cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:02-03-2016
Exécuté par lucas (administrateur) sur DESKTOP-UMBFQJ4 (02-03-2016 18:48:09)
Exécuté depuis C:\Users\lucas\Downloads
Profils chargés: lucas (Profils disponibles: lucas)
Platform: Windows 10 Home (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle Corporation) C:\Program Files (x86)\Minecraft\runtime\jre-x64\1.8.0_25\bin\java.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Oracle Corporation) C:\Program Files (x86)\Minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2631824 2015-07-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-02-16] (AVAST Software)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1298456 2015-04-20] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595504 2016-01-29] (Oracle Corporation)
HKU\S-1-5-21-1163931465-3209920983-4045071228-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50599552 2016-02-02] (Skype Technologies S.A.)
HKU\S-1-5-21-1163931465-3209920983-4045071228-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8619224 2016-01-15] (Piriform Ltd)
HKU\S-1-5-21-1163931465-3209920983-4045071228-1001\...\MountPoints2: {cd211350-9ad3-11e5-9bc1-806e6f6e6963} - "D:\SETUP.EXE"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-02-13] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2015-12-25]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
GroupPolicy: Restriction - Chrome <======= ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{842d75cf-0309-48f6-a9f0-5acd654d2ecc}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-1163931465-3209920983-4045071228-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKU\S-1-5-21-1163931465-3209920983-4045071228-1001 -> {126FA951-67E0-46FB-B00B-00FB1BA5B95E} URL = hxxps://fr.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-13] (AVAST Software)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll [2016-02-13] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-13] (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-02-13] (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)

FireFox:
========
FF ProfilePath: C:\Users\lucas\AppData\Roaming\Mozilla\Firefox\Profiles\m4r6b3gx.default
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.74.2 -> C:\Program Files (x86)\Java\jre1.8.0_74\bin\dtplugin\npDeployJava1.dll [2016-02-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.74.2 -> C:\Program Files (x86)\Java\jre1.8.0_74\bin\plugin2\npjp2.dll [2016-02-13] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-08-15] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-08-15] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-28] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-02-13]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-02-13]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://google.fr/","hxxp://adkami.com/","hxxps://www.youtube.com/","hxxps://twitter.com/","hxxp://gmail.com/"
CHR DefaultSearchURL: Default -> hxxps://fr.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=orcl_default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://fr.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-03]
CHR Extension: (Google Docs) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-03]
CHR Extension: (Google Drive) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-03]
CHR Extension: (YouTube) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-03]
CHR Extension: (Adblock Plus) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03]
CHR Extension: (Red Fox Snow Theme) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgaadipmojdihomphfmjphmelinpdalg [2016-02-13]
CHR Extension: (Recherche Google) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-03]
CHR Extension: (Google Sheets) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-01-03]
CHR Extension: (Avast Online Security) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-02-13]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-03]
CHR Extension: (Gmail) - C:\Users\lucas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-03]
CHR HKLM-x32\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-02-13]

==================== Services (Avec liste blanche) ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-13] (AVAST Software)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1155216 2015-07-14] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Fichier non signé]
