Publicité
Publicité
Format du document : text/plain
Prévisualisation
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-07-2015
Ran by Vista (administrator) on PC-DE-VISTA (27-07-2015 22:15:50)
Running from C:\Users\Vista\Desktop
Loaded Profiles: Vista (Available Profiles: Vista)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Language: Français (France)
Internet Explorer Version 9 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Index Education) C:\Program Files\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Irrational Number Applications) C:\ProgramData\xwMITZa\eqqnqjJYoEU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files\MaxDrivrUpdater_v62.1170\MaxDrivrUpdater_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
(Microsoft Corporation) C:\Windows\System32\msinfo32.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-03-19] (Avast Software s.r.o.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6037504 2008-09-12] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2008-09-12] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)
HKLM\...\RunOnce: [MaxDrivrUpdater_v62.1170] => C:\Program Files\MaxDrivrUpdater_v62.1170\MaxDrivrUpdater_Service.exe [30216 2015-07-24] ()
HKU\S-1-5-21-475829364-404990070-2076625153-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-475829364-404990070-2076625153-1000\...\Run: [GoogleChromeAutoLaunch_019F5DEB1932B27FBCAD3F88A7628DEA] => "C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
Startup: C:\Users\Vista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2012-01-20]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-03-19] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-475829364-404990070-2076625153-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-475829364-404990070-2076625153-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-475829364-404990070-2076625153-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-475829364-404990070-2076625153-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-12-17] (Sun Microsystems, Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-19] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-12-17] (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{B249A4AC-4855-4479-8772-5456FE07D9C1}: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Keyword.URL: https://www.google.com/search/?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2012-02-04] (Google)
FF Plugin: @java.com/DTPlugin,version=1.6.0_38 -> C:\Windows\system32\npdeployJava1.dll [2012-11-14] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-11-14] (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default\searchplugins\avira-safesearch.xml [2015-01-17]
FF SearchPlugin: C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default\searchplugins\google-avast.xml [2015-01-18]
FF SearchPlugin: C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default\searchplugins\yahoo-avast.xml [2015-01-17]
FF Extension: Portail lexical du CNRTL - C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default\Extensions\portail@cnrtl.fr.xpi [2015-03-01]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} [2015-07-06]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-01-25]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-30]
Chrome:
=======
CHR Profile: C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-19]
CHR Extension: (Avira Browser Safety) - C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-03-19]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-19]
CHR Extension: (Google Wallet) - C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-19]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-03-19]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-19]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-19] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3205216 2015-03-19] (Avast Software)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [143872 2007-12-17] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [113664 2007-01-11] (SEIKO EPSON CORPORATION)
R2 eqqnqjJYoEU; C:\ProgramData\xwMITZa\eqqnqjJYoEU.exe [2732024 2015-07-27] (Irrational Number Applications)
R2 MajIndexEducationService; C:\Program Files\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe [3014848 2015-07-20] (Index Education)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-19] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-03-19] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-03-19] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-03-19] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-03-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-03-19] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427480 2015-03-19] (Avast Software s.r.o.)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-03-19] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206976 2015-03-19] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220240 2015-03-19] (Avast Software)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-27 22:15 - 2015-07-27 22:20 - 00013757 _____ C:\Users\Vista\Desktop\FRST.txt
