Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Exécuté par Bahia (administrateur) sur PC-DE-BAHIA (03-04-2016 10:27:38)
Exécuté depuis C:\Users\Bahia\Desktop
Profils chargés: Bahia (Profils disponibles: Bahia)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Sony Ericsson Mobile Communications) C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe
(Sony Ericsson Mobile Communications) C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe
(Sony Corporation) C:\Program Files\Sony\Network Utility\NSUService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Media plus\SOHDms.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Media plus\SOHDs.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Google) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Sony NSCE) C:\Program Files\Sony\Marketing Tools\MarketingTools.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Sony Corporation) C:\Program Files\Sony\Network Utility\LANUtil.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\daemon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Media plus\VMpTtray.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [NvSvc] => RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [122880 2008-02-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [ISBMgr.exe] => C:\Program Files\Sony\ISB Utility\ISBMgr.exe [311296 2007-11-21] (Sony Corporation)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-07-31] (Google)
HKLM\...\Run: [MarketingTools] => C:\Program Files\Sony\Marketing Tools\MarketingTools.exe [36864 2008-04-19] (Sony NSCE)
HKLM\...\Run: [PinnacleDriverCheck] => C:\Windows\system32\PSDrvCheck.exe [406016 2003-11-10] ()
HKLM\...\Run: [LaunchList] => C:\Program Files\Pinnacle\MediaCenter\LaunchList.exe
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4718592 2008-01-23] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2008-01-23] (Realtek Semiconductor Corp.)
HKLM\...\Run: [DivXUpdate] => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-04] (Avast Software s.r.o.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-09-12] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [595504 2016-01-29] (Oracle Corporation)
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll [2007-08-14] (Sony Corporation)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [NSUFloatingUI] => C:\Program Files\Sony\Network Utility\LANUtil.exe [262144 2008-07-17] (Sony Corporation)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [PMCS] => "C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe"
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\daemon.exe [216520 2008-12-10] (DT Soft Ltd)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [VMpTtray.exe] => C:\Program Files\Sony\VAIO Media plus\VMpTtray.exe [86016 2008-03-09] (Sony Corporation)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-06-07] (Google Inc.)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\RunOnce: [Shockwave Updater] => C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103471 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; FBSMTWB; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 1.1 (l'élément de données a 224 caractères en plus).
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\MountPoints2: {4fafb299-ab82-11df-9d30-001a80f5fb48} - I:\Startme.exe
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\MountPoints2: {f0cc7766-d778-11e4-b6a4-001a80f5fb48} - I:\LaunchU3.exe
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\...\Run: [msnmsgr] => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
AppInit_DLLs: avgrsstx.dll => Pas de fichier
AppInit_DLLs: c:\progra~1\google\google~1\goec62~1.dll => c:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-07-31] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-06-04] (Avast Software s.r.o.)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CHR HKU\S-1-5-21-3380817912-2417951978-112482859-1003\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{16CD4710-96A7-4E9E-A686-544CBC7013A2}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{ED729481-F052-45A8-A4F1-5B6DDCA960AD}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {9E0D3BD2-6679-4A0C-9156-404C54286990} URL = hxxp://www.google.fr/search?hl=fr&q={searchTerms}&meta=
SearchScopes: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> {83869C76-5AF5-45DA-8FE5-59B0AA0DDA79} URL = hxxp://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}
SearchScopes: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_74\bin\ssv.dll [2016-02-19] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-04] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-02-19] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> Pas de nom - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Pas de fichier
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} hxxp://kiw.imgag.com/imgag/cp/install/crusher-kiwen.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Bahia\AppData\Roaming\Mozilla\Firefox\Profiles\63zz04us.default
FF DefaultSearchEngine: Bing
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [2008-10-05] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-09-04] ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [Pas de fichier]
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll [Pas de fichier]
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.74.2 -> C:\Program Files\Java\jre1.8.0_74\bin\dtplugin\npDeployJava1.dll [2016-02-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.74.2 -> C:\Program Files\Java\jre1.8.0_74\bin\plugin2\npjp2.dll [2016-02-19] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 -> C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll [2011-10-12] (Google)