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140936 2013-05-14] ()
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3698904 2015-09-14] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5544592 2015-07-14] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-02-13] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-02-13] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-02-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-02-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-02-13] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065720 2016-02-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-02-23] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-02-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-02-13] (AVAST Software)
R3 LcUvcUpper; C:\Windows\system32\DRIVERS\LcUvcUpper.sys [37912 2015-12-25] (Microsoft Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [195336 2015-12-25] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-07-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [47976 2015-07-03] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek )
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-03-02 18:48 - 2016-03-02 18:48 - 00015629 _____ C:\Users\lucas\Downloads\FRST.txt
2016-03-02 18:47 - 2016-03-02 18:47 - 02371584 _____ (Farbar) C:\Users\lucas\Downloads\FRST64.exe
2016-03-02 18:14 - 2016-03-02 18:14 - 00016148 _____ C:\Windows\system32\DESKTOP-UMBFQJ4_lucas_HistoryPrediction.bin
2016-03-02 13:12 - 2016-03-02 13:32 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Mozilla
2016-03-02 13:12 - 2016-03-02 13:12 - 00001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-02 13:12 - 2016-03-02 13:12 - 00001220 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-02 13:12 - 2016-03-02 13:12 - 00000000 ____D C:\Users\lucas\AppData\Local\Mozilla
2016-03-02 13:12 - 2016-03-02 13:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-02 13:12 - 2016-03-02 13:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-02 13:08 - 2016-03-02 13:08 - 00242320 _____ C:\Users\lucas\Downloads\Firefox Setup Stub 44.0.2.exe
2016-03-02 09:17 - 2016-03-02 09:17 - 01518592 _____ C:\Users\lucas\Downloads\adwcleaner_5.037.exe
2016-03-01 21:13 - 2016-03-01 21:13 - 00085912 _____ C:\Users\lucas\Desktop\ZHPDiag.txt
2016-03-01 21:11 - 2016-03-01 21:11 - 00000865 _____ C:\Users\lucas\Desktop\ZHPDiag.lnk
2016-03-01 21:10 - 2016-03-01 21:11 - 02132480 _____ C:\Users\lucas\Downloads\ZHPDiag3.exe
2016-02-28 21:32 - 2016-02-28 21:32 - 00322968 _____ C:\Users\lucas\ZHPCleaner.exe
2016-02-28 20:35 - 2016-02-28 20:35 - 00002346 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-28 20:35 - 2016-02-28 20:35 - 00002334 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-02-28 20:33 - 2016-03-02 18:43 - 00001108 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-28 20:33 - 2016-03-02 18:14 - 00001104 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-28 20:33 - 2016-02-28 20:38 - 00004166 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-28 20:33 - 2016-02-28 20:38 - 00003934 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-28 20:31 - 2016-02-28 20:32 - 00880784 _____ (Google Inc.) C:\Users\lucas\Downloads\ChromeSetup.exe
2016-02-24 12:16 - 2016-02-24 12:17 - 04784195 _____ C:\Users\lucas\Downloads\FaithFull 32x32 1.9.zip
2016-02-24 08:02 - 2016-02-24 08:02 - 03315732 _____ C:\Users\lucas\Downloads\AD-Reforged_1.8.zip
2016-02-13 22:21 - 2016-02-13 22:21 - 00002870 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-02-13 22:21 - 2016-02-13 22:21 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-02-13 22:21 - 2016-02-13 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-02-13 22:21 - 2016-02-13 22:21 - 00000000 ____D C:\Program Files\CCleaner
2016-02-13 22:20 - 2016-02-13 22:20 - 06828320 _____ (Piriform Ltd) C:\Users\lucas\Downloads\ccsetup514.exe
2016-02-13 22:17 - 2016-02-13 22:18 - 00000000 ____D C:\Users\lucas\Downloads\Nouveau dossier
2016-02-13 22:15 - 2016-03-02 18:48 - 00000000 ____D C:\FRST