2015-07-27 22:15 - 2015-07-27 22:16 - 00000000 ____D C:\FRST
2015-07-27 22:11 - 2015-07-27 22:13 - 01650688 _____ (Farbar) C:\Users\Vista\Desktop\FRST.exe
2015-07-27 21:37 - 2015-07-27 22:10 - 00000000 ____D C:\Users\Vista\AppData\Local\WebShield
2015-07-27 21:22 - 2015-07-27 21:37 - 00000000 ____D C:\AdwCleaner
2015-07-27 21:22 - 2015-07-27 21:22 - 02248704 _____ C:\Users\Vista\Downloads\AdwCleaner-4.208.exe
2015-07-27 21:04 - 2015-07-27 21:04 - 00000000 ____D C:\Users\Vista\AppData\Local\bvxvbvef
2015-07-27 14:04 - 2015-07-27 14:05 - 00000000 ____D C:\Users\Vista\Desktop\HUGO prépa
2015-07-27 14:02 - 2015-07-01 13:51 - 00015490 _____ C:\Users\Vista\Documents\Enseignement moral et civique 2015-16.odt
2015-07-27 13:55 - 2015-07-27 13:55 - 00000000 ____D C:\ProgramData\Mleijeousp
2015-07-27 13:53 - 2015-07-27 13:53 - 00002068 _____ C:\Users\Public\Desktop\Live Mail.lnk
2015-07-27 13:50 - 2015-07-27 13:50 - 00000000 ____D C:\ProgramData\xwMITZa
2015-07-27 13:48 - 2015-07-27 21:02 - 00000000 ____D C:\Program Files\MaxDrivrUpdater_v62.1170
2015-07-27 13:48 - 2015-07-27 13:48 - 00000000 ____D C:\Program Files\Software
2015-07-27 13:46 - 2015-07-27 13:46 - 00591232 _____ C:\Users\Vista\Downloads\Setup.exe
2015-07-26 09:27 - 2015-07-14 18:02 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-26 09:27 - 2015-07-14 16:23 - 00296960 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\ORTHOGRAPHE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\LE CID
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\LANGUE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\HUGO Biographie
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\FANTASTIQUE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\CARICATURE HUGO
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4°3 Fiches suivi docs divers
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° NOUVELLES FANTASTIQUES
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° MISERABLES PORTRAITS
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° FANTASTIQUE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° CYRANO
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° CRITIQUE SOCIALE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4 °POESIE LYRIQUE
2015-07-16 10:41 - 2010-02-07 18:15 - 00013390 _____ C:\Users\Vista\Documents\Victor Hugo discours sur la misère.docm
2015-07-16 10:36 - 2015-07-27 14:05 - 00000000 ____D C:\Users\Vista\Desktop\COURS 4ème
2015-07-16 10:27 - 2015-07-16 10:27 - 00000000 ____D C:\Users\Vista\Documents\4° 2011 2012
2015-07-16 08:28 - 2015-07-16 08:28 - 00000000 ____D C:\Users\Vista\Desktop\SAUVEGARDE COURS
2015-07-16 08:20 - 2015-07-16 08:21 - 00000000 ____D C:\Users\Vista\Desktop\AP rentrée 2015 2016
2015-07-16 08:16 - 2015-07-16 08:16 - 00000340 _____ C:\Users\Vista\Desktop\Atelier du langage numérique - Raccourci.lnk
2015-07-16 07:58 - 2015-07-03 18:04 - 01316864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-16 07:58 - 2015-06-25 04:57 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-16 07:57 - 2015-06-17 18:50 - 02264576 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-16 07:57 - 2015-06-17 17:09 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-16 07:56 - 2015-06-12 18:01 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-16 07:40 - 2015-05-31 10:11 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-16 07:39 - 2015-06-27 18:03 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-16 07:39 - 2015-06-27 18:02 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-16 07:39 - 2015-06-27 18:02 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-16 07:39 - 2015-06-27 18:01 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-07-16 07:39 - 2015-06-27 16:21 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-16 07:39 - 2015-06-27 16:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-16 07:39 - 2015-06-12 15:13 - 00440768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-16 07:39 - 2015-01-09 02:17 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 19:28 - 2015-07-03 07:31 - 12386304 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 19:28 - 2015-07-03 07:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 19:28 - 2015-06-17 03:14 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 19:28 - 2015-06-17 03:12 - 09750528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 19:28 - 2015-06-17 03:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 19:28 - 2015-06-17 03:10 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 19:28 - 2015-06-17 03:09 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 19:28 - 2015-06-17 03:09 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 19:28 - 2015-06-17 03:09 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 19:28 - 2015-06-17 03:09 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 19:28 - 2015-06-17 03:08 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-07-15 19:28 - 2015-06-17 03:08 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-07-06 16:04 - 2015-07-06 16:11 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-07-03 13:39 - 2015-07-03 13:39 - 00078254 _____ C:\Users\Vista\Downloads\BONNES VACANCES !.zip
2015-07-01 13:49 - 2015-07-01 13:49 - 00015813 _____ C:\Users\Vista\Downloads\Enseignement moral et civique 2015-16.odt
2015-07-01 13:49 - 2015-07-01 13:49 - 00015813 _____ C:\Users\Vista\Downloads\Enseignement moral et civique 2015-16 (1).odt
2015-06-27 07:43 - 2015-06-27 07:43 - 00004371 _____ C:\Users\Vista\Downloads\[Snes national] URGENT Changement de barème BAC S (2).eml
2015-06-27 07:42 - 2015-06-27 07:42 - 00004371 _____ C:\Users\Vista\Downloads\[Snes national] URGENT Changement de barème BAC S (1).eml
2015-06-27 07:41 - 2015-06-27 07:42 - 00004371 _____ C:\Users\Vista\Downloads\[Snes national] URGENT Changement de barème BAC S.eml
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-27 21:38 - 2015-06-20 13:40 - 01450817 ____N C:\Windows\WindowsUpdate.log
2015-07-27 21:38 - 2014-02-23 22:45 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-27 21:36 - 2015-03-19 21:17 - 00001056 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-27 21:34 - 2015-03-19 21:17 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-27 21:34 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-27 21:34 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-27 21:34 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-27 21:33 - 2006-11-02 15:01 - 00032528 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-27 21:31 - 2012-01-19 10:37 - 00000858 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-27 21:31 - 2012-01-19 10:37 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-27 21:31 - 2012-01-18 20:07 - 00000995 _____ C:\Users\Vista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 13:50 - 2015-03-19 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-26 09:33 - 2006-11-02 14:47 - 00397136 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-20 09:02 - 2014-11-26 18:10 - 00000000 ____D C:\Program Files\Index Education
2015-07-16 10:43 - 2006-11-02 12:33 - 01497460 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-16 09:06 - 2014-10-19 20:08 - 00000000 ____D C:\Users\Vista\Documents\COURS 6ème + SAUVEGARDE 2012 à 2015
2015-07-16 09:03 - 2014-11-12 20:00 - 00000000 ____D C:\Users\Vista\Documents\HUGO
2015-07-16 07:56 - 2013-09-02 18:13 - 00000000 ____D C:\Windows\system32\MRT
2015-07-16 07:45 - 2012-01-19 10:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-14 19:38 - 2014-02-23 22:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-07-14 19:38 - 2012-01-20 13:00 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-07-14 16:47 - 2014-09-21 16:37 - 00000000 ____D C:\Users\Vista\AppData\Roaming\Skype
2015-07-14 16:20 - 2014-09-21 16:37 - 00000000 ___RD C:\Program Files\Skype
2015-07-14 16:20 - 2014-09-21 16:36 - 00000000 ____D C:\ProgramData\Skype
2015-07-13 10:01 - 2013-01-16 04:05 - 00000000 ____D C:\Windows\Minidump
2015-07-12 21:24 - 2012-01-19 18:31 - 00011264 _____ C:\Users\Vista\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-06 16:11 - 2014-02-22 14:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-07-03 11:18 - 2012-01-21 11:22 - 00000000 ____D C:\Users\Vista\AppData\Local\Adobe
2015-07-03 08:49 - 2006-11-02 12:24 - 127070192 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
==================== Files in the root of some directories =======
2012-04-15 10:38 - 2015-05-17 15:07 - 0000680 _____ () C:\Users\Vista\AppData\Local\d3d9caps.dat
2012-01-19 18:31 - 2015-07-12 21:24 - 0011264 _____ () C:\Users\Vista\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Some files in TEMP:
====================
C:\Users\Vista\AppData\Local\Temp\1688.exe
C:\Users\Vista\AppData\Local\Temp\Quarantine.exe
C:\Users\Vista\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-07-27 21:42
==================== End of log ============================
Ran by Vista (administrator) on PC-DE-VISTA (27-07-2015 22:15:50)
Running from C:\Users\Vista\Desktop
Loaded Profiles: Vista (Available Profiles: Vista)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Language: Français (France)
Internet Explorer Version 9 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Index Education) C:\Program Files\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe
(Irrational Number Applications) C:\ProgramData\xwMITZa\eqqnqjJYoEU.exe
(Microsoft Corporation) C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files\MaxDrivrUpdater_v62.1170\MaxDrivrUpdater_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_18_0_0_209.exe
(Microsoft Corporation) C:\Windows\System32\msinfo32.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-19] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-03-19] (Avast Software s.r.o.)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6037504 2008-09-12] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2008-09-12] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)
HKLM\...\RunOnce: [MaxDrivrUpdater_v62.1170] => C:\Program Files\MaxDrivrUpdater_v62.1170\MaxDrivrUpdater_Service.exe [30216 2015-07-24] ()
HKU\S-1-5-21-475829364-404990070-2076625153-1000\...\Run: [WMPNSCFG] => C:\Program Files\Windows Media Player\WMPNSCFG.exe [202240 2008-01-19] (Microsoft Corporation)
HKU\S-1-5-21-475829364-404990070-2076625153-1000\...\Run: [GoogleChromeAutoLaunch_019F5DEB1932B27FBCAD3F88A7628DEA] => "C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
Startup: C:\Users\Vista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2012-01-20]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-03-19] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-475829364-404990070-2076625153-1000\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms}
HKU\S-1-5-21-475829364-404990070-2076625153-1000\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-475829364-404990070-2076625153-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-475829364-404990070-2076625153-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre6\bin\ssv.dll [2012-12-17] (Sun Microsystems, Inc.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-19] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2012-12-17] (Sun Microsystems, Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{B249A4AC-4855-4479-8772-5456FE07D9C1}: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default
FF DefaultSearchEngine: Google (avast)
FF DefaultSearchUrl: https://www.google.com/search/?trackid=sp-006
FF SearchEngineOrder.1: Google (avast)
FF SelectedSearchEngine: Google (avast)
FF Keyword.URL: https://www.google.com/search/?trackid=sp-006
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-14] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2012-02-04] (Google)
FF Plugin: @java.com/DTPlugin,version=1.6.0_38 -> C:\Windows\system32\npdeployJava1.dll [2012-11-14] (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll [2012-11-14] (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2011-04-05] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default\searchplugins\avira-safesearch.xml [2015-01-17]
FF SearchPlugin: C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default\searchplugins\google-avast.xml [2015-01-18]
FF SearchPlugin: C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default\searchplugins\yahoo-avast.xml [2015-01-17]
FF Extension: Portail lexical du CNRTL - C:\Users\Vista\AppData\Roaming\Mozilla\Firefox\Profiles\1zr2v8eb.default\Extensions\portail@cnrtl.fr.xpi [2015-03-01]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} [2015-07-06]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-01-25]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-30]
Chrome:
=======
CHR Profile: C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-19]
CHR Extension: (Avira Browser Safety) - C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-03-19]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-19]
CHR Extension: (Google Wallet) - C:\Users\Vista\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-19]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-03-19]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-19]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-19] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3205216 2015-03-19] (Avast Software)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40ST7.EXE [143872 2007-12-17] (SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [113664 2007-01-11] (SEIKO EPSON CORPORATION)
R2 eqqnqjJYoEU; C:\ProgramData\xwMITZa\eqqnqjJYoEU.exe [2732024 2015-07-27] (Irrational Number Applications)
R2 MajIndexEducationService; C:\Program Files\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe [3014848 2015-07-20] (Index Education)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-19] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-03-19] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-03-19] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-03-19] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-03-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-03-19] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427480 2015-03-19] (Avast Software s.r.o.)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-03-19] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206976 2015-03-19] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220240 2015-03-19] (Avast Software)
