Encore une vacherie...

Merci beaucoup d'avoir pris ce temps de poster cette réponse si détaillée.

L'affaire a l'air complexe. J'ai tenté de suivre, point par point, je mets le rapport ici si ça ne chagrine personne. Suis curieux de voir ce qu'on en dira.

j'aimerais bien un peu plus de stabilité de mon sytème .

Merci en tous cas...


++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

~ Rapport de ZHPDiag v2015.3.5.26 - Nicolas Coolman (01/03/2015)
~ Lancé par Paul (07/03/2015 04:44:46)
~ Facebook : https://www.facebook.com/nicolascoolman1
~ Adresse du Forum https://nicolascoolman.eu
~ Traduit par Nicolas Coolman
~ Etat de la version : Version à jour.
~ Liste blanche : Désactivée par l'utilisateur
~ Elévation des Privilèges : OK
~ User Account Control (UAC): Activate by user


---\\ Navigateurs Internet
MSIE: Internet Explorer v11.0.9600.17631
MFIE: Mozilla Firefox 36.0 (Defaut)

---\\ Informations sur les produits Windows
~ Langage: Français
Windows Server License Manager Script : OK
~ Windows(R) Operating System, OEM_DM channel
Windows ID Activation : OK
~ Windows Partial Key : 9WXVT
Windows License : OK
~ Windows Remaining Initializations Number : 1000
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
Windows 8.1, 64-bit (Build 9600)

---\\ Logiciels de protection du système
Malwarebytes Anti-Malware version 2.0.4.1028
Windows Defender W8 (Activate)

---\\ Logiciels d'optimisation du système

---\\ Logiciels de partage PeerToPeer

---\\ Surveillance de Logiciels
Adobe Flash Player 16 NPAPI
Adobe Reader X

---\\ Informations sur le système
~ Processor: Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 7891 MB (65% free)
System Restore: Activé (Enable)
System drive C: has 315 GB (71%) free of 440 GB

---\\ Mode de connexion au système
~ Computer Name: KOMPOSITOR
~ User Name: Paul
~ All Users Names: UpdatusUser, Paul, HomeGroupUser$, Administrateur,
~ Unselected Option: None
Logged in as Administrator

---\\ Variables d'environnement
~ System Unit : C:\
~ %AppZHP% : C:\Users\Paul\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Paul\AppData\Roaming\
~ %Desktop% : C:\Users\Paul\Desktop\
~ %Favorites% : C:\Users\Paul\Favorites\
~ %LocalAppData% : C:\Users\Paul\AppData\Local\
~ %StartMenu% : C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\

---\\ Enumération des unités disques
C: Hard drive, Flash drive, Thumb drive (Free 315 Go of 440 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Not Inserted)
G: Hard drive, Flash drive, Thumb drive (Free 258 Go of 931 Go)



---\\ Etat du Centre de Sécurité Windows
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK
~ Security Center: 41 Scanned in 00mn 00s



---\\ Recherche particulière de fichiers génériques
[MD5.85D47EB257B06094F052E0C8AEFA3BEE] - (.Microsoft Corporation - Explorateur Windows.) (.21/11/2014 - 00:19:08.) -- C:\Windows\Explorer.exe [2501368]
[MD5.A570A64292214C43E0BA50E6A72A6380] - (.Microsoft Corporation - Application de démarrage de Windows.) (.21/11/2014 - 00:18:00.) -- C:\Windows\System32\Wininit.exe [145920]
[MD5.9DFE41A69DF70AAB75CB5BA8C1109EA2] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.12/01/2015 - 02:27:32.) -- C:\Windows\System32\wininet.dll [2358272]
[MD5.EC498BAE1F0D3E0E401C963F8D76C437] - (.Microsoft Corporation - Application d'ouverture de session Windows.) (.21/11/2014 - 00:18:37.) -- C:\Windows\System32\Winlogon.exe [572416]
[MD5.AFCAB4DC692CCE37E283B00E2D7B438F] - (.Microsoft Corporation - Bibliothèque de licences.) (.20/11/2014 - 23:55:08.) -- C:\Windows\System32\sppcomapi.dll [447488]
[MD5.374E27295F0A9DCAA8FC96370F9BEEA5] - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) (.21/11/2014 - 00:17:59.) -- C:\Windows\system32\Drivers\AFD.sys [563200]
[MD5.74B14192CF79A72F7536B27CB8814FBD] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.22/08/2013 - 13:43:41.) -- C:\Windows\system32\Drivers\atapi.sys [26464]
[MD5.2FA6510E33F7DEFEC03658B74101A9B9] - (.Microsoft Corporation - CD-ROM File System Driver.) (.22/08/2013 - 12:40:15.) -- C:\Windows\system32\Drivers\Cdfs.sys [88576]
[MD5.C6796EA22B513E3457514D92DCDB1A3D] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.22/08/2013 - 09:46:35.) -- C:\Windows\system32\Drivers\Cdrom.sys [164352]
[MD5.A03F362C5557E238CBFA914689C77248] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.21/11/2014 - 00:57:06.) -- C:\Windows\system32\Drivers\DfsC.sys [134144]
[MD5.D4B7ED39C7900384D9E5C1283F1E7926] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.21/11/2014 - 00:17:56.) -- C:\Windows\system32\Drivers\HDAudBus.sys [76800]
[MD5.D887446F3F6051C60C26F4FD1FC8D43F] - (.Microsoft Corporation - Pilote de port i8042.) (.21/11/2014 - 00:17:55.) -- C:\Windows\system32\Drivers\i8042prt.sys [107520]
[MD5.B7342B3C58E91107F6E946A93D9D4EFD] - (.Microsoft Corporation - IP Network Address Translator.) (.20/11/2014 - 23:55:10.) -- C:\Windows\system32\Drivers\IpNat.sys [142848]
[MD5.31233271EDE50D1BBB220F78AFA60486] - (.Microsoft Corporation - Minirdr SMB Windows NT.) (.21/11/2014 - 00:18:02.) -- C:\Windows\system32\Drivers\MRxSmb.sys [405504]
[MD5.0217532E19A748F0E5D569307363D5FD] - (.Microsoft Corporation - MBT Transport driver.) (.22/08/2013 - 12:37:02.) -- C:\Windows\system32\Drivers\netBT.sys [282624]
[MD5.7F68063A5A0461E02BC860CE0E6BFDDC] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.21/11/2014 - 00:18:00.) -- C:\Windows\system32\Drivers\ntfs.sys [2025792]
[MD5.764B1121867B2D9B31C491668AC72B2B] - (.Microsoft Corporation - Pilote de port parallèle.) (.22/08/2013 - 12:40:02.) -- C:\Windows\system32\Drivers\Parport.sys [94208]
[MD5.BBB6272B7F46C4640A8CDB8A70C3450F] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.22/08/2013 - 12:35:51.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [120832]
[MD5.680C1DAE268B6FB67FA21B389A8B79EF] - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RDP.) (.20/11/2014 - 23:27:21.) -- C:\Windows\system32\Drivers\rdpdr.sys [195584]
[MD5.FFF28F9F6823EB1756C60F1649560BBF] - (.Microsoft Corporation - TDI Translation Driver.) (.22/08/2013 - 14:25:35.) -- C:\Windows\system32\Drivers\tdx.sys [107520]
[MD5.64CA2B4A49A8EAF495E435623ECCE7DB] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.21/11/2014 - 00:17:55.) -- C:\Windows\system32\Drivers\volsnap.sys [310080]
~ Generic Processes: Scanned in 00mn 00s



---\\ Etat des fichiers cachés (Caché/Total)
~ Mes images (My Pictures) : 2/749
~ Mes musiques (My Musics) : 1/195
~ Mes Favoris (My Favorites) : 1/3
~ Mes Documents (My Documents) : 1/1040
~ Mon Bureau (My Desktop) : 1/90
~ Menu demarrer (Programs) : 1/29
~ Hidden Files: Scanned in 00mn 00s



---\\ Processus lancés
[MD5.D18D8FED81341DF7AB39CFE0D1E3A583] - (.Apple Inc. - SyncServer.exe.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe [60744] [PID.4532]
[MD5.E8A6287EFE79A48228C3D1A836E31A93] - (.Stardock Software, Inc - ModernMix.) -- C:\Program Files (x86)\Stardock\ModernMix\MMIX_32.exe [1094992] [PID.3724]
[MD5.C2D7DAF2EA5CC3D2EE91E5E5F47BC8B5] - (.Microsoft® Corporation - Microsoft® Works Data Store.) -- C:\Program Files (x86)\Microsoft Works\WkDStore.exe [86016] [PID.4192]
[MD5.A6D3940CE894FA561EFE1A159B46FB74] - (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe [376944] [PID.3188]
[MD5.B97F8B8E7BC02927D38E867774CD2406] - (.Mozilla Corporation - Plugin Container for Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe [264816] [PID.1608]
[MD5.4E8288547D53DB9555067DE7FDCCB127] - (.Adobe Systems, Inc. - Adobe Flash Player 16.0 r0.) -- C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_16_0_0_305.exe [1880752] [PID.868]
[MD5.3C6D8B1D5DB146DDB0F651E247AAE2D2] - (.Microsoft Corporation - Microsoft Word.) -- C:\Program Files (x86)\Microsoft Office\Office10\WINWORD.exe [10586440] [PID.2412]
[MD5.CC05C14EEFF5E7813A49718BA88E59B0] - (.Microsoft Corporation - COM Surrogate.) -- C:\WINDOWS\SysWOW64\DllHost.exe [17216] [PID.5468]
[MD5.35F8A4C2ED66BDDC29C961419DEF147D] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8184320] [PID.3404]
~ Processes Running: Scanned in 00mn 00s



---\\ Mozilla Firefox, Plugins,Demarrage,Recherche,Extensions (P2,M0,M1,M2,M3)
C:\Users\Paul\AppData\Roaming\Mozilla\Firefox\Profiles\vut2ehtq.default\prefs.js
M0 - MFSP: prefs.js [Paul - vut2ehtq.default] https://www.google.fr/?gws_rd=ssl
M2 - MFEP: Extension [Paul - vut2ehtq.default] {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi =>.Adblock Plus Extension Mozilla Firefox
M2 - MFEP: Extension [Paul - vut2ehtq.default] {DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi
M2 - MFEP: Extension [Paul - vut2ehtq.default] {e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (...) -- C:\WINDOWS\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.3] - (.VideoLAN - VLC media player Web Plugin 2.2.0.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
P2 - FPN: [HKLM] [@videolan.org/vlc,version=2.1.5] - (.VideoLAN - VLC media player Web Plugin 2.2.0.) -- C:\Program Files\VideoLAN\VLC\npvlc.dll =>.VideoLAN
~ Firefox Browser: 7 Scanned in 00mn 00s



---\\ Internet Explorer, Démarrage,Recherche,URLSearchHook, Phishing (R0,R1,R3,R4)
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?cobrand=samsung13.msn.com&ocid=SMSDHP&pc=MASMJS
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R3 - URLSearchHook: Microsoft Url Search Hook [64Bits] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.9600.17496 (winblue_r5.141121-1500)) -- C:\Windows\SysWOW64\ieframe.dll
~ IE Browser: 16 Scanned in 00mn 00s



---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = no key
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s



---\\ Analyse des lignes F0, F1, F2, F3 - IniFiles, Autoloading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s



---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (21)
~ Hosts File: Scanned in 00mn 00s



---\\ Browser Helper Objects de navigateur (O2)
O2 - BHO: AcroIEHelperStub [64Bits] - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} . (.Adobe Systems Incorporated - Adobe PDF Helper for Internet Explorer.) -- C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IESpeakDoc [64Bits] - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} Clé orpheline
~ BHO: 2 Scanned in 00mn 00s



---\\ Applications lancées au démarrage du système (O4)
O4 - HKLM\..\Run: [IgfxTray] . (.Intel Corporation - igfxTray Module.) -- C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] . (.Intel Corporation - hkcmd Module.) -- C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] . (.Intel Corporation - persistence Module.) -- C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RtHDVCpl] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [ETDCtrl] C:\Program Files (x86)\Elantech\ETDCtrl.exe (.not file.)
O4 - HKLM\..\Run: [BtTray] . (.Qualcomm Atheros - BtTray.) -- C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
O4 - HKLM\..\Run: [BtvStack] . (.Qualcomm Atheros Commnucations - Extension Core.) -- C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
O4 - HKLM\..\Run: [Fences] . (.Stardock Corporation - Fences Settings.) -- C:\Program Files (x86)\Stardock\Fences\Fences.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe Reader Speed Launcher] . (.Adobe Systems Incorporated - Adobe Acrobat SpeedLauncher.) -- C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe
O4 - HKLM\..\Wow6432Node\Run: [Adobe ARM] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe =>.Adobe Systems Incorporated
O4 - HKLM\..\Wow6432Node\Run: [Intel AppUp(SM) center] . (.Intel Corporation - Intel Services Manager.) -- C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe
O4 - HKLM\..\Wow6432Node\Run: [CLMLServer_For_P2G8] . (.CyberLink - CyberLink MediaLibray Service.) -- C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
O4 - HKLM\..\Wow6432Node\Run: [CLVirtualDrive] . (.CyberLink Corp. - CyberLink Virtual Drive.) -- C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe
O4 - HKLM\..\Wow6432Node\Run: [RemoteControl10] . (.CyberLink Corp. - PowerDVD RC Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
O4 - HKLM\..\Wow6432Node\Run: [PWRISOVM.EXE] . (.Power Software Ltd - PowerISO Virtual Drive Manager.) -- C:\Program Files\PowerISO\PWRISOVM.exe
O4 - HKLM\..\Wow6432Node\Run: [QuickTime Task] . (.Apple Inc. - QuickTime Task.) -- C:\Program Files (x86)\QuickTime\QTTask.exe
O4 - HKUS\S-1-5-21-3777642976-2438380877-1723110391-1001\..\RunOnce: [WAB Migrate] . (.Microsoft Corporation - Windows Contacts.) -- C:\Program Files (x86)\Windows Mail\wab.exe =>.Microsoft Corporation
~ Application: Scanned in 00mn 00s



---\\ Invisibilité de l'icône d'options IE dans le panneau de Configuration (O5)
O5 - control.ini: [HKLM\..\Control Panel] inetcpl.cpl=no
~ IE Control Panel: 1 Scanned in 00mn 00s



---\\ Boutons situés sur la barre d'outils principale d'Internet Explorer (O9)
O9 - Extra button: Send by Bluetooth to [64Bits] - {7815BE26-237D-41A8-A98F-F7BD75F71086} -- Clé orpheline
~ IE Extra Buttons: Scanned in 00mn 00s



---\\ Winsock hijacker (Layered Service Provider) (O10)
O10 - WLSP:\000000000001\Winsock LSP File . (.Microsoft Corporation - Fournisseur Shim d'affectation de noms de messagerie.) -- C:\WINDOWS\system32\napinsp.dll
O10 - WLSP:\000000000002\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll
O10 - WLSP:\000000000003\Winsock LSP File . (.Microsoft Corporation - Fournisseur d'espace de noms PNRP.) -- C:\WINDOWS\system32\pnrpnsp.dll
O10 - WLSP:\000000000004\Winsock LSP File . (.Microsoft Corporation - Network Location Awareness 2.) -- C:\WINDOWS\system32\NLAapi.dll
O10 - WLSP:\000000000005\Winsock LSP File . (.Microsoft Corporation - Fournisseur de service Sockets 2.0 de Microsoft Windows.) -- C:\WINDOWS\system32\mswsock.dll =>.Microsoft Corporation
O10 - WLSP:\000000000006\Winsock LSP File . (.Microsoft Corporation - LDAP RnR Provider DLL.) -- C:\WINDOWS\system32\winrnr.dll
O10 - WLSP:\000000000007\Winsock LSP File . (.Microsoft Corporation - Windows Sockets Helper DLL.) -- C:\WINDOWS\system32\wshbth.dll
O10 - WLSP:\000000000008\Winsock LSP File . (.Apple Inc. - Bonjour Namespace Provider.) -- C:\Program Files (x86)\Bonjour\mdnsNSP.dll
~ Winsock: 8 Scanned in 00mn 00s



---\\ Modification Domaine/Adresses DNS (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{656024BD-C83F-48C1-AA0C-E2E8D281650A}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CCS\Services\Tcpip\..\{9CEA29D9-F836-484A-A8E2-A7F7A05470D4}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{656024BD-C83F-48C1-AA0C-E2E8D281650A}: DhcpNameServer = 192.168.0.254
O17 - HKLM\System\CS1\Services\Tcpip\..\{9CEA29D9-F836-484A-A8E2-A7F7A05470D4}: DhcpNameServer = 192.168.1.1 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 192.168.1.1
~ Domain: Scanned in 00mn 00s



---\\ Protocole additionnel (O18)
O18 - Handler: wlpg [64Bits] - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} . (...) --
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation
~ Protocole Additionnel: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - Winlogon Notify: igfxcui . (.Intel Corporation - igfxdev Module.) -- C:\Windows\System32\igfxdev.dll
~ Winlogon: Scanned in 00mn 00s



---\\ Valeur de Registre AppInit_DLLs et sous-clés Winlogon Notify (autorun) (O20)
O20 - AppInit_DLLs: . (...) - C:\windows\system32\nvinitx.dll (.not file.)
~ AppInit DLL: Scanned in 00mn 00s



---\\ Clé de Registre autorun ShellServiceObjectDelayLoad (SSO/SSODL) (O21)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
~ SSODL: 1 Scanned in 00mn 00s



---\\ Clé de Registre autorun SharedTaskScheduler (STS) (O22)
O22 - SharedTaskScheduler: (no name) [64Bits] - {1984DD45-52CF-49cd-AB77-18F378FEA264} - (.not file.)
~ STS/SSO: Scanned in 00mn 00s