2016-02-13 22:00 - 2016-02-28 19:08 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-13 21:59 - 2016-02-13 21:59 - 00001175 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-02-13 21:59 - 2016-02-13 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-02-13 21:59 - 2016-02-13 21:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-13 21:59 - 2016-02-13 21:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-02-13 21:59 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-02-13 21:59 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-02-13 21:59 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-02-13 21:58 - 2016-02-13 21:58 - 22908888 _____ (Malwarebytes ) C:\Users\lucas\Downloads\mbam-setup-2.2.0.1024.exe
2016-02-13 21:51 - 2016-03-02 09:20 - 00000000 ____D C:\AdwCleaner
2016-02-13 21:49 - 2016-02-13 21:49 - 00006747 _____ C:\Users\lucas\Desktop\ZHPCleaner.txt
2016-02-13 21:44 - 2016-03-01 21:18 - 00000000 ____D C:\Users\lucas\AppData\Roaming\ZHP
2016-02-13 21:44 - 2016-02-28 21:32 - 00000738 _____ C:\Users\lucas\Desktop\ZHPCleaner.lnk
2016-02-13 21:43 - 2016-02-13 21:44 - 02058240 _____ C:\Users\lucas\Downloads\ZHPCleaner.exe
2016-02-13 12:42 - 2016-02-13 12:42 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2016-02-13 12:42 - 2016-02-13 12:42 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr
2016-02-13 12:42 - 2016-02-13 12:42 - 00001979 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2016-02-13 12:42 - 2016-02-13 12:42 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-02-10 21:19 - 2016-01-31 07:25 - 01951872 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2016-02-10 21:19 - 2016-01-31 07:25 - 01248896 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2016-02-10 21:19 - 2016-01-31 07:24 - 01824880 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-02-10 21:19 - 2016-01-31 07:23 - 02601160 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2016-02-10 21:19 - 2016-01-31 07:23 - 01420392 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2016-02-10 21:19 - 2016-01-31 07:06 - 01535032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-02-10 21:19 - 2016-01-31 07:06 - 01531368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2016-02-10 21:19 - 2016-01-31 07:06 - 00809336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2016-02-10 21:19 - 2016-01-31 07:04 - 01811360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2016-02-10 21:19 - 2016-01-31 07:04 - 01180696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2016-02-10 21:19 - 2016-01-31 06:38 - 21873152 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2016-02-10 21:19 - 2016-01-31 06:34 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\ngckeyenum.dll
2016-02-10 21:19 - 2016-01-31 06:33 - 24593920 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-02-10 21:19 - 2016-01-31 06:33 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\IoTAssignedAccessLockFramework.dll
2016-02-10 21:19 - 2016-01-31 06:29 - 11557888 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2016-02-10 21:19 - 2016-01-31 06:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rasman.dll
2016-02-10 21:19 - 2016-01-31 06:26 - 06787072 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-02-10 21:19 - 2016-01-31 06:26 - 03793408 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2016-02-10 21:19 - 2016-01-31 06:25 - 12504576 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-02-10 21:19 - 2016-01-31 06:25 - 02237952 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-02-10 21:19 - 2016-01-31 06:25 - 00366592 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2016-02-10 21:19 - 2016-01-31 06:25 - 00143872 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2016-02-10 21:19 - 2016-01-31 06:24 - 00784384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-02-10 21:19 - 2016-01-31 06:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2016-02-10 21:19 - 2016-01-31 06:24 - 00033280 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-02-10 21:19 - 2016-01-31 06:23 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2016-02-10 21:19 - 2016-01-31 06:22 - 00680448 _____ (Microsoft Corporation) C:\Windows\system32\rasmans.dll
2016-02-10 21:19 - 2016-01-31 06:20 - 02849792 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-02-10 21:19 - 2016-01-31 06:19 - 01602560 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-02-10 21:19 - 2016-01-31 06:19 - 00237056 _____ (Microsoft Corporation) C:\Windows\system32\NetworkDesktopSettings.dll
2016-02-10 21:19 - 2016-01-31 06:19 - 00046592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IoTAssignedAccessLockFramework.dll
2016-02-10 21:19 - 2016-01-31 06:18 - 00771072 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2016-02-10 21:19 - 2016-01-31 06:18 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll
2016-02-10 21:19 - 2016-01-31 06:17 - 19324928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-02-10 21:19 - 2016-01-31 06:17 - 00109056 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-02-10 21:19 - 2016-01-31 06:16 - 09889280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2016-02-10 21:19 - 2016-01-31 06:16 - 00950272 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-02-10 21:19 - 2016-01-31 06:14 - 07525376 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2016-02-10 21:19 - 2016-01-31 06:14 - 03588096 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2016-02-10 21:19 - 2016-01-31 06:13 - 04791808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-02-10 21:19 - 2016-01-31 06:13 - 00123392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasman.dll
2016-02-10 21:19 - 2016-01-31 06:13 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\ztrace_maps.dll
2016-02-10 21:19 - 2016-01-31 06:11 - 05156352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-02-10 21:19 - 2016-01-31 06:11 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-02-10 21:19 - 2016-01-31 06:11 - 00291840 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-02-10 21:19 - 2016-01-31 06:11 - 00162304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll
2016-02-10 21:19 - 2016-01-31 06:07 - 18802176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2016-02-10 21:19 - 2016-01-31 06:06 - 02316800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-02-10 21:19 - 2016-01-31 06:05 - 01380864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-02-10 21:19 - 2016-01-31 06:05 - 00574464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll
2016-02-10 21:19 - 2016-01-31 06:05 - 00118272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll
2016-02-10 21:19 - 2016-01-31 06:04 - 00100352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-02-10 21:19 - 2016-01-31 06:02 - 03580416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-02-10 21:19 - 2016-01-31 06:02 - 00768000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-02-10 21:19 - 2016-01-31 06:00 - 11263488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-02-10 21:19 - 2016-01-31 05:59 - 05457408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2016-02-10 21:19 - 2016-01-31 05:58 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ztrace_maps.dll
2016-02-05 19:13 - 2016-02-05 19:13 - 00000000 ____D C:\Users\lucas\AppData\Local\Blizzard
2016-02-05 18:51 - 2016-02-05 18:51 - 00001260 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2016-02-05 18:51 - 2016-02-05 18:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone
2016-02-05 18:40 - 2016-02-05 19:13 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2016-02-05 18:39 - 2016-02-25 18:24 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Battle.net
2016-02-05 18:39 - 2016-02-25 18:24 - 00000000 ____D C:\Users\lucas\AppData\Local\Battle.net
2016-02-05 18:39 - 2016-02-05 18:39 - 00001223 _____ C:\Users\Public\Desktop\Battle.net.lnk
2016-02-05 18:39 - 2016-02-05 18:39 - 00000000 ____D C:\Users\lucas\AppData\Local\Blizzard Entertainment
2016-02-05 18:39 - 2016-02-05 18:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2016-02-05 18:39 - 2016-02-05 18:39 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2016-02-05 18:38 - 2016-02-25 18:24 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-02-05 18:35 - 2016-02-25 18:24 - 00000000 ____D C:\ProgramData\Battle.net
2016-02-05 18:35 - 2016-02-05 18:35 - 03142712 _____ (Blizzard Entertainment) C:\Users\lucas\Downloads\Hearthstone-Setup.exe
2016-02-03 13:20 - 2016-02-03 13:20 - 00010685 _____ C:\Users\lucas\Downloads\RESA-0005416818_Documentbeneficiaire_17060372.pdf

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-03-02 18:46 - 2015-12-25 12:09 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Skype
2016-03-02 18:41 - 2015-12-25 21:49 - 00000000 ____D C:\Users\lucas\AppData\Roaming\TS3Client
2016-03-02 18:22 - 2015-12-25 12:59 - 00000000 ____D C:\Users\lucas\AppData\Roaming\.minecraft
2016-03-02 18:17 - 2015-07-10 12:04 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-02 18:17 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\AppReadiness
2016-03-02 18:16 - 2015-12-30 12:47 - 01749724 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-02 18:16 - 2015-07-10 17:24 - 00783358 _____ C:\Windows\system32\perfh00C.dat
