~ Report of ZHPDiag v2014.8.23.122 - Nicolas Coolman (23/08/2014)
~ Launched by Killyan (23/08/2014 17:40:16)
~ Web site address : http://nicolascoolman.fr
~ Web forum address : http://forum.nicolascoolman.fr
~ Translated by
~ Version State : Updated version.
~ White List : Activate by program
~ Elevation of privilege : OK
~ User Account Control : Deactivate by program
---\\ Internet browsers
MSIE: Internet Explorer v8.0.7600.16385
MFIE: Mozilla Firefox 30.0
GCIE: Google Chrome v36.0.1985.143
OBIE: Wacom WebTabletPlugin for Internet Explorer and Netscape v2.1.0.7
OPIE: Opera vStable 17.0.1241.53 (Defaut)
---\\ Windows product information
~ Langage: Anglais
Windows 7 Home Premium, 64-bit (Build 7600)
Windows Server License Manager Script : OK
Software Protection Service (Protection logicielle) : OK
Windows Automatic Updates : OK
Windows Activation Technologies : OK
---\\ System protection software
Bitdefender Internet Security v17.25.0.1074
McAfee Security Scan Plus v3.8.150.1
Windows Defender W7 (Deactivate)
---\\ System optimization software
CCleaner v4.11
---\\ Sharing software PeerToPeer
Pando Media Booster v2.6.0.7
---\\ Surveillance software
Adobe Flash Player 14 Plugin
Adobe Reader XI
Java 7 Update 45
---\\ Information on the system
~ Processor: Intel64 Family 6 Model 60 Stepping 3, GenuineIntel
~ Operating System: 64 Bits
Boot mode: Normal (Normal boot)
Total RAM: 8070 MB (52% free)
System Restore: Activé (Enable)
System drive C: has 46 GB (4%) free of 931 GB
---\\ Connection to the system mode
~ Computer Name: KILLYAN-PC
~ User Name: Killyan
~ All Users Names: Killyan, Administrateur,
~ Unselected Option: O45,O61,O62,O65,O66,O80,O82,O89
Logged in as Administrator
---\\ Environment variables
~ System Unit : C:\
~ %AppZHP% : C:\Users\Killyan\AppData\Roaming\ZHP\
~ %AppData% : C:\Users\Killyan\AppData\Roaming\
~ %Desktop% : C:\Users\Killyan\Desktop\
~ %Favorites% : C:\Users\Killyan\Favorites\
~ %LocalAppData% : C:\Users\Killyan\AppData\Local\
~ %StartMenu% : C:\Users\Killyan\AppData\Roaming\Microsoft\Windows\Start Menu\
~ %Windir% : C:\Windows\
~ %System% : C:\Windows\System32\
---\\ Enumeration of the disk units
C: Hard drive, Flash drive, Thumb drive (Free 46 Go of 931 Go)
D: CD-ROM drive (Not Inserted)
E: CD-ROM drive (Free 0 Go of 4 Go)
F: Floppy drive, Flash card reader, USB Key (Free 0 Go of 4 Go)
G: Hard drive, Flash drive, Thumb drive (Free 0 Go of 0 Go)
---\\ State of the Windows Security Center
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
~ Security Center: 40 Legitimates Filtered in 00mn 00s
---\\ Search Generic System Files
[MD5.C235A51CB740E45FFA0EBFB9BAFCDA64] - (.Microsoft Corporation - Explorateur Windows.) (.14/07/2009 - 02:39:10.) -- C:\Windows\Explorer.exe [2868224]
[MD5.94355C28C1970635A31B3FE52EB7CEBA] - (.Microsoft Corporation - Application de démarrage de Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Wininit.exe [129024]
[MD5.B1037F0131C9A010D611F6914E03CD92] - (.Microsoft Corporation - Extensions Internet pour Win32.) (.14/07/2009 - 02:41:56.) -- C:\Windows\System32\wininet.dll [1193472]
[MD5.132328DF455B0028F13BF0ABEE51A63A] - (.Microsoft Corporation - Application d’ouverture de session Windows.) (.14/07/2009 - 02:39:52.) -- C:\Windows\System32\Winlogon.exe [389120]
[MD5.75341574F21E766748732BDF530C74BD] - (.Microsoft Corporation - Bibliothèque de licences.) (.14/07/2009 - 02:41:54.) -- C:\Windows\System32\sppcomapi.dll [231936]
[MD5.B9384E03479D2506BC924C16A3DB87BC] - (.Microsoft Corporation - Ancillary Function Driver for WinSock.) (.14/07/2009 - 00:21:42.) -- C:\Windows\system32\Drivers\AFD.sys [500224]
[MD5.02062C0B390B7729EDC9E69C680A6F3C] - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) (.14/07/2009 - 02:52:21.) -- C:\Windows\system32\Drivers\atapi.sys [24128]
[MD5.B8BD2BB284668C84865658C77574381A] - (.Microsoft Corporation - CD-ROM File System Driver.) (.14/07/2009 - 00:19:47.) -- C:\Windows\system32\Drivers\Cdfs.sys [92160]
[MD5.83D2D75E1EFB81B3450C18131443F7DB] - (.Microsoft Corporation - SCSI CD-ROM Driver.) (.14/07/2009 - 00:19:54.) -- C:\Windows\system32\Drivers\Cdrom.sys [147456]
[MD5.3F1DC527070ACB87E40AFE46EF6DA749] - (.Microsoft Corporation - DFS Namespace Client Driver.) (.14/07/2009 - 00:23:44.) -- C:\Windows\system32\Drivers\DfsC.sys [102400]
[MD5.0A49913402747A0B67DE940FB42CBDBB] - (.Microsoft Corporation - High Definition Audio Bus Driver.) (.14/07/2009 - 01:06:13.) -- C:\Windows\system32\Drivers\HDAudBus.sys [122368]
[MD5.FA55C73D4AFFA7EE23AC4BE53B4592D3] - (.Microsoft Corporation - Pilote de port i8042.) (.14/07/2009 - 00:19:57.) -- C:\Windows\system32\Drivers\i8042prt.sys [105472]
[MD5.AF9B39A7E7B6CAA203B3862582E9F2D0] - (.Microsoft Corporation - IP Network Address Translator.) (.14/07/2009 - 01:10:03.) -- C:\Windows\system32\Drivers\IpNat.sys [116224]
[MD5.CFDCD8CA87C2A657DEBC150AC35B5E08] - (.Microsoft Corporation - Windows NT SMB Minirdr.) (.14/07/2009 - 00:24:00.) -- C:\Windows\system32\Drivers\MRxSmb.sys [157184]
[MD5.9162B273A44AB9DCE5B44362731D062A] - (.Microsoft Corporation - MBT Transport driver.) (.14/07/2009 - 00:21:29.) -- C:\Windows\system32\Drivers\netBT.sys [259072]
[MD5.356698A13C4630D5B31C37378D469196] - (.Microsoft Corporation - Pilote du système de fichiers NT.) (.14/07/2009 - 02:48:27.) -- C:\Windows\system32\Drivers\ntfs.sys [1659984]
[MD5.0086431C29C35BE1DBC43F52CC273887] - (.Microsoft Corporation - Pilote de port parallèle.) (.14/07/2009 - 01:00:41.) -- C:\Windows\system32\Drivers\Parport.sys [97280]
[MD5.87A6E852A22991580D6D39ADC4790463] - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) (.14/07/2009 - 01:10:12.) -- C:\Windows\system32\Drivers\Rasl2tp.sys [130048]
[MD5.548260A7B8654E024DC30BF8A7C5BAA4] - (.Microsoft Corporation - SMB Transport driver.) (.14/07/2009 - 01:09:09.) -- C:\Windows\system32\Drivers\smb.sys [93184]
[MD5.079125C4B17B01FCAEEBCE0BCB290C0F] - (.Microsoft Corporation - TDI Translation Driver.) (.14/07/2009 - 00:21:15.) -- C:\Windows\system32\Drivers\tdx.sys [99840]
[MD5.58F82EED8CA24B461441F9C3E4F0BF5C] - (.Microsoft Corporation - Pilote de cliché instantané du volume.) (.14/07/2009 - 02:45:55.) -- C:\Windows\system32\Drivers\volsnap.sys [294992]
~ Generic Processes: Scanned in 00mn 00s
---\\ Hidden files state (Hidden/Total)
~ Mes images (My Pictures) : 1/322
~ Mes musiques (My Musics) : 19/254
~ Mes Videos (My Videos) : 1/314
~ Mes Favoris (My Favorites) : 1/52
~ Mes Documents (My Documents) : 1/3924
~ Mon Bureau (My Desktop) : 1/10344
~ Menu demarrer (Programs) : 1/276
~ Hidden Files: Scanned in 00mn 01s
---\\ Process running
[MD5.3F061545F7AC7F026D53E11272EA7779] - (.Smart PC Solutions - PC Speed Maximizer Smart Scan.) -- C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe [424560] [PID.2364] =>Rogue.PCSpeedMaximizer
[MD5.11CC3750346AAD0543A7744ADF11AA0E] - (.Faronics Corporation - Deep Freeze 7.00 Utility.) -- C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\_$Df\FrzState2k.exe [1827632] [PID.3236]
[MD5.05470C684B62C2F86325D8685E4513CB] - (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104] [PID.3340]
[MD5.69764A6475A4C54732E6A07CE6EF8BE2] - (.Microsoft Corporation - Microsoft LifeCam Device Application.) -- C:\Windows\vVX3000.exe [762736] [PID.3360]
[MD5.52FD61AFC3D2BF55226A7E5AC8C06673] - (.Spotify Ltd - Spotify.) -- C:\Users\Killyan\AppData\Roaming\Spotify\spotify.exe [6162488] [PID.3704]
[MD5.5D61BE7DB55B026A5D61A3EED09D0EAD] - (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408] [PID.3760]
[MD5.6FA1F6B8090F04D581E16212886BD861] - (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Killyan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1178168] [PID.3832]
[MD5.CC78200C3ECFFA178E78308A0E160D80] - (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Killyan\AppData\Local\Akamai\netsession_win.exe [4672920] [PID.4060]
[MD5.2A3FB4C98F139038E23330D2439DB8A4] - (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Killyan\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096] [PID.2980]
[MD5.7DFCCC67990B6DE7F30F553A4E4612A4] - (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe [495616] [PID.3588]
[MD5.597CF4BEDFDC81B8903982664CAC6ED0] - (.Bitdefender - Bitdefender Application Password Manager Ag.) -- C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe [614232] [PID.2468]
[MD5.3FAFBCCE3F066EDCC263E25A786FFD50] - (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016] [PID.3672]
[MD5.9A0ABBB44CBDF1F35D9657E9BF141898] - (.No owner - puush.) -- C:\Program Files (x86)\puush\puush.exe [567880] [PID.4440]
[MD5.80086ED442941DE2CA18CB6DAE8C1422] - (.Aeria Games & Entertainment - Aeria Ignite.) -- C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe [1925656] [PID.4772]
[MD5.A180FA6A94E0C1834A9D395CEAB039B2] - (.Evernote Corp., 305 Walnut Street, Redwood - Evernote Clipper.) -- C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe [1106784] [PID.4856]
[MD5.36B98590837B7A303701F46D5A416420] - (.No owner - MyTrashCan.) -- C:\Program Files (x86)\hiro's tool\MyTrashCan\MyTrashCan.exe [263168] [PID.960]
[MD5.C6352C29C56077749CEEDD08680D347D] - (.No owner - BambooDock back-end application.) -- C:\Program Files (x86)\Bamboo Dock\BambooCore.exe [646744] [PID.1716]
[MD5.EFD1839F21CEBB26D4A815ACDA85E3A1] - (.KalityWeb - WebAdSystem.) -- C:\Program Files (x86)\WebAdSystem\WebAdSystem.exe [822640] [PID.4916] =>Adware.WebAdSystem
[MD5.D342CD9148D4F9BC75304C658D52C25E] - (.Intel Corporation - IAStorIcon.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [286192] [PID.2876]
[MD5.9DCDA6F19811952EC42FDCB79DDB48AA] - (.KalityWeb - WebAdSystemHttpProxy.) -- C:\Program Files (x86)\WebAdSystem\WebAdSystemHttpProxy.exe [239984] [PID.6112] =>Adware.WebAdSystem
[MD5.F15D71B80E65161365665334D0B98546] - (.Overwolf LTD - Overwolf.) -- C:\Program Files (x86)\Overwolf\Overwolf.exe [39712] [PID.4644]
[MD5.CA628BC536FB468B8C92AF4F5FC7340C] - (.Overwolf LTD - Overwolf.Helper.) -- C:\Program Files (x86)\Common Files\Overwolf\0.78.41.0\OverwolfHelper.exe [54048] [PID.976]
[MD5.A768A1ED35D7AD63AB4556D9D499E8ED] - (.No owner - OverwolfBrowser.) -- C:\Program Files (x86)\Overwolf\0.78.41.0\OverwolfBrowser.exe [67360] [PID.9044]
[MD5.DBD4E13CF9B7321989E2D07D90329C27] - (...) -- C:\Users\Killyan\AppData\Roaming\Spotify\Data\SpotifyHelper.exe [601144] [PID.2820]
[MD5.CE5295758EB42A55737BE2FE50707E59] - (.Overwolf LTD - Overwolf.) -- C:\Program Files (x86)\Overwolf\0.78.41.0\Purplizer\Purplizer.exe [181024] [PID.6988]
[MD5.EA5B870671079786F335AC7C10846C4F] - (.Adobe Systems Incorporated - AAM Updates Notifier Application.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe [295584] [PID.5380]
[MD5.E3A6EF8493B1842CE253E895590ABB64] - (.Smart PC Solutions - PC Speed Maximizer.) -- C:\Program Files (x86)\PC Speed Maximizer\PCSpeedMaximizer.exe [22240368] [PID.7872] =>Rogue.PCSpeedMaximizer
[MD5.30A5B91EB0A1F8962E754B2E9AC8D856] - (.Nicolas Coolman - ZHPDiag Setup.) -- C:\Users\Killyan\Downloads\ZHPDiag2.exe [6859520] [PID.7448]
[MD5.9E30AB5E3F6B43F69F928E6B4FCFD604] - (.No owner - Setup/Uninstall.) -- C:\Users\Killyan\AppData\Local\Temp\is-4HLUR.tmp\ZHPDiag2.tmp [680960] [PID.7428]
[MD5.9E30AB5E3F6B43F69F928E6B4FCFD604] - (.No owner - Setup/Uninstall.) -- C:\Users\Killyan\AppData\Local\Temp\is-PU44D.tmp\ZHPDiag2.tmp [680960] [PID.7428]
[MD5.18CB59E55056046683E0D46CA26202BC] - (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\17.0.1241.53\opera.exe [42239328] [PID.5768]
[MD5.9BBB41BA722E688282E9F7A2C315C8DA] - (...) -- C:\Program Files (x86)\Opera\17.0.1241.53\opera_crashreporter.exe [1384288] [PID.6244]
[MD5.4B2D5118B141488B6FCFE199DEEC8002] - (.Nicolas Coolman - ZHPDiag.) -- C:\Program Files (x86)\ZHPDiag\ZHPDiag.exe [8096256] [PID.9416]
~ Processes Running: Scanned in 00mn 00s
---\\ Google Chrome, Start,Search,Extensions (G0,G1,G2)
C:\Users\Killyan\AppData\Local\Google\Chrome\User Data\Default\Preferences
---\\ Google Chrome Extension Folder
~ Google Lines Browser: 0 Legitimates Filtered in 00mn 00s
---\\ Mozilla Firefox,Plugins,Start,Search,Extensions (P2,M0,M1,M2,M3)
M2 - MFEP: RegExtension {e4f94d1e-2f53-401e-8885-681602c0ddd8} . (...) -- C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
M2 - MFEP: prefs.js [Killyan - qltb6rv9.default\fastdial@telega.phpnet.us] [fastdial] Fast Dial v4.11 (..)
M2 - MFEP: Extension [Killyan - qltb6rv9.default] {3f538614-b636-4023-9ec2-564ada4b07b3}
M2 - MFEP: Extension [Killyan - qltb6rv9.default] {c45c406e-ab73-11d8-be73-000a95be3b12}
M2 - MFEP: Extension [Killyan - qltb6rv9.default] {e4a8a97b-f2ed-450b-b12d-ee082ba24781}
P2 - FPN: [HKLM] [adobe.com/AdobeAAMDetect] - (...) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (.not file.)
~ Firefox Browser: 16 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer, Proxy Management (R5)
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = <local>
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:1123
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1
R5 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,AutoConfigProxy = wininet.dll
~ Proxy management: Scanned in 00mn 00s
---\\ Line Analysis F0, F1, F2, F3 - IniFiles, Auto loading programs
F2 - REG:system.ini: USERINIT=C:\Windows\system32\userinit.exe,
F2 - REG:system.ini: Shell=C:\Windows\explorer.exe
F2 - REG:system.ini: VMApplet=C:\Windows\System32\SystemPropertiesPerformance.exe
~ Keys: Scanned in 00mn 00s
---\\ Hosts file redirection (O1)
~ Le fichier hôte est sain (The hosts file is clean) (52)
~ Hosts File: Scanned in 00mn 00s
---\\ Browser Helper Objects (O2)
O2 - BHO: HulaToo [64Bits] - {ab65caf0-fc3b-40f8-8b88-6d096a48f659} . (...) -- C:\Program Files (x86)\HulaToo\HulaToobho.dll =>PUP.HulaToo
~ BHO: 32 Legitimates Filtered in 00mn 00s
---\\ Internet Explorer toolbars (O3)
O3 - Toolbar: Google Toolbar - [HKLM]{2318C2B1-4965-11d4-9B18-009027A5CD4F} . (.Google Inc. - Google Toolbar.) -- C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} Orphan key
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{2318C2B1-4965-11D4-9B18-009027A5CD4F} Orphan key
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{F2E99EFD-72DC-4C5D-9F7C-219133FF8E40} Orphan key
O3 - Toolbar\WebBrowser: (no name) - [HKCU]{71C91BEC-5DC4-4557-B38C-C7F3B5F30E43} Orphan key
~ Toolbar: Scanned in 00mn 00s
---\\ Other User Links (O4)
O4 - GS\Desktop [Public]: 电脑管家.lnk . (.Tencent - 电脑管家.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCTray.exe =>Adware.TencentAddressBar
O4 - GS\Desktop [Public]: 软件管理.lnk . (.Tencent - 软件管理.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCSoftMgr.exe =>Adware.TencentAddressBar
O4 - GS\Program [Public]: WebAdSystem.lnk . (.KalityWeb - WebAdSystem.) -- C:\Program Files (x86)\WebAdSystem\WebAdSystem.exe =>Adware.WebAdSystem
O4 - GS\QuickLaunch [Killyan]: µTorrent.lnk . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Killyan\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
~ Global Startup: 4 Legitimates Filtered in 00mn 00s
---\\ Auto loading programs from Registry and folders (O4)
O4 - HKLM\..\Run: [RTHDVCPL] . (.Realtek Semiconductor - Gestionnaire audio HD Realtek.) -- C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe =>.Realtek Semiconductor Corp
O4 - HKLM\..\Run: [IAStorIcon] . (.Intel Corporation - Delayed launcher.) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
O4 - HKLM\..\Run: [NvBackend] . (.NVIDIA Corporation - NVIDIA GeForce Experience Backend.) -- C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
O4 - HKLM\..\Run: [ShadowPlay] . (.NVIDIA Corporation - NVIDIA Capture Server Proxy.) -- C:\Windows\system32\nvspcap64.dll
O4 - HKLM\..\Run: [VX3000] . (.Microsoft Corporation - Microsoft LifeCam Device Application.) -- C:\Windows\vVX3000.exe
O4 - HKLM\..\Run: [ProfilerU] . (.Saitek - Saitek SST Profile Launcher.) -- C:\Program Files\SmartTechnology\Software\ProfilerU.exe
O4 - HKLM\..\Run: [SaiMfd] . (.Saitek - Saitek MFD File System Driver.) -- C:\Program Files\SmartTechnology\Software\SaiMfd.exe
O4 - HKLM\..\Run: [Bdagent] . (.Bitdefender - Bitdefender Agent.) -- C:\Program Files\Bitdefender\Bitdefender\bdagent.exe
O4 - HKLM\..\Run: [XboxStat] . (.Microsoft Corporation - XBoxStat.exe.) -- C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] . (.Adobe Systems Incorporated - Adobe Updater Startup Utility.) -- C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe =>.Adobe Systems Incorporated
O4 - HKCU\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKCU\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Killyan\AppData\Roaming\Spotify\Spotify.exe
O4 - HKCU\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Killyan\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKCU\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Killyan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd
O4 - HKCU\..\Run: [AdobeBridge] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun =>.DT Soft Ltd
