Pc infecté

Oui je les ai supprimés..en espèrant avoir bien fait.

Les supprimer avec ZHPFix?
Je viens de tenter,mais il refuse de les nettoyer ...bien sur..

J'ai Windows essential ,mais il est désactivé .

@nours52Non manuellement les transférer dans un autre dossier

Bonjour...............

Bonjour,
Pas de nouvelle?

Bonjour,
Apparemment je ne reçois pas tous tes messages.
J'ai moins de pub,mais je n'ais pas de nouvelle sur mon rapport précédemment ébergé plus haut.Car nous n'avons pas supprimé ces 2 clés pour l'instant.
A plus.

Bonjour,

Voici le rapport:
https://www.cjoint.com/c/ELoetfKijqI
Bonne journée.

Bonjour,
Merci et bon dimanche.

Bonsoir,
Voici le rapport d'analyse de ZHPDiag.
Apparemment rien trouvé.
~ ZHPDiag v2015.12.11.183 Par Nicolas Coolman (2015/12/11)
~ Démarré par nours52 (Administrator) (2015/12/13 19:34:06)
~ Site: https://nicolascoolman.eu
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\nours52\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\nours52\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Deactivate
~ Démarrage du système: Normal (Normal boot)
Windows 7 Home Premium, 32-bit Service Pack 1 (Build 7601)

---\\ Navigateurs Internet (2) - 0s
MFIE: Mozilla Firefox 42.0 (x86 fr) v42.0
MSIE: Internet Explorer v11.0.9600.17501

---\\ Informations sur les produits Windows (9) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows Operating System - Windows(R) 7, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : F6MVB
Windows License : OK
~ Windows Remaining Initializations Number : 3
Windows Automatic Updates : OK
Windows Activation Technologies : KO

---\\ Logiciels de protection (5) - 7s
Malwarebytes Anti-Malware version 2.2.0.1024
Microsoft Security Client v4.6.0305.0
Microsoft Security Essentials v4.6.305.0
Trusteer Sécurité des points d'accès v3.5.1507.99
Windows Defender W7 (Deactivate)

---\\ Logiciels d'optimisation (1) - 7s
CCleaner v5.12

---\\ Surveillance de Logiciels (2) - 7s
Adobe Flash Player 20 NPAPI
Adobe Acrobat Reader DC - Français

---\\ Informations sur le système (6) - 0s
~ Operating System: x86 Family 6 Model 15 Stepping 11, GenuineIntel
~ Operating System: 32-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 2096.364 MB (33% free)
System Restore: Activé (Enable)
System drive C: has 1297 GB () free of 1407 GB

---\\ Mode de connexion au système (3) - 0s
~ Computer Name: NOURS52-PC
~ User Name: nours52
~ Logged in as Administrator

---\\ Enumération des unités disques (6) - 0s
~ Drive C: has 1297 GB free of 1407 GB (System)
~ Drive E: has 87 GB free of 147 GB
~ Drive F: has 15 GB free of 76 GB
~ Drive J: has 66 GB free of 147 GB
~ Drive L: has 431 GB free of 500 GB
~ Drive Z: has 1297 GB free of 1407 GB

---\\ Etat du Centre de Sécurité Windows (13) - 0s
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiSpywareOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] AntiVirusOverride: OK
[HKLM\SOFTWARE\Microsoft\Security Center\Svc] FirewallOverride: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableTaskMgr: OK
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] DisableRegistryTools: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] Load: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install] LastSuccessTime : OK

---\\ Recherche particulière de fichiers génériques (24) - 1s
[MD5.40D777B7A95E00593EB1568C68514493] - 20/11/2010 - (.Microsoft Corporation - Explorateur Windows.) -- C:\Windows\Explorer.exe [2616320] ©
[MD5.51138BEEA3E2C21EC44D0932C71762A8] - 14/07/2009 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe [44544] ©
[MD5.B5C5DCAD3899512020D135600129D665] - 14/07/2009 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\Windows\System32\Wininit.exe [96256] ©
[MD5.5E4E0E43E0A5BF9F089696DFA7A3D677] - 17/12/2014 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\Windows\System32\wininet.dll [1888256] ©
[MD5.52449FD429D6053B78AE564DEF303870] - 17/07/2014 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\Windows\System32\Winlogon.exe [304128] ©
[MD5.E3AE23569749DE12D45BA3B489A036AE] - 20/11/2010 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\Windows\System32\sppcomapi.dll [193536] ©
[MD5.B40420876B9288E0A1C8CCA8A84E5DC9] - 03/03/2011 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\Windows\System32\dnsapi.dll [270336] ©
[MD5.129F80D7868E30DF3E3DE33A1D3132B4] - 12/04/2011 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\Windows\System32\fr-FR\user32.dll.mui [20480] ©
[MD5.D0B388DA1D111A34366E04EB4A5DD156] - 30/05/2014 - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) -- C:\Windows\System32\drivers\AFD.sys [338944] ©
[MD5.338C86357871C167A96AB976519BF59E] - 14/07/2009 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\Windows\System32\drivers\atapi.sys [21584] =>.Microsoft Windows®
[MD5.77EA11B065E0A8AB902D78145CA51E10] - 14/07/2009 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\Windows\System32\drivers\Cdfs.sys [70656] ©
[MD5.BE167ED0FDB9C1FA1133953C18D5A6C9] - 20/11/2010 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\Windows\System32\drivers\Cdrom.sys [108544] ©
[MD5.F024449C97EC1E464AAFFDA18593DB88] - 20/11/2010 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\Windows\System32\drivers\DfsC.sys [78336] ©
[MD5.9036377B8A6C15DC2EEC53E489D159B5] - 20/11/2010 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\Windows\System32\drivers\HDAudBus.sys [108544] ©
[MD5.F151F0BDC47F4A28B1B20A0818EA36D6] - 14/07/2009 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\Windows\System32\drivers\i8042prt.sys [80896] ©
[MD5.A5FA468D67ABCDAA36264E463A7BB0CD] - 14/07/2009 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\Windows\System32\drivers\IpNat.sys [101888] ©
[MD5.5D16C921E3671636C0EBA3BBAAC5FD25] - 27/04/2011 - (.Microsoft Corporation - Windows NT SMB Minirdr.) -- C:\Windows\System32\drivers\MRxSmb.sys [123904] ©
[MD5.280122DDCF04B378EDD1AD54D71C1E54] - 20/11/2010 - (.Microsoft Corporation - MBT Transport driver.) -- C:\Windows\System32\drivers\netBT.sys [187904] ©
[MD5.5E43D2B0EE64123D4880DFA6626DEFDE] - 12/04/2013 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\Windows\System32\drivers\ntfs.sys [1211752] =>.Microsoft Windows®
[MD5.2EA877ED5DD9713C5AC74E8EA7348D14] - 14/07/2009 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\Windows\System32\drivers\Parport.sys [79360] ©
[MD5.D9F91EAFEC2815365CBE6D167E4E332A] - 14/07/2009 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\Windows\System32\drivers\Rasl2tp.sys [78848] ©
[MD5.3E21C083B8A01CB70BA1F09303010FCE] - 14/07/2009 - (.Microsoft Corporation - SMB Transport driver.) -- C:\Windows\System32\drivers\smb.sys [71168] ©
[MD5.B459575348C20E8121D6039DA063C704] - 20/11/2010 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\Windows\System32\drivers\tdx.sys [74752] ©
[MD5.F497F67932C6FA693D7DE2780631CFE7] - 20/11/2010 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\Windows\System32\drivers\volsnap.sys [245632] =>.Microsoft Windows®

---\\ Liste des services NT non Microsoft et non désactivés (11) - 3s
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) . (.Adobe Systems Incorporated - Adobe Acrobat Update Service.) - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe =>.Adobe Systems, Incorporated®
O23 - Service: (AMD External Events Utility) . (.AMD - AMD External Events Service Module.) - C:\Windows\System32\atiesrxx.exe ©
O23 - Service: CodeMeter Runtime Server (CodeMeter.exe) . (.WIBU-SYSTEMS AG - CodeMeter Runtime Server.) - C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe {1E3A982B061FE15CCB38D7CE604F33F6} ©
O23 - Service: ForceWare Intelligent Application Manager (IAM) (ForceWare Intelligent Application Manager (IAM)) . (.Copyright (c) 2001-2009 NVIDIA Corporation - app_filter Module.) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe =>.NVIDIA Corporation®
O23 - Service: (MBAMService) . (.Malwarebytes - Malwarebytes Anti-Malware.) - C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe =>.Malwarebytes Corporation®
O23 - Service: ForceWare IP service (nSvcIp) . (.Copyright (c) 2001-2009 NVIDIA Corporation - NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe =>.NVIDIA Corporation®
O23 - Service: PDF Architect 2 Creator (PDF Architect 2 Creator) . (.pdfforge GmbH - PDF Architect 2.) - C:\Program Files\PDF Architect 2\creator-ws.exe =>.pdfforge GmbH®
O23 - Service: Rapport Management Service (RapportMgmtService) . (.IBM Corp. - RapportMgmtService.) - C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe =>.Trusteer®
O23 - Service: RunSwUSB (RunSwUSB) . (.Copyright (C) 2012-2013 - .) - C:\Windows\runSW.exe =>.Realtek Semiconductor Corp®
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe =>.DEVGURU CO LTD®
O23 - Service: TeamViewer 7 (TeamViewer7) . (.TeamViewer GmbH - TeamViewer Remote Control Application.) - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe =>.TeamViewer®

---\\ Tâches planifiées en automatique (7) - 3s
[MD5.B89A82FB10E98F2FDF51FA82C7366DD3] [APT] [Adobe Acrobat Update Task] (.Adobe Systems Incorporated.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1067736] =>.Adobe Systems, Incorporated®
[MD5.F54564025D2284AE498E51D7C139F971] [APT] [Adobe Flash Player Updater] (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe [269504] =>.Adobe Systems Incorporated®
[MD5.5C35525CEBE7B59FAFA05D5E98D7EDEF] [APT] [CCleanerSkipUAC] (.Piriform Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe [6602152] =>.Piriform Ltd®
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\Tasks\Adobe Flash Player Updater.job [1002] ©
O39 - APT: Adobe Acrobat Update Task - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Acrobat Update Task [3874] ©
O39 - APT: Adobe Flash Player Updater - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [3940] ©
O39 - APT: CCleanerSkipUAC - (.Piriform Ltd.) -- C:\Windows\System32\Tasks\CCleanerSkipUAC [2776] ©

---\\ Processus lancés (7) - 3s
[MD5.ABD03C771E1C9F829B4CC6DF4E5E2AF0] - (.AMD - AMD External Events Service Module.) -- C:\Windows\System32\atiesrxx.exe [214528] [PID.1184] ©
[MD5.02E5CFEF52FAC00453900B19344C5C87] - (.AMD - AMD External Events Client Module.) -- C:\Windows\System32\atieclxx.exe [543744] [PID.1588] ©
[MD5.6FACA9C62024E14251C7ED33A8E8B660] - (.WIBU-SYSTEMS AG - CodeMeter Runtime Server.) -- C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe [2571704] [PID.2584] {1E3A982B061FE15CCB38D7CE604F33F6} ©
[MD5.91F4A0655ADFB78227CC7B40415C1238] - (.VoipConnect - Client to make VoIP calls..) -- C:\Program Files\VoipConnect.com\VoipConnect\voipconnect.exe [32417376] [PID.3960] {33BF938E0EBC37D808238E017CAC915D}
[MD5.27883B8215F7C71493318E9C5A784497] - (...) -- C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe [2205696] [PID.4028]
[MD5.12AF4A1D493161615AEA405F611EC894] - (.Eyeo GmbH - Adblock Plus Engine.) -- C:\Program Files\Adblock Plus for IE\AdblockPlusEngine.exe [4379912] [PID.16028] ©
[MD5.7D0AB167F1F58F6A5CC88F0A1AC3A1E6] - (.Copyright (C) 2015 Nicolas Coolman - ZHPDiag.) -- C:\Users\nours52\Downloads\ZHPDiag3 (2).exe [2008064] [PID.12368] ©

---\\ Google Chrome, Démarrage,Recherche,Extensions (4) - 0s
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf] Google Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia] Google Chrome manifest =>.Google Inc.

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (3) - 1s
M0 - MFSP: prefs.js [nours52 - nn6v4sm1.default-1448083578042] https://www.google.fr/?gws_rd=ssl
P2 - EXT: (.Mozilla - Default.) -- C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} ©
P2 - FPN: [HKLM] [@adobe.com/FlashPlayer] - (.Adobe Systems Incorporated.) -- C:\Windows\System32\Macromed\Flash\NPSWF32_20_0_0_235.dll ©

---\\ Internet Explorer,Démarrage,Recherche,URLSearchHook (10) - 0s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?gws_rd=ssl
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.microsoft.com/fr-fr/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.com/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.microsoft.com/fr-fr/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:securityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.microsoft.com/fr-fr/
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean =>.Microsoft Internet Explorer

---\\ Internet Explorer,Proxy Management (4) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe (.Microsoft Corporation.) ©
F2 - REG:system.ini: VMApplet=C:\Windows\system32\SystemPropertiesPerformance.exe (.Microsoft Corporation.) ©

---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (21)

---\\ Browser Helper Object de navigateur (BHO) (6) - 0s
O2 - BHO: PDF Architect Helper - {691B33B0-B86E-47F3-81C7-56E4FE3B929C} . (.pdfforge GmbH - PDF Architect 2.) -- C:\Program Files\PDF Architect 2\creator-ie-helper.dll =>.pdfforge GmbH®
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll =>.Oracle America, Inc.®
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} . (.Microsoft Corp. - Microsoft® Windows Live ID Login Helper.) -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll =>.Microsoft Corporation®
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION - Epson Easy Photo Print (TBL).) -- C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll ©
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} . (.Oracle Corporation - Java(TM) Platform SE binary.) -- C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll =>.Oracle America, Inc.®
O2 - BHO: Adblock Plus for IE Browser Helper Object - {FFCB3198-32F3-4E8B-9539-4324694ED664} . (.Adblock Plus - Adblock Plus Module.) -- C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll ©