FF Plugin: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files\Video Convert Master\codec\real\browser\plugins\nppl3260.dll [Pas de fichier]
FF Plugin: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files\Video Convert Master\codec\real\browser\plugins\nprpjplug.dll [Pas de fichier]
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files\Sony\Media Go\npmediago.dll [2010-01-20] (Sony Media Software and Services Inc)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 -> C:\Program Files\Yahoo!\Common\npyaxmpb.dll [2007-03-10] (Yahoo! Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010-07-17] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml [2010-12-20]
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml [2010-07-31]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-18]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.sexyavenue.com/fr/boutique
CHR StartupUrls: Default -> "hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl"
CHR Profile: C:\Users\Bahia\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bahia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-22]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-04]
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-04] (Avast Software s.r.o.)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-06-04] (Avast Software)
R2 EmmaDevMgmtSvc; C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe [306296 2010-07-01] (Sony Ericsson Mobile Communications) [Fichier non signé]
R2 EmmaUpdMgmtSvc; C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe [162936 2010-07-01] (Sony Ericsson Mobile Communications) [Fichier non signé]
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-07-31] (Google)
S3 MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [53248 2007-11-28] (Sony Corporation) [Fichier non signé]
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 NSUService; C:\Program Files\Sony\Network Utility\NSUService.exe [233472 2008-07-17] (Sony Corporation) [Fichier non signé]
S3 PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [53248 2007-11-28] (Sony Corporation) [Fichier non signé]
S3 Service CANALPLAY; C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe [423584 2007-10-01] (Canal+ Active)
R2 SOHCImp; C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe [104288 2008-03-04] (Sony Corporation)
R2 SOHDms; C:\Program Files\Sony\VAIO Media plus\SOHDms.exe [350048 2008-03-04] (Sony Corporation)
R2 SOHDs; C:\Program Files\Sony\VAIO Media plus\SOHDs.exe [63328 2008-03-04] (Sony Corporation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe [73728 2008-02-15] (Sony Corporation) [Fichier non signé]
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [182392 2007-08-14] (Sony Corporation)
R2 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [333088 2008-03-03] (Sony Corporation)
R3 Vcsw; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [274432 2008-02-15] (Sony Corporation) [Fichier non signé]
R2 VzCdbSvc; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [184320 2008-02-15] (Sony Corporation) [Fichier non signé]
R2 VzFw; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [147456 2008-02-15] (Sony Corporation) [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-06-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-06-04] (Avast Software s.r.o.)
R1 AswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-06-04] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-06-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-06-04] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-12-18] (Avast Software s.r.o.)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [35272 2013-10-25] (The OpenVPN Project)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-06-04] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-06-04] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2008-12-21] () [Fichier non signé]
R3 ti21sony; C:\Windows\System32\drivers\ti21sony.sys [812544 2007-06-06] (Texas Instruments)
S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [291200 2006-08-09] (eMPIA Technology, Inc.)
S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [28160 2006-08-09] (eMPIA Technology, Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-06-04] (Avast Software)
U3 a8ejm1dd; C:\Windows\system32\Drivers\a8ejm1dd.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zéro octet Fichier/Dossier)
S3 athur; system32\DRIVERS\athur.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S4 UIUSys; system32\DRIVERS\UIUSYS.SYS [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-04-03 10:27 - 2016-04-03 10:29 - 00022861 _____ C:\Users\Bahia\Desktop\FRST.txt
2016-04-03 10:27 - 2016-04-03 10:27 - 00000000 ____D C:\FRST
2016-04-03 09:43 - 2016-04-03 09:43 - 01725440 _____ (Farbar) C:\Users\Bahia\Desktop\FRST.exe
2016-03-27 20:23 - 2016-03-27 20:40 - 00000344 _____ C:\Users\Bahia\Desktop\Papa et maman.txt
2016-03-26 22:36 - 2016-03-26 22:36 - 00000000 ____D C:\Users\Bahia\Desktop\Nettoyage Ordi
2016-03-26 18:38 - 2016-03-26 18:38 - 02162688 _____ C:\Users\Bahia\ZHPDiag3.exe
2016-03-26 18:35 - 2016-03-26 18:36 - 00000000 ____D C:\Program Files\ZHPFix
2016-03-26 18:35 - 2016-03-26 18:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-03-26 09:49 - 2016-03-26 10:35 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-26 09:49 - 2016-03-26 09:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-26 09:49 - 2016-03-26 09:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-26 09:49 - 2016-03-26 09:49 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-03-26 09:49 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-26 09:49 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-26 09:49 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-26 09:04 - 2016-03-26 09:09 - 00000000 ____D C:\AdwCleaner
