cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-06-2015
Ran by Cécile (administrator) on PC-DE-CÉCILE on 18-06-2015 17:03:50
Running from C:\Users\Cécile\Desktop
Loaded Profiles: Cécile (Available Profiles: Cécile)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) OS Language: Français (France)
Internet Explorer Version 9 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\stacsv.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
() C:\Program Files\SMINST\BLService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(RealNetworks, Inc.) C:\Program Files\Real\RealPlayer\Update\realsched.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [WirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [432432 2008-12-08] (Hewlett-Packard)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [450652 2009-06-03] (IDT, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
HKLM\...\Run: [TkBellExe] => C:\Program Files\Real\RealPlayer\update\realsched.exe [295512 2013-09-11] (RealNetworks, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-04-28] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://google.com
HKU\S-1-5-21-2910401975-619293391-2278939758-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
SearchScopes: HKLM -> {61B32A86-DAE6-4B41-A4AB-A2AA48FB0565} URL = http://fr.search.yahoo.com/search?p={searchTerms}&ei={inputEncoding}&fr=cb-hp06&type=ie2008
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2910401975-619293391-2278939758-1000 -> {61B32A86-DAE6-4B41-A4AB-A2AA48FB0565} URL =
BHO: No Name -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> No File
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-04] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO: No Name -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> No File
DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Hosts: Hosts file not detected in the default directory
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

FireFox:
========
FF Plugin: @canon.com/EPPEX -> C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll No File
FF Plugin: @real.com/nppl3260;version=16.0.3.51 -> c:\program files\real\realplayer\Netscape6\nppl3260.dll [2013-09-11] (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 -> c:\program files\real\realplayer\Netscape6\nprpplugin.dll [2013-09-11] (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-31] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-31] (Google Inc.)
FF Plugin HKU\S-1-5-21-2910401975-619293391-2278939758-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Cécile\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-05-03]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-09-11]
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-09]

Chrome:
=======
CHR Profile: C:\Users\Cécile\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (WOT) - C:\Users\Cécile\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2014-04-18]
CHR Extension: (Adblock Plus) - C:\Users\Cécile\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-03-22]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Cécile\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-07]
CHR Extension: (Google Wallet) - C:\Users\Cécile\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-18]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-10]
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

