman.fr/?p=4664 =>Heuristic.PullUpdate
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.BetterPriceChec
http://www.nicolascoolman.fr/?p=1633 =>PUP.Optional.SearchProtect
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.SpeedBrowser
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FileParadeBundle
http://www.nicolascoolman.fr/?p=263 =>PUP.Optional.Wajam
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WOwCoupon
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DownloadItKeep
http://www.nicolascoolman.fr/pup-safeweb/ =>PUP.Optional.SafeWeb
http://www.nicolascoolman.fr/?p=1282 =>PUP.Optional.SavinShop
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Deeal
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.FlexibleShoper
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.LuckyShopper
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.LuckyCoupon
http://www.nicolascoolman.fr/?p=180 =>PUP.Optional.CrossRider
http://www.nicolascoolman.fr/?p=1255 =>.Superfluous.PCSpeedUp
http://www.nicolascoolman.fr/?p=332 =>PUP.Optional.SweetIM
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.WaEnhance
http://www.nicolascoolman.fr/?p=210 =>PUP.Optional.Conduit
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.DynConIE
http://www.nicolascoolman.fr/?p=235 =>Toolbar.Ask
http://www.nicolascoolman.fr/?p=612 =>PUP.Optional.InternetUpdater

~ End of the scan, 93039 items in 00h04mn40s (940)(0)