2016-03-25 19:12 - 2016-03-25 19:12 - 02100736 _____ C:\Users\Bahia\Downloads\ZHPCleaner.exe
2016-03-25 11:28 - 2016-03-25 11:29 - 00078856 _____ C:\Windows\ntbtlog.txt
2016-03-25 10:47 - 2016-03-25 10:47 - 00000000 ____D C:\SUPERDelete
2016-03-25 10:42 - 2016-03-25 10:42 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\SUPERAntiSpyware.com
2016-03-25 10:38 - 2016-03-25 10:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-03-25 08:13 - 2016-03-25 08:13 - 00000310 _____ C:\Users\Bahia\Public - Raccourci.lnk
2016-03-24 21:32 - 2016-03-26 18:41 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\ZHP
2016-03-23 19:34 - 2016-03-24 17:54 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-03-23 19:34 - 2016-03-23 19:34 - 00000818 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-23 19:34 - 2016-03-23 19:34 - 00000806 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-23 19:30 - 2016-03-23 19:33 - 45811976 _____ C:\Users\Bahia\Downloads\Firefox Setup 43.0.1.exe
2016-03-22 23:03 - 2016-03-24 17:54 - 00000000 ____D C:\Windows\system32\vbox
2016-03-10 15:42 - 2016-02-19 22:34 - 01208776 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-10 15:42 - 2016-02-06 03:17 - 03609024 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-03-10 15:42 - 2016-02-06 03:17 - 03556800 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-10 15:42 - 2016-02-06 03:12 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-10 15:42 - 2016-02-06 03:11 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-10 15:42 - 2016-02-06 03:11 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-10 15:42 - 2016-02-06 01:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-10 15:42 - 2015-11-20 15:15 - 00922432 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00015200 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-10 15:39 - 2016-02-06 03:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-10 15:39 - 2016-02-06 03:11 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-10 15:39 - 2016-02-06 01:33 - 00297472 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-10 15:37 - 2016-02-02 16:30 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-10 15:36 - 2016-02-03 18:06 - 00564736 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-10 15:36 - 2016-02-03 18:06 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-03-10 15:36 - 2016-02-03 18:05 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-10 15:17 - 2016-02-04 16:25 - 02068992 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-10 14:00 - 2016-02-09 01:17 - 01815552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-10 14:00 - 2016-02-09 01:15 - 12392960 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-10 14:00 - 2016-02-09 01:13 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-10 14:00 - 2016-02-09 01:12 - 09753600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-10 14:00 - 2016-02-09 01:12 - 01140224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-10 14:00 - 2016-02-09 01:11 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 01804800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-10 14:00 - 2016-02-09 01:10 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-10 14:00 - 2016-02-09 01:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-10 14:00 - 2016-02-09 01:09 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-03-10 14:00 - 2016-02-09 01:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-04-03 10:26 - 2016-01-19 12:22 - 00000000 ____D C:\Users\Bahia\Desktop\CV et LM
2016-04-03 10:05 - 2012-12-25 20:16 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-03 09:21 - 2009-06-27 12:02 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2016-04-03 09:21 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-03 09:21 - 2006-11-02 13:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-03 09:21 - 2006-11-02 13:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-03 05:08 - 2006-11-02 14:01 - 00032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-04-02 20:26 - 2012-04-15 13:35 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\vlc
2016-03-27 11:53 - 2009-07-23 08:08 - 00000952 _____ C:\Windows\Tasks\Google Software Updater.job
2016-03-26 18:38 - 2008-11-18 22:02 - 00000000 ____D C:\Users\Bahia
2016-03-26 09:09 - 2010-02-11 15:43 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\Yahoo!
2016-03-26 01:45 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\tracing
2016-03-24 17:54 - 2010-02-10 14:39 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-03-24 17:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\spool
2016-03-24 17:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\registration
2016-03-24 17:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\inf
2016-03-24 17:54 - 2006-11-02 11:22 - 64487424 _____ C:\Windows\system32\config\software_previous
2016-03-24 17:54 - 2006-11-02 11:22 - 37486592 _____ C:\Windows\system32\config\system_previous
2016-03-24 17:51 - 2006-11-02 11:22 - 52690944 _____ C:\Windows\system32\config\components_previous
2016-03-24 17:51 - 2006-11-02 11:22 - 00102400 _____ C:\Windows\system32\config\sam_previous
2016-03-24 16:50 - 2008-03-17 10:41 - 00000000 ____D C:\Program Files\Google
2016-03-24 16:39 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\ModemLogs
2016-03-23 19:34 - 2009-05-25 21:55 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\Mozilla
2016-03-23 11:22 - 2008-01-21 09:41 - 01855728 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-23 11:22 - 2008-01-21 09:40 - 00805264 _____ C:\Windows\system32\perfh00C.dat