2016-03-02 18:16 - 2015-07-10 17:24 - 00146364 _____ C:\Windows\system32\perfc00C.dat
2016-03-02 18:16 - 2015-07-10 12:02 - 00000000 ____D C:\Windows\INF
2016-03-02 18:09 - 2015-12-04 16:39 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-02 18:09 - 2015-07-10 13:21 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-02 15:50 - 2015-12-25 12:06 - 00004178 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C1227541-355A-4B55-9A0A-EA8CB0AF366B}
2016-03-02 09:21 - 2015-07-10 10:05 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-03-01 22:51 - 2015-12-04 23:09 - 00000000 ____D C:\Windows\Panther
2016-03-01 22:49 - 2015-10-30 20:24 - 00000000 ___HD C:\$WINDOWS.~BT
2016-02-28 21:32 - 2015-12-25 11:47 - 00000000 ____D C:\Users\lucas
2016-02-28 20:35 - 2015-12-25 11:56 - 00000000 ____D C:\Program Files (x86)\Google
2016-02-28 19:57 - 2015-12-25 19:02 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-28 19:57 - 2015-12-25 19:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-02-28 19:57 - 2015-12-25 19:02 - 00000000 ____D C:\Program Files (x86)\WinRAR
2016-02-28 19:28 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\L2Schemas
2016-02-27 13:39 - 2015-12-25 11:54 - 00004280 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-02-24 17:11 - 2015-12-25 12:55 - 00000000 ____D C:\Program Files (x86)\Minecraft
2016-02-23 20:22 - 2015-12-25 11:53 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2016-02-19 16:24 - 2015-12-25 12:09 - 00000000 ____D C:\Windows\system32\MRT
2016-02-19 16:21 - 2015-12-25 12:09 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-02-16 12:16 - 2015-07-10 12:04 - 00000000 ____D C:\Windows\rescache
2016-02-14 14:05 - 2015-12-30 12:40 - 00000000 ____D C:\Windows\Minidump
2016-02-13 21:47 - 2015-12-25 12:02 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-02-13 21:47 - 2015-12-25 12:02 - 00000000 ____D C:\Users\lucas\.oracle_jre_usage
2016-02-13 21:47 - 2015-12-25 12:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-02-13 21:46 - 2015-12-25 12:02 - 00000000 ____D C:\Program Files (x86)\Java
2016-02-13 21:41 - 2016-01-24 20:11 - 00003204 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1453662688
2016-02-13 21:41 - 2016-01-24 20:11 - 00001082 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-02-13 20:53 - 2015-12-28 00:14 - 00000000 ____D C:\Users\lucas\AppData\Roaming\Mumble
2016-02-13 12:42 - 2015-12-25 11:53 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2016-02-13 12:42 - 2015-12-25 11:53 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2016-02-13 12:42 - 2015-12-25 11:53 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2016-02-13 12:42 - 2015-12-25 11:53 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2016-02-13 12:42 - 2015-12-25 11:53 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2016-02-13 12:42 - 2015-12-25 11:53 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2016-02-13 12:41 - 2016-01-24 20:11 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2016-02-13 12:41 - 2015-12-25 11:53 - 01065720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2016-02-13 11:35 - 2015-07-10 17:28 - 00000000 ____D C:\Program Files\Windows Journal
2016-02-11 18:55 - 2015-07-10 11:55 - 00000000 ____D C:\Windows\CbsTemp
2016-02-07 09:26 - 2015-12-25 12:09 - 00000000 ____D C:\ProgramData\Skype
2016-02-05 20:14 - 2015-12-25 11:51 - 00002411 _____ C:\Users\lucas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-02-05 20:14 - 2015-12-25 11:51 - 00000000 ___RD C:\Users\lucas\OneDrive
2016-02-02 23:47 - 2015-07-10 12:06 - 00828920 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-02 23:47 - 2015-07-10 12:06 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-01 20:37 - 2016-01-22 18:24 - 00000000 ____D C:\ProgramData\CanonIJPLM

==================== Fichiers à la racine de certains dossiers =======

2015-12-04 17:07 - 2015-12-04 17:07 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Fichiers à déplacer ou supprimer:
====================
C:\Users\lucas\ZHPCleaner.exe


Certains fichiers dans TEMP:
====================
C:\Users\lucas\AppData\Local\Temp\ICReinstall_ChromeSetup.exe
C:\Users\lucas\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement


LastRegBack: 2016-03-02 15:30

==================== Fin de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité