cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:05-06-2016 02
Exécuté par suzanne (administrateur) sur PORTABLESUZANNE (06-06-2016 16:18:38)
Exécuté depuis C:\Users\suzanne\Downloads
Profils chargés: suzanne (Profils disponibles: suzanne & Administrateur)
Platform: Windows 8.1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(AMD) C:\Program Files\AMD\amdkmpfd_un\atieclxx.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
() C:\Program Files\AMD\ATI.ACE\a4\AdaptiveSleepService.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\System32\UserAccountBroker.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_242.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_21_0_0_242.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7400064 2016-06-04] (AVAST Software)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [PCFIXTRAYXQAIV] => c:\pcfiXtraydujbz.lnk [2158 2016-05-31] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597016 2016-03-31] (Oracle Corporation)
HKU\S-1-5-21-2948816991-2814650765-2217703592-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8721624 2016-05-13] (Piriform Ltd)
HKU\S-1-5-21-2948816991-2814650765-2217703592-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [11776 2013-08-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-05-07] (AVAST Software)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => Pas de fichier
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2016-06-06]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{2AB9EF63-0B4D-4D18-858F-BFFD5D469BEC}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{A3DEB9B5-18D5-4864-BA1E-9053001DC22B}: [NameServer] 192.168.0.254
Tcpip\..\Interfaces\{A3DEB9B5-18D5-4864-BA1E-9053001DC22B}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{CF3FA421-0FD2-489B-BBD2-8CD241BA64BD}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{D590B8BF-1ACC-48F2-AE4A-FEAEF641C96D}: [DhcpNameServer] 192.168.0.254
ManualProxies:

Internet Explorer:
==================
HKU\S-1-5-21-2948816991-2814650765-2217703592-1002\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKU\S-1-5-21-2948816991-2814650765-2217703592-1002\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie
HKU\S-1-5-21-2948816991-2814650765-2217703592-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKU\S-1-5-21-2948816991-2814650765-2217703592-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2948816991-2814650765-2217703592-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Toolbar: HKLM - Pas de nom - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Pas de fichier
Toolbar: HKLM-x32 - Pas de nom - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Pas de fichier
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Toolbar: HKU\S-1-5-21-2948816991-2814650765-2217703592-1002 -> Pas de nom - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - Pas de fichier
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\suzanne\AppData\Roaming\Mozilla\Firefox\Profiles\0wpvjld9.default-1459846280714
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=11.92.2 -> C:\Program Files\Java\jre1.8.0_92\bin\dtplugin\npDeployJava1.dll [2016-05-03] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.92.2 -> C:\Program Files\Java\jre1.8.0_92\bin\plugin2\npjp2.dll [2016-05-03] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-04-26] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Pas de fichier]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [Pas de fichier]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Pas de fichier]
FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2014-11-06] (RocketLife, LLP)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [Pas de fichier]
FF Extension: Google Translator for Firefox - C:\Users\suzanne\AppData\Roaming\Mozilla\Firefox\Profiles\0wpvjld9.default-1459846280714\extensions\translator@zoli.bod.xpi [2016-06-04]
FF Extension: WOT - C:\Users\suzanne\AppData\Roaming\Mozilla\Firefox\Profiles\0wpvjld9.default-1459846280714\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-06-04]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-05-07]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome:
=======
CHR Profile: C:\Users\suzanne\AppData\Local\Google\Chrome\User Data\Default
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-05-07]

Opera:
=======
OPR Extension: (Add Bookmark) - C:\Users\suzanne\AppData\Roaming\Opera Software\Opera Stable\Extensions\afefffbbjobefahecmgjlanoemlipbkj [2016-05-23]
OPR Extension: (Adguard Ad Blocker) - C:\Users\suzanne\AppData\Roaming\Opera Software\Opera Stable\Extensions\bopfaehpakahokaelnomggbohfbimcia [2016-05-22]
OPR Extension: (Proxy SurfEasy, une Société d'Opera Software) - C:\Users\suzanne\AppData\Roaming\Opera Software\Opera Stable\Extensions\ebpielhlnnpkiddeeacoephkilopgblc [2016-05-24]
OPR Extension: (WOT) - C:\Users\suzanne\AppData\Roaming\Opera Software\Opera Stable\Extensions\eeokceolphhfjdfcibaiiopmekmcbedp [2016-05-22]
OPR Extension: (Traduire) - C:\Users\suzanne\AppData\Roaming\Opera Software\Opera Stable\Extensions\ibnombjmjocaccigcefonnipcnlaeaed [2016-05-22]
OPR Extension: (uBlock Origin) - C:\Users\suzanne\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2016-05-22]

==================== Services (Avec liste blanche) ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdaptiveSleepService; C:\Program Files\AMD\ATI.ACE\A4\AdaptiveSleepService.exe [138752 2016-04-04] () [Fichier non signé]
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [Fichier non signé]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [243296 2016-05-07] (AVAST Software)
S3 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [Fichier non signé]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [78088 2014-08-26] (Hewlett-Packard Company)
S3 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP System Event\HPWMISVC.exe [469304 2014-03-26] (Hewlett-Packard Development Company, L.P.)