O4 - HKCU\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Killyan\AppData\Local\Akamai\netsession_win.exe
O4 - HKCU\..\Run: [BackgroundContainer] . (.Conduit Ltd. - Background Container.) -- C:\Users\Killyan\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll =>PUP.Babylon
O4 - HKCU\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Killyan\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKCU\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKCU\..\Run: [Bitdefender Wallet Agent] . (.Bitdefender - Bitdefender Password Manager Agent.) -- C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
O4 - HKCU\..\Run: [Bitdefender Agent de l'application Wallet] . (.Bitdefender - Bitdefender Application Password Manager Ag.) -- C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
O4 - HKCU\..\Run: [Bitdefender Wallet] . (.Bitdefender - Bitdefender Password Manager.) -- C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe
O4 - HKCU\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKCU\..\Run: [7 Taskbar Tweaker] . (.RaMMicHaeL - 7+ Taskbar Tweaker.) -- C:\Users\Killyan\AppData\Roaming\7+ Taskbar Tweaker\7+ Taskbar Tweaker.exe
O4 - HKCU\..\Run: [Overwolf] . (.Overwolf LTD - Overwolf.) -- C:\Program Files (x86)\Overwolf\Overwolf.exe
O4 - HKCU\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKCU\..\Run: [puush] . (.No owner - puush.) -- C:\Program Files (x86)\puush\puush.exe
O4 - HKLM\..\Wow6432Node\Run: [IMSS] . (.Intel Corporation - PIcon startup utility.) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
O4 - HKLM\..\Wow6432Node\Run: [LifeCam] . (.Microsoft Corporation - LifeExp.exe.) -- C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
O4 - HKLM\..\Wow6432Node\Run: [Aeria Ignite] . (.Aeria Games & Entertainment - Aeria Ignite.) -- C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe
O4 - HKLM\..\Wow6432Node\Run: [Razer Synapse] . (.Razer Inc. - Razer Synapse.) -- C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
O4 - HKLM\..\Wow6432Node\Run: [RazerGameBooster] . (.Razer Inc. - RazerGameBooster.) -- C:\Program Files (x86)\Razer\Razer Game Booster\RazerGameBooster.exe
O4 - HKLM\..\Wow6432Node\Run: [BlueStacks Agent] . (.BlueStack Systems, Inc. - BlueStacks Agent.) -- C:\Program Files (x86)\BlueStacks\HD-Agent.exe
O4 - HKLM\..\Wow6432Node\Run: [BambooCore] . (.No owner - BambooDock back-end application.) -- C:\Program Files (x86)\Bamboo Dock\BambooCore.exe
O4 - HKLM\..\Wow6432Node\Run: [WebAdSystem] . (.KalityWeb - WebAdSystem.) -- C:\Program Files (x86)\WebAdSystem\WebAdSystem.exe =>Adware.WebAdSystem
O4 - HKLM\..\Wow6432Node\Run: [LogMeIn Hamachi Ui] . (.LogMeIn Inc. - Hamachi Client Application.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
O4 - HKLM\..\Wow6432Node\Run: [ QQPCTray] . (.Tencent - 电脑管家.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCTray.exe =>Adware.TencentAddressBar
O4 - HKLM\..\Wow6432Node\Run: [AdobeCS6ServiceManager] . (.Adobe Systems Incorporated - Adobe CS6 Service Manager.) -- C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
O4 - HKUS\.DEFAULT\..\Run: [Bitdefender Wallet Agent] . (.Bitdefender - Bitdefender Password Manager Agent.) -- C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
O4 - HKUS\.DEFAULT\..\Run: [Bitdefender Wallet] . (.Bitdefender - Bitdefender Password Manager.) -- C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe
O4 - HKUS\.DEFAULT\..\Run: [Bitdefender Agent de l'application Wallet] . (.Bitdefender - Bitdefender Application Password Manager Ag.) -- C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
O4 - HKUS\S-1-5-18\..\Run: [Bitdefender Wallet Agent] . (.Bitdefender - Bitdefender Password Manager Agent.) -- C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
O4 - HKUS\S-1-5-18\..\Run: [Bitdefender Wallet] . (.Bitdefender - Bitdefender Password Manager.) -- C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe
O4 - HKUS\S-1-5-18\..\Run: [Bitdefender Agent de l'application Wallet] . (.Bitdefender - Bitdefender Application Password Manager Ag.) -- C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] . (.Microsoft Corporation - Gadgets du Bureau Windows.) -- C:\Program Files (x86)\Windows Sidebar\Sidebar.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] . (.Microsoft Corporation - MCTAdmin.) -- C:\Windows\System32\mctadmin.exe =>.Microsoft Corporation
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [EADM] . (.Electronic Arts - Origin.) -- C:\Program Files (x86)\Origin\Origin.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Spotify] . (.Spotify Ltd - Spotify.) -- C:\Users\Killyan\AppData\Roaming\Spotify\Spotify.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [swg] . (.Google Inc. - GoogleToolbarNotifier.) -- C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [uTorrent] . (.BitTorrent Inc. - µTorrent.) -- C:\Users\Killyan\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Spotify Web Helper] . (.Spotify Ltd - SpotifyWebHelper.) -- C:\Users\Killyan\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [DAEMON Tools Lite] . (.Disc Soft Ltd - DAEMON Tools Lite.) -- C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe =>.DT Soft Ltd
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [AdobeBridge] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun =>.DT Soft Ltd
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Akamai NetSession Interface] . (.Akamai Technologies, Inc. - Akamai NetSession Client.) -- C:\Users\Killyan\AppData\Local\Akamai\netsession_win.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [BackgroundContainer] . (.Conduit Ltd. - Background Container.) -- C:\Users\Killyan\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll =>PUP.Babylon
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Facebook Update] . (.Facebook Inc. - Programme d'installation de Facebook.) -- C:\Users\Killyan\AppData\Local\Facebook\Update\FacebookUpdate.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [RocketDock] . (...) -- C:\Program Files (x86)\RocketDock\RocketDock.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Bitdefender Wallet Agent] . (.Bitdefender - Bitdefender Password Manager Agent.) -- C:\Program Files\Bitdefender\Bitdefender\pmbxag.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Bitdefender Agent de l'application Wallet] . (.Bitdefender - Bitdefender Application Password Manager Ag.) -- C:\Program Files\Bitdefender\Bitdefender\antispam32\bdapppassmgr.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Bitdefender Wallet] . (.Bitdefender - Bitdefender Password Manager.) -- C:\Program Files\Bitdefender\Bitdefender\pwdmanui.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Skype] . (.Skype Technologies S.A. - Skype.) -- C:\Program Files (x86)\Skype\Phone\Skype.exe =>.Skype Technologies S.A.
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [7 Taskbar Tweaker] . (.RaMMicHaeL - 7+ Taskbar Tweaker.) -- C:\Users\Killyan\AppData\Roaming\7+ Taskbar Tweaker\7+ Taskbar Tweaker.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [Overwolf] . (.Overwolf LTD - Overwolf.) -- C:\Program Files (x86)\Overwolf\Overwolf.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [SandboxieControl] . (.Sandboxie Holdings, LLC - Sandboxie Control.) -- C:\Program Files\Sandboxie\SbieCtrl.exe
O4 - HKUS\S-1-5-21-4014087114-3647301785-561324432-1000\..\Run: [puush] . (.No owner - puush.) -- C:\Program Files (x86)\puush\puush.exe
~ Application: Scanned in 00mn 00s
---\\ Extra buttons on main IE button toolbar, or extra items in IE 'Tools' menu (O9)
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 [64Bits] - {A95fe080-8f5d-11d2-a20b-00aa003c157a} . (.Evernote Corp., 305 Walnut Street, Redwood - Evernote Clipper for Microsoft Internet Explorer.) -- C:\Program Files (x86)\Evernote\Evernote\EvernoteIEx64.dll
~ IE Extra Buttons: Scanned in 00mn 00s
---\\ Site in Trusted Zone (O15)
O15 - Trusted Zone: [HKCU\...\Domains] http.aeriagames.com
O15 - Trusted Zone: [HKCU\...\Domains] *.clonewarsadventures.com
O15 - Trusted Zone: [HKCU\...\Domains] *.freerealms.com
O15 - Trusted Zone: [HKCU\...\Domains] *.soe.com
O15 - Trusted Zone: [HKCU\...\Domains] *.sony.com
~ IE Zone Confiance: Scanned in 00mn 00s
---\\ Lop.com/Domain Hijackers (O17)
O17 - HKLM\System\CCS\Services\Tcpip\..\{36BE9B1C-0300-4613-B640-66E76C2741E4}: DhcpNameServer = 44.0.0.252
O17 - HKLM\System\CCS\Services\Tcpip\..\{851BB6AE-B52B-4D92-9781-0537D8208FA2}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{36BE9B1C-0300-4613-B640-66E76C2741E4}: DhcpNameServer = 44.0.0.252