---\\ Liste des services NT non Microsoft et non désactivés (O23)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.Apple Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc (AtherosSvc) . (.Qualcomm Atheros Commnucations - AdminService Application.) - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Service.) - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Stardock Decor8 (Decor8) . (.Stardock Software, Inc - Stardock Decor8 Service.) - C:\Program Files (x86)\Stardock\Decor8\Decor8Srv.exe
O23 - Service: Stardock DeskScapes 8 (DeskScapes8) . (.Stardock Software, Inc - Stardock DeskScapes 8 Service.) - C:\Program Files (x86)\Stardock\DeskScapes8\ds8srv.exe
O23 - Service: Easy Launcher (Easy Launcher) . (.Samsung Electronics CO., LTD. - EasyLauncher.) - C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
O23 - Service: Intel(R) Capability Licensing Service Interface (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation - Intel(R) Capability Licensing Service Inter.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation - Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: Stardock Launch8 (Launch8) . (.Stardock Software, Inc - Stardock Launch8 Service.) - C:\Program Files (x86)\Stardock\Launch8\Launch8Srv.exe
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS) . (.Intel Corporation - Local Manageability Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Stardock ModernMix (ModernMix) . (.Stardock Software, Inc - Stardock ModernMix Service.) - C:\Program Files (x86)\Stardock\ModernMix\MMixSrv.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NVIDIA Driver Helper Service, Version 305.4.) - C:\windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) . (.NVIDIA Corporation - NVIDIA Settings Update Manager.) - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Stardock ShadowFX (ShadowFX) . (.Stardock Software, Inc - Stardock ShadowFX Service.) - C:\Program Files (x86)\Stardock\ShadowFX\ShadowFXSrv.exe
O23 - Service: Stardock Start8 (Start8) . (.Stardock Software, Inc - Stardock Start8 Service.) - C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
O23 - Service: Intel(R) Management and Security Application User Notificat (UNS) . (.Intel Corporation - User Notification Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Stardock WindowBlinds (WindowBlinds) . (.Stardock Corporation - WindowBlinds Service. Part of Stardock Win.) - C:\Program Files (x86)\Stardock\WindowBlinds\wbsrv.exe
O23 - Service: Stardock WindowFX (WindowFX) . (.Stardock Corporation - WindowFX Service. Part of Stardock WindowF.) - C:\Program Files (x86)\Stardock\WindowFX\WindowFXSrv.exe
O23 - Service: ZAtheros Bt&Wlan Coex Agent (ZAtheros Bt&Wlan Coex Agent) . (.Atheros - Atheros Coex Service Application.) - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
~ Services: 21 Scanned in 00mn 19s



---\\ Enumération Active Desktop & MHTML Editor (O24)
O24 - Default MHTML Editor: Last - .(...) - (.not file.)
~ Desktop Component: 4 Scanned in 00mn 00s



---\\ Enumère les données de BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
~ BEX: 1 Scanned in 00mn 00s



---\\ Tâches planifiées en automatique (O39)
[MD5.080255CDCB878813B481B8C348D47D8E] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [267440]
[MD5.70969A3D778B58918770629B3EACAB42] [APT] [advRecovery] (.SEC.) -- C:\Program Files\Samsung\Recovery\WCScheduler.exe [3466360]
[MD5.020873476E239F0A3B4F118E3590BB31] [APT] [ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d] (.Intel Corporation.) -- C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [233824]
[MD5.020873476E239F0A3B4F118E3590BB31] [APT] [ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon] (.Intel Corporation.) -- C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [233824]
[MD5.E7FCF0063DDB7D8F95DAD9D73270FE28] [APT] [Object Desktop-S-1-5-21-3777642976-2438380877-1723110391-1002] (.Stardock.) -- C:\Users\Paul\AppData\Local\Stardock\ObjectDesktop\ObjectDesktopManager.exe [4604440]
[MD5.FDB491D7E5F9DAD4B05AA4ED01602CC1] [APT] [Settings] (.Samsung Electronics CO., LTD..) -- C:\Program Files (x86)\Samsung\Settings\sSettings.exe [2623096]
[MD5.AD660F72B20173C1156D44DF4B069049] [APT] [SWUpdateAgent] (.Samsung Electronics CO., LTD..) -- C:\Program Files (x86)\Samsung\SW Update\SWMAgent.exe [2790008]
[MD5.34EBD4FF6A24D86BB4716D6AFCC1A89B] [APT] [AppleSoftwareUpdate] (.Apple Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [561984]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002]
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
~ Scheduled Task: 9 Scanned in 00mn 06s



---\\ Composants installés (ActiveSetup Installed Components) (O40)
O40 - ASIC: Microsoft Windows Media Player [64Bits] - >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\SysWOW64\wmpdxm.dll =>.Microsoft Corporation
O40 - ASIC: Themes Setup [64Bits] - {2C7339CF-2B09-4501-B3F3-F3508C9228ED} . (.Microsoft Corporation - API Windows Theme.) -- C:\Windows\System32\themeui.dll
O40 - ASIC: Microsoft Windows [64Bits] - {44BBA840-CC51-11CF-AAFA-00AA00B6015C} . (.Microsoft Corporation - Windows Mail.) -- C:\Program Files (x86)\Windows Mail\WinMail.exe =>.Microsoft Corporation
O40 - ASIC: Browsing Enhancements [64Bits] - {630b1da0-b465-11d1-9948-00c04f98bbc9} . (.Microsoft Corporation - Extension Shell dossier FTP Microsoft Internet Explorer..) -- C:\Windows\System32\msieftp.dll
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Ressources du Lecteur Windows Media.) -- C:\Windows\System32\wmploc.dll =>.Microsoft Corporation
O40 - ASIC: Windows Desktop Update [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4340} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Explorer par utilisateur.) -- C:\Windows\System32\ie4uinit.exe
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll
~ Active Setup: 9 Scanned in 00mn 00s



---\\ Pilotes lancés au démarrage du système (O41)
O41 - Driver: C:\Windows\System32\drivers\afd.sys (AFD) . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) - C:\Windows\system32\drivers\afd.sys
O41 - Driver: C:\Windows\System32\drivers\ahcache.sys (ahcache) . (.Microsoft Corporation - Application Compatibility Cache.) - C:\Windows\System32\DRIVERS\ahcache.sys
O41 - Driver: (BasicDisplay) . (.Microsoft Corporation - Microsoft Basic Display Driver.) - C:\Windows\system32\drivers\BasicDisplay.sys
O41 - Driver: (BasicRender) . (.Microsoft Corporation - Microsoft Basic Render Driver.) - C:\Windows\system32\drivers\BasicRender.sys
O41 - Driver: cdrom.inf (cdrom) . (.Microsoft Corporation - SCSI CD-ROM Driver.) - C:\Windows\system32\drivers\cdrom.sys
O41 - Driver: (CLVirtualDrive) . (.CyberLink - It is a virtual device driver which could c.) - C:\Windows\system32\DRIVERS\CLVirtualDrive.sys
O41 - Driver: C:\Windows\System32\drivers\dam.sys (dam) . (.Microsoft Corporation - DAM Kernel Driver.) - C:\Windows\System32\drivers\dam.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (Dfsc) . (.Microsoft Corporation - DFS Namespace Client Driver.) - C:\Windows\System32\Drivers\dfsc.sys
O41 - Driver: mssmbios.inf (mssmbios) . (.Microsoft Corporation - System Management BIOS Driver.) - C:\Windows\system32\drivers\mssmbios.sys
O41 - Driver: netnb.inf (NetBIOS) . (.Microsoft Corporation - NetBIOS interface driver.) - C:\Windows\System32\DRIVERS\netbios.sys
O41 - Driver: C:\Windows\System32\drivers\netbt.sys (NetBT) . (.Microsoft Corporation - MBT Transport driver.) - C:\Windows\System32\DRIVERS\netbt.sys
O41 - Driver: npsvctrig.inf (npsvctrig) . (.Microsoft Corporation - Named pipe service triggers.) - C:\Windows\system32\drivers\npsvctrig.sys
O41 - Driver: C:\Windows\System32\drivers\nsiproxy.sys (nsiproxy) . (.Microsoft Corporation - NSI Proxy.) - C:\Windows\System32\drivers\nsiproxy.sys
O41 - Driver: C:\Windows\System32\drivers\pacer.sys (Psched) . (.Microsoft Corporation - Planificateur de paquets QoS.) - C:\Windows\system32\DRIVERS\pacer.sys
O41 - Driver: C:\Windows\System32\wkssvc.dll (rdbss) . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) - C:\Windows\System32\DRIVERS\rdbss.sys
O41 - Driver: C:\Windows\System32\tcpipcfg.dll (tdx) . (.Microsoft Corporation - TDI Translation Driver.) - C:\Windows\system32\DRIVERS\tdx.sys
O41 - Driver: C:\Windows\System32\drivers\vwififlt.sys (vwififlt) . (.Microsoft Corporation - Virtual WiFi Filter Driver.) - C:\Windows\system32\DRIVERS\vwififlt.sys
~ Drivers: 34 Scanned in 00mn 00s



