Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:16-05-2016
Exécuté par papy (administrateur) sur DET (18-05-2016 10:00:19)
Exécuté depuis C:\Users\papy\Downloads
Profils chargés: papy (Profils disponibles: papy)
Platform: Windows 8.1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\ToolbarUpdater.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\loggingserver.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2396096 2016-03-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13650648 2013-08-21] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [570880 2013-12-27] (Nikon Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-04-22] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [4883216 2016-05-04] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133760 2013-12-24] (Qualcomm®Atheros®)
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd)
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {2741153a-2c97-11e5-835c-3010b322e966} - "G:\DarkParables_GoldilocksAndTheFallenStar.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {7eeeb04c-efcb-11e4-8296-3010b322e966} - "F:\setup.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {8d558d11-6340-11e5-840a-3010b322e966} - "F:\ClawsAndFeathers2.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {9930d49d-045e-11e6-8621-3010b322e966} - "H:\Lenovo_Suite.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {c84f444e-643d-11e4-8255-806e6f6e6963} - "E:\Autorun.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {c881ffac-e362-11e5-85b7-3010b322e966} - "F:\Lenovo_Suite.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {d810ed1f-3782-11e5-837e-3010b322e966} - "F:\setup.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> D:\Films\RRT\Fishdom H2O - Hidden Odyssey\fishdom-h2o-hidden-odyssey\Fishdom H2O Screensaver.scr
HKU\S-1-5-18\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 62.197.111.140 109.88.203.3
Tcpip\..\Interfaces\{05B7BF37-FEB1-48C7-B545-E62BEDC8E850}: [DhcpNameServer] 172.19.0.1
Tcpip\..\Interfaces\{06CC247F-A475-47BA-8D1F-22D080E683B1}: [DhcpNameServer] 62.197.111.140 109.88.203.3
Tcpip\..\Interfaces\{5153AC0F-5879-47FE-8FDE-323AAAE37E52}: [DhcpNameServer] 62.197.111.140 109.88.203.3
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {84DE951B-939D-40CD-84D0-78FE7D414EE6} URL =
SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-23] (Oracle Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.1.8.599\AVG Web TuneUp.dll => Pas de fichier
BHO: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-23] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-23] (Oracle Corporation)
BHO-x32: Pas de nom -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Pas de fichier
BHO-x32: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-23] (Oracle Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - Pas de fichier
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - Pas de fichier
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier
FireFox:
========
FF ProfilePath: C:\Users\papy\AppData\Roaming\Mozilla\Firefox\Profiles\pabxspk4.default
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxps://mysearch.avg.com/?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=0715tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=hp
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-23] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-07-23] (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.1\\npsitesafety.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-03-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-03-22] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\papy\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-10] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: vasco.com/VascoCardReaderPlugin -> C:\Users\papy\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll [2014-10-27] (VASCO Data Security)
FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: vasco.com/VascoCardReaderPlugin64 -> C:\Users\papy\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll [2014-10-27] (VASCO Data Security)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-12-01]
FF Extension: Modify Headers - C:\Users\papy\AppData\Roaming\Mozilla\Firefox\Profiles\pabxspk4.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2016-05-07]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor => non trouvé(e)
Chrome:
=======
CHR HomePage: Default -> mysearch.avg.com/?rvt=1
CHR DefaultSearchURL: Default -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Default -> https://mysearch.avg.com
CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-11]
CHR Extension: (Google Docs) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-11]
CHR Extension: (Google Drive) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]
CHR Extension: (AVG Secure Search) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2015-12-23]
CHR Extension: (Recherche Google) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Google Sheets) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-11]
CHR Extension: (SiteAdvisor) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-07-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Modify Headers for Google Chrome™) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\innpjfdalfhpcoinfnehdnbkglpmogdi [2016-03-14]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Gmail) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-11]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [318592 2013-12-24] (Windows (R) Win 7 DDK provider) [Fichier non signé]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [638968 2016-05-04] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5155904 2016-05-04] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1078544 2016-04-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [710232 2016-05-04] (AVG Technologies CZ, s.r.o.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2016-04-18] (Acer Incorporated)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-03-30] (NVIDIA Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-28] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-28] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 libusbd; C:\Windows\SysWOW64\libusbd-nt.exe [18944 2005-03-09] (hxxp://libusb-win32.sourceforge.net) [Fichier non signé]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-03-30] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-03-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-03-30] (NVIDIA Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S2 SkypeUpdate; D:\Utilitairesl\skype\Updater\Updater.exe [327296 2015-07-09] (Skype Technologies)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé]
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [233216 2014-06-24] (acer)
R2 vToolbarUpdater40.2.1; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\ToolbarUpdater.exe [1926544 2015-11-24] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S3 McAWFwk; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [X]
S2 mccspsvc; "C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe" [X]
S2 WtuSystemSupport; "C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe" [X]
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3881472 2013-12-12] (Qualcomm Atheros Communications, Inc.)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [303616 2015-05-01] () [Fichier non signé]
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [307456 2016-04-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [248576 2016-03-29] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [51968 2016-04-14] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71936 2016-05-04] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-12-24] (Qualcomm Atheros)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-30] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () [Fichier non signé]
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [35328 2015-05-01] () [Fichier non signé]
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-03-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)
R2 RtkIOAC60; C:\Windows\system32\DRIVERS\RtkIOAC60.sys [29912 2013-07-19] (Realtek semiconductor corp)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-05-18 10:00 - 2016-05-18 10:00 - 00027592 _____ C:\Users\papy\Downloads\FRST.txt
2016-05-18 09:59 - 2016-05-18 10:00 - 00000000 ____D C:\FRST
2016-05-18 09:58 - 2016-05-18 09:58 - 02382336 _____ (Farbar) C:\Users\papy\Downloads\FRST64.exe
2016-05-18 07:50 - 2016-05-18 07:50 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-05-18 07:49 - 2016-05-18 07:50 - 00000000 ____D C:\Program Files\CCleaner
2016-05-18 07:49 - 2016-05-18 07:49 - 00000838 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-05-18 07:48 - 2016-05-18 07:48 - 06882192 _____ (Piriform Ltd) C:\Users\papy\Downloads\ccsetup517.exe
2016-05-16 17:51 - 2005-10-19 23:07 - 07029478 _____ C:\Users\papy\Downloads\Setup_Columbus_Terrain_Mod.exe
2016-05-16 17:50 - 2016-05-16 17:50 - 07012946 _____ C:\Users\papy\Downloads\Setup_Columbus_Terrain_Mod.zip
2016-05-15 08:25 - 2016-05-17 21:47 - 00001515 _____ C:\Users\papy\Desktop\NoahsArk - Raccourci.lnk
2016-05-15 08:23 - 2016-05-15 08:23 - 00000000 ____D C:\Users\papy\AppData\Roaming\The Chronicles of Noah's Ark
