Publicité
Publicité
Format du document : text/plain
Prévisualisation
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Audrey (administrator) on AUDREY-PC on 12-08-2014 10:32:55
Running from C:\Users\Audrey\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Français (France)
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
() C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock\ArchiveSoftwareWinsock.exe
(Canal+ Active) C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Acer) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
() C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock\FinderMacroSnapshot.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
() C:\Program Files (x86)\Remote Mouse Server\RemoteMouse.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
(Chicony) C:\Program Files (x86)\Video Web Camera\traybar.exe
(Lime Wire, LLC) C:\Program Files (x86)\LimeWire\LimeWire.exe
() C:\Program Files (x86)\Remote Mouse Server\RemoteMouse.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe
(Chicony) C:\Program Files (x86)\Video Web Camera\CEC_MAIN.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\CANALPLUS-CANALSAT-ALADEMANDE.exe~RF2b52b.TMP
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Canal+ Distribution) C:\Program Files (x86)\Lecteur CANALPLAY\CanalPlayService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avpui.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Farbar) C:\Users\Audrey\Downloads\FRST64(1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [503864 2009-07-21] (Conexant Systems, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [295936 2009-05-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [828960 2009-08-05] (Acer Incorporated)
HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [262912 2009-08-21] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Camera Assistant Software] => C:\Program Files (x86)\Video Web Camera\traybar.exe [630784 2008-12-10] (Chicony)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1194504 2009-08-27] (Dritek System Inc.)
HKLM-x32\...\Run: [RemoteControl8] => c:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-16] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696 2011-04-08] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [CANAL+ CANALSAT A LA DEMANDE] => C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe [163536 2014-08-12] (Canal+)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CanalPlayer] => C:\Program Files (x86)\Lecteur CANALPLAY\CanalPlayer.exe [2259344 2012-03-06] (Canal+ Distribution)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\MountPoints2: {3554fafb-1ae9-11df-b253-00262d61db87} - E:\USBAutoRun.exe
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\MountPoints2: {e50ff4c8-1e3b-11df-b108-00262d61db87} - E:\VMC_PBStarter.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Remote Mouse Server.lnk
ShortcutTarget: Remote Mouse Server.lnk -> C:\Program Files (x86)\Remote Mouse Server\RemoteMouse.exe ()
Startup: C:\Users\Audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\genesis.lnk
Startup: C:\Users\Audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk
ShortcutTarget: LimeWire On Startup.lnk -> C:\Program Files (x86)\LimeWire\LimeWire.exe (Lime Wire, LLC)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:32239
URLSearchHook: HKLM-x32 - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_frFR363
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Download Manager Browser Helper Object -> {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} -> C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\XEBDLHelper.dll (Protect Software GmbH)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - No Name - !{A29B2641-9931-448A-8DE7-B2D63BDC1812} - No File
Toolbar: HKLM - No Name - !{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1} - No File
Toolbar: HKLM - No Name - !{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File
Toolbar: HKLM-x32 - No Name - !{A29B2641-9931-448A-8DE7-B2D63BDC1812} - No File
Toolbar: HKLM-x32 - No Name - !{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1} - No File
Toolbar: HKLM-x32 - No Name - !{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @canalplay.com/CanalPlay -> C:\Program Files (x86)\Lecteur CANALPLAY\npcplay.dll (Canal+ Distribution)
FF Plugin-x32: @canalplus.fr/Assistants VOD,version=1.0.0.0 -> C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll (Canal+ Active)
FF Plugin-x32: @fluxdvd.com/NPAPIX -> C:\Program Files (x86)\Common Files\fluxDVD\APIX\NPAPIX.dll ()
FF Plugin-x32: @fluxdvd.com/NPFluxBrowserHelper -> C:\Program Files (x86)\Common Files\fluxDVD\BrowserIntegration\NPFluxBrowserHelper.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM -> C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ()
FF Plugin-x32: @protectdisc.com/NPWMDRMWrapper -> C:\Program Files (x86)\Common Files\mpDRM\NPWMDRMWrapper.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @facebook.com/FBPlugin,version=1.0.3 -> C:\Users\Audrey\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPAPIX.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPFluxBrowserHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPMPDRM.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPWMDRMWrapper.dll ()
FF SearchPlugin: C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\searchplugins\sweetim.xml
FF SearchPlugin: C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\searchplugins\Sweetpacks Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-france.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-france.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-france.xml
FF Extension: Plus-HD-3.5 - C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\Extensions\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com [2013-11-20]
FF Extension: No Name - C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\Extensions\ffxtlbr@babylon.com [2013-06-02]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2013-11-20]