---\\ Logiciels installés (O42)
O42 - Logiciel: ACID Pro 7.0 - (.Sony.) [HKLM][64Bits] -- {F7FD5E5E-3F0C-4931-AA1B-EAB838BC02DB}
O42 - Logiciel: ASIO4ALL - (.Michael Tippach.) [HKLM][64Bits] -- ASIO4ALL
O42 - Logiciel: Adobe Flash Player 16 NPAPI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- Adobe Flash Player NPAPI
O42 - Logiciel: Adobe Photoshop CS3 - (...) [HKLM][64Bits] -- Adobe Photoshop CS3 =>.Adobe Systems Incorporated
O42 - Logiciel: Adobe Reader X (10.1.3) MUI - (.Adobe Systems Incorporated.) [HKLM][64Bits] -- {AC76BA86-7AD7-FFFF-7B44-AA0000000001}
O42 - Logiciel: Allshare Play Link - (.Samsung.) [HKLM][64Bits] -- {91786428-D4AA-476D-8AF9-A63FFAC2901F}
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bits] -- {447CDCE5-F555-429B-BFA6-642C3C6D684F}
O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bits] -- {0DF7096B-715A-4233-8633-C7A16ED6D616}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {C4123106-B685-48E6-B9BD-E4F911841EB4}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} =>.Apple Inc
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}
O42 - Logiciel: Complément Microsoft Word pour Microsoft Works Suite - (.Microsoft Corporation.) [HKLM][64Bits] -- {7054ED85-498D-4D20-906F-14646AEC5581}
O42 - Logiciel: CyberLink Power2Go 8 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}
O42 - Logiciel: CyberLink Power2Go 8 - (.CyberLink Corp..) [HKLM][64Bits] -- {2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}
O42 - Logiciel: CyberLink PowerDVD 10 - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}
O42 - Logiciel: CyberLink PowerDVD 10 - (.CyberLink Corp..) [HKLM][64Bits] -- {DEC235ED-58A4-4517-A278-C41E8DAEAB3B}
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM][64Bits] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF}
O42 - Logiciel: E-POP - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}
O42 - Logiciel: ETDWare PS/2-X64 11.7.2.1_WHQL - (.ELAN Microelectronic Corp..) [HKLM][64Bits] -- Elantech
O42 - Logiciel: EZXDfh - (.Toontrack.) [HKLM][64Bits] -- {DB1299AF-9EE0-422B-959E-F4171B2AE0F7}
O42 - Logiciel: EZXPercussion - (.Toontrack.) [HKLM][64Bits] -- {2CC4BC82-41CF-43D3-B533-7283AA8BB86F}
O42 - Logiciel: EZdrummer 2 32-bit - (.Toontrack.) [HKLM][64Bits] -- {7E36EB5B-0739-4DA7-BF26-E63DD2BECA76}
O42 - Logiciel: EZdrummer 2 32-bit Update - (.Toontrack.) [HKLM][64Bits] -- {CDE1FC7E-3E9A-48BA-BBB9-65C2026CA0A2}
O42 - Logiciel: EZdrummer 2 64-bit - (.Toontrack.) [HKLM][64Bits] -- {B9217824-0EBE-49C7-98A0-A76CC46BBB7D}
O42 - Logiciel: EZdrummer 2 64-bit Update - (.Toontrack.) [HKLM][64Bits] -- {11CC8964-9CB0-46E6-9218-CD39ED4A554D}
O42 - Logiciel: Easy File Share - (.Samsung Electronics CO.,LTD..) [HKLM][64Bits] -- {A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}
O42 - Logiciel: Fotogalerie - (.Microsoft Corporation.) [HKLM][64Bits] -- {B19E03EA-067C-412F-A81E-271720E601AB}
O42 - Logiciel: Galerie de photos - (.Microsoft Corporation.) [HKLM][64Bits] -- {FE8DFDD0-A543-4A83-B7A9-C411138194D5}
O42 - Logiciel: Help Desk - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {C85A891D-7AB4-46AE-84F0-B0C3FAC82280}
O42 - Logiciel: Intel AppUp(SM) center - (.Intel.) [HKLM][64Bits] -- Intel AppUp(SM) center 33070
O42 - Logiciel: Intel(R) Manageability Engine Firmware Recovery Agent - (.Intel Corporation.) [HKLM][64Bits] -- {A6C48A9F-694A-4234-B3AA-62590B668927}
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [HKLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bits] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel(R) Rapid Storage Technology - (.Intel Corporation.) [HKLM][64Bits] -- {3E29EE6C-963A-4aae-86C1-DC237C4A49FC}
O42 - Logiciel: Intel(R) SDK for OpenCL - CPU Only Runtime Package - (.Intel Corporation.) [HKLM][64Bits] -- {FCB3772C-B7D0-4933-B1A9-3707EBACC573}
O42 - Logiciel: Intel® Trusted Connect Service Client - (.Intel Corporation.) [HKLM][64Bits] -- {F4404AFD-2EF3-40C1-8C09-29E5F3B6972B}
O42 - Logiciel: KORG Legacy Collection - LegacyCell - (.KORG Inc..) [HKLM][64Bits] -- {4F3D8320-002D-4A0E-A45B-38EAFB2494CA}
O42 - Logiciel: KORG Legacy Collection - MDE-X - (.KORG Inc..) [HKLM][64Bits] -- {F4D6C510-369F-4AB5-9CCF-4B29E4CB075F}
O42 - Logiciel: KORG Legacy Collection - Polysix - (.KORG Inc..) [HKLM][64Bits] -- {D3AD748F-85C6-423D-B95F-268A0E1460A7}
O42 - Logiciel: KORG Legacy Collection - WAVESTATION - (.KORG Inc..) [HKLM][64Bits] -- {6C2C56CC-9075-491D-9B29-55147B67B892}
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM][64Bits] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}
O42 - Logiciel: MSVCRT Redists - (.Sony Creative Software Inc..) [HKLM][64Bits] -- {E9DAF44F-1311-11E4-8062-001E4FC0A7E5}
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM][64Bits] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}
O42 - Logiciel: MSVCRT110_amd64 - (.Microsoft.) [HKLM][64Bits] -- {F842F8B0-6942-4930-821F-543E976B2C66}
O42 - Logiciel: Malwarebytes Anti-Malware version 2.0.4.1028 - (.Malwarebytes Corporation.) [HKLM][64Bits] -- Malwarebytes Anti-Malware_is1
O42 - Logiciel: Microsoft AutoRoute v11.0 - (.Microsoft Corporation.) [HKLM][64Bits] -- {8704D51E-25B7-4F23-81E7-AA4F54790220}
O42 - Logiciel: Microsoft Word 2002 - (.Microsoft Corporation.) [HKLM][64Bits] -- {911B040C-6000-11D3-8CFE-0050048383C9}
O42 - Logiciel: Microsoft Works - (.Microsoft Corporation.) [HKLM][64Bits] -- {E6BAE954-487E-488B-BC4E-2E69E54E8117}
O42 - Logiciel: Mozilla Firefox 36.0 (x86 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 36.0 (x86 fr)
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService
O42 - Logiciel: NVIDIA Graphics Driver 305.46 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}
O42 - Logiciel: NVIDIA PhysX System Software 9.12.0613 - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: Native Instruments Absynth 5 - (.Native Instruments.) [HKLM][64Bits] -- Native Instruments Absynth 5
O42 - Logiciel: Native Instruments B4 II - (...) [HKLM][64Bits] -- Native Instruments B4 II
O42 - Logiciel: Native Instruments FM8 - (.Native Instruments.) [HKLM][64Bits] -- Native Instruments FM8
O42 - Logiciel: Native Instruments Kontakt 5 - (.Native Instruments.) [HKLM][64Bits] -- Native Instruments Kontakt 5
O42 - Logiciel: Noise Reduction Plug-In 2.0 - (.Sony.) [HKLM][64Bits] -- {36DF4580-D1B3-11E3-A23E-F04DA23A5C58}
O42 - Logiciel: PowerISO - (.Power Software Ltd.) [HKLM][64Bits] -- PowerISO
O42 - Logiciel: Qualcomm Atheros Bluetooth Suite (64) - (.Qualcomm Atheros Communications.) [HKLM][64Bits] -- {A84A4FB1-D703-48DB-89E0-68B6499D2801}
O42 - Logiciel: Qualcomm Atheros Client Installation Program - (.Qualcomm Atheros.) [HKLM][64Bits] -- {28006915-2739-4EBE-B5E8-49B25D32EB33}
O42 - Logiciel: QuickTime 7 - (.Apple Inc..) [HKLM][64Bits] -- {3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}
O42 - Logiciel: REAPER (x64) - (...) [HKLM][64Bits] -- REAPER
O42 - Logiciel: Raccolta foto - (.Microsoft Corporation.) [HKLM][64Bits] -- {86CAC8DE-288A-410D-A4A4-0190060E69AE}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor Corp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Recovery - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {145DE957-0679-4A2A-BB5C-1D3E9808FAB2}
O42 - Logiciel: S Agent - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {969B5BFB-094D-4D96-AC0C-C1A2675DB583}
O42 - Logiciel: SW Update - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {ADC15B86-A3F8-4DE3-9E0A-047FF12D6941}
O42 - Logiciel: Settings - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {52E5DE60-C96B-42CC-9A37-FE04725940AE}
O42 - Logiciel: Sound Forge Pro 11.0 - (.Sony.) [HKLM][64Bits] -- {FE1A7F80-1348-11E4-8C79-F04DA23A5C58}
O42 - Logiciel: Stardock Decor8 - (.Stardock Software, Inc..) [HKLM][64Bits] -- Stardock Decor8
O42 - Logiciel: Stardock DeskScapes 8 - (.Stardock Software, Inc..) [HKLM][64Bits] -- Stardock DeskScapes 8
O42 - Logiciel: Stardock Fences 2 - (.Stardock Software, Inc..) [HKLM][64Bits] -- Stardock Fences 2
O42 - Logiciel: Stardock IconDeveloper - (.Stardock Software, Inc..) [HKLM][64Bits] -- IconDeveloper
O42 - Logiciel: Stardock IconPackager - (.Stardock Software, Inc..) [HKLM][64Bits] -- IconPackager
O42 - Logiciel: Stardock Launch8 - (.Stardock Software, Inc..) [HKLM][64Bits] -- Stardock Launch8
O42 - Logiciel: Stardock ModernMix - (.Stardock Software, Inc..) [HKLM][64Bits] -- Stardock ModernMix
O42 - Logiciel: Stardock Object Desktop Manager - (.Stardock Software, Inc..) [HKCU][64Bits] -- Object Desktop Manager
O42 - Logiciel: Stardock ShadowFX - (.Stardock Software, Inc..) [HKLM][64Bits] -- ShadowFX
O42 - Logiciel: Stardock SkinStudio - (.Stardock Software, Inc..) [HKLM][64Bits] -- SkinStudio
O42 - Logiciel: Stardock Start8 - (.Stardock Software, Inc..) [HKLM][64Bits] -- Stardock Start8
O42 - Logiciel: Stardock Theme Manager - (.Stardock Systems, Inc..) [HKLM][64Bits] -- Theme Manager
O42 - Logiciel: Stardock Tiles - (.Stardock Software, Inc..) [HKLM][64Bits] -- Tiles
O42 - Logiciel: Stardock WindowBlinds - (.Stardock Software, Inc..) [HKLM][64Bits] -- Stardock WindowBlinds
O42 - Logiciel: Stardock WindowFX - (.Stardock Software, Inc..) [HKLM][64Bits] -- WindowFX
O42 - Logiciel: Support Center - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {C178F0E8-75AF-4C21-9828-98B9BED82470}
O42 - Logiciel: Support Center FAQ - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {A847804B-9FF7-483A-AE66-4857C82A1A9E}
O42 - Logiciel: Sélecteur d'installation de Microsoft Works 2004 - (...) [HKLM][64Bits] -- Works2004Setup
O42 - Logiciel: Transcribe! 8.40 - (.Seventh String Software.) [HKLM][64Bits] -- Transcribe!_is1
O42 - Logiciel: User Guide - (.Samsung Electronics CO., LTD..) [HKLM][64Bits] -- {039EA659-E421-45C6-8913-BED5D69B5536}
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player =>.VideoLAN
O42 - Logiciel: Waves Complete V9r23 - (.Waves.) [HKLM][64Bits] -- {93000001-C561-4E32-99EB-3C5AD3683A70}
O42 - Logiciel: Windows Driver Package - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDCla - (.Samsung Electronics Co. Ltd..) [HKLM][64Bits] -- 9F04C462DAB591BDCCE784F77E4D4F1736010B92
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {D227565A-0033-40AD-89BA-653A205CDC11}
O42 - Logiciel: save2pc Standard 5.34 - (.FDRLab, Inc..) [HKLM][64Bits] -- save2pc Standard_is1
~ Logic: 68 Scanned in 00mn 00s