2016-03-23 11:22 - 2008-01-21 09:40 - 00188176 _____ C:\Windows\system32\perfc00C.dat
2016-03-22 11:26 - 2006-11-02 11:22 - 00303104 _____ C:\Windows\system32\config\default_previous
2016-03-22 11:25 - 2006-11-02 11:22 - 00032768 _____ C:\Windows\system32\config\security_previous
2016-03-21 13:05 - 2012-12-25 20:16 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-03-21 13:05 - 2011-06-17 08:08 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-03-11 09:21 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2016-03-11 08:51 - 2006-11-02 13:47 - 00425112 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-11 08:46 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-03-11 08:46 - 2006-11-02 12:18 - 00000000 ____D C:\Program Files\Common Files\System
2016-03-10 15:33 - 2013-10-26 02:58 - 00000000 ____D C:\Windows\system32\MRT
2016-03-10 15:20 - 2006-11-02 11:24 - 141270216 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
==================== Fichiers à la racine de certains dossiers =======
2008-12-27 23:24 - 2008-12-27 23:25 - 0000006 _____ () C:\Users\Bahia\AppData\Roaming\frenchvocab.plist
2008-12-27 23:24 - 2008-12-27 23:24 - 0000050 _____ () C:\Users\Bahia\AppData\Roaming\frenchvocabhighscores.plist
2008-12-27 23:25 - 2008-12-27 23:25 - 0019651 _____ () C:\Users\Bahia\AppData\Roaming\frenchvocabmaintenance2.plist
2008-11-18 22:02 - 2008-03-17 14:16 - 0028190 _____ () C:\Users\Bahia\AppData\Roaming\nvModes.001
2008-11-18 22:02 - 2008-03-17 13:26 - 0028190 _____ () C:\Users\Bahia\AppData\Roaming\nvModes.dat
2008-11-19 00:39 - 2013-04-01 14:02 - 0001424 _____ () C:\Users\Bahia\AppData\Roaming\QuickZip45.ini
2008-12-27 23:20 - 2008-12-27 23:20 - 0000012 _____ () C:\Users\Bahia\AppData\Roaming\speaknspell.txt
2008-12-27 23:20 - 2008-12-27 23:20 - 0476061 _____ () C:\Users\Bahia\AppData\Roaming\speaknspelldictionary.txt
2009-11-02 22:00 - 2009-11-02 22:00 - 0032524 _____ () C:\Users\Bahia\AppData\Roaming\UserTile.png
2013-03-30 15:20 - 2013-03-30 15:20 - 0196344 _____ () C:\Users\Bahia\AppData\Local\47603a32-4e6a-436e-bd36-8ff2d3012181
2016-02-02 14:44 - 2016-02-02 14:44 - 0000000 ____H () C:\Users\Bahia\AppData\Local\BIT4AF0.tmp
2008-11-18 22:02 - 2013-03-31 11:45 - 0002032 _____ () C:\Users\Bahia\AppData\Local\d3d9caps.dat
2008-11-18 23:11 - 2010-08-19 22:40 - 0239104 _____ () C:\Users\Bahia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2008-11-23 19:58 - 2008-11-23 19:58 - 0000093 _____ () C:\Users\Bahia\AppData\Local\fusioncache.dat
2013-02-24 13:19 - 2013-02-24 13:19 - 0338815 _____ () C:\Users\Bahia\AppData\Local\speeddial.crx
2010-08-21 19:04 - 2010-08-21 19:04 - 0005056 _____ () C:\ProgramData\drctchbl.xvi
2010-06-04 12:39 - 2010-06-04 12:39 - 0000032 _____ () C:\ProgramData\ezsid.dat
2010-08-21 19:03 - 2010-08-21 19:03 - 0004110 _____ () C:\ProgramData\xqkcebzs.dik
Fichiers à déplacer ou supprimer:
====================
C:\ProgramData\ezsid.dat
C:\Users\Bahia\ZHPDiag3.exe
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-04-03 09:30
==================== Fin de FRST.txt ============================
Exécuté par Bahia (administrateur) sur PC-DE-BAHIA (03-04-2016 10:27:38)
Exécuté depuis C:\Users\Bahia\Desktop
Profils chargés: Bahia (Profils disponibles: Bahia)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Update 4\VAIOUpdt.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
(Sony Ericsson Mobile Communications) C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe
(Sony Ericsson Mobile Communications) C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe
(Sony Corporation) C:\Program Files\Sony\Network Utility\NSUService.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Media plus\SOHDms.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Media plus\SOHDs.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
(Sony Corporation) C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Sony Corporation) C:\Program Files\Sony\VAIO Event Service\VESMgrSub.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Conexant Systems, Inc.) C:\Windows\System32\drivers\XAudio.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
(Sony Corporation) C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\Apoint.exe
(Sony Corporation) C:\Program Files\Sony\ISB Utility\ISBMgr.exe
(Google) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Sony NSCE) C:\Program Files\Sony\Marketing Tools\MarketingTools.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Sony Corporation) C:\Program Files\Sony\Network Utility\LANUtil.exe
(Microsoft Corporation) C:\Windows\ehome\ehtray.exe
(DT Soft Ltd) C:\Program Files\DAEMON Tools Lite\daemon.exe
(Sony Corporation) C:\Program Files\Sony\VAIO Media plus\VMpTtray.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApMsgFwd.exe
(Microsoft Corporation) C:\Windows\ehome\ehmsas.exe
(Alps Electric Co., Ltd.) C:\Program Files\Apoint\ApntEx.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [NvSvc] => RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint\Apoint.exe [122880 2008-02-23] (Alps Electric Co., Ltd.)
HKLM\...\Run: [ISBMgr.exe] => C:\Program Files\Sony\ISB Utility\ISBMgr.exe [311296 2007-11-21] (Sony Corporation)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-07-31] (Google)
HKLM\...\Run: [MarketingTools] => C:\Program Files\Sony\Marketing Tools\MarketingTools.exe [36864 2008-04-19] (Sony NSCE)
HKLM\...\Run: [PinnacleDriverCheck] => C:\Windows\system32\PSDrvCheck.exe [406016 2003-11-10] ()
HKLM\...\Run: [LaunchList] => C:\Program Files\Pinnacle\MediaCenter\LaunchList.exe
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4718592 2008-01-23] (Realtek Semiconductor)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2008-01-23] (Realtek Semiconductor Corp.)
