Firefox qui plante et PC lent
pitchouli01
Messages postés
63
Date d'inscription
Statut
Membre
Dernière intervention
-
lilidurhone Messages postés 43355 Date d'inscription Statut Contributeur sécurité Dernière intervention -
lilidurhone Messages postés 43355 Date d'inscription Statut Contributeur sécurité Dernière intervention -
Bonjour
j'ai un souçi avec mon navigateur internet qui plante quelque fois (firefox ne répond plus )...et si je ferme la page et que je relance le net après il me demande si je veux restaurer mon ancienne page
De plus, de temps en temps, mon pc est assez lent au démarrage ou s eteint très difficilement...
Quelqu'un peut il m'aider ?
j'ai un souçi avec mon navigateur internet qui plante quelque fois (firefox ne répond plus )...et si je ferme la page et que je relance le net après il me demande si je veux restaurer mon ancienne page
De plus, de temps en temps, mon pc est assez lent au démarrage ou s eteint très difficilement...
Quelqu'un peut il m'aider ?
A voir également:
- Firefox qui plante et PC lent
- Pc lent - Guide
- Reinitialiser pc - Guide
- Test performance pc - Guide
- Downloader for pc - Télécharger - Téléchargement & Transfert
- Mon pc est trop lent et se bloque - Guide
14 réponses
Bonsoir
On va vérifier
* Télécharge ZHPDiag (de Nicolas Coolman)
https://nicolascoolman.eu ou https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
* Au cas où le premier lien ne marcherai pas, clique sur celui de dessous
ftp://zebulon.fr/ZHPDiag2.exe
* Double clic si tu es sous windows xp(sinon clic droit afin de l'exécuter en tant qu'admin à partir de Vista)
* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
* Surtout, n'oublie pas d'installer son icône sur le bureau l'icône est en forme de parchemin
https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png
* A l'ouverture du logiciel il te sera proposé 3 options "rechercher", "configurer" et complet
* Cliques sur "complet"
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Pour héberger le rapport, rends toi sur cjoint.com
* Clique sur choisissez un fichier va chercher le rapport dans ton PC.
* Le rapport est hébergé:
- Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
- Depuis Vista : C:\Users\username\AppData\Roaming\ZHP
* Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir
* Choisis le type de diffusion (illimitée ou 21 jours)
* Puis cliques sur créer le lien cjoint
* Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse
* Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
On va vérifier
* Télécharge ZHPDiag (de Nicolas Coolman)
https://nicolascoolman.eu ou https://www.commentcamarche.net/telecharger/utilitaires/24803-zhpdiag/
* Au cas où le premier lien ne marcherai pas, clique sur celui de dessous
ftp://zebulon.fr/ZHPDiag2.exe
* Double clic si tu es sous windows xp(sinon clic droit afin de l'exécuter en tant qu'admin à partir de Vista)
* Laisse toi guider lors de l'installation, il se lancera automatiquement à la fin.
* Surtout, n'oublie pas d'installer son icône sur le bureau l'icône est en forme de parchemin
https://www.cjoint.com/13sp/CIvuQfap3YY_zhpdiag.png
* A l'ouverture du logiciel il te sera proposé 3 options "rechercher", "configurer" et complet
* Cliques sur "complet"
* Enregistre le rapport sur ton Bureau à l'aide de l'icône représentant une disquette
* Pour héberger le rapport, rends toi sur cjoint.com
* Clique sur choisissez un fichier va chercher le rapport dans ton PC.
* Le rapport est hébergé:
- Pour XP : C:\Documents and Settings\username\Local Settings\Application Data\ZHP
- Depuis Vista : C:\Users\username\AppData\Roaming\ZHP
* Une fois le rapport trouvé, sélectionne le, et clique sur Ouvrir
* Choisis le type de diffusion (illimitée ou 21 jours)
* Puis cliques sur créer le lien cjoint
* Une fois que tu auras obtenu le lien copies colle dans ta prochaine réponse
* Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
Bonjour
merci pour vos réponses...
voici le fichier de l'analyse
https://www.cjoint.com/c/EAEqXpnlLvQ
merci pour vos réponses...
voici le fichier de l'analyse
https://www.cjoint.com/c/EAEqXpnlLvQ
Tu as dû installer des logiciels potentiellement indésirables
Pour éviter ce genre de problème :
- Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.
- Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.
Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires
* Télécharge cet outil simple d'utilisation
https://toolslib.net/downloads/viewdownload/1-adwcleaner/
* Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/
* Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus
* Cliques sur scanner
* Poste le rapport de recherche C:\Adwcleaner[R]
* Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]
* Héberge le rapport sur cjoint
* Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
Pour éviter ce genre de problème :
- Ne télécharge aucun programme proposé dans des publicités ou sur des sites suspects. A noter que certains sites connus comme Softronic, Tuto4PC, etc modifient parfois les programmes proposés au téléchargement pour y ajouter des logiciels publicitaires ==> Préfère toujours le téléchargement directement sur le site de l'éditeur.
- Au cours de l'installation d'un programme gratuit, lis bien attentivement et décoche tous les programmes additionnels qui sont proposés, en particulier les barres d'outils.
Pour ton information lis ces dossier sur les Programmes Potentiellement Indésirables et Les Barres d'Outils ce n'est pas obligatoires
* Télécharge cet outil simple d'utilisation
https://toolslib.net/downloads/viewdownload/1-adwcleaner/
* Si problème avec le 1er lien prends le ici https://www.commentcamarche.net/telecharger/securite/2759-adwcleaner/
* Lance le (Sous vista/seven/8 clic droit dessus,et sur exécuter en tant qu'administrateur)si tu es sous xp double cliques dessus
* Cliques sur scanner
* Poste le rapport de recherche C:\Adwcleaner[R]
* Note le rapport de recherche est également sauvegardé sous C:\Adwcleaner[R1]
* Héberge le rapport sur cjoint
* Pour t'aider https://www.commentcamarche.net/faq/29493-utiliser-cjoint-pour-heberger-des-fichiers
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
# AdwCleaner v4.109 - Rapport créé le 31/01/2015 à 20:29:25
# Mis à jour le 24/01/2015 par Xplode
# Database : 2015-01-26.1 [Live]
# Système d'exploitation : Windows 8.1 (64 bits)
# Nom d'utilisateur : Olivier - OLICHOU
# Exécuté depuis : C:\Users\Olivier\Downloads\adwcleaner_4.109.exe
# Option : Scanner
***** [ Services ] *****
Service Présent : F06DEFF2-5B9C-490D-910F-35D3A9119622
Service Présent : SmdmFService
***** [ Fichiers / Dossiers ] *****
Dossier Présent : C:\Program Files (x86)\Framed Display
Dossier Présent : C:\Program Files (x86)\Framed Display
Dossier Présent : C:\Program Files (x86)\Settings Manager
Dossier Présent : C:\ProgramData\smdmf
Dossier Présent : C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Dossier Présent : C:\Users\Olivier\AppData\Local\Temp\Video Converter
Dossier Présent : C:\Users\Olivier\AppData\Local\VideoConverter
Dossier Présent : C:\Users\Olivier\AppData\Roaming\FirefoxToolbar
Dossier Présent : C:\Users\Olivier\AppData\Roaming\RHEng
Fichier Présent : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
Fichier Présent : C:\Users\Olivier\AppData\Roaming\Mozilla\Firefox\Profiles\rzndcgl7.default-1413567483518\invalidprefs.js
Fichier Présent : C:\Users\Olivier\AppData\Roaming\Mozilla\Firefox\Profiles\rzndcgl7.default-1413567483518\searchplugins\default-search.xml
***** [ Tâches planifiées ] *****
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Clé Présente : HKCU\Software\SmdmF
Clé Présente : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : [x64] HKCU\Software\SmdmF
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Présente : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard
Clé Présente : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard.1
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Présente : HKLM\SOFTWARE\Framed Display
Clé Présente : HKLM\SOFTWARE\Framed Display
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Clé Présente : HKLM\SOFTWARE\SmdmF
Clé Présente : HKLM\SOFTWARE\SPPDCOM
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Valeur Présente : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valeur Présente : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Valeur Présente : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64]
Valeur Présente : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x86]
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17416
Paramètre Présent : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.default-search.net?sid=503&aid=100&itype=n&ver=13986&tm=582&src=hmp
-\\ Mozilla Firefox v35.0.1 (x86 fr)
-\\ Google Chrome v37.0.2062.124
[C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\preferences] - Trouvée [Extension] : bopakagnckmlgajfccecajhnimjiiedh
-\\ Opera v26.0.1656.60
*************************
AdwCleaner[R0].txt - [12260 octets] - [17/10/2014 17:57:22]
AdwCleaner[R1].txt - [5092 octets] - [31/01/2015 20:29:25]
AdwCleaner[S0].txt - [11173 octets] - [17/10/2014 18:00:08]
########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [5213 octets] ##########
# Mis à jour le 24/01/2015 par Xplode
# Database : 2015-01-26.1 [Live]
# Système d'exploitation : Windows 8.1 (64 bits)
# Nom d'utilisateur : Olivier - OLICHOU
# Exécuté depuis : C:\Users\Olivier\Downloads\adwcleaner_4.109.exe
# Option : Scanner
***** [ Services ] *****
Service Présent : F06DEFF2-5B9C-490D-910F-35D3A9119622
Service Présent : SmdmFService
***** [ Fichiers / Dossiers ] *****
Dossier Présent : C:\Program Files (x86)\Framed Display
Dossier Présent : C:\Program Files (x86)\Framed Display
Dossier Présent : C:\Program Files (x86)\Settings Manager
Dossier Présent : C:\ProgramData\smdmf
Dossier Présent : C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\bopakagnckmlgajfccecajhnimjiiedh
Dossier Présent : C:\Users\Olivier\AppData\Local\Temp\Video Converter
Dossier Présent : C:\Users\Olivier\AppData\Local\VideoConverter
Dossier Présent : C:\Users\Olivier\AppData\Roaming\FirefoxToolbar
Dossier Présent : C:\Users\Olivier\AppData\Roaming\RHEng
Fichier Présent : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
Fichier Présent : C:\Users\Olivier\AppData\Roaming\Mozilla\Firefox\Profiles\rzndcgl7.default-1413567483518\invalidprefs.js
Fichier Présent : C:\Users\Olivier\AppData\Roaming\Mozilla\Firefox\Profiles\rzndcgl7.default-1413567483518\searchplugins\default-search.xml
***** [ Tâches planifiées ] *****
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4D9101D6-5BA0-4048-BDDE-7E2DF54C8C47}
Clé Présente : HKCU\Software\SmdmF
Clé Présente : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : [x64] HKCU\Software\SmdmF
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Clé Présente : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Présente : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard
Clé Présente : HKLM\SOFTWARE\Classes\SettingsManagerIEHelper.DNSGuard.1
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{93D511B5-143B-4A99-ABFC-B5B78AD0AE1B}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Clé Présente : HKLM\SOFTWARE\Framed Display
Clé Présente : HKLM\SOFTWARE\Framed Display
Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Clé Présente : HKLM\SOFTWARE\SmdmF
Clé Présente : HKLM\SOFTWARE\SPPDCOM
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\CLSID\{E1842850-FB16-4471-B327-7343FBAED55C}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{AA760BA8-5862-4BC5-9263-4452CBC0B264}
Clé Présente : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Clé Présente : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2503}
Valeur Présente : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valeur Présente : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Valeur Présente : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64]
Valeur Présente : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x86]
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17416
Paramètre Présent : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page] - hxxp://www.default-search.net?sid=503&aid=100&itype=n&ver=13986&tm=582&src=hmp
-\\ Mozilla Firefox v35.0.1 (x86 fr)
-\\ Google Chrome v37.0.2062.124
[C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\preferences] - Trouvée [Extension] : bopakagnckmlgajfccecajhnimjiiedh
-\\ Opera v26.0.1656.60
*************************
AdwCleaner[R0].txt - [12260 octets] - [17/10/2014 17:57:22]
AdwCleaner[R1].txt - [5092 octets] - [31/01/2015 20:29:25]
AdwCleaner[S0].txt - [11173 octets] - [17/10/2014 18:00:08]
########## EOF - C:\AdwCleaner\AdwCleaner[R1].txt - [5213 octets] ##########
# AdwCleaner v4.109 - Rapport créé le 01/02/2015 à 07:19:49
# Mis à jour le 24/01/2015 par Xplode
# Database : 2015-01-26.1 [Live]
# Système d'exploitation : Windows 8.1 (64 bits)
# Nom d'utilisateur : Olivier - OLICHOU
# Exécuté depuis : C:\Users\Olivier\Downloads\adwcleaner_4.109.exe
# Option : Scanner
***** [ Services ] *****
***** [ Fichiers / Dossiers ] *****
***** [ Tâches planifiées ] *****
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Présente : HKLM\SOFTWARE\SmdmF