R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-03-11] (Plays.tv, LLC)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1570520 2016-02-02] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [837848 2016-02-02] (Secunia)
S2 SetupARService; C:\Program Files (x86)\Realtek\Audio\SetupAfterRebootService.exe [10752 2015-07-09] () [Fichier non signé]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [348392 2013-10-31] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2013-10-31] (Microsoft Corporation)
S2 doroghtshejasmoduleservice; "C:\Program Files (x86)\Doroghtshejas\doroghtshejasmoduleservice.html5" {79740E79-A383-47A7-B513-3DF6563D007F} {8C4CE252-7DB2-4F8E-8E76-BAD0E5826A83} [X]

===================== Pilotes (Avec liste blanche) ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 AmdAS4; C:\Windows\System32\drivers\AmdAS4.sys [17640 2013-10-24] (Advanced Micro Devices, INC.)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [23240 2016-03-21] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [68832 2015-12-16] (Advanced Micro Devices, Inc.)
R2 APXACC; C:\Windows\system32\DRIVERS\appexDrv.sys [229056 2015-04-03] (AppEx Networks Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-05-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-05-07] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-05-07] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-05-07] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-05-07] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-05-07] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-05-07] (AVAST Software)
R3 aswTap; C:\Windows\system32\DRIVERS\aswTap.sys [44640 2014-08-27] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287528 2016-05-07] (AVAST Software)
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWB6.sys [111128 2016-03-07] (Advanced Micro Devices)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-03-20] ()
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160 2016-05-12] (Glarysoft Ltd)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2016-02-02] (Secunia)
R3 RSP2STOR; C:\Windows\system32\DRIVERS\RtsP2Stor.sys [294104 2000-01-01] (Realtek Semiconductor Corp.)
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [788696 2000-01-01] (Realsil Semiconductor Corporation)
U5 RTSUER; C:\Windows\System32\Drivers\RTSUER.sys [377560 2000-01-01] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [3410136 2014-04-11] (Realtek Semiconductor Corporation )
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35064 2015-10-18] ()
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [35856 2013-10-31] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [236888 2013-10-31] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [124760 2013-10-31] (Microsoft Corporation)
R3 WirelessButtonDriver; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [20800 2013-07-22] (Hewlett-Packard Development Company, L.P.)