---\\ HKCU & HKLM Software Keys
[HKCU\Software\ASIO4ALL v2 by Wuschel]
[HKCU\Software\Adobe]
[HKCU\Software\Alien Skin]
[HKCU\Software\AppDataLow]
[HKCU\Software\Apple Computer, Inc.]
[HKCU\Software\Apple Inc.]
[HKCU\Software\Atheros]
[HKCU\Software\CDDB]
[HKCU\Software\Classes]
[HKCU\Software\Clients]
[HKCU\Software\CyberLink]
[HKCU\Software\DirectShow]
[HKCU\Software\Disktrix]
[HKCU\Software\Elantech]
[HKCU\Software\FDRLab]
[HKCU\Software\Intel]
[HKCU\Software\KORG]
[HKCU\Software\Macromedia]
[HKCU\Software\Mine]
[HKCU\Software\Mozilla]
[HKCU\Software\NVIDIA Corporation]
[HKCU\Software\Native Instruments]
[HKCU\Software\Netscape]
[HKCU\Software\Norton]
[HKCU\Software\ODBC]
[HKCU\Software\Ohm Force]
[HKCU\Software\Ordinarysoft]
[HKCU\Software\Policies]
[HKCU\Software\PowerISO]
[HKCU\Software\Realtek]
[HKCU\Software\RegisteredApplications]
[HKCU\Software\RocketDock]
[HKCU\Software\Samsung]
[HKCU\Software\Seventh String Software]
[HKCU\Software\Sony Creative Software]
[HKCU\Software\Stardock]
[HKCU\Software\Toontrack]
[HKCU\Software\Trolltech]
[HKCU\Software\Visan]
[HKCU\Software\Wow6432Node]
[HKCU\Software\ZebHelpProcess Helper]
[HKLM\Software\AGEIA Technologies]
[HKLM\Software\ASIO]
[HKLM\Software\ATI Technologies]
[HKLM\Software\Adobe]
[HKLM\Software\Alien Skin]
[HKLM\Software\Apple Computer, Inc.]
[HKLM\Software\Apple Inc.]
[HKLM\Software\Atheros]
[HKLM\Software\Classes]
[HKLM\Software\Clients]
[HKLM\Software\DTS]
[HKLM\Software\Dolby]
[HKLM\Software\GEAR Software]
[HKLM\Software\Intel]
[HKLM\Software\Khronos]
[HKLM\Software\Knowles]
[HKLM\Software\Macromedia]
[HKLM\Software\MozillaPlugins]
[HKLM\Software\Mozilla]
[HKLM\Software\NVIDIA Corporation]
[HKLM\Software\Native Instruments]
[HKLM\Software\Norton]
[HKLM\Software\ODBC]
[HKLM\Software\Ordinarysoft]
[HKLM\Software\Policies]
[HKLM\Software\Propellerhead Software]
[HKLM\Software\RTLSetup]
[HKLM\Software\Realtek]
[HKLM\Software\RegisteredApplications]
[HKLM\Software\SRS Labs]
[HKLM\Software\Samsung]
[HKLM\Software\SonicFocus]
[HKLM\Software\Stardock]
[HKLM\Software\Toontrack]
[HKLM\Software\VideoLAN]
[HKLM\Software\Waves Audio]
[HKLM\Software\Wow6432Node\AGEIA Technologies]
[HKLM\Software\Wow6432Node\ASIO]
[HKLM\Software\Wow6432Node\Adobe]
[HKLM\Software\Wow6432Node\Alien Skin]
[HKLM\Software\Wow6432Node\Apple Computer, Inc.]
[HKLM\Software\Wow6432Node\Apple Inc.]
[HKLM\Software\Wow6432Node\Atheros]
[HKLM\Software\Wow6432Node\Auslogics]
[HKLM\Software\Wow6432Node\CDDB]
[HKLM\Software\Wow6432Node\Cakewalk Music Software]
[HKLM\Software\Wow6432Node\Classes]
[HKLM\Software\Wow6432Node\Clients]
[HKLM\Software\Wow6432Node\CyberLink]
[HKLM\Software\Wow6432Node\Google]
[HKLM\Software\Wow6432Node\HighCriteria]
[HKLM\Software\Wow6432Node\InstallShield]
[HKLM\Software\Wow6432Node\Intel]
[HKLM\Software\Wow6432Node\Khronos]
[HKLM\Software\Wow6432Node\Lake]
[HKLM\Software\Wow6432Node\Macromedia]
[HKLM\Software\Wow6432Node\Malwarebytes' Anti-Malware]
[HKLM\Software\Wow6432Node\MimarSinan]
[HKLM\Software\Wow6432Node\MozillaPlugins]
[HKLM\Software\Wow6432Node\Mozilla]
[HKLM\Software\Wow6432Node\NVIDIA Corporation]
[HKLM\Software\Wow6432Node\Native Instruments]
[HKLM\Software\Wow6432Node\Norton]
[HKLM\Software\Wow6432Node\ODBC]
[HKLM\Software\Wow6432Node\Ordinarysoft]
[HKLM\Software\Wow6432Node\Policies]
[HKLM\Software\Wow6432Node\PopCap]
[HKLM\Software\Wow6432Node\Propellerhead Software]
[HKLM\Software\Wow6432Node\Qualcomm Atheros]
[HKLM\Software\Wow6432Node\Realtek Semiconductor Corp.]
[HKLM\Software\Wow6432Node\Realtek]
[HKLM\Software\Wow6432Node\RegisteredApplications]
[HKLM\Software\Wow6432Node\Samsung Electronics CO., LTD.]
[HKLM\Software\Wow6432Node\Samsung]
[HKLM\Software\Wow6432Node\Sony Creative Software]
[HKLM\Software\Wow6432Node\Sony Media Software]
[HKLM\Software\Wow6432Node\Stardock]
[HKLM\Software\Wow6432Node\SuppHelpDir]
[HKLM\Software\Wow6432Node\Toontrack]
[HKLM\Software\Wow6432Node\VST]
[HKLM\Software\Wow6432Node\Visan]
[HKLM\Software\Wow6432Node\Volatile]
[HKLM\Software\Wow6432Node\Waves]
[HKLM\Software\Wow6432Node\Wise Solutions]
[HKLM\Software\Wow6432Node\mozilla.org]
[HKLM\Software\Wow6432Node]
~ Key Software: 296 Scanned in 00mn 00s