Valeur Présente : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valeur Présente : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Valeur Présente : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64]
Valeur Présente : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x86]
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Mozilla Firefox v35.0.1 (x86 fr)
-\\ Google Chrome v37.0.2062.124
-\\ Opera v26.0.1656.60
*************************
AdwCleaner[R0].txt - [12260 octets] - [17/10/2014 17:57:22]
AdwCleaner[R1].txt - [5337 octets] - [31/01/2015 20:29:25]
AdwCleaner[R2].txt - [1214 octets] - [01/02/2015 07:19:49]
AdwCleaner[S0].txt - [11173 octets] - [17/10/2014 18:00:08]
AdwCleaner[S1].txt - [4446 octets] - [31/01/2015 20:37:27]
########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1395 octets] ##########
# Mis à jour le 24/01/2015 par Xplode
# Database : 2015-01-26.1 [Live]
# Système d'exploitation : Windows 8.1 (64 bits)
# Nom d'utilisateur : Olivier - OLICHOU
# Exécuté depuis : C:\Users\Olivier\Downloads\adwcleaner_4.109.exe
# Option : Scanner
***** [ Services ] *****
***** [ Fichiers / Dossiers ] *****
***** [ Tâches planifiées ] *****
***** [ Raccourcis ] *****
***** [ Registre ] *****
Clé Présente : HKLM\SOFTWARE\SmdmF
Valeur Présente : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valeur Présente : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Valeur Présente : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64]
Valeur Présente : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x86]
***** [ Navigateurs ] *****
-\\ Internet Explorer v11.0.9600.17416
-\\ Mozilla Firefox v35.0.1 (x86 fr)
-\\ Google Chrome v37.0.2062.124
-\\ Opera v26.0.1656.60
*************************
AdwCleaner[R0].txt - [12260 octets] - [17/10/2014 17:57:22]
AdwCleaner[R1].txt - [5337 octets] - [31/01/2015 20:29:25]
AdwCleaner[R2].txt - [1214 octets] - [01/02/2015 07:19:49]
AdwCleaner[S0].txt - [11173 octets] - [17/10/2014 18:00:08]
AdwCleaner[S1].txt - [4446 octets] - [31/01/2015 20:37:27]
########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1395 octets] ##########
~ Rapport de ZHPDiag v2015.1.28.12 - Nicolas Coolman (28-01-15)
~ Lancé par Olivier (01-02-15 12:46:39)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum https://nicolascoolman.eu
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17498
MFIE: Mozilla Firefox 35.0.1 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows Server License Manager Script : OK
~ Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : XWY8Q
Windows License : OK
~ Windows Remaining Initializations Number : 999
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Avast Free Antivirus v10.0.2208
Malwarebytes Anti-Malware version 2.0.3.1025
Windows Defender W8 (Deactivate)
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 16 NPAPI
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6019 MB (69% free)
System Restore: Activé (Enable)
System drive C: has 469 GB (68%) free of 687 GB
---\\ Mode de connexion au système
~ Computer Name: OLICHOU
~ User Name: Olivier
~ All Users Names: Olivier, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Olivier\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Olivier\AppData\Roaming\
~ %Desktop% : C:\Users\Olivier\Desktop\
~ %Favorites% : C:\Users\Olivier\Favorites\
~ %LocalAppData% : C:\Users\Olivier\AppData\Local\
~ %StartMenu% : C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 469 Go of 687 Go)
D: CD-ROM drive (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 41 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.ACDBE1ED38167C8B01B8F63161BB2CEA] - (.Microsoft Corporation - Explorateur Windows.) (.23-08-14 - 08:48:28.) -- C:\Windows\Explorer.exe [2374784]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22-08-13 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.4AF089160FE082E5EA5C4AA72782DCA2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22-11-14 - 02:28:21.) -- C:\Windows\System32\wininet.dll [2358272]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.22-02-14 - 10:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.21-12-13 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.30-05-14 - 04:03:03.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22-08-13 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22-08-13 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22-08-13 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06-03-14 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.24-07-14 - 12:45:39.) -- C:\Windows\system32\Drivers\HDAudBus.sys [76800]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) (.22-08-13 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27-11-13 - 13:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.7A1A3F213CDB3363D179D5014272025D] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.30-04-14 - 07:41:46.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22-08-13 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.038C77D577900EE39410662478BB0D50] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24-07-14 - 16:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [2009920]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22-08-13 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22-08-13 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.22-08-13 - 20:11:06.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22-08-13 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19-06-14 - 03:13:36.) -- C:\Windows\system32\Drivers\volsnap.sys [310080]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/4
~ Mes Videos (My Videos) : 1/7
~ Mes Favoris (My Favorites) : 1/14
~ Mes Documents (My Documents) : 2/45
~ Mon Bureau (My Desktop) : 1/139
~ Menu demarrer (Programs) : 1/31
~ Hidden Files: Scanned in 00mn 00s
---\\ Processus lancés
[MD5.EE082F074B6DF6F8977AAD6A6E9D09F8] - (.Nenad Hrg (SoftwareOK.com) - TheAeroClock.) -- C:\Users\Olivier\AppData\Local\Temp\Rar$EXa0.791\TheAeroClock.exe [1618944] [PID.3488]
[MD5.265B49EF94A5AA713192EE97A7D248B5] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [338032] [PID.4956]
[MD5.AB6A99CEED91F9328DBCE9B079325727] - (.DesktopCal, Inc. - Desktop Calendar.) -- C:\Users\Olivier\AppData\Roaming\DesktopCal\desktopcal.exe [282624] [PID.5012]
[MD5.9C1BDB837A2DA4FFC60CB61CEEA3E334] - (.TOSHIBA - readLM.) -- C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800] [PID.4416]
[MD5.44ADDA5FB88EE14F57A246285775AC2F] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5227112] [PID.3160]
[MD5.76D94909D7CD006062F29DA7DD5112F2] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1406248] [PID.5288]
[MD5.CE5C9977DA751DDC30952AC4DCBCA788] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.6244]
[MD5.72E7A13372047CA67AB84FAF2F49EF06] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [243312] [PID.6864]
[MD5.786840D3A66E08C99B617BEA4E30B5C0] - (.Adobe Systems, Inc. - Adobe Flash Player 16.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe [1880752] [PID.4252]
[MD5.3AE345C9280228C249579220735A857D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8156672] [PID.2040]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Google Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.6 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] avast! Online Security v.9.0.2018.95, (Désactivé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Google+ Hangouts v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
---\\ Liste des dossiers d'extension Google Chrome
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [Documents Google]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [Google Drive]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [YouTube]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [Recherche Google]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [avast! Online Security]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [Google Wallet]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [Gmail]
~ Google Lines Browser: 23 Scanned in 00mn 01s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Olivier\AppData\Roaming\Mozilla\Firefox\Profiles\rzndcgl7.default-1413567483518\prefs.js
M3 - MFPP: Plugins - [Olivier] -- C:\Users\Olivier\AppData\Roaming\Mozilla\Firefox\Profiles\rzndcgl7.default-1413567483518\searchplugins\google-avast.xml
M0 - MFSP: prefs.js [Olivier - rzndcgl7.default-1413567483518] https://www.google.com/?gws_rd=ssl
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
P2 - FPN: [HKCU] [vasco.com/VascoCardReaderPlugin] - (.VASCO Data Security - VASCO Card Reader Plugin.) -- C:\Users\Olivier\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.2\npVascoCardReaderPlugin.dll
P2 - FPN: [HKCU] [vasco.com/VascoCardReaderPlugin64] - (.VASCO Data Security - VASCO Card Reader Plugin.) -- C:\Users\Olivier\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.2\npVascoCardReaderPlugin64.dll
~ Firefox Browser: 7 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.msn.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17496 (winblue_r5.141121-1500)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 15 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.dll
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll
~ BHO: 6 Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\QuickLaunch [Olivier]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Olivier\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - GS\QuickLaunch [Olivier]: Sparta.lnk . (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O4 - GS\QuickLaunch [Olivier]: StormFall.lnk . (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O4 - GS\Desktop [Olivier]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Olivier\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
~ Global Startup: 4 Scanned in 00mn 02s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [TSSSrv] . (.TOSHIBA Corporation - TOSHIBA System Settings Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe
O4 - HKLM\..\Run: [TecoResident] . (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe
O4 - HKLM\..\Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe (.not file.)
O4 - HKLM\..\Run: [TCrdMain] . (.TOSHIBA Corporation - TOSHIBA Function Key Main Module.) -- C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKCU\..\Run: [TheAeroClock] . (.Nenad Hrg (SoftwareOK.com) - TheAeroClock.) -- C:\Users\Olivier\AppData\Local\Temp\Rar$EXa0.791\TheAeroClock.exe
O4 - HKCU\..\Run: [Cld2000.exe] C:\Program Files (x86)\Calendrier\Cld2000.exe (.not file.)
O4 - HKCU\..\Run: [HP Officejet 6600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
O4 - HKCU\..\Run: [DesktopCal] . (.DesktopCal, Inc. - Desktop Calendar.) -- C:\Users\Olivier\AppData\Roaming\DesktopCal\desktopcal.exe
O4 - HKLM\..\Wow6432Node\Run: [AmIcoSinglun64] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
O4 - HKLM\..\Wow6432Node\Run: [1.TPUReg] . (.TOSHIBA - readLM.) -- C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe
O4 - HKLM\..\Wow6432Node\Run: [TSVU] . (.TOSHIBA - TOSHIBA Display Setup Launcher.) -- c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [NBAgent] . (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
O4 - HKUS\S-1-5-21-1494462699-4292907851-2939948922-1001\..\Run: [TheAeroClock] . (.Nenad Hrg (SoftwareOK.com) - TheAeroClock.) -- C:\Users\Olivier\AppData\Local\Temp\Rar$EXa0.791\TheAeroClock.exe
O4 - HKUS\S-1-5-21-1494462699-4292907851-2939948922-1001\..\Run: [Cld2000.exe] C:\Program Files (x86)\Calendrier\Cld2000.exe (.not file.)
O4 - HKUS\S-1-5-21-1494462699-4292907851-2939948922-1001\..\Run: [HP Officejet 6600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
O4 - HKUS\S-1-5-21-1494462699-4292907851-2939948922-1001\..\Run: [DesktopCal] . (.DesktopCal, Inc. - Desktop Calendar.) -- C:\Users\Olivier\AppData\Roaming\DesktopCal\desktopcal.exe
~ Application: Scanned in 00mn 00s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll =>.Microsoft Corporation
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
~ Winsock: 7 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{67591770-AF75-499C-82A5-A5C19DEB1965}: DhcpNameServer = 109.88.203.3 62.197.111.140
O17 - HKLM\System\CCS\Services\Tcpip\..\{F0DB2090-269F-46F0-A6C8-9EDF37B1C47F}: DhcpNameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F0DB2090-269F-46F0-A6C8-9EDF37B1C47F}: DhcpDomain = CN02.com
O17 - HKLM\System\CS1\Services\Tcpip\..\{67591770-AF75-499C-82A5-A5C19DEB1965}: DhcpNameServer = 109.88.203.3 62.197.111.140
O17 - HKLM\System\CS1\Services\Tcpip\..\{F0DB2090-269F-46F0-A6C8-9EDF37B1C47F}: DhcpNameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{F0DB2090-269F-46F0-A6C8-9EDF37B1C47F}: DhcpDomain = CN02.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.88.203.3 62.197.111.140
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: AtherosSvc (AtherosSvc) . (.Windows (R) Win 7 DDK provider - Windows Setup API.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: DTS APO Service (dts_apo_service) . (.Pas de propriétaire - dts_apo_service.) - C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
O23 - Service: GFNEX Service (GFNEXSrv) . (.Pas de propriétaire - GFNEXSrv.) - C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (...) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.)