---\\ Applications lancées au démarrage du système (16) - 1s
O4 - HKLM\..\Run: [MSC] . (.Microsoft Corporation - Microsoft Security Client User Interface.) -- c:\Program Files\Microsoft Security Client\msseces.exe =>.Microsoft Corporation®
O4 - HKLM\..\Run: [NVRaidService] . (.NVIDIA Corporation - NVIDIA RAID Service French language.) -- C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe =>.NVIDIA Corporation®
O4 - HKLM\..\Run: [StartCCC] . (.Advanced Micro Devices, Inc. - Catalyst® Control Center Launcher.) -- C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe =>.Advanced Micro Devices, Inc.®
O4 - HKLM\..\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java Update Scheduler.) -- C:\Program Files\Common Files\Java\Java Update\jusched.exe =>.Oracle America, Inc.®
O4 - HKLM\..\RunOnce: [Toropecelof] . (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O4 - HKLM\..\RunOnce: [Delafe] . (.Microsoft Corporation - Microsoft ® Windows Based Script Host.) -- C:\Windows\System32\wscript.exe ©
O4 - HKCU\..\Run: [Secret Disk Maintance] . (.www.privacyroot.com - Application Installer.) -- C:\Program Files\Secret Disk\net1.exe {00C71956DD75CB37084C7A30D3E4519F3E}
O4 - HKCU\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - HKCU\..\Run: [VoipConnect] . (.VoipConnect - Client to make VoIP calls..) -- C:\Program Files\VoipConnect.com\VoipConnect\voipconnect.exe {33BF938E0EBC37D808238E017CAC915D}
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files\Windows Sidebar\sidebar.exe ©
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe ©
O4 - HKUS\S-1-5-21-1281696408-34496212-1937324486-1001\..\Run: [Secret Disk Maintance] . (.www.privacyroot.com - Application Installer.) -- C:\Program Files\Secret Disk\net1.exe {00C71956DD75CB37084C7A30D3E4519F3E}
O4 - HKUS\S-1-5-21-1281696408-34496212-1937324486-1001\..\Run: [CCleaner Monitoring] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe =>.Piriform Ltd®
O4 - HKUS\S-1-5-21-1281696408-34496212-1937324486-1001\..\Run: [VoipConnect] . (.VoipConnect - Client to make VoIP calls..) -- C:\Program Files\VoipConnect.com\VoipConnect\voipconnect.exe {33BF938E0EBC37D808238E017CAC915D}

---\\ Modification Domaine/Adresses DNS (3) - 1s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: DhcpNameServer = 212.27.40.241 212.27.40.240

---\\ Protocole additionnel (23) - 0s
O18 - Handler: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: file - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ftp - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: http - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: https - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll ©
O18 - Handler: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll ©
O18 - Handler: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll ©
O18 - Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} . (.Microsoft Corporation - Windows Live Messenger Protocol Handler Mod.) -- C:\Program Files\Windows Live\Messenger\msgrapp.dll =>.Microsoft Corporation®
O18 - Handler: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll ©
O18 - Handler: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll ©
O18 - Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} . (.Microsoft Corporation - Windows Live Mail.) -- C:\Program Files\Windows Live\Mail\mailcomm.dll =>.Microsoft Corporation®
O18 - Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®
O18 - Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll =>.Microsoft Corporation®

---\\ Logiciels installés (124) - 11s
O42 - Logiciel: 7-Zip 9.20 - (...) [HKLM] -- 7-Zip
O42 - Logiciel: Adblock Plus pour IE (32-bits) - (.Eyeo GmbH.) [HKLM] -- {0B19C9C6-85BA-4CFF-AB4B-D77EEB19E263} ©
O42 - Logiciel: Adobe Acrobat Reader DC - Français - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-7AD7-1036-7B44-AC0F074E4100} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- {7BBAEC47-1CC0-4CB8-ADB4-531B78DBD1DD} ©
O42 - Logiciel: Adobe AIR - (.Adobe Systems Incorporated.) [HKLM] -- Adobe AIR ©
O42 - Logiciel: Adobe Flash Player 20 ActiveX - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player ActiveX ©
O42 - Logiciel: Adobe Flash Player 20 NPAPI - (.Adobe Systems Incorporated.) [HKLM] -- Adobe Flash Player NPAPI ©
O42 - Logiciel: Adobe Refresh Manager - (.Adobe Systems Incorporated.) [HKLM] -- {AC76BA86-0804-1033-1959-001824161310} ©
O42 - Logiciel: AMD Accelerated Video Transcoding - (.Advanced Micro Devices, Inc..) [HKLM] -- {D427123D-6FED-3FF4-8490-49BAD3970C11} ©
O42 - Logiciel: AMD APP SDK Runtime - (.Advanced Micro Devices Inc..) [HKLM] -- {A25FF1C0-80B6-4B8B-A551-DC525697A408} ©
O42 - Logiciel: AMD Catalyst Control Center - (.Nom de votre société.) [HKLM] -- {C69F47BD-3692-2CC1-385B-B5D3CA214E77}
O42 - Logiciel: AMD Catalyst Install Manager - (.Advanced Micro Devices, Inc..) [HKLM] -- {17A7AA54-B23B-22B7-CDD5-C51122056415} ©
O42 - Logiciel: AMD Drag and Drop Transcoding - (.Advanced Micro Devices, Inc..) [HKLM] -- {F314F9AB-A0CF-C3A3-F746-F54ACC31326B} ©
O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM] -- {38230BC0-C1CE-E828-0E65-9439E5EC7FCA} ©
O42 - Logiciel: AMD Wireless Display v3.0 - (.Advanced Micro Devices, Inc..) [HKLM] -- {7B6DB690-4552-9EDC-40F3-4F73B2B98EB1} ©
O42 - Logiciel: ASUS VGA Driver - (.Nom de votre société.) [HKLM] -- {90157C5D-D791-4D36-8C2B-7553DC01D601}
O42 - Logiciel: ATI AVIVO Codecs - (.ATI Technologies Inc..) [HKLM] -- {471CE240-A1E5-56ED-C3FE-6A9BF4FB198B} ©
O42 - Logiciel: CameraHelperMsi - (.Logitech.) [HKLM] -- {15634701-BACE-4449-8B25-1567DA8C9FD3} ©
O42 - Logiciel: CardRecovery 6.00 - (.WinRecovery Software.) [HKLM] -- {88D68A69-D247-466B-90DD-575F6BE16230}_is1
O42 - Logiciel: Catalyst Control Center - Branding - (.Advanced Micro Devices, Inc..) [HKLM] -- {11087D24-567D-7D88-69C6-D7A08B5F4C47} ©
O42 - Logiciel: Catalyst Control Center Graphics Previews Common - (.Advanced Micro Devices, Inc..) [HKLM] -- {9467D3D0-D8AD-E51E-3F5E-3DE062A7C649} ©
O42 - Logiciel: Catalyst Control Center Localization All - (.Advanced Micro Devices, Inc..) [HKLM] -- {75D7BE0C-0A05-D6B1-FFDF-50D9736F294C} ©
O42 - Logiciel: CCC Help Chinese Standard - (.Advanced Micro Devices, Inc..) [HKLM] -- {9A63F87A-F889-6351-570D-336884F81B90} ©
O42 - Logiciel: CCC Help Chinese Traditional - (.Advanced Micro Devices, Inc..) [HKLM] -- {6FB72C73-75CD-F9CA-FABD-B10F5B649428} ©
O42 - Logiciel: CCC Help Czech - (.Advanced Micro Devices, Inc..) [HKLM] -- {8FE55870-52B5-6A9B-3292-1D0F1FCEFC3A} ©
O42 - Logiciel: CCC Help Danish - (.Advanced Micro Devices, Inc..) [HKLM] -- {ACAA13FB-4D5F-24BD-4621-CE67EC0B1560} ©
O42 - Logiciel: CCC Help Dutch - (.Advanced Micro Devices, Inc..) [HKLM] -- {8E1EE414-C228-EE1A-D323-C726D09684CC} ©
O42 - Logiciel: CCC Help English - (.Advanced Micro Devices, Inc..) [HKLM] -- {060393A5-F65E-CD9A-2A89-31877553727B} ©
O42 - Logiciel: CCC Help Finnish - (.Advanced Micro Devices, Inc..) [HKLM] -- {A20027DF-036A-6E30-FC8A-762B8587881A} ©
O42 - Logiciel: CCC Help French - (.Advanced Micro Devices, Inc..) [HKLM] -- {34F5AFBC-CE65-2685-1147-359DB64CFECD} ©
O42 - Logiciel: CCC Help German - (.Advanced Micro Devices, Inc..) [HKLM] -- {10E7B50F-7838-446D-2596-E9107FFFC287} ©
O42 - Logiciel: CCC Help Greek - (.Advanced Micro Devices, Inc..) [HKLM] -- {314C64DE-D5FD-DCEB-9B2F-BDDA009C1941} ©
O42 - Logiciel: CCC Help Hungarian - (.Advanced Micro Devices, Inc..) [HKLM] -- {FE8E19CB-937F-6D1D-88F4-CF7B979A4307} ©
O42 - Logiciel: CCC Help Italian - (.Advanced Micro Devices, Inc..) [HKLM] -- {63677ACF-80AD-08BA-0099-4A9383EE6EC2} ©
O42 - Logiciel: CCC Help Japanese - (.Advanced Micro Devices, Inc..) [HKLM] -- {E85EA95F-B922-0817-6C60-B32B41CED965} ©
O42 - Logiciel: CCC Help Korean - (.Advanced Micro Devices, Inc..) [HKLM] -- {2DF4F213-9EC8-CC65-2166-8FCB643AB777} ©
O42 - Logiciel: CCC Help Norwegian - (.Advanced Micro Devices, Inc..) [HKLM] -- {671F8246-7EAE-09E5-288F-724FBA0F3CAE} ©
O42 - Logiciel: CCC Help Polish - (.Advanced Micro Devices, Inc..) [HKLM] -- {DA6158CC-4F39-F6D3-350B-8A23DE724C0A} ©
O42 - Logiciel: CCC Help Portuguese - (.Advanced Micro Devices, Inc..) [HKLM] -- {542E5DF1-1D93-06EE-D028-E0B0AA698A66} ©
O42 - Logiciel: CCC Help Russian - (.Advanced Micro Devices, Inc..) [HKLM] -- {69890E17-427E-2935-B93B-9AFF5F0DFBB8} ©
O42 - Logiciel: CCC Help Spanish - (.Advanced Micro Devices, Inc..) [HKLM] -- {ADEF7E12-4B86-5FE8-7584-64174FDDDBF3} ©
O42 - Logiciel: CCC Help Swedish - (.Advanced Micro Devices, Inc..) [HKLM] -- {9D39BD38-B79B-9F82-86F8-B273CD838D6D} ©
O42 - Logiciel: CCC Help Thai - (.Advanced Micro Devices, Inc..) [HKLM] -- {B2C836FF-A6EE-B7A9-A2E7-6238F867B407} ©
O42 - Logiciel: CCC Help Turkish - (.Advanced Micro Devices, Inc..) [HKLM] -- {A5224779-E542-8455-C003-7D3C0611B709} ©
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM] -- CCleaner ©
O42 - Logiciel: Chromium - (.Chromium.) [HKCU] -- Chromium ©
O42 - Logiciel: Classic Menu for Office 2010 and 2013 - (.Detong Technology Ltd..) [HKLM] -- {90710DE9-45E4-4F31-AA8F-86A4C96FA386} ©
O42 - Logiciel: D3DX10 - (.Microsoft.) [HKLM] -- {E09C4DB7-630C-4F06-A631-8EA7239923AF} ©
O42 - Logiciel: DriversCloud.com - (.Cybelsoft.) [HKLM] -- {D6854652-83EE-475C-A357-0967C963A4BC} ©
O42 - Logiciel: EaseUS Data Recovery Wizard 8.5 - (.EaseUS.) [HKLM] -- EaseUS Data Recovery Wizard 8.5_is1 ©
O42 - Logiciel: EPSON BX305 Plus Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM] -- EPSON BX305 Plus Series ©
O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM] -- {FFF841F3-9A15-4F61-BD16-C19F132E5A27} ©
O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION2.) [HKLM] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178} ©
O42 - Logiciel: Epson FAX Utility - (.SEIKO EPSON CORPORATION.) [HKLM] -- {0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A} ©
O42 - Logiciel: Epson PC-FAX Driver - (...) [HKLM] -- EPSON PC-FAX Driver 2
O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM] -- EPSON Scanner ©
O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM] -- {3E31400D-274E-4647-916C-2CACC3741799} ©
O42 - Logiciel: erLT - (.Logitech, Inc..) [HKLM] -- {3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C} ©
O42 - Logiciel: EVEREST Home Edition v2.20 - (.Lavalys Inc.) [HKLM] -- EVEREST Home Edition_is1 ©
O42 - Logiciel: Guide d'utilisation EPSON BX305 Plus Series - (...) [HKLM] -- EPSON BX305 Plus Series Useg
O42 - Logiciel: Guide réseau EPSON BX305 Plus Series - (...) [HKLM] -- EPSON BX305 Plus Series Netg
O42 - Logiciel: HeroSpeedCMS - (.HeroSpeed.) [HKLM] -- HeroSpeedCMS4.1.0.1
O42 - Logiciel: IncrediMail - (.IncrediMail.) [HKLM] -- {2CF22C94-1369-4C04-9A5F-A4BC6D91B508}
O42 - Logiciel: IncrediMail 2.0 - (.IncrediMail Ltd..) [HKLM] -- IncrediMail
O42 - Logiciel: Java 8 Update 66 - (.Oracle Corporation.) [HKLM] -- {26A24AE4-039D-4CA4-87B4-2F83218066F0} ©
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM] -- {4A03706F-666A-4037-7777-5F2748764D10} ©
O42 - Logiciel: Junk Mail filter update - (.Microsoft Corporation.) [HKLM] -- {0BE9E708-5DC0-4963-9CFD-0AA519090E79} ©
O42 - Logiciel: LINE - (.LINE Corporation.) [HKLM] -- LINE ©
O42 - Logiciel: Logitech Webcam Software - (.Logitech Inc..) [HKLM] -- {D40EB009-0499-459c-A8AF-C9C110766215} ©
O42 - Logiciel: LWS Facebook - (.Logitech.) [HKLM] -- {FF167195-9EE4-46C0-8CD7-FBA3457E88AB} ©
O42 - Logiciel: LWS Gallery - (.Logitech.) [HKLM] -- {6F76EC3C-34B1-436E-97FB-48C58D7BEDCD} ©
O42 - Logiciel: LWS Help_main - (.Logitech.) [HKLM] -- {1651216E-E7AD-4250-92A1-FB8ED61391C9} ©
O42 - Logiciel: LWS Launcher - (.Logitech.) [HKLM] -- {83C8FA3C-F4EA-46C4-8392-D3CE353738D6} ©
O42 - Logiciel: LWS Motion Detection - (.Logitech.) [HKLM] -- {71E66D3F-A009-44AB-8784-75E2819BA4BA} ©
O42 - Logiciel: LWS Pictures And Video - (.Logitech.) [HKLM] -- {08610298-29AE-445B-B37D-EFBE05802967} ©
O42 - Logiciel: LWS Twitter - (.Logitech.) [HKLM] -- {174A3B31-4C43-43DD-866F-73C9DB887B48} ©
O42 - Logiciel: LWS Webcam Software - (.Logitech.) [HKLM] -- {8937D274-C281-42E4-8CDB-A0B2DF979189} ©
O42 - Logiciel: LWS WLM Plugin - (.Logitech.) [HKLM] -- {9DAEA76B-E50F-4272-A595-0124E826553D} ©
O42 - Logiciel: LWS YouTube Plugin - (.Logitech.) [HKLM] -- {21DF0294-6B9D-4741-AB6F-B2ABFBD2387E} ©
O42 - Logiciel: Malwarebytes Anti-Malware version 2.2.0.1024 - (.Malwarebytes.) [HKLM] -- Malwarebytes Anti-Malware_is1 ©
O42 - Logiciel: Microsoft Application Error Reporting - (.Microsoft Corporation.) [HKLM] -- {95120000-00B9-0409-0000-0000000FF1CE} ©
O42 - Logiciel: Microsoft OneDrive - (.Microsoft Corporation.) [HKCU] -- OneDriveSetup.exe ©
O42 - Logiciel: Microsoft Security Client - (.Microsoft Corporation.) [HKLM] -- {107F27B7-8EE4-4B3A-9CE5-497B120369DC} ©
O42 - Logiciel: Microsoft Security Essentials - (.Microsoft Corporation.) [HKLM] -- Microsoft Security Client ©
O42 - Logiciel: Microsoft Silverlight - (.Microsoft Corporation.) [HKLM] -- {89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} ©
O42 - Logiciel: Mozilla Firefox 42.0 (x86 fr) - (.Mozilla.) [HKLM] -- Mozilla Firefox 42.0 (x86 fr) ©
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM] -- MozillaMaintenanceService ©
O42 - Logiciel: MSVCRT - (.Microsoft.) [HKLM] -- {8DD46C6A-0056-4FEC-B70A-28BB16A1F11F} ©
O42 - Logiciel: MSVCRT110 - (.Microsoft.) [HKLM] -- {8E14DDC8-EA60-4E18-B3E3-1937104D5BDA} ©
O42 - Logiciel: Netview Pad OCX - (...) [HKLM] -- Netview Pad OCX
O42 - Logiciel: Netview_X OCX - (...) [HKLM] -- Netview_X OCX
O42 - Logiciel: NVIDIA Drivers - (.NVIDIA Corporation.) [HKLM] -- NVIDIA Drivers ©
O42 - Logiciel: NVIDIA ForceWare Network Access Manager - (.NVIDIA Corporation.) [HKLM] -- {7CFA46E3-CC2F-4355-82AE-6012DC3633FD} ©
O42 - Logiciel: NVIDIA MediaShield - (.NVIDIA Corporation.) [HKLM] -- {CC452A50-5C87-4A1F-B295-445C3C69BF7D} ©
O42 - Logiciel: PDF Architect 2 - (.pdfforge GmbH.) [HKLM] -- PDF Architect 2 ©
O42 - Logiciel: PDF Architect 2 Create Module - (.pdfforge GmbH.) [HKLM] -- {3D0D9604-0173-488D-9694-2638C44D7579} ©
O42 - Logiciel: PDF Architect 2 Edit Module - (.pdfforge GmbH.) [HKLM] -- {8B0A956F-9BE6-495B-AF80-7B5B42061D79} ©
O42 - Logiciel: PDF Architect 2 View Module - (.pdfforge GmbH.) [HKLM] -- {D691E998-CF53-4F6C-AC20-E4284660E0E7} ©
O42 - Logiciel: PDFCreator - (.pdfforge.) [HKLM] -- {0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D} ©
O42 - Logiciel: PhotoFiltre 7 - (...) [HKCU] -- PhotoFiltre 7
O42 - Logiciel: Rapport - (.Trusteer.) [HKLM] -- {1DD81E7D-0D28-4CEB-87B2-C041A4FCB215} ©
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A} ©
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM] -- {8833FFB6-5B0C-4764-81AA-06DFEED9A476} ©
O42 - Logiciel: Recover My Files - (.GetData Pty Ltd.) [HKLM] -- Recover My Files v5_is1 ©
O42 - Logiciel: Recuva - (.Piriform.) [HKLM] -- Recuva ©
O42 - Logiciel: Revo Uninstaller 1.95 - (.VS Revo Group.) [HKLM] -- Revo Uninstaller ©
O42 - Logiciel: RogueKiller version 11 - (.Adlice Software.) [HKLM] -- 8B3D7924-ED89-486B-8322-E8594065D5CB_is1 ©
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- {758C8301-2696-4855-AF45-534B1200980A} ©
O42 - Logiciel: Samsung Kies - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{758C8301-2696-4855-AF45-534B1200980A} ©
O42 - Logiciel: Samsung USB Driver for Mobile Phones - (.Samsung Electronics Co., Ltd..) [HKLM] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44} ©
O42 - Logiciel: Secret Disk - (.PrivacyRoot.com.) [HKLM] -- sede
O42 - Logiciel: Smart Switch - (.Samsung Electronics Co., Ltd..) [HKLM] -- {74FA5314-85C8-4E2A-907D-D9ECCCB770A7} ©
O42 - Logiciel: Smart Switch - (.Samsung Electronics Co., Ltd..) [HKLM] -- InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7} ©
O42 - Logiciel: Stellar Phoenix Photo Recovery - (.Stellar Information Technology Pvt Ltd..) [HKLM] -- Stellar Phoenix Photo Recovery_is1 ©
O42 - Logiciel: TeamViewer 7 - (.TeamViewer.) [HKLM] -- TeamViewer 7 ©
O42 - Logiciel: TP-LINK Archer T4U Driver - (.TP-LINK.) [HKLM] -- {58F414FE-74CC-42A0-9D86-A089849C510A} ©
O42 - Logiciel: TP-LINK Wireless Configuration Utility - (.TP-LINK.) [HKLM] -- {319D91C6-3D44-436C-9F79-36C0D22372DC} ©
O42 - Logiciel: Trusteer Sécurité des points d'accès - (.Trusteer.) [HKLM] -- Rapport_msi ©
O42 - Logiciel: TuneUp Utilities 2014 (fr-FR) - (.TuneUp Software.) [HKLM] -- {1A1940AF-774B-450B-864E-1CB2A1BE0951} ©
O42 - Logiciel: ubCore 6.0 - (.Unibrain.) [HKLM] -- {F65FE148-FCF5-42F7-8803-FA0B7DA8B8A4} ©
O42 - Logiciel: ubCore 6.0 - (.Unibrain.) [HKLM] -- InstallShield_{F65FE148-FCF5-42F7-8803-FA0B7DA8B8A4} ©
O42 - Logiciel: UsbFix - (.El Desaparecido - www.usbfix.net - www.sosvirus.net.) [HKLM] -- Usbfix ©
O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM] -- {95140000-00AF-040C-0000-0000000FF1CE} ©
O42 - Logiciel: VoipConnect - (.Finarea S.A. Switzerland.) [HKLM] -- VoipConnect_is1 ©

