ZHP Diag

~ ZHPDiag v2015.12.11.
183 Par Nicolas Coolman (2015/12/11)

~ Dmarr par oussama (Administrator) (2015/12/12 17:41:20)
~ Site: http://www.nicolascoolman.fr
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version: Version OK
~ Mode: Scanner
~ Rapport: C:\Users\oussama\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\oussama\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Dmarrage du systme: Normal (Normal boot)
Windows 10 Home Single Language, 64-bit (Build 10240)
---\\ Navigateurs Internet (2) - 0s
GCIE: Google Chrome v47.0.2526.80
MSIE: Internet Explorer v11.0.10240.16603
---\\ Informations sur les produits Windows (3) - 4s
~ Windows Server License Manager Script : OK
~ Licence Script File Gnration : OK
Windows Automatic Updates : OK
---\\ Logiciels de protection (1) - 8s
Windows Defender (Activate)
---\\ Informations sur le systme (6) - 0s
~ Operating System: Intel64 Family 6 Model 69 Stepping 1, GenuineIntel
~ Operating System: 64-bit
~ Boot mode: Normal (Normal boot)
Total RAM: 6172.056 MB (34% free)
System Restore: Activ (Enable)
System drive C: has 266 GB () free of 381 GB
---\\ Mode de connexion au systme (3) - 0s
~ Computer Name: OUSSAMA
~ User Name: oussama
~ Logged in as Administrator
---\\ Enumration des units disques (3) - 0s
~ Drive C: has 266 GB free of 381 GB (System)
~ Drive D: has 541 GB free of 550 GB
~ Drive E: has GB free of 0 GB
---\\ Etat du Centre de Scurit Windows (7) - 1s
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDeskt
opChanges: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\
NOHIDDEN] CheckedValue: Modified
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\
SHOWALL] CheckedValue: OK
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations] Applicati
on: OK
[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK
---\\ Recherche particulire de fichiers gnriques (25) - 3s
[MD5.D2EAEC106F183572317AF7D68E381063] - 25/11/2015 - (.Microsoft Corporation Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [4532304] =>.Microsoft Windows
[MD5.5DED2A3F11AE916C8F2724947E736261] - 10/07/2015 - (.Microsoft Corporation Processus hte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [59392]
[MD5.7718A2A9B2BFB2C8E2BAEB03310CA3FD] - 30/07/2015 - (.Microsoft Corporation Application de dmarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [290312]

=>.Microsoft Windows Publisher
[MD5.E5D86250453B33900666D92ED1A92ABE] - 17/09/2015 - (.Microsoft Corporation Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [2740224]
[MD5.A7C48B051A9C5D5054916DE5BEBBCA2D] - 05/11/2015 - (.Microsoft Corporation Application douverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [
579072]
[MD5.ECB1943967424DFB96E03F6A098434EF] - 30/07/2015 - (.Microsoft Corporation Bibliothque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [430592]
[MD5.C287D0E32771E3222A444DC527A29477] - 10/07/2015 - (.Microsoft Corporation DNS DLL de lAPI Client.) -- C:\WINDOWS\System32\dnsapi.dll [680256] =>.Microsoft
Windows
[MD5.BB5BBD0E4D04047585E4ED0F07AA51E7] - 10/07/2015 - (.Microsoft Corporation DNS DLL de lAPI Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [534064] =>.Microsoft
Windows
[MD5.8C795953726C7D2DE72CE4748208C5ED] - 10/07/2015 - (.Microsoft Corporation DLL client de lAPI uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.
dll.mui [20480]
[MD5.A3D96563BF46FC8A0E5756B796127D14] - 05/11/2015 - (.Microsoft Corporation Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys
[577888] =>.Microsoft Windows
[MD5.8921DF6060DB5C7700AA48CB12E9EA08] - 10/07/2015 - (.Microsoft Corporation ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [28512] =>
.Microsoft Windows
[MD5.F2829DC6D292DCAC5029893BB2E9FEE3] - 10/07/2015 - (.Microsoft Corporation CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [92672]
[MD5.CA160E02F35A61C6F5C681FB4669C519] - 10/07/2015 - (.Microsoft Corporation SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [174080]
[MD5.25435407D97419627F4B10653433BF2B] - 10/07/2015 - (.Microsoft Corporation DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [138240]
[MD5.27E248CD861AFED4DF0C48F4C853E7F0] - 25/11/2015 - (.Microsoft Corporation High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [
80896]
[MD5.D4CDEE4A62BDFFF6E8558A9552148EA7] - 10/07/2015 - (.Microsoft Corporation Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [114688]
[MD5.5D3744E6FDEC1A6FB3FA9B1DD4AF0694] - 10/07/2015 - (.Microsoft Corporation IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [143360
]
[MD5.1DF2C5FD2710A13B07E663A12F0E0EEA] - 10/07/2015 - (.Microsoft Corporation Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [415232]
[MD5.F0D791348AD254360CC3C3E501CCB745] - 10/07/2015 - (.Microsoft Corporation MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [273408]
[MD5.BA8DC96D1DD7785EB0589CB1777208B7] - 01/12/2015 - (.Microsoft Corporation Pilote du systme de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [211593
6] =>.Microsoft Windows
[MD5.38F1AE32339731F6E5A7281AE8042545] - 10/07/2015 - (.Microsoft Corporation Pilote de port parallle.) -- C:\WINDOWS\System32\drivers\Parport.sys [96768]
[MD5.CA60F6C03611AF1710BC903ED9F566FB] - 10/07/2015 - (.Microsoft Corporation RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.
sys [104960]
[MD5.A32AED8C644734B283A7C9D08D76064D] - 10/07/2015 - (.Microsoft Corporation Redirecteur de priphrique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.s
ys [176128]
[MD5.D42AC03ACF9CA67693D1D9BB4D2A0BC8] - 05/11/2015 - (.Microsoft Corporation TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [116064] =>.Mic
rosoft Windows
[MD5.823A237D871CD652C6BFD47BECB6810A] - 10/07/2015 - (.Microsoft Corporation Pilote de clich instantan du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [
---\\ Liste des services NT non Microsoft et non dsactivs (21) - 6s

O23 - Service: Apple Mobile Device Service (Apple Mobile Device Service) . (.App
le Inc. - MobileDeviceService.) - C:\Program Files\Common Files\Apple\Mobile Dev
ice Support\AppleMobileDeviceService.exe =>.Apple Inc.
O23 - Service: ASLDR Service (ASLDRService) . (.ASUSTek Computer Inc. - ASLDR Se
rvice.) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe =>.AS
USTeK Computer Inc.
O23 - Service: Asus WebStorage Windows Service (Asus WebStorage Windows Service)
. (.ASUS Cloud Corporation - Asus WebStorage Windows Service.) - C:\Program Fil
es (x86)\ASUS\WebStorage\2.0.3.226\AsusWSWinService.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS - GFNEXSrv.) - C:\Program
Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe =>.ASUSTeK Computer Inc.
O23 - Service: Bamcof (Bamcof) . (...) - C:\ProgramData\Bamcof\Bamcof.exe =>PUP
.Optional.Salus
O23 - Service: Service Bonjour (Bonjour Service) . (.Apple Inc. - Bonjour Servic
e.) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.
O23 - Service: @oem42.inf,%WIN32_DPTF_PARTICIPANT_DISPLAY_SERVICE_DISPLAY_ (Dptf
ParticipantDisplayService) . (.Intel Corporation - Intel(R) Dynamic Platform & T
hermal Framewo.) - C:\Windows\System32\DptfParticipantDisplayService.exe {330000
9D4320E74C7AF0250102000300009D43}
O23 - Service: @oem42.inf,%WIN32_DPTF_PARTICIPANT_PROC_SERVICE_DISPLAY_NAM (Dptf
ParticipantProcessorService) . (.Intel Corporation - Intel(R) Dynamic Platform a
nd Thermal Frame.) - C:\Windows\System32\DptfParticipantProcessorService.exe {33
00009D4320E74C7AF0250102000300009D43}
O23 - Service: @oem42.inf,%WIN32_DPTF_POLICY_CRITICAL_SERVICE_DISPLAY_NAME (Dptf
PolicyCriticalService) . (.Intel Corporation - Intel(R) Dynamic Platform and The
rmal Frame.) - C:\Windows\System32\DptfPolicyCriticalService.exe {3300009D4320E7
4C7AF0250102000300009D43}
O23 - Service: @oem42.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_DISPLAY_NAME%;Int (Dptf
PolicyLpmService) . (.Intel Corporation - Intel(R) Dynamic Platform and Thermal
Frame.) - C:\Windows\System32\DptfPolicyLpmService.exe {3300009D4320E74C7AF02501
02000300009D43}
O23 - Service: GamesAppIntegrationService (GamesAppIntegrationService) . (.WildT
angent - WildTangent Games App Integration Service.) - C:\Program Files (x86)\Wi
ldTangent Games\App\GamesAppIntegrationService.exe =>.WildTangent Inc
O23 - Service: Service Google Update (gupdate) (gupdate) . (.Google Inc. - Progr
amme d installation de Google.) - C:\Program Files (x86)\Google\Update\GoogleUpd
ate.exe =>.Google Inc
O23 - Service: Intel(R) HD Graphics Control Panel Service (igfxCUIService2.0.0.0
) . (.Intel Corporation - igfxCUIService Module.) - C:\Windows\System32\igfxCUIS
ervice.exe =>.Intel Corporation - pGFX
O23 - Service: Intel(R) ME Service (Intel(R) ME Service) . (.Intel Corporation Intel(R) ME Service.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine
Components\FWService\IntelMeFWService.exe =>.Intel Corporation - Intel Manageme
nt Engine Firmware
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_s
ervice) . (.Intel Corporation - Intel(R) Dynamic Application Loader Host In.) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_servi
ce.exe =>.Intel Corporation - Intel Management Engine Firmware
O23 - Service: Intel(R) Management and Security Application Local Manageme (LMS)
. (.Intel Corporation - Intel(R) Local Management Service.) - C:\Program Files
(x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporat
ion - Software and Firmware Products
O23 - Service: NVIDIA Network Service (NvNetworkService) . (.NVIDIA Corporation
- NVIDIA Network Service.) - C:\Program Files (x86)\NVIDIA Corporation\NetServic
e\NvNetworkService.exe =>.NVIDIA Corporation
O23 - Service: NVIDIA Display Driver Service (nvsvc) . (.NVIDIA Corporation - NV
IDIA Driver Helper Service, Version 353.5.) - C:\Windows\System32\nvvsvc.exe =>
.NVIDIA Corporation
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.Copyright 2

004 - RichVideo Module.) - C:\Program Files\CyberLink\Shared files\RichVideo64.e
xe =>.CyberLink
O23 - Service: Skype Updater (SkypeUpdate) . (.Skype Technologies - Skype Update
r Service.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Softwar
e Sarl
O23 - Service: SAMSUNG Mobile Connectivity Service (ss_conn_service) . (.DEVGURU
Co., LTD. - MSS CS Connectivity Service.) - C:\Program Files (x86)\Samsung\USB
Drivers\25_escape\conn\ss_conn_service.exe =>.DEVGURU CO LTD
---\\ Tches planifies en automatique (37) - 9s
[MD5.761986319F4F6EDB33B3F046D254C781] [APT] [ASUS Live Update1] (.ASUSTeK Compu
ter Inc..) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [299
8552] =>.ASUSTeK Computer Inc.
[MD5.761986319F4F6EDB33B3F046D254C781] [APT] [ASUS Live Update2] (.ASUSTeK Compu
ter Inc..) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [299
[MD5.06619B024E3BFA5654217DD2FBFA6DEF] [APT] [ASUS P4G] (.ASUS.) -- C:\Program F
iles\ASUS\P4G\BatteryLife.exe [1038648] =>.ASUSTeK Computer Inc.
[MD5.E1E1FF1EE40805E7458C31DEA48940E7] [APT] [ASUS Smart Gesture Launcher] (.Asu
sTek.) -- C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLa
uncher.exe [18232] =>.ASUSTeK Computer Inc.
[MD5.88A8ED207B136DA14F46B48B7B15C47C] [APT] [ASUS Splendid ACMON] (.ASUS.) -- C
:\Program Files (x86)\ASUS\Splendid\ACMON.exe [55880] =>.ASUSTeK Computer Inc
.
[MD5.EB8E54615ADAC6F69E4F198A2F466BFC] [APT] [ASUS Splendid ColorU] (.ASUSTeK Co
mputer Inc..) -- C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [18136
[MD5.72AD0972544FEB42A72CC83921D24F6E] [APT] [ASUS USB Charger Plus] (.ASUSTek C
omputer Inc..) -- C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
[19647568] =>.ASUSTeK Computer Inc.
[MD5.7529BF17445E16315A95B450CE985C11] [APT] [AsusVibeSchedule] (.Copyright (C)
2010.) -- C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe [1957040]
[MD5.BE428EE8474E63EFA5B56464FEA02A31] [APT] [Bitdefender Auto Scan] (.Bitdefend
er.) -- C:\Program Files\Bitdefender\Bitdefender\mtasklaunch.exe [25120] =>.B
itdefender SRL
[MD5.BC14706D68E7F855735369CFEE4028C7] [APT] [Bitdefender Update Product Data_A1
7FD818A96743FAB28AC221BEB4B2C8] (.Bitdefender.) -- C:\Program Files\Bitdefender\
Bitdefender\bdproductdata.exe [98208] =>.Bitdefender SRL
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineCore] (.Goo
gle Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200]
=>.Google Inc
[MD5.DD7423ABBE2913E70D50E9318AD57EE4] [APT] [GoogleUpdateTaskMachineUA] (.Googl
e Inc..) -- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200] =>
.Google Inc
[MD5.00000000000000000000000000000000] [APT] [Install Java] (...) -- C:\Program
Files\Concom\packages\e0415603-c315-4092-b16d-92804b76d09c\Stanron.exe (.not fil
e.) [0]
[MD5.E9081DD0F7F97E8AC28A7EFFF6534C06] [APT] [P4GIntlCtrl] (...) -- C:\Program F
iles\ASUS\P4G\IntlDPST.exe [74112]
[MD5.B700D8A229919A13F2DCF3D6115B7916] [APT] [tpofxcba] (...) -- C:\Program File
s\Common Files\2j05nc05\2e006dhjazmli.exe [57856]
[MD5.EFF8FFF2D81A26919EC1D1FCEEDEDAAD] [APT] [Update Checker] (...) -- C:\Progra
m Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [12288]
[MD5.00000000000000000000000000000000] [APT] [Update WinRar] (...) -- C:\Program
Files\Concom\packages\e0415603-c315-4092-b16d-92804b76d09c\Stanron.exe (.not fi
le.) [0]
[MD5.BC41666FF68C364CD3EAA486E50C9270] [APT] [Apple\AppleSoftwareUpdate] (.Apple
Inc..) -- C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [56
3000] =>.Apple Inc.
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\Goo