FF Extension: Analyse des liens (URL Advisor) - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-08-10]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-03-08]
FF HKLM-x32\...\Firefox\Extensions: [{400F0BDB-6C49-43A4-BE1F-76D7327A604D}] - C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\Mozilla
FF Extension: fluxDVD Download Manager - C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\Mozilla [2012-09-28]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-03-18]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Module de blocage des sites Internet dangereux - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com [2014-08-10]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Clavier virtuel - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-08-10]
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\url_advisor@kaspersky.com [2014-08-10]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [lrcfan@fansoft.br] - C:\Program Files (x86)\LyricsFan\FF
FF HKCU\...\Firefox\Extensions: [{5A5AF58C-52C8-CCB6-C1D7-158CA5E1F64D}] - C:\Program Files (x86)\-BlockAndSurfS\174.xpi
FF HKCU\...\Firefox\Extensions: [{4C842449-468F-EBE0-C048-234CDBC616EC}] - C:\Program Files (x86)\v01BlockAndSurf\174.xpi
Chrome:
=======
CHR RestoreOnStartup: "hxxp://www.google.fr"
CHR StartupUrls: "hxxp://www.google.fr"
CHR NewTab: "chrome-extension://pflphaooapbgpeakohlggbpidpppgdff/content/newtab/newtab.html"
CHR DefaultSearchProvider: Yahoo! Search
CHR DefaultSearchURL: http://www.google.fr/?q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft00C200AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Active Process Information eXchange) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPAPIX.dll ()
CHR Plugin: (fluxDVD) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPFluxBrowserHelper.dll ()
CHR Plugin: (NPMPDRM License Acquisition Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPMPDRM.dll ()
CHR Plugin: (WMMPDRM License Acquisition Wrapper) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPWMDRMWrapper.dll ()
CHR Plugin: (Canal+ Assistants VOD) - C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll (Canal+ Active)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (CanalPlus Utilitaires CanalPlay) - C:\Program Files (x86)\Lecteur CANALPLAY\npcplay.dll (Canal+ Distribution)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live00C200AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Facebook Plugin) - C:\Users\Audrey\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (BlockAndSurf) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmkjneookggmljgfilgemfeefneiibdi [2014-07-08]
CHR Extension: (Analyse des liens (URL Advisor)) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-06-15]
CHR Extension: (suurfkeepit) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\fediheciachmpdophdiejahcjjjgkbif [2014-05-26]
CHR Extension: (BlockAndSurf) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\gooamedlnddjgokhlnkgohghifdcnplp [2014-06-24]
CHR Extension: (Clavier virtuel) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-06-15]
CHR Extension: (TiCToaCuOupOOn) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljgeaegabficmaccmdbfffoennakbiha [2014-06-03]
CHR Extension: (Cleaner Facebook) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnofjfijelilpjdibjjmldcpdenmbfh [2014-06-09]
CHR Extension: (No Name) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfeonecgpoepapkmdgdmjolonaakdknd [2013-06-15]
CHR Extension: (Google Wallet) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (LuCCkyoCCouupoNN) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pinnimcikdbhhfcgdmcdcbingagfgelm [2014-06-04]
CHR Extension: (Kaspersky Anti-banni00C300A8re) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-06-15]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2013-06-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ArchiveSoftwareWinsock.exe; C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock\ArchiveSoftwareWinsock.exe [98340 2014-07-24] () [File not signed]
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 CanalPlus.VOD; C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [188416 2010-07-06] (Canal+ Active) [File not signed]
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [844320 2009-08-05] (Acer Incorporated)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2009-11-03] (Macrovision Europe Ltd.) [File not signed]
R2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-06-04] (Acer Incorporated)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [62720 2009-08-21] (NewTech Infosystems, Inc.)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R3 Service CANALPLAY; C:\Program Files (x86)\Lecteur CANALPLAY\CanalPlayService.exe [932240 2012-03-06] (Canal+ Distribution)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [240160 2009-07-04] (Acer)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [140384 2014-04-18] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [792160 2014-04-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
S3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
R4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S3 RgFltX64; \??\C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock\RgFltX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-12 10:32 - 2014-08-12 10:32 - 02099712 _____ (Farbar) C:\Users\Audrey\Downloads\FRST64(1).exe
2014-08-11 21:45 - 2014-08-11 21:45 - 00045360 _____ () C:\Users\Audrey\Downloads\Addition.txt
2014-08-11 21:43 - 2014-08-12 10:32 - 00030762 _____ () C:\Users\Audrey\Downloads\FRST.txt
2014-08-11 21:43 - 2014-08-12 10:32 - 00000000 ____D () C:\FRST
2014-08-11 21:43 - 2014-08-11 21:43 - 02099712 _____ (Farbar) C:\Users\Audrey\Downloads\FRST64.exe
2014-08-11 09:38 - 2014-08-11 09:38 - 00115096 _____ () C:\Users\Audrey\Desktop\ZHPDiag.txt
2014-08-11 09:28 - 2014-08-11 09:28 - 01057696 _____ () C:\Users\Audrey\Downloads\SFTGC.exe
2014-08-10 20:39 - 2014-08-10 20:39 - 01224192 _____ () C:\Users\Audrey\Downloads\ZHPCleaner.exe
2014-08-10 19:37 - 2014-08-10 19:37 - 00001157 _____ () C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2014-08-10 19:37 - 2014-08-10 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2014-08-10 19:37 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-08-10 19:36 - 2014-08-10 19:36 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-08-10 19:36 - 2014-08-10 19:36 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-08-10 19:36 - 2014-04-18 16:35 - 00792160 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-08-10 19:36 - 2014-04-18 16:35 - 00140384 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-08-10 19:36 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-08-10 19:32 - 2014-08-10 19:35 - 169273968 _____ (Kaspersky Lab) C:\Users\Audrey\Downloads\kav15.0.0.463fr-fr.exe
2014-08-10 10:10 - 2014-08-10 11:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-10 10:09 - 2014-08-10 10:09 - 00001114 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-10 10:09 - 2014-08-10 10:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-10 10:09 - 2014-08-10 10:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-10 10:09 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-10 10:09 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-10 10:09 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-10 10:08 - 2014-08-10 10:09 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Audrey\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-10 09:46 - 2014-08-10 09:46 - 00000000 ____D () C:\Windows\ERUNT
2014-08-10 09:43 - 2014-08-10 09:43 - 01016261 _____ (Thisisu) C:\Users\Audrey\Downloads\JRT.exe
2014-08-10 09:10 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-10 09:08 - 2014-08-10 09:34 - 00000000 ____D () C:\AdwCleaner
2014-08-10 09:08 - 2014-08-10 09:08 - 01366203 _____ () C:\Users\Audrey\Downloads\adwcleaner_3.304.exe
2014-08-10 09:06 - 2014-08-10 09:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-07 23:36 - 2014-08-11 09:38 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2014-08-07 23:30 - 2014-08-11 09:37 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\ZHP
2014-08-07 23:30 - 2014-08-07 23:30 - 00001999 _____ () C:\Users\Audrey\Desktop\ZHPFix.lnk
2014-08-07 23:30 - 2014-08-07 23:30 - 00001872 _____ () C:\Users\Audrey\Desktop\ZHPDiag.lnk
2014-08-07 23:30 - 2014-08-07 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2014-08-07 23:30 - 2014-08-07 23:30 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2014-08-07 23:29 - 2014-08-07 23:29 - 06854876 _____ (Nicolas Coolman ) C:\Users\Audrey\Downloads\ZHPDiag2.exe
2014-08-07 23:22 - 2014-08-07 23:22 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-07 23:21 - 2014-08-07 23:21 - 04862664 _____ (AVAST Software) C:\Users\Audrey\Downloads\avast_free_antivirus_setup_online.exe
2014-08-03 13:51 - 2014-08-06 20:40 - 00001103 _____ () C:\Users\Audrey\Desktop\Continue Live Installation.lnk
2014-07-24 21:02 - 2014-07-24 21:02 - 00000000 ____D () C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-12 10:33 - 2014-08-11 21:43 - 00030762 _____ () C:\Users\Audrey\Downloads\FRST.txt
2014-08-12 10:32 - 2014-08-12 10:32 - 02099712 _____ (Farbar) C:\Users\Audrey\Downloads\FRST64(1).exe
2014-08-12 10:32 - 2014-08-11 21:43 - 00000000 ____D () C:\FRST
2014-08-12 10:27 - 2014-05-14 13:59 - 00029769 _____ () C:\Windows\setupact.log
2014-08-12 10:27 - 2010-04-05 11:08 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-12 10:27 - 2009-11-03 06:06 - 01119400 _____ () C:\Windows\WindowsUpdate.log
2014-08-12 10:26 - 2013-11-20 20:07 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\Skype
2014-08-11 21:45 - 2014-08-11 21:45 - 00045360 _____ () C:\Users\Audrey\Downloads\Addition.txt
2014-08-11 21:43 - 2014-08-11 21:43 - 02099712 _____ (Farbar) C:\Users\Audrey\Downloads\FRST64.exe
2014-08-11 09:42 - 2009-07-14 06:45 - 00025840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-11 09:42 - 2009-07-14 06:45 - 00025840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-11 09:38 - 2014-08-11 09:38 - 00115096 _____ () C:\Users\Audrey\Desktop\ZHPDiag.txt
2014-08-11 09:38 - 2014-08-07 23:36 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2014-08-11 09:37 - 2014-08-07 23:30 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\ZHP
2014-08-11 09:28 - 2014-08-11 09:28 - 01057696 _____ () C:\Users\Audrey\Downloads\SFTGC.exe
2014-08-11 07:39 - 2011-07-11 11:25 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-08-10 20:58 - 2011-03-14 19:07 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-10 20:47 - 2014-05-26 06:33 - 00000000 ____D () C:\ProgramData\8381b5be430a9343
2014-08-10 20:39 - 2014-08-10 20:39 - 01224192 _____ () C:\Users\Audrey\Downloads\ZHPCleaner.exe
2014-08-10 19:37 - 2014-08-10 19:37 - 00001157 _____ () C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2014-08-10 19:37 - 2014-08-10 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2014-08-10 19:36 - 2014-08-10 19:36 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-08-10 19:36 - 2014-08-10 19:36 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-08-10 19:35 - 2014-08-10 19:32 - 169273968 _____ (Kaspersky Lab) C:\Users\Audrey\Downloads\kav15.0.0.463fr-fr.exe
2014-08-10 11:01 - 2014-08-10 10:10 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-10 10:35 - 2012-07-04 10:44 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\LimeWire
2014-08-10 10:31 - 2014-06-10 10:10 - 00058488 _____ () C:\Windows\PFRO.log
2014-08-10 10:31 - 2009-08-16 08:28 - 00000000 ___RD () C:\Windows\DeployWinRE
2014-08-10 10:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-10 10:09 - 2014-08-10 10:09 - 00001114 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-10 10:09 - 2014-08-10 10:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-10 10:09 - 2014-08-10 10:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-10 10:09 - 2014-08-10 10:08 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Audrey\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-10 10:09 - 2012-06-22 11:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-10 09:46 - 2014-08-10 09:46 - 00000000 ____D () C:\Windows\ERUNT