---\\ HKCU & HKLM Software Keys (121) - 11s
HKLM\SOFTWARE\7-Zip
HKLM\SOFTWARE\Adblock Plus for IE
HKLM\SOFTWARE\Addintools
HKLM\SOFTWARE\Adobe
HKLM\SOFTWARE\AdwCleaner
HKLM\SOFTWARE\AMD
HKLM\SOFTWARE\AppDataLow
HKLM\SOFTWARE\ATI
HKLM\SOFTWARE\ATI Technologies
HKLM\SOFTWARE\CBSTEST
HKLM\SOFTWARE\cybelsoft
HKLM\SOFTWARE\DigitalWave
HKLM\SOFTWARE\DRWNewFree
HKLM\SOFTWARE\DVDVideoSoft
HKLM\SOFTWARE\EASEUS
HKLM\SOFTWARE\EPSON
HKLM\SOFTWARE\EpsonNet
HKLM\SOFTWARE\Google
HKLM\SOFTWARE\IncrediMail
HKLM\SOFTWARE\InstallShield
HKLM\SOFTWARE\Intel
HKLM\SOFTWARE\IPCSERIES
HKLM\SOFTWARE\JavaSoft
HKLM\SOFTWARE\JreMetrics
HKLM\SOFTWARE\Khronos
HKLM\SOFTWARE\Licenses
HKLM\SOFTWARE\LINE Corporation
HKLM\SOFTWARE\logishrd
HKLM\SOFTWARE\Logitech
HKLM\SOFTWARE\Macromedia
HKLM\SOFTWARE\MAGIX
HKLM\SOFTWARE\Malwarebytes' Anti-Malware
HKLM\SOFTWARE\Mozilla
HKLM\SOFTWARE\mozilla.org
HKLM\SOFTWARE\MozillaPlugins
HKLM\SOFTWARE\Naver
HKLM\SOFTWARE\NHN Corporation
HKLM\SOFTWARE\NVIDIA Corporation
HKLM\SOFTWARE\ODBC
HKLM\SOFTWARE\PDF Architect 2
HKLM\SOFTWARE\PDFCreator.net
HKLM\SOFTWARE\Piriform
HKLM\SOFTWARE\privacyroot.com
HKLM\SOFTWARE\Realtek
HKLM\SOFTWARE\Realtek Semiconductor Corp.
HKLM\SOFTWARE\RegisteredApplications
HKLM\SOFTWARE\RTLSetup
HKLM\SOFTWARE\RtWlan
HKLM\SOFTWARE\SAMSUNG
HKLM\SOFTWARE\SEIKO EPSON CORPORATION
HKLM\SOFTWARE\SEIKO EPSON CORPORATION2
HKLM\SOFTWARE\Sensible Vision
HKLM\SOFTWARE\Skype
HKLM\SOFTWARE\Sonic
HKLM\SOFTWARE\Sony Corporation
HKLM\SOFTWARE\Stellar Data Recovery
HKLM\SOFTWARE\TeamViewer
HKLM\SOFTWARE\TP-LINK
HKLM\SOFTWARE\Trusteer
HKLM\SOFTWARE\TuneUp
HKLM\SOFTWARE\Unibrain
HKLM\SOFTWARE\Volatile
HKLM\SOFTWARE\WIBU-SYSTEMS
HKLM\SOFTWARE\WOW6432Node
HKLM\SOFTWARE\Yahoo
HKCU\SOFTWARE\7-Zip
HKCU\SOFTWARE\AdblockPlus
HKCU\SOFTWARE\Addintools
HKCU\SOFTWARE\Adobe
HKCU\SOFTWARE\AMD
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\apple
HKCU\SOFTWARE\ATI
HKCU\SOFTWARE\Bitdefender
HKCU\SOFTWARE\Chromium
HKCU\SOFTWARE\Clubic
HKCU\SOFTWARE\Convar
HKCU\SOFTWARE\DVDVideoSoft
HKCU\SOFTWARE\EPSON
HKCU\SOFTWARE\GetData
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\HKEY_CURRENT_USER
HKCU\SOFTWARE\HKEY_LOCAL_MACHINE
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\IncrediMail
HKCU\SOFTWARE\JavaSoft
HKCU\SOFTWARE\Lavalys
HKCU\SOFTWARE\Leadertech
HKCU\SOFTWARE\Licenses
HKCU\SOFTWARE\LINE Corporation
HKCU\SOFTWARE\Local AppWizard-Generated Applications
HKCU\SOFTWARE\LogiShrd
HKCU\SOFTWARE\Logitech
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\MMBPlayer
HKCU\SOFTWARE\MOVAVI
HKCU\SOFTWARE\Mozilla
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Naver
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\NHN Corporation
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\PDF Architect 2
HKCU\SOFTWARE\PDFCreator.net
HKCU\SOFTWARE\PhotoFiltre 7
HKCU\SOFTWARE\Piriform
HKCU\SOFTWARE\QtProject
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Stellar
HKCU\SOFTWARE\TeamViewer
HKCU\SOFTWARE\The Silicon Realms Toolworks
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Trusteer
HKCU\SOFTWARE\UsbFix
HKCU\SOFTWARE\VoipConnect
HKCU\SOFTWARE\VSRevoGroup
HKCU\SOFTWARE\WinRecovery
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft

---\\ Contenu des dossiers Programmes (247) - 12s
O43 - CFD: 14/12/2014 - [] D -- C:\Program Files\7-Zip
O43 - CFD: 29/11/2015 - [] D -- C:\Program Files\Adblock Plus for IE
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Adobe
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\AMD
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\AMD APP
O43 - CFD: 13/12/2014 - [] D -- C:\Program Files\AMD AVT
O43 - CFD: 13/12/2014 - [] D -- C:\Program Files\ATI
O43 - CFD: 13/12/2014 - [] D -- C:\Program Files\ATI Technologies
O43 - CFD: 06/12/2014 - [] D -- C:\Program Files\CardRecovery
O43 - CFD: 14/05/2015 - [] D -- C:\Program Files\CCleaner
O43 - CFD: 15/12/2014 - [] D -- C:\Program Files\Classic Menu for Office
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files\CodeMeter
O43 - CFD: 06/12/2015 - [] D -- C:\Program Files\Common Files
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files\Convar
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\DriversCloud.com
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\DVD Maker
O43 - CFD: 06/12/2014 - [] D -- C:\Program Files\EaseUS
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\epson
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Epson Software
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\EpsonNet
O43 - CFD: 04/12/2014 - [0] SHD -- C:\Program Files\Fichiers communs
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files\GetData
O43 - CFD: 15/12/2014 - [] D -- C:\Program Files\Google
O43 - CFD: 26/11/2015 - [] D -- C:\Program Files\HeroSpeedCMS
O43 - CFD: 16/11/2015 - [] D -- C:\Program Files\IncrediMail
O43 - CFD: 09/12/2015 - [] HD -- C:\Program Files\InstallShield Installation Information
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files\Internet Explorer
O43 - CFD: 19/11/2015 - [] D -- C:\Program Files\Java
O43 - CFD: 12/12/2014 - [] D -- C:\Program Files\K-Lite Codec Pack
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Lavalys
O43 - CFD: 13/12/2014 - [] D -- C:\Program Files\Logitech
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\ma-config.com
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Malwarebytes Anti-Malware
O43 - CFD: 10/12/2014 - [] D -- C:\Program Files\MarkAny
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Microsoft Games
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Microsoft Office
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Microsoft OneDrive
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Microsoft Security Client
O43 - CFD: 12/12/2014 - [] D -- C:\Program Files\Microsoft Silverlight
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Microsoft.NET
O43 - CFD: 30/11/2015 - [] D -- C:\Program Files\Mozilla Firefox
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Mozilla Maintenance Service
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\MSBuild
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\MSECache
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\My Company Name
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Naver
O43 - CFD: 20/11/2015 - [] D -- C:\Program Files\NetviewPad
O43 - CFD: 26/11/2015 - [] D -- C:\Program Files\NetviewX
O43 - CFD: 13/12/2014 - [] D -- C:\Program Files\NVIDIA Corporation
O43 - CFD: 14/01/2015 - [] D -- C:\Program Files\PDF Architect 2
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\PDFCreator
O43 - CFD: 19/12/2014 - [] D -- C:\Program Files\PhotoFiltre 7
O43 - CFD: 06/12/2015 - [] D -- C:\Program Files\Raptr
O43 - CFD: 13/12/2014 - [] D -- C:\Program Files\Realtek
O43 - CFD: 21/11/2015 - [] D -- C:\Program Files\Recuva
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Reference Assemblies
O43 - CFD: 11/12/2015 - [] D -- C:\Program Files\RogueKiller
O43 - CFD: 09/12/2015 - [] D -- C:\Program Files\Samsung
O43 - CFD: 19/11/2015 - [] D -- C:\Program Files\Secret Disk
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files\Stellar Phoenix Photo Recovery
O43 - CFD: 20/11/2015 - [] D -- C:\Program Files\TeamViewer
O43 - CFD: 04/12/2015 - [] D -- C:\Program Files\TP-LINK
O43 - CFD: 10/12/2014 - [] D -- C:\Program Files\Trusteer
O43 - CFD: 13/12/2014 - [] D -- C:\Program Files\Unibrain
O43 - CFD: 14/07/2009 - [0] HD -- C:\Program Files\Uninstall Information
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\VoipConnect.com
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\VS Revo Group
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files\Windows Defender
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files\Windows Journal
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Windows Live
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Mail
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Media Player
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Windows NT
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Photo Viewer
O43 - CFD: 20/11/2010 - [] D -- C:\Program Files\Windows Portable Devices
O43 - CFD: 12/04/2011 - [] D -- C:\Program Files\Windows Sidebar
O43 - CFD: 14/01/2015 - [] D -- C:\Program Files\WinRAR
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Yahoo!
O43 - CFD: 15/12/2014 - [] D -- C:\Program Files\ZHPDiag
O43 - CFD: 14/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
O43 - CFD: 04/12/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
O43 - CFD: 06/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CardRecovery
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Classic Menu for Office
O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com
O43 - CFD: 06/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard 8.5
O43 - CFD: 05/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
O43 - CFD: 16/11/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
O43 - CFD: 12/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
O43 - CFD: 19/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavalys
O43 - CFD: 10/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LINE
O43 - CFD: 13/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
O43 - CFD: 14/07/2009 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
O43 - CFD: 12/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
O43 - CFD: 13/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
O43 - CFD: 14/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
O43 - CFD: 14/01/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
O43 - CFD: 19/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 18/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
O43 - CFD: 11/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
O43 - CFD: 09/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
O43 - CFD: 19/11/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secret Disk
O43 - CFD: 04/12/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
O43 - CFD: 12/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Phoenix Photo Recovery
O43 - CFD: 12/04/2011 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tablet PC
O43 - CFD: 04/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
O43 - CFD: 05/12/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trusteer Sécurité des points d'accès
O43 - CFD: 13/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unibrain ubCore
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VoipConnect
O43 - CFD: 04/12/2014 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\Adobe
O43 - CFD: 13/12/2014 - [] D -- C:\ProgramData\AMD
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Application Data
O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\ATI
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\atjs
O43 - CFD: 04/12/2014 - [0] SHD -- C:\ProgramData\Bureau
O43 - CFD: 05/12/2015 - [] HD -- C:\ProgramData\Common Files
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Desktop
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Documents
O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\DriversCloud.com
O43 - CFD: 05/12/2014 - [] D -- C:\ProgramData\EPSON
O43 - CFD: 04/12/2014 - [0] SHD -- C:\ProgramData\Favoris
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Favorites
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\IM
O43 - CFD: 16/11/2015 - [] D -- C:\ProgramData\IncrediMail
O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Licenses
O43 - CFD: 13/12/2014 - [] D -- C:\ProgramData\LogiShrd
O43 - CFD: 15/12/2014 - [] D -- C:\ProgramData\Logs
O43 - CFD: 14/11/2015 - [] D -- C:\ProgramData\ma-config.com
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Malwarebytes
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\McAfee
O43 - CFD: 04/12/2014 - [0] SHD -- C:\ProgramData\Menu Démarrer
O43 - CFD: 11/12/2015 - [] SD -- C:\ProgramData\Microsoft
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Microsoft OneDrive
O43 - CFD: 04/12/2014 - [0] SHD -- C:\ProgramData\Modèles
O43 - CFD: 20/11/2015 - [0] D -- C:\ProgramData\Movavi Video Editor 11
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\Mozilla
O43 - CFD: 19/11/2015 - [] D -- C:\ProgramData\Oracle
O43 - CFD: 13/12/2014 - [] D -- C:\ProgramData\Package Cache
O43 - CFD: 14/01/2015 - [] D -- C:\ProgramData\PDF Architect 2
O43 - CFD: 10/12/2015 - [] D -- C:\ProgramData\RogueKiller
O43 - CFD: 10/12/2014 - [] D -- C:\ProgramData\Samsung
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Start Menu
O43 - CFD: 14/01/2015 - [] D -- C:\ProgramData\Sun
O43 - CFD: 12/12/2015 - [] AD -- C:\ProgramData\TEMP
O43 - CFD: 14/07/2009 - [0] SHD -- C:\ProgramData\Templates
O43 - CFD: 04/12/2015 - [] D -- C:\ProgramData\TP-LINK
O43 - CFD: 10/12/2014 - [] D -- C:\ProgramData\Trusteer
O43 - CFD: 05/12/2015 - [] D -- C:\ProgramData\TuneUp Software
O43 - CFD: 04/12/2014 - [] D -- C:\ProgramData\UDL
O43 - CFD: 11/12/2014 - [0] D -- C:\ProgramData\WinZip
O43 - CFD: 14/11/2015 - [] D -- C:\Program Files\Common Files\Adobe
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Common Files\Adobe AIR
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Common Files\ATI Technologies
O43 - CFD: 06/12/2015 - [] D -- C:\Program Files\Common Files\DVDVideoSoft
O43 - CFD: 05/12/2014 - [] D -- C:\Program Files\Common Files\EPSON
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Common Files\InstallShield
O43 - CFD: 19/11/2015 - [] D -- C:\Program Files\Common Files\Java
O43 - CFD: 13/12/2014 - [] D -- C:\Program Files\Common Files\LogiShrd
O43 - CFD: 12/12/2014 - [] D -- C:\Program Files\Common Files\microsoft shared
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\Services
O43 - CFD: 14/07/2009 - [] D -- C:\Program Files\Common Files\SpeechEngines
O43 - CFD: 17/12/2014 - [] D -- C:\Program Files\Common Files\System
O43 - CFD: 04/12/2014 - [] D -- C:\Program Files\Common Files\Windows Live
O43 - CFD: 17/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\Adobe
O43 - CFD: 20/11/2015 - [] D -- C:\Users\nours52\AppData\Roaming\AMD
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\ATI
O43 - CFD: 10/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\driver
O43 - CFD: 06/12/2015 - [] D -- C:\Users\nours52\AppData\Roaming\DVDVideoSoft
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\Epson
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\Identities
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\InstallShield
O43 - CFD: 13/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\Leadertech
O43 - CFD: 13/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\library_dir
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\Macromedia
O43 - CFD: 12/04/2011 - [0] D -- C:\Users\nours52\AppData\Roaming\Media Center Programs
O43 - CFD: 11/12/2015 - [] SD -- C:\Users\nours52\AppData\Roaming\Microsoft
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\Mozilla
O43 - CFD: 15/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\ockoRb5
O43 - CFD: 14/01/2015 - [] D -- C:\Users\nours52\AppData\Roaming\PDF Architect 2
O43 - CFD: 19/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\PhotoFiltre 7
O43 - CFD: 10/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\QuickScan
O43 - CFD: 06/12/2015 - [0] D -- C:\Users\nours52\AppData\Roaming\Raptr
O43 - CFD: 09/12/2015 - [] D -- C:\Users\nours52\AppData\Roaming\Samsung
O43 - CFD: 12/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\Secret Disk
O43 - CFD: 14/11/2015 - [] D -- C:\Users\nours52\AppData\Roaming\Sun
O43 - CFD: 04/12/2015 - [] D -- C:\Users\nours52\AppData\Roaming\TP-LINK
O43 - CFD: 05/12/2015 - [] D -- C:\Users\nours52\AppData\Roaming\TuneUp Software
O43 - CFD: 07/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\VoipBuster
O43 - CFD: 23/11/2015 - [] D -- C:\Users\nours52\AppData\Roaming\VoipConnect
O43 - CFD: 15/11/2015 - [] D -- C:\Users\nours52\AppData\Roaming\Windows Live Writer
O43 - CFD: 14/01/2015 - [] D -- C:\Users\nours52\AppData\Roaming\WinRAR
O43 - CFD: 13/12/2015 - [] D -- C:\Users\nours52\AppData\Roaming\ZHP
O43 - CFD: 07/12/2015 - [] HD -- C:\Users\nours52\AppData\Local\2de9e3a650274c40
O43 - CFD: 07/12/2015 - [] HD -- C:\Users\nours52\AppData\Local\7b01aaf652e7b2d2
O43 - CFD: 05/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Administrator tools.{d20ea4e1-3957-11d2-a40b-0c5020524153}
O43 - CFD: 02/12/2015 - [] D -- C:\Users\nours52\AppData\Local\Adobe
O43 - CFD: 04/12/2014 - [0] SHD -- C:\Users\nours52\AppData\Local\Application Data
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Local\ATI
O43 - CFD: 14/11/2015 - [] D -- C:\Users\nours52\AppData\Local\CEF
O43 - CFD: 14/05/2015 - [] D -- C:\Users\nours52\AppData\Local\Chromium
O43 - CFD: 11/12/2015 - [] D -- C:\Users\nours52\AppData\Local\CrashDumps
O43 - CFD: 10/12/2015 - [] D -- C:\Users\nours52\AppData\Local\Diagnostics
O43 - CFD: 10/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Downloaded Installations
O43 - CFD: 04/12/2015 - [] D -- C:\Users\nours52\AppData\Local\ElevatedDiagnostics
O43 - CFD: 12/12/2014 - [] SHD -- C:\Users\nours52\AppData\Local\EmieBrowserModeList
O43 - CFD: 12/12/2014 - [] SHD -- C:\Users\nours52\AppData\Local\EmieSiteList
O43 - CFD: 12/12/2014 - [] SHD -- C:\Users\nours52\AppData\Local\EmieUserList
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Google
O43 - CFD: 04/12/2014 - [0] SHD -- C:\Users\nours52\AppData\Local\Historique
O43 - CFD: 16/11/2015 - [] D -- C:\Users\nours52\AppData\Local\IM
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Line
O43 - CFD: 13/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Logitech® Webcam Software
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Macromedia
O43 - CFD: 11/12/2015 - [] D -- C:\Users\nours52\AppData\Local\Microsoft
O43 - CFD: 20/11/2015 - [] D -- C:\Users\nours52\AppData\Local\Movavi
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Mozilla
O43 - CFD: 29/11/2015 - [] D -- C:\Users\nours52\AppData\Local\OppositelySorted
O43 - CFD: 14/01/2015 - [0] D -- C:\Users\nours52\AppData\Local\PDFCreator
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Programs
O43 - CFD: 10/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Samsung
O43 - CFD: 13/12/2015 - [] D -- C:\Users\nours52\AppData\Local\Temp
O43 - CFD: 04/12/2014 - [0] SHD -- C:\Users\nours52\AppData\Local\Temporary Internet Files
O43 - CFD: 10/12/2014 - [] D -- C:\Users\nours52\AppData\Local\Trusteer
O43 - CFD: 05/12/2015 - [] D -- C:\Users\nours52\AppData\Local\TuneUp Software
O43 - CFD: 20/11/2015 - [] D -- C:\Users\nours52\AppData\Local\videocapture
O43 - CFD: 20/11/2015 - [] D -- C:\Users\nours52\AppData\Local\VideoEditor
O43 - CFD: 04/12/2014 - [0] D -- C:\Users\nours52\AppData\Local\VirtualStore
O43 - CFD: 15/11/2015 - [] D -- C:\Users\nours52\AppData\Local\Windows Live
O43 - CFD: 26/11/2015 - [] D -- C:\Users\nours52\AppData\Local\Windows Live Writer
O43 - CFD: 22/11/2015 - [] D -- C:\Users\nours52\AppData\Local\{2250140C-06F8-78B4-6B60-5D5C4F08A1C4}
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
O43 - CFD: 17/12/2014 - [] RD -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
O43 - CFD: 12/12/2015 - [] D -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar
O43 - CFD: 20/11/2015 - [] D -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HeroSpeedCMS
O43 - CFD: 14/07/2009 - [] RD -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
O43 - CFD: 20/11/2015 - [] D -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netview Pad OCX
O43 - CFD: 04/12/2015 - [] D -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netview_X OCX
O43 - CFD: 19/12/2014 - [0] D -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PhotoFiltre 7
O43 - CFD: 12/12/2015 - [] D -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recover My Files v5
O43 - CFD: 04/12/2014 - [] D -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
O43 - CFD: 17/12/2014 - [] RD -- C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