gleUpdateTaskMachineCore.job [1088]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\Tasks\Googl
eUpdateTaskMachineUA.job [1092]
O39 - APT: ASUS Live Update1 - (.ASUSTeK Computer Inc..) -- C:\WINDOWS\System32\
Tasks\ASUS Live Update1 [3544]
O39 - APT: ASUS Live Update2 - (.ASUSTeK Computer Inc..) -- C:\WINDOWS\System32\
Tasks\ASUS Live Update2 [3534]
O39 - APT: ASUS P4G - (.ASUS.) -- C:\WINDOWS\System32\Tasks\ASUS P4G [3054]
O39 - APT: ASUS Smart Gesture Launcher - (.AsusTek.) -- C:\WINDOWS\System32\Task
s\ASUS Smart Gesture Launcher [3628]
O39 - APT: ASUS Splendid ACMON - (.ASUS.) -- C:\WINDOWS\System32\Tasks\ASUS Sple
ndid ACMON [3096]
O39 - APT: ASUS Splendid ColorU - (.ASUSTeK Computer Inc..) -- C:\WINDOWS\System
32\Tasks\ASUS Splendid ColorU [3112]
O39 - APT: ASUS USB Charger Plus - (.ASUSTek Computer Inc..) -- C:\WINDOWS\Syste
m32\Tasks\ASUS USB Charger Plus [3026]
O39 - APT: AsusVibeSchedule - (.Copyright (C) 2010.) -- C:\WINDOWS\System32\Task
s\AsusVibeSchedule [3376]
O39 - APT: Bitdefender Auto Scan - (.Bitdefender.) -- C:\WINDOWS\System32\Tasks\
Bitdefender Auto Scan [3686]
O39 - APT: Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 - (.
Bitdefender.) -- C:\WINDOWS\System32\Tasks\Bitdefender Update Product Data_A17FD
818A96743FAB28AC221BEB4B2C8 [3608]
O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\System32\
Tasks\GoogleUpdateTaskMachineCore [3918]
O39 - APT: GoogleUpdateTaskMachineUA - (.Google Inc..) -- C:\WINDOWS\System32\Ta
sks\GoogleUpdateTaskMachineUA [4150]
O39 - APT: Install Java - (...) -- C:\WINDOWS\System32\Tasks\Install Java [394
8]
O39 - APT: P4GIntlCtrl - (...) -- C:\WINDOWS\System32\Tasks\P4GIntlCtrl [3206]
O39 - APT: tpofxcba - (...) -- C:\WINDOWS\System32\Tasks\tpofxcba [3440]
O39 - APT: Update Checker - (...) -- C:\WINDOWS\System32\Tasks\Update Checker
[3492]
O39 - APT: Update WinRar - (...) -- C:\WINDOWS\System32\Tasks\Update WinRar [3
986]
---\\ Processus lancs (16) - 30s
[MD5.D073AB93814D34F0A4DDB05A35BFC107] - (.Intel Corporation - Intel(R) Dynamic
Platform & Thermal Framewo.) -- C:\Windows\System32\DptfParticipantDisplayServic
e.exe [141944] [PID.2288] {3300009D4320E74C7AF0250102000300009D43}
[MD5.44A17208F438F915FCB490DE8FF052AD] - (.ASUS Cloud Corporation - Asus WebStor
age Windows Service.) -- C:\Program Files (x86)\ASUS\WebStorage\2.0.3.226\AsusWS
WinService.exe [71680] [PID.2296]
[MD5.0C000197315BAEB8F98A33833567523E] - (.Intel Corporation - Intel(R) Dynamic
Platform and Thermal Frame.) -- C:\Windows\System32\DptfPolicyCriticalService.ex
e [148160] [PID.2324] {3300009D4320E74C7AF0250102000300009D43}
[MD5.E20C336D5B94E6A9779D98549EEBC5FF] - (.Intel Corporation - Intel(R) Dynamic
Platform and Thermal Frame.) -- C:\Windows\System32\DptfPolicyConfigTDPService.e
xe [116680] [PID.2332] {3300009D4320E74C7AF0250102000300009D43}
[MD5.6E22B71D2F709F25BFBAE8DEBF8F218E] - (.Intel Corporation - Intel(R) Dynamic
Platform and Thermal Frame.) -- C:\Windows\System32\DptfParticipantProcessorServ
ice.exe [115656] [PID.2340] {3300009D4320E74C7AF0250102000300009D43}
[MD5.B9B413CCC46D1989DA5133494CA73E38] - (.Intel Corporation - Intel(R) Dynamic
Platform and Thermal Frame.) -- C:\Windows\System32\DptfPolicyLpmService.exe [12
4904] [PID.2372] {3300009D4320E74C7AF0250102000300009D43}
[MD5.C712043DA4301AB2EE136B0894BC90FA] - (...) -- C:\ProgramData\Bamcof\Bamcof.e
xe [497152] [PID.2944] =>PUP.Optional.Salus
[MD5.C712043DA4301AB2EE136B0894BC90FA] - (...) -- C:\ProgramData\Bamcof\Bamcof.e
xe [497152] [PID.5724] =>PUP.Optional.Salus
[MD5.B92F7EB9C41CA229EF9DAFA7D2F58F74] - (.Intel Corporation - Intel(R) Dynamic

Platform and Thermal Frame.) -- C:\Windows\System32\DptfPolicyLpmServiceHelper.e
xe [111488] [PID.5752] {3300009D4320E74C7AF0250102000300009D43}
[MD5.F293B373A655686501203FBE09D4F23F] - (.BitTorrent Inc. - WebHelper.) -- C:\U
sers\oussama\AppData\Roaming\BitTorrent\updates\7.9.5_41373\utorrentie.exe [3368
96] [PID.6244]
96] [PID.7000]
96] [PID.7116]
[MD5.3F33178B902AC51C8A6B33A809A0D130] - (.Adobe Systems Incorporated - Adobe Fla
sh Player Utility.) -- C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe [
884728] [PID.7444] {33000000325EC7F9DB0C1AA7C1000000000032}
[MD5.7D0AB167F1F58F6A5CC88F0A1AC3A1E6] - (.Copyright (C) 2015 Nicolas Coolman ZHPDiag.) -- C:\Users\oussama\AppData\Roaming\ZHP\ZHPDiag3.exe [2008064] [PID.20
8]
[MD5.78546FB86AC0BDA85879BE7BBAF36FDB] - (.Nicolas Coolman - ZHPFix.) -- C:\User
s\oussama\Downloads\ZHPFix.exe [3521617] [PID.8568]
[MD5.78546FB86AC0BDA85879BE7BBAF36FDB] - (.Nicolas Coolman - ZHPFix.) -- C:\User
s\oussama\Downloads\ZHPFix.exe [3521617] [PID.4192]
---\\ Google Chrome, Dmarrage,Recherche,Extensions (11) - 3s
G2 - GCE: Preference [User Data\Default] [aapocclcgogkmnckokdopfmhonfmgoek]
le Chrome manifest =>.Google Inc.
G2 - GCE: Preference [User Data\Default] [aohghmighlieiainnegkcijnfilokake]
G2 - GCE: Preference [User Data\Default] [apdfllckaahabafndbhieahigkjlhalf]
G2 - GCE: Preference [User Data\Default] [blpcfgokakmgnkcojhhkbfbldkacnbeo]
G2 - GCE: Preference [User Data\Default] [cfhdojbkjhnklbpkdaibdccddilifddb]
G_name__
G2 - GCE: Preference [User Data\Default] [coobgpohoikkiipiblmjeljniedjpjpf]
G2 - GCE: Preference [User Data\Default] [felcaaldnbdncclmgdcncolpebgiejap]
G2 - GCE: Preference [User Data\Default] [ghbmnnjooekpmoecnnnilnnbdlolhkhi]
G_extName__
G2 - GCE: Preference [User Data\Default] [gkojfkhlekighikafcpjkiklfbnlmeio]
G2 - GCE: Preference [User Data\Default] [nmmhkkegccagdldgiimedpiccmgmieda]
G2 - GCE: Preference [User Data\Default] [pjkljhegncpnkpknbcohdijeoejaedia]
Goog
Goog
Goog
Goog
__MS
Goog
Goog
__MS
Goog
Goog
Goog
---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 1s

P2 - FPN: [HKLM] [@Apple.com/iTunes,version=1.0] - (.Apple Inc..) -- C:\Program
Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
P2 - FPN: [HKLM] [@WildTangent.com/GamesAppPresenceDetector,Version=1.0] - (.Wil
dTangent.) -- C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Re
gistered\0\NP_wtapp.dll
---\\ Internet Explorer,Dmarrage,Recherche,URLSearchHook (21) - 1s
R0 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.micro
soft.com/
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = htt
p://go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.micr

osoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://%66%65%6
5%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_
bw56vmfzjr47c0z_euj_u_ay1-vqbq8esfwphopxlnuvlxzowv37e1mdat8yxtddkv_g2wyirldctmtg
seldi0qxvoeq9hii9t08v8uhz0tyjnsgesifji6-c57e3lhkxiyzpnkmomwuqv--chbhsrbxmfojc&q=
{searchterms} =>PUP.Optional.Linkury
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.micr
osoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go
.microsoft.com/
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:
noadd-ons
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:s
ecurityrisk
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://
go.microsoft.com/
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http:
//%66%65%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdg
kbutxkij9_bw56vmfzjr47c0z_euj_u_ay1-vqbq8esfwphopxlnuvlxzowv37e1mdat8yxtddkv_g2w
yirldctmtgseldi0qxvoeq9hii9t08v8uhz0tyjnsgesifji6-c57e3lhkxiyzpnkmomwuqv--chbhsr
bxmfojc&q={searchterms} =>PUP.Optional.Linkury
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchUrl,Default = http://%66%65
%65%64.%73%6f%6e%69%63-%73%65%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij
9_bw56vmfzjr47c0z_euj_u_ay1-vqbq8esfwphopxlnuvlxzowv37e1mdat8yxtddkv_g2wyirldctm
tgseldi0qxvoeq9hii9t08v8uhz0tyjnsgesifji6-c57e3lhkxiyzpnkmomwuqv--chbhsrbxmfojc&
q={searchterms} =>PUP.Optional.Linkury
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = ht
tp://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL
= http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_U
RL = http://go.microsoft.com/
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Extensions Off P
age = about:noadd-ons
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Security Risk Pa
ge = about:securityrisk
R1 - HKEY_USERS\S-1-5-21-1240937037-2823767435-1479946006-1001\SOFTWARE\Microsof
t\Internet Explorer\Main,Search Bar = http://%66%65%65%64.%73%6f%6e%69%63-%73%65
%61%72%63%68.%63%6f%6d/?p=mko_awfzxipyrahdgkbutxkij9_bw56vmfzjr47c0z_euj_u_ay1-v
qbq8esfwphopxlnuvlxzowv37e1mdat8yxtddkv_g2wyirldctmtgseldi0qxvoeq9hii9t08v8uhz0t
yjnsgesifji6-c57e3lhkxiyzpnkmomwuqv--chbhsrbxmfojc&q={searchterms} =>PUP.Option
al.Linkury
R3 - URLSearchHook: (no name) - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} Orphean
=>.Microsoft Internet Explorer
R4 - HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter,EnabledV9 = 1
R4 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\PhishingFilter,Enable
dV9 = 1
---\\ Internet Explorer,Proxy Management (5) - 0s
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
ide = *.local
e = 0
xy = 1
1_1 = 1
Proxy = wininet.dll
Settings,ProxyOverr
Settings,ProxyEnabl
Settings,MigratePro
Settings,EnableHttp
Settings,AutoConfig
---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s

F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)
F2 - REG:system.ini: VMApplet=
---\\ Etude du fichier hosts (1) - 0s
~ Le fichier hte est sain (The hosts file is clean) (21)
---\\ Browser Helper Object de navigateur (BHO) (3) - 0s
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605D
A} . (.Microsoft Corporation - Microsoft Lync.) -- C:\Program Files (x86)\Micros
oft Office\Office15\OCHelper.dll =>.Microsoft Corporation
O2 - BHO: URLRedirectionBHO [64Bits] - {B4F3A835-0E21-4959-BA22-42B3008E02FF} .
(.Microsoft Corporation - Microsoft Office Document Cache Handler.) -- C:\Progra
m Files (x86)\Microsoft Office\Office15\URLREDIR.DLL =>.Microsoft Corporation
O2 - BHO: Microsoft SkyDrive Pro Browser Helper [64Bits] - {D0498E0A-45B7-42AE-A
9AA-ABA463DBD3BF} . (.Microsoft Corporation - Microsoft SkyDrive Pro Extensions.
) -- C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL =>.Microsoft
Corporation
---\\ Applications lances au dmarrage du systme (24) - 3s
O4 - HKLM\..\Run: [DptfPolicyLpmServiceHelper] . (.Intel Corporation - Intel(R)
Dynamic Platform and Thermal Frame.) -- C:\Windows\System32\DptfPolicyLpmService
Helper.exe {3300009D4320E74C7AF0250102000300009D43}
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD R
ealtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semicond
uctor Corp
O4 - HKLM\..\Run: [RtHDVBg] . (.Realtek Semiconductor - HD Audio Background Proc
ess.) -- C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe =>.Realtek Semiconducto
r Corp
O4 - HKLM\..\Run: [IgfxTray] . (...) -- C:\Windows\System32\igfxTray.exe =>.Int
el Corporation - pGFX
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe (.not file.)
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA Update Backend.) - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe =>.NVIDIA
Corporation
O4 - HKLM\..\Run: [CDAServer] . (.Copyright 2010. All rights reserved. - CDA Ser
ver.) -- C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe =>.Samsu
ng Electronics CO., LTD.
O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Microsoft Corporation - Proc
essus hte Windows (Rundll32).) -- C:\Windows\System32\rundll32.exe
O4 - HKLM\..\Run: [iTunesHelper] . (.Apple Inc. - iTunesHelper.) -- D:\iTunesHel
per.exe =>.Apple Inc.
O4 - HKCU\..\Run: [Kies3PDLR.exe] . (.Samsung - .) -- C:\Program Files (x86)\Sam
sung\Kies3\FirmwareUpdate\Kies3PDLR.exe =>.Samsung Electronics CO., LTD.
O4 - HKCU\..\Run: [BitTorrent] . (.BitTorrent Inc. - BitTorrent.) -- C:\Users\ou
ssama\AppData\Roaming\BitTorrent\BitTorrent.exe =>.BitTorrent Inc
O4 - HKCU\..\Run: [OneDrive] . (.Microsoft Corporation - Microsoft OneDrive.) -C:\Users\oussama\AppData\Local\Microsoft\OneDrive\OneDrive.exe =>.Microsoft Co
rporation
O4 - HKCU\..\Run: [Steam] . (.Valve Corporation - Steam Client Bootstrapper.) -D:\Steam\Steam.exe =>.Valve
O4 - HKLM\..\Wow6432Node\Run: [ASUSPRP] . (.ASUSTek Computer Inc. - ASUS Product
Register Program.) -- C:\Program Files (x86)\ASUS\APRP\aprp.exe
O4 - HKLM\..\Wow6432Node\Run: [WebStorage] . (...) -- C:\Program Files (x86)\ASU
S\WebStorage\2.0.3.226\ASUSWSLoader.exe =>.ASUS Cloud Corporation
O4 - HKLM\..\Wow6432Node\Run: [RemoteControl10] . (.CyberLink Corp. - PowerDVD R
C Service.) -- C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe =>.Cy
berLink Corp.
O4 - HKLM\..\Wow6432Node\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray

Service.) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe =>.CyberLin
k Corp.
O4 - HKLM\..\Wow6432Node\Run: [SunJavaUpdateSched] . (.Oracle Corporation - Java
Update Scheduler.) -- C:\Program Files (x86)\Common Files\Java\Java Update\jusc
hed.exe =>.Oracle America, Inc.
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft
OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corpora
tion
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft
OneDrive Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe =>.Microsoft Corpora
tion
O4 - HKUS\S-1-5-21-1240937037-2823767435-1479946006-1001\..\Run: [Kies3PDLR.exe]
. (.Samsung - .) -- C:\Program Files (x86)\Samsung\Kies3\FirmwareUpdate\Kies3PD
LR.exe =>.Samsung Electronics CO., LTD.
O4 - HKUS\S-1-5-21-1240937037-2823767435-1479946006-1001\..\Run: [BitTorrent] .
(.BitTorrent Inc. - BitTorrent.) -- C:\Users\oussama\AppData\Roaming\BitTorrent\
BitTorrent.exe =>.BitTorrent Inc
O4 - HKUS\S-1-5-21-1240937037-2823767435-1479946006-1001\..\Run: [OneDrive] . (.
Microsoft Corporation - Microsoft OneDrive.) -- C:\Users\oussama\AppData\Local\M
icrosoft\OneDrive\OneDrive.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-1240937037-2823767435-1479946006-1001\..\Run: [Steam] . (.Val
ve Corporation - Steam Client Bootstrapper.) -- D:\Steam\Steam.exe =>.Valve
---\\ Modification Domaine/Adresses DNS (2) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
---\\ Protocole additionnel (23) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Micro
soft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtm
l.dll
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microso
ft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microso

ft Corporation - Contrle ActiveX pour le flux vido.) -- C:\Windows\SysWOW64\MSVidC
tl.dll
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Micros
oft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dl
l
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microso
ft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Micros

oft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dl
l
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Micro
soft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.d
ll
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microso
ft Corporation - Microsoft InfoTech Storage System Library.) -- C:\Windows\SysWOW
64\itss.dll
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.
Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\
mshtml.dll
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Micro
soft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.d
ll
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Micr
osoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\msht

ml.dll
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Micro
soft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\Sy
sWOW64\inetcomm.dll
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsof
t Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\SysWOW64\urlmon.dll
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Micr
osoft Corporation - Microsoft InfoTech Storage System Library.) -- C:\Windows\Sys
WOW64\itss.dll
O18 - Handler: osf [64Bits] - {D924BDC6-C83A-4BD5-90D0-095128A113D1} . (.Microso
ft Corporation - Microsoft Office 2013 component.) -- C:\Program Files (x86)\Mic
rosoft Office\Office15\MSOSB.DLL =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microso
ft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\mshtml.
dll
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Micr
osoft Corporation - TBAuth protocol handler.) -- C:\Windows\SysWOW64\tbauth.dll
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsof
t Corporation - Contrle ActiveX pour le flux vido.) -- C:\Windows\SysWOW64\MSVidCt
l.dll
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Mi
crosoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\ms
html.dll
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04
F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) - C:\Windows\SysWOW64\mscoree.dll
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79
ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C
:\Windows\SysWOW64\mscoree.dll
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04
F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) - C:\Windows\SysWOW64\mscoree.dll
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Mic
rosoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86
)\Common Files\Microsoft Shared\OFFICE15\MSOXMLMF.DLL =>.Microsoft Corporation
---\\ Valeur de Registre AppInit_DLLs et sous-cls Winlogon Notify (1) - 0s
O20 - AppInit_DLLs: . (...) - C:\ProgramData\Bamcof\RonZimwarm.dll =>PUP.Option
al.Salus
---\\ Logiciels installs (82) - 21s
O42 - Logiciel: Afficher le Mode demploi - (...) [HKLM][64Bits] -- View User Guid
e
O42 - Logiciel: Apple Application Support (32 bits) - (.Apple Inc..) [HKLM][64Bi
ts] -- {C5815ACF-FD34-4553-8A22-C7411B7E662B}
O42 - Logiciel: Apple Application Support (64 bits) - (.Apple Inc..) [HKLM][64Bi
ts] -- {CBF12D2F-CF64-4CB7-858B-2C1F21068E5F}
O42 - Logiciel: Apple Mobile Device Support - (.Apple Inc..) [HKLM][64Bits] -- {
3540181E-340A-4E7A-B409-31663472B2F7}
O42 - Logiciel: Apple Software Update - (.Apple Inc..) [HKLM][64Bits] -- {FFD1F7
F1-1AC9-4BC4-A908-0686D635ABAF}
O42 - Logiciel: ASUS Live Update - (.ASUS.) [HKLM][64Bits] -- {FA540E67-095C-4A1
B-97BA-4D547DEC9AF4}
O42 - Logiciel: ASUS Power4Gear Hybrid - (.ASUS.) [HKLM][64Bits] -- {9B6239BF-4E
85-4590-8D72-51E30DB1A9AA}
O42 - Logiciel: ASUS Screen Saver - (.ASUS.) [HKLM][64Bits] -- {0FBEEDF8-30FA-4F
A3-B31F-C9C7E7E8DFA2}
O42 - Logiciel: ASUS Smart Gesture - (.ASUS.) [HKLM][64Bits] -- {4D3286A6-F6AB-4
98A-82A4-E4F040529F3D}
O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64B

its] -- {0969AF05-4FF6-4C00-9406-43599238DE0D}
O42 - Logiciel: ASUS USB Charger Plus - (.ASUS.) [HKLM][64Bits] -- {A859E3E5-C62
F-4BFA-AF1D-2B95E03166AF}
O42 - Logiciel: ASUSDVD - (.CyberLink Corp..) [HKLM][64Bits] -- {DEC235ED-58A4-4
517-A278-C41E8DAEAB3B}
O42 - Logiciel: ASUSDVD - (.CyberLink Corp..) [HKLM][64Bits] -- InstallShield_{D
EC235ED-58A4-4517-A278-C41E8DAEAB3B}
O42 - Logiciel: AsusVibe2.0 - (.ASUSTEK.) [HKLM][64Bits] -- Asus Vibe2.0
O42 - Logiciel: ATK Package - (.ASUS.) [HKLM][64Bits] -- {AB5C933E-5C7D-4D30-B31
4-9C83A49B94BE}
O42 - Logiciel: Bitdefender Total Security - (.Bitdefender.) [HKLM][64Bits] -- B
itdefender
O42 - Logiciel: BitTorrent - (.BitTorrent Inc..) [HKCU][64Bits] -- BitTorrent
O42 - Logiciel: Bonjour - (.Apple Inc..) [HKLM][64Bits] -- {56DDDFB8-7F79-4480-8
9D5-25E1F52AB28F}
O42 - Logiciel: Common Desktop Agent - (.OEM.) [HKLM][64Bits] -- {031A0E14-04134C97-9772-2639B782F46F}
O42 - Logiciel: CyberLink AudioDirector 4 - (.CyberLink Corp..) [HKLM][64Bits] - {B9DC8064-98C6-4b1b-BA3F-EFA285D3F5CA}
O42 - Logiciel: CyberLink ColorDirector 2 - (.Nom de votre socit.) [HKLM][64Bits]
-- {8B888A47-4BFA-482c-903F-7CC51BAAC4A3}
O42 - Logiciel: CyberLink LabelPrint 2.5 - (.CyberLink Corp..) [HKLM][64Bits] -{C59C179C-668D-49A9-B6EA-0121CCFC1243}
O42 - Logiciel: CyberLink Media Suite 10 - (.CyberLink Corp..) [HKLM][64Bits] -{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}
O42 - Logiciel: CyberLink Media Suite 10 - (.CyberLink Corp..) [HKLM][64Bits] -InstallShield_{8F14AA37-5193-4A14-BD5B-BDF9B361AEF7}
O42 - Logiciel: CyberLink Power2Go - (.CyberLink Corp..) [HKLM][64Bits] -- {40BF
1E83-20EB-11D8-97C5-0009C5020658}
O42 - Logiciel: CyberLink PowerDirector 12 - (.Nom de votre socit.) [HKLM][64Bits]
-- {E1646825-D391-42A0-93AA-27FA810DA093}
O42 - Logiciel: CyberLink PowerDirector Ultimate Suite 2 - (.CyberLink Corp..) [
HKLM][64Bits] -- InstallShield_{4203EA37-6F40-424F-BDBE-52DA526CF44C}
O42 - Logiciel: Google Chrome - (.Google Inc..) [HKLM][64Bits] -- Google Chrome
O42 - Logiciel: Google Update Helper - (.Google Inc..) [HKLM][64Bits] -- {60EC98
0A-BDA2-4CB6-A427-B07A5498B4CA}
O42 - Logiciel: Intel(R) Dynamic Platform and Thermal Framework - (.Intel Corpor
ation.) [HKLM][64Bits] -- FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C
O42 - Logiciel: Intel(R) Management Engine Components - (.Intel Corporation.) [H
KLM][64Bits] -- {65153EA5-8B6E-43B6-857B-C6E4FC25798A}
O42 - Logiciel: Intel(R) Processor Graphics - (.Intel Corporation.) [HKLM][64Bit
s] -- {F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}
O42 - Logiciel: Intel Trusted Connect Service Client - (.Intel Corporation.) [HKL
M][64Bits] -- {457D6189-416A-44CD-A0A6-D6D75AD25CCF}
O42 - Logiciel: iTunes - (.Apple Inc..) [HKLM][64Bits] -- {0D44E3A4-6C3D-45D7-B4
43-079509E5BE5D}
O42 - Logiciel: iVocalize Web Conference 4 - (...) [HKLM][64Bits] -- iVocalize W
eb Conference 4
O42 - Logiciel: Java 8 Update 66 - (.Oracle Corporation.) [HKLM][64Bits] -- {26A
24AE4-039D-4CA4-87B4-2F83218066F0}
O42 - Logiciel: Java Auto Updater - (.Oracle Corporation.) [HKLM][64Bits] -- {4A
03706F-666A-4037-7777-5F2748764D10}
O42 - Logiciel: Mediatek Bluetooth - (.Mediatek.) [HKLM][64Bits] -- {E0B1ECF5-76
6A-5464-BFE2-2C1BED6A49FB}
O42 - Logiciel: Microsoft Access MUI (French) 2013 - (.Microsoft Corporation.) [
HKLM][64Bits] -- {90150000-0015-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft DCF MUI (French) 2013 - (.Microsoft Corporation.) [HKL
M][64Bits] -- {90150000-0090-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Excel MUI (French) 2013 - (.Microsoft Corporation.) [H
KLM][64Bits] -- {90150000-0016-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Groove MUI (French) 2013 - (.Microsoft Corporation.) [
HKLM][64Bits] -- {90150000-00BA-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft InfoPath MUI (French) 2013 - (.Microsoft Corporation.)
[HKLM][64Bits] -- {90150000-0044-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Lync MUI (French) 2013 - (.Microsoft Corporation.) [HK
LM][64Bits] -- {90150000-012B-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft OneNote MUI (French) 2013 - (.Microsoft Corporation.)
[HKLM][64Bits] -- {90150000-00A1-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Outlook MUI (French) 2013 - (.Microsoft Corporation.)
[HKLM][64Bits] -- {90150000-001A-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft PowerPoint MUI (French) 2013 - (.Microsoft Corporation
.) [HKLM][64Bits] -- {90150000-0018-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Publisher MUI (French) 2013 - (.Microsoft Corporation.
) [HKLM][64Bits] -- {90150000-0019-040C-1000-0000000FF1CE}
O42 - Logiciel: Microsoft Word MUI (French) 2013 - (.Microsoft Corporation.) [HK
LM][64Bits] -- {90150000-001B-040C-1000-0000000FF1CE}
O42 - Logiciel: Mises jour NVIDIA 10.4.0 - (.NVIDIA Corporation.) [HKLM][64Bits]
-- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update
O42 - Logiciel: Movavi Screen Capture Studio 5 - (.MOVAVI.) [HKLM][64Bits] -- Mo
vavi Screen Capture Studio 5
O42 - Logiciel: NewBlue Video Essentials for PowerDirector - (.NewBlue.) [HKLM][
64Bits] -- NewBlue Video Essentials for Cyberlink
O42 - Logiciel: NVIDIA Install Application - (.NVIDIA Corporation.) [HKLM][64Bit
s] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer
O42 - Logiciel: NVIDIA Network Service - (.NVIDIA Corporation.) [HKLM][64Bits] - {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service
O42 - Logiciel: NVIDIA Optimus Update 10.4.0 - (.NVIDIA Corporation.) [HKLM][64B
its] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus
O42 - Logiciel: NVIDIA PhysX - (.NVIDIA Corporation.) [HKLM][64Bits] -- {F0AE9B2
4-416F-4CAA-8519-75CABCDAC61A}
O42 - Logiciel: NVIDIA PhysX System Software 9.13.0927 - (.NVIDIA Corporation.)
[HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX
O42 - Logiciel: NVIDIA Pilote graphique 353.54 - (.NVIDIA Corporation.) [HKLM][6
4Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver
O42 - Logiciel: NVIDIA Update Core - (.NVIDIA Corporation.) [HKLM][64Bits] -- {B
2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core
O42 - Logiciel: Package de pilotes Windows - ASUS (ATP) Mouse (06/17/2015 6.0.0
.66) - (.ASUS.) [HKLM][64Bits] -- 1EFB54678773735560B565BE7FA6F2BCC557EE21
O42 - Logiciel: Panneau de configuration NVIDIA 353.54 - (.NVIDIA Corporation.)
[HKLM][64Bits] -- {B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel
O42 - Logiciel: Pro Evolution Soccer 2016 - (...) [HKLM][64Bits] -- UHJvRXZvbHV0
aW9uU29jY2VyMjAxNg==_is1
O42 - Logiciel: Ralink RT2860 Wireless LAN Card - (.Ralink.) [HKLM][64Bits] -- {
8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}
O42 - Logiciel: Realtek Card Reader - (.Realtek Semiconductor Corp..) [HKLM][64B
its] -- {5BC2B5AB-80DE-4E83-B8CF-426902051D0A}
O42 - Logiciel: Realtek Ethernet Controller Driver - (.Realtek.) [HKLM][64Bits]
-- {8833FFB6-5B0C-4764-81AA-06DFEED9A476}
O42 - Logiciel: Realtek High Definition Audio Driver - (.Realtek Semiconductor C
orp..) [HKLM][64Bits] -- {F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}
O42 - Logiciel: Samsung Easy Printer Manager - (.Samsung Electronics Co., Ltd..)
[HKLM][64Bits] -- Samsung Easy Printer Manager
O42 - Logiciel: Samsung Kies3 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits]
-- {88547073-C566-4895-9005-EBE98EA3F7C7}
O42 - Logiciel: Samsung Kies3 - (.Samsung Electronics Co., Ltd..) [HKLM][64Bits]
-- InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}
O42 - Logiciel: Samsung Printer Live Update - (.Samsung Electronics Co., Ltd..)
[HKLM][64Bits] -- Samsung Printer Live Update
O42 - Logiciel: Samsung USB Driver for Mobile Phones - (.Samsung Electronics Co.
, Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}