S4 blbdrive; \SystemRoot\system32\drivers\blbdrive.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-27 22:15 - 2015-07-27 22:20 - 00013757 _____ C:\Users\Vista\Desktop\FRST.txt
2015-07-27 22:15 - 2015-07-27 22:16 - 00000000 ____D C:\FRST
2015-07-27 22:11 - 2015-07-27 22:13 - 01650688 _____ (Farbar) C:\Users\Vista\Desktop\FRST.exe
2015-07-27 21:37 - 2015-07-27 22:10 - 00000000 ____D C:\Users\Vista\AppData\Local\WebShield
2015-07-27 21:22 - 2015-07-27 21:37 - 00000000 ____D C:\AdwCleaner
2015-07-27 21:22 - 2015-07-27 21:22 - 02248704 _____ C:\Users\Vista\Downloads\AdwCleaner-4.208.exe
2015-07-27 21:04 - 2015-07-27 21:04 - 00000000 ____D C:\Users\Vista\AppData\Local\bvxvbvef
2015-07-27 14:04 - 2015-07-27 14:05 - 00000000 ____D C:\Users\Vista\Desktop\HUGO prépa
2015-07-27 14:02 - 2015-07-01 13:51 - 00015490 _____ C:\Users\Vista\Documents\Enseignement moral et civique 2015-16.odt
2015-07-27 13:55 - 2015-07-27 13:55 - 00000000 ____D C:\ProgramData\Mleijeousp
2015-07-27 13:53 - 2015-07-27 13:53 - 00002068 _____ C:\Users\Public\Desktop\Live Mail.lnk
2015-07-27 13:50 - 2015-07-27 13:50 - 00000000 ____D C:\ProgramData\xwMITZa
2015-07-27 13:48 - 2015-07-27 21:02 - 00000000 ____D C:\Program Files\MaxDrivrUpdater_v62.1170
2015-07-27 13:48 - 2015-07-27 13:48 - 00000000 ____D C:\Program Files\Software
2015-07-27 13:46 - 2015-07-27 13:46 - 00591232 _____ C:\Users\Vista\Downloads\Setup.exe
2015-07-26 09:27 - 2015-07-14 18:02 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-26 09:27 - 2015-07-14 16:23 - 00296960 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\ORTHOGRAPHE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\LE CID
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\LANGUE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\HUGO Biographie
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\FANTASTIQUE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\CARICATURE HUGO
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4°3 Fiches suivi docs divers
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° NOUVELLES FANTASTIQUES
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° MISERABLES PORTRAITS
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° FANTASTIQUE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° CYRANO
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4° CRITIQUE SOCIALE
2015-07-16 10:41 - 2015-07-16 10:41 - 00000000 ____D C:\Users\Vista\Documents\4 °POESIE LYRIQUE
2015-07-16 10:41 - 2010-02-07 18:15 - 00013390 _____ C:\Users\Vista\Documents\Victor Hugo discours sur la misère.docm
2015-07-16 10:36 - 2015-07-27 14:05 - 00000000 ____D C:\Users\Vista\Desktop\COURS 4ème
2015-07-16 10:27 - 2015-07-16 10:27 - 00000000 ____D C:\Users\Vista\Documents\4° 2011 2012
2015-07-16 08:28 - 2015-07-16 08:28 - 00000000 ____D C:\Users\Vista\Desktop\SAUVEGARDE COURS
2015-07-16 08:20 - 2015-07-16 08:21 - 00000000 ____D C:\Users\Vista\Desktop\AP rentrée 2015 2016
2015-07-16 08:16 - 2015-07-16 08:16 - 00000340 _____ C:\Users\Vista\Desktop\Atelier du langage numérique - Raccourci.lnk
2015-07-16 07:58 - 2015-07-03 18:04 - 01316864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-16 07:58 - 2015-06-25 04:57 - 02066432 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-16 07:57 - 2015-06-17 18:50 - 02264576 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-16 07:57 - 2015-06-17 17:09 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-16 07:56 - 2015-06-12 18:01 - 00298496 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-16 07:40 - 2015-05-31 10:11 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-16 07:39 - 2015-06-27 18:03 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-16 07:39 - 2015-06-27 18:02 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-16 07:39 - 2015-06-27 18:02 - 00218112 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-16 07:39 - 2015-06-27 18:01 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-07-16 07:39 - 2015-06-27 16:21 - 00217088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-16 07:39 - 2015-06-27 16:21 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-16 07:39 - 2015-06-12 15:13 - 00440768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-16 07:39 - 2015-01-09 02:17 - 00107008 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 19:28 - 2015-07-03 07:31 - 12386304 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 19:28 - 2015-07-03 07:18 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 19:28 - 2015-06-17 03:14 - 01810432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 19:28 - 2015-06-17 03:12 - 