O17 - HKLM\System\CS1\Services\Tcpip\..\{851BB6AE-B52B-4D92-9781-0537D8208FA2}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS2\Services\Tcpip\..\{36BE9B1C-0300-4613-B640-66E76C2741E4}: DhcpNameServer = 44.0.0.252
O17 - HKLM\System\CS2\Services\Tcpip\..\{851BB6AE-B52B-4D92-9781-0537D8208FA2}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CS3\Services\Tcpip\..\{36BE9B1C-0300-4613-B640-66E76C2741E4}: DhcpNameServer = 44.0.0.252
O17 - HKLM\System\CS3\Services\Tcpip\..\{851BB6AE-B52B-4D92-9781-0537D8208FA2}: DhcpNameServer = 192.168.1.1
~ Domain: Scanned in 00mn 00s
---\\ Extra protocols (O18)
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll =>.Microsoft Corporation
O18 - Filter: gzip [64Bits] - {8f6b0360-b80d-11d0-a9b3-006097942311} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\system32\urlmon.dll
~ Protocole Additionnel: Scanned in 00mn 00s
---\\ AppInit_DLLs Registry value Autorun (O20)
O20 - Winlogon Notify: DfLogon . (...) -- Logondll.dll
~ Winlogon: Scanned in 00mn 00s
---\\ Non Microsoft non disabled Windows XP/NT/2000 Services (O23)
O23 - Service: QQPCMgr RTP Service (QQPCRTP) . (.Tencent - 电脑管家-实时防护服务.) - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCRTP.exe =>Adware.TencentAddressBar
O23 - Service: Razer Surround Audio Service (RzMaelstromVADStreamingService) . (.A-Volute - Maelstrom VAD Streaming Service.) - C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
O23 - Service: Toolbar Service (TBSrv) . (...) - C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe =>Toolbar.Conduit
O23 - Service: Update HulaToo (Update HulaToo) . (...) - C:\Program Files (x86)\HulaToo\updateHulaToo.exe =>PUP.HulaToo
O23 - Service: Util HulaToo (Util HulaToo) . (...) - C:\Program Files (x86)\HulaToo\bin\utilHulaToo.exe =>PUP.HulaToo
~ Services: 31 Legitimates Filtered in 00mn 06s
---\\ BootExecute (BEX) (O34)
O34 - HKLM BootExecute: (autocheck autochk /k:C /k:G *) - File not found
~ BEX: 1 Legitimates Filtered in 00mn 00s
---\\ Task Planned Automatically (039)
O39 - APT: - (..) -- C:\Windows\System32\Tasks\Adobe Flash Player Updater [1002]
O39 - APT: - (..) -- C:\Windows\Tasks\AmiUpdXp.job [350] =>PUP.Software.Updater
O39 - APT: - (..) -- C:\Windows\System32\Tasks\AmiUpdXp [350] =>PUP.Software.Updater
O39 - APT: - (..) -- C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4014087114-3647301785-561324432-1000Core [914]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore [1066]
O39 - APT: - (..) -- C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA [1070]
~ Scheduled Task: 10 Legitimates Filtered in 00mn 00s
---\\ Drivers launched at startup (O41)
O41 - Driver: (QMUdisk) . (.Tencent - QMUdiskKernel.) - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QMUdisk64.sys =>Adware.TencentAddressBar
O41 - Driver: (TSCPM) . (.电脑管家 - 电脑管家-驱动模块.) - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\tscpm64.sys
O41 - Driver: (TSSysKit) . (.电脑管家 - 电脑管家-驱动模块.) - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\TSsysKit64.sys
O41 - Driver: (UsbCharger) . (...) - C:\Windows\System32\DRIVERS\UsbCharger.sys
~ Drivers: 107 Legitimates Filtered in 00mn 00s
---\\ Software installed (O42)
O42 - Logiciel: Adventures of Shuggy - (.Smudged Cat Games Ltd.) [HKLM][64Bits] -- Steam App 211440
O42 - Logiciel: AuraKingdom-FR - (...) [HKLM][64Bits] -- AuraKingdom-FR
O42 - Logiciel: China Localization Patcher - (.LokiReborn.) [HKLM][64Bits] -- {D04987F6-486C-449A-9F8B-C6F411E57221}
O42 - Logiciel: Dethroned! - (.Treehouse Ltd.) [HKLM][64Bits] -- Steam App 269390
O42 - Logiciel: Dungeon Hearts - (.Cube Roots.) [HKLM][64Bits] -- Steam App 229520
O42 - Logiciel: GhostMouse - (.ghost-mouse.com.) [HKLM][64Bits] -- GhostMouse_is1
O42 - Logiciel: Guacamelee! Gold Edition - (.DrinkBox Studios.) [HKLM][64Bits] -- Steam App 214770
O42 - Logiciel: Happy Wars - (.Toylogic inc..) [HKLM][64Bits] -- Steam App 246280
O42 - Logiciel: Hero Siege - (.Elias Viglione.) [HKLM][64Bits] -- Steam App 269210
O42 - Logiciel: HulaToo - (.HulaToo.) [HKLM][64Bits] -- HulaToo =>PUP.HulaToo
O42 - Logiciel: LCP 5.04 - (.nh.) [HKLM][64Bits] -- {1EFAF492-9A3B-48C3-9349-234B146FDA46}
O42 - Logiciel: La Tale - (.Actoz Soft.) [HKLM][64Bits] -- Steam App 264360
O42 - Logiciel: MyTrashCan (1.5.7) - (.hiroshi takahashi.) [HKLM][64Bits] -- MyTrashCan_is1
O42 - Logiciel: Pid - (.Might and Delight.) [HKLM][64Bits] -- Steam App 218740
O42 - Logiciel: Really Big Sky - (.Boss Baddie.) [HKLM][64Bits] -- Steam App 201570
O42 - Logiciel: Reus - (.Abbey Games.) [HKLM][64Bits] -- Steam App 222730
O42 - Logiciel: Rush Bros - (.XYLA Entertainment.) [HKLM][64Bits] -- Steam App 234490
O42 - Logiciel: Rust - (.Facepunch Studios.) [HKLM][64Bits] -- Steam App 252490
O42 - Logiciel: Saira - (.Nicklas Nygren.) [HKLM][64Bits] -- Steam App 48900
O42 - Logiciel: Savant - Ascent - (.DPad Studios.) [HKLM][64Bits] -- Steam App 259530
O42 - Logiciel: South Park Le Bâton de la Vérité version 1.1 - (.REVOLUTiONiT.) [HKLM][64Bits] -- {42B01CC5-65DC-44F9-BB98-417B9B0632CA}_is1
O42 - Logiciel: TS Notifier - (.Andreas Gebert.) [HKLM][64Bits] -- {1A15C8C3-DDCA-47BF-9078-799D356462ED}
O42 - Logiciel: The Expendabros - (.Free Lives.) [HKLM][64Bits] -- Steam App 312990
O42 - Logiciel: Urban Trial Freestyle - (.Tate Multimedia.) [HKLM][64Bits] -- Steam App 243450
O42 - Logiciel: WebAdSystem - (.KalityWeb.) [HKLM][64Bits] -- {AF59773E-3245-46A3-B418-DD84AB6C3C50} =>Adware.WebAdSystem
O42 - Logiciel: WebAdSystem - (.KalityWeb.) [HKLM][64Bits] -- {d8d2dd71-6eef-437b-9507-7400e210074a} =>Adware.WebAdSystem
O42 - Logiciel: Woodle Tree Adventures - (.Fabio Ferrara.) [HKLM][64Bits] -- Steam App 299460
O42 - Logiciel: 剑灵_腾讯 - (.Tencent.) [HKLM][64Bits] -- 剑灵_腾讯 =>Adware.TencentAddressBar
O42 - Logiciel: 电脑管家8.11 - (.腾讯科技(深圳)有限公司.) [HKLM][64Bits] -- QQPCMgr
~ Logic: 36 Legitimates Filtered in 00mn 01s
---\\ HKCU & HKLM Software Keys
[HKCU\Software\APN PIP]
[HKCU\Software\Administrator]
[HKCU\Software\Arachnid Games]
[HKCU\Software\Drivers]
[HKCU\Software\HulaToo] =>PUP.HulaToo
[HKCU\Software\KalityWeb] =>Adware.WebAdSystem
[HKCU\Software\Krillbite Studio]
[HKCU\Software\Pando Networks]
[HKCU\Software\Shell Labs]
[HKCU\Software\System32]
[HKCU\Software\Tbccint] =>Toolbar.Conduit
[HKCU\Software\Tbccint_HKLM] =>Toolbar.Conduit
[HKCU\Software\Tencent] =>Adware.TencentAddressBar
[HKCU\Software\TesSafe]
[HKCU\Software\Treehouse]
[HKCU\Software\Win]
[HKCU\Software\hiro's tool]
[HKCU\Software\mark@trilightstudios.com]
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\HulaToo] =>PUP.HulaToo
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\KalityWeb] =>Adware.WebAdSystem
[HKLM\Software\Wow6432Node\Pando Networks]
[HKLM\Software\Wow6432Node\Shell Labs]
[HKLM\Software\Wow6432Node\Tencent] =>Adware.TencentAddressBar
[HKLM\Software\Wow6432Node\Zame]
[HKLM\Software\Wow6432Node\Zenimax_Online]
~ Key Software: 683 Legitimates Filtered in 00mn 01s
---\\ Contents of the Common Files folders (O43)
O43 - CFD: 13/06/2014 - 20:17:35 - [] ----D C:\Program Files (x86)\ATLUS
O43 - CFD: 22/01/2014 - 19:17:22 - [] ----D C:\Program Files (x86)\Conduit
O43 - CFD: 30/04/2014 - 19:28:54 - [] ----D C:\Program Files (x86)\GhostMouse
O43 - CFD: 15/08/2014 - 23:28:14 - [] ----D C:\Program Files (x86)\Goat Simulator
O43 - CFD: 26/02/2014 - 15:20:38 - [] ----D C:\Program Files (x86)\hiro's tool
O43 - CFD: 07/07/2014 - 08:09:59 - [] ----D C:\Program Files (x86)\HulaToo =>PUP.HulaToo
O43 - CFD: 18/08/2014 - 17:47:09 - [] ----D C:\Program Files (x86)\LCP
O43 - CFD: 19/08/2014 - 15:08:23 - [] ----D C:\Program Files (x86)\LokiReborn
O43 - CFD: 09/02/2014 - 16:27:27 - [] ----D C:\Program Files (x86)\Pando Networks
O43 - CFD: 01/02/2014 - 17:00:03 - [] ----D C:\Program Files (x86)\Red Barrels
O43 - CFD: 17/08/2014 - 18:03:50 - [] ----D C:\Program Files (x86)\S4League
O43 - CFD: 10/03/2014 - 23:44:28 - [] ----D C:\Program Files (x86)\South Park Le Bâton de la Vérité
O43 - CFD: 27/04/2014 - 19:28:06 - [] ----D C:\Program Files (x86)\Tbccint =>Toolbar.Conduit
O43 - CFD: 07/08/2014 - 14:19:31 - [] ----D C:\Program Files (x86)\TS Notifier
O43 - CFD: 06/07/2014 - 22:20:11 - [] ----D C:\Program Files (x86)\WebAdSystem =>Adware.WebAdSystem
O43 - CFD: 19/08/2014 - 20:46:46 - [] ----D C:\Program Files (x86)\Common Files\Tencent =>Adware.TencentAddressBar
O43 - CFD: 20/08/2014 - 15:27:04 - [] ----D C:\ProgramData\boost_interprocess
O43 - CFD: 22/01/2014 - 19:17:21 - [] ----D C:\ProgramData\Conduit
