cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-06-2015
Ran by Marie (administrator) on PC-DE-MARIE on 07-06-2015 19:25:33
Running from C:\Users\Marie\Desktop
Loaded Profiles: Marie (Available Profiles: Marie)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium (X86) OS Language: Français (France)
Internet Explorer Version 7 (Default browser path: "%1" %*)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Symantec Corporation) C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
(Symantec Corporation) C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Ulead Systems, Inc.) C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\Apoint.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(TOSHIBA) C:\Program Files\TOSHIBA\TOSCDSPD\TOSCDSPD.exe
(Google Inc.) C:\Users\Marie\AppData\Local\Google\Update\GoogleUpdate.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApMsgFwd.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(TOSHIBA CORPORATION) C:\Program Files\TOSHIBA\ConfigFree\CFSwMgr.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint2K\ApntEx.exe
(Google Inc.) C:\Users\Marie\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Google Inc.) C:\Users\Marie\AppData\Local\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1006264 2007-07-10] (Microsoft Corporation)
HKLM\...\Run: [SVPWUTIL] => C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [438272 2006-03-22] (TOSHIBA)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4702208 2007-09-03] (Realtek Semiconductor)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [411192 2007-03-29] (TOSHIBA Corporation)
HKLM\...\Run: [SmoothView] => C:\Program Files\Toshiba\SmoothView\SmoothView.exe [509496 2007-04-03] (TOSHIBA Corporation)
HKLM\...\Run: [00TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [538744 2007-05-22] (TOSHIBA Corporation)
HKLM\...\Run: [NDSTray.exe] => NDSTray.exe
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [180224 2006-09-11] (Alps Electric Co., Ltd.)
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [174872 2007-02-12] (Intel Corporation)
HKLM\...\Run: [MSConfig] => C:\Windows\system32\msconfig.exe [222208 2006-11-02] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-01-20] (Apple Inc.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157480 2015-01-27] (Apple Inc.)
HKLM\...\Policies\Explorer: [NoSetActiveDesktop] 0
HKU\S-1-5-21-3109863831-1964146042-3331963982-1000\...\Run: [TOSCDSPD] => TOSCDSPD.EXE
HKU\S-1-5-21-3109863831-1964146042-3331963982-1000\...\Run: [Google Update] => C:\Users\Marie\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-08-31] (Google Inc.)
HKU\S-1-5-21-3109863831-1964146042-3331963982-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [201728 2006-11-02] (Microsoft Corporation)
HKU\S-1-5-21-3109863831-1964146042-3331963982-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [28785792 2015-06-02] (Skype Technologies S.A.)
HKU\S-1-5-21-3109863831-1964146042-3331963982-1000\...\MountPoints2: {4d221aa7-1447-11e0-b4ff-001f3ccae0d2} - D:\installer.exe
HKU\S-1-5-21-3109863831-1964146042-3331963982-1000\...\MountPoints2: {c24ea916-7881-11e2-830e-001eec413f55} - D:\Setup.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3109863831-1964146042-3331963982-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
BHO: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2006-12-18] (Adobe Systems Incorporated)
BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.6.0\bin\ssv.dll [2007-04-18] (Sun Microsystems, Inc.)
Toolbar: HKU\S-1-5-21-3109863831-1964146042-3331963982-1000 -> No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Toolbar: HKU\S-1-5-21-3109863831-1964146042-3331963982-1000 -> No Name - {D3028143-6145-4318-99D3-3EDCE54A95A9} - No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2001-06-20] (Microsoft Corporation)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\by3loz8k.default
FF Homepage: hxxp://www.google.com
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [2010-01-27] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin HKU\S-1-5-21-3109863831-1964146042-3331963982-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Marie\AppData\Local\Google\Update\1.3.26.7\npGoogleUpdate3.dll [2015-03-03] (Google Inc.)
FF Plugin HKU\S-1-5-21-3109863831-1964146042-3331963982-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Marie\AppData\Local\Google\Update\1.3.26.7\npGoogleUpdate3.dll [2015-03-03] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npnul32.dll [2010-04-01] (mozilla.org)
FF Extension: No Name - C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\by3loz8k.default\Extensions\{cfcb809c-3a22-4616-a916-6c007bd9d920} [2013-08-25]
FF Extension: No Name - C:\Users\Marie\AppData\Roaming\Mozilla\Firefox\Profiles\by3loz8k.default\Extensions\{d8a25ef6-8a9c-459b-a8b1-7a2b0504190a} [2013-09-05]