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation - Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: C:\Program Files (x86)\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA eco Utility Service (TOSHIBA eco Utility Service) . (.Toshiba Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\Teco\TecoService.exe =>.Toshiba Corporation
~ Services: 13 Scanned in 00mn 05s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Clés Session Manager (AppCertDlls,KnownDLLs) (O36)
O36 - AppCertDlls: (x64) . (...) -- c:\program files (x86)\settings manager\smdmf\x64\sysapcrt.dll (Not file) =>PUP.SystemK
O36 - AppCertDlls: (x86) . (...) -- c:\program files (x86)\settings manager\smdmf\sysapcrt.dll (Not file) =>PUP.SystemK
~ Keys: Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.A2A9C100FE1BE20A76C0B80D4CA44103] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
[MD5.4BB7714617D50D77FCDA6B0182FD8A9A] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [857888]
[MD5.265B49EF94A5AA713192EE97A7D248B5] [APT] [avastBCLRestartS-1-5-21-1494462699-4292907851-2939948922-1001] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [338032]
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineUA] (...) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.) [0]
[MD5.EEF3F22892837F327BD609CDDB0961C4] [APT] [Opera scheduled Autoupdate 1420612402] (.Opera Software.) -- C:\Program Files (x86)\Opera\launcher.exe [466040]
[MD5.E2D2E33E42A9C2B91791C4CCEBFCFE9D] [APT] [Resolution+ Setting Task] (.TOSHIBA Corporation.) -- C:\Program Files\Toshiba\TOSHIBA Smart View Utility\Plugins\ResolutionPlus\TosRegPermissionChg.exe [88064]
[MD5.C6B8CB65A3AACABB00F3DAA371C46A3E] [APT] [CommonNotifier] (.Toshiba Europe GmbH.) -- C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [471416]
[MD5.2B2C2D74BC62E22248787530A7AFC87F] [APT] [Service Station] (.TOSHIBA Corporation.) -- C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [655464]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1082]
O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1082]
O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1086]
O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1086]
~ Scheduled Task: 16 Scanned in 00mn 04s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: C:\Windows\System32\drivers\ahcache.sys (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Drivers: 40 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI
O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- AmUStor
O42 - Logiciel: Aloha TriPeaks - (.WildTangent.) [HKLM][64Bits] -- WTA-ed579234-6c98-4c59-ac6e-f39185ed9aac =>.WildTangent
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM][64Bits] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast
O42 - Logiciel: Bejeweled 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-86cf7c65-8eed-4947-983d-3add8adc1b23 =>.WildTangent
O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- BitTorrent =>P2P.BitTorrent
O42 - Logiciel: Calendrier de bureau 2.1.5.3390 - (.DesktopCal, Inc..) [HKCU][64Bits] -- DesktopCal
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-1ccaadf7-b501-4a85-be43-6b3481ba4dce =>.WildTangent
O42 - Logiciel: DTS Sound - (.DTS, Inc..) [HKLM][64Bits] -- {2DFA9084-CEB3-4A48-B9F7-9038FEF1B8F4}
O42 - Logiciel: Empress of the Deep - The Darkest Secret - (.WildTangent.) [HKLM][64Bits] -- WTA-a46353c6-442c-4c86-8dca-031592d96937 =>.WildTangent
O42 - Logiciel: Evernote - (.Evernote Launcher by Toshiba Europe GmbH.) [HKLM][64Bits] -- Evernote
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Officejet 6600 Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {2FA81482-5570-4CF0-9A10-D61D2F164916} =>.Hewlett-Packard Co
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}
O42 - Logiciel: High-Definition Video Playback - (.Nero AG.) [HKLM][64Bits] -- {237CCB62-8454-43E3-B158-3ACD0134852E}
O42 - Logiciel: I.R.I.S. OCR - (.HP.) [HKLM][64Bits] -- {CA6BCA2F-EDEB-408F-850B-31404BE16A61}
O42 - Logiciel: IDT Audio Driver - (.IDT.) [HKLM][64Bits] -- {588A747E-CFF6-46B3-9207-CD754F9473AF}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {93F692D4-0C4D-4EED-9BFE-657C1D5959FE}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {89AFB053-A343-46EF-97E4-D593AD7184E6}
O42 - Logiciel: Island Tribe - (.WildTangent.) [HKLM][64Bits] -- WTA-b4654301-a24b-456a-9f1f-02c0dde5c659 =>.WildTangent
O42 - Logiciel: Jewel Quest Solitaire 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-d010a5a6-d272-4c5a-9618-d6ee6f420b77 =>.WildTangent
O42 - Logiciel: Logiciel de base du périphérique HP Officejet 6600 - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {82250F8E-6AD5-4F72-9BB0-76F13BFBBD7B} =>.Hewlett-Packard Co
O42 - Logiciel: Magic Academy - (.WildTangent.) [HKLM][64Bits] -- WTA-be096e82-fc6b-4fec-9a8a-162f1c1824d9 =>.WildTangent
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.3.1025 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mozilla Firefox 35.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 35.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Nero 10 Menu TemplatePack Basic - (.Nero AG.) [HKLM][64Bits] -- {63AA3EAB-23BB-48B2-9AD0-44F878075604}
O42 - Logiciel: Nero 10 Movie ThemePack Basic - (.Nero AG.) [HKLM][64Bits] -- {F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}
O42 - Logiciel: Nero BackItUp 10 - (.Nero AG.) [HKLM][64Bits] -- {68AB6930-5BFF-4FF6-923B-516A91984FE6}
O42 - Logiciel: Nero BackItUp 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {08C8666B-C502-4AB3-B4CB-D74AC42D14FE}
O42 - Logiciel: Nero BurnRights 10 - (.Nero AG.) [HKLM][64Bits] -- {943CFD7D-5336-47AF-9418-E02473A5A517}
O42 - Logiciel: Nero BurnRights 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {555868C6-49FB-484F-BB43-8980651A1B00}
O42 - Logiciel: Nero Burning ROM 10 - (.Nero AG.) [HKLM][64Bits] -- {7A5D731D-B4B3-490E-B339-75685712BAAB}
O42 - Logiciel: Nero BurningROM 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}
O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM][64Bits] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}
O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM][64Bits] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
O42 - Logiciel: Nero CoverDesigner 10 - (.Nero AG.) [HKLM][64Bits] -- {FCF00A6E-FB58-477A-ABE9-232907105521}
O42 - Logiciel: Nero CoverDesigner 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C3273C55-E1E4-41FF-8D69-0158090DB8D8}
O42 - Logiciel: Nero DiscSpeed 10 - (.Nero AG.) [HKLM][64Bits] -- {34490F4E-48D0-492E-8249-B48BECF0537C}
O42 - Logiciel: Nero DiscSpeed 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C18A0418-442A-4186-AF98-D08F5054A2FC}
O42 - Logiciel: Nero Dolby Files 10 - (.Nero AG.) [HKLM][64Bits] -- {C3580AC4-C827-4332-B935-9A282ED5BB97}
O42 - Logiciel: Nero Express 10 - (.Nero AG.) [HKLM][64Bits] -- {70550193-1C22-445C-8FA4-564E155DB1A7}
O42 - Logiciel: Nero Express 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {33643918-7957-4839-92C7-EA96CB621A98}
O42 - Logiciel: Nero InfoTool 10 - (.Nero AG.) [HKLM][64Bits] -- {F412B4AF-388C-4FF5-9B2F-33DB1C536953}
O42 - Logiciel: Nero InfoTool 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {66049135-9659-4AAD-9169-9CCA269EBB3E}
O42 - Logiciel: Nero MediaHub 10 - (.Nero AG.) [HKLM][64Bits] -- {1F7FB68F-52F6-46A3-B42F-38CE46295AE5}
O42 - Logiciel: Nero MediaHub 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F467862A-D9CA-47ED-8D81-B4B3C9399272}
O42 - Logiciel: Nero Multimedia Suite 10 - (.Nero AG.) [HKLM][64Bits] -- {277C1559-4CF7-44FF-8D07-98AA9C13AABD}
O42 - Logiciel: Nero Recode 10 - (.Nero AG.) [HKLM][64Bits] -- {8ECEC853-5C3D-4B10-B5C7-FF11FF724807}
O42 - Logiciel: Nero Recode 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}
O42 - Logiciel: Nero RescueAgent 10 - (.Nero AG.) [HKLM][64Bits] -- {E337E787-CF61-4B7B-B84F-509202A54023}
O42 - Logiciel: Nero RescueAgent 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {92E25238-61A3-4ACD-A407-3C480EEF47A7}
O42 - Logiciel: Nero SoundTrax 10 - (.Nero AG.) [HKLM][64Bits] -- {E1EE5339-5D32-458F-BAAB-B19F6301BCE2}
O42 - Logiciel: Nero SoundTrax 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {16987E99-C95C-4513-9239-7B44A0A71DB5}
O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM][64Bits] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65}
O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: Nero Vision 10 - (.Nero AG.) [HKLM][64Bits] -- {9A4297F3-2A51-4ED9-92CA-4BCB8380947E}
O42 - Logiciel: Nero Vision 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {329411A0-19F3-4740-874F-17400B126F27}
O42 - Logiciel: Nero WaveEditor 10 - (.Nero AG.) [HKLM][64Bits] -- {EDCDFAD5-DF80-4600-A493-E9DAD6810230}
O42 - Logiciel: Nero WaveEditor 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {7A295D8F-484B-4FFB-89AB-C1FD497591FE}
O42 - Logiciel: Peggle Nights - (.WildTangent.) [HKLM][64Bits] -- WTA-8f850859-93fb-495c-8706-b9853b005292 =>.WildTangent
O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-a089e0b4-eb21-44e8-b2ad-6b7e3f157048 =>.WildTangent
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-ef07a64b-44ae-45e3-b5c6-0c7de22d8521 =>.WildTangent
O42 - Logiciel: Qualcomm Atheros Bluetooth Suite (64) - (.Qualcomm Atheros.) [HKLM][64Bits] -- {A84A4FB1-D703-48DB-89E0-68B6499D2801}
O42 - Logiciel: Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Qualcomm Atheros Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: Skype(TM) 6.22 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Sparta - (.Sparta.) [HKCU][64Bits] -- Sparta
O42 - Logiciel: Spotify - (.Spotify AB.) [HKLM][64Bits] -- Spotify
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: TOSHIBA Addendum - (.TOSHIBA.) [HKLM][64Bits] -- {C1569944-FAD6-4B3B-85E5-C213C2FF8EFC}
O42 - Logiciel: TOSHIBA Desktop Assist - (.Toshiba Corporation.) [HKLM][64Bits] -- {95CCACF0-010D-45F0-82BF-858643D8BC02}
O42 - Logiciel: TOSHIBA Display Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- {5F6AC07E-50EF-422E-B56E-6521E5B35139}
O42 - Logiciel: TOSHIBA Function Key - (.Toshiba Corporation.) [HKLM][64Bits] -- {16562A90-71BC-41A0-B890-D91B0C267120}
O42 - Logiciel: TOSHIBA Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
O42 - Logiciel: TOSHIBA PC Health Monitor - (.Toshiba Corporation.) [HKLM][64Bits] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}
O42 - Logiciel: TOSHIBA Password Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- InstallShield_{78931270-BC9E-441A-A52B-73ECD4ACFAB5}
O42 - Logiciel: TOSHIBA Recovery Media Creator - (.Toshiba Corporation.) [HKLM][64Bits] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}
O42 - Logiciel: TOSHIBA Service Station - (.Toshiba Corporation.) [HKLM][64Bits] -- {FBFCEEA5-96EA-4C8E-9262-43CBBEBAE413} =>.Toshiba Corporation
O42 - Logiciel: TOSHIBA Start Screen Option - (.Toshiba Corporation.) [HKLM][64Bits] -- {06B71035-F19F-4F76-9875-FFCCD4FC3F83}
O42 - Logiciel: TOSHIBA System Driver - (.Toshiba Corporation.) [HKLM][64Bits] -- {1E6A96A1-2BAB-43EF-8087-30437593C66C}
O42 - Logiciel: TOSHIBA System Settings - (.Toshiba Corporation.) [HKLM][64Bits] -- {05A55927-DB9B-4E26-BA44-828EBFF829F0}
O42 - Logiciel: TOSHIBA VIDEO PLAYER - (.Toshiba Corporation.) [HKLM][64Bits] -- {FF07604E-C860-40E9-A230-E37FA41F103A}
O42 - Logiciel: TOSHIBA eco Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- {5944B9D4-3C2A-48DE-931E-26B31714A2F7} =>.Toshiba Corporation
O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {F76F5214-83A8-4030-80C9-1EF57391D72A} =>.Toshiba Corporation
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent
O42 - Logiciel: VASCO Card Reader Plug-In (64-Bit) - (.VASCO Data Security.) [HKLM][64Bits] -- {47659F12-27AE-6400-9B8A-2BD803020302}
O42 - Logiciel: VASCO Smart Card Reader Plug-In (User) - (.VASCO Data Security.) [HKCU][64Bits] -- {8bc0c044-0d13-4fe6-90c1-af39c36cb927}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-38b42110-f8df-477e-8eaf-a6071bfc6cd1 =>.WildTangent
O42 - Logiciel: WildTangent Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall =>.WildTangent
O42 - Logiciel: WildTangent Games App (Toshiba Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-toshiba =>.WildTangent
O42 - Logiciel: WinRAR 5.11 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
~ Logic: 58 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AVAST Software]
[HKCU\Software\Anvsoft]
[HKCU\Software\AppDataLow\Software\Amazon]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avg Secure Update]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Freemake]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\Licenses]
[HKCU\Software\Linkey] =>PUP.LinkeySearch
[HKCU\Software\MCAFEE]
[HKCU\Software\MOVAVI]
[HKCU\Software\Macromedia]
[HKCU\Software\Mine]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Opera Software]
[HKCU\Software\Policies]
[HKCU\Software\Reg]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Skype]
[HKCU\Software\Synaptics]
[HKCU\Software\TeleCharger]
[HKCU\Software\Toshiba]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\VASCO]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\Xtralog]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\Atheros]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\HP]
[HKLM\Software\IDT]
[HKLM\Software\IM Providers]
[HKLM\Software\InstalledOptions]
[HKLM\Software\IntelVolatile]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Synaptics]
[HKLM\Software\ToshibaBlobDelivery]
[HKLM\Software\Toshiba]
[HKLM\Software\TuneUp]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Atheros]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\DTS, Inc.]
[HKLM\Software\Wow6432Node\DTS]
[HKLM\Software\Wow6432Node\Freemake]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\MOVAVI]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OldTimer Tools]
[HKLM\Software\Wow6432Node\Opera Software]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Qualcomm Atheros Inc.]
[HKLM\Software\Wow6432Node\Qualcomm Atheros]
[HKLM\Software\Wow6432Node\Reg]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\SRS Labs]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\SmdmF] =>PUP.SystemK
[HKLM\Software\Wow6432Node\TOSHIBA]
[HKLM\Software\Wow6432Node\Toshiba Corporation]
[HKLM\Software\Wow6432Node\TuneUp]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\mcafeeupdater]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node\sMedio]
[HKLM\Software\Wow6432Node]
~ Key Software: 263 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 17-01-14 - 15:17:14 - [] ----D C:\Program Files (x86)\Amazon
O43 - CFD: 17-01-14 - 14:44:59 - [] ----D C:\Program Files (x86)\AmIcoSingLun
O43 - CFD: 17-01-14 - 14:43:42 - [] ----D C:\Program Files (x86)\Atheros
O43 - CFD: 17-01-14 - 14:44:10 - [] ----D C:\Program Files (x86)\Bluetooth Suite
O43 - CFD: 15-11-14 - 23:19:27 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 17-01-14 - 14:38:49 - [] ----D C:\Program Files (x86)\DTS, Inc
O43 - CFD: 07-01-15 - 07:42:04 - [] ----D C:\Program Files (x86)\EasiestSoft
O43 - CFD: 17-01-14 - 15:17:08 - [] ----D C:\Program Files (x86)\eBay =>Toolbar.eBay
O43 - CFD: 17-01-14 - 15:17:29 - [] ----D C:\Program Files (x86)\Evernote_TLauncher
O43 - CFD: 07-01-15 - 08:25:50 - [0] ----D C:\Program Files (x86)\Freemake
O43 - CFD: 05-11-14 - 14:36:27 - [] ----D C:\Program Files (x86)\HP
O43 - CFD: 17-01-14 - 15:18:13 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 17-01-14 - 14:35:27 - [] ----D C:\Program Files (x86)\Intel
O43 - CFD: 12-12-14 - 01:07:13 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 17-10-14 - 18:08:15 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 17-10-14 - 15:46:12 - [] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 17-10-14 - 15:49:35 - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 20-10-14 - 20:04:26 - [] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 17-10-14 - 15:49:33 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 17-10-14 - 15:49:33 - [] ----D C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 17-10-14 - 15:50:17 - [] ----D C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 17-10-14 - 15:47:43 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 17-10-14 - 15:49:33 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 26-01-15 - 19:16:30 - [] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 27-01-15 - 20:16:57 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 17-10-14 - 15:51:18 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 17-10-14 - 19:39:46 - [] ----D C:\Program Files (x86)\Nero
O43 - CFD: 15-01-15 - 21:20:04 - [] ----D C:\Program Files (x86)\Opera
O43 - CFD: 28-08-13 - 10:51:17 - [] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 15-11-14 - 23:19:27 - [] R---D C:\Program Files (x86)\Skype
O43 - CFD: 24-11-13 - 21:37:50 - [] ----D C:\Program Files (x86)\Spotify
O43 - CFD: 17-01-14 - 15:18:13 - [] ----D C:\Program Files (x86)\TOSHIBA
O43 - CFD: 17-01-14 - 15:16:26 - [] ----D C:\Program Files (x86)\TOSHIBA Games
O43 - CFD: 17-01-14 - 14:59:37 - [] ----D C:\Program Files (x86)\Toshiba TEMPRO =>.Toshiba Corporation
O43 - CFD: 24-07-14 - 15:46:34 - [] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 17-01-14 - 15:15:20 - [] ----D C:\Program Files (x86)\WildGames
O43 - CFD: 17-01-14 - 15:07:57 - [] ----D C:\Program Files (x86)\WildTangent Games
O43 - CFD: 13-11-14 - 19:27:39 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 29-06-14 - 01:07:43 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 29-06-14 - 01:07:43 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 29-05-14 - 19:12:12 - [] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 22-08-13 - 16:36:30 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 29-06-14 - 01:07:43 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 29-05-14 - 19:12:12 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 22-08-13 - 16:36:30 - [] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 22-08-13 - 16:36:30 - [] ----D C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 14-12-14 - 18:54:43 - [] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 30-01-15 - 16:30:59 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 17-01-14 - 14:44:11 - [] ----D C:\Program Files (x86)\Common Files\Atheros
O43 - CFD: 26-10-14 - 09:24:46 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 17-01-14 - 14:35:09 - [] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 26-10-14 - 09:28:19 - [] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 17-10-14 - 19:33:50 - [] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 17-01-14 - 14:32:04 - [] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 22-08-13 - 16:36:33 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 15-11-14 - 23:19:27 - [] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 25-10-14 - 04:48:40 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 17-01-14 - 14:53:01 - [] ----D C:\Program Files (x86)\Common Files\Toshiba Shared
O43 - CFD: 17-01-14 - 14:44:59 - [] ----D C:\ProgramData\AmUStor
O43 - CFD: 22-08-13 - 15:45:52 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 05-06-14 - 20:52:33 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 05-09-14 - 18:31:12 - [] ----D C:\ProgramData\Avg_Update_0814tb
O43 - CFD: 24-07-14 - 15:44:35 - [] --H-D C:\ProgramData\Common Files
O43 - CFD: 22-08-13 - 15:45:52 - [] -S--D C:\ProgramData\Desktop
O43 - CFD: 22-08-13 - 15:45:52 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 07-01-15 - 08:25:58 - [0] ----D C:\ProgramData\Freemake
O43 - CFD: 05-11-14 - 14:35:23 - [] ----D C:\ProgramData\HP
O43 - CFD: 17-01-14 - 14:38:04 - [] ----D C:\ProgramData\Intel
O43 - CFD: 17-10-14 - 18:08:09 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 12-12-14 - 17:26:22 - [] ----D C:\ProgramData\McAfee
O43 - CFD: 12-12-14 - 01:07:17 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 11-12-14 - 13:39:29 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 04-01-15 - 19:37:50 - [] ----D C:\ProgramData\Movavi
O43 - CFD: 23-05-14 - 19:40:28 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 17-10-14 - 19:39:48 - [] ----D C:\ProgramData\Nero
O43 - CFD: 17-01-14 - 14:53:51 - [] ----D C:\ProgramData\Package Cache
O43 - CFD: 17-01-14 - 14:43:19 - [] ----D C:\ProgramData\Qualcomm Atheros
O43 - CFD: 17-10-14 - 14:06:02 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 15-11-14 - 23:19:31 - [] ----D C:\ProgramData\Skype
O43 - CFD: 17-01-14 - 14:38:49 - [] ----D C:\ProgramData\SRS Labs
O43 - CFD: 22-08-13 - 15:45:52 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 22-08-13 - 15:45:52 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 19-05-14 - 04:12:45 - [] ----D C:\ProgramData\Toshiba
O43 - CFD: 19-05-14 - 04:14:27 - [] ----D C:\ProgramData\ToshibaEurope
O43 - CFD: 04-01-15 - 20:01:05 - [] ----D C:\ProgramData\TuneUp Software
O43 - CFD: 31-07-14 - 22:13:08 - [] ----D C:\ProgramData\WildTangent
O43 - CFD: 07-01-15 - 07:29:09 - [] -SH-D C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 22-08-13 - 16:36:33 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 22-08-13 - 20:11:12 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 29-05-14 - 19:12:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 17-01-14 - 14:38:49 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS, Inc
O43 - CFD: 31-07-14 - 22:13:11 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 05-06-14 - 20:56:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 05-11-14 - 14:35:57 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 22-08-13 - 16:36:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 17-10-14 - 18:08:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 17-10-14 - 15:52:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 20-10-14 - 20:05:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 17-10-14 - 19:33:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 17-10-14 - 15:52:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 15-11-14 - 23:19:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 07-01-15 - 22:45:15 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 29-05-14 - 19:12:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 22-08-13 - 20:11:12 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 17-01-14 - 15:17:53 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
O43 - CFD: 24-07-14 - 15:48:22 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 14-12-14 - 18:54:47 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 30-01-15 - 16:30:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 17-09-14 - 23:10:59 - [] ----D C:\Users\Olivier\AppData\Roaming\Adobe
O43 - CFD: 07-01-15 - 08:25:13 - [] ----D C:\Users\Olivier\AppData\Roaming\Anvsoft
O43 - CFD: 05-06-14 - 20:58:43 - [] ----D C:\Users\Olivier\AppData\Roaming\AVAST Software
O43 - CFD: 31-01-15 - 20:36:19 - [] ----D C:\Users\Olivier\AppData\Roaming\BitTorrent =>P2P.BitTorrent
O43 - CFD: 24-11-14 - 23:15:53 - [] ----D C:\Users\Olivier\AppData\Roaming\DesktopCal
O43 - CFD: 07-01-15 - 07:43:02 - [] ----D C:\Users\Olivier\AppData\Roaming\EasiestSoft
O43 - CFD: 10-12-14 - 23:20:01 - [] ----D C:\Users\Olivier\AppData\Roaming\HpUpdate
O43 - CFD: 19-05-14 - 04:15:50 - [] ----D C:\Users\Olivier\AppData\Roaming\Macromedia
O43 - CFD: 09-10-14 - 23:05:01 - [] -S--D C:\Users\Olivier\AppData\Roaming\Microsoft
O43 - CFD: 23-05-14 - 19:41:05 - [] ----D C:\Users\Olivier\AppData\Roaming\Mozilla
O43 - CFD: 17-10-14 - 20:21:52 - [] ----D C:\Users\Olivier\AppData\Roaming\Nero
O43 - CFD: 07-01-15 - 07:33:58 - [] ----D C:\Users\Olivier\AppData\Roaming\Opera Software
O43 - CFD: 15-01-15 - 23:16:16 - [] ----D C:\Users\Olivier\AppData\Roaming\Skype
O43 - CFD: 28-11-14 - 21:50:07 - [] ----D C:\Users\Olivier\AppData\Roaming\sMedio
O43 - CFD: 17-10-14 - 06:31:43 - [] ----D C:\Users\Olivier\AppData\Roaming\sparta111
O43 - CFD: 17-10-14 - 19:44:20 - [] ----D C:\Users\Olivier\AppData\Roaming\StormFall
O43 - CFD: 04-01-15 - 20:00:33 - [] ----D C:\Users\Olivier\AppData\Roaming\TuneUp Software
O43 - CFD: 17-09-14 - 23:05:33 - [] ----D C:\Users\Olivier\AppData\Roaming\VASCO
O43 - CFD: 26-01-15 - 20:41:16 - [] ----D C:\Users\Olivier\AppData\Roaming\vlc
O43 - CFD: 31-07-14 - 22:13:09 - [] ----D C:\Users\Olivier\AppData\Roaming\WildTangent
O43 - CFD: 23-05-14 - 17:15:58 - [] ----D C:\Users\Olivier\AppData\Roaming\WinRAR
O43 - CFD: 01-02-15 - 12:46:58 - [] ----D C:\Users\Olivier\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 12-12-14 - 17:26:33 - [] ----D C:\Users\Olivier\AppData\Local\Adobe
O43 - CFD: 17-08-14 - 16:06:14 - [] ----D C:\Users\Olivier\AppData\Local\Amazon_Services_LLC
O43 - CFD: 19-05-14 - 04:06:18 - [] -SH-D C:\Users\Olivier\AppData\Local\Application Data
O43 - CFD: 04-01-15 - 23:13:21 - [0] ----D C:\Users\Olivier\AppData\Local\Diagnostics
O43 - CFD: 10-06-14 - 18:13:27 - [] -SH-D C:\Users\Olivier\AppData\Local\EmieSiteList
O43 - CFD: 10-06-14 - 18:13:27 - [] -SH-D C:\Users\Olivier\AppData\Local\EmieUserList
O43 - CFD: 07-01-15 - 07:35:31 - [] ----D C:\Users\Olivier\AppData\Local\FreemakeVideoConverter
O43 - CFD: 05-06-14 - 20:57:19 - [] ----D C:\Users\Olivier\AppData\Local\Google
O43 - CFD: 19-05-14 - 04:06:18 - [] -SH-D C:\Users\Olivier\AppData\Local\Historique
O43 - CFD: 05-11-14 - 14:41:40 - [] ----D C:\Users\Olivier\AppData\Local\HP
O43 - CFD: 30-05-14 - 20:14:56 - [] ----D C:\Users\Olivier\AppData\Local\Macromedia
O43 - CFD: 10-12-14 - 17:18:15 - [] ----D C:\Users\Olivier\AppData\Local\Microsoft
O43 - CFD: 22-05-14 - 19:20:14 - [0] ----D C:\Users\Olivier\AppData\Local\Microsoft Help
O43 - CFD: 04-01-15 - 19:38:23 - [] ----D C:\Users\Olivier\AppData\Local\Movavi
O43 - CFD: 23-05-14 - 19:41:06 - [] ----D C:\Users\Olivier\AppData\Local\Mozilla
O43 - CFD: 07-01-15 - 07:33:58 - [] ----D C:\Users\Olivier\AppData\Local\Opera Software
O43 - CFD: 17-09-14 - 23:05:30 - [] ----D C:\Users\Olivier\AppData\Local\Package Cache
O43 - CFD: 05-11-14 - 14:40:25 - [] ----D C:\Users\Olivier\AppData\Local\Packages
O43 - CFD: 17-10-14 - 06:32:22 - [] ----D C:\Users\Olivier\AppData\Local\Programs
O43 - CFD: 07-09-14 - 01:04:33 - [] ----D C:\Users\Olivier\AppData\Local\Skype
O43 - CFD: 17-10-14 - 06:31:43 - [] ----D C:\Users\Olivier\AppData\Local\Sparta
O43 - CFD: 17-10-14 - 15:23:12 - [] ----D C:\Users\Olivier\AppData\Local\StormFall
O43 - CFD: 01-02-15 - 12:45:45 - [] ----D C:\Users\Olivier\AppData\Local\Temp
O43 - CFD: 19-05-14 - 04:06:18 - [] -SH-D C:\Users\Olivier\AppData\Local\Temporary Internet Files
O43 - CFD: 19-05-14 - 04:11:19 - [] ----D C:\Users\Olivier\AppData\Local\TOSHIBA
O43 - CFD: 12-10-14 - 23:57:22 - [] ----D C:\Users\Olivier\AppData\Local\transex-messenger
O43 - CFD: 04-01-15 - 20:00:33 - [] ----D C:\Users\Olivier\AppData\Local\TuneUp Software
O43 - CFD: 07-01-15 - 08:36:43 - [] ----D C:\Users\Olivier\AppData\Local\VirtualStore
O43 - CFD: 22-08-13 - 16:36:32 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 22-08-13 - 16:36:32 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 13-11-14 - 18:19:15 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 24-11-14 - 23:15:53 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Calendrier de bureau
O43 - CFD: 22-08-13 - 16:36:32 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 17-10-14 - 06:31:43 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sparta
O43 - CFD: 13-11-14 - 18:19:15 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 17-10-14 - 15:23:12 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormFall
O43 - CFD: 22-08-13 - 16:36:32 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 14-12-14 - 18:54:47 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Program Folder: 168 Scanned in 00mn 00s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.59D3C54D38375742D1F4DE511F3623D9] - 01-02-15 - 12:28:40 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.934D15CBF0EE84DD47EB2FA27C359051] - 01-02-15 - 12:42:51 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1303851]
O44 - LFC:[MD5.B9D02BBEAEA147280DF01297C6133A0B] - 17-01-15 - 19:06:11 ---A- . (...) -- C:\Windows\System32\2015-01-17-18-0
~ Lancé par Olivier (01-02-15 12:46:39)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum https://nicolascoolman.eu
~ Traduit par Nicolas Coolman
~ Etat de la version : Nouvelle version disponible
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user
---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17498
MFIE: Mozilla Firefox 35.0.1 (Defaut)
---\\ Informations sur les produits Windows
~ Langage: Français
Windows Server License Manager Script : OK
~ Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : XWY8Q
Windows License : OK
~ Windows Remaining Initializations Number : 999
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ Logiciels de protection du système
Avast Free Antivirus v10.0.2208
Malwarebytes Anti-Malware version 2.0.3.1025
Windows Defender W8 (Deactivate)
---\\ Logiciels d'optimisation du système
---\\ Logiciels de partage PeerToPeer
---\\ Surveillance de Logiciels
Adobe Flash Player 16 NPAPI
---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 58 Stepping 9, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 6019 MB (69% free)
System Restore: Activé (Enable)
System drive C: has 469 GB (68%) free of 687 GB
---\\ Mode de connexion au système
~ Computer Name: OLICHOU
~ User Name: Olivier
~ All Users Names: Olivier, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator
---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Olivier\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Olivier\AppData\Roaming\
~ %Desktop% : C:\Users\Olivier\Desktop\
~ %Favorites% : C:\Users\Olivier\Favorites\
~ %LocalAppData% : C:\Users\Olivier\AppData\Local\
~ %StartMenu% : C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 469 Go of 687 Go)
D: CD-ROM drive (Not Inserted)
---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 41 Scanned in 00mn 00s
---\\ Recherche particulière de fichiers génériques
[MD5.ACDBE1ED38167C8B01B8F63161BB2CEA] - (.Microsoft Corporation - Explorateur Windows.) (.23-08-14 - 08:48:28.) -- C:\Windows\Explorer.exe [2374784]
[MD5.48CFA7BE561A7BE144C29BB912055016] - (.Microsoft Corporation - Application de démarrage de Windows.) (.22-08-13 - 10:58:29.) -- C:\Windows\System32\Wininit.exe [144384]
[MD5.4AF089160FE082E5EA5C4AA72782DCA2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.22-11-14 - 02:28:21.) -- C:\Windows\System32\wininet.dll [2358272]
[MD5.306EB21E5B480AE9065EA55AC8C35936] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.22-02-14 - 10:45:48.) -- C:\Windows\System32\Winlogon.exe [562176]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.21-12-13 - 09:54:07.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.30-05-14 - 04:03:03.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22-08-13 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22-08-13 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22-08-13 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.06-03-14 - 10:22:50.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.24-07-14 - 12:45:39.) -- C:\Windows\system32\Drivers\HDAudBus.sys [76800]
[MD5.84CFC5EFA97D0C965EDE1D56F116A541] - (.Microsoft Corporation - Pilote de port i8042.) (.22-08-13 - 12:39:15.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.27-11-13 - 13:02:29.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.7A1A3F213CDB3363D179D5014272025D] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.30-04-14 - 07:41:46.) -- C:\Windows\system32\Drivers\MRxSmb.sys [402432]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22-08-13 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.038C77D577900EE39410662478BB0D50] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.24-07-14 - 16:07:52.) -- C:\Windows\system32\Drivers\ntfs.sys [2009920]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22-08-13 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22-08-13 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.22-08-13 - 20:11:06.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22-08-13 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.19-06-14 - 03:13:36.) -- C:\Windows\system32\Drivers\volsnap.sys [310080]
~ Generic Processes: Scanned in 00mn 00s
---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/4
~ Mes Videos (My Videos) : 1/7
~ Mes Favoris (My Favorites) : 1/14
~ Mes Documents (My Documents) : 2/45
~ Mon Bureau (My Desktop) : 1/139
~ Menu demarrer (Programs) : 1/31
~ Hidden Files: Scanned in 00mn 00s
---\\ Processus lancés
[MD5.EE082F074B6DF6F8977AAD6A6E9D09F8] - (.Nenad Hrg (SoftwareOK.com) - TheAeroClock.) -- C:\Users\Olivier\AppData\Local\Temp\Rar$EXa0.791\TheAeroClock.exe [1618944] [PID.3488]
[MD5.265B49EF94A5AA713192EE97A7D248B5] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [338032] [PID.4956]
[MD5.AB6A99CEED91F9328DBCE9B079325727] - (.DesktopCal, Inc. - Desktop Calendar.) -- C:\Users\Olivier\AppData\Roaming\DesktopCal\desktopcal.exe [282624] [PID.5012]
[MD5.9C1BDB837A2DA4FFC60CB61CEEA3E334] - (.TOSHIBA - readLM.) -- C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe [2216800] [PID.4416]
[MD5.44ADDA5FB88EE14F57A246285775AC2F] - (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\avastui.exe [5227112] [PID.3160]
[MD5.76D94909D7CD006062F29DA7DD5112F2] - (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1406248] [PID.5288]
[MD5.CE5C9977DA751DDC30952AC4DCBCA788] - (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe [49208] [PID.6244]
[MD5.72E7A13372047CA67AB84FAF2F49EF06] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [243312] [PID.6864]
[MD5.786840D3A66E08C99B617BEA4E30B5C0] - (.Adobe Systems, Inc. - Adobe Flash Player 16.0 r0.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_296.exe [1880752] [PID.4252]
[MD5.3AE345C9280228C249579220735A857D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8156672] [PID.2040]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Démarrage,Recherche,Extensions (G0,G1,G2)
C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Preferences
G1 - GCS: Preference [User Data\Default] None
G2 - GCE: Preference [User Data\Default] [ahfgeienlihckogmohjhadlkjgocpleb] Google Store v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake] Documents Google v.0.6 (Activé)
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Drive v.6.3 (Activé)
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] YouTube v.4.2.6 (Activé)
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Recherche Google v.0.0.0.20 (Activé)
G2 - GCE: Preference [User Data\Default] [eemcgdkfndhakfknompkggombfjjjeno] Bookmark Manager v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [ennkphjdgehloodpbhlhldgbnhmacadg] Settings v.0.2 (Activé)
G2 - GCE: Preference [User Data\Default] [gfdkimpbcpahaombhbimeihdjnejgicl] Feedback v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [gomekmidlodglbbmalcneegieacbdmki] avast! Online Security v.9.0.2018.95, (Désactivé)
G2 - GCE: Preference [User Data\Default] [mfehgcgbbipciphmccgaenjidiccnmng] Cloud Print v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [mgndgikekgjfcpckkfioiadnlibdjbkf] Chrome v.0.1 (Activé)
G2 - GCE: Preference [User Data\Default] [neajdppkdcdipfabeoofebfddakdcjhd] Google Network Speech v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nkeimhogjdpnpccoofpliimaahmaaome] Google+ Hangouts v.1.0 (Activé)
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda] Google Wallet v.0.0.6.1 (Activé)
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Gmail v.7 (Activé)
---\\ Liste des dossiers d'extension Google Chrome
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [Documents Google]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [Google Drive]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [YouTube]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [Recherche Google]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [avast! Online Security]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [Google Wallet]
G2 - EXT: C:\Users\Olivier\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [Gmail]
~ Google Lines Browser: 23 Scanned in 00mn 01s
---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Olivier\AppData\Roaming\Mozilla\Firefox\Profiles\rzndcgl7.default-1413567483518\prefs.js
M3 - MFPP: Plugins - [Olivier] -- C:\Users\Olivier\AppData\Roaming\Mozilla\Firefox\Profiles\rzndcgl7.default-1413567483518\searchplugins\google-avast.xml
M0 - MFSP: prefs.js [Olivier - rzndcgl7.default-1413567483518] https://www.google.com/?gws_rd=ssl
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_296.dll
P2 - FPN: [HKLM] [@Microsoft.com/NpCtrl,version=1.0] - (. Microsoft Corporation - 5.1.30514.0.) -- c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll
P2 - FPN: [HKLM] [@microsoft.com/OfficeAuthz,version=14.0] - (.Microsoft Corporation - Office Authorization plug-in for NPAPI browsers.) -- C:\Program Files\Microsoft Office\Office14\NPAUTHZ.dll
P2 - FPN: [HKCU] [vasco.com/VascoCardReaderPlugin] - (.VASCO Data Security - VASCO Card Reader Plugin.) -- C:\Users\Olivier\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.2\npVascoCardReaderPlugin.dll
P2 - FPN: [HKCU] [vasco.com/VascoCardReaderPlugin64] - (.VASCO Data Security - VASCO Card Reader Plugin.) -- C:\Users\Olivier\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.2\npVascoCardReaderPlugin64.dll
~ Firefox Browser: 7 Scanned in 00mn 00s
---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = https://www.msn.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs,Tabs = about:newtab
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=69DA0EF8272048D9864AF4DB37211DE8
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17496 (winblue_r5.141121-1500)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 15 Scanned in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: Groove GFS Browser Helper [64Bits] - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} . (.Microsoft Corporation - Microsoft SharePoint Workspace Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.dll
O2 - BHO: avast! Online Security [64Bits] - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} . (.AVAST Software - IE Webrep plugin.) -- C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} . (.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.dll
~ BHO: 6 Scanned in 00mn 00s
---\\ Autres liens utilisateurs (O4)
O4 - GS\QuickLaunch [Olivier]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Olivier\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
O4 - GS\QuickLaunch [Olivier]: Sparta.lnk . (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O4 - GS\QuickLaunch [Olivier]: StormFall.lnk . (...) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (.not file.)
O4 - GS\Desktop [Olivier]: BitTorrent.lnk . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\Olivier\AppData\Roaming\BitTorrent\BitTorrent.exe =>P2P.BitTorrent
~ Global Startup: 4 Scanned in 00mn 02s
---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [TSSSrv] . (.TOSHIBA Corporation - TOSHIBA System Settings Service.) -- C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe
O4 - HKLM\..\Run: [TecoResident] . (.TOSHIBA Corporation - Resident module of eco Utility.) -- C:\Program Files\TOSHIBA\Teco\TecoResident.exe
O4 - HKLM\..\Run: [TosWaitSrv] C:\Program Files (x86)\TOSHIBA\TPHM\TosWaitSrv.exe (.not file.)
O4 - HKLM\..\Run: [TCrdMain] . (.TOSHIBA Corporation - TOSHIBA Function Key Main Module.) -- C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files (x86)\Synaptics\SynTP\SynTPEnh.exe (.not file.)
O4 - HKCU\..\Run: [TheAeroClock] . (.Nenad Hrg (SoftwareOK.com) - TheAeroClock.) -- C:\Users\Olivier\AppData\Local\Temp\Rar$EXa0.791\TheAeroClock.exe
O4 - HKCU\..\Run: [Cld2000.exe] C:\Program Files (x86)\Calendrier\Cld2000.exe (.not file.)
O4 - HKCU\..\Run: [HP Officejet 6600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
O4 - HKCU\..\Run: [DesktopCal] . (.DesktopCal, Inc. - Desktop Calendar.) -- C:\Users\Olivier\AppData\Roaming\DesktopCal\desktopcal.exe
O4 - HKLM\..\Wow6432Node\Run: [AmIcoSinglun64] . (.Alcor Micro Corp. - Single LUN Icon Utility for VID 058F PID 63.) -- C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
O4 - HKLM\..\Wow6432Node\Run: [1.TPUReg] . (.TOSHIBA - readLM.) -- C:\Program Files (x86)\TOSHIBA\PasswordUtility\readLM.exe
O4 - HKLM\..\Wow6432Node\Run: [TSVU] . (.TOSHIBA - TOSHIBA Display Setup Launcher.) -- c:\Program Files\TOSHIBA\TOSHIBA Smart View Utility\TosSmartViewLauncher.exe
O4 - HKLM\..\Wow6432Node\Run: [AvastUI.exe] . (.AVAST Software - avast! Antivirus.) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
O4 - HKLM\..\Wow6432Node\Run: [BCSSync] . (.Microsoft Corporation - Microsoft Office 2010 component.) -- C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe =>.Microsoft Corporation
O4 - HKLM\..\Wow6432Node\Run: [NBAgent] . (.Nero AG - Nero BackItUp.) -- C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe
O4 - HKLM\..\Wow6432Node\Run: [HP Software Update] . (.Hewlett-Packard - hpwuSchd Application.) -- C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe =>.Hewlett-Packard Co
O4 - HKUS\S-1-5-21-1494462699-4292907851-2939948922-1001\..\Run: [TheAeroClock] . (.Nenad Hrg (SoftwareOK.com) - TheAeroClock.) -- C:\Users\Olivier\AppData\Local\Temp\Rar$EXa0.791\TheAeroClock.exe
O4 - HKUS\S-1-5-21-1494462699-4292907851-2939948922-1001\..\Run: [Cld2000.exe] C:\Program Files (x86)\Calendrier\Cld2000.exe (.not file.)
O4 - HKUS\S-1-5-21-1494462699-4292907851-2939948922-1001\..\Run: [HP Officejet 6600 (NET)] . (.Hewlett-Packard Co. - ScanToPCActivationApp.) -- C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe =>.Hewlett-Packard Co
O4 - HKUS\S-1-5-21-1494462699-4292907851-2939948922-1001\..\Run: [DesktopCal] . (.DesktopCal, Inc. - Desktop Calendar.) -- C:\Users\Olivier\AppData\Roaming\DesktopCal\desktopcal.exe
~ Application: Scanned in 00mn 00s
---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s
---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: &Envoyer à OneNote [64Bits] - {2670000A-7350-4f3c-8081-5663EE0C6C49} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBttnIE.dll =>.Microsoft Corporation
O9 - Extra button: Notes &liées OneNote [64Bits] - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} . (.Microsoft Corporation - Microsoft OneNote Internet Explorer Add-in.) -- C:\Program Files (x86)\MICROS~1\Office14\ONBTTN~1.dll =>.Microsoft Corporation
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\Windows\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\Windows\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\Windows\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\Windows\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\Windows\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\Windows\system32\wshbth.dll
~ Winsock: 7 Scanned in 00mn 00s
---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{67591770-AF75-499C-82A5-A5C19DEB1965}: DhcpNameServer = 109.88.203.3 62.197.111.140
O17 - HKLM\System\CCS\Services\Tcpip\..\{F0DB2090-269F-46F0-A6C8-9EDF37B1C47F}: DhcpNameServer = 127.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{F0DB2090-269F-46F0-A6C8-9EDF37B1C47F}: DhcpDomain = CN02.com
O17 - HKLM\System\CS1\Services\Tcpip\..\{67591770-AF75-499C-82A5-A5C19DEB1965}: DhcpNameServer = 109.88.203.3 62.197.111.140
O17 - HKLM\System\CS1\Services\Tcpip\..\{F0DB2090-269F-46F0-A6C8-9EDF37B1C47F}: DhcpNameServer = 127.0.0.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{F0DB2090-269F-46F0-A6C8-9EDF37B1C47F}: DhcpDomain = CN02.com
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 109.88.203.3 62.197.111.140
~ Domain: Scanned in 00mn 00s
---\\ Protocole additionnel (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807573E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s
---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: AtherosSvc (AtherosSvc) . (.Windows (R) Win 7 DDK provider - Windows Setup API.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: avast! Antivirus (avast! Antivirus) . (.AVAST Software - avast! Service.) - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: DTS APO Service (dts_apo_service) . (.Pas de propriétaire - dts_apo_service.) - C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
O23 - Service: GFNEX Service (GFNEXSrv) . (.Pas de propriétaire - GFNEXSrv.) - C:\Program Files (x86)\TOSHIBA\PasswordUtility\GFNEXSrv.exe
O23 - Service: Service Google Update (gupdate) (gupdate) . (...) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.)
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation - Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: C:\Program Files (x86)\Nero\Update\NASvc.exe (NAUpdate) . (.Nero AG - NeroUpdate.) - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Updater Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: C:\Windows\System32\stlang64.dll (STacSV) . (.IDT, Inc. - IDT PC Audio.) - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) . (.TOSHIBA Corporation - TDCSrv Application.) - C:\Windows\system32\TODDSrv.exe
O23 - Service: TOSHIBA eco Utility Service (TOSHIBA eco Utility Service) . (.Toshiba Corporation - TOSHIBA eco Utility Service.) - C:\Program Files\TOSHIBA\Teco\TecoService.exe =>.Toshiba Corporation
~ Services: 13 Scanned in 00mn 05s
---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s
---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s
---\\ Clés Session Manager (AppCertDlls,KnownDLLs) (O36)
O36 - AppCertDlls: (x64) . (...) -- c:\program files (x86)\settings manager\smdmf\x64\sysapcrt.dll (Not file) =>PUP.SystemK
O36 - AppCertDlls: (x86) . (...) -- c:\program files (x86)\settings manager\smdmf\sysapcrt.dll (Not file) =>PUP.SystemK
~ Keys: Scanned in 00mn 00s
---\\ Tâches planifiées en automatique (O39)
[MD5.A2A9C100FE1BE20A76C0B80D4CA44103] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
[MD5.4BB7714617D50D77FCDA6B0182FD8A9A] [APT] [avast! Emergency Update] (.AVAST Software.) -- C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [857888]
[MD5.265B49EF94A5AA713192EE97A7D248B5] [APT] [avastBCLRestartS-1-5-21-1494462699-4292907851-2939948922-1001] (.Mozilla Corporation.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [338032]
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineCore] (...) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.) [0]
[MD5.00000000000000000000000000000000] [APT] [GoogleUpdateTaskMachineUA] (...) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (.not file.) [0]
[MD5.EEF3F22892837F327BD609CDDB0961C4] [APT] [Opera scheduled Autoupdate 1420612402] (.Opera Software.) -- C:\Program Files (x86)\Opera\launcher.exe [466040]
[MD5.E2D2E33E42A9C2B91791C4CCEBFCFE9D] [APT] [Resolution+ Setting Task] (.TOSHIBA Corporation.) -- C:\Program Files\Toshiba\TOSHIBA Smart View Utility\Plugins\ResolutionPlus\TosRegPermissionChg.exe [88064]
[MD5.C6B8CB65A3AACABB00F3DAA371C46A3E] [APT] [CommonNotifier] (.Toshiba Europe GmbH.) -- C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe [471416]
[MD5.2B2C2D74BC62E22248787530A7AFC87F] [APT] [Service Station] (.TOSHIBA Corporation.) -- C:\Program Files\TOSHIBA\Toshiba Service Station\ToshibaServiceStation.exe [655464]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job [1082]
O39 - APT: GoogleUpdateTaskMachineCore - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1082]
O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job [1086]
O39 - APT: GoogleUpdateTaskMachineUA - (...) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1086]
~ Scheduled Task: 16 Scanned in 00mn 04s
---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s
---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: C:\Windows\System32\drivers\ahcache.sys (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys
O41 - Driver: (aswRdr) . (.AVAST Software - avast! WFP Redirect Driver.) - C:\Windows\system32\drivers\aswRdr2.sys
O41 - Driver: (aswSnx) . (.AVAST Software - avast! Virtualization Driver.) - C:\Windows\system32\drivers\aswSnx.sys
O41 - Driver: (aswSP) . (.AVAST Software - avast! self protection module.) - C:\Windows\system32\drivers\aswSP.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
O41 - Driver: C:\Windows\System32\rascfg.dll (Wanarpv6) . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) - C:\Windows\system32\DRIVERS\wanarp.sys
~ Drivers: 40 Scanned in 00mn 00s
---\\ Logiciels installés (O42)
O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI
O42 - Logiciel: Alcor Micro USB Card Reader - (.Alcor Micro Corp..) [HKLM][64Bits] -- AmUStor
O42 - Logiciel: Aloha TriPeaks - (.WildTangent.) [HKLM][64Bits] -- WTA-ed579234-6c98-4c59-ac6e-f39185ed9aac =>.WildTangent
O42 - Logiciel: Atheros Driver Installation Program - (.Atheros.) [HKLM][64Bits] -- {C3A32068-8AB1-4327-BB16-BED9C6219DC7}
O42 - Logiciel: Avast Free Antivirus - (.AVAST Software.) [HKLM][64Bits] -- Avast
O42 - Logiciel: Bejeweled 3 - (.WildTangent.) [HKLM][64Bits] -- WTA-86cf7c65-8eed-4947-983d-3add8adc1b23 =>.WildTangent
O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- BitTorrent =>P2P.BitTorrent
O42 - Logiciel: Calendrier de bureau 2.1.5.3390 - (.DesktopCal, Inc..) [HKCU][64Bits] -- DesktopCal
O42 - Logiciel: Chuzzle Deluxe - (.WildTangent.) [HKLM][64Bits] -- WTA-1ccaadf7-b501-4a85-be43-6b3481ba4dce =>.WildTangent
O42 - Logiciel: DTS Sound - (.DTS, Inc..) [HKLM][64Bits] -- {2DFA9084-CEB3-4A48-B9F7-9038FEF1B8F4}
O42 - Logiciel: Empress of the Deep - The Darkest Secret - (.WildTangent.) [HKLM][64Bits] -- WTA-a46353c6-442c-4c86-8dca-031592d96937 =>.WildTangent
O42 - Logiciel: Evernote - (.Evernote Launcher by Toshiba Europe GmbH.) [HKLM][64Bits] -- Evernote
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
O42 - Logiciel: HP Officejet 6600 Aide - (.Hewlett Packard.) [HKLM][64Bits] -- {2FA81482-5570-4CF0-9A10-D61D2F164916} =>.Hewlett-Packard Co
O42 - Logiciel: HP Update - (.Hewlett-Packard.) [HKLM][64Bits] -- {6F1C00D2-25C2-4CBA-8126-AE9A6E2E9CD5}
O42 - Logiciel: High-Definition Video Playback - (.Nero AG.) [HKLM][64Bits] -- {237CCB62-8454-43E3-B158-3ACD0134852E}
O42 - Logiciel: I.R.I.S. OCR - (.HP.) [HKLM][64Bits] -- {CA6BCA2F-EDEB-408F-850B-31404BE16A61}
O42 - Logiciel: IDT Audio Driver - (.IDT.) [HKLM][64Bits] -- {588A747E-CFF6-46B3-9207-CD754F9473AF}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {409CB30E-E457-4008-9B1A-ED1B9EA21140}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {93F692D4-0C4D-4EED-9BFE-657C1D5959FE}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {89AFB053-A343-46EF-97E4-D593AD7184E6}
O42 - Logiciel: Island Tribe - (.WildTangent.) [HKLM][64Bits] -- WTA-b4654301-a24b-456a-9f1f-02c0dde5c659 =>.WildTangent
O42 - Logiciel: Jewel Quest Solitaire 2 - (.WildTangent.) [HKLM][64Bits] -- WTA-d010a5a6-d272-4c5a-9618-d6ee6f420b77 =>.WildTangent
O42 - Logiciel: Logiciel de base du périphérique HP Officejet 6600 - (.Hewlett-Packard Co..) [HKLM][64Bits] -- {82250F8E-6AD5-4F72-9BB0-76F13BFBBD7B} =>.Hewlett-Packard Co
O42 - Logiciel: Magic Academy - (.WildTangent.) [HKLM][64Bits] -- WTA-be096e82-fc6b-4fec-9a8a-162f1c1824d9 =>.WildTangent
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.3.1025 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM][64Bits] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
O42 - Logiciel: Mozilla Firefox 35.0.1 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 35.0.1 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: Nero 10 Menu TemplatePack Basic - (.Nero AG.) [HKLM][64Bits] -- {63AA3EAB-23BB-48B2-9AD0-44F878075604}