O43 - CFD: 09/02/2014 - 10:58:06 - [] ----D C:\ProgramData\Elder Scrolls Online
O43 - CFD: 27/04/2014 - 19:28:04 - [] ----D C:\ProgramData\Tbccint =>Toolbar.Conduit
O43 - CFD: 19/08/2014 - 20:48:32 - [] ----D C:\ProgramData\Tencent =>Adware.TencentAddressBar
O43 - CFD: 01/02/2014 - 03:04:01 - [] ----D C:\Users\Killyan\AppData\Roaming\.lifecraft
O43 - CFD: 28/06/2014 - 14:23:22 - [] ----D C:\Users\Killyan\AppData\Roaming\.wakcraft
O43 - CFD: 02/03/2014 - 14:07:04 - [] ----D C:\Users\Killyan\AppData\Roaming\Reg
O43 - CFD: 16/02/2014 - 19:41:20 - [] ----D C:\Users\Killyan\AppData\Roaming\steamvr
O43 - CFD: 29/03/2014 - 15:25:55 - [] ----D C:\Users\Killyan\AppData\Roaming\StunlockStudios
O43 - CFD: 23/08/2014 - 13:54:12 - [] ----D C:\Users\Killyan\AppData\Roaming\Tencent =>Adware.TencentAddressBar
O43 - CFD: 06/07/2014 - 22:18:34 - [] ----D C:\Users\Killyan\AppData\Local\25802
O43 - CFD: 22/01/2014 - 19:17:21 - [] ----D C:\Users\Killyan\AppData\Local\Conduit
O43 - CFD: 28/05/2014 - 22:07:09 - [] ----D C:\Users\Killyan\AppData\Local\Game Updater
O43 - CFD: 03/07/2014 - 23:39:22 - [] ----D C:\Users\Killyan\AppData\Local\Hero_Siege
O43 - CFD: 13/08/2014 - 00:55:29 - [] ----D C:\Users\Killyan\AppData\Local\Izusoft
O43 - CFD: 06/07/2014 - 22:20:10 - [] ----D C:\Users\Killyan\AppData\Local\KalityWeb =>Adware.WebAdSystem
O43 - CFD: 15/08/2014 - 23:57:55 - [] ----D C:\Users\Killyan\AppData\Local\Savant_Ascent
O43 - CFD: 28/05/2014 - 21:59:30 - [] ----D C:\Users\Killyan\AppData\Local\Setup Integrity Check
O43 - CFD: 27/04/2014 - 19:28:06 - [] ----D C:\Users\Killyan\AppData\Local\Tbccint =>Toolbar.Conduit
O43 - CFD: 11/07/2014 - 00:43:59 - [] ----D C:\Users\Killyan\AppData\Local\Urban Trial Freestyle
O43 - CFD: 06/07/2014 - 22:26:05 - [] ----D C:\Users\Killyan\AppData\Local\Zame
O43 - CFD: 18/08/2014 - 17:47:09 - [] ----D C:\Users\Killyan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LCP
O43 - CFD: 19/08/2014 - 17:48:15 - [] ----D C:\Users\Killyan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯游戏
O43 - CFD: 19/08/2014 - 20:46:45 - [] ----D C:\Users\Killyan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
~ Program Folder: 427 Legitimates Filtered in 00mn 00s
---\\ Last modified or created files under Windows and System32 (O44)
O44 - LFC:[MD5.30353DEB220EECE8E99973C2A3CEABB3] - 15/08/2014 - 13:49:38 ---A- . (...) -- C:\Windows\Sandboxie.ini [1842]
O44 - LFC:[MD5.53E5930240A4CC8F7CA709FD6C3E4A89] - 19/08/2014 - 19:46:45 ---A- . (.电脑管家 - 电脑管家-驱动模块.) -- C:\Windows\System32\Drivers\TFsFltX64.sys [87864]
O44 - LFC:[MD5.C0F6A6B53E262F17F45858DAC9DDCA67] - 19/08/2014 - 19:47:57 ---A- . (.Tencent Technology(Shenzhen) Company Limite - TAOKernel.) -- C:\Windows\System32\Drivers\TAOKernel64.sys [102712] =>Adware.TencentAddressBar
O44 - LFC:[MD5.8344A0507BC4C23D44F4B457E8A59B0D] - 20/08/2014 - 14:22:23 -S-A- . (...) -- C:\Windows\bootstet.dat [67584]
O44 - LFC:[MD5.8D3FACB922606821A3F65934DE18CA4A] - 20/08/2014 - 14:39:22 ---A- . (.TENCENT - Loader64 NT Driver.) -- C:\Windows\System32\TesSafe.sys [910992] =>Adware.TencentAddressBar
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 20/08/2014 - 14:42:56 ---A- . (...) -- C:\dfinstall.log [0]
O44 - LFC:[MD5.151BB439B982BC42EA0C579C1E85904F] - 20/08/2014 - 14:43:54 ---A- . (...) -- C:\bdlog.txt [131562]
O44 - LFC:[MD5.D41D8CD98F00B204E9800998ECF8427E] - 23/08/2014 - 12:50:10 ---A- . (...) -- C:\Windows\System32\RzMaelstromVADAudioDeviceManager_log.txt [0]
~ Files: 17 Legitimates Filtered in 00mn 01s
---\\ MountPoints2 Shell Key (MPKS) (O51)
O51 - MPSK:{2229ebf7-c931-11e3-91cd-94de80a6443a}\AutoRun\command. (...) -- F:\Startme.exe (.not file.)
O51 - MPSK:{ea29fbc7-789f-11e3-a206-806e6f6e6963}\AutoRun\command. (...) -- D:\SETUP.exe (.not file.)
~ Keys: Scanned in 00mn 00s
---\\ Trojan Driver Search Data (HKLM)(TDSD) (O52)
O52 - TDSD: \Drivers32\"VIDC.FICV"="ficvdec_x64.dll" . (...) -- C:\Windows\System32\ficvdec_x64.dll
~ TDSD: 5 Legitimates Filtered in 00mn 00s
---\\ ShareTools MSconfig StartupReg (SMSR) (O53)
O53 - SMSR:HKLM\...\startupreg\ESL Wire [Key] . (.Turtle Entertainment GmbH - ESL Wire Gaming Client.) -- C:\Program Files\EslWire\wire.exe
~ SMSR Keys: 4 Legitimates Filtered in 00mn 00s
---\\ Microsoft Windows Policies System (MWPS) (O55)
O55 - MWPS:[HKLM\...\Policies\System] - "EnableUIADesktopToggle"=0
O55 - MWPS:[HKLM\...\Policies\System] - "FilterAdministratorToken"=0
~ MWPS: 16 Legitimates Filtered in 00mn 00s
---\\ Microsoft Windows Policies Explorer (MWPE) (O56)
O56 - MWPE:[HKLM\...\policies\Explorer] - "NoActiveDesktopChanges"=1
~ MWPE Keys: 8 Legitimates Filtered in 00mn 00s
---\\ System Drivers List (SDL) (O58)
O58 - SDL:19/02/2013 - 12:18:46 ---A- . (...) -- C:\Windows\System32\Drivers\AppleCharger.sys [21584]
O58 - SDL:14/07/2009 - 02:47:48 ---A- . (.Emulex - Storport Miniport Driver for LightPulse HBAs.) -- C:\Windows\System32\Drivers\elxstor.sys [530496]
O58 - SDL:17/01/2014 - 20:37:56 ---A- . (.<Turtle Entertainment> - EslWireACD.) -- C:\Windows\System32\Drivers\ESLWireACD.sys [184968]
O58 - SDL:10/06/2009 - 21:31:59 ---A- . (.Hauppauge Computer Works, Inc. - Hauppauge WinTV 885 Consumer IR Driver for eHome.) -- C:\Windows\System32\Drivers\hcw85cir.sys [31232]
O58 - SDL:17/03/2014 - 17:13:36 ---A- . (.Windows (R) Win 7 DDK provider - Filter Driver for HID-KMDF Interface.) -- C:\Windows\System32\Drivers\hidkmdf.sys [14136]
O58 - SDL:06/12/2013 - 14:37:50 ---A- . (.Visicom Media Inc. - ManyCam Virtual Microphone.) -- C:\Windows\System32\Drivers\mcaudrv_x64.sys [35232]
O58 - SDL:27/11/2013 - 02:54:02 ---A- . (.Visicom Media Inc. - ManyCam Virtual Webcam Driver.) -- C:\Windows\System32\Drivers\mcvidrv.sys [42016]
O58 - SDL:21/11/2013 - 10:59:28 ---A- . (.Windows (R) Win 7 DDK provider - Maelstrom VAD Audio driver.) -- C:\Windows\System32\Drivers\RzMaelstromVAD.sys [40696]
O58 - SDL:14/07/2009 - 02:45:55 ---A- . (.Promise Technology - Promise SuperTrak EX Series Driver for Windows.) -- C:\Windows\System32\Drivers\stexstor.sys [24656]
O58 - SDL:07/08/2014 - 16:55:14 ---A- . (.Tencent Technology(Shenzhen) Company Limite - TAOKernel.) -- C:\Windows\System32\Drivers\TAOKernel64.sys [102712] =>Adware.TencentAddressBar
O58 - SDL:15/12/2011 - 20:29:42 ---A- . (.The OpenVPN Project - TAP-Win32 Virtual Network Driver.) -- C:\Windows\System32\Drivers\tap0901.sys [31232]
O58 - SDL:06/05/2014 - 07:48:32 ---A- . (.Spotflux, Inc. - Spotflux Network Device Driver.) -- C:\Windows\System32\Drivers\tapSF0901.sys [39104]
O58 - SDL:07/08/2014 - 16:55:10 ---A- . (.电脑管家 - 电脑管家-驱动模块.) -- C:\Windows\System32\Drivers\TFsFltX64.sys [87864]
O58 - SDL:06/05/2013 - 10:45:24 ---A- . (...) -- C:\Windows\System32\Drivers\UsbCharger.sys [21584]
O58 - SDL:20/08/2014 - 14:39:22 ---A- . (.TENCENT - Loader64 NT Driver.) -- C:\Windows\System32\TesSafe.sys [910992] =>Adware.TencentAddressBar
O58 - SDL:13/07/2009 - 00:07:46 ---A- . (...) -- C:\Windows\SysWOW64\drivers\uxpatch.sys [25448]
~ Drivers: 86 Legitimates Filtered in 00mn 00s
---\\ List all tools cleaner (LATC) (O63)
O63 - Logiciel: ZHPDiag 2014 - (.Nicolas Coolman.) [HKLM] -- ZHPDiag_is1 =>.Nicolas Coolman
~ ADS: Scanned in 00mn 00s
---\\ List all legacy services(LALS) (O64)
O64 - Services: CurCS - 20/01/2014 - C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys (BstHdDrv) .(.BlueStack Systems - BlueStacks Hypervisor for amd64.) - LEGACY_BSTHDDRV
O64 - Services: CurCS - 15/05/2014 - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QMUdisk64.sys (QMUdisk) .(.Tencent - QMUdiskKernel.) - LEGACY_QMUDISK =>Adware.TencentAddressBar
O64 - Services: CurCS - 07/08/2014 - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQsysMonX64.sys (QQSysMonX64) .(.电脑管家 - 电脑管家-驱动模块.) - LEGACY_QQSYSMONX64
O64 - Services: CurCS - 07/08/2014 - C:\Windows\System32\Drivers\TAOKernel64.sys (TAOKernelDriver) .(.Tencent Technology(Shenzhen) Company Limite - TAOKernel.) - LEGACY_TAOKERNELDRIVER =>Adware.TencentAddressBar
O64 - Services: CurCS - 07/08/2014 - C:\Windows\System32\Drivers\TFsFltX64.sys (TFsFlt) .(.电脑管家 - 电脑管家-驱动模块.) - LEGACY_TFSFLT
O64 - Services: CurCS - 07/08/2014 - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\tscpm64.sys (TSCPM) .(.电脑管家 - 电脑管家-驱动模块.) - LEGACY_TSCPM
O64 - Services: CurCS - 07/08/2014 - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\TSsysFix64.sys (TSSysFix) .(.电脑管家 - 电脑管家-TSSysFix Driver.) - LEGACY_TSSYSFIX