2016-05-14 17:40 - 2016-05-14 17:40 - 00416145 _____ C:\Users\papy\Downloads\XLN_RN_XLNation_Forest_Pack_V1.1.patch
2016-05-13 18:39 - 2016-05-13 18:39 - 05995712 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-05-13 18:24 - 2012-04-10 11:43 - 49925083 ____N C:\Users\papy\Downloads\RHM2.exe
2016-05-13 18:18 - 2016-05-13 18:18 - 23390907 _____ C:\Users\papy\Downloads\LasVegas-McMansions.zip
2016-05-13 18:16 - 2016-05-13 18:16 - 07927941 _____ C:\Users\papy\Downloads\NYC Taxi Cab Mod .rar
2016-05-13 18:15 - 2016-05-13 18:15 - 49884616 _____ C:\Users\papy\Downloads\RHM2.exe.zip
2016-05-13 18:14 - 2016-05-13 18:14 - 02874693 _____ C:\Users\papy\Downloads\Super Bank XL Nation - Center of Commerce.zip
2016-05-13 18:06 - 2016-05-13 18:06 - 32014543 _____ C:\Users\papy\Downloads\XLN_PLT_UltimateMappackofRealworldmaps_UIM_1.0_0.zip
2016-05-13 18:06 - 2016-05-13 18:06 - 09033802 _____ C:\Users\papy\Downloads\XLN_skull613_Hiroshima_UIM_1.0.zip
2016-05-13 18:06 - 2016-05-13 18:06 - 03833342 _____ C:\Users\papy\Downloads\XLN_skullz_New_York_1.1_NoGM_and_GM.zip
2016-05-13 18:04 - 2016-05-13 18:04 - 12888578 _____ C:\Users\papy\Downloads\NEXL - Trams - NEXL Team.zip
2016-05-13 18:01 - 2016-05-13 18:03 - 131987045 _____ C:\Users\papy\Downloads\2014 retail MEGA PACK.rar
2016-05-13 10:42 - 2016-05-13 18:24 - 00000000 ____D C:\Users\papy\Downloads\__MACOSX
2016-05-13 10:36 - 2016-05-13 10:36 - 08535023 _____ C:\Users\papy\Downloads\XLNation_UserInterfaceMod_v1.79.9.zip
2016-05-11 07:27 - 2016-04-22 22:54 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-11 07:27 - 2016-03-31 08:50 - 01307328 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-11 07:27 - 2016-03-31 05:40 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-11 07:27 - 2016-03-29 03:42 - 07446368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-11 07:26 - 2016-04-22 22:15 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-11 07:26 - 2016-04-22 22:14 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-11 07:26 - 2016-04-22 22:08 - 06052864 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-11 07:26 - 2016-04-22 22:06 - 20349952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-11 07:26 - 2016-04-22 22:00 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-11 07:26 - 2016-04-22 21:35 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-11 07:26 - 2016-04-22 21:29 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-11 07:26 - 2016-04-22 21:24 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-05-11 07:26 - 2016-04-22 21:23 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-11 07:26 - 2016-04-22 21:19 - 15414784 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-11 07:26 - 2016-04-22 21:17 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-11 07:26 - 2016-04-22 21:14 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-11 07:26 - 2016-04-22 21:14 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-11 07:26 - 2016-04-22 21:14 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-11 07:26 - 2016-04-22 21:12 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-11 07:26 - 2016-04-22 20:58 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-11 07:26 - 2016-04-22 20:58 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-05-11 07:26 - 2016-04-22 20:54 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-11 07:26 - 2016-04-22 20:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-05-11 07:26 - 2016-04-22 20:52 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-11 07:26 - 2016-04-22 20:52 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-11 07:26 - 2016-04-22 20:52 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-11 07:26 - 2016-04-22 20:51 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-11 07:26 - 2016-04-22 20:40 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-11 07:26 - 2016-04-22 20:29 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-11 07:26 - 2016-04-22 20:27 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-11 07:26 - 2016-04-22 20:24 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-11 07:26 - 2016-04-22 20:23 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-11 07:26 - 2016-04-10 09:48 - 00738096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-11 07:26 - 2016-04-10 09:48 - 00613624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-11 07:26 - 2016-04-10 06:21 - 01763376 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-11 07:26 - 2016-04-10 06:21 - 01489088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-11 07:26 - 2016-04-10 06:14 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-11 07:26 - 2016-04-10 00:07 - 01097728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-11 07:26 - 2016-04-09 23:58 - 00534016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-05-11 07:26 - 2016-04-09 23:50 - 00375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2016-05-11 07:26 - 2016-04-06 23:13 - 00561960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-05-11 07:26 - 2016-04-06 23:13 - 00137976 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-11 07:26 - 2016-04-06 20:20 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-11 07:26 - 2016-04-06 20:19 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-11 07:26 - 2016-04-06 20:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-11 07:26 - 2016-04-06 19:49 - 00120384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-05-11 07:26 - 2016-04-06 19:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-05-11 07:26 - 2016-04-06 18:57 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-11 07:26 - 2016-04-06 18:52 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-11 07:26 - 2016-04-06 18:20 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-05-11 07:26 - 2016-04-06 17:48 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-11 07:25 - 2016-04-11 08:21 - 00074584 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2016-05-11 07:25 - 2016-04-10 07:37 - 01549144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-11 07:25 - 2016-04-10 01:29 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-10 08:29 - 2016-05-17 21:47 - 00000965 _____ C:\Users\papy\Desktop\Fishdom H2O - Raccourci.lnk
2016-05-10 07:20 - 2016-05-10 07:20 - 00003334 _____ C:\Windows\System32\Tasks\AcerCloud
2016-05-09 12:18 - 2016-05-17 21:22 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-09 12:17 - 2016-05-09 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-05-09 12:17 - 2016-05-09 12:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-09 12:17 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-05-09 12:17 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-09 12:17 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-05-09 10:55 - 2016-05-17 21:47 - 00001403 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-05-09 10:55 - 2016-05-09 11:05 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-05-09 10:55 - 2016-05-09 10:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-05-09 10:55 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2016-05-07 12:54 - 2016-05-07 12:54 - 00000000 ____D C:\Users\papy\Documents\SimCity
2016-05-07 12:49 - 2016-05-07 12:53 - 00000000 ____D C:\Program Files (x86)\SimCity v10
2016-05-04 16:58 - 2016-05-04 16:58 - 00071936 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avguniva.sys
2016-05-03 08:46 - 2016-05-03 08:57 - 00000925 _____ C:\siw_debug.txt
2016-05-03 08:46 - 2016-05-03 08:57 - 00000000 ____D C:\Users\papy\AppData\Roaming\siw_tmp
2016-05-03 08:46 - 2016-05-03 08:46 - 00000000 ____D C:\Users\papy\AppData\Local\CrashRpt
2016-05-02 12:13 - 2016-05-17 21:47 - 00000969 _____ C:\Users\papy\Desktop\DarkParables_RiseoftheSnowQueen - Raccourci.lnk
2016-05-02 12:13 - 2016-05-02 12:13 - 00000000 ____D C:\Users\papy\AppData\Roaming\Blue Tea Games
2016-05-02 12:09 - 2016-03-21 22:01 - 00109632 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-05-02 12:09 - 2016-03-21 22:01 - 00100416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-05-02 12:09 - 2016-03-21 22:01 - 00056384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-04-28 08:11 - 2016-04-28 08:11 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2016-04-28 08:06 - 2016-04-28 08:06 - 00084976 _____ (Gibson Research Corp., Laguna Niguel, California, USA.) C:\Users\papy\Downloads\never10.exe
2016-04-26 16:20 - 2016-04-26 16:20 - 00568151 _____ C:\Users\papy\Desktop\BE12 0624 2352 5092 2016-04-26 16-19-59 3.txt
2016-04-26 08:11 - 2016-04-26 08:11 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-04-26 08:11 - 2016-04-26 08:11 - 00000000 ___SD C:\Windows\system32\GWX
2016-04-25 12:35 - 2016-05-17 21:47 - 00001439 _____ C:\Users\papy\Desktop\Experiment - Raccourci.lnk
2016-04-25 12:34 - 2016-04-25 12:35 - 00000000 ____D C:\Users\papy\Documents\Exp_Saves
2016-04-25 12:27 - 2016-05-17 21:47 - 00001209 _____ C:\Users\papy\Desktop\frozen-kingdom - Raccourci.lnk
2016-04-25 12:26 - 2016-04-25 12:26 - 00000000 ____D C:\Users\papy\AppData\Roaming\Frozen Kingdom
2016-04-25 12:23 - 2016-05-17 21:47 - 00001529 _____ C:\Users\papy\Desktop\JewelQuestSleeplessStar - Raccourci.lnk