O42 - Logiciel: Nero 10 Movie ThemePack Basic - (.Nero AG.) [HKLM][64Bits] -- {F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}
O42 - Logiciel: Nero BackItUp 10 - (.Nero AG.) [HKLM][64Bits] -- {68AB6930-5BFF-4FF6-923B-516A91984FE6}
O42 - Logiciel: Nero BackItUp 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {08C8666B-C502-4AB3-B4CB-D74AC42D14FE}
O42 - Logiciel: Nero BurnRights 10 - (.Nero AG.) [HKLM][64Bits] -- {943CFD7D-5336-47AF-9418-E02473A5A517}
O42 - Logiciel: Nero BurnRights 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {555868C6-49FB-484F-BB43-8980651A1B00}
O42 - Logiciel: Nero Burning ROM 10 - (.Nero AG.) [HKLM][64Bits] -- {7A5D731D-B4B3-490E-B339-75685712BAAB}
O42 - Logiciel: Nero BurningROM 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}
O42 - Logiciel: Nero Control Center 10 - (.Nero AG.) [HKLM][64Bits] -- {6DFB899F-17A2-48F0-A533-ED8D6866CF38}
O42 - Logiciel: Nero ControlCenter 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {523B2B1B-D8DB-4B41-90FF-C4D799E2758A}
O42 - Logiciel: Nero Core Components 10 - (.Nero AG.) [HKLM][64Bits] -- {2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}
O42 - Logiciel: Nero CoverDesigner 10 - (.Nero AG.) [HKLM][64Bits] -- {FCF00A6E-FB58-477A-ABE9-232907105521}
O42 - Logiciel: Nero CoverDesigner 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C3273C55-E1E4-41FF-8D69-0158090DB8D8}
O42 - Logiciel: Nero DiscSpeed 10 - (.Nero AG.) [HKLM][64Bits] -- {34490F4E-48D0-492E-8249-B48BECF0537C}
O42 - Logiciel: Nero DiscSpeed 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {C18A0418-442A-4186-AF98-D08F5054A2FC}
O42 - Logiciel: Nero Dolby Files 10 - (.Nero AG.) [HKLM][64Bits] -- {C3580AC4-C827-4332-B935-9A282ED5BB97}
O42 - Logiciel: Nero Express 10 - (.Nero AG.) [HKLM][64Bits] -- {70550193-1C22-445C-8FA4-564E155DB1A7}
O42 - Logiciel: Nero Express 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {33643918-7957-4839-92C7-EA96CB621A98}
O42 - Logiciel: Nero InfoTool 10 - (.Nero AG.) [HKLM][64Bits] -- {F412B4AF-388C-4FF5-9B2F-33DB1C536953}
O42 - Logiciel: Nero InfoTool 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {66049135-9659-4AAD-9169-9CCA269EBB3E}
O42 - Logiciel: Nero MediaHub 10 - (.Nero AG.) [HKLM][64Bits] -- {1F7FB68F-52F6-46A3-B42F-38CE46295AE5}
O42 - Logiciel: Nero MediaHub 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F467862A-D9CA-47ED-8D81-B4B3C9399272}
O42 - Logiciel: Nero Multimedia Suite 10 - (.Nero AG.) [HKLM][64Bits] -- {277C1559-4CF7-44FF-8D07-98AA9C13AABD}
O42 - Logiciel: Nero Recode 10 - (.Nero AG.) [HKLM][64Bits] -- {8ECEC853-5C3D-4B10-B5C7-FF11FF724807}
O42 - Logiciel: Nero Recode 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {DB7C1D4A-08BA-4C7E-A8AA-B7F9BB372DCF}
O42 - Logiciel: Nero RescueAgent 10 - (.Nero AG.) [HKLM][64Bits] -- {E337E787-CF61-4B7B-B84F-509202A54023}
O42 - Logiciel: Nero RescueAgent 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {92E25238-61A3-4ACD-A407-3C480EEF47A7}
O42 - Logiciel: Nero SoundTrax 10 - (.Nero AG.) [HKLM][64Bits] -- {E1EE5339-5D32-458F-BAAB-B19F6301BCE2}
O42 - Logiciel: Nero SoundTrax 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {16987E99-C95C-4513-9239-7B44A0A71DB5}
O42 - Logiciel: Nero StartSmart 10 - (.Nero AG.) [HKLM][64Bits] -- {F61D489E-6C44-49AC-AD02-7DA8ACA73A65}
O42 - Logiciel: Nero StartSmart 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {F6117F9C-ADB5-4590-9BE4-12C7BEC28702}
O42 - Logiciel: Nero Update - (.Nero AG.) [HKLM][64Bits] -- {65BB0407-4CC8-4DC7-952E-3EEFDF05602A}
O42 - Logiciel: Nero Vision 10 - (.Nero AG.) [HKLM][64Bits] -- {9A4297F3-2A51-4ED9-92CA-4BCB8380947E}
O42 - Logiciel: Nero Vision 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {329411A0-19F3-4740-874F-17400B126F27}
O42 - Logiciel: Nero WaveEditor 10 - (.Nero AG.) [HKLM][64Bits] -- {EDCDFAD5-DF80-4600-A493-E9DAD6810230}
O42 - Logiciel: Nero WaveEditor 10 Help (CHM) - (.Nero AG.) [HKLM][64Bits] -- {7A295D8F-484B-4FFB-89AB-C1FD497591FE}
O42 - Logiciel: Peggle Nights - (.WildTangent.) [HKLM][64Bits] -- WTA-8f850859-93fb-495c-8706-b9853b005292 =>.WildTangent
O42 - Logiciel: Plants vs. Zombies - Game of the Year - (.WildTangent.) [HKLM][64Bits] -- WTA-a089e0b4-eb21-44e8-b2ad-6b7e3f157048 =>.WildTangent
O42 - Logiciel: Polar Bowler - (.WildTangent.) [HKLM][64Bits] -- WTA-ef07a64b-44ae-45e3-b5c6-0c7de22d8521 =>.WildTangent
O42 - Logiciel: Qualcomm Atheros Bluetooth Suite (64) - (.Qualcomm Atheros.) [HKLM][64Bits] -- {A84A4FB1-D703-48DB-89E0-68B6499D2801}
O42 - Logiciel: Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver - (.Qualcomm Atheros Inc..) [HKLM][64Bits] -- {3108C217-BE83-42E4-AE9E-A56A2A92E549}
O42 - Logiciel: Skype(TM) 6.22 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: Sparta - (.Sparta.) [HKCU][64Bits] -- Sparta
O42 - Logiciel: Spotify - (.Spotify AB.) [HKLM][64Bits] -- Spotify
O42 - Logiciel: Synaptics Pointing Device Driver - (.Synaptics Incorporated.) [HKLM][64Bits] -- SynTPDeinstKey
O42 - Logiciel: TOSHIBA Addendum - (.TOSHIBA.) [HKLM][64Bits] -- {C1569944-FAD6-4B3B-85E5-C213C2FF8EFC}
O42 - Logiciel: TOSHIBA Desktop Assist - (.Toshiba Corporation.) [HKLM][64Bits] -- {95CCACF0-010D-45F0-82BF-858643D8BC02}
O42 - Logiciel: TOSHIBA Display Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- {5F6AC07E-50EF-422E-B56E-6521E5B35139}
O42 - Logiciel: TOSHIBA Function Key - (.Toshiba Corporation.) [HKLM][64Bits] -- {16562A90-71BC-41A0-B890-D91B0C267120}
O42 - Logiciel: TOSHIBA Manuals - (.TOSHIBA.) [HKLM][64Bits] -- {90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}
O42 - Logiciel: TOSHIBA PC Health Monitor - (.Toshiba Corporation.) [HKLM][64Bits] -- {9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}
O42 - Logiciel: TOSHIBA Password Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- InstallShield_{78931270-BC9E-441A-A52B-73ECD4ACFAB5}
O42 - Logiciel: TOSHIBA Recovery Media Creator - (.Toshiba Corporation.) [HKLM][64Bits] -- {B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}
O42 - Logiciel: TOSHIBA Service Station - (.Toshiba Corporation.) [HKLM][64Bits] -- {FBFCEEA5-96EA-4C8E-9262-43CBBEBAE413} =>.Toshiba Corporation
O42 - Logiciel: TOSHIBA Start Screen Option - (.Toshiba Corporation.) [HKLM][64Bits] -- {06B71035-F19F-4F76-9875-FFCCD4FC3F83}
O42 - Logiciel: TOSHIBA System Driver - (.Toshiba Corporation.) [HKLM][64Bits] -- {1E6A96A1-2BAB-43EF-8087-30437593C66C}
O42 - Logiciel: TOSHIBA System Settings - (.Toshiba Corporation.) [HKLM][64Bits] -- {05A55927-DB9B-4E26-BA44-828EBFF829F0}
O42 - Logiciel: TOSHIBA VIDEO PLAYER - (.Toshiba Corporation.) [HKLM][64Bits] -- {FF07604E-C860-40E9-A230-E37FA41F103A}
O42 - Logiciel: TOSHIBA eco Utility - (.Toshiba Corporation.) [HKLM][64Bits] -- {5944B9D4-3C2A-48DE-931E-26B31714A2F7} =>.Toshiba Corporation
O42 - Logiciel: Toshiba TEMPRO - (.Toshiba Europe GmbH.) [HKLM][64Bits] -- {F76F5214-83A8-4030-80C9-1EF57391D72A} =>.Toshiba Corporation
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.WildTangent
O42 - Logiciel: VASCO Card Reader Plug-In (64-Bit) - (.VASCO Data Security.) [HKLM][64Bits] -- {47659F12-27AE-6400-9B8A-2BD803020302}
O42 - Logiciel: VASCO Smart Card Reader Plug-In (User) - (.VASCO Data Security.) [HKCU][64Bits] -- {8bc0c044-0d13-4fe6-90c1-af39c36cb927}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Virtual Villagers 4 - The Tree of Life - (.WildTangent.) [HKLM][64Bits] -- WTA-38b42110-f8df-477e-8eaf-a6071bfc6cd1 =>.WildTangent
O42 - Logiciel: WildTangent Games - (.WildTangent.) [HKLM][64Bits] -- WildTangent wildgames Master Uninstall =>.WildTangent
O42 - Logiciel: WildTangent Games App (Toshiba Games) - (.WildTangent.) [HKLM][64Bits] -- {70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-toshiba =>.WildTangent
O42 - Logiciel: WinRAR 5.11 (32-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR archiver
O42 - Logiciel: neroxml - (.Nero AG.) [HKLM][64Bits] -- {56C049BE-79E9-4502-BEA7-9754A3E60F9B}
~ Logic: 58 Scanned in 00mn 00s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\AVAST Software]
[HKCU\Software\Anvsoft]
[HKCU\Software\AppDataLow\Software\Amazon]
[HKCU\Software\AppDataLow]
[HKCU\Software\Avg Secure Update]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\Freemake]
[HKCU\Software\Google]
[HKCU\Software\HP]
[HKCU\Software\Hewlett-Packard]
[HKCU\Software\IM Providers]
[HKCU\Software\Intel]
[HKCU\Software\Licenses]
[HKCU\Software\Linkey] =>PUP.LinkeySearch
[HKCU\Software\MCAFEE]
[HKCU\Software\MOVAVI]
[HKCU\Software\Macromedia]
[HKCU\Software\Mine]
[HKCU\Software\MozillaPlugins]
[HKCU\Software\Mozilla]
[HKCU\Software\Nero]
[HKCU\Software\Netscape]
[HKCU\Software\ODBC]
[HKCU\Software\Opera Software]
[HKCU\Software\Policies]
[HKCU\Software\Reg]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\Skype]
[HKCU\Software\Synaptics]
[HKCU\Software\TeleCharger]
[HKCU\Software\Toshiba]
[HKCU\Software\Trolltech]
[HKCU\Software\TuneUp]
[HKCU\Software\VASCO]
[HKCU\Software\WinRAR SFX]
[HKCU\Software\WinRAR]
[HKCU\Software\Wow6432Node]
[HKCU\Software\Xtralog]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\Atheros]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\HP]
[HKLM\Software\IDT]
[HKLM\Software\IM Providers]
[HKLM\Software\InstalledOptions]
[HKLM\Software\IntelVolatile]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\ODBC]
[HKLM\Software\Policies]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Synaptics]
[HKLM\Software\ToshibaBlobDelivery]
[HKLM\Software\Toshiba]
[HKLM\Software\TuneUp]
[HKLM\Software\Wow6432Node\AVAST Software]
[HKLM\Software\Wow6432Node\AdwCleaner]
[HKLM\Software\Wow6432Node\Atheros]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\DTS, Inc.]
[HKLM\Software\Wow6432Node\DTS]
[HKLM\Software\Wow6432Node\Freemake]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\Hewlett-Packard]
[HKLM\Software\Wow6432Node\IM Providers]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\MOVAVI]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\Nero]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\OldTimer Tools]
[HKLM\Software\Wow6432Node\Opera Software]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\Qualcomm Atheros Inc.]