2014-08-10 09:43 - 2014-08-10 09:43 - 01016261 _____ (Thisisu) C:\Users\Audrey\Downloads\JRT.exe
2014-08-10 09:35 - 2014-06-24 13:47 - 00000290 __RSH () C:\ProgramData\ntuser.pol
2014-08-10 09:35 - 2010-01-19 20:17 - 00000000 ____D () C:\Users\Audrey
2014-08-10 09:34 - 2014-08-10 09:08 - 00000000 ____D () C:\AdwCleaner
2014-08-10 09:33 - 2012-03-28 10:33 - 00001073 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-10 09:33 - 2012-03-28 10:33 - 00001061 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-10 09:33 - 2011-07-11 11:12 - 00001296 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-10 09:33 - 2011-07-11 11:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-10 09:33 - 2009-08-16 08:10 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support
2014-08-10 09:33 - 2009-07-14 04:34 - 00000713 _____ () C:\Windows\win.ini
2014-08-10 09:13 - 2012-06-12 08:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-10 09:08 - 2014-08-10 09:08 - 01366203 _____ () C:\Users\Audrey\Downloads\adwcleaner_3.304.exe
2014-08-10 09:06 - 2014-08-10 09:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-08 15:55 - 2013-09-30 18:16 - 00000000 ____D () C:\Users\Audrey\Desktop\Audrey
2014-08-08 12:03 - 2014-06-19 23:54 - 00000000 ____D () C:\Users\Audrey\AppData\Local\Adobe
2014-08-08 11:57 - 2010-01-19 20:20 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\Adobe
2014-08-07 23:30 - 2014-08-07 23:30 - 00001999 _____ () C:\Users\Audrey\Desktop\ZHPFix.lnk
2014-08-07 23:30 - 2014-08-07 23:30 - 00001872 _____ () C:\Users\Audrey\Desktop\ZHPDiag.lnk
2014-08-07 23:30 - 2014-08-07 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2014-08-07 23:30 - 2014-08-07 23:30 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2014-08-07 23:29 - 2014-08-07 23:29 - 06854876 _____ (Nicolas Coolman ) C:\Users\Audrey\Downloads\ZHPDiag2.exe
2014-08-07 23:22 - 2014-08-07 23:22 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-07 23:21 - 2014-08-07 23:21 - 04862664 _____ (AVAST Software) C:\Users\Audrey\Downloads\avast_free_antivirus_setup_online.exe
2014-08-06 20:40 - 2014-08-03 13:51 - 00001103 _____ () C:\Users\Audrey\Desktop\Continue Live Installation.lnk
2014-08-03 23:05 - 2014-06-23 20:04 - 00000000 ____D () C:\Windows\SysWOW64\mjcm
2014-08-03 23:05 - 2014-06-23 20:04 - 00000000 ____D () C:\Windows\system32\tprb
2014-07-24 21:02 - 2014-07-24 21:02 - 00000000 ____D () C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock
2014-07-22 16:36 - 2012-05-31 15:53 - 00000000 ____D () C:\Users\Audrey\Music\Documents\lettres motivations et CV 2012
2014-07-22 16:34 - 2009-11-03 14:58 - 00709086 _____ () C:\Windows\system32\perfh00C.dat
2014-07-22 16:34 - 2009-11-03 14:58 - 00133068 _____ () C:\Windows\system32\perfc00C.dat
2014-07-22 16:34 - 2009-07-14 07:13 - 01562690 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-22 15:01 - 2013-11-20 20:00 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-07-22 15:01 - 2013-11-20 20:00 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-07-15 17:58 - 2010-02-09 17:28 - 00000000 ____D () C:\Users\Audrey\Music\Documents\LimeWire
2014-07-15 17:13 - 2011-11-09 17:42 - 00000000 ____D () C:\Users\Audrey\Music\Documents\Musiques Beezik
Some content of TEMP:
====================
C:\Users\Audrey\AppData\Local\Temp\jna5442645695274944734.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-04 19:08
==================== End Of Log ============================
Ran by Audrey (administrator) on AUDREY-PC on 12-08-2014 10:32:55
Running from C:\Users\Audrey\Downloads
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Français (France)
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Photoshop Elements 7.0\PhotoshopElementsFileAgent.exe
() C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock\ArchiveSoftwareWinsock.exe
(Canal+ Active) C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Acer) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTmon.exe
() C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock\FinderMacroSnapshot.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
() C:\Program Files (x86)\Remote Mouse Server\RemoteMouse.exe
(NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe
(Chicony) C:\Program Files (x86)\Video Web Camera\traybar.exe
(Lime Wire, LLC) C:\Program Files (x86)\LimeWire\LimeWire.exe
() C:\Program Files (x86)\Remote Mouse Server\RemoteMouse.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe
(Chicony) C:\Program Files (x86)\Video Web Camera\CEC_MAIN.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Hidfind.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
() C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\CANALPLUS-CANALSAT-ALADEMANDE.exe~RF2b52b.TMP
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Canal+ Distribution) C:\Program Files (x86)\Lecteur CANALPLAY\CanalPlayService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avpui.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_13_0_0_214.exe
(Farbar) C:\Users\Audrey\Downloads\FRST64(1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAAnotif] => C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-05] (Intel Corporation)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [503864 2009-07-21] (Conexant Systems, Inc.)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [295936 2009-05-22] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [828960 2009-08-05] (Acer Incorporated)
HKLM\...\Run: [IntelliPoint] => c:\Program Files\Microsoft IntelliPoint\ipoint.exe [2327952 2010-07-21] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [41056 2013-05-08] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [262912 2009-08-21] (NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Camera Assistant Software] => C:\Program Files (x86)\Video Web Camera\traybar.exe [630784 2008-12-10] (Chicony)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1194504 2009-08-27] (Dritek System Inc.)