2016-04-25 12:22 - 2016-05-17 21:47 - 00000723 _____ C:\Users\papy\Desktop\ZY-Fishdom 3 - Raccourci.lnk
2016-04-25 12:22 - 2016-05-10 08:00 - 00000000 ____D C:\Users\papy\AppData\Roaming\Playrix Entertainment
2016-04-25 12:19 - 2016-05-17 21:47 - 00000682 _____ C:\Users\papy\Desktop\floria - Raccourci.lnk
2016-04-25 12:18 - 2016-04-25 12:19 - 00000000 ____D C:\Users\papy\AppData\Roaming\Floria
2016-04-25 12:11 - 2016-04-25 12:23 - 00000000 ____D C:\Users\Public\Documents\iWin
2016-04-25 12:07 - 2016-05-17 21:47 - 00000944 _____ C:\Users\papy\Desktop\TheEnchantingIslands - Raccourci.lnk
2016-04-24 19:04 - 2016-04-24 19:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan
2016-04-24 19:04 - 2016-04-24 19:04 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-04-24 19:04 - 2016-03-22 04:25 - 00532536 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-04-24 19:04 - 2016-03-22 04:25 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-04-24 19:04 - 2016-03-22 04:10 - 00112184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-04-24 19:04 - 2016-03-16 23:30 - 00128792 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-04-24 19:04 - 2016-03-16 23:29 - 00127768 _____ C:\Windows\system32\vulkan-1.dll
2016-04-24 19:04 - 2016-03-16 23:29 - 00041752 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-04-24 19:04 - 2016-03-16 23:28 - 00045848 _____ C:\Windows\system32\vulkaninfo.exe
2016-04-24 19:01 - 2016-03-24 12:58 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-04-24 19:01 - 2016-03-24 12:58 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 42923576 _____ C:\Windows\system32\nvcompiler.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 37567424 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 31555008 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 25321408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 21355248 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 20897416 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 17748712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 17342392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 17248408 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 12567608 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-04-24 19:01 - 2016-03-22 06:12 - 10550736 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 08659472 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 03235896 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 02809280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436472.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 01573432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436472.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00959544 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00889400 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00753208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00695864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00678520 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00571912 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00473592 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00391632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00129208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00000139 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-04-24 19:01 - 2016-03-22 06:12 - 00000139 _____ C:\Windows\system32\nv-vk64.json
2016-04-24 18:55 - 2016-03-30 03:05 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-04-22 07:39 - 2016-04-22 07:39 - 00000000 ____D C:\Users\papy\AppData\Roaming\Gold Casual Games
2016-04-22 07:38 - 2016-04-22 07:38 - 00000000 ____D C:\objets_caches
2016-04-20 14:17 - 2016-04-20 14:17 - 00307456 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-05-18 09:39 - 2015-09-30 18:05 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-05-18 09:22 - 2015-04-11 09:38 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-18 08:11 - 2015-04-11 08:36 - 00003592 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-485677924-41462818-366947018-1001
2016-05-18 08:04 - 2015-04-11 08:36 - 00000000 ____D C:\Users\papy\OneDrive
2016-05-18 08:03 - 2015-04-11 08:29 - 00000000 ____D C:\Users\papy\AppData\Local\SweetLabs App Platform
2016-05-18 08:01 - 2015-04-11 09:38 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-18 08:01 - 2014-11-04 18:53 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-18 08:01 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-18 07:59 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-05-18 07:31 - 2015-04-11 08:41 - 00003912 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{473BC33B-0EE9-440F-8583-5CE828319A56}
2016-05-17 22:50 - 2016-01-02 14:04 - 00000000 ____D C:\Steam
2016-05-17 22:06 - 2015-12-01 17:56 - 00000000 ____D C:\ProgramData\MFAData
2016-05-17 21:47 - 2016-04-16 09:45 - 00000876 _____ C:\Users\papy\Desktop\HelloVenice - Raccourci.lnk
2016-05-17 21:47 - 2016-04-11 08:29 - 00001120 _____ C:\Users\papy\Desktop\CharmTale2 - Raccourci.lnk
2016-05-17 21:47 - 2016-04-06 18:20 - 00000836 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prison architect.lnk
2016-05-17 21:47 - 2016-01-09 09:25 - 00001334 _____ C:\Users\papy\Desktop\cm2 - Raccourci.lnk
2016-05-17 21:47 - 2016-01-04 08:49 - 00000672 _____ C:\Users\papy\Desktop\JMS - Raccourci.lnk
2016-05-17 21:47 - 2015-12-28 11:41 - 00001521 _____ C:\Users\papy\Desktop\LostInReefs3 - Raccourci.lnk
2016-05-17 21:47 - 2015-12-14 14:02 - 00000654 _____ C:\Users\papy\Desktop\VillageQuest - Raccourci.lnk
2016-05-17 21:47 - 2015-12-14 13:17 - 00000796 _____ C:\Users\papy\Desktop\ArtifactsOfEternity - Raccourci.lnk
2016-05-17 21:47 - 2015-12-01 17:32 - 00001239 _____ C:\Users\papy\Desktop\Téléchargements - Raccourci.lnk
2016-05-17 21:47 - 2015-09-23 09:24 - 00000664 _____ C:\Users\papy\Desktop\SafariVenture - Raccourci.lnk
2016-05-17 21:47 - 2015-09-05 11:37 - 00000666 _____ C:\Users\papy\Desktop\Musique - Raccourci.lnk
2016-05-17 21:47 - 2015-07-26 10:33 - 00001422 _____ C:\Users\papy\Desktop\Photoshop - Raccourci.lnk
2016-05-17 21:47 - 2015-07-26 10:18 - 00000935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2016-05-17 21:47 - 2015-07-26 10:17 - 00000905 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2016-05-17 21:47 - 2015-07-26 10:17 - 00000880 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2016-05-17 21:47 - 2015-07-26 10:16 - 00000852 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2016-05-17 21:47 - 2015-07-26 10:15 - 00001539 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-05-17 21:47 - 2015-07-26 10:15 - 00001000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2016-05-17 21:47 - 2015-07-17 16:27 - 00001496 _____ C:\Users\papy\Desktop\TheTreasuresOfMontezuma4 - Raccourci.lnk
2016-05-17 21:47 - 2015-06-06 10:24 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-05-17 21:47 - 2015-04-23 11:45 - 00000788 _____ C:\Users\Public\Desktop\Azteca.lnk
2016-05-17 21:47 - 2015-04-14 16:05 - 07153152 ___SH C:\Users\papy\Desktop\Thumbs.db
2016-05-17 21:47 - 2015-04-13 12:26 - 00002001 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jouer à Puzzle Express.lnk
2016-05-17 21:47 - 2015-04-13 12:26 - 00000796 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArtifactsOfEternity - Raccourci.lnk
2016-05-17 21:47 - 2015-04-13 12:26 - 00000641 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Document.lnk
2016-05-17 21:47 - 2015-04-11 10:17 - 00001965 _____ C:\Users\Public\Desktop\Jouer à Puzzle Express.lnk
2016-05-17 21:47 - 2015-04-11 10:07 - 00001939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk
2016-05-17 21:47 - 2015-04-11 10:07 - 00001248 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Encore plus de jeux.lnk
2016-05-17 21:47 - 2015-04-11 09:39 - 00002217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-17 21:47 - 2015-04-11 08:33 - 00002428 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2016-05-17 21:47 - 2015-04-11 08:33 - 00002402 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2016-05-17 21:47 - 2015-04-11 08:30 - 00001458 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-17 21:47 - 2015-04-11 08:29 - 00000469 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-05-17 21:47 - 2015-04-11 08:29 - 00000467 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-05-17 21:47 - 2014-11-04 19:14 - 00002000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2016-05-17 21:47 - 2014-11-04 19:01 - 00001943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-05-17 21:47 - 2014-07-14 17:38 - 00002550 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games App - acer.lnk
2016-05-17 15:15 - 2014-11-02 02:18 - 00811108 _____ C:\Windows\system32\perfh00C.dat
2016-05-17 15:15 - 2014-11-02 02:18 - 00159206 _____ C:\Windows\system32\perfc00C.dat
2016-05-17 15:15 - 2014-03-18 12:03 - 01824010 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-17 15:15 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-05-17 07:57 - 2015-04-11 16:16 - 00000000 ____D C:\Users\papy\Desktop\Document
2016-05-16 19:28 - 2015-05-10 08:57 - 00000000 ____D C:\Users\papy\AppData\Roaming\vlc
2016-05-16 18:55 - 2015-04-11 13:02 - 00000000 ____D C:\Users\papy\AppData\Local\ElevatedDiagnostics