09750528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 19:28 - 2015-06-17 03:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 19:28 - 2015-06-17 03:10 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 19:28 - 2015-06-17 03:09 - 01804288 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 19:28 - 2015-06-17 03:09 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 19:28 - 2015-06-17 03:09 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 19:28 - 2015-06-17 03:09 - 00421888 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 19:28 - 2015-06-17 03:08 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-07-15 19:28 - 2015-06-17 03:08 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-07-15 19:28 - 2015-06-17 03:08 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-07-06 16:04 - 2015-07-06 16:11 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-07-03 13:39 - 2015-07-03 13:39 - 00078254 _____ C:\Users\Vista\Downloads\BONNES VACANCES !.zip
2015-07-01 13:49 - 2015-07-01 13:49 - 00015813 _____ C:\Users\Vista\Downloads\Enseignement moral et civique 2015-16.odt
2015-07-01 13:49 - 2015-07-01 13:49 - 00015813 _____ C:\Users\Vista\Downloads\Enseignement moral et civique 2015-16 (1).odt
2015-06-27 07:43 - 2015-06-27 07:43 - 00004371 _____ C:\Users\Vista\Downloads\[Snes national] URGENT Changement de barème BAC S (2).eml
2015-06-27 07:42 - 2015-06-27 07:42 - 00004371 _____ C:\Users\Vista\Downloads\[Snes national] URGENT Changement de barème BAC S (1).eml
2015-06-27 07:41 - 2015-06-27 07:42 - 00004371 _____ C:\Users\Vista\Downloads\[Snes national] URGENT Changement de barème BAC S.eml
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-07-27 21:38 - 2015-06-20 13:40 - 01450817 ____N C:\Windows\WindowsUpdate.log
2015-07-27 21:38 - 2014-02-23 22:45 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-07-27 21:36 - 2015-03-19 21:17 - 00001056 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-27 21:34 - 2015-03-19 21:17 - 00001052 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-27 21:34 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-07-27 21:34 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2015-07-27 21:34 - 2006-11-02 14:47 - 00003664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2015-07-27 21:33 - 2006-11-02 15:01 - 00032528 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-07-27 21:31 - 2012-01-19 10:37 - 00000858 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-27 21:31 - 2012-01-19 10:37 - 00000846 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-07-27 21:31 - 2012-01-18 20:07 - 00000995 _____ C:\Users\Vista\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-07-27 13:50 - 2015-03-19 21:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-07-26 09:33 - 2006-11-02 14:47 - 00397136 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-20 09:02 - 2014-11-26 18:10 - 00000000 ____D C:\Program Files\Index Education
2015-07-16 10:43 - 2006-11-02 12:33 - 01497460 _____ C:\Windows\system32\PerfStringBackup.INI
2015-07-16 09:06 - 2014-10-19 20:08 - 00000000 ____D C:\Users\Vista\Documents\COURS 6ème + SAUVEGARDE 2012 à 2015
2015-07-16 09:03 - 2014-11-12 20:00 - 00000000 ____D C:\Users\Vista\Documents\HUGO
2015-07-16 07:56 - 2013-09-02 18:13 - 00000000 ____D C:\Windows\system32\MRT
2015-07-16 07:45 - 2012-01-19 10:40 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-07-14 19:38 - 2014-02-23 22:45 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-07-14 19:38 - 2012-01-20 13:00 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-07-14 16:47 - 2014-09-21 16:37 - 00000000 ____D C:\Users\Vista\AppData\Roaming\Skype
2015-07-14 16:20 - 2014-09-21 16:37 - 00000000 ___RD C:\Program Files\Skype
2015-07-14 16:20 - 2014-09-21 16:36 - 00000000 ____D C:\ProgramData\Skype
2015-07-13 10:01 - 2013-01-16 04:05 - 00000000 ____D C:\Windows\Minidump
2015-07-12 21:24 - 2012-01-19 18:31 - 00011264 _____ C:\Users\Vista\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-07-06 16:11 - 2014-02-22 14:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-07-03 11:18 - 2012-01-21 11:22 - 00000000 ____D C:\Users\Vista\AppData\Local\Adobe
2015-07-03 08:49 - 2006-11-02 12:24 - 127070192 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
==================== Files in the root of some directories =======
2012-04-15 10:38 - 2015-05-17 15:07 - 0000680 _____ () C:\Users\Vista\AppData\Local\d3d9caps.dat
2012-01-19 18:31 - 2015-07-12 21:24 - 0011264 _____ () C:\Users\Vista\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
Some files in TEMP:
====================
C:\Users\Vista\AppData\Local\Temp\1688.exe
C:\Users\Vista\AppData\Local\Temp\Quarantine.exe
C:\Users\Vista\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-07-27 21:42
==================== End of log ============================