HKLM-x32\...\Run: [RemoteControl8] => c:\Program Files (x86)\CyberLink\PowerDVD8\PDVD8Serv.exe [91432 2009-04-16] (CyberLink Corp.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696 2011-04-08] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [CANAL+ CANALSAT A LA DEMANDE] => C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\Launcher.exe [163536 2014-08-12] (Canal+)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49208 2011-05-10] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [CanalPlayer] => C:\Program Files (x86)\Lecteur CANALPLAY\CanalPlayer.exe [2259344 2012-03-06] (Canal+ Distribution)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\MountPoints2: {3554fafb-1ae9-11df-b253-00262d61db87} - E:\USBAutoRun.exe
HKU\S-1-5-21-489699717-112529968-1088025083-1001\...\MountPoints2: {e50ff4c8-1e3b-11df-b108-00262d61db87} - E:\VMC_PBStarter.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Remote Mouse Server.lnk
ShortcutTarget: Remote Mouse Server.lnk -> C:\Program Files (x86)\Remote Mouse Server\RemoteMouse.exe ()
Startup: C:\Users\Audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\genesis.lnk
Startup: C:\Users\Audrey\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\LimeWire On Startup.lnk
ShortcutTarget: LimeWire On Startup.lnk -> C:\Program Files (x86)\LimeWire\LimeWire.exe (Lime Wire, LLC)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=127.0.0.1:32239
URLSearchHook: HKLM-x32 - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKCU - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW_frFR363
BHO: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Download Manager Browser Helper Object -> {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} -> C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\XEBDLHelper.dll (Protect Software GmbH)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Content Blocker Plugin -> {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: No Name -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> No File
BHO-x32: Virtual Keyboard Plugin -> {73455575-E40C-433C-9784-C78DC7761455} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: URL Advisor Plugin -> {E33CF602-D945-461A-83F0-819F76A199F8} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - No Name - !{A29B2641-9931-448A-8DE7-B2D63BDC1812} - No File
Toolbar: HKLM - No Name - !{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1} - No File
Toolbar: HKLM - No Name - !{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File
Toolbar: HKLM-x32 - No Name - !{A29B2641-9931-448A-8DE7-B2D63BDC1812} - No File
Toolbar: HKLM-x32 - No Name - !{CDB982ED-F9D6-4E3B-B94B-96F705D35AD1} - No File
Toolbar: HKLM-x32 - No Name - !{DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - No File
Handler: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\system32\urlmon.dll (Microsoft Corporation)
Handler-x32: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - No File
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @canalplay.com/CanalPlay -> C:\Program Files (x86)\Lecteur CANALPLAY\npcplay.dll (Canal+ Distribution)
FF Plugin-x32: @canalplus.fr/Assistants VOD,version=1.0.0.0 -> C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll (Canal+ Active)
FF Plugin-x32: @fluxdvd.com/NPAPIX -> C:\Program Files (x86)\Common Files\fluxDVD\APIX\NPAPIX.dll ()
FF Plugin-x32: @fluxdvd.com/NPFluxBrowserHelper -> C:\Program Files (x86)\Common Files\fluxDVD\BrowserIntegration\NPFluxBrowserHelper.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin-x32: @kaspersky.com/content_blocker -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @protectdisc.com/NPMPDRM -> C:\Program Files (x86)\Common Files\mpDRM\NPMPDRM.dll ()
FF Plugin-x32: @protectdisc.com/NPWMDRMWrapper -> C:\Program Files (x86)\Common Files\mpDRM\NPWMDRMWrapper.dll ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @facebook.com/FBPlugin,version=1.0.3 -> C:\Users\Audrey\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPAPIX.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPFluxBrowserHelper.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPMPDRM.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPWMDRMWrapper.dll ()
FF SearchPlugin: C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\searchplugins\sweetim.xml
FF SearchPlugin: C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\searchplugins\Sweetpacks Search.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-france.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\cnrtl-tlfi-fr.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-france.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\yahoo-france.xml
FF Extension: Plus-HD-3.5 - C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\Extensions\d8222698-19e5-4827-b79e-0a077ea8eb7a@7b662f6d-3899-41e4-8864-6393447568da.com [2013-11-20]
FF Extension: No Name - C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\Extensions\ffxtlbr@babylon.com [2013-06-02]
FF Extension: SweetPacks Toolbar for Firefox - C:\Users\Audrey\AppData\Roaming\Mozilla\Profiles\9k5k8ilg.Utilisateur par défaut\Extensions\{EEE6C361-6118-11DC-9C72-001320C79847}.xpi [2013-11-20]
FF Extension: Analyse des liens (URL Advisor) - C:\Program Files (x86)\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2 [2014-08-10]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-03-08]
FF HKLM-x32\...\Firefox\Extensions: [{400F0BDB-6C49-43A4-BE1F-76D7327A604D}] - C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\Mozilla
FF Extension: fluxDVD Download Manager - C:\Program Files (x86)\Common Files\fluxDVD\Download Manager\Mozilla [2012-09-28]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-03-18]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com