Opera:
=======
StartMenuInternet: (HKLM) Opera -

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-28] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-04-28] (Avast Software)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [File not signed]
S3 HP Health Check Service; c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [94208 2008-10-09] (Hewlett-Packard) [File not signed]
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [File not signed]
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 Recovery Service for Windows; C:\Program Files\SMINST\BLService.exe [365952 2008-12-17] ()
S3 RichVideo; C:\Program Files\CyberLink\Shared files\RichVideo.exe [241734 2008-09-15] () [File not signed]
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_827e372d\STacSV.exe [217170 2009-06-03] (IDT, Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-04-28] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-04-28] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-04-28] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-04-28] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-04-28] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427992 2015-04-28] (Avast Software s.r.o.)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-04-28] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-04-28] ()
S3 cleanhlp; C:\EEK\bin\cleanhlp32.sys [50200 2015-06-13] (Emsisoft GmbH)
S3 PCAMp50; C:\Windows\System32\Drivers\PCAMp50.sys [28224 2009-08-24] (Printing Communications Assoc., Inc. (PCAUSA))
S3 PCASp50; C:\Windows\System32\Drivers\PCASp50.sys [27072 2009-08-24] (Printing Communications Assoc., Inc. (PCAUSA))
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-04-28] (Avast Software)
R2 {55662437-DA8C-40c0-AADA-2C816A897A49}; C:\Program Files\Hewlett-Packard\Media\DVD\000.fcl [87536 2008-11-28] (CyberLink Corp.)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-18 17:03 - 2015-06-18 17:04 - 00012923 _____ C:\Users\Cécile\Desktop\FRST.txt
2015-06-18 17:03 - 2015-06-18 17:03 - 01148416 _____ (Farbar) C:\Users\Cécile\Desktop\FRST.exe
2015-06-18 17:03 - 2015-06-18 17:03 - 00000000 ____D C:\FRST
2015-06-16 11:46 - 2015-06-16 16:01 - 00000000 ____D C:\Users\Cécile\Desktop\cv
2015-06-14 13:26 - 2015-06-14 13:26 - 00000512 _____ C:\PhysicalDisk0_MBR.bin
2015-06-14 13:21 - 2015-06-14 13:21 - 00001728 _____ C:\Users\Cécile\Desktop\ZHPFix.lnk
2015-06-14 13:21 - 2015-06-14 13:21 - 00001605 _____ C:\Users\Cécile\Desktop\ZHPDiag.lnk
2015-06-14 13:21 - 2015-06-14 13:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-06-14 13:20 - 2015-06-14 13:26 - 00000000 ____D C:\Users\Cécile\AppData\Roaming\ZHP
2015-06-14 13:20 - 2015-06-14 13:26 - 00000000 ____D C:\Program Files\ZHPDiag
2015-06-14 11:11 - 2015-06-14 11:13 - 06880102 _____ (Nicolas Coolman ) C:\Users\Cécile\Desktop\ZHPDiag2.exe
2015-06-13 21:36 - 2015-06-13 21:36 - 00000691 _____ C:\Users\Cécile\Desktop\Start Emsisoft Emergency Kit.lnk
2015-06-13 21:35 - 2015-06-13 21:36 - 00000000 ____D C:\EEK
2015-06-13 20:54 - 2015-06-13 20:54 - 00000000 ____D C:\Users\Cécile\Doctor Web
2015-06-13 19:52 - 2015-06-13 20:43 - 158422184 _____ C:\Users\Cécile\Desktop\EmsisoftEmergencyKit.exe
2015-06-13 19:51 - 2015-06-13 20:51 - 163573096 _____ C:\Users\Cécile\Desktop\qtiesw1z.exe
2015-06-10 11:09 - 2015-06-16 15:39 - 00000000 ____D C:\Users\Cécile\Desktop\Nouveau dossier
2015-06-10 10:40 - 2015-05-21 16:22 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 10:40 - 2015-04-24 17:54 - 00532480 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 10:39 - 2015-05-09 01:08 - 00894464 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 10:25 - 2015-05-05 00:51 - 10628608 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 10:25 - 2015-05-05 00:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 10:25 - 2015-05-05 00:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 10:25 - 2015-05-05 00:50 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 10:25 - 2015-05-04 23:21 - 08147456 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 10:04 - 2015-05-31 02:03 - 12385280 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 10:04 - 2015-05-31 01:55 - 01809920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 10:04 - 2015-05-31 01:54 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 10:04 - 2015-05-31 01:53 - 09750528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 10:04 - 2015-05-31 01:50 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 10:04 - 2015-05-31 01:49 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 10:04 - 2015-05-31 01:49 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 10:04 - 2015-05-31 01:49 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 10:04 - 2015-05-31 01:49 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 10:04 - 2015-05-31 01:48 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 10:04 - 2015-05-31 01:48 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 10:04 - 2015-05-31 01:48 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 10:04 - 2015-05-31 01:48 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-06-10 10:04 - 2015-05-31 01:48 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 10:04 - 2015-05-31 01:48 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 10:04 - 2015-05-31 01:48 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 10:04 - 2015-05-31 01:48 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-06-10 10:04 - 2015-05-31 01:47 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 10:04 - 2015-05-31 01:47 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 10:04 - 2015-05-31 01:47 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 10:04 - 2015-05-31 01:47 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-06-10 10:04 - 2015-05-31 01:47 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-05-20 10:22 - 2015-05-20 10:22 - 00000963 _____ C:\Users\Public\Desktop\LibreOffice 4.4.lnk
2015-05-20 10:22 - 2015-05-20 10:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.4
2015-05-20 10:21 - 2015-05-20 10:22 - 00000000 ____D C:\Program Files\LibreOffice 4
2015-05-19 07:58 - 2015-05-19 07:58 - 00000100 ____H C:\Users\Cécile\Desktop\.~lock.ENTREVISTA A MARTHA LÓPEZ.odt#