[HKLM\Software\Wow6432Node\Qualcomm Atheros]
[HKLM\Software\Wow6432Node\Reg]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\SRS Labs]
[HKLM\Software\Wow6432Node\Skype]
[HKLM\Software\Wow6432Node\SmdmF] =>PUP.SystemK
[HKLM\Software\Wow6432Node\TOSHIBA]
[HKLM\Software\Wow6432Node\Toshiba Corporation]
[HKLM\Software\Wow6432Node\TuneUp]
[HKLM\Software\Wow6432Node\VideoLAN]
[HKLM\Software\Wow6432Node\WildTangent]
[HKLM\Software\Wow6432Node\WinRAR]
[HKLM\Software\Wow6432Node\mcafeeupdater]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node\sMedio]
[HKLM\Software\Wow6432Node]
~ Key Software: 263 Scanned in 00mn 00s
---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 17-01-14 - 15:17:14 - [] ----D C:\Program Files (x86)\Amazon
O43 - CFD: 17-01-14 - 14:44:59 - [] ----D C:\Program Files (x86)\AmIcoSingLun
O43 - CFD: 17-01-14 - 14:43:42 - [] ----D C:\Program Files (x86)\Atheros
O43 - CFD: 17-01-14 - 14:44:10 - [] ----D C:\Program Files (x86)\Bluetooth Suite
O43 - CFD: 15-11-14 - 23:19:27 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 17-01-14 - 14:38:49 - [] ----D C:\Program Files (x86)\DTS, Inc
O43 - CFD: 07-01-15 - 07:42:04 - [] ----D C:\Program Files (x86)\EasiestSoft
O43 - CFD: 17-01-14 - 15:17:08 - [] ----D C:\Program Files (x86)\eBay =>Toolbar.eBay
O43 - CFD: 17-01-14 - 15:17:29 - [] ----D C:\Program Files (x86)\Evernote_TLauncher
O43 - CFD: 07-01-15 - 08:25:50 - [0] ----D C:\Program Files (x86)\Freemake
O43 - CFD: 05-11-14 - 14:36:27 - [] ----D C:\Program Files (x86)\HP
O43 - CFD: 17-01-14 - 15:18:13 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 17-01-14 - 14:35:27 - [] ----D C:\Program Files (x86)\Intel
O43 - CFD: 12-12-14 - 01:07:13 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 17-10-14 - 18:08:15 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 17-10-14 - 15:46:12 - [] ----D C:\Program Files (x86)\Microsoft Analysis Services
O43 - CFD: 17-10-14 - 15:49:35 - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 20-10-14 - 20:04:26 - [] ----D C:\Program Files (x86)\Microsoft Silverlight
O43 - CFD: 17-10-14 - 15:49:33 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 17-10-14 - 15:49:33 - [] ----D C:\Program Files (x86)\Microsoft Sync Framework
O43 - CFD: 17-10-14 - 15:50:17 - [] ----D C:\Program Files (x86)\Microsoft Synchronization Services
O43 - CFD: 17-10-14 - 15:47:43 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio 8
O43 - CFD: 17-10-14 - 15:49:33 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 26-01-15 - 19:16:30 - [] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 27-01-15 - 20:16:57 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 17-10-14 - 15:51:18 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 17-10-14 - 19:39:46 - [] ----D C:\Program Files (x86)\Nero
O43 - CFD: 15-01-15 - 21:20:04 - [] ----D C:\Program Files (x86)\Opera
O43 - CFD: 28-08-13 - 10:51:17 - [] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 15-11-14 - 23:19:27 - [] R---D C:\Program Files (x86)\Skype
O43 - CFD: 24-11-13 - 21:37:50 - [] ----D C:\Program Files (x86)\Spotify
O43 - CFD: 17-01-14 - 15:18:13 - [] ----D C:\Program Files (x86)\TOSHIBA
O43 - CFD: 17-01-14 - 15:16:26 - [] ----D C:\Program Files (x86)\TOSHIBA Games
O43 - CFD: 17-01-14 - 14:59:37 - [] ----D C:\Program Files (x86)\Toshiba TEMPRO =>.Toshiba Corporation
O43 - CFD: 24-07-14 - 15:46:34 - [] ----D C:\Program Files (x86)\VideoLAN
O43 - CFD: 17-01-14 - 15:15:20 - [] ----D C:\Program Files (x86)\WildGames
O43 - CFD: 17-01-14 - 15:07:57 - [] ----D C:\Program Files (x86)\WildTangent Games
O43 - CFD: 13-11-14 - 19:27:39 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 29-06-14 - 01:07:43 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 29-06-14 - 01:07:43 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 29-05-14 - 19:12:12 - [] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 22-08-13 - 16:36:30 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 29-06-14 - 01:07:43 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 29-05-14 - 19:12:12 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 22-08-13 - 16:36:30 - [] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 22-08-13 - 16:36:30 - [] ----D C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 14-12-14 - 18:54:43 - [] ----D C:\Program Files (x86)\WinRAR
O43 - CFD: 30-01-15 - 16:30:59 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 17-01-14 - 14:44:11 - [] ----D C:\Program Files (x86)\Common Files\Atheros
O43 - CFD: 26-10-14 - 09:24:46 - [] ----D C:\Program Files (x86)\Common Files\DESIGNER
O43 - CFD: 17-01-14 - 14:35:09 - [] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 26-10-14 - 09:28:19 - [] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 17-10-14 - 19:33:50 - [] ----D C:\Program Files (x86)\Common Files\Nero
O43 - CFD: 17-01-14 - 14:32:04 - [] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 22-08-13 - 16:36:33 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 15-11-14 - 23:19:27 - [] ----D C:\Program Files (x86)\Common Files\Skype
O43 - CFD: 25-10-14 - 04:48:40 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 17-01-14 - 14:53:01 - [] ----D C:\Program Files (x86)\Common Files\Toshiba Shared
O43 - CFD: 17-01-14 - 14:44:59 - [] ----D C:\ProgramData\AmUStor
O43 - CFD: 22-08-13 - 15:45:52 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 05-06-14 - 20:52:33 - [] ----D C:\ProgramData\AVAST Software
O43 - CFD: 05-09-14 - 18:31:12 - [] ----D C:\ProgramData\Avg_Update_0814tb
O43 - CFD: 24-07-14 - 15:44:35 - [] --H-D C:\ProgramData\Common Files
O43 - CFD: 22-08-13 - 15:45:52 - [] -S--D C:\ProgramData\Desktop
O43 - CFD: 22-08-13 - 15:45:52 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 07-01-15 - 08:25:58 - [0] ----D C:\ProgramData\Freemake
O43 - CFD: 05-11-14 - 14:35:23 - [] ----D C:\ProgramData\HP
O43 - CFD: 17-01-14 - 14:38:04 - [] ----D C:\ProgramData\Intel
O43 - CFD: 17-10-14 - 18:08:09 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 12-12-14 - 17:26:22 - [] ----D C:\ProgramData\McAfee
O43 - CFD: 12-12-14 - 01:07:17 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 11-12-14 - 13:39:29 - [] ----D C:\ProgramData\Microsoft Help
O43 - CFD: 04-01-15 - 19:37:50 - [] ----D C:\ProgramData\Movavi
O43 - CFD: 23-05-14 - 19:40:28 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 17-10-14 - 19:39:48 - [] ----D C:\ProgramData\Nero
O43 - CFD: 17-01-14 - 14:53:51 - [] ----D C:\ProgramData\Package Cache
O43 - CFD: 17-01-14 - 14:43:19 - [] ----D C:\ProgramData\Qualcomm Atheros
O43 - CFD: 17-10-14 - 14:06:02 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 15-11-14 - 23:19:31 - [] ----D C:\ProgramData\Skype
O43 - CFD: 17-01-14 - 14:38:49 - [] ----D C:\ProgramData\SRS Labs
O43 - CFD: 22-08-13 - 15:45:52 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 22-08-13 - 15:45:52 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 19-05-14 - 04:12:45 - [] ----D C:\ProgramData\Toshiba
O43 - CFD: 19-05-14 - 04:14:27 - [] ----D C:\ProgramData\ToshibaEurope
O43 - CFD: 04-01-15 - 20:01:05 - [] ----D C:\ProgramData\TuneUp Software
O43 - CFD: 31-07-14 - 22:13:08 - [] ----D C:\ProgramData\WildTangent
O43 - CFD: 07-01-15 - 07:29:09 - [] -SH-D C:\ProgramData\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
O43 - CFD: 22-08-13 - 16:36:33 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 22-08-13 - 20:11:12 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 29-05-14 - 19:12:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 17-01-14 - 14:38:49 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS, Inc
O43 - CFD: 31-07-14 - 22:13:11 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 05-06-14 - 20:56:40 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
O43 - CFD: 05-11-14 - 14:35:57 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
O43 - CFD: 22-08-13 - 16:36:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 17-10-14 - 18:08:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 17-10-14 - 15:52:16 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
O43 - CFD: 20-10-14 - 20:05:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 17-10-14 - 19:33:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
O43 - CFD: 17-10-14 - 15:52:15 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SharePoint
O43 - CFD: 15-11-14 - 23:19:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
O43 - CFD: 07-01-15 - 22:45:15 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 29-05-14 - 19:12:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 22-08-13 - 20:11:12 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 17-01-14 - 15:17:53 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TOSHIBA
O43 - CFD: 24-07-14 - 15:48:22 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 14-12-14 - 18:54:47 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
O43 - CFD: 30-01-15 - 16:30:59 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 17-09-14 - 23:10:59 - [] ----D C:\Users\Olivier\AppData\Roaming\Adobe
O43 - CFD: 07-01-15 - 08:25:13 - [] ----D C:\Users\Olivier\AppData\Roaming\Anvsoft
O43 - CFD: 05-06-14 - 20:58:43 - [] ----D C:\Users\Olivier\AppData\Roaming\AVAST Software
O43 - CFD: 31-01-15 - 20:36:19 - [] ----D C:\Users\Olivier\AppData\Roaming\BitTorrent =>P2P.BitTorrent
O43 - CFD: 24-11-14 - 23:15:53 - [] ----D C:\Users\Olivier\AppData\Roaming\DesktopCal
O43 - CFD: 07-01-15 - 07:43:02 - [] ----D C:\Users\Olivier\AppData\Roaming\EasiestSoft
O43 - CFD: 10-12-14 - 23:20:01 - [] ----D C:\Users\Olivier\AppData\Roaming\HpUpdate
O43 - CFD: 19-05-14 - 04:15:50 - [] ----D C:\Users\Olivier\AppData\Roaming\Macromedia
O43 - CFD: 09-10-14 - 23:05:01 - [] -S--D C:\Users\Olivier\AppData\Roaming\Microsoft
O43 - CFD: 23-05-14 - 19:41:05 - [] ----D C:\Users\Olivier\AppData\Roaming\Mozilla
O43 - CFD: 17-10-14 - 20:21:52 - [] ----D C:\Users\Olivier\AppData\Roaming\Nero
O43 - CFD: 07-01-15 - 07:33:58 - [] ----D C:\Users\Olivier\AppData\Roaming\Opera Software
O43 - CFD: 15-01-15 - 23:16:16 - [] ----D C:\Users\Olivier\AppData\Roaming\Skype
O43 - CFD: 28-11-14 - 21:50:07 - [] ----D C:\Users\Olivier\AppData\Roaming\sMedio
O43 - CFD: 17-10-14 - 06:31:43 - [] ----D C:\Users\Olivier\AppData\Roaming\sparta111
O43 - CFD: 17-10-14 - 19:44:20 - [] ----D C:\Users\Olivier\AppData\Roaming\StormFall
O43 - CFD: 04-01-15 - 20:00:33 - [] ----D C:\Users\Olivier\AppData\Roaming\TuneUp Software
O43 - CFD: 17-09-14 - 23:05:33 - [] ----D C:\Users\Olivier\AppData\Roaming\VASCO
O43 - CFD: 26-01-15 - 20:41:16 - [] ----D C:\Users\Olivier\AppData\Roaming\vlc
O43 - CFD: 31-07-14 - 22:13:09 - [] ----D C:\Users\Olivier\AppData\Roaming\WildTangent
O43 - CFD: 23-05-14 - 17:15:58 - [] ----D C:\Users\Olivier\AppData\Roaming\WinRAR
O43 - CFD: 01-02-15 - 12:46:58 - [] ----D C:\Users\Olivier\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 12-12-14 - 17:26:33 - [] ----D C:\Users\Olivier\AppData\Local\Adobe
O43 - CFD: 17-08-14 - 16:06:14 - [] ----D C:\Users\Olivier\AppData\Local\Amazon_Services_LLC
O43 - CFD: 19-05-14 - 04:06:18 - [] -SH-D C:\Users\Olivier\AppData\Local\Application Data
O43 - CFD: 04-01-15 - 23:13:21 - [0] ----D C:\Users\Olivier\AppData\Local\Diagnostics
O43 - CFD: 10-06-14 - 18:13:27 - [] -SH-D C:\Users\Olivier\AppData\Local\EmieSiteList
O43 - CFD: 10-06-14 - 18:13:27 - [] -SH-D C:\Users\Olivier\AppData\Local\EmieUserList
O43 - CFD: 07-01-15 - 07:35:31 - [] ----D C:\Users\Olivier\AppData\Local\FreemakeVideoConverter
O43 - CFD: 05-06-14 - 20:57:19 - [] ----D C:\Users\Olivier\AppData\Local\Google
O43 - CFD: 19-05-14 - 04:06:18 - [] -SH-D C:\Users\Olivier\AppData\Local\Historique
O43 - CFD: 05-11-14 - 14:41:40 - [] ----D C:\Users\Olivier\AppData\Local\HP
O43 - CFD: 30-05-14 - 20:14:56 - [] ----D C:\Users\Olivier\AppData\Local\Macromedia
O43 - CFD: 10-12-14 - 17:18:15 - [] ----D C:\Users\Olivier\AppData\Local\Microsoft
O43 - CFD: 22-05-14 - 19:20:14 - [0] ----D C:\Users\Olivier\AppData\Local\Microsoft Help
O43 - CFD: 04-01-15 - 19:38:23 - [] ----D C:\Users\Olivier\AppData\Local\Movavi
O43 - CFD: 23-05-14 - 19:41:06 - [] ----D C:\Users\Olivier\AppData\Local\Mozilla
O43 - CFD: 07-01-15 - 07:33:58 - [] ----D C:\Users\Olivier\AppData\Local\Opera Software
O43 - CFD: 17-09-14 - 23:05:30 - [] ----D C:\Users\Olivier\AppData\Local\Package Cache
O43 - CFD: 05-11-14 - 14:40:25 - [] ----D C:\Users\Olivier\AppData\Local\Packages
O43 - CFD: 17-10-14 - 06:32:22 - [] ----D C:\Users\Olivier\AppData\Local\Programs
O43 - CFD: 07-09-14 - 01:04:33 - [] ----D C:\Users\Olivier\AppData\Local\Skype
O43 - CFD: 17-10-14 - 06:31:43 - [] ----D C:\Users\Olivier\AppData\Local\Sparta
O43 - CFD: 17-10-14 - 15:23:12 - [] ----D C:\Users\Olivier\AppData\Local\StormFall
O43 - CFD: 01-02-15 - 12:45:45 - [] ----D C:\Users\Olivier\AppData\Local\Temp
O43 - CFD: 19-05-14 - 04:06:18 - [] -SH-D C:\Users\Olivier\AppData\Local\Temporary Internet Files
O43 - CFD: 19-05-14 - 04:11:19 - [] ----D C:\Users\Olivier\AppData\Local\TOSHIBA
O43 - CFD: 12-10-14 - 23:57:22 - [] ----D C:\Users\Olivier\AppData\Local\transex-messenger
O43 - CFD: 04-01-15 - 20:00:33 - [] ----D C:\Users\Olivier\AppData\Local\TuneUp Software
O43 - CFD: 07-01-15 - 08:36:43 - [] ----D C:\Users\Olivier\AppData\Local\VirtualStore
O43 - CFD: 22-08-13 - 16:36:32 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 22-08-13 - 16:36:32 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 13-11-14 - 18:19:15 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 24-11-14 - 23:15:53 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Calendrier de bureau
O43 - CFD: 22-08-13 - 16:36:32 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 17-10-14 - 06:31:43 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sparta
O43 - CFD: 13-11-14 - 18:19:15 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 17-10-14 - 15:23:12 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StormFall
O43 - CFD: 22-08-13 - 16:36:32 - [] R---D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 14-12-14 - 18:54:47 - [] ----D C:\Users\Olivier\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
~ Program Folder: 168 Scanned in 00mn 00s
---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.59D3C54D38375742D1F4DE511F3623D9] - 01-02-15 - 12:28:40 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.934D15CBF0EE84DD47EB2FA27C359051] - 01-02-15 - 12:42:51 ---A- . (...) -- C:\Windows\WindowsUpdate.log [1303851]
O44 - LFC:[MD5.B9D02BBEAEA147280DF01297C6133A0B] - 17-01-15 - 19:06:11 ---A- . (...) -- C:\Windows\System32\2015-01-17-18-0