FF Extension: Module de blocage des sites Internet dangereux - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\content_blocker@kaspersky.com [2014-08-10]
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Clavier virtuel - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\virtual_keyboard@kaspersky.com [2014-08-10]
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\url_advisor@kaspersky.com
FF Extension: URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\FFExt\url_advisor@kaspersky.com [2014-08-10]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKCU\...\Firefox\Extensions: [lrcfan@fansoft.br] - C:\Program Files (x86)\LyricsFan\FF
FF HKCU\...\Firefox\Extensions: [{5A5AF58C-52C8-CCB6-C1D7-158CA5E1F64D}] - C:\Program Files (x86)\-BlockAndSurfS\174.xpi
FF HKCU\...\Firefox\Extensions: [{4C842449-468F-EBE0-C048-234CDBC616EC}] - C:\Program Files (x86)\v01BlockAndSurf\174.xpi
Chrome:
=======
CHR RestoreOnStartup: "hxxp://www.google.fr"
CHR StartupUrls: "hxxp://www.google.fr"
CHR NewTab: "chrome-extension://pflphaooapbgpeakohlggbpidpppgdff/content/newtab/newtab.html"
CHR DefaultSearchProvider: Yahoo! Search
CHR DefaultSearchURL: http://www.google.fr/?q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.114\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.260.3) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U26) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft00C200AE Windows Media Player Firefox Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Active Process Information eXchange) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPAPIX.dll ()
CHR Plugin: (fluxDVD) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPFluxBrowserHelper.dll ()
CHR Plugin: (NPMPDRM License Acquisition Plugin) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPMPDRM.dll ()
CHR Plugin: (WMMPDRM License Acquisition Wrapper) - C:\Program Files (x86)\Mozilla Firefox\plugins\NPWMDRMWrapper.dll ()
CHR Plugin: (Canal+ Assistants VOD) - C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll (Canal+ Active)
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Plugin: (CanalPlus Utilitaires CanalPlay) - C:\Program Files (x86)\Lecteur CANALPLAY\npcplay.dll (Canal+ Distribution)
CHR Plugin: (Microsoft Office Live Plug-in for Firefox) - C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live00C200AE Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll No File
CHR Plugin: (Facebook Plugin) - C:\Users\Audrey\AppData\Roaming\Facebook\npfbplugin_1_0_3.dll ( )
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (BlockAndSurf) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmkjneookggmljgfilgemfeefneiibdi [2014-07-08]
CHR Extension: (Analyse des liens (URL Advisor)) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj [2013-06-15]
CHR Extension: (suurfkeepit) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\fediheciachmpdophdiejahcjjjgkbif [2014-05-26]
CHR Extension: (BlockAndSurf) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\gooamedlnddjgokhlnkgohghifdcnplp [2014-06-24]
CHR Extension: (Clavier virtuel) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh [2013-06-15]
CHR Extension: (TiCToaCuOupOOn) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljgeaegabficmaccmdbfffoennakbiha [2014-06-03]
CHR Extension: (Cleaner Facebook) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\llnofjfijelilpjdibjjmldcpdenmbfh [2014-06-09]
CHR Extension: (No Name) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfeonecgpoepapkmdgdmjolonaakdknd [2013-06-15]
CHR Extension: (Google Wallet) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-31]
CHR Extension: (LuCCkyoCCouupoNN) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pinnimcikdbhhfcgdmcdcbingagfgelm [2014-06-04]
CHR Extension: (Kaspersky Anti-banni00C300A8re) - C:\Users\Audrey\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman [2013-06-15]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - https://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2013-06-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ArchiveSoftwareWinsock.exe; C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock\ArchiveSoftwareWinsock.exe [98340 2014-07-24] () [File not signed]
R2 AVP15.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 15.0.0\avp.exe [233552 2014-04-20] (Kaspersky Lab ZAO)
R2 CanalPlus.VOD; C:\Program Files (x86)\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [188416 2010-07-06] (Canal+ Active) [File not signed]
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [844320 2009-08-05] (Acer Incorporated)
S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2009-11-03] (Macrovision Europe Ltd.) [File not signed]
R2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-06-04] (Acer Incorporated)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [File not signed]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [62720 2009-08-21] (NewTech Infosystems, Inc.)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R3 Service CANALPLAY; C:\Program Files (x86)\Lecteur CANALPLAY\CanalPlayService.exe [932240 2012-03-06] (Canal+ Distribution)
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [240160 2009-07-04] (Acer)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [457824 2014-02-20] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [140384 2014-04-18] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [243808 2014-04-10] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [792160 2014-04-18] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [30304 2014-02-25] (Kaspersky Lab ZAO)
S3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [28768 2014-03-28] (Kaspersky Lab ZAO)
S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29280 2013-08-08] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [15456 2013-04-12] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [55904 2014-03-25] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [179296 2014-03-26] (Kaspersky Lab ZAO)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2012-12-13] (Apple, Inc.) [File not signed]
R4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S3 RgFltX64; \??\C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock\RgFltX64.sys [X]
S3 RtsUIR; system32\DRIVERS\Rts516xIR.sys [X]
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 USBCCID; system32\DRIVERS\RtsUCcid.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-12 10:32 - 2014-08-12 10:32 - 02099712 _____ (Farbar) C:\Users\Audrey\Downloads\FRST64(1).exe
2014-08-11 21:45 - 2014-08-11 21:45 - 00045360 _____ () C:\Users\Audrey\Downloads\Addition.txt
2014-08-11 21:43 - 2014-08-12 10:32 - 00030762 _____ () C:\Users\Audrey\Downloads\FRST.txt
2014-08-11 21:43 - 2014-08-12 10:32 - 00000000 ____D () C:\FRST
2014-08-11 21:43 - 2014-08-11 21:43 - 02099712 _____ (Farbar) C:\Users\Audrey\Downloads\FRST64.exe
2014-08-11 09:38 - 2014-08-11 09:38 - 00115096 _____ () C:\Users\Audrey\Desktop\ZHPDiag.txt
2014-08-11 09:28 - 2014-08-11 09:28 - 01057696 _____ () C:\Users\Audrey\Downloads\SFTGC.exe
2014-08-10 20:39 - 2014-08-10 20:39 - 01224192 _____ () C:\Users\Audrey\Downloads\ZHPCleaner.exe
2014-08-10 19:37 - 2014-08-10 19:37 - 00001157 _____ () C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2014-08-10 19:37 - 2014-08-10 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2014-08-10 19:37 - 2013-05-06 09:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2014-08-10 19:36 - 2014-08-10 19:36 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-08-10 19:36 - 2014-08-10 19:36 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-08-10 19:36 - 2014-04-18 16:35 - 00792160 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2014-08-10 19:36 - 2014-04-18 16:35 - 00140384 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2014-08-10 19:36 - 2014-04-10 17:25 - 00243808 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klhk.sys
2014-08-10 19:32 - 2014-08-10 19:35 - 169273968 _____ (Kaspersky Lab) C:\Users\Audrey\Downloads\kav15.0.0.463fr-fr.exe
2014-08-10 10:10 - 2014-08-10 11:01 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-10 10:09 - 2014-08-10 10:09 - 00001114 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-10 10:09 - 2014-08-10 10:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-10 10:09 - 2014-08-10 10:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-10 10:09 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-08-10 10:09 - 2014-05-12 07:26 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-08-10 10:09 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-08-10 10:08 - 2014-08-10 10:09 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Audrey\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-10 09:46 - 2014-08-10 09:46 - 00000000 ____D () C:\Windows\ERUNT
2014-08-10 09:43 - 2014-08-10 09:43 - 01016261 _____ (Thisisu) C:\Users\Audrey\Downloads\JRT.exe
2014-08-10 09:10 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-10 09:08 - 2014-08-10 09:34 - 00000000 ____D () C:\AdwCleaner
2014-08-10 09:08 - 2014-08-10 09:08 - 01366203 _____ () C:\Users\Audrey\Downloads\adwcleaner_3.304.exe
2014-08-10 09:06 - 2014-08-10 09:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-07 23:36 - 2014-08-11 09:38 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2014-08-07 23:30 - 2014-08-11 09:37 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\ZHP
2014-08-07 23:30 - 2014-08-07 23:30 - 00001999 _____ () C:\Users\Audrey\Desktop\ZHPFix.lnk
2014-08-07 23:30 - 2014-08-07 23:30 - 00001872 _____ () C:\Users\Audrey\Desktop\ZHPDiag.lnk
2014-08-07 23:30 - 2014-08-07 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2014-08-07 23:30 - 2014-08-07 23:30 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2014-08-07 23:29 - 2014-08-07 23:29 - 06854876 _____ (Nicolas Coolman ) C:\Users\Audrey\Downloads\ZHPDiag2.exe
2014-08-07 23:22 - 2014-08-07 23:22 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-07 23:21 - 2014-08-07 23:21 - 04862664 _____ (AVAST Software) C:\Users\Audrey\Downloads\avast_free_antivirus_setup_online.exe
2014-08-03 13:51 - 2014-08-06 20:40 - 00001103 _____ () C:\Users\Audrey\Desktop\Continue Live Installation.lnk
2014-07-24 21:02 - 2014-07-24 21:02 - 00000000 ____D () C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-12 10:33 - 2014-08-11 21:43 - 00030762 _____ () C:\Users\Audrey\Downloads\FRST.txt
2014-08-12 10:32 - 2014-08-12 10:32 - 02099712 _____ (Farbar) C:\Users\Audrey\Downloads\FRST64(1).exe
2014-08-12 10:32 - 2014-08-11 21:43 - 00000000 ____D () C:\FRST
2014-08-12 10:27 - 2014-05-14 13:59 - 00029769 _____ () C:\Windows\setupact.log
2014-08-12 10:27 - 2010-04-05 11:08 - 00001068 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-12 10:27 - 2009-11-03 06:06 - 01119400 _____ () C:\Windows\WindowsUpdate.log
2014-08-12 10:26 - 2013-11-20 20:07 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\Skype
2014-08-11 21:45 - 2014-08-11 21:45 - 00045360 _____ () C:\Users\Audrey\Downloads\Addition.txt
2014-08-11 21:43 - 2014-08-11 21:43 - 02099712 _____ (Farbar) C:\Users\Audrey\Downloads\FRST64.exe
2014-08-11 09:42 - 2009-07-14 06:45 - 00025840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-11 09:42 - 2009-07-14 06:45 - 00025840 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-11 09:38 - 2014-08-11 09:38 - 00115096 _____ () C:\Users\Audrey\Desktop\ZHPDiag.txt