---\\ Contenu des dossiers Programs/ProgramFiles/ProgramData/AppData (O43)
O43 - CFD: 20/01/2015 - 08:46:26 - [] ----D C:\Program Files (x86)\Adobe
O43 - CFD: 09/01/2015 - 01:49:12 - [] ----D C:\Program Files (x86)\Alien Skin
O43 - CFD: 12/01/2015 - 02:20:00 - [] ----D C:\Program Files (x86)\Apple Software Update =>.Apple Inc
O43 - CFD: 25/01/2015 - 14:46:25 - [] ----D C:\Program Files (x86)\ASIO4ALL v2
O43 - CFD: 16/01/2015 - 21:23:07 - [] ----D C:\Program Files (x86)\Bluetooth Suite
O43 - CFD: 12/01/2015 - 02:19:29 - [] ----D C:\Program Files (x86)\Bonjour
O43 - CFD: 04/02/2015 - 15:09:14 - [] ----D C:\Program Files (x86)\Common Files
O43 - CFD: 10/09/2012 - 12:56:09 - [] ----D C:\Program Files (x86)\CyberLink
O43 - CFD: 21/02/2015 - 23:51:07 - [] ----D C:\Program Files (x86)\FDRLab
O43 - CFD: 25/01/2015 - 16:33:11 - [] --H-D C:\Program Files (x86)\InstallShield Installation Information
O43 - CFD: 16/01/2015 - 20:55:38 - [] ----D C:\Program Files (x86)\Intel
O43 - CFD: 16/01/2015 - 20:37:25 - [] ----D C:\Program Files (x86)\Internet Explorer
O43 - CFD: 22/02/2015 - 00:51:04 - [] ----D C:\Program Files (x86)\iTunes
O43 - CFD: 04/02/2015 - 14:48:05 - [] ----D C:\Program Files (x86)\KORG
O43 - CFD: 11/01/2015 - 23:53:03 - [] ----D C:\Program Files (x86)\Malwarebytes Anti-Malware
O43 - CFD: 09/01/2015 - 01:07:29 - [] ----D C:\Program Files (x86)\Microsoft AutoRoute
O43 - CFD: 09/01/2015 - 00:58:43 - [] ----D C:\Program Files (x86)\Microsoft Office
O43 - CFD: 10/09/2012 - 12:59:24 - [] ----D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
O43 - CFD: 09/01/2015 - 00:59:04 - [] ----D C:\Program Files (x86)\Microsoft Visual Studio
O43 - CFD: 09/01/2015 - 01:02:12 - [] ----D C:\Program Files (x86)\Microsoft Works
O43 - CFD: 09/01/2015 - 00:48:14 - [] ----D C:\Program Files (x86)\Microsoft Works Suite 2004
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 28/02/2015 - 22:36:48 - [] ----D C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 28/02/2015 - 22:45:06 - [] ----D C:\Program Files (x86)\Mozilla Maintenance Service
O43 - CFD: 16/01/2015 - 20:30:14 - [] ----D C:\Program Files (x86)\MSBuild
O43 - CFD: 04/02/2015 - 15:16:51 - [] ----D C:\Program Files (x86)\Native Instruments
O43 - CFD: 16/01/2015 - 20:55:38 - [] ----D C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 10/09/2012 - 11:50:05 - [] ----D C:\Program Files (x86)\Qualcomm Atheros
O43 - CFD: 04/02/2015 - 10:20:29 - [] ----D C:\Program Files (x86)\QuickTime
O43 - CFD: 10/09/2012 - 12:38:33 - [] ----D C:\Program Files (x86)\Realtek
O43 - CFD: 16/01/2015 - 20:30:15 - [] ----D C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 09/01/2015 - 06:06:56 - [] ----D C:\Program Files (x86)\RocketDock
O43 - CFD: 10/09/2012 - 13:01:32 - [] ----D C:\Program Files (x86)\Samsung
O43 - CFD: 25/01/2015 - 16:19:16 - [] ----D C:\Program Files (x86)\Sony
O43 - CFD: 25/01/2015 - 16:17:54 - [] ----D C:\Program Files (x86)\Sony Setup
O43 - CFD: 11/01/2015 - 02:25:41 - [] ----D C:\Program Files (x86)\Stardock
O43 - CFD: 10/09/2012 - 12:55:02 - [] ----D C:\Program Files (x86)\Symantec
O43 - CFD: 10/09/2012 - 12:39:08 - [0] --H-D C:\Program Files (x86)\Temp
O43 - CFD: 25/01/2015 - 15:39:59 - [] ----D C:\Program Files (x86)\Toontrack
O43 - CFD: 09/01/2015 - 04:26:28 - [] ----D C:\Program Files (x86)\Toy Icon
O43 - CFD: 25/01/2015 - 16:57:29 - [] ----D C:\Program Files (x86)\Transcribe!
O43 - CFD: 04/02/2015 - 15:17:34 - [] ----D C:\Program Files (x86)\VstPlugins
O43 - CFD: 25/01/2015 - 16:33:20 - [] ----D C:\Program Files (x86)\Waves
O43 - CFD: 18/01/2015 - 06:52:28 - [] ----D C:\Program Files (x86)\Windows Defender
O43 - CFD: 10/09/2012 - 12:59:23 - [] ----D C:\Program Files (x86)\Windows Live
O43 - CFD: 21/11/2014 - 06:55:33 - [] ----D C:\Program Files (x86)\Windows Mail =>.Microsoft Corporation
O43 - CFD: 16/01/2015 - 20:55:42 - [] ----D C:\Program Files (x86)\Windows Media Player =>.Microsoft Corporation
O43 - CFD: 21/11/2014 - 06:55:33 - [] ----D C:\Program Files (x86)\Windows Multimedia Platform
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\Windows NT
O43 - CFD: 21/11/2014 - 06:55:33 - [] ----D C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 21/11/2014 - 06:55:33 - [] ----D C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 16/01/2015 - 20:55:42 - [] -SH-D C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 22/08/2013 - 16:36:30 - [] ----D C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 07/03/2015 - 04:41:35 - [] ----D C:\Program Files (x86)\ZHPDiag =>.Nicolas Coolman
O43 - CFD: 10/09/2012 - 12:52:17 - [] ----D C:\Program Files (x86)\Common Files\Adobe
O43 - CFD: 05/02/2015 - 10:13:51 - [] ----D C:\Program Files (x86)\Common Files\Apple
O43 - CFD: 10/09/2012 - 12:40:44 - [] ----D C:\Program Files (x86)\Common Files\Atheros
O43 - CFD: 25/01/2015 - 15:40:01 - [] ----D C:\Program Files (x86)\Common Files\Avid
O43 - CFD: 10/09/2012 - 12:55:37 - [] ----D C:\Program Files (x86)\Common Files\CyberLink
O43 - CFD: 09/01/2015 - 00:59:04 - [] ----D C:\Program Files (x86)\Common Files\Designer
O43 - CFD: 25/01/2015 - 15:40:09 - [] ----D C:\Program Files (x86)\Common Files\DigiDesign
O43 - CFD: 10/09/2012 - 12:38:30 - [] ----D C:\Program Files (x86)\Common Files\InstallShield
O43 - CFD: 10/09/2012 - 12:36:26 - [] ----D C:\Program Files (x86)\Common Files\Intel
O43 - CFD: 04/02/2015 - 14:54:30 - [] ----D C:\Program Files (x86)\Common Files\KORG
O43 - CFD: 16/01/2015 - 20:55:37 - [] ----D C:\Program Files (x86)\Common Files\Microsoft Shared
O43 - CFD: 04/02/2015 - 15:09:14 - [] ----D C:\Program Files (x86)\Common Files\Native Instruments
O43 - CFD: 10/09/2012 - 12:34:33 - [] ----D C:\Program Files (x86)\Common Files\postureAgent
O43 - CFD: 25/01/2015 - 16:33:19 - [] ----D C:\Program Files (x86)\Common Files\Propellerhead Software
O43 - CFD: 10/09/2012 - 12:42:57 - [] ----D C:\Program Files (x86)\Common Files\QCA_Bluetooth
O43 - CFD: 22/08/2013 - 16:36:33 - [] ----D C:\Program Files (x86)\Common Files\Services
O43 - CFD: 11/01/2015 - 02:07:24 - [] ----D C:\Program Files (x86)\Common Files\Stardock
O43 - CFD: 21/11/2014 - 06:55:33 - [] ----D C:\Program Files (x86)\Common Files\System
O43 - CFD: 25/01/2015 - 15:02:51 - [] ----D C:\Program Files (x86)\Common Files\Toontrack
O43 - CFD: 25/01/2015 - 16:33:16 - [] ----D C:\Program Files (x86)\Common Files\VST3
O43 - CFD: 10/09/2012 - 12:58:31 - [] ----D C:\Program Files (x86)\Common Files\Windows Live
O43 - CFD: 25/01/2015 - 16:33:17 - [] ----D C:\Program Files (x86)\Common Files\WPAPI
O43 - CFD: 18/02/2015 - 05:18:32 - [] ----D C:\ProgramData\Adobe
O43 - CFD: 12/01/2015 - 02:19:56 - [] ----D C:\ProgramData\Apple
O43 - CFD: 12/01/2015 - 02:20:22 - [] ----D C:\ProgramData\Apple Computer
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Application Data
O43 - CFD: 06/01/2015 - 22:22:00 - [] ----D C:\ProgramData\Atheros
O43 - CFD: 18/01/2015 - 01:58:07 - [] ----D C:\ProgramData\Auslogics
O43 - CFD: 10/09/2012 - 12:55:02 - [] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 16/01/2015 - 21:11:27 - [] -SH-D C:\ProgramData\Bureau
O43 - CFD: 10/09/2012 - 12:58:24 - [] ----D C:\ProgramData\ColorMode
O43 - CFD: 10/09/2012 - 12:57:31 - [] ----D C:\ProgramData\CyberLink
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Desktop
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Documents
O43 - CFD: 22/02/2015 - 00:51:56 - [] ----D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
O43 - CFD: 12/01/2015 - 14:01:24 - [] ----D C:\ProgramData\HP
O43 - CFD: 10/09/2012 - 12:55:16 - [] ----D C:\ProgramData\install_clap
O43 - CFD: 10/09/2012 - 12:54:34 - [] ----D C:\ProgramData\Intel
O43 - CFD: 04/02/2015 - 14:54:30 - [] ----D C:\ProgramData\KORG
O43 - CFD: 11/01/2015 - 23:52:55 - [] ----D C:\ProgramData\Malwarebytes
O43 - CFD: 16/01/2015 - 21:11:27 - [] -SH-D C:\ProgramData\Menu Démarrer
O43 - CFD: 16/01/2015 - 21:19:02 - [] -S--D C:\ProgramData\Microsoft
O43 - CFD: 16/01/2015 - 21:11:27 - [] -SH-D C:\ProgramData\Modèles
O43 - CFD: 08/01/2015 - 23:25:08 - [] ----D C:\ProgramData\Mozilla
O43 - CFD: 04/02/2015 - 15:00:11 - [] ----D C:\ProgramData\Native Instruments
O43 - CFD: 09/01/2015 - 03:39:52 - [] ----D C:\ProgramData\Norton
O43 - CFD: 09/01/2015 - 00:43:46 - [] ----D C:\ProgramData\NortonInstaller
O43 - CFD: 06/01/2015 - 22:19:15 - [] ----D C:\ProgramData\NVIDIA
O43 - CFD: 10/09/2012 - 12:37:25 - [] ----D C:\ProgramData\NVIDIA Corporation
O43 - CFD: 04/02/2015 - 14:59:28 - [] ----D C:\ProgramData\Package Cache
O43 - CFD: 09/01/2015 - 00:44:08 - [] ----D C:\ProgramData\PopCap Games
O43 - CFD: 16/01/2015 - 20:55:48 - [] ----D C:\ProgramData\PRICache
O43 - CFD: 10/09/2012 - 11:49:44 - [] ----D C:\ProgramData\Qualcomm Atheros
O43 - CFD: 21/11/2014 - 06:55:33 - [] ----D C:\ProgramData\regid.1991-06.com.microsoft
O43 - CFD: 10/09/2012 - 15:33:27 - [] ----D C:\ProgramData\Samsung
O43 - CFD: 25/01/2015 - 14:49:45 - [] ----D C:\ProgramData\Sony
O43 - CFD: 18/02/2015 - 05:48:22 - [] ----D C:\ProgramData\Stardock
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Start Menu
O43 - CFD: 10/09/2012 - 12:55:02 - [] ----D C:\ProgramData\Symantec
O43 - CFD: 08/01/2015 - 23:14:37 - [0] ----D C:\ProgramData\Temp
O43 - CFD: 22/08/2013 - 15:45:52 - [] -SH-D C:\ProgramData\Templates
O43 - CFD: 25/01/2015 - 15:10:34 - [] ----D C:\ProgramData\Toontrack
O43 - CFD: 25/01/2015 - 17:01:24 - [] ----D C:\ProgramData\Waves Audio
O43 - CFD: 05/03/2015 - 01:02:45 - [] ----D C:\ProgramData\WinClon
O43 - CFD: 04/02/2015 - 15:15:58 - [] --H-D C:\ProgramData\{2E9C94ED-C152-4D5D-8E21-AAE23373844C}
O43 - CFD: 04/02/2015 - 15:06:15 - [] --H-D C:\ProgramData\{3D5B9BB4-F193-4C98-A3ED-DA66E4428347}
O43 - CFD: 04/02/2015 - 15:10:24 - [] --H-D C:\ProgramData\{D0FD515C-72E9-4FA3-AB32-7251C0864B75}
O43 - CFD: 21/11/2014 - 06:56:04 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 21/11/2014 - 06:56:04 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 18/01/2015 - 06:52:28 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 20/01/2015 - 08:46:58 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3 =>.Adobe Systems Incorporated
O43 - CFD: 16/01/2015 - 20:55:44 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BT Program
O43 - CFD: 16/01/2015 - 20:55:44 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power2Go 8
O43 - CFD: 16/01/2015 - 20:55:44 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 10
O43 - CFD: 16/01/2015 - 20:55:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
O43 - CFD: 16/01/2015 - 20:55:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel AppUp(SM) center
O43 - CFD: 22/02/2015 - 00:52:00 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
O43 - CFD: 04/02/2015 - 14:48:06 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KORG
O43 - CFD: 22/08/2013 - 16:36:33 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 16/01/2015 - 20:55:44 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 16/01/2015 - 20:55:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works
O43 - CFD: 04/02/2015 - 15:17:38 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Native Instruments
O43 - CFD: 25/01/2015 - 16:56:28 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ohm Force
O43 - CFD: 16/01/2015 - 20:55:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
O43 - CFD: 25/01/2015 - 15:52:25 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerISO
O43 - CFD: 04/02/2015 - 10:20:22 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
O43 - CFD: 25/01/2015 - 14:43:38 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REAPER (x64)
O43 - CFD: 16/01/2015 - 20:55:45 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
O43 - CFD: 21/02/2015 - 23:51:09 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\save2pc
O43 - CFD: 25/01/2015 - 16:19:47 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
O43 - CFD: 05/03/2015 - 00:59:08 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
O43 - CFD: 16/01/2015 - 20:55:46 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp
O43 - CFD: 21/11/2014 - 06:56:04 - [] R---D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
O43 - CFD: 20/11/2014 - 23:27:29 - [0] R-H-D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 25/01/2015 - 15:45:11 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Toontrack
O43 - CFD: 25/01/2015 - 16:57:29 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Transcribe!
O43 - CFD: 16/01/2015 - 20:55:46 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
O43 - CFD: 25/01/2015 - 16:49:05 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves
O43 - CFD: 07/03/2015 - 04:41:35 - [] ----D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP =>.Nicolas Coolman
O43 - CFD: 18/02/2015 - 05:16:50 - [] ----D C:\Users\Paul\AppData\Roaming\Adobe
O43 - CFD: 12/01/2015 - 02:39:46 - [] ----D C:\Users\Paul\AppData\Roaming\Apple Computer
O43 - CFD: 06/01/2015 - 22:21:43 - [] ----D C:\Users\Paul\AppData\Roaming\Atheros
O43 - CFD: 03/03/2015 - 04:24:28 - [] ----D C:\Users\Paul\AppData\Roaming\dvdcss
O43 - CFD: 16/01/2015 - 21:15:52 - [] ----D C:\Users\Paul\AppData\Roaming\Identities
O43 - CFD: 04/02/2015 - 15:41:24 - [] ----D C:\Users\Paul\AppData\Roaming\KORG
O43 - CFD: 06/01/2015 - 23:32:56 - [] ----D C:\Users\Paul\AppData\Roaming\Macromedia
O43 - CFD: 18/02/2015 - 05:16:51 - [] -S--D C:\Users\Paul\AppData\Roaming\Microsoft
O43 - CFD: 06/01/2015 - 23:05:14 - [] ----D C:\Users\Paul\AppData\Roaming\Mozilla
O43 - CFD: 25/01/2015 - 16:30:28 - [0] ----D C:\Users\Paul\AppData\Roaming\NetMedia Providers
O43 - CFD: 25/01/2015 - 16:53:32 - [] ----D C:\Users\Paul\AppData\Roaming\Ohm Force
O43 - CFD: 25/01/2015 - 16:15:17 - [0] ----D C:\Users\Paul\AppData\Roaming\Publish Providers
O43 - CFD: 25/01/2015 - 17:02:24 - [] ----D C:\Users\Paul\AppData\Roaming\Reaper
O43 - CFD: 25/01/2015 - 16:30:22 - [] ----D C:\Users\Paul\AppData\Roaming\Sony
O43 - CFD: 12/01/2015 - 01:59:07 - [] ----D C:\Users\Paul\AppData\Roaming\Stardock
O43 - CFD: 04/02/2015 - 12:23:31 - [] ----D C:\Users\Paul\AppData\Roaming\Toontrack
O43 - CFD: 22/02/2015 - 09:16:58 - [] ----D C:\Users\Paul\AppData\Roaming\vlc
O43 - CFD: 25/01/2015 - 17:01:19 - [] ----D C:\Users\Paul\AppData\Roaming\Waves Audio
O43 - CFD: 07/03/2015 - 04:45:20 - [] ----D C:\Users\Paul\AppData\Roaming\ZHP =>.Nicolas Coolman
O43 - CFD: 18/02/2015 - 05:16:50 - [] ----D C:\Users\Paul\AppData\Local\Adobe
O43 - CFD: 12/01/2015 - 02:20:03 - [] ----D C:\Users\Paul\AppData\Local\Apple
O43 - CFD: 12/01/2015 - 02:22:28 - [] ----D C:\Users\Paul\AppData\Local\Apple Computer
O43 - CFD: 16/01/2015 - 20:50:44 - [] -SH-D C:\Users\Paul\AppData\Local\Application Data
O43 - CFD: 06/01/2015 - 22:22:01 - [] ----D C:\Users\Paul\AppData\Local\BMExplorer
O43 - CFD: 11/01/2015 - 02:27:58 - [] ----D C:\Users\Paul\AppData\Local\CrashDumps
O43 - CFD: 22/02/2015 - 08:31:01 - [] ----D C:\Users\Paul\AppData\Local\Diagnostics
O43 - CFD: 16/01/2015 - 20:50:44 - [] -SH-D C:\Users\Paul\AppData\Local\Historique
O43 - CFD: 08/01/2015 - 23:40:52 - [] ----D C:\Users\Paul\AppData\Local\Macromedia
O43 - CFD: 22/02/2015 - 08:30:57 - [] ----D C:\Users\Paul\AppData\Local\Microsoft
O43 - CFD: 08/01/2015 - 23:25:15 - [] ----D C:\Users\Paul\AppData\Local\Mozilla
O43 - CFD: 04/02/2015 - 15:41:58 - [] ----D C:\Users\Paul\AppData\Local\Native Instruments
O43 - CFD: 18/01/2015 - 03:32:39 - [] ----D C:\Users\Paul\AppData\Local\Packages
O43 - CFD: 06/01/2015 - 22:21:51 - [] ----D C:\Users\Paul\AppData\Local\Power2Go8
O43 - CFD: 06/01/2015 - 22:28:15 - [] ----D C:\Users\Paul\AppData\Local\Programs
O43 - CFD: 06/01/2015 - 22:22:34 - [] ----D C:\Users\Paul\AppData\Local\Samsung
O43 - CFD: 25/01/2015 - 16:27:33 - [] ----D C:\Users\Paul\AppData\Local\Sony
O43 - CFD: 11/01/2015 - 02:27:46 - [] ----D C:\Users\Paul\AppData\Local\Stardock
O43 - CFD: 07/03/2015 - 04:41:42 - [] ----D C:\Users\Paul\AppData\Local\Temp
O43 - CFD: 16/01/2015 - 20:50:44 - [] -SH-D C:\Users\Paul\AppData\Local\Temporary Internet Files
O43 - CFD: 26/02/2015 - 09:48:06 - [] ----D C:\Users\Paul\AppData\Local\VirtualStore
O43 - CFD: 21/11/2014 - 06:56:04 - [] R---D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
O43 - CFD: 21/11/2014 - 06:56:04 - [] R---D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 16/01/2015 - 21:16:13 - [] R---D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 20/01/2015 - 08:46:58 - [0] ----D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS3 =>.Adobe Systems Incorporated
O43 - CFD: 25/01/2015 - 14:46:25 - [] ----D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
O43 - CFD: 05/03/2015 - 01:01:31 - [] R---D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
O43 - CFD: 22/08/2013 - 16:36:32 - [] ----D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 16/01/2015 - 20:51:51 - [] ----D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Stardock
O43 - CFD: 16/01/2015 - 21:16:13 - [] R---D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 16/01/2015 - 20:51:51 - [] R---D C:\Users\Paul\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
~ Program Folder: 203 Scanned in 00mn 00s