HKLM\...\Run: [DivXUpdate] => "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-03-20] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-04] (Avast Software s.r.o.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157456 2015-09-12] (Apple Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [595504 2016-01-29] (Oracle Corporation)
Winlogon\Notify\VESWinlogon: C:\Windows\system32\VESWinlogon.dll [2007-08-14] (Sony Corporation)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [NSUFloatingUI] => C:\Program Files\Sony\Network Utility\LANUtil.exe [262144 2008-07-17] (Sony Corporation)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [PMCS] => "C:\Program Files\Pinnacle\Shared Files\Programs\MediaCenterService\PMC.Service.Main.exe"
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [ehTray.exe] => C:\Windows\ehome\ehTray.exe [125952 2008-01-21] (Microsoft Corporation)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\daemon.exe [216520 2008-12-10] (DT Soft Ltd)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [VMpTtray.exe] => C:\Program Files\Sony\VAIO Media plus\VMpTtray.exe [86016 2008-03-09] (Sony Corporation)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2009-06-07] (Google Inc.)
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\RunOnce: [Shockwave Updater] => C:\Windows\System32\Adobe\SHOCKW~1\SWHELP~1.EXE -Update -1103471 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; FBSMTWB; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 1.1 (l'élément de données a 224 caractères en plus).
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\MountPoints2: {4fafb299-ab82-11df-9d30-001a80f5fb48} - I:\Startme.exe
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\...\MountPoints2: {f0cc7766-d778-11e4-b6a4-001a80f5fb48} - I:\LaunchU3.exe
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\...\Run: [msnmsgr] => "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
AppInit_DLLs: avgrsstx.dll => Pas de fichier
AppInit_DLLs: c:\progra~1\google\google~1\goec62~1.dll => c:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-07-31] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-06-04] (Avast Software s.r.o.)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CHR HKU\S-1-5-21-3380817912-2417951978-112482859-1003\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{16CD4710-96A7-4E9E-A686-544CBC7013A2}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{ED729481-F052-45A8-A4F1-5B6DDCA960AD}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-3380817912-2417951978-112482859-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKLM -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKLM -> {9E0D3BD2-6679-4A0C-9156-404C54286990} URL = hxxp://www.google.fr/search?hl=fr&q={searchTerms}&meta=
SearchScopes: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> DefaultScope {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> {83869C76-5AF5-45DA-8FE5-59B0AA0DDA79} URL = hxxp://www.bing.com/search?FORM=IEFM1&q={searchTerms}&src={referrer:source?}
SearchScopes: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> {9CB96984-43C3-4D44-90EF-01466EFCF7BB} URL = hxxps://fr.search.yahoo.com/yhs/search?type=avastbcl&hspart=avast&hsimp=yhs-001&p={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_74\bin\ssv.dll [2016-02-19] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-04] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-02-19] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-3380817912-2417951978-112482859-1003 -> Pas de nom - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - Pas de fichier
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Program Files\Yahoo!\Common\Yinsthelper.dll
DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} hxxp://download.divx.com/player/DivXBrowserPlugin.cab
DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} hxxp://kiw.imgag.com/imgag/cp/install/crusher-kiwen.cab
DPF: {CAFEEFAC-0017-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_21-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\Bahia\AppData\Roaming\Mozilla\Firefox\Profiles\63zz04us.default
FF DefaultSearchEngine: Bing
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32.dll [2008-10-05] ()
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2015-09-04] ()
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [Pas de fichier]
FF Plugin: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll [Pas de fichier]
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.74.2 -> C:\Program Files\Java\jre1.8.0_74\bin\dtplugin\npDeployJava1.dll [2016-02-19] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.74.2 -> C:\Program Files\Java\jre1.8.0_74\bin\plugin2\npjp2.dll [2016-02-19] (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeLive,version=1.5 -> C:\Program Files\Microsoft\Office Live\npOLW.dll [2010-04-26] (Microsoft Corp.)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 -> C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll [2011-10-12] (Google)
FF Plugin: @real.com/nppl3260;version=6.0.12.69 -> C:\Program Files\Video Convert Master\codec\real\browser\plugins\nppl3260.dll [Pas de fichier]
FF Plugin: @real.com/nprpjplug;version=6.0.12.69 -> C:\Program Files\Video Convert Master\codec\real\browser\plugins\nprpjplug.dll [Pas de fichier]