O42 - Logiciel: Skype 7.4 - (.Skype Technologies S.A..) [HKLM][64Bits] -- {24991B
A0-F0EE-44AD-9CC8-5EC50AECF6B7}
O42 - Logiciel: SmartSound Quicktracks 5 - (.SmartSound Software Inc..) [HKLM][6
4Bits] -- {2F8BA3FD-1FA9-4279-B696-712ABB12F09F}
O42 - Logiciel: SmartSound Quicktracks 5 - (.SmartSound Software Inc..) [HKLM][6
4Bits] -- InstallShield_{2F8BA3FD-1FA9-4279-B696-712ABB12F09F}
O42 - Logiciel: Steam - (.Valve Corporation.) [HKLM][64Bits] -- Steam
O42 - Logiciel: Update Installer for WildTangent Games App - (.WildTangent.) [HK
LM][64Bits] -- {2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App =>.
WildTangent
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media play
er
O42 - Logiciel: WebStorage - (.ASUS Cloud Corporation.) [HKLM][64Bits] -- WebSto
rage
O42 - Logiciel: WildTangent Games App - (.WildTangent.) [HKLM][64Bits] -- {70B44
6D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus =>.WildTangent
O42 - Logiciel: WinFlash - (.ASUS.) [HKLM][64Bits] -- {8F21291E-0444-4B1D-B9F9-4
370A73E346D}
O42 - Logiciel: WinRAR 5.01 (64-bit) - (.win.rar GmbH.) [HKLM][64Bits] -- WinRAR
archiver
O42 - Logiciel: ZHPFix 2015 - (.Nicolas Coolman.) [HKLM][64Bits] -- ZHPFix_is1
---\\ HKCU & HKLM Software Keys (111) - 21s
HKLM\SOFTWARE\Wow6432Node\AdwCleaner
HKLM\SOFTWARE\Wow6432Node\AGEIA Technologies
HKLM\SOFTWARE\Wow6432Node\AppDataLow
HKLM\SOFTWARE\Wow6432Node\Apple Inc.
HKLM\SOFTWARE\Wow6432Node\ASIO
HKLM\SOFTWARE\Wow6432Node\AsLdr
HKLM\SOFTWARE\Wow6432Node\ASUS
HKLM\SOFTWARE\Wow6432Node\AVAST Software
HKLM\SOFTWARE\Wow6432Node\AVS4YOU
HKLM\SOFTWARE\Wow6432Node\Bigasoft
HKLM\SOFTWARE\Wow6432Node\Bitdefender
HKLM\SOFTWARE\Wow6432Node\BlueStacks
HKLM\SOFTWARE\Wow6432Node\Common Desktop Agent
HKLM\SOFTWARE\Wow6432Node\CyberLink
HKLM\SOFTWARE\Wow6432Node\ECAREME
HKLM\SOFTWARE\Wow6432Node\Electronic Arts
HKLM\SOFTWARE\Wow6432Node\Gameforge
HKLM\SOFTWARE\Wow6432Node\Google
HKLM\SOFTWARE\Wow6432Node\iDealshare
HKLM\SOFTWARE\Wow6432Node\IM Providers
HKLM\SOFTWARE\Wow6432Node\InstallShield
HKLM\SOFTWARE\Wow6432Node\Intel
HKLM\SOFTWARE\Wow6432Node\iTinySoft
HKLM\SOFTWARE\Wow6432Node\IVT Corporation
HKLM\SOFTWARE\Wow6432Node\JavaSoft
HKLM\SOFTWARE\Wow6432Node\JreMetrics
HKLM\SOFTWARE\Wow6432Node\Khronos
HKLM\SOFTWARE\Wow6432Node\Lake
HKLM\SOFTWARE\Wow6432Node\Macromedia
HKLM\SOFTWARE\Wow6432Node\McAfee
HKLM\SOFTWARE\Wow6432Node\Metin2_FR
HKLM\SOFTWARE\Wow6432Node\MOVAVI
HKLM\SOFTWARE\Wow6432Node\Mozilla
HKLM\SOFTWARE\Wow6432Node\MozillaPlugins
HKLM\SOFTWARE\Wow6432Node\mtBamcof =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\NewBlue
HKLM\SOFTWARE\Wow6432Node\Nostale_FR
HKLM\SOFTWARE\Wow6432Node\Nuance
HKLM\SOFTWARE\Wow6432Node\NVIDIA Corporation
HKLM\SOFTWARE\Wow6432Node\ODBC
HKLM\SOFTWARE\Wow6432Node\Opera Software
HKLM\SOFTWARE\Wow6432Node\PowerPivot
HKLM\SOFTWARE\Wow6432Node\Ralink
HKLM\SOFTWARE\Wow6432Node\Realtek
HKLM\SOFTWARE\Wow6432Node\Realtek Semiconductor Corp.
HKLM\SOFTWARE\Wow6432Node\Runes of Magic
HKLM\SOFTWARE\Wow6432Node\Samsung
HKLM\SOFTWARE\Wow6432Node\Skype
HKLM\SOFTWARE\Wow6432Node\SmartSound Software
HKLM\SOFTWARE\Wow6432Node\TQDigital
HKLM\SOFTWARE\Wow6432Node\Troy Online
HKLM\SOFTWARE\Wow6432Node\Valve
HKLM\SOFTWARE\Wow6432Node\VideoLAN
HKLM\SOFTWARE\Wow6432Node\Visicom Media
HKLM\SOFTWARE\Wow6432Node\WildTangent
HKLM\SOFTWARE\Wow6432Node\Yahoo
HKLM\SOFTWARE\Wow6432Node\Zemi Interactive
HKLM\SOFTWARE\Wow6432Node\RegisteredApplications
HKCU\SOFTWARE\Ankama
HKCU\SOFTWARE\AppDataLow
HKCU\SOFTWARE\Apple Computer, Inc.
HKCU\SOFTWARE\Apple Inc.
HKCU\SOFTWARE\ASUS
HKCU\SOFTWARE\AVS4YOU
HKCU\SOFTWARE\Bigasoft
HKCU\SOFTWARE\Bitdefender
HKCU\SOFTWARE\BitTorrent
HKCU\SOFTWARE\Common Desktop Agent
HKCU\SOFTWARE\CyberLink
HKCU\SOFTWARE\DSS
HKCU\SOFTWARE\DVR-MS
HKCU\SOFTWARE\ECAREME
HKCU\SOFTWARE\EMU
HKCU\SOFTWARE\Engelmann Media
HKCU\SOFTWARE\Gameforge4d
HKCU\SOFTWARE\Google
HKCU\SOFTWARE\iDealshare
HKCU\SOFTWARE\IM Providers
HKCU\SOFTWARE\Intel
HKCU\SOFTWARE\iVocalize Web Conference 4
HKCU\SOFTWARE\LogiShrd
HKCU\SOFTWARE\Macromedia
HKCU\SOFTWARE\Mine
HKCU\SOFTWARE\MOVAVI
HKCU\SOFTWARE\MozillaPlugins
HKCU\SOFTWARE\Netscape
HKCU\SOFTWARE\NewBlue
HKCU\SOFTWARE\NVIDIA Corporation
HKCU\SOFTWARE\ODBC
HKCU\SOFTWARE\Opera Software
HKCU\SOFTWARE\Realtek
HKCU\SOFTWARE\RegisteredApplications
HKCU\SOFTWARE\Samsung
HKCU\SOFTWARE\Skype
HKCU\SOFTWARE\Software
HKCU\SOFTWARE\SSPrint
HKCU\SOFTWARE\SWiSHzone.com
HKCU\SOFTWARE\SyncEngines
HKCU\SOFTWARE\TR3
HKCU\SOFTWARE\Trolltech
HKCU\SOFTWARE\Troy Online
HKCU\SOFTWARE\tvp
HKCU\SOFTWARE\Valve
HKCU\SOFTWARE\Visicom Media
HKCU\SOFTWARE\Waves Audio
HKCU\SOFTWARE\WinRAR
HKCU\SOFTWARE\WinRAR SFX
HKCU\SOFTWARE\Wow6432Node
HKCU\SOFTWARE\ZebHelpProcess Helper
HKCU\SOFTWARE\AppDataLow\Software
HKCU\SOFTWARE\AppDataLow\Software\JavaSoft
---\\ Contenu des dossiers Programmes (227) - 11s
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files (x86)\Apple Software Update
O43 - CFD: 21/10/2015 - [] D -- C:\Program Files (x86)\ASUS
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files (x86)\Bonjour
O43 - CFD: 06/12/2015 - [] D -- C:\Program Files (x86)\Common Files
O43 - CFD: 10/12/2014 - [] D -- C:\Program Files (x86)\CyberLink
O43 - CFD: 03/09/2015 - [] D -- C:\Program Files (x86)\Google
O43 - CFD: 15/01/2015 - [] HD -- C:\Program Files (x86)\InstallShield Installati
on Information
O43 - CFD: 04/05/2014 - [] D -- C:\Program Files (x86)\Intel
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files (x86)\Internet Explorer
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files (x86)\iTunes
O43 - CFD: 12/11/2014 - [] D -- C:\Program Files (x86)\iVocalize Web Conference
4
O43 - CFD: 06/12/2015 - [] D -- C:\Program Files (x86)\Java
O43 - CFD: 15/01/2015 - [] D -- C:\Program Files (x86)\MarkAny
O43 - CFD: 09/03/2015 - [] D -- C:\Program Files (x86)\Microsoft Analysis Servic
es
O43 - CFD: 09/03/2015 - [] D -- C:\Program Files (x86)\Microsoft Office
O43 - CFD: 20/10/2014 - [] D -- C:\Program Files (x86)\Microsoft SkyDrive
O43 - CFD: 09/03/2015 - [] D -- C:\Program Files (x86)\Microsoft SQL Server
O43 - CFD: 30/07/2015 - [] D -- C:\Program Files (x86)\Microsoft.NET
O43 - CFD: 10/12/2014 - [] D -- C:\Program Files (x86)\Movavi Core 5.1.0
O43 - CFD: 10/12/2014 - [] D -- C:\Program Files (x86)\Movavi Screen Capture Stu
dio 5
O43 - CFD: 09/03/2015 - [] D -- C:\Program Files (x86)\Mozilla Firefox
O43 - CFD: 30/07/2015 - [] D -- C:\Program Files (x86)\MSBuild
O43 - CFD: 04/05/2014 - [] D -- C:\Program Files (x86)\NVIDIA Corporation
O43 - CFD: 25/02/2015 - [] D -- C:\Program Files (x86)\Opera
O43 - CFD: 04/05/2014 - [] D -- C:\Program Files (x86)\Ralink Corporation
O43 - CFD: 22/01/2015 - [] D -- C:\Program Files (x86)\RAR Password Unlocker
O43 - CFD: 04/05/2014 - [] D -- C:\Program Files (x86)\Realtek
O43 - CFD: 30/07/2015 - [] D -- C:\Program Files (x86)\Reference Assemblies
O43 - CFD: 07/09/2015 - [] D -- C:\Program Files (x86)\Samsung
O43 - CFD: 01/09/2015 - [] D -- C:\Program Files (x86)\SamsungPrinterLiveUpdate
O43 - CFD: 07/09/2015 - [] D -- C:\Program Files (x86)\SamsungPrinterLiveUpdateI
nstaller
O43 - CFD: 13/06/2015 - [] RD -- C:\Program Files (x86)\Skype
O43 - CFD: 10/12/2014 - [] D -- C:\Program Files (x86)\SmartSound Software
O43 - CFD: 04/05/2014 - [0] HD -- C:\Program Files (x86)\Temp
O43 - CFD: 09/12/2014 - [] D -- C:\Program Files (x86)\Total Video Converter
O43 - CFD: 19/07/2015 - [] D -- C:\Program Files (x86)\Troy Online 2.0
O43 - CFD: 10/12/2014 - [] D -- C:\Program Files (x86)\VideoLAN
O43 - CFD: 14/12/2013 - [] D -- C:\Program Files (x86)\WildTangent Games
O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\Windows Defender