---\\ ShellIconOverlayIdentifiers (SIOI) (5) - 0s
O106 - SIOI: UpToDateOverlayHandler Class [ SkyDrive1] - {F241C880-6982-4CE5-8CF7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\nours52\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: SyncingOverlayHandler Class [ SkyDrive2] - {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\nours52\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: ErrorOverlayHandler Class [ SkyDrive3] - {BBACC218-34EA-4666-9D7A-C78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -- C:\Users\nours52\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll =>.Microsoft Corporation®
O106 - SIOI: Enhanced Storage Icon Overlay Handler Class [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll ©
O106 - SIOI: Sharing Overlay (Private) [SharingPrivate] - {08244EE6-92F0-47f2-9FC9-929BAA2E7235}. (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll ©

---\\ Enumération des clés StartupReg (9) - 1s
O53 - SMSR:HKLM\...\startupreg\Adobe ARM [Key] . (.Adobe Systems Incorporated - Adobe Reader and Acrobat Manager.) -- C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe ©
O53 - SMSR:HKLM\...\startupreg\CCleaner Monitoring [Key] . (.Piriform Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe ©
O53 - SMSR:HKLM\...\startupreg\FUFAXRCV [Key] . (.SEIKO EPSON CORPORATION - Fax Reception.) -- C:\Program Files\Epson Software\FAX Utility\FUFAXRCV.exe ©
O53 - SMSR:HKLM\...\startupreg\FUFAXSTM [Key] . (.SEIKO EPSON CORPORATION - Fax Transmission.) -- C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe ©
O53 - SMSR:HKLM\...\startupreg\IncrediMail [Key] . (.IncrediMail, Ltd. - IncrediMail Application.) -- C:\Program Files\IncrediMail\Bin\IncMail.exe
O53 - SMSR:HKLM\...\startupreg\KiesTrayAgent [Key] . (.Samsung Electronics Co., Ltd. - Kies TrayAgent Application.) -- C:\Program Files\Samsung\Kies\KiesTrayAgent.exe ©
O53 - SMSR:HKLM\...\startupreg\LWS [Key] . (.Logitech Inc. - Logitech Webcam Software.) -- C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe ©
O53 - SMSR:HKLM\...\startupreg\Secret Disk Maintance [Key] . (.www.privacyroot.com - Application Installer.) -- C:\Program Files\Secret Disk\net1.exe
O53 - SMSR:HKLM\...\startupreg\VoipConnect [Key] . (.VoipConnect - Client to make VoIP calls..) -- C:\Program Files\VoipConnect.com\VoipConnect\voipconnect.exe

---\\ Liste des pilotes du système (87) - 10s
O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec Windows SAS/SATA Storport Driver.) -- C:\Windows\System32\drivers\adp94xx.sys [422976] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:17 A . (.Adaptec, Inc. - Adaptec Windows SATA Storport Driver.) -- C:\Windows\System32\drivers\adpahci.sys [297552] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec StorPort Ultra320 SCSI Driver.) -- C:\Windows\System32\drivers\adpu320.sys [146512] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Acer Laboratories Inc. - ALi mini IDE Driver.) -- C:\Windows\System32\drivers\aliide.sys [14400] =>.Microsoft Windows®
O58 - SDL:2015/08/04 07:25:42 A . (.Advanced Micro Devices - AMD ACP Binaries.) -- C:\Windows\System32\drivers\amdacpksd.sys [268488] =>.Advanced Micro Devices, Inc.®
O58 - SDL:2010/11/20 22:29:03 A . (.Advanced Micro Devices - AHCI 1.2 Device Driver.) -- C:\Windows\System32\drivers\amdsata.sys [80256] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\Windows\System32\drivers\amdsbs.sys [159312] =>.Microsoft Windows®
O58 - SDL:2010/11/20 22:29:03 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\Windows\System32\drivers\amdxata.sys [22400] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec RAID Storport Driver.) -- C:\Windows\System32\drivers\arc.sys [76368] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:26:15 A . (.Adaptec, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\Windows\System32\drivers\arcsas.sys [86608] =>.Microsoft Windows®
O58 - SDL:2015/07/15 11:20:30 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\Windows\System32\drivers\AtihdW73.sys [78848] ©
O58 - SDL:2015/08/04 07:21:54 A . (.Advanced Micro Devices, Inc. - ATI Radeon Kernel Mode Driver.) -- C:\Windows\System32\drivers\atikmdag.sys [19503104] ©
O58 - SDL:2015/08/04 02:41:16 A . (.Advanced Micro Devices, Inc. - AMD multi-vendor Miniport Driver.) -- C:\Windows\System32\drivers\atikmpag.sys [532480] ©
O58 - SDL:2009/07/13 23:02:49 A . (.Broadcom Corporation - Pilote unifié NDIS6.x Broadcom NetXtreme Gi.) -- C:\Windows\System32\drivers\b57nd60x.sys [229888] ©
O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Lower.) -- C:\Windows\System32\drivers\BrFiltLo.sys [13568] ©
O58 - SDL:2009/07/13 23:53:28 A . (.Brother Industries, Ltd. - Windows ME USB Mass-Storage Bulk-Only Upper.) -- C:\Windows\System32\drivers\BrFiltUp.sys [5248] ©
O58 - SDL:2009/07/14 01:57:25 A . (.Brother Industries Ltd. - Pilote Brother Série I/F (WDM).) -- C:\Windows\System32\drivers\BrSerId.sys [272128] ©
O58 - SDL:2009/07/13 23:53:32 A . (.Brother Industries Ltd. - Brother Serial driver (WDM version).) -- C:\Windows\System32\drivers\BrSerWdm.sys [62336] ©
O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB MDM Driver.) -- C:\Windows\System32\drivers\BrUsbMdm.sys [12160] ©
O58 - SDL:2009/07/13 23:53:33 A . (.Brother Industries Ltd. - Brother USB Serial Driver.) -- C:\Windows\System32\drivers\BrUsbSer.sys [11904] ©
O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II GigE VBD.) -- C:\Windows\System32\drivers\bxvbdx.sys [430080] ©
O58 - SDL:2009/07/14 02:26:21 A . (.CMD Technology, Inc. - CMD PCI IDE Bus Driver.) -- C:\Windows\System32\drivers\cmdide.sys [15952] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:28 A . (.Adaptec, Inc. - Adaptec Ultra SCSI miniport.) -- C:\Windows\System32\drivers\djsvs.sys [70720] =>.Microsoft Windows®
O58 - SDL:2009/07/14 02:20:28 A . (.Emulex - Storport Miniport Driver for LightPulse HBA.) -- C:\Windows\System32\drivers\elxstor.sys [453712] =>.Microsoft Windows®
O58 - SDL:2009/07/13 23:02:48 A . (.Broadcom Corporation - Broadcom NetXtreme II 10 GigE VBD.) -- C:\Windows\System32\drivers\evbdx.sys [3100160] ©
O58 - SDL:2009/07/13 23:54:14 A . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for.) -- C:\Windows\System32\drivers\hcw85cir.sys [26624] ©
O58 - SDL:2009/07/14 02:20:28 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\Windows\System32\drivers\HpSAMD.sys [67152] =>.

Je suis vraiment désolé.je ne sais pas ce qu'il se passe avec cette application.

@nours52Ce n'est pas de ta faute non plus :)
J'aurais bien tenté zhpdiag mais pas sûr qu'il fasse sauter les deux clés

Oui même fenêtre avec le même message:Le fichier fixlist.txt doit être dans le même dossier que l'outil.Pourtant celui-ci est bien sur le bureau,comme auparavant .

La correction ne peut se faire.Même probleme qu'il y a 2 jours.Il ne trouve pas le fichier,même en mode sans échec .

Apparemment mon post avec l'analyse n'est encore pas passé !!
Je commence a avoir les abeilles ...

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version:09-12-2015
Exécuté par nours52 (administrateur) sur NOURS52-PC (12-12-2015 11:01:34)
Exécuté depuis C:\Users\nours52\Desktop
Profils chargés: nours52 (Profils disponibles: nours52)
Platform: Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Safe Mode (with Networking)
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\System32\userinit.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [NVRaidService] => C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe [163944 2010-04-09] (NVIDIA Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\AMD\ATI.ACE\Core-Static\x86\CLIStart.exe [748744 2015-08-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKLM\...\RunOnce: [Toropecelof] => C:\Windows\system32\wscript.exe /E:vbscript /B "C:\Users\nours52\AppData\Local\2DE9E3~1\Copimo.dat"
HKLM\...\RunOnce: [Delafe] => C:\Windows\system32\wscript.exe /E:vbscript /B "C:\Users\nours52\AppData\Local\7B01AA~1\Molapa.dat"
HKU\S-1-5-21-1281696408-34496212-1937324486-1001\...\Run: [Secret Disk Maintance] => C:\Program Files\Secret Disk\net1.exe [512664 2015-11-19] (www.privacyroot.com)
HKU\S-1-5-21-1281696408-34496212-1937324486-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6602152 2015-11-16] (Piriform Ltd)
HKU\S-1-5-21-1281696408-34496212-1937324486-1001\...\Run: [VoipConnect] => C:\Program Files\VoipConnect.com\VoipConnect\voipconnect.exe [32417376 2015-11-14] (VoipConnect)
HKU\S-1-5-21-1281696408-34496212-1937324486-1001\...\MountPoints2: {e7abd753-7d00-11e4-b7d6-001d927269d7} - E:\LaunchU3.exe -a
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK Wireless Configuration Utility.lnk [2015-12-04]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Avec liste blanche) ====================

Est ok a présent?

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{46414B2F-FD5B-41CE-8CD5-EFDC532156BA}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{7073DC32-2D44-496F-B631-2B231C704DEF}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{72AB79E9-BD6B-4850-8F5A-72E9DC0BAF4B}: [DhcpNameServer] 212.27.40.241 212.27.40.240

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://google.fr
SearchScopes: HKLM -> {1b31c9d2-7135-442b-bb93-7c002172adc6} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1281696408-34496212-1937324486-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1281696408-34496212-1937324486-1001 -> {1b31c9d2-7135-442b-bb93-7c002172adc6} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-19] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-19] (Oracle Corporation)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2014-08-12] (Adblock Plus)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)
Toolbar: HKLM - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\nours52\AppData\Roaming\Mozilla\Firefox\Profiles\nn6v4sm1.default-1448083578042
FF SelectedSearchEngine: Bing®
FF Homepage: hxxp://www.google.fr/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-08] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-19] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-09-30] (Adobe Systems Inc.)
FF Plugin: PDF Architect 2 -> C:\Program Files\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF HKLM\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Extension: PDF Architect 2 Creator - C:\Program Files\PDF Architect 2\resources\pdfarchitect2firefoxextension [2015-01-14] [non signé]
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.com"