2014-08-11 09:38 - 2014-08-07 23:36 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2014-08-11 09:37 - 2014-08-07 23:30 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\ZHP
2014-08-11 09:28 - 2014-08-11 09:28 - 01057696 _____ () C:\Users\Audrey\Downloads\SFTGC.exe
2014-08-11 07:39 - 2011-07-11 11:25 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-08-10 20:58 - 2011-03-14 19:07 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-10 20:47 - 2014-05-26 06:33 - 00000000 ____D () C:\ProgramData\8381b5be430a9343
2014-08-10 20:39 - 2014-08-10 20:39 - 01224192 _____ () C:\Users\Audrey\Downloads\ZHPCleaner.exe
2014-08-10 19:37 - 2014-08-10 19:37 - 00001157 _____ () C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk
2014-08-10 19:37 - 2014-08-10 19:37 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus
2014-08-10 19:36 - 2014-08-10 19:36 - 00000000 ____D () C:\Windows\ELAMBKUP
2014-08-10 19:36 - 2014-08-10 19:36 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-08-10 19:35 - 2014-08-10 19:32 - 169273968 _____ (Kaspersky Lab) C:\Users\Audrey\Downloads\kav15.0.0.463fr-fr.exe
2014-08-10 11:01 - 2014-08-10 10:10 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-08-10 10:35 - 2012-07-04 10:44 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\LimeWire
2014-08-10 10:31 - 2014-06-10 10:10 - 00058488 _____ () C:\Windows\PFRO.log
2014-08-10 10:31 - 2009-08-16 08:28 - 00000000 ___RD () C:\Windows\DeployWinRE
2014-08-10 10:31 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-10 10:09 - 2014-08-10 10:09 - 00001114 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-08-10 10:09 - 2014-08-10 10:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-08-10 10:09 - 2014-08-10 10:09 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-08-10 10:09 - 2014-08-10 10:08 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Audrey\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-10 10:09 - 2012-06-22 11:16 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-10 09:46 - 2014-08-10 09:46 - 00000000 ____D () C:\Windows\ERUNT
2014-08-10 09:43 - 2014-08-10 09:43 - 01016261 _____ (Thisisu) C:\Users\Audrey\Downloads\JRT.exe
2014-08-10 09:35 - 2014-06-24 13:47 - 00000290 __RSH () C:\ProgramData\ntuser.pol
2014-08-10 09:35 - 2010-01-19 20:17 - 00000000 ____D () C:\Users\Audrey
2014-08-10 09:34 - 2014-08-10 09:08 - 00000000 ____D () C:\AdwCleaner
2014-08-10 09:33 - 2012-03-28 10:33 - 00001073 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-10 09:33 - 2012-03-28 10:33 - 00001061 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-08-10 09:33 - 2011-07-11 11:12 - 00001296 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-08-10 09:33 - 2011-07-11 11:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-10 09:33 - 2009-08-16 08:10 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Packard Bell - Security & Support
2014-08-10 09:33 - 2009-07-14 04:34 - 00000713 _____ () C:\Windows\win.ini
2014-08-10 09:13 - 2012-06-12 08:14 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-10 09:08 - 2014-08-10 09:08 - 01366203 _____ () C:\Users\Audrey\Downloads\adwcleaner_3.304.exe
2014-08-10 09:06 - 2014-08-10 09:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-08 15:55 - 2013-09-30 18:16 - 00000000 ____D () C:\Users\Audrey\Desktop\Audrey
2014-08-08 12:03 - 2014-06-19 23:54 - 00000000 ____D () C:\Users\Audrey\AppData\Local\Adobe
2014-08-08 11:57 - 2010-01-19 20:20 - 00000000 ____D () C:\Users\Audrey\AppData\Roaming\Adobe
2014-08-07 23:30 - 2014-08-07 23:30 - 00001999 _____ () C:\Users\Audrey\Desktop\ZHPFix.lnk
2014-08-07 23:30 - 2014-08-07 23:30 - 00001872 _____ () C:\Users\Audrey\Desktop\ZHPDiag.lnk
2014-08-07 23:30 - 2014-08-07 23:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2014-08-07 23:30 - 2014-08-07 23:30 - 00000000 ____D () C:\Program Files (x86)\ZHPDiag
2014-08-07 23:29 - 2014-08-07 23:29 - 06854876 _____ (Nicolas Coolman ) C:\Users\Audrey\Downloads\ZHPDiag2.exe
2014-08-07 23:22 - 2014-08-07 23:22 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-08-07 23:21 - 2014-08-07 23:21 - 04862664 _____ (AVAST Software) C:\Users\Audrey\Downloads\avast_free_antivirus_setup_online.exe
2014-08-06 20:40 - 2014-08-03 13:51 - 00001103 _____ () C:\Users\Audrey\Desktop\Continue Live Installation.lnk
2014-08-03 23:05 - 2014-06-23 20:04 - 00000000 ____D () C:\Windows\SysWOW64\mjcm
2014-08-03 23:05 - 2014-06-23 20:04 - 00000000 ____D () C:\Windows\system32\tprb
2014-07-24 21:02 - 2014-07-24 21:02 - 00000000 ____D () C:\Users\Audrey\AppData\Local\ArchiveSoftwareWinsock
2014-07-22 16:36 - 2012-05-31 15:53 - 00000000 ____D () C:\Users\Audrey\Music\Documents\lettres motivations et CV 2012
2014-07-22 16:34 - 2009-11-03 14:58 - 00709086 _____ () C:\Windows\system32\perfh00C.dat
2014-07-22 16:34 - 2009-11-03 14:58 - 00133068 _____ () C:\Windows\system32\perfc00C.dat
2014-07-22 16:34 - 2009-07-14 07:13 - 01562690 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-22 15:01 - 2013-11-20 20:00 - 00829264 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100.dll
2014-07-22 15:01 - 2013-11-20 20:00 - 00608080 _____ (Microsoft Corporation) C:\Windows\system32\msvcp100.dll
2014-07-15 17:58 - 2010-02-09 17:28 - 00000000 ____D () C:\Users\Audrey\Music\Documents\LimeWire
2014-07-15 17:13 - 2011-11-09 17:42 - 00000000 ____D () C:\Users\Audrey\Music\Documents\Musiques Beezik
Some content of TEMP:
====================
C:\Users\Audrey\AppData\Local\Temp\jna5442645695274944734.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-08-04 19:08
==================== End Of Log ============================