2016-05-16 17:33 - 2015-12-01 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-05-16 16:16 - 2014-11-04 19:07 - 00000000 ____D C:\ProgramData\Temp
2016-05-15 08:24 - 2015-05-09 17:35 - 00000000 ____D C:\Jeux
2016-05-15 08:12 - 2016-01-03 16:23 - 00000000 ____D C:\Users\papy\Desktop\Calendrier paiements
2016-05-14 17:07 - 2015-04-11 08:37 - 00000000 ____D C:\Users\papy\AppData\Local\CrashDumps
2016-05-14 07:34 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-05-14 07:16 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2016-05-13 18:39 - 2015-09-30 18:05 - 00003890 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-13 10:46 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2016-05-12 08:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2016-05-11 22:08 - 2014-07-14 17:36 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-11 22:08 - 2014-07-14 17:36 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-11 15:09 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-05-11 12:07 - 2013-08-22 16:44 - 04993320 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-11 07:56 - 2015-04-13 11:32 - 00000000 ____D C:\Windows\system32\MRT
2016-05-11 07:56 - 2014-03-18 11:45 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-11 07:46 - 2015-04-13 11:32 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-11 07:25 - 2016-04-13 07:31 - 01737088 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-11 07:25 - 2016-04-13 07:31 - 01663184 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-11 07:25 - 2016-04-13 07:31 - 01523208 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-05-11 07:25 - 2016-04-13 07:31 - 01501488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-11 07:25 - 2016-04-13 07:31 - 01490120 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-11 07:25 - 2016-04-13 07:31 - 01358952 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-05-11 07:25 - 2016-04-13 07:31 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-05-11 07:17 - 2015-04-11 09:38 - 00004056 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 07:17 - 2015-04-11 09:38 - 00003820 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-10 17:12 - 2015-12-01 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-05-10 07:19 - 2014-11-04 19:04 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2016-05-10 07:17 - 2015-04-11 08:31 - 00000000 ____D C:\Users\papy\AppData\Local\clear.fi
2016-05-09 12:42 - 2015-05-03 08:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2016-05-09 10:55 - 2015-12-01 20:53 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-05-04 18:21 - 2016-04-07 10:27 - 00000000 ____D C:\Program Files\Recuva
2016-05-02 16:07 - 2016-01-21 12:48 - 00000000 ____D C:\Users\papy\Desktop\Jeux
2016-05-02 12:10 - 2015-09-30 14:42 - 00000000 ____D C:\Users\papy\AppData\Local\NVIDIA Corporation
2016-05-02 12:10 - 2015-04-11 08:31 - 00000000 ____D C:\Users\papy\AppData\Local\NVIDIA
2016-05-01 16:11 - 2016-01-04 08:49 - 00000000 ____D C:\Users\papy\AppData\Roaming\Jewel Match Snowscapes
2016-04-29 08:25 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-28 08:13 - 2015-05-06 10:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-04-28 08:13 - 2015-05-06 10:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-04-28 08:11 - 2015-05-06 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-04-27 14:16 - 2015-07-20 07:52 - 00003442 _____ C:\Windows\System32\Tasks\BacKGroundAgent
2016-04-27 14:16 - 2014-07-14 18:16 - 00000000 ___HD C:\OEM
2016-04-25 12:06 - 2015-05-19 18:53 - 00000000 ____D C:\Users\papy\Documents\My Games
2016-04-24 19:05 - 2014-11-04 18:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-04-24 19:03 - 2014-11-04 18:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-04-24 18:33 - 2015-08-26 11:35 - 00000000 ____D C:\Program Files (x86)\MarkAny
2016-04-24 18:27 - 2015-08-26 11:30 - 00000000 ____D C:\Users\papy\AppData\Roaming\Samsung
2016-04-24 18:27 - 2015-08-26 11:30 - 00000000 ____D C:\Users\papy\AppData\Local\Samsung
2016-04-24 18:27 - 2015-08-26 11:28 - 00000000 ____D C:\ProgramData\Samsung
2016-04-24 18:27 - 2015-08-26 11:28 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-04-24 18:27 - 2014-11-04 18:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-04-24 18:17 - 2015-12-01 22:47 - 00000085 _____ C:\Windows\wininit.ini
==================== Fichiers à la racine de certains dossiers =======
2015-09-30 12:07 - 2015-09-30 12:06 - 0661456 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcp110.dll
2015-09-30 12:04 - 2015-09-30 12:04 - 0660128 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcp120.dll
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\Digital Mono
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\DirectoryService
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\Displays
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ___RH () C:\ProgramData\Documentation
2014-11-04 18:56 - 2014-11-04 18:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ___RH () C:\ProgramData\Drum Kits
2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\Examples
2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\External Build System
2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\Filesystems
2015-05-20 12:54 - 2015-05-20 12:54 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2015-05-20 12:54 - 2016-03-11 13:01 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2015-05-20 12:54 - 2015-05-20 12:54 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT
Fichiers à déplacer ou supprimer:
====================
C:\Users\papy\d3dx9_43.dll
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-05-10 07:49
==================== Fin de FRST.txt ============================
Exécuté par papy (administrateur) sur DET (18-05-2016 10:00:19)
Exécuté depuis C:\Users\papy\Downloads
Profils chargés: papy (Profils disponibles: papy)
Platform: Windows 8.1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\ToolbarUpdater.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\loggingserver.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2396096 2016-03-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13650648 2013-08-21] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe"
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [570880 2013-12-27] (Nikon Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-04-22] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [4883216 2016-05-04] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133760 2013-12-24] (Qualcomm®Atheros®)
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd)
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {2741153a-2c97-11e5-835c-3010b322e966} - "G:\DarkParables_GoldilocksAndTheFallenStar.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {7eeeb04c-efcb-11e4-8296-3010b322e966} - "F:\setup.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {8d558d11-6340-11e5-840a-3010b322e966} - "F:\ClawsAndFeathers2.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {9930d49d-045e-11e6-8621-3010b322e966} - "H:\Lenovo_Suite.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {c84f444e-643d-11e4-8255-806e6f6e6963} - "E:\Autorun.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {c881ffac-e362-11e5-85b7-3010b322e966} - "F:\Lenovo_Suite.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {d810ed1f-3782-11e5-837e-3010b322e966} - "F:\setup.exe"
HKU\S-1-5-21-485677924-41462818-366947018-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> D:\Films\RRT\Fishdom H2O - Hidden Odyssey\fishdom-h2o-hidden-odyssey\Fishdom H2O Screensaver.scr
HKU\S-1-5-18\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated)
BootExecute: autocheck autochk * sdnclean64.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 62.197.111.140 109.88.203.3
Tcpip\..\Interfaces\{05B7BF37-FEB1-48C7-B545-E62BEDC8E850}: [DhcpNameServer] 172.19.0.1
Tcpip\..\Interfaces\{06CC247F-A475-47BA-8D1F-22D080E683B1}: [DhcpNameServer] 62.197.111.140 109.88.203.3
Tcpip\..\Interfaces\{5153AC0F-5879-47FE-8FDE-323AAAE37E52}: [DhcpNameServer] 62.197.111.140 109.88.203.3
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {84DE951B-939D-40CD-84D0-78FE7D414EE6} URL =
SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-23] (Oracle Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.1.8.599\AVG Web TuneUp.dll => Pas de fichier
BHO: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-23] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-23] (Oracle Corporation)
BHO-x32: Pas de nom -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Pas de fichier
BHO-x32: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-23] (Oracle Corporation)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - Pas de fichier
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - Pas de fichier
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier
FireFox:
========
FF ProfilePath: C:\Users\papy\AppData\Roaming\Mozilla\Firefox\Profiles\pabxspk4.default
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxps://mysearch.avg.com/?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=0715tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=hp
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-23] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-07-23] (Adobe Systems, Inc.)