O64 - Services: CurCS - 07/08/2014 - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\TSsysKit64.sys (TSSysKit) .(.电脑管家 - 电脑管家-驱动模块.) - LEGACY_TSSYSKIT
~ Legacy: 98 Legitimates Filtered in 00mn 00s
---\\ File Associations Shell Spawning (O67)
O67 - Shell Spawning: <.html> <OperaStable>[HKCU\..\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe
~ FASS Keys: 11 Legitimates Filtered in 00mn 00s
---\\ Start Menu Internet (SMI) (O68)
O68 - StartMenuInternet: <FIREFOX.EXE> <Mozilla Firefox>[HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
O68 - StartMenuInternet: <Google Chrome> <Google Chrome>[HKLM\..\Shell\open\Command] (.Google Inc. - Google Chrome.) -- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
O68 - StartMenuInternet: <IEXPLORE.EXE> <Internet Explorer>[HKLM\..\Shell\open\Command] (.Microsoft Corporation - Internet Explorer.) -- C:\Program Files (x86)\Internet Explorer\iexplore.exe
O68 - StartMenuInternet: <OperaStable> <Opera Stable>[HKLM\..\Shell\open\Command] (.Opera Software - Opera Internet Browser.) -- C:\Program Files (x86)\Opera\Launcher.exe
~ Keys: Scanned in 00mn 00s
---\\ Search Browser Infection (SBI) (O69)
O69 - SBI: SearchScopes [HKCU] {0633EE93-D776-472f-A0FF-E1416B8B2E3A} - (Bing) - http://www.bing.com
O69 - SBI: SearchScopes [HKCU] {6A1806CD-94D4-4689-BA73-E35EA1EA9990} [DefaultScope] - (Google) - http://www.google.com
O69 - SBI: SearchScopes [HKCU] {9E37733F-F63C-4DBB-974D-4C88922B6C78} - (IMVU Inc C Customized Web Search) - http://search.conduit.com
O69 - SBI: SearchScopes [HKCU] {D6BA03C1-CEBB-4BBD-9269-8187C777693C} - (IMVU Inc Cb Customized Web Search) - http://trovi.com =>Hijacker.TroviCom
~ Keys: Scanned in 00mn 00s
---\\ Search Particular Root Folder (SPRF) (O84)
[MD5.27CF1342570E1F65DAB84CC3C7177F17] [SPRF][02/03/2014] (...) -- C:\ProgramData\1393765006.bdinstall.bin [490758]
[MD5.57C24C77F736B51F3697FB05EFB4AD5B] [SPRF][20/08/2014] (...) -- C:\ProgramData\DT0001.dat [40]
[MD5.7FCDCA68498FB6F6B36A9953D1B6D3ED] [SPRF][20/08/2014] (...) -- C:\ProgramData\DT0006.dat [40]
[MD5.43EFB2815BD4F96F44F7E6AD5E0B21C1] [SPRF][26/04/2014] (...) -- C:\Users\Killyan\AppData\Roaming\DOK52P4Q3J.dat [36]
[MD5.0F58CCD58A29827B5D406874360E4C08] [SPRF][02/06/2010] (...) -- C:\Users\Killyan\Desktop\dsetup32.dll [1801048]
[MD5.3C166BAE84553D4CB27AF8ABDC61712D] [SPRF][15/01/2014] (...) -- C:\Users\Killyan\Desktop\Minecraft.exe [675988]
[MD5.ABD8791B2221CFFF3AA4A79E97B2D37C] [SPRF][06/07/2014] (...) -- C:\Users\Killyan\Desktop\Tablette.bat [116]
~ Files: 12 Legitimates Filtered in 00mn 00s
---\\ Firewall Active Exception List (FirewallRules) (O87)
O87 - FAEL: "{5F7B477D-5DF6-4748-A8AD-C41075ABA44F}" | In - None - P6 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Killyan\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{2E597F84-7165-4C82-BA4E-EFA7A0A3D8AA}" | In - None - P17 - TRUE | .(.BitTorrent Inc. - µTorrent.) -- C:\Users\Killyan\AppData\Roaming\uTorrent\uTorrent.exe =>P2P.BitTorrent
O87 - FAEL: "{7529A314-8B9C-4662-BA55-9DA276B4EE08}" | In - Public - P6 - TRUE | .(.Tencent - Tencent TenioDL for Game.) -- c:\users\killyan\appdata\roaming\tencent\剑灵\7aa487d7eed5b7d8c829d33144690a0c\teniodl\teniodl.exe =>Adware.TencentAddressBar
O87 - FAEL: "{FFD70636-2DF7-46F2-97A5-32EDE46141DE}" | In - Public - P17 - TRUE | .(.Tencent - Tencent TenioDL for Game.) -- c:\users\killyan\appdata\roaming\tencent\剑灵\7aa487d7eed5b7d8c829d33144690a0c\teniodl\teniodl.exe =>Adware.TencentAddressBar
O87 - FAEL: "{187DE616-C80A-4039-8305-125554C44DB9}" | In - Private - P6 - TRUE | .(.Tencent - QT语音.) -- C:\Program Files\腾讯游戏\剑灵_腾讯\bin\Cross\Apps\CQS\QTalk\Bin\miniQTalk.exe =>Adware.TencentAddressBar
O87 - FAEL: "{34ABF82A-D667-419F-8AD5-951A52A04FDB}" | In - Private - P17 - TRUE | .(.Tencent - QT语音.) -- C:\Program Files\腾讯游戏\剑灵_腾讯\bin\Cross\Apps\CQS\QTalk\Bin\miniQTalk.exe =>Adware.TencentAddressBar
O87 - FAEL: "{77036F2F-9CEF-4F38-ACF9-221AB846363E}" | In - Public - P6 - TRUE | .(.Tencent - QT语音.) -- C:\Program Files\腾讯游戏\剑灵_腾讯\bin\Cross\Apps\CQS\QTalk\Bin\miniQTalk.exe =>Adware.TencentAddressBar
O87 - FAEL: "{BDA15694-BA94-4010-B654-518F1F6072E5}" | In - Public - P17 - TRUE | .(.Tencent - QT语音.) -- C:\Program Files\腾讯游戏\剑灵_腾讯\bin\Cross\Apps\CQS\QTalk\Bin\miniQTalk.exe =>Adware.TencentAddressBar
O87 - FAEL: "{4A940043-CA9D-42C7-A992-2FB547E282DC}" | In - None - P17 - TRUE | .(.Tencent - 腾讯高速下载引擎.) -- C:\program files (x86)\common files\tencent\qqdownload\125\tencentdl.exe =>Adware.TencentAddressBar
O87 - FAEL: "{37F3CAF0-151D-4EE6-87C6-E88D0D708E6C}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-安装引导.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCmgrInstallGuide.exe =>Adware.TencentAddressBar
O87 - FAEL: "{8471319D-109C-4F5E-8305-ED9ED77743EB}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCTray.exe =>Adware.TencentAddressBar
O87 - FAEL: "{A2B6B82C-C872-4B7C-A808-9A61406372D5}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCMgr.exe =>Adware.TencentAddressBar
O87 - FAEL: "{54E75E0C-6A77-41D7-B2A9-F160B5C1D581}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-实时防护服务.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCRTP.exe =>Adware.TencentAddressBar
O87 - FAEL: "{F18A05F3-994D-47E6-8E39-AFB8DAA73DAC}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-crash上报.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\bugreport.exe =>Adware.TencentAddressBar
O87 - FAEL: "{A3532D72-7EBC-491C-BBAC-1409DD3DC0DB}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-未知文件打开.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCFileOpen.exe =>Adware.TencentAddressBar
O87 - FAEL: "{2CB63C36-72C4-4091-8579-2E0DB390DF9E}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-漏洞扫描.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCLeakScan.exe =>Adware.TencentAddressBar
O87 - FAEL: "{4A289F47-6392-467B-A441-0784A812A162}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-启动程序.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCLoader.exe =>Adware.TencentAddressBar
O87 - FAEL: "{B5E08E69-FF96-461D-A4D2-F7BB4A41A091}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-设置中心.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPConfig.exe =>Adware.TencentAddressBar
O87 - FAEL: "{C54B90D4-D7A7-4AB6-89B6-B9FFAACCB5F2}" | In - None - P17 - TRUE | .(.Tencent - 软件管理.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCSoftMgr.exe =>Adware.TencentAddressBar
O87 - FAEL: "{58EEA631-BDAD-4EF7-BD62-F3D3F73F7AE1}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-网络流量监控.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\plugins\QMNetMon\QQPCNetFlow.exe =>Adware.TencentAddressBar
O87 - FAEL: "{15B8EB50-A689-4E4E-9C62-15C1F2E299D5}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-日志上传.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCBTU.exe =>Adware.TencentAddressBar
O87 - FAEL: "{2B586174-C6C1-4A0D-A85A-F1BB90A2E813}" | In - None - P17 - TRUE | .(.Tencent - 电脑诊所.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCClinic.exe =>Adware.TencentAddressBar
O87 - FAEL: "{A628E62B-B8CB-464C-B292-89991F55DBB2}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-自升级程序.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QMUpdate\QQPCMgrUpdate.exe =>Adware.TencentAddressBar
O87 - FAEL: "{85117015-E379-405B-BF82-4122FEB3E2E8}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-系统优化.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCSysOptimize.exe =>Adware.TencentAddressBar
O87 - FAEL: "{7357A389-9A2A-4335-9E47-2E20D8CFE47A}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-杀毒.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCUpdateAVLib.exe =>Adware.TencentAddressBar
O87 - FAEL: "{F66F45E2-3189-419B-BC59-923A700408BF}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-修复器.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQRepair.exe =>Adware.TencentAddressBar
O87 - FAEL: "{AB49BA39-4FF9-4344-B93B-8239FA852045}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-卸载程序.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\Uninst.exe =>Adware.TencentAddressBar
O87 - FAEL: "{F479880A-3C8D-4519-801F-88E1A8EF9138}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-模块升级.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCPatch.exe =>Adware.TencentAddressBar
O87 - FAEL: "{6AE5D4F4-86CC-4C54-AE4A-4A1A28C52D87}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-反病毒引擎升级程序.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\TpkUpdate.exe =>Adware.TencentAddressBar