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 -> C:\Program Files\Sony\Media Go\npmediago.dll [2010-01-20] (Sony Media Software and Services Inc)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin: yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 -> C:\Program Files\Yahoo!\Common\npyaxmpb.dll [2007-03-10] (Yahoo! Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010-07-17] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll [2008-09-10] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2010-08-21] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll [2008-09-10] (RealNetworks, Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\avg_igeared.xml [2010-12-20]
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\googledesktop.xml [2010-07-31]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-12-18]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.sexyavenue.com/fr/boutique
CHR StartupUrls: Default -> "hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl"
CHR Profile: C:\Users\Bahia\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bahia\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-22]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-04]
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-04] (Avast Software s.r.o.)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-06-04] (Avast Software)
R2 EmmaDevMgmtSvc; C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaDeviceMgmt.exe [306296 2010-07-01] (Sony Ericsson Mobile Communications) [Fichier non signé]
R2 EmmaUpdMgmtSvc; C:\Program Files\Common Files\Sony Ericsson\Emma Core\Services\EmmaUpdateMgmt.exe [162936 2010-07-01] (Sony Ericsson Mobile Communications) [Fichier non signé]
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-07-31] (Google)
S3 MSCSPTISRV; C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe [53248 2007-11-28] (Sony Corporation) [Fichier non signé]
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R2 NSUService; C:\Program Files\Sony\Network Utility\NSUService.exe [233472 2008-07-17] (Sony Corporation) [Fichier non signé]
S3 PACSPTISVR; C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe [53248 2007-11-28] (Sony Corporation) [Fichier non signé]
S3 Service CANALPLAY; C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe [423584 2007-10-01] (Canal+ Active)
R2 SOHCImp; C:\Program Files\Sony\VAIO Media plus\SOHCImp.exe [104288 2008-03-04] (Sony Corporation)
R2 SOHDms; C:\Program Files\Sony\VAIO Media plus\SOHDms.exe [350048 2008-03-04] (Sony Corporation)
R2 SOHDs; C:\Program Files\Sony\VAIO Media plus\SOHDs.exe [63328 2008-03-04] (Sony Corporation)
S3 VAIO Entertainment TV Device Arbitration Service; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe [73728 2008-02-15] (Sony Corporation) [Fichier non signé]
R2 VAIO Event Service; C:\Program Files\Sony\VAIO Event Service\VESMgr.exe [182392 2007-08-14] (Sony Corporation)
R2 VcmIAlzMgr; C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [333088 2008-03-03] (Sony Corporation)
R3 Vcsw; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe [274432 2008-02-15] (Sony Corporation) [Fichier non signé]
R2 VzCdbSvc; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe [184320 2008-02-15] (Sony Corporation) [Fichier non signé]
R2 VzFw; C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe [147456 2008-02-15] (Sony Corporation) [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-06-04] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-06-04] (Avast Software s.r.o.)
R1 AswRdr; C:\Windows\system32\drivers\aswRdr.sys [55200 2015-06-04] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-06-04] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-06-04] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-12-18] (Avast Software s.r.o.)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [35272 2013-10-25] (The OpenVPN Project)
R1 aswTdi; C:\Windows\system32\drivers\aswTdi.sys [57888 2015-06-04] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-06-04] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2008-12-21] () [Fichier non signé]
R3 ti21sony; C:\Windows\System32\drivers\ti21sony.sys [812544 2007-06-06] (Texas Instruments)
S3 USB28xxBGA; C:\Windows\System32\DRIVERS\emBDA.sys [291200 2006-08-09] (eMPIA Technology, Inc.)
S3 USB28xxOEM; C:\Windows\System32\DRIVERS\emOEM.sys [28160 2006-08-09] (eMPIA Technology, Inc.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-06-04] (Avast Software)
U3 a8ejm1dd; C:\Windows\system32\Drivers\a8ejm1dd.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zéro octet Fichier/Dossier)
S3 athur; system32\DRIVERS\athur.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S4 UIUSys; system32\DRIVERS\UIUSYS.SYS [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-04-03 10:27 - 2016-04-03 10:29 - 00022861 _____ C:\Users\Bahia\Desktop\FRST.txt
2016-04-03 10:27 - 2016-04-03 10:27 - 00000000 ____D C:\FRST
2016-04-03 09:43 - 2016-04-03 09:43 - 01725440 _____ (Farbar) C:\Users\Bahia\Desktop\FRST.exe
2016-03-27 20:23 - 2016-03-27 20:40 - 00000344 _____ C:\Users\Bahia\Desktop\Papa et maman.txt
2016-03-26 22:36 - 2016-03-26 22:36 - 00000000 ____D C:\Users\Bahia\Desktop\Nettoyage Ordi
2016-03-26 18:38 - 2016-03-26 18:38 - 02162688 _____ C:\Users\Bahia\ZHPDiag3.exe
2016-03-26 18:35 - 2016-03-26 18:36 - 00000000 ____D C:\Program Files\ZHPFix