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.1\\npsitesafety.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-03-22] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-03-22] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\papy\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-10] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: vasco.com/VascoCardReaderPlugin -> C:\Users\papy\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll [2014-10-27] (VASCO Data Security)
FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: vasco.com/VascoCardReaderPlugin64 -> C:\Users\papy\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll [2014-10-27] (VASCO Data Security)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-12-01]
FF Extension: Modify Headers - C:\Users\papy\AppData\Roaming\Mozilla\Firefox\Profiles\pabxspk4.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2016-05-07]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor => non trouvé(e)
Chrome:
=======
CHR HomePage: Default -> mysearch.avg.com/?rvt=1
CHR DefaultSearchURL: Default -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms}
CHR DefaultSearchKeyword: Default -> https://mysearch.avg.com
CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1
CHR Profile: C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-11]
CHR Extension: (Google Docs) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-11]
CHR Extension: (Google Drive) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]
CHR Extension: (AVG Secure Search) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2015-12-23]
CHR Extension: (Recherche Google) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29]
CHR Extension: (Google Sheets) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-11]
CHR Extension: (SiteAdvisor) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-07-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Modify Headers for Google Chrome™) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\innpjfdalfhpcoinfnehdnbkglpmogdi [2016-03-14]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Gmail) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-11]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [318592 2013-12-24] (Windows (R) Win 7 DDK provider) [Fichier non signé]
S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [638968 2016-05-04] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5155904 2016-05-04] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1078544 2016-04-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [710232 2016-05-04] (AVG Technologies CZ, s.r.o.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2016-04-18] (Acer Incorporated)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-03-30] (NVIDIA Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-28] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-28] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
S2 libusbd; C:\Windows\SysWOW64\libusbd-nt.exe [18944 2005-03-09] (hxxp://libusb-win32.sourceforge.net) [Fichier non signé]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-03-30] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-03-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-03-30] (NVIDIA Corporation)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S2 SkypeUpdate; D:\Utilitairesl\skype\Updater\Updater.exe [327296 2015-07-09] (Skype Technologies)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé]
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [233216 2014-06-24] (acer)
R2 vToolbarUpdater40.2.1; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\ToolbarUpdater.exe [1926544 2015-11-24] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S3 McAWFwk; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [X]
S2 mccspsvc; "C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe" [X]
S2 WtuSystemSupport; "C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe" [X]
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3881472 2013-12-12] (Qualcomm Atheros Communications, Inc.)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [303616 2015-05-01] () [Fichier non signé]
S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [307456 2016-04-20] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [248576 2016-03-29] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [51968 2016-04-14] (AVG Technologies CZ, s.r.o.)
R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71936 2016-05-04] (AVG Technologies CZ, s.r.o.)
R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-12-24] (Qualcomm Atheros)
R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-30] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () [Fichier non signé]
S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [35328 2015-05-01] () [Fichier non signé]
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-03-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation)
R2 RtkIOAC60; C:\Windows\system32\DRIVERS\RtkIOAC60.sys [29912 2013-07-19] (Realtek semiconductor corp)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-05-18 10:00 - 2016-05-18 10:00 - 00027592 _____ C:\Users\papy\Downloads\FRST.txt
2016-05-18 09:59 - 2016-05-18 10:00 - 00000000 ____D C:\FRST
2016-05-18 09:58 - 2016-05-18 09:58 - 02382336 _____ (Farbar) C:\Users\papy\Downloads\FRST64.exe
2016-05-18 07:50 - 2016-05-18 07:50 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2016-05-18 07:49 - 2016-05-18 07:50 - 00000000 ____D C:\Program Files\CCleaner
2016-05-18 07:49 - 2016-05-18 07:49 - 00000838 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-05-18 07:48 - 2016-05-18 07:48 - 06882192 _____ (Piriform Ltd) C:\Users\papy\Downloads\ccsetup517.exe
2016-05-16 17:51 - 2005-10-19 23:07 - 07029478 _____ C:\Users\papy\Downloads\Setup_Columbus_Terrain_Mod.exe
2016-05-16 17:50 - 2016-05-16 17:50 - 07012946 _____ C:\Users\papy\Downloads\Setup_Columbus_Terrain_Mod.zip
2016-05-15 08:25 - 2016-05-17 21:47 - 00001515 _____ C:\Users\papy\Desktop\NoahsArk - Raccourci.lnk
2016-05-15 08:23 - 2016-05-15 08:23 - 00000000 ____D C:\Users\papy\AppData\Roaming\The Chronicles of Noah's Ark
2016-05-14 17:40 - 2016-05-14 17:40 - 00416145 _____ C:\Users\papy\Downloads\XLN_RN_XLNation_Forest_Pack_V1.1.patch
2016-05-13 18:39 - 2016-05-13 18:39 - 05995712 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2016-05-13 18:24 - 2012-04-10 11:43 - 49925083 ____N C:\Users\papy\Downloads\RHM2.exe
2016-05-13 18:18 - 2016-05-13 18:18 - 23390907 _____ C:\Users\papy\Downloads\LasVegas-McMansions.zip
2016-05-13 18:16 - 2016-05-13 18:16 - 07927941 _____ C:\Users\papy\Downloads\NYC Taxi Cab Mod .rar
2016-05-13 18:15 - 2016-05-13 18:15 - 49884616 _____ C:\Users\papy\Downloads\RHM2.exe.zip
2016-05-13 18:14 - 2016-05-13 18:14 - 02874693 _____ C:\Users\papy\Downloads\Super Bank XL Nation - Center of Commerce.zip
2016-05-13 18:06 - 2016-05-13 18:06 - 32014543 _____ C:\Users\papy\Downloads\XLN_PLT_UltimateMappackofRealworldmaps_UIM_1.0_0.zip
2016-05-13 18:06 - 2016-05-13 18:06 - 09033802 _____ C:\Users\papy\Downloads\XLN_skull613_Hiroshima_UIM_1.0.zip
2016-05-13 18:06 - 2016-05-13 18:06 - 03833342 _____ C:\Users\papy\Downloads\XLN_skullz_New_York_1.1_NoGM_and_GM.zip
2016-05-13 18:04 - 2016-05-13 18:04 - 12888578 _____ C:\Users\papy\Downloads\NEXL - Trams - NEXL Team.zip
2016-05-13 18:01 - 2016-05-13 18:03 - 131987045 _____ C:\Users\papy\Downloads\2014 retail MEGA PACK.rar
2016-05-13 10:42 - 2016-05-13 18:24 - 00000000 ____D C:\Users\papy\Downloads\__MACOSX
2016-05-13 10:36 - 2016-05-13 10:36 - 08535023 _____ C:\Users\papy\Downloads\XLNation_UserInterfaceMod_v1.79.9.zip