CHR Profile: C:\Users\nours52\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\nours52\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-04]
CHR Extension: (YouTube) - C:\Users\nours52\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-04]
CHR Extension: (Recherche Google) - C:\Users\nours52\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-04]
CHR Extension: (Gmail) - C:\Users\nours52\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-04]
CHR HKLM\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1281696408-34496212-1937324486-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bbjllphbppobebmjpjcijfbakobcheof] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S2 CodeMeter.exe; C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe [2571704 2012-12-03] (WIBU-SYSTEMS AG)
S2 ForceWare Intelligent Application Manager (IAM); C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcAppFlt.exe [370792 2010-01-21] ()
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Fichier non signé]
S4 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
S2 nSvcIp; C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin32\nSvcIp.exe [167528 2010-01-21] ()
S3 PDF Architect 2; C:\Program Files\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
S2 PDF Architect 2 Creator; C:\Program Files\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
S2 RapportMgmtService; C:\Program Files\Trusteer\Rapport\bin\RapportMgmtService.exe [2259224 2015-11-24] (IBM Corp.)
S2 RunSwUSB; C:\Windows\runSW.exe [48856 2015-03-19] ()
S2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2015-05-21] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 CompFilter; C:\Windows\System32\DRIVERS\lvbusflt.sys [19688 2012-09-21] (Logitech Inc.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2015-12-06] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
S1 RapportCerberus_1507079; C:\ProgramData\Trusteer\Rapport\store\exts\RapportCerberus\baseline\RapportCerberus32_1507079.sys [558456 2015-12-05] (IBM Corp.)
S1 RapportEI; C:\Program Files\Trusteer\Rapport\bin\RapportEI.sys [294968 2015-11-24] (IBM Corp.)
S0 RapportHades; C:\Windows\System32\Drivers\RapportHades.sys [71384 2015-11-24] (IBM Corp.)
S0 RapportKELL; C:\Windows\System32\Drivers\RapportKELL.sys [224344 2015-11-24] (IBM Corp.)
S1 RapportPG; C:\Program Files\Trusteer\Rapport\bin\RapportPG.sys [352408 2015-11-24] (IBM Corp.)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [2516696 2015-01-15] (Realtek Semiconductor Corporation )
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [30848 2015-12-11] ()
S3 ubohci; C:\Windows\System32\DRIVERS\ubohci.sys [116736 2012-10-05] (Unibrain)
S2 ubsbm; C:\Windows\System32\DRIVERS\ubsbm.sys [17408 2012-10-05] (Unibrain)
S2 ubumapi; C:\Windows\System32\DRIVERS\ubumapi.sys [46592 2012-10-05] (Unibrain)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S1 uhgyvfwv; \??\C:\Windows\system32\drivers\uhgyvfwv.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2015-12-12 11:01 - 2015-12-12 11:01 - 00012496 _____ C:\Users\nours52\Desktop\FRST.txt
2015-12-12 07:33 - 2015-12-12 07:33 - 00001118 _____ C:\Users\nours52\Desktop\Stellar Phoenix Photo Recovery.lnk
2015-12-12 07:33 - 2015-12-12 07:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stellar Phoenix Photo Recovery
2015-12-12 07:33 - 2015-12-12 07:33 - 00000000 ____D C:\Program Files\Stellar Phoenix Photo Recovery
2015-12-12 07:32 - 2015-12-12 07:32 - 10802040 _____ (Stellar Information Technology Pvt Ltd. ) C:\Users\nours52\Downloads\StellarPhoenixPhotoRecoveryWindows_MA.exe
2015-12-12 07:24 - 2015-12-12 07:24 - 00001194 _____ C:\Users\nours52\Desktop\Recover My Files v5.lnk
2015-12-12 07:24 - 2015-12-12 07:24 - 00000000 ____H C:\ProgramData\cm-lock
2015-12-12 07:24 - 2015-12-12 07:24 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recover My Files v5
2015-12-12 07:24 - 2015-12-12 07:24 - 00000000 ____D C:\Program Files\GetData
2015-12-12 07:24 - 2015-12-12 07:24 - 00000000 ____D C:\Program Files\CodeMeter
2015-12-12 07:24 - 2012-12-03 14:49 - 00670120 _____ (WIBU-SYSTEMS AG) C:\Windows\system32\WibuCm32.dll
2015-12-12 07:22 - 2015-12-12 07:23 - 32628136 _____ ({code:GDConstant/CompanyName} ) C:\Users\nours52\Downloads\RecoverMyFiles-Setup-French.exe
2015-12-12 07:14 - 2015-12-12 07:14 - 03462033 _____ C:\Users\nours52\Downloads\pci_filerecovery.exe
2015-12-12 07:14 - 2015-12-12 07:14 - 00001280 _____ C:\Users\nours52\Desktop\PC Inspector File Recovery.lnk
2015-12-12 07:14 - 2015-12-12 07:14 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Convar
2015-12-12 07:14 - 2015-12-12 07:14 - 00000000 ____D C:\Program Files\Convar
2015-12-12 06:48 - 2015-12-12 06:48 - 00000000 ____D C:\Users\nours52\Documents\CardRecovery
2015-12-11 20:20 - 2015-12-11 20:20 - 01738240 _____ C:\Users\nours52\Downloads\adwcleaner_5.024.exe
2015-12-11 19:20 - 2015-12-11 19:20 - 00005464 _____ C:\Users\nours52\Desktop\rapport RogueKiller.txt
2015-12-11 19:08 - 2015-12-11 19:08 - 30225712 _____ (Adlice Software ) C:\Users\nours52\Downloads\setup(1).exe
2015-12-11 19:06 - 2015-12-12 11:01 - 00156892 _____ C:\Windows\ntbtlog.txt
2015-12-11 18:27 - 2015-12-11 19:24 - 00000000 ____D C:\Users\nours52\AppData\Local\CrashDumps
2015-12-10 16:09 - 2015-12-11 19:09 - 00030848 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-12-10 16:09 - 2015-12-11 19:09 - 00001001 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2015-12-10 16:09 - 2015-12-11 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2015-12-10 16:09 - 2015-12-11 19:09 - 00000000 ____D C:\Program Files\RogueKiller
2015-12-10 16:09 - 2015-12-10 16:10 - 00000000 ____D C:\ProgramData\RogueKiller
2015-12-10 16:07 - 2015-12-10 16:07 - 30225712 _____ (Adlice Software ) C:\Users\nours52\Downloads\setup.exe
2015-12-10 15:42 - 2015-12-10 15:42 - 00000000 __SHD C:\Users\nours52\AppData\LocalLow\EmieUserList
2015-12-10 15:42 - 2015-12-10 15:42 - 00000000 __SHD C:\Users\nours52\AppData\LocalLow\EmieSiteList
2015-12-10 15:42 - 2015-12-10 15:42 - 00000000 __SHD C:\Users\nours52\AppData\LocalLow\EmieBrowserModeList
2015-12-10 15:20 - 2015-12-10 15:20 - 00138684 _____ C:\Users\nours52\Documents\Prise en charge mutuelle lunettes 12.2015
2015-12-10 08:03 - 2015-12-10 08:03 - 01720320 _____ (Farbar) C:\Users\nours52\Desktop\FRST.exe
2015-12-09 20:34 - 2015-12-09 21:56 - 00000262 _____ C:\Users\nours52\Downloads\Search.txt
2015-12-09 16:55 - 2015-12-09 16:55 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-12-09 16:55 - 2015-12-09 16:55 - 00000000 ____D C:\Users\nours52\Documents\Samsung
2015-12-09 16:54 - 2015-12-09 16:54 - 00002069 _____ C:\Users\Public\Desktop\Smart Switch.lnk
2015-12-09 16:54 - 2015-12-09 16:54 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2015-12-09 16:53 - 2015-05-21 07:02 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2015-12-09 16:53 - 2015-05-21 07:02 - 00089984 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2015-12-09 16:49 - 2015-12-09 16:50 - 39026872 _____ (Samsung Electronics Co., Ltd.) C:\Users\nours52\Downloads\Smart_Switch_PC_4.0.15113_12.exe
2015-12-09 16:42 - 2015-12-09 16:42 - 00048896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\uzmvyreu.sys
2015-12-09 13:09 - 2015-12-09 13:33 - 00000000 ____D C:\Rem-VBSqt
2015-12-08 18:15 - 2015-12-08 18:15 - 00001448 _____ C:\Users\nours52\Desktop\UsbFix.lnk
2015-12-08 18:14 - 2015-12-08 18:15 - 00000000 ____D C:\UsbFix
2015-12-08 18:13 - 2015-12-08 18:13 - 03069472 _____ (El Desaparecido - SosVirus.net - UsbFix.net) C:\Users\nours52\Downloads\UsbFix.exe
2015-12-07 13:45 - 2015-12-07 13:42 - 00093572 _____ C:\Users\nours52\Documents\Molapa.zip
2015-12-07 13:45 - 2015-12-07 13:42 - 00072888 _____ C:\Users\nours52\Documents\Copimo.zip
2015-12-07 08:52 - 2015-12-07 08:52 - 00000299 _____ C:\Users\nours52\Desktop\Antivirus gratuits en ligne - VirusTotal.URL
2015-12-06 21:14 - 2015-12-06 21:14 - 00001348 _____ C:\Users\nours52\Documents\malwarebyte.txt
2015-12-06 20:44 - 2015-12-06 20:44 - 01736704 _____ C:\Users\nours52\Downloads\adwcleaner_5.023 (3).exe
2015-12-05 19:39 - 2015-12-05 19:39 - 00002147 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities 2014.lnk
2015-12-05 19:39 - 2015-12-05 19:39 - 00000000 ____D C:\Users\nours52\AppData\Roaming\TuneUp Software
2015-12-05 19:39 - 2015-12-05 19:39 - 00000000 ____D C:\Users\nours52\AppData\Local\TuneUp Software
2015-12-05 19:39 - 2015-06-25 07:53 - 00025400 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2015-12-05 19:38 - 2015-12-05 19:41 - 00000000 ____D C:\ProgramData\TuneUp Software
2015-12-05 19:37 - 2015-12-06 20:47 - 00000000 ____D C:\searchplugins
2015-12-05 19:36 - 2015-12-06 11:20 - 00000000 ____D C:\Users\nours52\AppData\Roaming\DVDVideoSoft
2015-12-05 19:36 - 2015-12-05 19:36 - 00345360 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService.dll
2015-12-05 19:36 - 2015-12-05 19:36 - 00002896 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini
2015-12-05 19:35 - 2015-12-06 11:20 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2015-12-05 19:34 - 2015-12-05 19:35 - 25801384 _____ (DVDVideoSoft Ltd. ) C:\Users\nours52\Downloads\free-video-flip-and-rotate_2-2-10-1127_fr_72306.exe
2015-12-05 19:04 - 2015-12-05 19:04 - 00037906 _____ C:\Users\nours52\Documents\FRST.txt
2015-12-05 19:04 - 2015-12-05 19:04 - 00036061 _____ C:\Users\nours52\Documents\Addition.txt
2015-12-05 19:00 - 2015-12-05 19:03 - 00036061 _____ C:\Users\nours52\Downloads\Addition.txt
2015-12-05 18:58 - 2015-12-09 20:45 - 00042604 _____ C:\Users\nours52\Downloads\FRST.txt
2015-12-05 18:57 - 2015-12-12 11:01 - 00000000 ____D C:\FRST
2015-12-05 18:57 - 2015-12-09 20:31 - 01720320 _____ (Farbar) C:\Users\nours52\Downloads\FRST.exe
2015-12-05 17:18 - 2015-12-05 17:18 - 01736704 _____ C:\Users\nours52\Downloads\adwcleaner_5.023(4).exe
2015-12-05 06:17 - 2015-12-05 06:17 - 01736704 _____ C:\Users\nours52\Downloads\adwcleaner_5.023 (2).exe
2015-12-04 19:29 - 2015-12-04 19:29 - 01222889 _____ C:\Users\nours52\Downloads\(1) Facebook.htm
2015-12-04 19:29 - 2015-12-04 19:29 - 00000000 ____D C:\Users\nours52\Downloads\(1) Facebook_fichiers
2015-12-04 18:48 - 2015-12-04 18:48 - 03208000 _____ C:\Users\nours52\Downloads\IPCOCX_X(4).exe
2015-12-04 11:48 - 2015-12-04 11:49 - 00000000 ____D C:\Users\nours52\AppData\Roaming\TP-LINK
2015-12-04 11:47 - 2015-12-04 11:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2015-12-04 11:47 - 2015-12-04 11:47 - 00002213 _____ C:\Users\Public\Desktop\TP-LINK Wireless Configuration Utility.lnk
2015-12-04 11:47 - 2015-12-04 11:47 - 00000000 ____D C:\Program Files\TP-LINK
2015-12-04 11:45 - 2015-03-17 06:33 - 00008994 _____ C:\Windows\system32\netrtwlanu.cat
2015-12-04 11:45 - 2015-01-16 10:52 - 00008100 _____ C:\Windows\system32\rtlCoInst.dat
2015-12-04 11:45 - 2015-01-15 14:00 - 02516696 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\rtwlanu.sys
2015-12-04 11:45 - 2015-01-15 14:00 - 02516696 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\RTWlanU.sys
2015-12-04 11:45 - 2015-01-15 14:00 - 00017112 _____ (Windows (R) 2000 DDK provider) C:\Windows\system32\rtlCoInst.dll
2015-12-04 11:44 - 2015-03-19 08:41 - 00454360 _____ (Realtek) C:\Windows\SwUSB.exe
2015-12-04 11:44 - 2015-03-19 08:41 - 00048856 _____ () C:\Windows\runSW.exe
2015-12-04 11:42 - 2015-12-04 11:46 - 00000000 ____D C:\ProgramData\TP-LINK
2015-12-04 10:08 - 2015-12-04 10:08 - 01979392 _____ C:\Users\nours52\Downloads\ZHPDiag3(1).exe
2015-12-04 08:50 - 2015-12-04 08:50 - 01736704 _____ C:\Users\nours52\Downloads\adwcleaner_5.023 (1).exe
2015-12-03 21:16 - 2015-12-03 21:16 - 03208000 _____ C:\Users\nours52\Downloads\IPCOCX_X(3).exe
2015-12-03 21:14 - 2015-12-03 21:14 - 03208000 _____ C:\Users\nours52\Downloads\IPCOCX_X(2).exe
2015-12-03 21:13 - 2015-12-03 21:13 - 01736704 _____ C:\Users\nours52\Downloads\adwcleaner_5.023(3).exe
2015-12-03 16:54 - 2015-12-03 16:54 - 01979392 _____ C:\Users\nours52\Downloads\ZHPDiag3.exe
2015-12-02 21:35 - 2015-12-02 21:35 - 01736704 _____ C:\Users\nours52\Downloads\adwcleaner_5.023(2).exe
2015-12-02 19:59 - 2015-12-02 20:00 - 03208000 _____ C:\Users\nours52\Downloads\IPCOCX_X(1).exe
2015-12-02 19:56 - 2015-12-02 19:56 - 03208000 _____ C:\Users\nours52\Downloads\IPCOCX_X.exe
2015-12-02 08:55 - 2015-12-02 08:55 - 00000230 _____ C:\Users\nours52\Desktop\Patlayboys.URL
2015-12-01 22:25 - 2015-12-01 23:16 - 1258291200 _____ C:\Users\nours52\Downloads\Le Grand Raid - Zone-Telechargement.com.part1.rar
2015-12-01 22:13 - 2015-12-01 23:09 - 1499032636 _____ C:\Users\nours52\Downloads\Miasto.44.2014.FRENCH.BDRip.XviD-ViVi.zone-telechargement.com.avi
2015-12-01 19:17 - 2015-12-01 19:17 - 01736704 _____ C:\Users\nours52\Downloads\adwcleaner_5.023(1).exe
2015-12-01 19:16 - 2015-12-01 19:16 - 00002278 _____ C:\Users\nours52\Downloads\adwcleaner_5.023.exe
2015-11-30 19:19 - 2015-11-30 19:20 - 42829656 _____ C:\Users\nours52\Downloads\Firefox Setup 41.0.2.exe
2015-11-30 18:07 - 2015-11-30 18:07 - 00000000 ____D C:\Record
2015-11-30 15:30 - 2015-11-30 15:30 - 00000208 _____ C:\Users\nours52\Desktop\IP Camera.url
2015-11-30 08:45 - 2015-11-30 08:45 - 01733632 _____ C:\Users\nours52\Downloads\AdwCleaner-5.022(3).exe
2015-11-30 06:29 - 2015-11-30 20:40 - 00000000 ____D C:\Users\nours52\Desktop\CAMERA SURVEILLANCE
2015-11-29 23:10 - 2015-11-29 23:10 - 01733632 _____ C:\Users\nours52\Downloads\AdwCleaner-5.022(2).exe
2015-11-29 22:38 - 2015-11-29 22:38 - 01733632 _____ C:\Users\nours52\Downloads\AdwCleaner-5.022(1).exe
2015-11-29 22:32 - 2015-11-29 22:32 - 01733632 _____ C:\Users\nours52\Downloads\AdwCleaner-5.022.exe
2015-11-29 13:55 - 2015-11-29 14:02 - 287496950 _____ C:\Users\nours52\Downloads\20151128_095428.mp4
2015-11-29 10:44 - 2015-12-12 08:36 - 00000000 ____D C:\Users\nours52\AppData\LocalLow\Adblock Plus for IE
2015-11-29 10:44 - 2015-11-29 10:44 - 00000000 ____D C:\Program Files\Adblock Plus for IE
2015-11-29 10:42 - 2015-11-29 10:42 - 05952624 _____ ( ) C:\Users\nours52\Downloads\adblock-plus-for-internet-explorer-1-2-en-win.exe
2015-11-29 10:09 - 2015-11-29 10:10 - 00000000 ____D C:\Users\nours52\Desktop\SITES DE VENTES
2015-11-29 08:16 - 2015-11-29 08:16 - 00000193 _____ C:\Windows\WORDPAD.INI
2015-11-29 08:11 - 2015-11-29 08:11 - 00000277 _____ C:\Users\nours52\Desktop\Les Clés de la Banque Informations pratiques sur la banque et l'argent - Espace Particuliers    .URL
2015-11-28 18:52 - 2015-11-28 18:52 - 06801752 _____ (Piriform Ltd) C:\Users\nours52\Downloads\ccsetup512.exe
2015-11-28 18:36 - 2015-11-28 18:36 - 00000000 ____D C:\Users\nours52\Desktop\TOUS PROGRAMMES
2015-11-28 17:35 - 2015-11-28 17:36 - 05952624 _____ ( ) C:\Users\nours52\Downloads\adblockplusie-1.2.exe
2015-11-28 17:34 - 2015-11-28 17:34 - 05915456 _____ ( ) C:\Users\nours52\Downloads\adblockplusie-1.3.exe
2015-11-28 08:28 - 2015-12-07 13:42 - 00000000 ___HD C:\Users\nours52\AppData\Local\7b01aaf652e7b2d2
2015-11-27 08:54 - 2015-11-27 08:54 - 00000000 ____D C:\Capture
2015-11-27 06:28 - 2015-11-29 23:07 - 00000000 ____D C:\Users\nours52\AppData\Local\OppositelySorted
2015-11-26 20:09 - 2015-11-26 20:09 - 00000168 _____ C:\Users\nours52\Desktop\Vivabuzz Accueil.url
2015-11-26 07:11 - 2015-12-04 18:49 - 00000000 ____D C:\Windows\Netview_X OCX
2015-11-26 07:11 - 2015-12-04 18:49 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netview_X OCX
2015-11-26 07:11 - 2015-11-26 07:11 - 00000000 ____D C:\Program Files\NetviewX
2015-11-25 06:05 - 2015-11-25 06:05 - 00009989 _____ C:\Users\nours52\Documents\SysConfig.conf
2015-11-24 16:27 - 2015-11-24 16:27 - 00224344 _____ (IBM Corp.) C:\Windows\system32\Drivers\RapportKELL.sys
2015-11-24 16:27 - 2015-11-24 16:27 - 00071384 _____ (IBM Corp.) C:\Windows\system32\Drivers\RapportHades.sys
2015-11-24 16:12 - 2015-11-24 16:12 - 00000242 _____ C:\Users\nours52\Desktop\Espace abonné Freebox.url
2015-11-24 06:48 - 2015-11-24 06:48 - 00000000 ____D C:\Recovered data 11-24-2015 at 06_48_05
2015-11-22 23:17 - 2015-11-22 23:17 - 00000267 _____ C:\Users\nours52\Desktop\Pink Floyd - Wish You Were Here Lyrics MetroLyrics.URL
2015-11-22 20:49 - 2015-11-22 20:50 - 00000000 ____D C:\Users\nours52\Desktop\APPRENDRE LE THAI
2015-11-22 07:17 - 2015-11-22 08:17 - 00000000 ____D C:\Users\nours52\AppData\Local\{2250140C-06F8-78B4-6B60-5D5C4F08A1C4}
2015-11-21 17:01 - 2015-11-21 17:01 - 00000224 _____ C:\Users\nours52\Desktop\Les meilleures vidéos insolite du Web Accueil.url
2015-11-21 05:15 - 2015-12-07 13:42 - 00000000 ___HD C:\Users\nours52\AppData\Local\2de9e3a650274c40
2015-11-20 17:03 - 2015-11-20 17:03 - 00001132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 7.lnk
2015-11-20 17:03 - 2015-11-20 17:03 - 00000000 ____D C:\Users\nours52\temp
2015-11-20 17:03 - 2015-11-20 17:03 - 00000000 ____D C:\Program Files\TeamViewer
2015-11-20 15:45 - 2015-11-20 15:45 - 00000000 ____D C:\CMS
2015-11-20 15:27 - 2015-11-26 14:54 - 00000000 ____D C:\Program Files\HeroSpeedCMS
2015-11-20 15:27 - 2015-11-20 15:44 - 00000000 ____D C:\Windows\Netview Pad OCX
2015-11-20 15:27 - 2015-11-20 15:44 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netview Pad OCX
2015-11-20 15:27 - 2015-11-20 15:44 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HeroSpeedCMS
2015-11-20 15:27 - 2015-11-20 15:27 - 00000000 ____D C:\Program Files\NetviewPad
2015-11-20 14:14 - 2015-11-20 14:14 - 00000000 ____D C:\Users\nours52\AppData\Local\videocapture
2015-11-20 14:13 - 2015-11-20 14:13 - 00000000 ____D C:\Users\nours52\AppData\Local\Movavi
2015-11-20 14:12 - 2015-11-20 14:12 - 00000000 ____D C:\Users\nours52\AppData\Roaming\AMD
2015-11-20 14:12 - 2015-11-20 14:12 - 00000000 ____D C:\Users\nours52\AppData\Local\VideoEditor
2015-11-20 14:09 - 2015-11-20 14:22 - 00000000 ____D C:\ProgramData\Movavi Video Editor 11
2015-11-20 14:09 - 2015-11-20 14:09 - 00004943 _____ C:\ProgramData\rxsmznjf.zcp
2015-11-20 14:06 - 2015-11-20 14:07 - 69242096 _____ (Movavi) C:\Users\nours52\Downloads\MovaviVideoEditorSetupF.exe
2015-11-19 20:37 - 2015-11-19 20:37 - 00000000 ____D C:\Program Files\Common Files\Java
2015-11-19 14:24 - 2015-11-19 14:25 - 00000000 ____D C:\Users\nours52\Documents\CONTROLE FOIE REIN ETC
2015-11-19 08:08 - 2015-11-19 08:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secret Disk
2015-11-18 17:36 - 2015-11-21 06:59 - 00000000 ____D C:\Program Files\Recuva
2015-11-18 17:36 - 2015-11-18 17:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2015-11-18 17:35 - 2015-11-18 17:35 - 04426120 _____ (Piriform Ltd) C:\Users\nours52\Downloads\rcsetup152.exe
2015-11-18 16:50 - 2015-12-09 18:54 - 00021504 ___SH C:\Users\nours52\Thumbs.db
2015-11-18 16:39 - 2015-11-27 15:39 - 00000000 ____D C:\Users\nours52\Documents\TOUT MUTUELLES
2015-11-17 06:29 - 2015-11-17 06:29 - 01844409 _____ C:\Users\nours52\Downloads\cerfa_14881-01.pdf
2015-11-16 15:53 - 2015-12-05 13:08 - 01908224 _____ C:\Users\nours52\ZHPCleaner.exe
2015-11-16 15:25 - 2015-11-16 15:25 - 00444240 _____ C:\Users\nours52\Downloads\pnac_install.exe
2015-11-16 15:19 - 2015-12-12 10:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail
2015-11-16 15:19 - 2015-11-16 15:19 - 00001995 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IncrediMail.lnk
2015-11-16 15:19 - 2015-11-16 15:19 - 00001983 _____ C:\Users\Public\Desktop\IncrediMail.lnk
2015-11-16 15:19 - 2015-11-16 15:19 - 00000000 ____D C:\ProgramData\IncrediMail
2015-11-16 15:17 - 2015-11-16 15:17 - 13045672 _____ C:\Users\nours52\Downloads\IncrediMailSetup_fr(2).exe
2015-11-15 15:47 - 2015-11-15 15:47 - 00362088 _____ C:\Users\nours52\Downloads\im_dict_fr(1).exe
2015-11-15 15:45 - 2015-11-15 15:45 - 00362088 _____ C:\Users\nours52\Downloads\im_dict_fr.exe
2015-11-15 15:41 - 2015-11-15 15:41 - 13045672 _____ C:\Users\nours52\Downloads\IncrediMailSetup_fr(1).exe
2015-11-15 06:54 - 2015-11-15 06:54 - 00000224 _____ C:\Users\nours52\Desktop\Moto GP 2015.URL
2015-11-15 06:36 - 2015-12-04 11:48 - 00000438 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-11-15 06:16 - 2015-11-15 06:16 - 00163797 _____ C:\Users\nours52\Downloads\Depart a la retraite.pdf
2015-11-15 05:52 - 2015-11-15 05:52 - 00000231 _____ C:\Users\nours52\Desktop\www.Egepargne.com Mon compte Natixis Interépargne.URL
2015-11-14 19:25 - 2015-11-14 19:25 - 00000000 ____D C:\Users\nours52\Documents\JUGEMENT divorce 21 jUILLET 1981
2015-11-14 18:57 - 2015-11-14 18:57 - 00000000 ____D C:\Users\nours52\AppData\Local\CEF
2015-11-14 18:43 - 2015-11-14 18:43 - 00000970 _____ C:\Users\Public\Desktop\DriversCloud.com - Démarrer la détection.lnk
2015-11-14 18:43 - 2015-11-14 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com
2015-11-14 18:43 - 2015-11-14 18:43 - 00000000 ____D C:\ProgramData\DriversCloud.com
2015-11-14 18:43 - 2015-11-14 18:43 - 00000000 ____D C:\Program Files\DriversCloud.com
2015-11-14 18:06 - 2015-12-06 20:58 - 00000000 ____D C:\Users\nours52\AppData\Roaming\ZHP
2015-11-14 18:06 - 2015-12-06 20:49 - 00000834 _____ C:\Users\nours52\Desktop\ZHPCleaner.lnk
2015-11-14 18:06 - 2015-11-14 18:06 - 01876992 _____ C:\Users\nours52\Downloads\ZHPCleaner.exe
2015-11-14 14:19 - 2015-11-14 14:19 - 06762072 _____ (Piriform Ltd) C:\Users\nours52\Downloads\ccsetup511.exe
2015-11-14 13:58 - 2015-11-14 13:58 - 00001404 _____ C:\Users\nours52\Desktop\Windows Live Mail.lnk
2015-11-14 13:56 - 2015-11-14 13:56 - 01290600 _____ (Microsoft Corporation) C:\Users\nours52\Downloads\wlsetup-web.exe
2015-11-14 12:10 - 2015-11-16 15:19 - 00000000 ____D C:\Program Files\IncrediMail
2015-11-14 12:08 - 2015-11-14 12:08 - 00491784 _____ C:\Users\nours52\Downloads\incredimail_install.exe
2015-11-14 12:04 - 2015-11-28 07:49 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2015-11-14 11:56 - 2015-11-14 11:56 - 13045672 _____ C:\Users\nours52\Downloads\IncrediMailSetup_fr.exe
2015-11-14 11:42 - 2015-11-14 11:42 - 00000000 ____D C:\Users\nours52\AppData\LocalLow\Yahoo
2015-11-14 11:42 - 2015-11-14 11:42 - 00000000 ____D C:\Program Files\Yahoo!
2015-11-14 05:35 - 2015-11-19 20:37 - 00000000 ____D C:\Users\nours52\.oracle_jre_usage
2015-11-14 05:35 - 2015-11-14 05:35 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Sun
2015-11-14 04:09 - 2015-11-14 04:09 - 00243992 _____ C:\Users\nours52\Downloads\Firefox Setup Stub 42.0.exe
2015-11-14 03:57 - 2015-11-14 03:57 - 00000000 ____D C:\ProgramData\ATI
2015-11-14 03:56 - 2015-11-14 03:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-11-14 03:46 - 2015-11-28 08:28 - 00000176 _____ C:\Users\nours52\AppData\Roaming\WB.CFG