---\\ Derniers fichiers modifiés ou crées sous Windows et System32 (O44)
O44 - LFC:[MD5.8752CC895B972F48D82F9ADB3D96E351] - 03/03/2015 - 14:17:35 ----- . (.Microsoft Corporation - Microsoft Malware Protection Signature Upda.) -- C:\Windows\System32\MpSigStub.exe [295552]
O44 - LFC:[MD5.C68211633581F5F4B43379A6031B39BE] - 05/03/2015 - 01:00:08 ---A- . (...) -- C:\Windows\setupact.log [341812]
O44 - LFC:[MD5.7E27EF9FEBAE07B1D45C304D18AC2846] - 05/03/2015 - 03:07:56 ---A- . (...) -- C:\Windows\System32\PerfStringBackup.INI [1824010]
O44 - LFC:[MD5.A350F1DB219789D08CE288F5BFE2E5B0] - 05/03/2015 - 03:07:56 ---A- . (...) -- C:\Windows\System32\perfc009.dat [135592]
O44 - LFC:[MD5.E5744D9C87255EEFCF4E3EF749310347] - 05/03/2015 - 03:07:56 ---A- . (...) -- C:\Windows\System32\perfc00C.dat [159412]
O44 - LFC:[MD5.5ECE943A191D5BFEE61A6ABB8FC1FDB4] - 05/03/2015 - 03:07:56 ---A- . (...) -- C:\Windows\System32\perfh009.dat [722476]
O44 - LFC:[MD5.1C18EE8DAEFCB9C04DBDBEE747510B4D] - 05/03/2015 - 03:07:56 ---A- . (...) -- C:\Windows\System32\perfh00C.dat [812350]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 05/03/2015 - 03:08:48 ---A- . (...) -- C:\Windows\Instaler Setup Log.txt [0]
O44 - LFC:[MD5.62E453681AD4E1B8DE0DF3404B7D7A81] - 07/03/2015 - 03:53:06 -S-A- . (...) -- C:\Windows\bootstat.dat [67584]
O44 - LFC:[MD5.DEAC86D59C314FE15EDB88BE290E9047] - 07/03/2015 - 04:06:06 ---A- . (...) -- C:\Windows\