2016-03-26 18:35 - 2016-03-26 18:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-03-26 09:49 - 2016-03-26 10:35 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-26 09:49 - 2016-03-26 09:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-26 09:49 - 2016-03-26 09:49 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-26 09:49 - 2016-03-26 09:49 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-03-26 09:49 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-26 09:49 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-26 09:49 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-26 09:04 - 2016-03-26 09:09 - 00000000 ____D C:\AdwCleaner
2016-03-25 19:12 - 2016-03-25 19:12 - 02100736 _____ C:\Users\Bahia\Downloads\ZHPCleaner.exe
2016-03-25 11:28 - 2016-03-25 11:29 - 00078856 _____ C:\Windows\ntbtlog.txt
2016-03-25 10:47 - 2016-03-25 10:47 - 00000000 ____D C:\SUPERDelete
2016-03-25 10:42 - 2016-03-25 10:42 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\SUPERAntiSpyware.com
2016-03-25 10:38 - 2016-03-25 10:38 - 00000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2016-03-25 08:13 - 2016-03-25 08:13 - 00000310 _____ C:\Users\Bahia\Public - Raccourci.lnk
2016-03-24 21:32 - 2016-03-26 18:41 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\ZHP
2016-03-23 19:34 - 2016-03-24 17:54 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-03-23 19:34 - 2016-03-23 19:34 - 00000818 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-23 19:34 - 2016-03-23 19:34 - 00000806 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-03-23 19:30 - 2016-03-23 19:33 - 45811976 _____ C:\Users\Bahia\Downloads\Firefox Setup 43.0.1.exe
2016-03-22 23:03 - 2016-03-24 17:54 - 00000000 ____D C:\Windows\system32\vbox
2016-03-10 15:42 - 2016-02-19 22:34 - 01208776 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-03-10 15:42 - 2016-02-06 03:17 - 03609024 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-03-10 15:42 - 2016-02-06 03:17 - 03556800 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-03-10 15:42 - 2016-02-06 03:12 - 00783872 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-03-10 15:42 - 2016-02-06 03:11 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-03-10 15:42 - 2016-02-06 03:11 - 00049664 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-03-10 15:42 - 2016-02-06 01:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-03-10 15:42 - 2015-11-20 15:15 - 00922432 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00066400 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00022368 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00015200 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2016-03-10 15:42 - 2015-11-20 15:15 - 00011104 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2016-03-10 15:39 - 2016-02-06 03:12 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-10 15:39 - 2016-02-06 03:11 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-10 15:39 - 2016-02-06 01:33 - 00297472 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-10 15:37 - 2016-02-02 16:30 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-10 15:36 - 2016-02-03 18:06 - 00564736 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2016-03-10 15:36 - 2016-02-03 18:06 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\olepro32.dll
2016-03-10 15:36 - 2016-02-03 18:05 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-10 15:17 - 2016-02-04 16:25 - 02068992 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-10 14:00 - 2016-02-09 01:17 - 01815552 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-10 14:00 - 2016-02-09 01:15 - 12392960 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-10 14:00 - 2016-02-09 01:13 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-03-10 14:00 - 2016-02-09 01:12 - 09753600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-10 14:00 - 2016-02-09 01:12 - 01140224 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-10 14:00 - 2016-02-09 01:11 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 01804800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-10 14:00 - 2016-02-09 01:10 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2016-03-10 14:00 - 2016-02-09 01:10 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-03-10 14:00 - 2016-02-09 01:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-03-10 14:00 - 2016-02-09 01:09 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2016-03-10 14:00 - 2016-02-09 01:09 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2016-03-10 14:00 - 2016-02-09 01:09 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-04-03 10:26 - 2016-01-19 12:22 - 00000000 ____D C:\Users\Bahia\Desktop\CV et LM
2016-04-03 10:05 - 2012-12-25 20:16 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-03 09:21 - 2009-06-27 12:02 - 00065536 _____ C:\Windows\system32\Ikeext.etl
2016-04-03 09:21 - 2006-11-02 14:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-03 09:21 - 2006-11-02 13:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-03 09:21 - 2006-11-02 13:47 - 00003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-03 05:08 - 2006-11-02 14:01 - 00032606 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-04-02 20:26 - 2012-04-15 13:35 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\vlc
2016-03-27 11:53 - 2009-07-23 08:08 - 00000952 _____ C:\Windows\Tasks\Google Software Updater.job
2016-03-26 18:38 - 2008-11-18 22:02 - 00000000 ____D C:\Users\Bahia
2016-03-26 09:09 - 2010-02-11 15:43 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\Yahoo!