O43 - CFD: 30/07/2015 - [] D -- C:\Program Files (x86)\Windows Mail
O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\Windows Media Player
O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\Windows Multimedia Platfo
rm
O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\Windows NT
O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\Windows Photo Viewer
O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\Windows Portable Devices
O43 - CFD: 10/07/2015 - [] SHD -- C:\Program Files (x86)\Windows Sidebar
O43 - CFD: 10/07/2015 - [] SD -- C:\Program Files (x86)\WindowsPowerShell
O43 - CFD: 12/12/2015 - [] D -- C:\Program Files (x86)\ZHPFix
O43 - CFD: 02/10/2015 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Pro
grams\Accessibility
grams\Accessories
grams\Administrative Tools
O43 - CFD: 30/07/2015 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Prog
rams\ASUS
grams\ASUSDVD
grams\CyberLink Media Suite
grams\CyberLink PowerDirector Ultimate Suite
grams\Games
rams\Google Chrome
grams\Intel
rams\iTunes
rams\Java
rams\Maintenance
rams\Microsoft Office 2013
rams\Movavi Screen Capture Studio 5
rams\Pro Evolution Soccer 2015
rams\Samsung
grams\Samsung Printers
rams\Skype
grams\StartUp
rams\Steam
grams\System Tools
O43 - CFD: 10/07/2015 - [0] RHD -- C:\ProgramData\Microsoft\Windows\Start Menu\P
rograms\Tablet PC
O43 - CFD: 19/07/2015 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Pro
grams\Troy Online 2.0
rams\VideoLAN
O43 - CFD: 30/07/2015
rams\WinRAR
O43 - CFD: 12/12/2015
rams\ZHP
O43 - CFD: 07/04/2015
O43 - CFD: 07/04/2015
O43 - CFD: 10/07/2015
O43 - CFD: 12/12/2015
O43 - CFD: 14/12/2013
O43 - CFD: 14/12/2013
O43 - CFD: 04/05/2014
O43 - CFD: 20/10/2014
O43 - CFD: 08/12/2014
O43 - CFD: 12/12/2015
O43 - CFD: 21/10/2015
O43 - CFD: 25/02/2015
O43 - CFD: 21/10/2014
O43 - CFD: 21/10/2014
O43 - CFD: 10/12/2014
O43 - CFD: 30/07/2015
O43 - CFD: 04/11/2014
O43 - CFD: 10/12/2014
O43 - CFD: 10/07/2015
O43 - CFD: 10/12/2014
O43 - CFD: 10/07/2015
O43 - CFD: 10/07/2015
O43 - CFD: 27/07/2015
4A7
O43 - CFD: 10/12/2014
O43 - CFD: 10/12/2014
O43 - CFD: 04/05/2014
O43 - CFD: 16/10/2015
O43 - CFD: 08/12/2014
O43 - CFD: 21/10/2014
O43 - CFD: 30/07/2015
O43 - CFD: 30/07/2015
O43 - CFD: 09/03/2015
O43 - CFD: 21/10/2014
O43 - CFD: 20/10/2014
O43 - CFD: 30/07/2015
O43 - CFD: 09/12/2014
O43 - CFD: 10/12/2014
O43 - CFD: 30/07/2015
O43 - CFD: 04/05/2014
O43 - CFD: 06/12/2015
O43 - CFD: 21/10/2015
O43 - CFD: 04/05/2014
O43 - CFD: 04/05/2014
O43 - CFD: 30/07/2015
O43 - CFD: 07/09/2015
O43 - CFD: 30/07/2015
O43 - CFD: 13/06/2015
O43 - CFD: 10/12/2014
O43 - CFD: 10/07/2015
O43 - CFD: 10/07/2015
O43 - CFD: 16/10/2015
O43 - CFD: 10/12/2014
O43 - CFD: 10/07/2015
O43 - CFD: 20/10/2014
- [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Prog
- [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Prog
-
[] D -- C:\ProgramData\Apple
[] D -- C:\ProgramData\Apple Computer
[0] SHD -- C:\ProgramData\Application Data
[] D -- C:\ProgramData\ASUS Smart Gesture
[] D -- C:\ProgramData\ASUS WebStorage
[] D -- C:\ProgramData\ASUSLogos
[] D -- C:\ProgramData\ASUSVibe
[] D -- C:\ProgramData\AVAST Software
[] D -- C:\ProgramData\AVS4YOU
[] D -- C:\ProgramData\Bamcof =>PUP.Optional.Salus
[] D -- C:\ProgramData\Bamcofs =>PUP.Optional.Salus
[] D -- C:\ProgramData\bdch
[] D -- C:\ProgramData\BDLogging
[] D -- C:\ProgramData\Bitdefender
[] D -- C:\ProgramData\BlueStacksSetup
[0] SHD -- C:\ProgramData\Bureau
[] D -- C:\ProgramData\Caphyon
[] D -- C:\ProgramData\CLSK
[0] D -- C:\ProgramData\Comms
[] D -- C:\ProgramData\CyberLink
[0] SHD -- C:\ProgramData\Desktop
[0] SHD -- C:\ProgramData\Documents
[] D -- C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A8
[] D -- C:\ProgramData\eSellerate
[] D -- C:\ProgramData\install_clap
[] D -- C:\ProgramData\Intel
[] D -- C:\ProgramData\KONAMI
[] D -- C:\ProgramData\Licenses
[] D -- C:\ProgramData\McAfee
[0] SHD -- C:\ProgramData\Menu Dmarrer
[] SD -- C:\ProgramData\Microsoft
[] D -- C:\ProgramData\Microsoft Help
[] D -- C:\ProgramData\Microsoft OneDrive
[] D -- C:\ProgramData\Microsoft SkyDrive
[0] SHD -- C:\ProgramData\Modles
[] D -- C:\ProgramData\Movavi
[] D -- C:\ProgramData\Movavi Video Suite 12
[] D -- C:\ProgramData\NVIDIA
[] D -- C:\ProgramData\NVIDIA Corporation
[] D -- C:\ProgramData\Oracle
[] D -- C:\ProgramData\Origin
[] D -- C:\ProgramData\P4G
[] D -- C:\ProgramData\Ralink Driver
[] D -- C:\ProgramData\regid.1991-06.com.microsoft
[] D -- C:\ProgramData\Samsung
[] D -- C:\ProgramData\SetupTPDriver
[] D -- C:\ProgramData\Skype
[] D -- C:\ProgramData\SmartSound Software Inc
[0] D -- C:\ProgramData\SoftwareDistribution
[0] SHD -- C:\ProgramData\Start Menu
[] D -- C:\ProgramData\Steam
[] D -- C:\ProgramData\Temp
[0] SHD -- C:\ProgramData\Templates
[] D -- C:\ProgramData\USBChargerPlus
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
op Agent
O43 - CFD:
d
O43 - CFD:
O43 - CFD:
O43 - CFD:
ared
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
tes
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
nverter 4
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
oGo 5
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
O43 - CFD:
10/07/2015
10/07/2015
14/12/2013
14/12/2013
07/04/2015
08/12/2014
14/12/2013
21/10/2014
07/09/2015
[]
[]
[]
[]
[]
[]
[]
[]
[]
D
D
D
D
D
D
D
D
D
----------
C:\ProgramData\USOPrivate
C:\ProgramData\USOShared
C:\ProgramData\WebStorage
C:\ProgramData\WildTangent
C:\Program Files (x86)\Common
Files\Apple
Files\AVSMedia
Files\AWS
Files\Bitdefender
Files\Common Deskt
04/05/2014 - [] D -- C:\Program Files (x86)\Common Files\InstallShiel

30/07/2015 - [] D -- C:\Program Files (x86)\Common Files\Intel
06/12/2015 - [] D -- C:\Program Files (x86)\Common Files\Java
30/07/2015 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Sh
04/05/2014
10/07/2015
22/01/2015
12/12/2015
10/07/2015
20/10/2014
02/11/2014
[]
[]
[]
[]
[]
[]
[]
D
D
D
D
D
D
D
--------
C:\Program Files (x86)\Common Files\postureAgent

C:\Program Files (x86)\Common Files\Services
C:\Program Files (x86)\Common Files\Skype
C:\Program Files (x86)\Common Files\Steam
C:\Program Files (x86)\Common Files\System
C:\Users\oussama\AppData\Roaming\Adobe
C:\Users\oussama\AppData\Roaming\AnkamaCertifica
02/11/2014
25/06/2015
08/12/2014
09/12/2014
[]
[]
[]
[]
D
D
D
D
-----
C:\Users\oussama\AppData\Roaming\app
C:\Users\oussama\AppData\Roaming\Apple Computer
C:\Users\oussama\AppData\Roaming\AVS4YOU
C:\Users\oussama\AppData\Roaming\Bigasoft WTV Co
21/10/2014
12/12/2015
10/12/2014
02/11/2014
03/11/2014
05/11/2014
08/12/2014
08/12/2014
[]
[]
[]
[]
[]
[]
[]
[]
D
D
D
D
D
D
D
D
---------
C:\Users\oussama\AppData\Roaming\Bitdefender
C:\Users\oussama\AppData\Roaming\BitTorrent
C:\Users\oussama\AppData\Roaming\CyberLink
C:\Users\oussama\AppData\Roaming\Dofus
C:\Users\oussama\AppData\Roaming\Dofus-2
C:\Users\oussama\AppData\Roaming\Dofus2
C:\Users\oussama\AppData\Roaming\Engelmann Media
C:\Users\oussama\AppData\Roaming\iDealshare Vide
20/04/2015
20/10/2014
15/10/2015
21/10/2015
25/02/2015
21/10/2015
21/10/2014
02/11/2014
01/09/2015
09/11/2015
20/10/2015
06/12/2015
19/12/2014
16/06/2015
20/10/2014
09/12/2014
27/10/2014
12/12/2015
02/11/2014
10/12/2014
07/04/2015
30/07/2015
[] D -- C:\Users\oussama\AppData\Roaming\Identities
[] D -- C:\Users\oussama\AppData\Roaming\Macromedia
[] SD -- C:\Users\oussama\AppData\Roaming\Microsoft
[] D -- C:\Users\oussama\AppData\Roaming\Mozilla
[0] D -- C:\Users\oussama\AppData\Roaming\Opera Software
[] D -- C:\Users\oussama\AppData\Roaming\Origin
[0] D -- C:\Users\oussama\AppData\Roaming\QuickScan
[] D -- C:\Users\oussama\AppData\Roaming\Reg
[] D -- C:\Users\oussama\AppData\Roaming\Samsung
[] D -- C:\Users\oussama\AppData\Roaming\Skype
[] D -- C:\Users\oussama\AppData\Roaming\SmartSteamEmu
[] D -- C:\Users\oussama\AppData\Roaming\Sun
[] D -- C:\Users\oussama\AppData\Roaming\TERA
[] D -- C:\Users\oussama\AppData\Roaming\vlc
[] D -- C:\Users\oussama\AppData\Roaming\WebStorage
[] D -- C:\Users\oussama\AppData\Roaming\WildTangent
[] D -- C:\Users\oussama\AppData\Roaming\WinRAR
[] D -- C:\Users\oussama\AppData\Roaming\ZHP
[] D -- C:\Users\oussama\AppData\Local\Ankama
[] D -- C:\Users\oussama\AppData\Local\Apple
[] D -- C:\Users\oussama\AppData\Local\Apple Computer
[0] SHD -- C:\Users\oussama\AppData\Local\Application Da
ta
O43 - CFD: 20/10/2014 - [] D -- C:\Users\oussama\AppData\Local\Apps
O43 - CFD: 20/10/2014 - [] D -- C:\Users\oussama\AppData\Local\ASUS
O43 - CFD: 10/12/2014 - [] D -- C:\Users\oussama\AppData\Local\Bluestacks
O43 - CFD: 20/10/2015 - [] D -- C:\Users\oussama\AppData\Local\CEF
O43 - CFD: 27/08/2015 - [] D -- C:\Users\oussama\AppData\Local\Comms
O43 - CFD: 08/12/2014 - [] D -- C:\Users\oussama\AppData\Local\Cyberlink
O43 - CFD: 20/12/2014 - [0] D -- C:\Users\oussama\AppData\Local\Diagnostics
O43 - CFD: 15/01/2015 - [] D -- C:\Users\oussama\AppData\Local\Downloaded Instal
lations
O43 - CFD: 15/11/2015 - [] D -- C:\Users\oussama\AppData\Local\ElevatedDiagnosti
cs
O43 - CFD: 14/06/2015 - [0] SHD -- C:\Users\oussama\AppData\Local\EmieBrowserMod
eList
O43 - CFD: 14/06/2015 - [0] SHD -- C:\Users\oussama\AppData\Local\EmieSiteList
O43 - CFD: 14/06/2015 - [0] SHD -- C:\Users\oussama\AppData\Local\EmieUserList
O43 - CFD: 10/09/2015 - [] D -- C:\Users\oussama\AppData\Local\Google
O43 - CFD: 01/06/2015 - [] D -- C:\Users\oussama\AppData\Local\GWX
O43 - CFD: 30/07/2015 - [0] SHD -- C:\Users\oussama\AppData\Local\Historique
O43 - CFD: 04/11/2014 - [] D -- C:\Users\oussama\AppData\Local\Intel_Corporation
O43 - CFD: 07/09/2015 - [] D -- C:\Users\oussama\AppData\Local\Microsoft
O43 - CFD: 10/11/2015 - [] D -- C:\Users\oussama\AppData\Local\Microsoft Help
O43 - CFD: 24/08/2015 - [] D -- C:\Users\oussama\AppData\Local\MicrosoftEdge
O43 - CFD: 10/12/2014 - [] D -- C:\Users\oussama\AppData\Local\Movavi
O43 - CFD: 30/07/2015 - [0] D -- C:\Users\oussama\AppData\Local\NetworkTiles
O43 - CFD: 20/10/2014 - [] D -- C:\Users\oussama\AppData\Local\NVIDIA
O43 - CFD: 25/02/2015 - [0] D -- C:\Users\oussama\AppData\Local\Opera Software
O43 - CFD: 11/12/2015 - [] D -- C:\Users\oussama\AppData\Local\Packages
O43 - CFD: 13/11/2014 - [] D -- C:\Users\oussama\AppData\Local\Power2Go
O43 - CFD: 20/10/2014 - [] D -- C:\Users\oussama\AppData\Local\Programs
O43 - CFD: 30/07/2015 - [] D -- C:\Users\oussama\AppData\Local\Publishers
O43 - CFD: 15/01/2015 - [0] D -- C:\Users\oussama\AppData\Local\Samsung
O43 - CFD: 01/01/2015 - [] D -- C:\Users\oussama\AppData\Local\Skype
O43 - CFD: 20/10/2015 - [] D -- C:\Users\oussama\AppData\Local\Steam
O43 - CFD: 12/12/2015 - [] D -- C:\Users\oussama\AppData\Local\Temp
O43 - CFD: 30/07/2015 - [0] SHD -- C:\Users\oussama\AppData\Local\Temporary Inte
rnet Files
O43 - CFD: 30/07/2015 - [] D -- C:\Users\oussama\AppData\Local\TileDataLayer
O43 - CFD: 07/11/2014 - [] D -- C:\Users\oussama\AppData\Local\VirtualStore
O43 - CFD: 10/07/2015 - [] RD -- C:\Users\oussama\AppData\Roaming\Microsoft\Wind
ows\Start Menu\Programs\Accessibility
ows\Start Menu\Programs\Accessories
ows\Start Menu\Programs\Administrative Tools
O43 - CFD: 30/07/2015 - [] D -- C:\Users\oussama\AppData\Roaming\Microsoft\Windo
ws\Start Menu\Programs\Dofus2
ws\Start Menu\Programs\DVR-MS Converter
ws\Start Menu\Programs\Maintenance
ows\Start Menu\Programs\Startup
ows\Start Menu\Programs\System Tools
O43 - CFD: 10/07/2015 - [] RSD -- C:\Users\oussama\AppData\Roaming\Microsoft\Win
dows\Start Menu\Programs\Windows PowerShell
ws\Start Menu\Programs\WinRAR
---\\ Derniers fichiers crs dans Windows Prefetcher (1) - 37s