2016-05-11 07:27 - 2016-04-22 22:54 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-05-11 07:27 - 2016-03-31 08:50 - 01307328 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-05-11 07:27 - 2016-03-31 05:40 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2016-05-11 07:27 - 2016-03-29 03:42 - 07446368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-05-11 07:26 - 2016-04-22 22:15 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-05-11 07:26 - 2016-04-22 22:14 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-05-11 07:26 - 2016-04-22 22:08 - 06052864 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-05-11 07:26 - 2016-04-22 22:06 - 20349952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-05-11 07:26 - 2016-04-22 22:00 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-05-11 07:26 - 2016-04-22 21:35 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-05-11 07:26 - 2016-04-22 21:29 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-05-11 07:26 - 2016-04-22 21:24 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-05-11 07:26 - 2016-04-22 21:23 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-05-11 07:26 - 2016-04-22 21:19 - 15414784 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-05-11 07:26 - 2016-04-22 21:17 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-05-11 07:26 - 2016-04-22 21:14 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-05-11 07:26 - 2016-04-22 21:14 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-05-11 07:26 - 2016-04-22 21:14 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-05-11 07:26 - 2016-04-22 21:12 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-05-11 07:26 - 2016-04-22 20:58 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-05-11 07:26 - 2016-04-22 20:58 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-05-11 07:26 - 2016-04-22 20:54 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-05-11 07:26 - 2016-04-22 20:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-05-11 07:26 - 2016-04-22 20:52 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-05-11 07:26 - 2016-04-22 20:52 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-05-11 07:26 - 2016-04-22 20:52 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-05-11 07:26 - 2016-04-22 20:51 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-05-11 07:26 - 2016-04-22 20:40 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-05-11 07:26 - 2016-04-22 20:29 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-05-11 07:26 - 2016-04-22 20:27 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-05-11 07:26 - 2016-04-22 20:24 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-05-11 07:26 - 2016-04-22 20:23 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-05-11 07:26 - 2016-04-10 09:48 - 00738096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-05-11 07:26 - 2016-04-10 09:48 - 00613624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2016-05-11 07:26 - 2016-04-10 06:21 - 01763376 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-05-11 07:26 - 2016-04-10 06:21 - 01489088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2016-05-11 07:26 - 2016-04-10 06:14 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-05-11 07:26 - 2016-04-10 00:07 - 01097728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2016-05-11 07:26 - 2016-04-09 23:58 - 00534016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll
2016-05-11 07:26 - 2016-04-09 23:50 - 00375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll
2016-05-11 07:26 - 2016-04-06 23:13 - 00561960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-05-11 07:26 - 2016-04-06 23:13 - 00137976 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-05-11 07:26 - 2016-04-06 20:20 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-05-11 07:26 - 2016-04-06 20:19 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-05-11 07:26 - 2016-04-06 20:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-05-11 07:26 - 2016-04-06 19:49 - 00120384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2016-05-11 07:26 - 2016-04-06 19:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2016-05-11 07:26 - 2016-04-06 18:57 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-05-11 07:26 - 2016-04-06 18:52 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-05-11 07:26 - 2016-04-06 18:20 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2016-05-11 07:26 - 2016-04-06 17:48 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2016-05-11 07:25 - 2016-04-11 08:21 - 00074584 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys
2016-05-11 07:25 - 2016-04-10 07:37 - 01549144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-05-11 07:25 - 2016-04-10 01:29 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-05-10 08:29 - 2016-05-17 21:47 - 00000965 _____ C:\Users\papy\Desktop\Fishdom H2O - Raccourci.lnk
2016-05-10 07:20 - 2016-05-10 07:20 - 00003334 _____ C:\Windows\System32\Tasks\AcerCloud
2016-05-09 12:18 - 2016-05-17 21:22 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-05-09 12:17 - 2016-05-09 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-05-09 12:17 - 2016-05-09 12:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-05-09 12:17 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-05-09 12:17 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-05-09 12:17 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-05-09 10:55 - 2016-05-17 21:47 - 00001403 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2016-05-09 10:55 - 2016-05-09 11:05 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-05-09 10:55 - 2016-05-09 10:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2016-05-09 10:55 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe
2016-05-07 12:54 - 2016-05-07 12:54 - 00000000 ____D C:\Users\papy\Documents\SimCity
2016-05-07 12:49 - 2016-05-07 12:53 - 00000000 ____D C:\Program Files (x86)\SimCity v10
2016-05-04 16:58 - 2016-05-04 16:58 - 00071936 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avguniva.sys
2016-05-03 08:46 - 2016-05-03 08:57 - 00000925 _____ C:\siw_debug.txt
2016-05-03 08:46 - 2016-05-03 08:57 - 00000000 ____D C:\Users\papy\AppData\Roaming\siw_tmp
2016-05-03 08:46 - 2016-05-03 08:46 - 00000000 ____D C:\Users\papy\AppData\Local\CrashRpt
2016-05-02 12:13 - 2016-05-17 21:47 - 00000969 _____ C:\Users\papy\Desktop\DarkParables_RiseoftheSnowQueen - Raccourci.lnk
2016-05-02 12:13 - 2016-05-02 12:13 - 00000000 ____D C:\Users\papy\AppData\Roaming\Blue Tea Games
2016-05-02 12:09 - 2016-03-21 22:01 - 00109632 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-05-02 12:09 - 2016-03-21 22:01 - 00100416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-05-02 12:09 - 2016-03-21 22:01 - 00056384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-04-28 08:11 - 2016-04-28 08:11 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET
2016-04-28 08:06 - 2016-04-28 08:06 - 00084976 _____ (Gibson Research Corp., Laguna Niguel, California, USA.) C:\Users\papy\Downloads\never10.exe
2016-04-26 16:20 - 2016-04-26 16:20 - 00568151 _____ C:\Users\papy\Desktop\BE12 0624 2352 5092 2016-04-26 16-19-59 3.txt
2016-04-26 08:11 - 2016-04-26 08:11 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-04-26 08:11 - 2016-04-26 08:11 - 00000000 ___SD C:\Windows\system32\GWX
2016-04-25 12:35 - 2016-05-17 21:47 - 00001439 _____ C:\Users\papy\Desktop\Experiment - Raccourci.lnk
2016-04-25 12:34 - 2016-04-25 12:35 - 00000000 ____D C:\Users\papy\Documents\Exp_Saves
2016-04-25 12:27 - 2016-05-17 21:47 - 00001209 _____ C:\Users\papy\Desktop\frozen-kingdom - Raccourci.lnk
2016-04-25 12:26 - 2016-04-25 12:26 - 00000000 ____D C:\Users\papy\AppData\Roaming\Frozen Kingdom