2016-03-26 01:45 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\tracing
2016-03-24 17:54 - 2010-02-10 14:39 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-03-24 17:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\system32\spool
2016-03-24 17:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\registration
2016-03-24 17:54 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\inf
2016-03-24 17:54 - 2006-11-02 11:22 - 64487424 _____ C:\Windows\system32\config\software_previous
2016-03-24 17:54 - 2006-11-02 11:22 - 37486592 _____ C:\Windows\system32\config\system_previous
2016-03-24 17:51 - 2006-11-02 11:22 - 52690944 _____ C:\Windows\system32\config\components_previous
2016-03-24 17:51 - 2006-11-02 11:22 - 00102400 _____ C:\Windows\system32\config\sam_previous
2016-03-24 16:50 - 2008-03-17 10:41 - 00000000 ____D C:\Program Files\Google
2016-03-24 16:39 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\ModemLogs
2016-03-23 19:34 - 2009-05-25 21:55 - 00000000 ____D C:\Users\Bahia\AppData\Roaming\Mozilla
2016-03-23 11:22 - 2008-01-21 09:41 - 01855728 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-23 11:22 - 2008-01-21 09:40 - 00805264 _____ C:\Windows\system32\perfh00C.dat
2016-03-23 11:22 - 2008-01-21 09:40 - 00188176 _____ C:\Windows\system32\perfc00C.dat
2016-03-22 11:26 - 2006-11-02 11:22 - 00303104 _____ C:\Windows\system32\config\default_previous
2016-03-22 11:25 - 2006-11-02 11:22 - 00032768 _____ C:\Windows\system32\config\security_previous
2016-03-21 13:05 - 2012-12-25 20:16 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-03-21 13:05 - 2011-06-17 08:08 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-03-11 09:21 - 2006-11-02 12:18 - 00000000 ____D C:\Windows\rescache
2016-03-11 08:51 - 2006-11-02 13:47 - 00425112 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-11 08:46 - 2006-11-02 13:37 - 00000000 ____D C:\Windows\system32\XPSViewer
2016-03-11 08:46 - 2006-11-02 12:18 - 00000000 ____D C:\Program Files\Common Files\System
2016-03-10 15:33 - 2013-10-26 02:58 - 00000000 ____D C:\Windows\system32\MRT
2016-03-10 15:20 - 2006-11-02 11:24 - 141270216 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
==================== Fichiers à la racine de certains dossiers =======
2008-12-27 23:24 - 2008-12-27 23:25 - 0000006 _____ () C:\Users\Bahia\AppData\Roaming\frenchvocab.plist
2008-12-27 23:24 - 2008-12-27 23:24 - 0000050 _____ () C:\Users\Bahia\AppData\Roaming\frenchvocabhighscores.plist
2008-12-27 23:25 - 2008-12-27 23:25 - 0019651 _____ () C:\Users\Bahia\AppData\Roaming\frenchvocabmaintenance2.plist
2008-11-18 22:02 - 2008-03-17 14:16 - 0028190 _____ () C:\Users\Bahia\AppData\Roaming\nvModes.001
2008-11-18 22:02 - 2008-03-17 13:26 - 0028190 _____ () C:\Users\Bahia\AppData\Roaming\nvModes.dat
2008-11-19 00:39 - 2013-04-01 14:02 - 0001424 _____ () C:\Users\Bahia\AppData\Roaming\QuickZip45.ini
2008-12-27 23:20 - 2008-12-27 23:20 - 0000012 _____ () C:\Users\Bahia\AppData\Roaming\speaknspell.txt
2008-12-27 23:20 - 2008-12-27 23:20 - 0476061 _____ () C:\Users\Bahia\AppData\Roaming\speaknspelldictionary.txt
2009-11-02 22:00 - 2009-11-02 22:00 - 0032524 _____ () C:\Users\Bahia\AppData\Roaming\UserTile.png
2013-03-30 15:20 - 2013-03-30 15:20 - 0196344 _____ () C:\Users\Bahia\AppData\Local\47603a32-4e6a-436e-bd36-8ff2d3012181
2016-02-02 14:44 - 2016-02-02 14:44 - 0000000 ____H () C:\Users\Bahia\AppData\Local\BIT4AF0.tmp
2008-11-18 22:02 - 2013-03-31 11:45 - 0002032 _____ () C:\Users\Bahia\AppData\Local\d3d9caps.dat
2008-11-18 23:11 - 2010-08-19 22:40 - 0239104 _____ () C:\Users\Bahia\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2008-11-23 19:58 - 2008-11-23 19:58 - 0000093 _____ () C:\Users\Bahia\AppData\Local\fusioncache.dat
2013-02-24 13:19 - 2013-02-24 13:19 - 0338815 _____ () C:\Users\Bahia\AppData\Local\speeddial.crx
2010-08-21 19:04 - 2010-08-21 19:04 - 0005056 _____ () C:\ProgramData\drctchbl.xvi
2010-06-04 12:39 - 2010-06-04 12:39 - 0000032 _____ () C:\ProgramData\ezsid.dat
2010-08-21 19:03 - 2010-08-21 19:03 - 0004110 _____ () C:\ProgramData\xqkcebzs.dik
Fichiers à déplacer ou supprimer:
====================
C:\ProgramData\ezsid.dat
C:\Users\Bahia\ZHPDiag3.exe
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-04-03 09:30
==================== Fin de FRST.txt ============================