O45 - LFCP:[MD5.33EE2BAD66964B76BC1817BE829EA9E3] 12/12/2015 A -- C:\WINDOWS\Pre
fetch\BAMCOF.EXE-99E7BD23.pf =>PUP.Optional.Salus
---\\ ShellIconOverlayIdentifiers (SIOI) (11) - 3s
O106 - SIOI: ErrorOverlayHandler Class [ OneDrive1] - {BBACC218-34EA-4666-9D7A-C
78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -C:\Users\oussama\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.d
ll =>.Microsoft Corporation
O106 - SIOI: SharedOverlayHandler Class [ OneDrive2] - {5AB7172C-9C11-405C-8DD5AF20F3606282}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -C:\Users\oussama\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.
dll =>.Microsoft Corporation
O106 - SIOI: SharedSyncingOverlayHandler Class [ OneDrive3] - {A78ED123-AB77-406
B-9962-2A5D9D2F7F30}. (.Microsoft Corporation - Microsoft OneDrive Shell Extensi
on.) -- C:\Users\oussama\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyn
cShell.dll =>.Microsoft Corporation
O106 - SIOI: UpToDateOverlayHandler Class [ OneDrive4] - {F241C880-6982-4CE5-8CF
7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.)
-- C:\Users\oussama\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShel
l.dll =>.Microsoft Corporation
O106 - SIOI: SyncingOverlayHandler Class [ OneDrive5] - {A0396A93-DC06-4AEF-BEE9
-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) - C:\Users\oussama\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell
.dll =>.Microsoft Corporation
O106 - SIOI: UpToDateOverlayHandler Class [ SkyDrive1] - {F241C880-6982-4CE5-8CF
7-7085BA96DA5A}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.)
-- C:\Users\oussama\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShel
l.dll =>.Microsoft Corporation
O106 - SIOI: SyncingOverlayHandler Class [ SkyDrive2] - {A0396A93-DC06-4AEF-BEE9
-95FFCCAEF20E}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) - C:\Users\oussama\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell
.dll =>.Microsoft Corporation
O106 - SIOI: ErrorOverlayHandler Class [ SkyDrive3] - {BBACC218-34EA-4666-9D7A-C
78F2274A524}. (.Microsoft Corporation - Microsoft OneDrive Shell Extension.) -C:\Users\oussama\AppData\Local\Microsoft\OneDrive\17.3.6201.1019\FileSyncShell.d
ll =>.Microsoft Corporation
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 1 (ErrorConflict) [ SkyDrivePro
1 (ErrorConflict)] - {8BA85C75-763B-4103-94EB-9470F12FE0F7}. (.Microsoft Corpora
tion - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files (x86)\Microsoft O
ffice\Office15\GROOVEEX.DLL =>.Microsoft Corporation
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 2 (SyncInProgress) [ SkyDrivePr
o2 (SyncInProgress)] - {CD55129A-B1A1-438E-A425-CEBC7DC684EE}. (.Microsoft Corpo
ration - Microsoft SkyDrive Pro Extensions.) -- C:\Program Files (x86)\Microsoft
Office\Office15\GROOVEEX.DLL =>.Microsoft Corporation
O106 - SIOI: Microsoft SkyDrive Pro Icon Overlay 3 (InSync) [ SkyDrivePro3 (InSy
nc)] - {E768CD3B-BDDC-436D-9C13-E1B39CA257B1}. (.Microsoft Corporation - Microso
ft SkyDrive Pro Extensions.) -- C:\Program Files (x86)\Microsoft Office\Office15
\GROOVEEX.DLL =>.Microsoft Corporation
---\\ Liste des pilotes du systme (70) - 18s
O58 - SDL:2015/07/10 10:59:38 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:
\WINDOWS\System32\drivers\3ware.sys [107360] =>.Microsoft Windows
O58 - SDL:2015/07/10 10:59:38 A . (.PMC-Sierra - PMC-Sierra Storport Driver For
SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys [1135456] =>.Micros
oft Windows
O58 - SDL:2013/04/17 22:53:10 A . (.ASUSTek Computer Inc. - ASUS Charger driver.
) -- C:\WINDOWS\System32\drivers\AiCharger.sys [17152] =>.ASUSTeK Computer In
c.
O58 - SDL:2015/07/10 10:59:38 A . (.Advanced Micro Devices - AHCI 1.3 Device Dri
ver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows

O58 - SDL:2015/07/10 10:59:38 A . (.AMD Technologies Inc. - AMD Technology AHCI
Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys [259424]
=>.Microsoft Windows
O58 - SDL:2015/07/10 10:59:38 A . (.Advanced Micro Devices - Storage Filter Driv
er.) -- C:\WINDOWS\System32\drivers\amdxata.sys [26976] =>.Microsoft Windows
O58 - SDL:2015/07/10 10:59:38 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Dri
ver.) -- C:\WINDOWS\System32\drivers\arcsas.sys [131936] =>.Microsoft Windows
O58 - SDL:2015/05/13 04:44:24 A . (.ASUS - HID driver for ASUS Wireless Radio Co
ntrol.) -- C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [19976] =>.Microsoft
Windows Hardware Compatibility Publisher
O58 - SDL:2015/07/13 13:45:18 A . (.ASUS Corporation - Asus TP Filter Driver(X64
).) -- C:\WINDOWS\System32\drivers\AsusTP.sys [97680] =>.ASUSTeK Computer Inc
.
O58 - SDL:2015/07/10 10:59:38 A . (.Windows (R) Win 7 DDK provider - BCM Functio
n 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys [17624] =>.Bro
adcom Corporation
O58 - SDL:2013/09/08 20:04:56 A . (.Bitdefender - Bitdefender Early Launch AntiMalware Drive.) -- C:\WINDOWS\System32\drivers\bdelam.sys [23568] =>.Microsof
t Windows Early Launch Anti-malware Publisher
O58 - SDL:2013/11/19 14:44:02 A . (.BitDefender LLC - BitDefender Firewall NDIS6
Filter Driver.) -- C:\WINDOWS\System32\drivers\bdfndisf6.sys [98768] =>.Bitd
efender SRL
O58 - SDL:2015/07/10 10:59:38 A . (.Broadcom Corporation - Broadcom NetXtreme II
GigE VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys [531296] =>.Microsoft W
indows
O58 - SDL:2014/09/15 01:37:18 A . (.Intel Corporation - Intel(R) Dynamic Platfor
m and Thermal Frame.) -- C:\WINDOWS\System32\drivers\DptfDevDisplay.sys [70752
] {3300009D4320E74C7AF0250102000300009D43}
m and Thermal Frame.) -- C:\WINDOWS\System32\drivers\DptfDevDram.sys [145640]
{3300009D4320E74C7AF0250102000300009D43}
m and Thermal Frame.) -- C:\WINDOWS\System32\drivers\DptfDevFan.sys [50640] {3
300009D4320E74C7AF0250102000300009D43}
m and Thermal Frame.) -- C:\WINDOWS\System32\drivers\DptfDevGen.sys [78504] {3
300009D4320E74C7AF0250102000300009D43}
m and Thermal Frame.) -- C:\WINDOWS\System32\drivers\DptfDevPch.sys [116752] {
3300009D4320E74C7AF0250102000300009D43}
m and Thermal Frame.) -- C:\WINDOWS\System32\drivers\DptfDevPower.sys [71808]
{3300009D4320E74C7AF0250102000300009D43}
m and Thermal Frame.) -- C:\WINDOWS\System32\drivers\DptfDevProc.sys [290256]
{3300009D4320E74C7AF0250102000300009D43}
m and Thermal Frame.) -- C:\WINDOWS\System32\drivers\DptfManager.sys [495320]
{3300009D4320E74C7AF0250102000300009D43}
O58 - SDL:2015/07/10 10:59:38 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -C:\WINDOWS\System32\drivers\evbda.sys [3436896] =>.Microsoft Windows
O58 - SDL:2012/10/03 15:14:56 A . (.GEAR Software Inc. - CD DVD Filter.) -- C:\W
INDOWS\System32\drivers\GEARAspiWDM.sys [33240] =>.GEAR Software Inc.
O58 - SDL:2015/07/10 10:59:38 A . (.Hewlett-Packard Company - Smart Array SAS/SA
TA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys [64352]
=>.Microsoft Windows
O58 - SDL:2015/07/10 10:59:36 A . (.Intel Corporation - Intel(R) Serial IO GPIO
Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys [38128] =
>.Intel Corporation - Client Components Group
O58 - SDL:2015/07/10 10:59:36 A . (.Intel Corporation - Intel(R) Serial IO I2C C

ontroller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [122608] =>
.Intel Corporation - Client Components Group
O58 - SDL:2013/08/09 02:31:50 A . (.Intel Corporation - Intel Rapid Storage Tech
nology driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorA.sys [644968] =>.
Intel Corporation - Intel Rapid Storage Technology
O58 - SDL:2015/07/10 10:59:38 A . (.Intel Corporation - Intel(R) Rapid Storage T
echnology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAV.sys [673120] =>
.Microsoft Windows
O58 - SDL:2015/07/10 10:59:38 A . (.Intel Corporation - Intel Matrix Storage Man
ager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys [412000] =>.Mi
crosoft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -C:\WINDOWS\System32\drivers\ibbus.sys [424800] =>.Microsoft Windows
O58 - SDL:2015/07/30 14:46:42 A . (.Intel Corporation - Intel Graphics Kernel Mo
de Driver.) -- C:\WINDOWS\System32\drivers\igdkmd64.sys [6389688] =>.Intel Co
rporation - pGFX
O58 - SDL:2015/07/16 17:04:28 A . (.Intel(R) Corporation - Intel(R) Display Audi
o Driver.) -- C:\WINDOWS\System32\drivers\IntcDAud.sys [472872] =>.Intel Corp
oration - Client Components Group
O58 - SDL:2013/12/26 23:30:20 A . (.Intel Corporation - Intel WiDi Solution.) -C:\WINDOWS\System32\drivers\intelaud.sys [38296] =>.Intel Wireless Display
O58 - SDL:2013/12/26 23:30:20 A . (.Intel Corporation - Intel WiDi Solution.) -C:\WINDOWS\System32\drivers\iwdbus.sys [27032] =>.Intel Wireless Display
O58 - SDL:2012/08/06 03:17:18 A . (. - Keyboard Filter Driver.) -- C:\WINDOWS\Sy
stem32\drivers\kbfiltr.sys [17280] =>.ASUSTeK Computer Inc.
O58 - SDL:2015/07/10 10:59:38 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver
(StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys [108896] =>.Microsoft
Windows
O58 - SDL:2015/07/10 10:59:38 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorP
ort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys [104800] =>.Microsoft Win
dows
O58 - SDL:2015/07/10 10:59:38 A . (.Avago Technologies - Avago SAS Gen3 Driver (
StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys [99168] =>.Microsoft
Windows
O58 - SDL:2015/07/10 10:59:38 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver
(StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys [82784] =>.Microsoft
Windows
O58 - SDL:2014/05/13 13:21:18 A . (.Visicom Media Inc. - ManyCam Virtual Microph
one.) -- C:\WINDOWS\System32\drivers\mcaudrv_x64.sys [35440] {266F9E30991B0C3E
FC03DA9B8CDDB68D}
O58 - SDL:2014/07/25 10:19:42 A . (.Visicom Media Inc. - ManyCam Virtual Webcam
Driver.) -- C:\WINDOWS\System32\drivers\mcvidrv.sys [49776] {266F9E30991B0C3EF
C03DA9B8CDDB68D}
O58 - SDL:2015/07/10 10:59:39 A . (.Avago Technologies - MEGASAS RAID Controller
Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys [59744] =>.M
icrosoft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.LSI Corporation, Inc. - LSI MegaRAID Softwar
e RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys [575840] =>.Microso
ft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\S
ystem32\drivers\mlx4_bus.sys [705376] =>.Microsoft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.Marvell Semiconductor, Inc. - Marvell Flash
Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys [63840] =>.Micr
osoft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.Mellanox - NetworkDirect Support Filter Driv
er.) -- C:\WINDOWS\System32\drivers\ndfltr.sys [76128] =>.Microsoft Windows
O58 - SDL:2015/07/30 14:48:39 A . (.MediaTek Inc. - MediaTek 802.11 Wireless Ada
pter Driver.) -- C:\WINDOWS\System32\drivers\netr28x.sys [2554528] =>.MEDIATE
K INC.
O58 - SDL:2015/07/30 15:02:24 A . (.NVIDIA Corporation - NVIDIA Windows Kernel M