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2015-12-12 10:56 - 2014-12-04 14:23 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-12-12 10:48 - 2014-12-15 09:50 - 00000000 ____D C:\ProgramData\TEMP
2015-12-12 06:47 - 2011-04-12 02:35 - 00747518 _____ C:\Windows\system32\perfh00C.dat
2015-12-12 06:47 - 2011-04-12 02:35 - 00150042 _____ C:\Windows\system32\perfc00C.dat
2015-12-12 06:47 - 2010-11-20 22:01 - 01669052 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-12 06:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2015-12-12 06:46 - 2009-07-14 05:34 - 00028112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-12 06:46 - 2009-07-14 05:34 - 00028112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-12 06:39 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-12-11 20:26 - 2015-01-13 22:16 - 00000000 ____D C:\AdwCleaner
2015-12-11 19:06 - 2009-07-14 03:37 - 00000000 ____D C:\Windows
2015-12-10 21:24 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2015-12-10 08:35 - 2014-12-04 18:06 - 00001021 _____ C:\ProgramData\Microsoft\Windows\Start Menu\LINE.lnk
2015-12-10 08:35 - 2014-12-04 18:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LINE
2015-12-09 16:54 - 2014-12-10 06:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-12-09 16:52 - 2014-12-10 06:42 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Samsung
2015-12-09 16:52 - 2014-12-04 15:21 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-12-09 16:51 - 2014-12-10 06:38 - 00000000 ____D C:\Program Files\Samsung
2015-12-09 04:39 - 2014-12-04 13:31 - 00247976 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-12-08 22:56 - 2014-12-04 14:23 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-12-08 22:56 - 2014-12-04 14:23 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-12-06 20:58 - 2014-12-04 16:33 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-06 12:24 - 2014-12-13 12:59 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Raptr
2015-12-06 12:24 - 2014-12-13 12:59 - 00000000 ____D C:\Program Files\Raptr
2015-12-05 13:08 - 2014-12-04 13:04 - 00000000 ____D C:\Users\nours52
2015-12-05 05:52 - 2014-12-10 08:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trusteer Sécurité des points d'accès
2015-12-05 05:51 - 2009-07-14 05:53 - 00032484 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-12-04 08:23 - 2014-12-06 05:45 - 00000000 ____D C:\Users\nours52\AppData\Local\ElevatedDiagnostics
2015-12-02 18:49 - 2014-12-04 14:23 - 00000000 ____D C:\Users\nours52\AppData\Local\Adobe
2015-11-30 19:21 - 2014-12-04 14:06 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-11-30 06:33 - 2014-12-17 14:00 - 00000000 ____D C:\Users\nours52\Documents\CAMERA DE SURVEILLANCE
2015-11-29 23:09 - 2015-01-14 10:12 - 00000000 ____D C:\Windows\Sun
2015-11-28 18:53 - 2014-12-04 16:37 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-11-26 20:03 - 2014-12-07 09:27 - 00000000 ____D C:\Users\nours52\AppData\Local\Windows Live Writer
2015-11-23 08:35 - 2014-12-04 18:53 - 00000000 ____D C:\Users\nours52\AppData\Roaming\VoipConnect
2015-11-22 07:17 - 2015-05-14 09:28 - 00000290 __RSH C:\ProgramData\ntuser.pol
2015-11-22 07:17 - 2014-12-04 14:06 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-11-22 07:17 - 2014-12-04 14:04 - 00001130 _____ C:\Users\nours52\Desktop\Internet Explorer.lnk
2015-11-22 07:17 - 2009-07-14 03:37 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-11-21 07:18 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\Downloaded Program Files
2015-11-19 20:39 - 2015-01-14 10:10 - 00000000 ____D C:\ProgramData\Oracle
2015-11-19 20:38 - 2015-01-14 10:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-19 20:38 - 2015-01-14 10:10 - 00000000 ____D C:\Program Files\Java
2015-11-19 20:37 - 2015-01-14 10:11 - 00095840 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-11-19 08:08 - 2014-12-05 07:51 - 00000000 ____D C:\Program Files\Secret Disk
2015-11-17 06:00 - 2014-12-14 11:58 - 00000000 ____D C:\Users\nours52\Documents\Manuel Dashcam
2015-11-16 15:20 - 2014-12-04 19:14 - 00000000 ____D C:\Users\nours52\AppData\Local\IM
2015-11-16 15:19 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-11-15 07:26 - 2014-12-06 06:19 - 00000000 ____D C:\Users\nours52\Documents\vrac
2015-11-15 07:21 - 2014-12-07 09:27 - 00000000 ____D C:\Users\nours52\AppData\Roaming\Windows Live Writer
2015-11-15 05:14 - 2014-12-04 18:15 - 00000000 ____D C:\Users\nours52\AppData\Local\Windows Live
2015-11-14 18:43 - 2014-12-13 11:28 - 00000000 ____D C:\ProgramData\ma-config.com
2015-11-14 18:43 - 2014-12-13 11:28 - 00000000 ____D C:\Program Files\ma-config.com
2015-11-14 18:41 - 2015-01-14 08:21 - 00000000 ____D C:\Program Files\PDFCreator
2015-11-14 18:41 - 2014-12-04 18:31 - 00000000 ____D C:\Users\nours52\Tracing
2015-11-14 18:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\registration
2015-11-14 18:16 - 2014-12-04 16:30 - 00001060 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-11-14 18:16 - 2014-12-04 16:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-11-14 18:16 - 2014-12-04 16:30 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-11-14 12:04 - 2014-12-17 14:25 - 00000000 ____D C:\Program Files\Common Files\Adobe
2015-11-14 12:04 - 2014-12-04 19:44 - 00000000 ____D C:\ProgramData\Adobe
2015-11-14 12:04 - 2014-12-04 19:44 - 00000000 ____D C:\Program Files\Adobe
2015-11-14 12:00 - 2014-12-04 14:06 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-11-14 04:11 - 2014-12-04 14:06 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-11-14 03:53 - 2014-12-13 12:51 - 00000000 ____D C:\Program Files\AMD
2015-11-14 03:51 - 2014-12-13 12:50 - 00000000 ____D C:\AMD