Incomplet ? J'ai tout copié et collé...
Bon, je vais voir ça, mais nuit d'insomnie oblige, je commence à sérieusement manquer de jus.
A voir, à suivre... Merci.

Jawhol ! Voilà la chose en question...

https://www.cjoint.com/c/ECjiQaqEJbO

Hello,
Je ne comprends pas bien. Vous auriez pu me "désinfecter" ? Et comment ? Quelle est la suite logique à donner une fois qu'on a éventuellement repéré les mauvaises lignes de code ? Le problème est que j'ai utilisé le fameux ZHP sans trop savoir ce que j'étais censé en attendre précisément, encore moins ce que j'étais censé faire après. Je pensais qu'on allait me dire, au vu du rapport ZHP, maintenant installe ceci, désinstalle cela... Donc je ne pensais pas qu'un tiers pouvait me "désinfecter"... En fait, je ne pensais rien, j'attendais la suite.
Y a-t-il une raison particulière à votre choix ? Vous n'êtes pas obligé de me répondre.
Je suppose que ce sont certains programmes qui vous dérangent, pour le peu que j'en ai vu, ça se réfère à des outils qu'on m'a installés, et qui sont destinés à la musique. Eh oui, je suis compositeur... Enfin, je ne sais plus. Certes capable de composer, mais plus très motivé, puisque ce que je fais était destiné au départ à rassembler des musiciens et monter une formation, et je n'y suis jamais parvenu, car compositions trop ambitieuses et complètement en dehors des formats "à la mode"...
Pour ceux qui se demandent en quoi ça consiste :

https://myspace.com/ubikzik/music/songs

... Evidemment, je ne m'attends pas à des compliments ; depuis toujours, je suis à côté de ce qui attire le plus grand nombre, et la musique est le secteur de la vie culturelle, à mon avis, le plus pourri par le commerce et l'industrie.

Enfin voilà, je n'ai pas désinstallé ces programmes de musique - on ne sait jamais, je pourrais m'y remettre un jour ou l'autre... Mais pour l'instant, je suis démotivé, à quoi ça sert de composer dans son coin, si personne ne me rejoint pour monter un projet ?
Dans l'intervalle, on dirait que mes manifestations farfelues se sont calmées. C'est passé comme c'est venu. Je renonce à comprendre.

Bon, à vous lire...

Ah bon ?
Décidément, tout ça est bien mystérieux... Histoires de fous !
Merci en tous cas. Sincèrement.

Oui ? Renoncer carrément à Firefox ? Ce n'est pas un peu... radical ?

Est ce que tu as un portable