Chrome:
=======
CHR Profile: C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Docs) - C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-30]
CHR Extension: (Google Drive) - C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-05-30]
CHR Extension: (YouTube) - C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-05-30]
CHR Extension: (Google Search) - C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-05-30]
CHR Extension: (Gmail) - C:\Users\Marie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-30]
CHR HKLM\...\Chrome\Extension: [okkbcpjgdooahcefofhjdpacngfecaaa] - C:\Program Files\Lyrics_Fan\132.crx [Not Found]
StartMenuInternet: Google Chrome.B2GASMZDWEPPO6IY6RNREL7ZEA - C:\Users\Marie\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 CFSvcs; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2006-11-14] (TOSHIBA CORPORATION) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 LiveUpdate; C:\Program Files\Symantec\LiveUpdate\LuComServer_3_2.EXE [2999664 2007-09-26] (Symantec Corporation)
R2 LiveUpdate Notice Service; C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe [583048 2008-01-29] (Symantec Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
S4 Orange update Core Service; C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe [1082016 2012-09-18] (France Telecom SA)
R2 Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe [554352 2007-09-26] (Symantec Corporation)
S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [430592 2008-04-07] (Nokia.) [File not signed]
R2 TNaviSrv; C:\Program Files\TOSHIBA\TOSHIBA DVD PLAYER\TNaviSrv.exe [77824 2007-09-19] (TOSHIBA Corporation) [File not signed]
R2 TODDSrv; C:\Windows\system32\TODDSrv.exe [114688 2006-05-25] (TOSHIBA Corporation) [File not signed]
R2 UleadBurningHelper; C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-08-23] (Ulead Systems, Inc.) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [265912 2007-07-10] (Microsoft Corporation)
S2 LiveUpdate Notice Ex; "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 CplIR; C:\Windows\system32\DRIVERS\CplIR.SYS [14848 2007-03-06] (COMPAL ELECTRONIC INC.)
S3 FsUsbExDisk; C:\Windows\system32\FsUsbExDisk.SYS [36608 2009-03-31] () [File not signed]
R0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [19456 2006-07-28] (COMPAL ELECTRONIC INC.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [90112 2009-03-20] (MCCI)
S3 ss_bmdfl; C:\Windows\System32\DRIVERS\ss_bmdfl.sys [14976 2009-03-20] (MCCI Corporation)
S3 ss_bmdm; C:\Windows\System32\DRIVERS\ss_bmdm.sys [121856 2009-03-20] (MCCI Corporation)
S3 UVCFTR; C:\Windows\System32\Drivers\UVCFTR_S.SYS [11776 2007-04-16] (Chicony Electronics Co., Ltd.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [22016 2006-11-02] (Microsoft Corporation)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 catchme; \??\C:\Users\Marie\AppData\Local\Temp\catchme.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 Tosrfcom; No ImagePath
S3 TpChoice; system32\DRIVERS\TpChoice.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-07 19:25 - 2015-06-07 19:25 - 00014652 _____ C:\Users\Marie\Desktop\FRST.txt
2015-06-07 19:25 - 2015-06-07 19:25 - 00000000 ____D C:\FRST
2015-06-07 19:22 - 2015-06-07 19:22 - 01147904 _____ (Farbar) C:\Users\Marie\Desktop\FRST.exe
2015-06-03 22:50 - 2015-06-03 22:51 - 19336816 _____ (Adlice Software ) C:\Users\Marie\Desktop\setup.exe
2015-06-01 18:56 - 2015-06-01 18:56 - 04197016 _____ (Kaspersky Lab ZAO) C:\Users\Marie\Desktop\tdsskiller.exe
2015-05-31 17:54 - 2015-05-31 17:54 - 00108306 _____ C:\Users\Marie\Desktop\ZHPDiag.txt
2015-05-30 12:14 - 2015-05-30 12:15 - 00004798 _____ C:\Users\Marie\Desktop\ZHPCleaner.txt
2015-05-29 23:44 - 2015-05-29 23:44 - 00035353 _____ C:\Users\Marie\Desktop\MBAM.txt
2015-05-29 23:06 - 2015-05-29 23:42 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-05-29 23:06 - 2015-05-29 23:06 - 00000904 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2015-05-29 23:06 - 2015-05-29 23:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-05-29 23:06 - 2015-05-29 23:06 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2015-05-29 23:06 - 2015-04-14 09:37 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-05-29 23:06 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-05-29 23:06 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-05-29 23:03 - 2015-05-29 23:05 - 21546080 _____ (Malwarebytes Corporation ) C:\Users\Marie\Desktop\mbam-setup-2.1.6.1022.exe
2015-05-29 22:44 - 2015-05-29 22:44 - 02223104 _____ C:\Users\Marie\Desktop\adwcleaner_4.205.exe
2015-05-29 22:32 - 2015-05-30 12:09 - 00000741 _____ C:\Users\Marie\Desktop\ZHPCleaner.lnk
2015-05-29 22:01 - 2015-05-29 22:01 - 01840640 _____ C:\Users\Marie\Desktop\ZHPCleaner.exe
2015-05-28 20:30 - 2015-05-31 17:53 - 00000000 _____ C:\PhysicalDisk0_MBR.bin
2015-05-28 20:24 - 2015-05-31 17:52 - 00000000 ____D C:\Users\Marie\AppData\Roaming\ZHP
2015-05-28 20:24 - 2015-05-28 20:24 - 00001773 _____ C:\Users\Marie\Desktop\ZHPFix.lnk
2015-05-28 20:24 - 2015-05-28 20:24 - 00001650 _____ C:\Users\Marie\Desktop\ZHPDiag.lnk
2015-05-28 20:24 - 2015-05-28 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-05-28 20:22 - 2015-05-28 20:23 - 06882129 _____ (Nicolas Coolman ) C:\Users\Marie\Downloads\ZHPDiag2.exe
2015-05-19 19:36 - 2015-05-19 19:36 - 00000000 ____D C:\ProgramData\HP
2015-05-19 19:35 - 2015-05-19 19:36 - 00000000 ____D C:\Users\Marie\{f0ae1c3b-7f26-42b4-a511-adbf2b194d1c}

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-07 19:24 - 2008-12-25 15:40 - 00000000 ____D C:\Users\Marie
2015-06-07 19:19 - 2014-09-03 21:13 - 00000000 ____D C:\Users\Marie\AppData\Roaming\Skype
2015-06-07 19:18 - 2014-09-03 21:13 - 00000000 ___RD C:\Program Files\Skype
2015-06-07 19:18 - 2014-09-03 21:13 - 00000000 ____D C:\ProgramData\Skype
2015-06-07 19:17 - 2008-12-25 15:24 - 02009254 _____ C:\Windows\WindowsUpdate.log
2015-06-07 19:16 - 2012-08-31 16:44 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-07 19:16 - 2006-11-02 14:47 - 00003456 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-07 19:16 - 2006-11-02 14:47 - 00003456 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-07 19:04 - 2012-08-31 14:51 - 00001078 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3109863831-1964146042-3331963982-1000UA.job
2015-06-07 13:05 - 2012-08-31 14:51 - 00001026 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3109863831-1964146042-3331963982-1000Core.job
2015-06-07 07:23 - 2006-11-02 12:33 - 01521844 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-07 07:16 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-07 00:22 - 2009-12-09 02:51 - 00131072 _____ C:\Windows\ocsetup_install_NetFx3.etl
2015-06-07 00:22 - 2006-11-02 15:01 - 00032552 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-06 18:30 - 2008-12-25 17:01 - 00000418 ____H C:\Windows\Tasks\User_Feed_Synchronization-{6C082FE4-1420-4504-882A-1C921A876C1A}.job
2015-06-04 21:06 - 2009-06-05 07:36 - 00079872 _____ C:\Users\Marie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-04 21:00 - 2010-03-15 20:32 - 00000000 ____D C:\Users\Marie\Documents\Photos
2015-06-02 19:26 - 2008-12-29 15:56 - 00000000 ____D C:\Users\Marie\Documents\Marie
2015-05-31 17:53 - 2010-10-26 22:26 - 00000000 ____D C:\Program Files\ZHPDiag
2015-05-29 23:50 - 2014-07-10 23:51 - 00052578 _____ C:\Windows\PFRO.log
2015-05-29 23:35 - 2007-04-18 08:04 - 00000000 ____D C:\Windows\Options
2015-05-29 22:58 - 2013-09-09 17:23 - 00000000 ____D C:\AdwCleaner
2015-05-29 22:58 - 2012-08-31 14:59 - 00000000 ____D C:\Users\Marie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-29 22:58 - 2010-05-12 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
2015-05-17 23:13 - 2009-02-21 16:08 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-05-14 17:35 - 2014-07-10 23:59 - 00001912 _____ C:\Windows\epplauncher.mif
2015-05-14 17:35 - 2014-07-10 23:58 - 00001831 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-05-14 17:34 - 2014-07-10 23:57 - 00000000 ____D C:\Program Files\Microsoft Security Client
2015-05-14 17:33 - 2007-05-18 09:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-05-14 17:30 - 2013-09-10 16:30 - 00000000 ____D C:\Windows\system32\MRT
2015-05-14 17:05 - 2006-11-02 12:24 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-05-14 17:04 - 2010-06-04 13:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