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-18 16:09 - 2014-01-01 15:35 - 01489304 _____ C:\Windows\WindowsUpdate.log
2015-06-18 16:05 - 2006-11-02 14:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-18 16:05 - 2006-11-02 14:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-18 16:04 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-18 11:29 - 2006-11-02 15:01 - 00032590 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-06-18 09:19 - 2006-11-02 12:33 - 01637064 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-17 07:46 - 2012-05-03 14:50 - 00033320 _____ C:\Users\Cécile\AppData\Roaming\wklnhst.dat
2015-06-16 10:10 - 2014-07-04 19:42 - 00000000 ____D C:\Users\Cécile\Desktop\NOELE
2015-06-16 09:00 - 2013-05-17 09:34 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-16 08:15 - 2013-11-22 11:07 - 00000000 ____D C:\Users\Cécile\AppData\Local\CrashDumps
2015-06-16 08:13 - 2012-05-03 13:27 - 00002459 _____ C:\Users\Cécile\Desktop\Traitement de texte Microsoft Works.lnk
2015-06-16 08:04 - 2012-07-08 23:38 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-06-16 08:04 - 2012-07-08 23:38 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-06-16 08:01 - 2012-05-03 13:31 - 00000000 ____D C:\Users\Cécile\AppData\Local\Adobe
2015-06-14 10:29 - 2014-01-25 11:36 - 00001929 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-14 08:41 - 2012-05-03 11:43 - 00000000 ____D C:\Users\Cécile
2015-06-13 23:17 - 2012-05-03 13:03 - 00000000 ____D C:\Users\Cécile\AppData\Roaming\Skype
2015-06-13 22:17 - 2012-05-03 12:38 - 00000000 ____D C:\ProgramData\Skype
2015-06-10 15:08 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2015-06-10 11:09 - 2006-11-02 14:47 - 03779920 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-10 10:39 - 2013-08-01 15:30 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 10:29 - 2006-11-02 12:24 - 136900096 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2015-06-10 10:27 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\fr-FR
2015-06-10 08:59 - 2012-05-19 17:02 - 00091648 _____ C:\Users\Cécile\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-05-31 09:12 - 2014-01-25 11:31 - 00001056 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-31 09:01 - 2014-01-25 11:31 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-20 11:21 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2015-05-20 10:30 - 2012-05-03 11:50 - 00092864 _____ C:\Users\Cécile\AppData\Local\GDIPFONTCACHEV1.DAT

==================== Files in the root of some directories =======

2014-11-28 18:14 - 2014-11-28 18:14 - 0000012 _____ () C:\Users\Cécile\AppData\Roaming\9109
2012-05-12 13:54 - 2012-05-12 13:58 - 0002447 _____ () C:\Users\Cécile\AppData\Roaming\hamster_installer_log.txt
2012-05-03 14:50 - 2015-06-17 07:46 - 0033320 _____ () C:\Users\Cécile\AppData\Roaming\wklnhst.dat
2014-11-28 18:14 - 2014-11-28 18:14 - 0000012 _____ () C:\Users\Cécile\AppData\Local\8237
2012-05-09 11:23 - 2012-06-14 10:51 - 0237112 _____ () C:\Users\Cécile\AppData\Local\ars.cache
2012-05-03 11:52 - 2012-05-03 11:52 - 0000000 _____ () C:\Users\Cécile\AppData\Local\AtStart.txt
2012-05-09 11:25 - 2012-06-14 10:51 - 0462696 _____ () C:\Users\Cécile\AppData\Local\census.cache
2012-05-03 11:23 - 2014-04-12 19:59 - 0006836 _____ () C:\Users\Cécile\AppData\Local\d3d9caps.dat
2012-05-19 17:02 - 2015-06-10 08:59 - 0091648 _____ () C:\Users\Cécile\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2012-05-03 11:52 - 2012-05-03 11:52 - 0000000 _____ () C:\Users\Cécile\AppData\Local\DSwitch.txt
2012-05-12 13:58 - 2012-05-12 13:58 - 0000393 _____ () C:\Users\Cécile\AppData\Local\HamsterVideoConverterSettings.cfg
2012-05-03 11:52 - 2012-05-03 11:52 - 0000000 _____ () C:\Users\Cécile\AppData\Local\QSwitch.txt
2015-04-09 14:54 - 2015-04-09 14:54 - 0006750 _____ () C:\Users\Cécile\AppData\Local\recently-used.xbel
2014-11-28 18:14 - 2014-11-28 18:14 - 0000012 _____ () C:\ProgramData\1303
2014-11-28 18:14 - 2014-11-28 18:14 - 0000012 _____ () C:\ProgramData\8286
2014-11-28 18:14 - 2014-11-28 18:14 - 0000012 _____ () C:\ProgramData\8712
2012-05-03 11:52 - 2015-06-18 16:06 - 0004764 _____ () C:\ProgramData\HPWALog.txt
2012-05-03 11:31 - 2012-05-03 11:31 - 0000032 _____ () C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log
2009-01-21 00:30 - 2009-01-21 00:30 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2012-05-03 11:30 - 2012-05-03 11:30 - 0000032 _____ () C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log
2009-01-21 00:24 - 2009-01-21 00:26 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2012-05-03 11:29 - 2012-05-03 11:29 - 0000032 _____ () C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log
2012-05-03 11:31 - 2012-05-03 11:31 - 0000032 _____ () C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log
2009-01-21 00:23 - 2009-01-21 00:24 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
2009-01-21 00:26 - 2009-01-21 00:30 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2012-05-03 11:32 - 2012-05-03 11:32 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-06-18 16:11

==================== End of log ============================

Publicité


Signaler le contenu de ce document

Publicité