cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by Noële (administrator) on PC-DE-NOËLE on 06-04-2015 18:19:10
Running from C:\Users\Noële\Desktop
Loaded Profiles: Noële (Available profiles: Noële)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) OS Language: Français (France)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\AEstSrv.exe
(Microsoft Corporation) C:\Windows\ehome\ehrecvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
() C:\Program Files\SMINST\BLService.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-03] (Avast Software s.r.o.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [450652 2009-06-03] (IDT, Inc.)
HKLM\...\Run: [TkBellExe] => c:\program files\real\realplayer\Update\realsched.exe [295512 2015-03-24] (RealNetworks, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-587894354-1811774956-2387090785-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Pavilion&pf=cnnb
HKU\S-1-5-21-587894354-1811774956-2387090785-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=91&bd=Pavilion&pf=cnnb
SearchScopes: HKLM -> {93B8115B-FF23-40BC-BDED-33B52D5A517C} URL = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2014-08-12] (RealDownloader)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-03] (Avast Software s.r.o.)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2014-08-12] (Adblock Plus)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Noële\AppData\Roaming\Mozilla\Firefox\Profiles\jp5az0se.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-03-16] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw.dll [2008-08-06] (Adobe Systems, Inc.)
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-15] (CANON INC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.4.19 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2015-03-24] (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.4 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2014-08-12] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.4.19 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2015-03-24] (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2014-08-12] (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-06-02]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-01]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2015-03-24]
FF HKLM\...\Firefox\Extensions: [{1B12EF76-2B5E-4DA1-B587-4762D49BFE03}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome:
=======
CHR Profile: C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (RealDownloader) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2015-03-11]
CHR Profile: C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Drive) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-11-04]
CHR Extension: (WOT) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-02-08]
CHR Extension: (YouTube) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-11-04]
CHR Extension: (Google Search) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-11-04]
CHR Extension: (AdBlock) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-03-11]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Google Wallet) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-11-04]
CHR Extension: (Gmail) - C:\Users\Noële\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-11-04]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-11]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\aestsrv.exe [81920 2009-03-02] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-03] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3205216 2015-03-11] (Avast Software)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [File not signed]
R2 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-06-16] (Hewlett-Packard) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2014-08-12] ()
R2 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-10-06] ()
S4 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734 2008-06-30] () [File not signed]
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\STacSV.exe [217170 2009-06-03] (IDT, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-03] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-04-03] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-04-03] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-03] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-04-03] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427736 2015-04-03] (Avast Software s.r.o.)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-04-03] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [208024 2015-04-03] ()
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [114904 2015-04-06] (Malwarebytes Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220240 2015-03-11] (Avast Software)
R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl [59376 2008-09-26] (Cyberlink Corp.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-06 18:19 - 2015-04-06 18:19 - 00012975 _____ () C:\Users\Noële\Desktop\FRST.txt
2015-04-06 18:18 - 2015-04-06 18:19 - 00000000 ____D () C:\FRST
2015-04-06 18:11 - 2015-04-06 18:12 - 01135104 _____ (Farbar) C:\Users\Noële\Desktop\FRST.exe
2015-04-06 17:03 - 2015-04-06 17:03 - 267002991 _____ () C:\Windows\MEMORY.DMP
2015-04-06 17:03 - 2015-04-06 17:03 - 00165784 _____ () C:\Windows\Minidump\Mini040615-01.dmp
2015-04-03 21:22 - 2015-04-03 21:22 - 00000512 _____ () C:\PhysicalDisk0_MBR.bin
2015-04-03 21:19 - 2015-04-03 21:23 - 00000000 ____D () C:\Users\Noële\AppData\Roaming\ZHP
2015-04-03 21:19 - 2015-04-03 21:22 - 00000000 ____D () C:\Program Files\ZHPDiag
2015-04-03 21:19 - 2015-04-03 21:19 - 00001728 _____ () C:\Users\Noële\Desktop\ZHPFix.lnk
2015-04-03 21:19 - 2015-04-03 21:19 - 00001605 _____ () C:\Users\Noële\Desktop\ZHPDiag.lnk
2015-04-03 21:19 - 2015-04-03 21:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-04-03 20:36 - 2015-04-03 20:41 - 00000000 ____D () C:\AdwCleaner
2015-04-03 19:53 - 2015-04-03 19:52 - 00291312 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-04-03 19:52 - 2015-04-03 19:52 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-03-27 17:20 - 2015-03-27 17:20 - 00000000 ____D () C:\Users\Noële\AppData\Local\Macromedia
2015-03-27 17:07 - 2015-04-05 16:17 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-03-27 17:07 - 2015-03-27 17:07 - 00000818 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-03-27 17:07 - 2015-03-27 17:07 - 00000806 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-03-27 17:07 - 2015-03-27 17:07 - 00000000 ____D () C:\Users\Noële\AppData\Roaming\Mozilla
2015-03-27 17:07 - 2015-03-27 17:07 - 00000000 ____D () C:\Users\Noële\AppData\Local\Mozilla
2015-03-27 17:07 - 2015-03-27 17:07 - 00000000 ____D () C:\ProgramData\Mozilla
2015-03-27 17:07 - 2015-03-27 17:07 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-03-24 16:00 - 2015-03-24 16:00 - 00000000 ____D () C:\Users\Noële\AppData\Roaming\RealNetworks
2015-03-24 15:58 - 2015-03-24 15:58 - 00000000 ____D () C:\ProgramData\RealNetworks
2015-03-24 15:58 - 2015-03-24 15:58 - 00000000 ____D () C:\Program Files\RealNetworks
2015-03-24 15:55 - 2015-03-24 15:55 - 00000000 ____D () C:\Program Files\Common Files\xing shared
2015-03-20 22:07 - 2015-03-20 22:07 - 00025261 _____ () C:\Users\Noële\.recently-used.xbel
2015-03-11 16:35 - 2015-03-11 16:35 - 00000963 _____ () C:\Users\Public\Desktop\LibreOffice 4.4.lnk
2015-03-11 16:35 - 2015-03-11 16:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2015-03-11 16:02 - 2015-03-11 16:02 - 00000000 ____D () C:\Windows\system32\vbox
2015-03-11 15:25 - 2015-01-29 03:35 - 00369664 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 15:24 - 2015-02-26 02:18 - 02064384 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 15:24 - 2015-01-29 03:35 - 00975360 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 15:16 - 2015-02-20 04:03 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 15:16 - 2015-02-20 02:28 - 00296960 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 15:15 - 2015-02-26 04:01 - 03604408 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-03-11 15:15 - 2015-02-26 04:01 - 03552184 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 15:15 - 2015-01-09 04:04 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 15:15 - 2015-01-09 02:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 15:14 - 2015-01-21 04:02 - 00807936 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 15:13 - 2015-03-06 06:01 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 15:12 - 2014-10-13 03:12 - 02264064 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-03-11 15:11 - 2015-02-18 04:02 - 11587584 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 15:09 - 2015-02-21 19:37 - 12375040 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 15:09 - 2015-02-21 19:34 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-03-11 15:09 - 2015-02-21 19:29 - 09747968 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 15:09 - 2015-02-21 19:28 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 15:09 - 2015-02-21 19:22 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 15:09 - 2015-02-21 19:21 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 15:09 - 2015-02-21 19:21 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 15:09 - 2015-02-21 19:20 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-03-11 15:09 - 2015-02-21 19:20 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 15:09 - 2015-02-21 19:19 - 01803264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 15:09 - 2015-02-21 19:19 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-03-11 15:09 - 2015-02-21 19:19 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 15:09 - 2015-02-21 19:19 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 15:09 - 2015-02-21 19:19 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 15:09 - 2015-02-21 19:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 15:09 - 2015-02-21 19:18 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 15:09 - 2015-02-21 19:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 15:09 - 2015-02-21 19:18 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 15:09 - 2015-02-21 19:18 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-03-11 15:09 - 2015-02-21 19:18 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-03-11 15:09 - 2015-02-21 19:18 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-03-11 15:09 - 2015-02-21 19:17 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-06 18:17 - 2014-06-01 23:48 - 00000000 ____D () C:\Users\Noële\AppData\Roaming\Skype
2015-04-06 18:07 - 2014-06-02 00:28 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-06 17:40 - 2006-11-02 12:33 - 01614492 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-06 17:39 - 2014-06-01 23:10 - 00001056 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-06 17:09 - 2014-06-01 22:27 - 01438410 _____ () C:\Windows\WindowsUpdate.log
2015-04-06 17:05 - 2014-06-02 15:55 - 00031871 _____ () C:\ProgramData\nvModes.001
2015-04-06 17:04 - 2014-06-02 15:55 - 00031871 _____ () C:\ProgramData\nvModes.dat
2015-04-06 17:04 - 2014-06-01 23:10 - 00001052 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-06 17:04 - 2006-11-02 15:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-06 17:04 - 2006-11-02 14:37 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-04-06 17:03 - 2014-12-20 21:18 - 00000000 ____D () C:\Windows\Minidump
2015-04-06 17:03 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-06 17:03 - 2006-11-02 14:47 - 00003216 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-06 16:46 - 2014-06-03 21:57 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-04-06 15:45 - 2014-06-01 23:19 - 00001929 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-05 19:04 - 2006-11-02 15:01 - 00032588 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-04-05 19:03 - 2014-06-07 15:15 - 00000000 ____D () C:\Users\Noële\Documents\cles nett ccleaner
2015-04-05 16:15 - 2014-06-01 22:55 - 00000764 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2015-04-05 16:15 - 2014-06-01 22:55 - 00000000 ____D () C:\Program Files\CCleaner
2015-04-03 20:32 - 2006-11-02 13:18 - 00000000 ____D () C:\Windows\LiveKernelReports
2015-04-03 19:52 - 2014-06-01 23:09 - 00788272 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-04-03 19:52 - 2014-06-01 23:09 - 00427736 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-04-03 19:52 - 2014-06-01 23:09 - 00208024 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-04-03 19:52 - 2014-06-01 23:09 - 00073440 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-04-03 19:52 - 2014-06-01 23:09 - 00057888 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswTdi.sys
2015-04-03 19:52 - 2014-06-01 23:09 - 00055200 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr.sys
2015-04-03 19:52 - 2014-06-01 23:09 - 00049904 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-04-03 19:52 - 2014-06-01 23:09 - 00024144 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-04-02 11:15 - 2014-06-04 00:26 - 00036864 _____ () C:\Users\Noële\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-03-29 21:32 - 2014-06-03 21:42 - 00000000 ____D () C:\Users\Noële\AppData\Roaming\Audacity
2015-03-24 15:58 - 2014-06-03 20:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks
2015-03-24 15:55 - 2014-06-03 20:33 - 00000000 ____D () C:\ProgramData\Real
2015-03-24 15:54 - 2014-06-03 20:34 - 00201872 _____ (RealNetworks, Inc.) C:\Windows\system32\rmoc3260.dll
2015-03-24 15:53 - 2014-06-03 20:34 - 00272896 _____ (Progressive Networks) C:\Windows\system32\pncrt.dll
2015-03-24 15:53 - 2014-06-03 20:34 - 00006656 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5016.dll
2015-03-24 15:53 - 2014-06-03 20:34 - 00005632 _____ (RealNetworks, Inc.) C:\Windows\system32\pndx5032.dll
2015-03-24 15:52 - 2008-08-06 16:29 - 00348160 _____ (Microsoft Corporation) C:\Windows\system32\msvcr71.dll
2015-03-24 15:52 - 2008-08-06 16:27 - 00499712 _____ (Microsoft Corporation) C:\Windows\system32\msvcp71.dll
2015-03-21 23:41 - 2014-06-01 22:13 - 00000000 ____D () C:\Users\Noële
2015-03-20 22:02 - 2014-06-14 18:09 - 00000000 ____D () C:\Users\Noële\AppData\Roaming\gtk-2.0
2015-03-16 10:21 - 2014-06-02 00:28 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-03-16 10:21 - 2014-06-02 00:28 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-03-12 15:39 - 2006-11-02 14:47 - 00375752 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-11 17:39 - 2014-06-01 23:47 - 00000000 ___RD () C:\Program Files\Skype
2015-03-11 17:39 - 2014-06-01 23:47 - 00000000 ____D () C:\ProgramData\Skype
2015-03-11 16:38 - 2014-06-01 22:23 - 00090624 _____ () C:\Users\Noële\AppData\Local\GDIPFONTCACHEV1.DAT
2015-03-11 16:35 - 2014-06-02 15:27 - 00000000 ____D () C:\Program Files\LibreOffice 4
2015-03-11 15:24 - 2014-06-02 15:05 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 15:17 - 2006-11-02 12:24 - 119837696 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe

==================== Files in the root of some directories =======

2014-06-28 21:47 - 2015-02-08 16:18 - 0002138 _____ () C:\Users\Noële\AppData\Roaming\wklnhst.dat
2014-06-01 22:26 - 2014-06-01 22:26 - 0000000 _____ () C:\Users\Noële\AppData\Local\AtStart.txt
2014-09-27 16:03 - 2015-01-24 21:14 - 0007808 _____ () C:\Users\Noële\AppData\Local\d3d9caps.dat
2014-06-04 00:26 - 2015-04-02 11:15 - 0036864 _____ () C:\Users\Noële\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-06-01 22:26 - 2014-06-01 22:26 - 0000000 _____ () C:\Users\Noële\AppData\Local\DSwitch.txt
2014-06-01 22:26 - 2014-06-01 22:26 - 0000000 _____ () C:\Users\Noële\AppData\Local\QSwitch.txt
2014-06-02 15:55 - 2015-04-06 17:05 - 0031871 _____ () C:\ProgramData\nvModes.001
2014-06-02 15:55 - 2015-04-06 17:04 - 0031871 _____ () C:\ProgramData\nvModes.dat
2014-06-01 22:59 - 2014-06-01 22:59 - 0000032 _____ () C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
2008-11-15 01:48 - 2008-11-15 01:48 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2014-06-01 22:58 - 2014-06-01 22:58 - 0000032 _____ () C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
2008-11-15 01:40 - 2008-11-15 01:41 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2014-06-01 22:57 - 2014-06-01 22:57 - 0000032 _____ () C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
2014-06-01 22:59 - 2014-06-01 22:59 - 0000032 _____ () C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
2008-11-15 01:38 - 2008-11-15 01:39 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2008-11-15 01:42 - 2008-11-15 01:48 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2014-06-01 23:00 - 2014-06-01 23:00 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-06 17:12

==================== End Of Log ============================

Publicité


Signaler le contenu de ce document

Publicité