==================== Files in the root of some directories =======

2010-10-27 22:11 - 2010-10-27 22:11 - 3887312 ____R () C:\Program Files\ComboFix.exe
2008-12-25 15:59 - 2008-12-25 15:59 - 0024206 _____ () C:\Users\Marie\AppData\Roaming\UserTile.png
2013-12-18 23:34 - 2014-04-01 00:34 - 0000107 _____ () C:\Users\Marie\AppData\Roaming\WB.CFG
2008-12-29 15:55 - 2015-05-04 19:48 - 0015078 _____ () C:\Users\Marie\AppData\Roaming\wklnhst.dat
2011-10-06 19:39 - 2014-03-30 14:04 - 0000680 _____ () C:\Users\Marie\AppData\Local\d3d9caps.dat
2009-06-05 07:36 - 2015-06-04 21:06 - 0079872 _____ () C:\Users\Marie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2009-01-14 15:21 - 2012-12-06 15:25 - 0000173 _____ () C:\Users\Marie\AppData\Local\RAExpertHistory.xml
2008-12-27 17:33 - 2008-12-27 17:33 - 0000173 _____ () C:\Users\Marie\AppData\Local\rahistory.xml
2011-11-23 20:03 - 2011-11-23 20:03 - 0000224 _____ () C:\ProgramData\hpzinstall.log
2014-07-11 00:05 - 2014-07-11 00:08 - 0008831 _____ () C:\ProgramData\LUUnInstall.LiveUpdate

Files to move or delete:
====================
C:\Windows\Tasks\At1.job


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-07 19:24

==================== End of log ============================

Publicité


Signaler le contenu de ce document

Publicité