2016-04-25 12:23 - 2016-05-17 21:47 - 00001529 _____ C:\Users\papy\Desktop\JewelQuestSleeplessStar - Raccourci.lnk
2016-04-25 12:22 - 2016-05-17 21:47 - 00000723 _____ C:\Users\papy\Desktop\ZY-Fishdom 3 - Raccourci.lnk
2016-04-25 12:22 - 2016-05-10 08:00 - 00000000 ____D C:\Users\papy\AppData\Roaming\Playrix Entertainment
2016-04-25 12:19 - 2016-05-17 21:47 - 00000682 _____ C:\Users\papy\Desktop\floria - Raccourci.lnk
2016-04-25 12:18 - 2016-04-25 12:19 - 00000000 ____D C:\Users\papy\AppData\Roaming\Floria
2016-04-25 12:11 - 2016-04-25 12:23 - 00000000 ____D C:\Users\Public\Documents\iWin
2016-04-25 12:07 - 2016-05-17 21:47 - 00000944 _____ C:\Users\papy\Desktop\TheEnchantingIslands - Raccourci.lnk
2016-04-24 19:04 - 2016-04-24 19:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan
2016-04-24 19:04 - 2016-04-24 19:04 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2016-04-24 19:04 - 2016-03-22 04:25 - 00532536 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-04-24 19:04 - 2016-03-22 04:25 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-04-24 19:04 - 2016-03-22 04:10 - 00112184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-04-24 19:04 - 2016-03-16 23:30 - 00128792 _____ C:\Windows\SysWOW64\vulkan-1.dll
2016-04-24 19:04 - 2016-03-16 23:29 - 00127768 _____ C:\Windows\system32\vulkan-1.dll
2016-04-24 19:04 - 2016-03-16 23:29 - 00041752 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2016-04-24 19:04 - 2016-03-16 23:28 - 00045848 _____ C:\Windows\system32\vulkaninfo.exe
2016-04-24 19:01 - 2016-03-24 12:58 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-04-24 19:01 - 2016-03-24 12:58 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 42923576 _____ C:\Windows\system32\nvcompiler.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 37567424 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 31555008 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 25321408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 21355248 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 20897416 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 17748712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 17342392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 17248408 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 12567608 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-04-24 19:01 - 2016-03-22 06:12 - 10550736 _____ C:\Windows\system32\nvptxJitCompiler.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 08659472 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 03235896 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 02809280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436472.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 01573432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436472.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00959544 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00889400 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00753208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00695864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00678520 _____ C:\Windows\system32\nvfatbinaryLoader.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00571912 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00473592 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00391632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00129208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-04-24 19:01 - 2016-03-22 06:12 - 00000139 _____ C:\Windows\SysWOW64\nv-vk32.json
2016-04-24 19:01 - 2016-03-22 06:12 - 00000139 _____ C:\Windows\system32\nv-vk64.json
2016-04-24 18:55 - 2016-03-30 03:05 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-04-22 07:39 - 2016-04-22 07:39 - 00000000 ____D C:\Users\papy\AppData\Roaming\Gold Casual Games
2016-04-22 07:38 - 2016-04-22 07:38 - 00000000 ____D C:\objets_caches
2016-04-20 14:17 - 2016-04-20 14:17 - 00307456 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-05-18 09:39 - 2015-09-30 18:05 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-05-18 09:22 - 2015-04-11 09:38 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-05-18 08:11 - 2015-04-11 08:36 - 00003592 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-485677924-41462818-366947018-1001
2016-05-18 08:04 - 2015-04-11 08:36 - 00000000 ____D C:\Users\papy\OneDrive
2016-05-18 08:03 - 2015-04-11 08:29 - 00000000 ____D C:\Users\papy\AppData\Local\SweetLabs App Platform
2016-05-18 08:01 - 2015-04-11 09:38 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-05-18 08:01 - 2014-11-04 18:53 - 00000000 ____D C:\ProgramData\NVIDIA
2016-05-18 08:01 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-05-18 07:59 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-05-18 07:31 - 2015-04-11 08:41 - 00003912 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{473BC33B-0EE9-440F-8583-5CE828319A56}
2016-05-17 22:50 - 2016-01-02 14:04 - 00000000 ____D C:\Steam
2016-05-17 22:06 - 2015-12-01 17:56 - 00000000 ____D C:\ProgramData\MFAData
2016-05-17 21:47 - 2016-04-16 09:45 - 00000876 _____ C:\Users\papy\Desktop\HelloVenice - Raccourci.lnk
2016-05-17 21:47 - 2016-04-11 08:29 - 00001120 _____ C:\Users\papy\Desktop\CharmTale2 - Raccourci.lnk
2016-05-17 21:47 - 2016-04-06 18:20 - 00000836 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prison architect.lnk
2016-05-17 21:47 - 2016-01-09 09:25 - 00001334 _____ C:\Users\papy\Desktop\cm2 - Raccourci.lnk
2016-05-17 21:47 - 2016-01-04 08:49 - 00000672 _____ C:\Users\papy\Desktop\JMS - Raccourci.lnk
2016-05-17 21:47 - 2015-12-28 11:41 - 00001521 _____ C:\Users\papy\Desktop\LostInReefs3 - Raccourci.lnk
2016-05-17 21:47 - 2015-12-14 14:02 - 00000654 _____ C:\Users\papy\Desktop\VillageQuest - Raccourci.lnk
2016-05-17 21:47 - 2015-12-14 13:17 - 00000796 _____ C:\Users\papy\Desktop\ArtifactsOfEternity - Raccourci.lnk
2016-05-17 21:47 - 2015-12-01 17:32 - 00001239 _____ C:\Users\papy\Desktop\Téléchargements - Raccourci.lnk
2016-05-17 21:47 - 2015-09-23 09:24 - 00000664 _____ C:\Users\papy\Desktop\SafariVenture - Raccourci.lnk
2016-05-17 21:47 - 2015-09-05 11:37 - 00000666 _____ C:\Users\papy\Desktop\Musique - Raccourci.lnk
2016-05-17 21:47 - 2015-07-26 10:33 - 00001422 _____ C:\Users\papy\Desktop\Photoshop - Raccourci.lnk
2016-05-17 21:47 - 2015-07-26 10:18 - 00000935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
2016-05-17 21:47 - 2015-07-26 10:17 - 00000905 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
2016-05-17 21:47 - 2015-07-26 10:17 - 00000880 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk
2016-05-17 21:47 - 2015-07-26 10:16 - 00000852 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk
2016-05-17 21:47 - 2015-07-26 10:15 - 00001539 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk
2016-05-17 21:47 - 2015-07-26 10:15 - 00001000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk
2016-05-17 21:47 - 2015-07-17 16:27 - 00001496 _____ C:\Users\papy\Desktop\TheTreasuresOfMontezuma4 - Raccourci.lnk
2016-05-17 21:47 - 2015-06-06 10:24 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-05-17 21:47 - 2015-04-23 11:45 - 00000788 _____ C:\Users\Public\Desktop\Azteca.lnk
2016-05-17 21:47 - 2015-04-14 16:05 - 07153152 ___SH C:\Users\papy\Desktop\Thumbs.db
2016-05-17 21:47 - 2015-04-13 12:26 - 00002001 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jouer à Puzzle Express.lnk
2016-05-17 21:47 - 2015-04-13 12:26 - 00000796 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArtifactsOfEternity - Raccourci.lnk
2016-05-17 21:47 - 2015-04-13 12:26 - 00000641 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Document.lnk