O87 - FAEL: "{632DABF0-A9A6-45D3-AE25-F6B6DD48F745}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-下载中心.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QMDL.exe =>Adware.TencentAddressBar
O87 - FAEL: "{FF45AB15-BB30-4C9B-8692-CBF13BE5949C}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-下载中心.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QMDL.exe =>Adware.TencentAddressBar
O87 - FAEL: "{C5A3E631-9D5B-432C-B7DD-E46C198664B0}" | In - None - P17 - TRUE | .(.Tencent - 电脑管家-帐号宝.) -- C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QMAccountProtection.exe =>Adware.TencentAddressBar
~ Firewall: 32 Legitimates Filtered in 00mn 00s
---\\ Windows Installer Scan (WIS) (O93) (NTFS)
[MD5.4B351DDF411116C847E67648A02FE68D] [WIS][08/04/2014] (.KalityWeb - WebAdSystem.) -- C:\Windows\Installer\2cbde02.msi [1126400] =>Adware.WebAdSystem
~ WIS: 1 Legitimates Filtered in 00mn 00s
---\\ Search Tracing Registry Key (O100)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASAPI32 =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock BSetup_RASMANCS =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASAPI32 =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Bubble Dock_RASMANCS =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\HulaTooSetup_RASAPI32 =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\HulaTooSetup_RASMANCS =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\HulaToo_RASAPI32 =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\HulaToo_RASMANCS =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\HulaToo_Setup_RASAPI32 =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\HulaToo_Setup_RASMANCS =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentUninstall_RASAPI32 =>Adware.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\IminentUninstall_RASMANCS =>Adware.IMBooster
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASAPI32 =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Install_BubbleDock_RASMANCS =>PUP.BubbleDock
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\mconduitinstaller_RASAPI32 =>Adware.Bloson
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\mconduitinstaller_RASMANCS =>Adware.Bloson
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PCSpeedMaximizer_RASAPI32 =>Rogue.PCSpeedMaximizer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\PCSpeedMaximizer_RASMANCS =>Rogue.PCSpeedMaximizer
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\tencentdl_RASAPI32 =>Adware.TencentAddressBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\tencentdl_RASMANCS =>Adware.TencentAddressBar
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateHulaToo_RASAPI32 =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\updateHulaToo_RASMANCS =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilHulaToo_RASAPI32 =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utilHulaToo_RASMANCS =>PUP.HulaToo
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utorrent (1)_RASAPI32 =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\utorrent (1)_RASMANCS =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASAPI32 =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\uTorrent_RASMANCS =>P2P.µTorrent
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamInternetEnhancerService_RASAPI32 =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamInternetEnhancerService_RASMANCS =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamInternetEnhancer_RASAPI32 =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WajamInternetEnhancer_RASMANCS =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\wajam_download_RASAPI32 =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\wajam_download_RASMANCS =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\wajam_install_RASAPI32 =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\wajam_install_RASMANCS =>PUP.Wajam
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebAdSystemHttpProxy_RASAPI32 =>Adware.WebAdSystem
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebAdSystemHttpProxy_RASMANCS =>Adware.WebAdSystem
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebAdSystem_RASAPI32 =>Adware.WebAdSystem
HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\WebAdSystem_RASMANCS =>Adware.WebAdSystem
~ BTK: 393 Legitimates Filtered in 00mn 00s
---\\ General States of Services not Microsoft (EGS) (SR=Running, SS=Stopped)
SS - | Demand 08/07/2014 262320 | (AdobeFlashPlayerUpdateSvc) . (.Adobe Systems Incorporated.) - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
SS - | Demand 06/04/2010 31272 | (AppleChargerSrv) . (...) - C:\Windows\System32\AppleChargerSrv.exe
SS - | Disabled 21/11/2013 77632 | (BdDesktopParental) . (.Bitdefender.) - C:\Program Files\Bitdefender\Bitdefender\bdparentalservice.exe
SS - | Auto 20/01/2014 402192 | (BstHdAndroidSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-Service.exe
SS - | Demand 26/04/2012 2438696 | (CGVPNCliSrvc) . (.mobile concepts GmbH.) - C:\Program Files\CyberGhost VPN\CGVPNCliService.exe
SS - | Demand 08/03/2014 131912 | (Desura Install Service) . (.Desura Pty Ltd.) - C:\Program Files (x86)\Common Files\Desura\desura_service.exe
SS - | Demand 09/01/2014 520416 | (Futuremark SystemInfo Service) . (.Futuremark.) - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe
SS - | Auto 08/01/2014 116648 | (gupdate) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 08/01/2014 116648 | (gupdatem) . (.Google Inc..) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
SS - | Demand 08/01/2014 194032 | (gusvc) . (.Google.) - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
SS - | Auto 21/07/2014 2544976 | (Hamachi2Svc) . (.LogMeIn Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
SS - | Demand 13/02/2013 820184 | (Intel(R) Capability Licensing Service TCP IP Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe
SS - | Demand 09/04/2014 289256 | (McComponentHostService) . (.McAfee, Inc..) - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
SS - | Demand 29/06/2014 119408 | (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
SS - | Demand 06/08/2014 977184 | (OverwolfUpdater) . (.Overwolf LTD.) - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe
SS - | Auto 21/11/2013 4263936 | (RzMaelstromVADStreamingService) . (.A-Volute.) - C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe
SS - | Auto 23/10/2013 172192 | (SkypeUpdate) . (.Skype Technologies.) - C:\Program Files (x86)\Skype\Updater\Updater.exe
SS - | Demand 04/02/2013 155824 | (Sony PC Companion) . (.Avanquest Software.) - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
SS - | Auto 06/05/2014 76800 | (SpotfluxConnectionManager) . (.Microsoft.) - C:\Program Files (x86)\Spotflux\services\SpotfluxConnectionManager.exe
SS - | Demand 13/08/2014 833728 | (Steam Client Service) . (.Valve Corporation.) - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
SS - | Auto 31/03/2014 350528 | (TBSrv) . (...) - C:\Program Files (x86)\Tbccint\ToolbarService\ToolbarService.exe =>Toolbar.Conduit
SS - | Auto 18/08/2014 323352 | (Update HulaToo) . (...) - C:\Program Files (x86)\HulaToo\updateHulaToo.exe =>PUP.HulaToo
SS - | Auto 18/08/2014 323352 | (Util HulaToo) . (...) - C:\Program Files (x86)\HulaToo\bin\utilHulaToo.exe =>PUP.HulaToo
SS - | Demand 14/07/2009 27136 | C:\Program Files (x86)\Windows Defender\mpsvc.dll (WinDefend) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
SS - | Demand 10/07/1658 0 | (WMPNetworkSvc) . (...) - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe =>.Microsoft Corporation
SR - | Auto 20/01/2014 385808 | (BstHdLogRotatorSvc) . (.BlueStack Systems, Inc..) - C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
SR - | Auto 24/02/2012 1094656 | (DFServ) . (.Faronics Corporation.) - C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\DFServ.exe
SR - | Auto 29/01/2014 663056 | (EslWireHelper) . (...) - C:\Program Files\EslWire\service\WireHelperSvc.exe
SR - | Auto 31/01/2013 15344 | (IAStorDataMgrSvc) . (.Intel Corporation.) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
SR - | Auto 13/02/2013 731648 | (Intel(R) Capability Licensing Service Interface) . (.Intel(R) Corporation.) - C:\Program Files\Intel\iCLS Client\HeciServer.exe
SR - | Auto 12/03/2013 169432 | (jhi_service) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
SR - | Auto 16/07/2014 377616 | (LMIGuardianSvc) . (.LogMeIn, Inc..) - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