ode Driver, Version.) -- C:\WINDOWS\System32\drivers\nvlddmkm.sys [11139216]
=>.NVIDIA Corporation
O58 - SDL:2015/07/10 10:59:39 A . (.NVIDIA Corporation - NVIDIA nForce(TM) RAID D
river.) -- C:\WINDOWS\System32\drivers\nvraid.sys [150368] =>.Microsoft Windo
ws
O58 - SDL:2015/07/10 10:59:39 A . (.NVIDIA Corporation - NVIDIA nForce(TM) Sata P
erformance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys [166240] =>.Mic
rosoft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.LSI Corporation - MEGASAS RAID Controller Dr
iver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys [58208] =>.Mi
crosoft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.Avago Technologies - MEGASAS RAID Controller
Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys [58720] =>
.Microsoft Windows
O58 - SDL:2013/08/15 06:28:42 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.30
64-bit Dr.) -- C:\WINDOWS\System32\drivers\Rt630x64.sys [830680] =>.Realtek S
emiconductor Corp
O58 - SDL:2015/07/30 14:42:32 A . (.Realtek - Realtek 8101E/8168/8169 NDIS 6.40
64-bit Dr.) -- C:\WINDOWS\System32\drivers\rt640x64.sys [895256] =>.Realtek S
emiconductor Corp
O58 - SDL:2015/06/03 00:27:02 A . (.Ralink Technology, Corp. - Ralink Bluetooth
Adapter.) -- C:\WINDOWS\System32\drivers\rtbth.sys [1219200] =>.MEDIATEK INC.
O58 - SDL:2015/06/24 21:57:00 A . (.Realtek Semiconductor Corp. - Realtek(r) Hig
h Definition Audio Function D.) -- C:\WINDOWS\System32\drivers\RTKVHD64.sys [4
504320] =>.Realtek Semiconductor Corp
O58 - SDL:2015/07/30 14:50:32 A . (.Realsil Semiconductor Corporation - RTS PCIE
READER Driver.) -- C:\WINDOWS\System32\drivers\RtsPer.sys [751632] =>.Micros
oft Windows Hardware Compatibility Publisher
O58 - SDL:2015/07/10 10:59:39 A . (.Silicon Integrated Systems Corp. - SiS RAID
Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys [44896] =>
.Microsoft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.Silicon Integrated Systems - SiS AHCI Stor-M
iniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys [81760] =>.Micro
soft Windows
O58 - SDL:2013/05/02 01:02:30 N . (.Samsung Electronics - Port Contention Driver
.) -- C:\WINDOWS\System32\drivers\SSPORT.SYS [11576] =>.Samsung Electronics C
O., LTD.
O58 - SDL:2015/05/21 06:02:42 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSU
NG USB Composite Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudbus.
sys [110720] =>.DEVGURU CO LTD
O58 - SDL:2015/05/21 06:02:42 A . (.DEVGURU Co., LTD.(www.devguru.co.kr) - SAMSU
NG Android Modem Device Driver (MSS Ve.) -- C:\WINDOWS\System32\drivers\ssudmdm.
sys [206080] =>.DEVGURU CO LTD
O58 - SDL:2015/07/10 10:59:39 A . (.Promise Technology, Inc. - Promise SuperTrak
EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys [3107
O58 - SDL:2013/10/23 20:44:48 A . (.Intel Corporation - Intel(R) Management Engi
ne Interface.) -- C:\WINDOWS\System32\drivers\TeeDriverx64.sys [99288] =>.Int
el Corporation - Intel Management Engine Firmware
O58 - SDL:2015/07/10 10:59:48 A . (...) -- C:\WINDOWS\System32\drivers\Udecx.sys
[44032]
O58 - SDL:2015/06/10 22:08:36 A . (.Apple, Inc. - Apple Mobile Device USB Driver
.) -- C:\WINDOWS\System32\drivers\usbaapl64.sys [54784]
O58 - SDL:2015/07/10 10:59:39 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER
FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys [166752] =>.Micro
soft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.VIA Corporation - VIA StorX RAID Controller
Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS [305504] =>.Microsoft Wi
ndows
O58 - SDL:2015/07/10 10:59:39 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\Sys

tem32\drivers\winmad.sys [26976] =>.Microsoft Windows
O58 - SDL:2015/07/10 10:59:39 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\S
ystem32\drivers\winverbs.sys [59232] =>.Microsoft Windows
---\\ Derniers fichiers modifis ou cres (Utilisateur) (5) - 62s
O61 - LFC: 2015/12/12 15:35:00 A . (..) -- C:\Users\oussama\AppData\Roaming\sp_d
ata.sys [74]
O61 - LFC: 2015/12/12 15:34:53 A . (..) -- C:\Users\oussama\AppData\Local\Packag
es\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\speech_onecorereg.bin [8
192]
O61 - LFC: 2015/12/12 17:07:51 A . (..) -- C:\Users\oussama\AppData\Local\Packag
es\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\UrlBlock\urlblock_6358
55278866435450.bin [58260]
O61 - LFC: 2015/12/09 09:31:52 A . (..) -- C:\Users\oussama\AppData\Local\NVIDIA
\NvBackend\UMDShim\nvcoproc.bin [6078319]
O61 - LFC: 2015/12/11 19:01:00 A . (..) -- C:\Users\oussama\AppData\Local\Micros
oft\Internet Explorer\UrlBlock\urlblock_635854531256386118.bin [66472]
---\\ Associations Shell Spawning (10) - 0s
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corp
oration - Windows Control Panel.) -- C:\Windows\System32\control.exe
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corpora
tion - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\even
tvwr.exe
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*
O67 - Shell Spawning: <.html> <htmlfile>[HKLM\..\open\Command] (.Microsoft Corpo
ration - Internet Explorer.) -- C:\Program Files\Internet Explorer\iexplore.exe
=>.Microsoft Corporation
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (.Microsoft Corporati
on - Microsoft Windows Based Script Host.) -- C:\Windows\System32\wscript.exe
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corpora
tion - diteur du Registre.) -- C:\Windows\regedit.exe
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S
---\\ Menu de dmarrage Internet (8) - 0s
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Comm
and] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\App
lication\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\C
ommand] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\
Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Sho
wIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\
Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\
ShowIconsCommand] (.Microsoft Corporation - Utilitaire d initialisation d Intern
et Expl.) -- C:\Windows\System32\ie4uinit.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Rei
nstallCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\
ReinstallCommand] (.Microsoft Corporation - Utilitaire d initialisation d Intern
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\InstallInfo\Hid
eIconsCommand] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\

HideIconsCommand] (.Microsoft Corporation - Utilitaire d initialisation d Intern
---\\ Recherche d infection sur les navigateurs (2) - 0s
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) http://www.bing.com/
O69 - SBI: SearchScopes [HKCU] {ielnksrch} [DefaultScope] - (Search the web) - h
ttp://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYR
aHdGKBUTxkij9_Bw56VMFZJr47C0z_euJ_u_Ay1-VQBQ8esFWPhOPxLNUvLXzOwv37e1MDat8YxtddkV
_G2WYiRldctmTgSelDI0qXVoeq9hIi9t08V8uHz0TYjnSGESIfJI6-c57E3LHkXIYzPnkmOMwUqV--CH
BhSRBxmFOjc&q={searchTerms}
---\\ Enumre les fichiers Crack & Keygen (6) - 1114s
O82 - LFC: 2014/12/10 00:09:47 A . (.2004 - 2013 Movavi. All rights reserved..)
-- C:\Users\oussama\Downloads\MovAvi Screen Capture Studio 5.0.0\Movavi Screen
Capture Cracked Files\AudioCapture.exe [2446336] =>.Crack,Keygen
O82 - LFC: 2014/12/10 00:09:47 A . (.http://www.movavi.com.) -- C:\Users\oussama
\Downloads\MovAvi Screen Capture Studio 5.0.0\Movavi Screen Capture Cracked File
s\ChiliBurner.exe [3106304] =>.Crack,Keygen
O82 - LFC: 2014/12/10 00:09:47 A . (...) -- C:\Users\oussama\Downloads\MovAvi Sc
reen Capture Studio 5.0.0\Movavi Screen Capture Cracked Files\ConvertManager.dll
[2070016] =>.Crack,Keygen
O82 - LFC: 2014/12/10 00:09:47 A . (.Copyright (C) 2004-2012 movavi.com.) -- C:\
Users\oussama\Downloads\MovAvi Screen Capture Studio 5.0.0\Movavi Screen Capture
Cracked Files\ShareOnline.exe [2935296] =>.Crack,Keygen
O82 - LFC: 2014/12/10 00:09:47 A . (...) -- C:\Users\oussama\Downloads\MovAvi Sc
reen Capture Studio 5.0.0\Movavi Screen Capture Cracked Files\SplitMovie.exe [
2263040] =>.Crack,Keygen
O82 - LFC: 2014/12/10 00:09:47 A . (.2004 - 2013 Movavi. All rights reserved..)
-- C:\Users\oussama\Downloads\MovAvi Screen Capture Studio 5.0.0\Movavi Screen
Capture Cracked Files\VideoCapture.exe [3023872] =>.Crack,Keygen
---\\ Enumre les services dmarrs par Svchost (41) - 4s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporati
on - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certpr
op.dll [192000]
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporati
on - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certpr
op.dll [192000]
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corpora
tion - DLL du service Serveur.) -- C:\WINDOWS\system32\srvsvc.dll [283136]
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client
de stratgie de groupe.) -- C:\WINDOWS\System32\gpsvc.dll [1335296]
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Exten
sion IKE.) -- C:\WINDOWS\System32\ikeext.dll [954368]
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - S
ervice offrant une connectivit IPv6 sur u.) -- C:\WINDOWS\System32\iphlpsvc.dll
[954880]
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - D
LL de service douverture de session secon.) -- C:\WINDOWS\system32\seclogon.dll
[31232]
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Ser
vice Informations dapplication.) -- C:\WINDOWS\System32\appinfo.dll [93696]
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Ser
vice de dcouverte iSCSI.) -- C:\WINDOWS\system32\iscsiexe.dll [151040]
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Ser
vice EAPHost Microsoft.) -- C:\WINDOWS\System32\eapsvc.dll [106496]
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - S
ervice du Planificateur de tches.) -- C:\WINDOWS\system32\schedsvc.dll [1008640
]
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI
.) -- C:\WINDOWS\system32\wbem\WMIsvc.dll [226304]
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL
du service Explorateur dordinateurs.) -- C:\WINDOWS\System32\browser.dll [1331
20]
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - Pro
fSvc.) -- C:\WINDOWS\system32\profsvc.dll [324096]
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation
- Service Configuration des services Bureau .) -- C:\Windows\System32\SessEnv.dl
l [371200]
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corpo
ration - Rapports et solutions aux problmes.) -- C:\WINDOWS\System32\wercplsuppor
t.dll [95744]
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Ser
vice de compte Microsoft.) -- C:\WINDOWS\system32\wlidsvc.dll [2093056]
O83 - Search Svchost Services: DcpSvc (DcpSvc) . (.Microsoft Corporation - dcpsv
c Task.) -- C:\WINDOWS\system32\dcpsvc.dll [196096]
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Servi
ce Assistant Connectivit rseau Micro.) -- C:\WINDOWS\System32\ncasvc.dll [167424
]
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporati
on - Service Configuration du rseau.) -- C:\WINDOWS\System32\NetSetupSvc.dll [1
87392]
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Ges
tionnaire de numrotation automatique d.) -- C:\WINDOWS\System32\rasauto.dll [106
496]
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gesti
onnaire des connexions daccs dista.) -- C:\WINDOWS\System32\rasmans.dll [679936]
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corpora

tion - Gestionnaire dinterface dynamique.) -- C:\Windows\System32\mprdim.dll [4
97152]
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service d
e notification dvnements systm.) -- C:\WINDOWS\System32\sens.dll [72192]
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corpora
tion - Composants de lapplication dassistance .) -- C:\WINDOWS\System32\ipnathlp.dl
l [452608]
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Ser
veur de tlphonie Microsoft Windows(TM.) -- C:\Windows\System32\tapisrv.dll [31180
8]
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - A
gent de mise jour automatique Windows Up.) -- C:\WINDOWS\system32\wuaueng.dll
[2236416]
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service d
e transfert intelligent en arrire.) -- C:\WINDOWS\System32\qmgr.dll [1168896]
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft
Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dl
l [593920]
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft
Corporation - dmwappushsvc.) -- C:\WINDOWS\system32\dmwappushsvc.dll [63488]
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporati
on - Xbox Live Game Save Service.) -- C:\WINDOWS\System32\XblGameSave.dll [114
9440]
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corpo
ration - Xbox Live Networking Service.) -- C:\WINDOWS\system32\XboxNetApiSvc.dll
[1019392]
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettr
e jour la session Orchestrator Core.) -- C:\WINDOWS\system32\usocore.dll [3430
40]
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporati

on - UserMgr.) -- C:\WINDOWS\System32\usermgr.dll [713216]
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service
de golocalisation.) -- C:\Windows\System32\lfsvc.dll [27136]
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft C
orporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Int
ernal.Management.dll [267776]
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Cor
poration - Xbox Live Auth Manager.) -- C:\WINDOWS\System32\XblAuthManager.dll
[918016]
O83 - Search Svchost Services: RetailDemo (RetailDemo) . (.Microsoft Corporation
- RDXService.) -- C:\WINDOWS\system32\RDXService.dll [1015808]
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Servi
ce BDE.) -- C:\WINDOWS\System32\bdesvc.dll [359936]
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gesti
onnaire dinstallation de priphrique.) -- C:\WINDOWS\System32\DeviceSetupManager.dll
[237568]
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL d
u service des thmes Windows Shell.) -- C:\WINDOWS\system32\themeservice.dll [58
368]
---\\ Liste des exceptions du parefeu Windows (18) - 15s
O87 - FAEL: "{B05074AF-9C50-4166-88B9-AFC021AF4033}" [In-None-P17-TRUE] .(...) - C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe (.not file.)
O87 - FAEL: "{11206C90-544F-46E4-A262-DD1764FBFDE4}" [In-None-P17-TRUE] .(...) - C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe (.not file.)
O87 - FAEL: "{80F2508B-08A7-40AA-A849-96F39FF1CEC0}" [In-None-P17-TRUE] .(...) - C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE (.not file.)
O87 - FAEL: "{9AE75A39-5BC4-4E5A-AC77-9390B838C07A}" [Out-None-P17-TRUE] .(...)
-- C:\Users\oussama\AppData\Local\Temp\nsu7936.tmp\CnetInstaller-75816749.exe (.
not file.)
O87 - FAEL: "{2926C8D4-9EB4-4CEF-A221-29BC66E85FD9}" [In-None-P17-TRUE] .(...) - C:\Users\oussama\AppData\Local\Temp\nsu7936.tmp\CnetInstaller-75816749.exe (.n
ot file.)
O87 - FAEL: "{E9ADD954-88F1-4F03-B545-8713C23DADE5}" [In-None-P17-FALSE] .(...)
-- C:\Program Files (x86)\Pro Evolution Soccer 2015\PES2015.exe (.not file.)
O87 - FAEL: "{084A70E6-4BEF-458C-9908-F4E670A0897E}" [In-None-P6-FALSE] .(...) - C:\Program Files (x86)\Pro Evolution Soccer 2015\PES2015.exe (.not file.)
O87 - FAEL: "{0B0A364B-3D50-4423-949A-CED1F49A72AF}" [In-None-P17-TRUE] .(...) - C:\Program Files (x86)\Pro Evolution Soccer 2015\PES2015.exe (.not file.)
O87 - FAEL: "{1BB16960-B30B-4722-AACE-2D23B6B34CEB}" [In-None-P6-TRUE] .(...) -C:\Program Files (x86)\Pro Evolution Soccer 2015\PES2015.exe (.not file.)
O87 - FAEL: "{989D3C12-60F6-4CE9-A9DC-8142CFB5F594}" [In-None-P17-TRUE] .(...) - C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.)
O87 - FAEL: "{B51A1CA0-223E-4C4B-9E61-B5E3C6C3DE82}" [In-None-P6-TRUE] .(...) -C:\ProgramData\EmailNotifier\EmailNotifier.exe (.not file.)
O87 - FAEL: "{019AD355-2EB1-4AF0-B633-50067C7C7105}" [In-None-P6-TRUE] .(...) -C:\Users\oussama\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe (.not file.)
O87 - FAEL: "{C6AA502B-6688-4E3A-8752-F4D13CE5CB49}" [In-None-P17-TRUE] .(...) - C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe (.not fil
e.)
O87 - FAEL: "{3C86C0F0-B343-47FF-BFEE-2204AE83E78D}" [In-None-P6-TRUE] .(...) -C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe (.not file
.)
O87 - FAEL: "TCP Query User{1885ADE1-6B7B-43ED-AA1D-6AF0F7F14176}D:\pro evolutio
n soccer 2015\pes2015.exe" [In-None-P6-TRUE] .(...) -- D:\pro evolution soccer 2
015\pes2015.exe (.not file.)
O87 - FAEL: "UDP Query User{77E6CBF4-3775-4DA8-B89D-0D54D3D707D5}D:\pro evolutio
n soccer 2015\pes2015.exe" [In-None-P17-TRUE] .(...) -- D:\pro evolution soccer
2015\pes2015.exe (.not file.)
O87 - FAEL: "TCP Query User{58C12EE1-AECA-486C-98D8-912066A35AE2}C:\users\oussam

a\appdata\local\popcorn time\nw.exe" [In-None-P6-TRUE] .(...) -- C:\users\oussam
a\appdata\local\popcorn time\nw.exe (.not file.)
O87 - FAEL: "UDP Query User{FEDFAC71-2B73-4018-8696-6FEC92E27FFF}C:\users\oussam
a\appdata\local\popcorn time\nw.exe" [In-None-P17-TRUE] .(...) -- C:\users\oussa
ma\appdata\local\popcorn time\nw.exe (.not file.)
---\\ Services non Microsoft (SR=Dmarr,SS=Stopp) (29) - 66s
SR - Auto [07/10/2015] [ 77104] Apple Mobile Device Service (Apple Mobile D
evice Service) . (.Apple Inc..) - C:\Program Files\Common Files\Apple\Mobile Dev
ice Support\AppleMobileDeviceService.exe =>.Apple Inc.
SR - Auto [09/09/2013] [ 111416] ASLDR Service (ASLDRService) . (.ASUSTek Co
mputer Inc..) - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
=>.ASUSTeK Computer Inc.
SR - Auto [16/08/2013] [ 71680] Asus WebStorage Windows Service (Asus WebSt
orage Windows Service) . (.ASUS Cloud Corporation.) - C:\Program Files (x86)\ASU
S\WebStorage\2.0.3.226\AsusWSWinService.exe
SR - Auto [21/11/2011] [ 96896] ATKGFNEX Service (ATKGFNEXSrv) . (.ASUS.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe =>.ASUSTeK Compu
ter Inc.
SR - Auto [15/11/2015] [ 497152] Bamcof (Bamcof) . (...) - C:\ProgramData\Ba
mcof\Bamcof.exe =>PUP.Optional.Salus
SS - Disabl [05/08/2014] [ 77632] Bitdefender Desktop Parental Control (BdDes
ktopParental) . (.Bitdefender.) - C:\Program Files\Bitdefender\Bitdefender\bdpar
entalservice.exe =>.Bitdefender SRL
SR - Auto [12/08/2015] [ 462096] Service Bonjour (Bonjour Service) . (.Apple
Inc..) - C:\Program Files\Bonjour\mDNSResponder.exe =>.Apple Inc.
SS - Demand [30/07/2015] [ 283024] Intel(R) Content Protection HECI Service (c
phs) . (.Intel Corporation.) - C:\Windows\SysWOW64\IntelCpHeciSvc.exe =>.Intel
Corporation - pGFX
SR - Auto [15/09/2014] [ 141944] @oem42.inf,%WIN32_DPTF_PARTICIPANT_DISPLAY_
SERVICE_DISPLAY_ (DptfParticipantDisplayService) . (.Intel Corporation.) - C:\Wi
ndows\System32\DptfParticipantDisplayService.exe
SR - Auto [15/09/2014] [ 115656] @oem42.inf,%WIN32_DPTF_PARTICIPANT_PROC_SER
VICE_DISPLAY_NAM (DptfParticipantProcessorService) . (.Intel Corporation.) - C:\
WINDOWS\system32\DptfParticipantProcessorService.exe
SR - Auto [15/09/2014] [ 148160] @oem42.inf,%WIN32_DPTF_POLICY_CRITICAL_SERV
ICE_DISPLAY_NAME (DptfPolicyCriticalService) . (.Intel Corporation.) - C:\Window
s\System32\DptfPolicyCriticalService.exe
SR - Auto [15/09/2014] [ 124904] @oem42.inf,%WIN32_DPTF_POLICY_LPM_SERVICE_D
ISPLAY_NAME%;Int (DptfPolicyLpmService) . (.Intel Corporation.) - C:\WINDOWS\sys
tem32\DptfPolicyLpmService.exe
SR - Auto [09/11/2013] [ 227936] GamesAppIntegrationService (GamesAppIntegra
tionService) . (.WildTangent.) - C:\Program Files (x86)\WildTangent Games\App\Ga
mesAppIntegrationService.exe =>.WildTangent Inc
SS - Demand [12/10/2010] [ 206072] GamesAppService (GamesAppService) . (.WildT
angent, Inc..) - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.ex
e =>.WildTangent Inc
SS - Auto [03/09/2015] [ 144200] Service Google Update (gupdate) (gupdate) .
(.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.Goo
gle Inc
SS - Demand [03/09/2015] [ 144200] Service Google Update (gupdatem) (gupdatem)
. (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe =>.G
oogle Inc
SR - Auto [30/07/2015] [ 351120] Intel(R) HD Graphics Control Panel Service
(igfxCUIService2.0.0.0) . (.Intel Corporation.) - C:\Windows\System32\igfxCUISer
vice.exe
SS - Demand [02/09/2013] [ 827392] Intel(R) Capability Licensing Service TCP I
P Interface (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R
) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe

SR - Auto [23/10/2013] [ 131544] Intel(R) ME Service (Intel(R) ME Service) .
(.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine
Components\FWService\IntelMeFWService.exe =>.Intel Corporation - Intel Manageme
nt Engine Firmware
SR - Demand [09/12/2015] [ 644880] Service de liPod (iPod Service) . (.Apple In
c..) - C:\Program Files\iPod\bin\iPodService.exe =>.Apple Inc.
SR - Auto [23/10/2013] [ 169432] Intel(R) Dynamic Application Loader Host In
terface Service (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\I
ntel\Intel(R) Management Engine Components\DAL\jhi_service.exe =>.Intel Corpora
tion - Intel Management Engine Firmware
SR - Auto [23/10/2013] [ 390616] Intel(R) Management and Security Applicatio
n Local Manageme (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\In
tel(R) Management Engine Components\LMS\LMS.exe =>.Intel Corporation - Software
and Firmware Products
SR - Auto [20/01/2014] [ 1593632] NVIDIA Network Service (NvNetworkService) .
(.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\N
vNetworkService.exe =>.NVIDIA Corporation
SR - Auto [13/07/2015] [ 937616] NVIDIA Display Driver Service (nvsvc) . (.N
VIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - Auto [08/08/2012] [ 390672] Cyberlink RichVideo64 Service(CRVS) (RichVi
deo64) . (.Copyright 2004.) - C:\Program Files\CyberLink\Shared files\RichVideo6
4.exe =>.CyberLink
SS - Auto [18/02/2015] [ 315488] Skype Updater (SkypeUpdate) . (.Skype Techn
ologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe =>.Skype Software
Sarl
SR - Auto [21/05/2015] [ 743688] SAMSUNG Mobile Connectivity Service (ss_con
n_service) . (.DEVGURU Co., LTD..) - C:\Program Files (x86)\Samsung\USB Drivers\
25_escape\conn\ss_conn_service.exe =>.DEVGURU CO LTD
SR - Demand [10/12/2015] [ 836176] Steam Client Service (Steam Client Service)
. (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamServic
e.exe =>.Valve
---\\ Recherche de cls de registre Tracing (2) - 3s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bamcof_RASAPI32 =>PUP.Optional.Salu
s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bamcof_RASMANCS =>PUP.Optional.Salu
s
---\\ Scan Additionnel (9) - 0s
HKLM\SYSTEM\CurrentControlSet\Services\Bamcof =>PUP.Optional.Salus
C:\ProgramData\Bamcof\Bamcof.exe =>PUP.Optional.Salus
C:\ProgramData\Bamcof\RonZimwarm.dll =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\mtBamcof =>PUP.Optional.Salus
C:\ProgramData\Bamcof =>PUP.Optional.Salus
C:\ProgramData\Bamcofs =>PUP.Optional.Salus
C:\WINDOWS\Prefetch\BAMCOF.EXE-99E7BD23.pf =>PUP.Optional.Salus
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bamcof_RASAPI32 =>PUP.Optional.Salu
s
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bamcof_RASMANCS =>PUP.Optional.Salu
s
---\\ Rcapitulatif des lments trouvs sur votre station (2) - 0s
http://www.nicolascoolman.fr/?p=2645 =>PUP.Optional.Salus
http://www.nicolascoolman.fr/?p=4664 =>PUP.Optional.Linkury
~ End of the scan, 31722 items in 1429 seconds (893)(6)

ZHP Diag

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

ZHP Diag

Uploaded by

Copyright:

Available Formats

~ ZHPDiag v2015.12.11.

183 Par Nicolas Coolman (2015/12/11)

[MD5.7718A2A9B2BFB2C8E2BAEB03310CA3FD] - 30/07/2015 - (.Microsoft Corporation Application de dmarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [290312]

---\\ Liste des services NT non Microsoft et non dsactivs (21) - 6s

O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) . (.Copyright 2

O39 - APT: GoogleUpdateTaskMachineCore - (.Google Inc..) -- C:\WINDOWS\Tasks\Goo

[MD5.B92F7EB9C41CA229EF9DAFA7D2F58F74] - (.Intel Corporation - Intel(R) Dynamic

---\\ Firefox, Plugins,Demarrage,Recherche,Extensions (2) - 1s

R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.micr

---\\ Internet Explorer,IniFiles, Autoloading programs (3) - 0s

O4 - HKLM\..\Wow6432Node\Run: [CLMLServer] . (.CyberLink - CyberLink MediaLibray

O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microso

O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Micros

osoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\SysWOW64\msht

O42 - Logiciel: ASUS Splendid Video Enhancement Technology - (.ASUS.) [HKLM][64B

, Ltd..) [HKLM][64Bits] -- {D0795B21-0CDA-4a92-AB9E-6E92D8111E44}

O43 - CFD: 10/07/2015 - [] D -- C:\Program Files (x86)\Windows Defender

04/05/2014 - [] D -- C:\Program Files (x86)\Common Files\InstallShiel

C:\Program Files (x86)\Common Files\postureAgent

---\\ Derniers fichiers crs dans Windows Prefetcher (1) - 37s

ver.) -- C:\WINDOWS\System32\drivers\amdsata.sys [83296] =>.Microsoft Windows

O58 - SDL:2015/07/10 10:59:36 A . (.Intel Corporation - Intel(R) Serial IO I2C C

O58 - SDL:2015/07/30 15:02:24 A . (.NVIDIA Corporation - NVIDIA Windows Kernel M

O58 - SDL:2015/07/10 10:59:39 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\Sys

O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\InstallInfo\

O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corpora

O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporati

O87 - FAEL: "TCP Query User{58C12EE1-AECA-486C-98D8-912066A35AE2}C:\users\oussam

) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe

You might also like