2016-05-17 21:47 - 2015-04-11 10:17 - 00001965 _____ C:\Users\Public\Desktop\Jouer à Puzzle Express.lnk
2016-05-17 21:47 - 2015-04-11 10:07 - 00001939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk
2016-05-17 21:47 - 2015-04-11 10:07 - 00001248 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Encore plus de jeux.lnk
2016-05-17 21:47 - 2015-04-11 09:39 - 00002217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-05-17 21:47 - 2015-04-11 08:33 - 00002428 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk
2016-05-17 21:47 - 2015-04-11 08:33 - 00002402 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk
2016-05-17 21:47 - 2015-04-11 08:30 - 00001458 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-05-17 21:47 - 2015-04-11 08:29 - 00000469 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk
2016-05-17 21:47 - 2015-04-11 08:29 - 00000467 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk
2016-05-17 21:47 - 2014-11-04 19:14 - 00002000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
2016-05-17 21:47 - 2014-11-04 19:01 - 00001943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2016-05-17 21:47 - 2014-07-14 17:38 - 00002550 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games App - acer.lnk
2016-05-17 15:15 - 2014-11-02 02:18 - 00811108 _____ C:\Windows\system32\perfh00C.dat
2016-05-17 15:15 - 2014-11-02 02:18 - 00159206 _____ C:\Windows\system32\perfc00C.dat
2016-05-17 15:15 - 2014-03-18 12:03 - 01824010 _____ C:\Windows\system32\PerfStringBackup.INI
2016-05-17 15:15 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-05-17 07:57 - 2015-04-11 16:16 - 00000000 ____D C:\Users\papy\Desktop\Document
2016-05-16 19:28 - 2015-05-10 08:57 - 00000000 ____D C:\Users\papy\AppData\Roaming\vlc
2016-05-16 18:55 - 2015-04-11 13:02 - 00000000 ____D C:\Users\papy\AppData\Local\ElevatedDiagnostics
2016-05-16 17:33 - 2015-12-01 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen
2016-05-16 16:16 - 2014-11-04 19:07 - 00000000 ____D C:\ProgramData\Temp
2016-05-15 08:24 - 2015-05-09 17:35 - 00000000 ____D C:\Jeux
2016-05-15 08:12 - 2016-01-03 16:23 - 00000000 ____D C:\Users\papy\Desktop\Calendrier paiements
2016-05-14 17:07 - 2015-04-11 08:37 - 00000000 ____D C:\Users\papy\AppData\Local\CrashDumps
2016-05-14 07:34 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-05-14 07:16 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM
2016-05-13 18:39 - 2015-09-30 18:05 - 00003890 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-05-13 10:46 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2016-05-12 08:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2016-05-11 22:08 - 2014-07-14 17:36 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-05-11 22:08 - 2014-07-14 17:36 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-05-11 15:09 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-05-11 12:07 - 2013-08-22 16:44 - 04993320 _____ C:\Windows\system32\FNTCACHE.DAT
2016-05-11 07:56 - 2015-04-13 11:32 - 00000000 ____D C:\Windows\system32\MRT
2016-05-11 07:56 - 2014-03-18 11:45 - 00000000 ____D C:\Program Files\Windows Journal
2016-05-11 07:46 - 2015-04-13 11:32 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-05-11 07:25 - 2016-04-13 07:31 - 01737088 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-05-11 07:25 - 2016-04-13 07:31 - 01663184 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2016-05-11 07:25 - 2016-04-13 07:31 - 01523208 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2016-05-11 07:25 - 2016-04-13 07:31 - 01501488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2016-05-11 07:25 - 2016-04-13 07:31 - 01490120 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2016-05-11 07:25 - 2016-04-13 07:31 - 01358952 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2016-05-11 07:25 - 2016-04-13 07:31 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll
2016-05-11 07:17 - 2015-04-11 09:38 - 00004056 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-05-11 07:17 - 2015-04-11 09:38 - 00003820 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-05-10 17:12 - 2015-12-01 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2016-05-10 07:19 - 2014-11-04 19:04 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2016-05-10 07:17 - 2015-04-11 08:31 - 00000000 ____D C:\Users\papy\AppData\Local\clear.fi
2016-05-09 12:42 - 2015-05-03 08:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2016-05-09 10:55 - 2015-12-01 20:53 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-05-04 18:21 - 2016-04-07 10:27 - 00000000 ____D C:\Program Files\Recuva
2016-05-02 16:07 - 2016-01-21 12:48 - 00000000 ____D C:\Users\papy\Desktop\Jeux
2016-05-02 12:10 - 2015-09-30 14:42 - 00000000 ____D C:\Users\papy\AppData\Local\NVIDIA Corporation
2016-05-02 12:10 - 2015-04-11 08:31 - 00000000 ____D C:\Users\papy\AppData\Local\NVIDIA
2016-05-01 16:11 - 2016-01-04 08:49 - 00000000 ____D C:\Users\papy\AppData\Roaming\Jewel Match Snowscapes
2016-04-29 08:25 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-04-28 08:13 - 2015-05-06 10:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-04-28 08:13 - 2015-05-06 10:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-04-28 08:11 - 2015-05-06 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-04-27 14:16 - 2015-07-20 07:52 - 00003442 _____ C:\Windows\System32\Tasks\BacKGroundAgent
2016-04-27 14:16 - 2014-07-14 18:16 - 00000000 ___HD C:\OEM
2016-04-25 12:06 - 2015-05-19 18:53 - 00000000 ____D C:\Users\papy\Documents\My Games
2016-04-24 19:05 - 2014-11-04 18:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-04-24 19:03 - 2014-11-04 18:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-04-24 18:33 - 2015-08-26 11:35 - 00000000 ____D C:\Program Files (x86)\MarkAny
2016-04-24 18:27 - 2015-08-26 11:30 - 00000000 ____D C:\Users\papy\AppData\Roaming\Samsung
2016-04-24 18:27 - 2015-08-26 11:30 - 00000000 ____D C:\Users\papy\AppData\Local\Samsung
2016-04-24 18:27 - 2015-08-26 11:28 - 00000000 ____D C:\ProgramData\Samsung
2016-04-24 18:27 - 2015-08-26 11:28 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-04-24 18:27 - 2014-11-04 18:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-04-24 18:17 - 2015-12-01 22:47 - 00000085 _____ C:\Windows\wininit.ini
==================== Fichiers à la racine de certains dossiers =======
2015-09-30 12:07 - 2015-09-30 12:06 - 0661456 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcp110.dll
2015-09-30 12:04 - 2015-09-30 12:04 - 0660128 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcp120.dll
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\Digital Mono
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\DirectoryService
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\Displays
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ___RH () C:\ProgramData\Documentation
2014-11-04 18:56 - 2014-11-04 18:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ___RH () C:\ProgramData\Drum Kits
2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\Examples
2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\External Build System
2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\Filesystems
2015-05-20 12:54 - 2015-05-20 12:54 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT
2015-05-20 12:54 - 2016-03-11 13:01 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT
2015-05-20 12:54 - 2015-05-20 12:54 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT
Fichiers à déplacer ou supprimer:
====================
C:\Users\papy\d3dx9_43.dll
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-05-10 07:49
==================== Fin de FRST.txt ============================