SR - | Auto 12/03/2013 366552 | (LMS) . (.Intel Corporation.) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
SR - | Auto 25/07/2014 1720608 | (NvNetworkService) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
SR - | Auto 25/07/2014 18956064 | (NvStreamSvc) . (.NVIDIA Corporation.) - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
SR - | Auto 04/03/2014 922968 | (nvsvc) . (.NVIDIA Corporation.) - C:\Windows\system32\nvvsvc.exe
SR - | Auto 08/04/2013 1320496 | (PDF Architect Helper Service) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect\HelperService.exe
SR - | Auto 08/04/2013 799280 | (PDF Architect Service) . (.pdfforge GmbH.) - C:\Program Files (x86)\PDF Architect\ConversionService.exe
SR - | Auto 10/07/1658 0 | (PnkBstrA) . (...) - C:\Windows\system32\PnkBstrA.exe
SR - | Auto 07/08/2014 829088 | (QQPCRTP) . (.Tencent.) - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\QQPCRTP.exe =>Adware.TencentAddressBar
SR - | Auto 22/11/2013 105448 | (RzKLService) . (.Razer Inc..) - C:\Program Files (x86)\Razer\Razer Game Booster\RzKLService.exe
SR - | Auto 29/05/2014 174088 | (SbieSvc) . (.Sandboxie Holdings, LLC.) - C:\Program Files\Sandboxie\SbieSvc.exe
SR - | Auto 06/05/2014 20992 | (SpotfluxUpdateService) . (.Microsoft.) - C:\Program Files (x86)\Spotflux\services\SpotfluxUpdateService.exe
SR - | Auto 04/03/2014 411936 | (Stereo Service) . (.NVIDIA Corporation.) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
SR - | Demand 07/08/2014 495672 | (TAOFrame) . (.Tencent Technology(Shenzhen) Company Limite.) - C:\Program Files\腾讯游戏\QQPCMgr\8.11.11347.801\TAOFrame.exe =>Adware.TencentAddressBar
SR - | Auto 02/04/2014 4972864 | (TeamViewer9) . (.TeamViewer GmbH.) - C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
SR - | Auto 07/10/2013 67320 | (UPDATESRV) . (.Bitdefender.) - C:\Program Files\Bitdefender\Bitdefender\updatesrv.exe
SR - | Auto 13/04/2014 1523728 | (VSSERV) . (.Bitdefender.) - C:\Program Files\Bitdefender\Bitdefender\vsserv.exe
SR - | Auto 13/01/2014 627992 | (WTabletServiceCon) . (.Wacom Technology, Corp..) - C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
SR - | Auto 21/04/2014 635160 | (WTabletServicePro) . (.Wacom Technology, Corp..) - C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
SR - | Auto 14/07/2009 27136 | C:\Windows\System32\wuaueng.dll (wuauserv) . (.Microsoft Corporation.) - C:\Windows\System32\svchost.exe
~ Services: Scanned in 00mn 04s
---\\ Scan Additionnel (O88)
Database Version : 13026 - (23/08/2014)
Clés trouvées (Keys found) : 30
Valeurs trouvées (Values found) : 7
Dossiers trouvés (Folders found) : 14
Fichiers trouvés (Files found) : 14
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AB65CAF0-FC3B-40F8-8B88-6D096A48F659}] =>PUP.HulaToo^
[HKLM\SYSTEM\CurrentControlSet\Services\QQPCRTP] =>Adware.TencentAddressBar^
[HKLM\SYSTEM\CurrentControlSet\Services\TBSrv] =>Toolbar.Conduit^
[HKLM\SYSTEM\CurrentControlSet\Services\Update HulaToo] =>PUP.HulaToo^
[HKLM\SYSTEM\CurrentControlSet\Services\Util HulaToo] =>PUP.HulaToo^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HulaToo] =>PUP.HulaToo^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AF59773E-3245-46A3-B418-DD84AB6C3C50}] =>Adware.WebAdSystem^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{d8d2dd71-6eef-437b-9507-7400e210074a}] =>Adware.WebAdSystem^
[HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\剑灵_腾讯] =>Adware.TencentAddressBar^
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}] =>Adware.IMBooster
[HKLM\Software\Classes\protector_dll.protectorbho.1] =>PUP.BProtector
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] =>Adware.IMBooster
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}] =>Adware.IMBooster
[HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}] =>Adware.IMBooster
[HKLM\Software\Classes\protector_dll.protectorbho] =>PUP.BProtector
[HKCU\Software\APN PIP] =>Toolbar.Ask
[HKCU\Software\AppDataLow\Software\ConduitSearchScopes] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Iminent] =>Adware.IMBooster
[HKCU\Software\KalityWeb] =>Toolbar.Agent
[HKLM\Software\Wow6432Node\KalityWeb] =>Toolbar.Agent
[HKCU\Software\AppDataLow\Software\PriceGong] =>Adware.PriceGong
[HKCU\Software\AppDataLow\Toolbar] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}] =>PUP.Software.Updater
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}] =>Toolbar.Agent
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}] =>Toolbar.Agent
[HKLM\Software\Classes\Toolbar.CT3318151] =>Toolbar.Conduit
[HKLM\Software\Classes\Toolbar.CT3328029] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT3318151] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\Toolbar.CT3328029] =>Toolbar.Conduit
[HKLM\Software\Wow6432Node\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}] =>Toolbar.Conduit^
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:uTorrent =>P2P.BitTorrent^
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]:WebAdSystem =>Adware.WebAdSystem^
[HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks]:{84FF7BD6-B47F-46F8-9130-01B2696B36CB} =>Adware.IMBooster
C:\Program Files (x86)\HulaToo =>PUP.HulaToo^
C:\Program Files (x86)\Tbccint =>Toolbar.Conduit^
C:\Program Files (x86)\WebAdSystem =>Adware.WebAdSystem^
C:\Program Files (x86)\Common Files\Tencent =>Adware.TencentAddressBar^
C:\ProgramData\Tbccint =>Toolbar.Conduit^
C:\ProgramData\Tencent =>Adware.TencentAddressBar^
C:\Users\Killyan\AppData\Roaming\Tencent =>Adware.TencentAddressBar^
C:\Users\Killyan\AppData\Local\KalityWeb =>Adware.WebAdSystem^
C:\Users\Killyan\AppData\Local\Tbccint =>Toolbar.Conduit^
C:\Program Files (x86)\Conduit =>Toolbar.Conduit
C:\ProgramData\Conduit =>Toolbar.Conduit
C:\Users\Killyan\AppData\Local\Conduit =>Toolbar.Conduit
C:\Users\Killyan\AppData\LocalLow\Conduit =>Toolbar.Conduit
C:\Users\Killyan\AppData\LocalLow\PriceGong =>Adware.PriceGong
C:\Program Files (x86)\PC Speed Maximizer\SPMSmartScan.exe =>Rogue.PCSpeedMaximizer^
C:\Program Files (x86)\WebAdSystem\WebAdSystem.exe =>Adware.WebAdSystem^
C:\Program Files (x86)\WebAdSystem\WebAdSystemHttpProxy.exe =>Adware.WebAdSystem^
C:\Program Files (x86)\PC Speed Maximizer\PCSpeedMaximizer.exe =>Rogue.PCSpeedMaximizer^
C:\Windows\Tasks\AmiUpdXp.job =>PUP.Software.Updater^
C:\Windows\System32\Tasks\AmiUpdXp =>PUP.Software.Updater^
[HKCU\Software\HulaToo] =>PUP.HulaToo^
[HKCU\Software\Tbccint] =>Toolbar.Conduit^
[HKCU\Software\Tbccint_HKLM] =>Toolbar.Conduit^
[HKCU\Software\Tencent] =>Adware.TencentAddressBar^
[HKLM\Software\Wow6432Node\Conduit] =>Toolbar.Conduit^
[HKLM\Software\Wow6432Node\HulaToo] =>PUP.HulaToo^
[HKLM\Software\Wow6432Node\Tencent] =>Adware.TencentAddressBar^
C:\Windows\Installer\2cbde02.msi =>Adware.WebAdSystem^
~ Additionnel Scan: 634702 Items scanned in 00mn 18s
---\\ Additional information about modules
~ http://nicolascoolman.fr/r5-internet-explorer-proxy-management-iepm/ =>.Internet Explorer, Proxy Management (R5)
~ http://nicolascoolman.fr/o2-browser-helper-objects-de-navigateur/ =>.Browser Helper Objects (O2)
~ http://nicolascoolman.fr/o3-internet-explorer-toolbars/ =>.Internet Explorer toolbars (O3)
~ http://nicolascoolman.fr/o4-applications-demarrees-par-le-registre/ =>.Auto loading programs from Registry and folders (O4)
~ http://nicolascoolman.fr/o51-mountpoints2-shell-key-mpsk/ =>.MountPoints2 Shell Key (MPKS) (O51)
~ AMI: 5 Legitimates Filtered in 00mn 00s
---\\ Summary of the detections found on your workstation
http://nicolascoolman.fr/rogue-pcspeedmaximizer =>Rogue.PCSpeedMaximizer
http://nicolascoolman.fr/adware-webadsystem =>Adware.WebAdSystem
http://nicolascoolman.fr/pup-hulatoo =>PUP.HulaToo
http://nicolascoolman.fr/adware-tencentaddressbar =>Adware.TencentAddressBar
http://nicolascoolman.fr/pup-babylon =>PUP.Babylon
http://nicolascoolman.fr/toolbar-conduit =>Toolbar.Conduit
http://nicolascoolman.fr/pup-software-updater =>PUP.Software.Updater
http://nicolascoolman.fr/adware-imbooster =>Adware.IMBooster
http://nicolascoolman.fr/hijacker-trovicom =>Hijacker.TroviCom
http://nicolascoolman.fr/pup-bubbledock =>PUP.BubbleDock
http://nicolascoolman.fr/adware-bloson =>Adware.Bloson
http://nicolascoolman.fr/pup-wajam =>PUP.Wajam
http://nicolascoolman.fr/pup-bprotector =>PUP.BProtector
http://nicolascoolman.fr/toolbar-ask =>Toolbar.Ask
http://nicolascoolman.fr/adware-pricegong =>Adware.PriceGong
~ MSI: 15 link(s) detected in 00mn 00s
~ 1396 Legitimates filtered by white list
End of the scan (861 lines in 00mn 42s)(0)