==================== Fichiers à la racine de certains dossiers =======

2014-12-15 21:09 - 2014-12-15 21:09 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP11E5.tmp
2014-12-15 21:09 - 2014-12-15 21:09 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP14B6.tmp
2014-12-15 21:09 - 2014-12-15 21:09 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP1555.tmp
2014-12-15 21:09 - 2014-12-15 21:09 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP15B5.tmp
2014-12-15 21:09 - 2014-12-15 21:09 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP1616.tmp
2014-12-15 21:22 - 2014-12-15 21:22 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP3453.tmp
2014-12-15 21:22 - 2014-12-15 21:22 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP3511.tmp
2014-12-15 21:22 - 2014-12-15 21:22 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP3572.tmp
2014-12-15 21:22 - 2014-12-15 21:22 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP35E2.tmp
2014-12-15 21:22 - 2014-12-15 21:22 - 0000000 _____ () C:\Users\nours52\AppData\Roaming\FAP3643.tmp
2014-09-03 22:36 - 2014-09-03 22:36 - 0001248 _____ () C:\Users\nours52\AppData\Roaming\MVVDSGW
2014-09-03 22:36 - 2014-09-03 22:36 - 0002086 _____ () C:\Users\nours52\AppData\Roaming\RSA
2015-11-14 03:46 - 2015-11-28 08:28 - 0000176 _____ () C:\Users\nours52\AppData\Roaming\WB.CFG
2014-12-04 20:05 - 2014-12-04 20:05 - 0003584 _____ () C:\Users\nours52\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-12-10 14:02 - 2014-12-10 14:03 - 0007611 _____ () C:\Users\nours52\AppData\Local\resmon.resmoncfg
2015-12-12 07:24 - 2015-12-12 07:24 - 0000000 ____H () C:\ProgramData\cm-lock
2014-12-10 09:16 - 2014-12-10 09:16 - 0005054 _____ () C:\ProgramData\mtbjfghn.xbe
2015-11-20 14:09 - 2015-11-20 14:09 - 0004943 _____ () C:\ProgramData\rxsmznjf.zcp

Fichiers à déplacer ou supprimer:
====================
C:\Users\nours52\ZHPCleaner.exe

Certains fichiers dans TEMP:
====================
C:\Users\nours52\AppData\Local\Temp\dllnt_dump.dll
C:\Users\nours52\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap =================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

@nours52Bonsoir nours52,
Avant que les abeilles n'essaiment....
Devant les cas de non apparition de message... la conduite à tenir est d'en informer la modération via un des liens "Signaler" qui figure dans tous les messages en expliquant le souci.
Un modérateur jugera et restaurera si besoin...

Apparemment au 3 ème envoi c'est bon...

@nours52Avec un petit coup de pouce de la modération... :o)

Et bien ,je ne comprend pas j'ai envoyé ce matin le rapport d'analyse d' frst.
Je te le renvoie.

Rapport du script mode sans échec:

RogueKiller V11.0.2.0 [Dec 7 2015] (Gratuit) par Adlice Software
email : http://www.adlice.com/contact/
Remontées : http://forum.adlice.com
Site web : http://www.adlice.com/fr/logiciels/roguekiller/
Blog : http://www.adlice.com

Système d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Démarré en : Mode sans échec prise en charge réseau
Utilisateur : nours52 [Administrateur]
Démarré depuis : C:\Program Files\RogueKiller\RogueKiller.exe
Mode : Scan -- Date : 12/11/2015 19:18:41

¤¤¤ Processus : 0 ¤¤¤

¤¤¤ Registre : 0 ¤¤¤

¤¤¤ Tâches : 0 ¤¤¤

¤¤¤ Fichiers : 0 ¤¤¤

¤¤¤ Fichier Hosts : 0 ¤¤¤

¤¤¤ Antirootkit : 0 (Driver: Non chargé [0xc000035f]) ¤¤¤

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD32 00AAJS-22VWA SCSI Disk Device +++++
--- User ---
[MBR] 491963dce1de32f166339b05157c0d56
[BSP] 6106f1fe9a6da9e3acc40cfd1a8c439c : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 9993 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 20467712 | Size: 147753 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 323067150 | Size: 147495 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
Error reading LL2 MBR! ([1] Fonction incorrecte. )

+++++ PhysicalDrive1: ST2000NM 0033-9ZM175 SCSI Disk Device +++++
--- User ---
[MBR] f4a7873f734b967c2675774b7ae656ab
[BSP] 0409e40a5c8926ee218c774a78f08083 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1407027 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2881798144 | Size: 500599 MB [Error reading VBR! ([83] Tentative de déplacement du pointeur de fichier avant le début du fichier. )]
User != LL1 ... KO!
--- LL1 ---
[MBR] f4a7873f734b967c2675774b7ae656ab
[BSP] 0409e40a5c8926ee218c774a78f08083 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1407027 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2881798144 | Size: 500599 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
Error reading LL2 MBR! ([1] Fonction incorrecte. )

a plus.

Bonjour,
Oui,pas toujours devant le pc...et les mains dans le cambouis !!
Rapport de RogueKiller:
RogueKiller V11.0.2.0 [Dec 7 2015] (Gratuit) par Adlice Software
email : http://www.adlice.com/contact/
Remontées : http://forum.adlice.com
Site web : http://www.adlice.com/fr/logiciels/roguekiller/
Blog : http://www.adlice.com

Système d'exploitation : Windows 7 (6.1.7601 Service Pack 1) 32 bits version
Démarré en : Mode normal
Utilisateur : nours52 [Administrateur]
Démarré depuis : C:\Program Files\RogueKiller\RogueKiller.exe
Mode : Scan -- Date : 12/11/2015 14:05:09

¤¤¤ Processus : 0 ¤¤¤

¤¤¤ Registre : 3 ¤¤¤
[PUM.Policies] HKEY_LOCAL_MACHINE\RK_Software_ON_J_CA53\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Trouvé(e)
[PUM.Policies] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System | ConsentPromptBehaviorAdmin : 0 -> Trouvé(e)
[PUM.StartMenu] HKEY_USERS\S-1-5-21-1281696408-34496212-1937324486-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | Start_ShowVideos : 2 -> Trouvé(e)

¤¤¤ Tâches : 2 ¤¤¤
[Suspicious.Path|VT.not-a-virus:HEUR:AdWare.Win32.DealPly.gen] %WINDIR%\Tasks\Chromium.job -- C:\Users\nours52\AppData\Local\Chromium\APPLIC~1\440238~1.0\INSTAL~1\UNINST~1.EXE (/Check) -> Trouvé(e)
[Suspicious.Path|VT.not-a-virus:HEUR:AdWare.Win32.DealPly.gen] \Chromium -- C:\Users\nours52\AppData\Local\Chromium\APPLIC~1\440238~1.0\INSTAL~1\UNINST~1.EXE (/Check) -> Trouvé(e)

¤¤¤ Fichiers : 0 ¤¤¤

¤¤¤ Fichier Hosts : 0 ¤¤¤

¤¤¤ Antirootkit : 14 (Driver: Chargé) ¤¤¤
[ShwSSDT:Inl(Hook.Shadow)] NtGdiAlphaBlend[7] : Unknown @ 0xffffffff8e62e5b0 (call 0xffff29f2)
[ShwSSDT:Inl(Hook.Shadow)] NtGdiBitBlt[14] : Unknown @ 0xffffffff8e62e5b0 (call 0xffffebea)
[ShwSSDT:Inl(Hook.Shadow)] NtGdiGetPixel[200] : Unknown @ 0xffffffff8e62e5b0 (call 0xffffa80a)
[ShwSSDT:Inl(Hook.Shadow)] NtGdiMaskBlt[237] : Unknown @ 0xffffffff8e62e5b0 (call 0xffff8f5a)
[ShwSSDT:Inl(Hook.Shadow)] NtGdiPlgBlt[247] : Unknown @ 0xffffffff8e62e5b0 (call 0xffff6eda)
[ShwSSDT:Inl(Hook.Shadow)] NtGdiStretchBlt[302] : Unknown @ 0xffffffff8e62e5b0 (call 0xffffcf2a)
[ShwSSDT:Inl(Hook.Shadow)] NtGdiTransparentBlt[308] : Unknown @ 0xffffffff8e62e5b0 (call 0xffff526a)
[ShwSSDT:Inl(Hook.Shadow)] NtUserFindWindowEx[396] : Unknown @ 0xffffffff8e62e5b0 (call 0xfffee86a)
[ShwSSDT:Inl(Hook.Shadow)] NtUserGetClipboardData[408] : Unknown @ 0xffffffff8e62e5b0 (call 0xfffeb4e2)
[ShwSSDT:Inl(Hook.Shadow)] NtUserPrintWindow[510] : Unknown @ 0xffffffff8e62e5b0 (call 0xffff0bd2)
[ShwSSDT:Inl(Hook.Shadow)] NtUserQueryWindow[515] : Unknown @ 0xffffffff8e62e5b0 (call 0xfffe8f52)
[ShwSSDT:Inl(Hook.Shadow)] NtUserSetWindowsHookEx[585] : Unknown @ 0xffffffff8e62e5b0 (call 0xfffec8ba)
[IAT:Inl(Hook.IEAT)] (***@***) WS2_32!getaddrinfo : Unknown @ 0x71120022 (jmp 0xfa76bd8c|jmp dword [0x7112001e]|jmp 0x10|jmp 0xffc0)
[IAT:Inl(Hook.IEAT)] (***@***) WS2_32!getaddrinfo : Unknown @ 0x71120022 (jmp 0xfa76bd8c|jmp dword [0x7112001e]|jmp 0x10|jmp 0xffc0)

¤¤¤ Navigateurs web : 0 ¤¤¤

¤¤¤ Vérification MBR : ¤¤¤
+++++ PhysicalDrive0: WDC WD32 00AAJS-22VWA SCSI Disk Device +++++
--- User ---
[MBR] 491963dce1de32f166339b05157c0d56
[BSP] 6106f1fe9a6da9e3acc40cfd1a8c439c : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [XXXXXX] ACER (0x27) [VISIBLE] Offset (sectors): 63 | Size: 9993 MB
1 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 20467712 | Size: 147753 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 323067150 | Size: 147495 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
User = LL1 ... OK
Error reading LL2 MBR! ([1] Fonction incorrecte. )

+++++ PhysicalDrive1: ST2000NM 0033-9ZM175 SCSI Disk Device +++++
--- User ---
[MBR] f4a7873f734b967c2675774b7ae656ab
[BSP] 0409e40a5c8926ee218c774a78f08083 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1407027 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2881798144 | Size: 500599 MB [Error reading VBR! ([83] Tentative de déplacement du pointeur de fichier avant le début du fichier. )]
User != LL1 ... KO!
--- LL1 ---
[MBR] f4a7873f734b967c2675774b7ae656ab
[BSP] 0409e40a5c8926ee218c774a78f08083 : Windows Vista/7/8|VT.Unknown MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x7) [VISIBLE] Offset (sectors): 2048 | Size: 100 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
1 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 206848 | Size: 1407027 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
2 - [XXXXXX] NTFS (0x7) [VISIBLE] Offset (sectors): 2881798144 | Size: 500599 MB [Windows Vista/7/8 Bootstrap | Windows Vista/7/8 Bootloader]
Error reading LL2 MBR! ([1] Fonction incorrecte. )

+++++ PhysicalDrive2: USB Device +++++
Error reading User MBR! ([15] Le périphérique n?est pas prêt. )
Error reading LL1 MBR! NOT VALID!
Error reading LL2 MBR! ([32] Cette demande n?est pas prise en charge. )

Note : PhysicalDrive2 c'est un dd externe..qui ne fonctionne pas,rien a voir avec mon souci.

Bonne lecture..

Bonjour CatSeven,

J'ai bien effectué a méthode,mais malheureusement,même résultat sur le bureau (fenêtre m'indiquant la même indication que plus haut.
Quant a l'option "Masquer les extensions des fichiers dont le type est connu".Je l'avais recocher car il était bien précisé de ne pas oublier de le recocher après analyse.
Merci pour ton aide.
Bonne après midi.