S3 SmbDrv; \SystemRoot\System32\drivers\Smb_driver_AMDASF.sys [X]
S3 SmbDrvI; \SystemRoot\System32\drivers\Smb_driver_Intel.sys [X]
S0 whcfkaai; System32\drivers\vkov.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-06-06 16:09 - 2016-06-06 16:09 - 00001205 _____ C:\Users\suzanne\Desktop\FRST64.exe - Raccourci.lnk
2016-06-06 16:07 - 2016-06-06 16:07 - 00002831 _____ C:\Users\suzanne\Downloads\fixlist.txt
2016-06-06 16:07 - 2016-06-06 16:07 - 00001531 _____ C:\Users\suzanne\Desktop\fixlist.txt - Raccourci.lnk
2016-06-06 13:55 - 2016-06-06 13:55 - 00001430 _____ C:\Users\suzanne\Desktop\fichiersastuces.png - Raccourci.lnk
2016-06-06 11:34 - 2016-06-06 11:34 - 00001199 _____ C:\Users\suzanne\Desktop\Shortcut.txt - Raccourci.lnk
2016-06-06 11:34 - 2016-06-06 11:34 - 00001159 _____ C:\Users\suzanne\Desktop\FRST.txt - Raccourci.lnk
2016-06-06 11:29 - 2016-06-06 11:29 - 00001199 _____ C:\Users\suzanne\Desktop\Addition.txt - Raccourci.lnk
2016-06-06 11:26 - 2016-06-06 11:26 - 00051064 _____ C:\Users\suzanne\Downloads\Shortcut.txt
2016-06-06 11:25 - 2016-06-06 11:26 - 00041613 _____ C:\Users\suzanne\Downloads\Addition.txt
2016-06-06 11:23 - 2016-06-06 16:18 - 00018657 _____ C:\Users\suzanne\Downloads\FRST.txt
2016-06-06 11:22 - 2016-06-06 16:18 - 00000000 ____D C:\FRST
2016-06-06 11:22 - 2016-06-06 11:22 - 02384896 _____ (Farbar) C:\Users\suzanne\Downloads\FRST64.exe
2016-06-06 10:43 - 2016-06-06 10:43 - 02212352 _____ C:\Users\suzanne\Downloads\ZHPDiag3.exe
2016-06-06 10:05 - 2016-06-06 10:05 - 00001382 _____ C:\Users\suzanne\Desktop\pourPCastuces.png - Raccourci.lnk
2016-06-06 10:00 - 2016-06-06 10:00 - 00001317 _____ C:\Users\suzanne\Documents\cc_20160605_145407.reg - Raccourci.lnk
2016-06-06 08:29 - 2016-06-06 08:29 - 00000000 ____D C:\Users\Default\AppData\Roaming\Sun
2016-06-06 08:29 - 2016-05-03 14:02 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-64.dll
2016-06-06 08:27 - 2016-06-06 15:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2016-06-06 08:11 - 2016-06-06 08:11 - 00001056 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Secunia PSI.lnk
2016-06-06 08:11 - 2016-06-06 08:11 - 00000000 ____D C:\Program Files (x86)\Secunia
2016-06-05 14:57 - 2016-06-05 14:57 - 00002266 _____ C:\Users\suzanne\Documents\cc_20160605_145657.reg
2016-06-05 14:54 - 2016-06-05 14:54 - 00001222 _____ C:\Users\suzanne\Documents\cc_20160605_145407.reg
2016-06-05 12:12 - 2016-06-05 12:12 - 00007432 _____ C:\Users\suzanne\Documents\cc_20160605_121241.reg
2016-06-05 08:57 - 2016-06-05 18:46 - 00000000 ____D C:\AdwCleaner
2016-06-05 08:56 - 2016-06-05 08:56 - 03677248 _____ C:\Users\suzanne\Downloads\adwcleaner_5.119.exe
2016-06-05 08:10 - 2016-06-05 08:10 - 00010508 _____ C:\Users\suzanne\Documents\cc_20160605_080959.reg
2016-06-04 20:03 - 2016-06-04 20:01 - 00000929 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-06-04 20:01 - 2016-06-04 20:01 - 00008998 _____ C:\WINDOWS\System32\Tasks\Doroghtshejas Module
2016-06-04 19:57 - 2016-06-04 19:57 - 04642816 _____ C:\Users\suzanne\Downloads\Download_locker_blue.iso
2016-06-04 13:01 - 2016-06-04 13:01 - 00000000 ____D C:\Users\suzanne\Downloads\Force Of Nature
2016-06-04 11:58 - 2016-06-04 17:12 - 00000000 ____D C:\Users\suzanne\AppData\Local\Mozilla
2016-06-04 11:57 - 2016-06-05 15:10 - 00001142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-06-04 11:57 - 2016-06-05 15:10 - 00001130 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-06-04 11:57 - 2016-06-04 20:00 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-06-04 11:57 - 2016-06-04 11:57 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-06-04 11:55 - 2016-06-05 15:10 - 00001231 _____ C:\Users\suzanne\Desktop\ResetBrowser.exe - Raccourci.lnk
2016-06-01 23:01 - 2016-06-01 23:01 - 00011936 _____ C:\Users\suzanne\Desktop\Untitled
2016-06-01 20:33 - 2016-06-06 10:47 - 00098755 _____ C:\Users\suzanne\Desktop\ZHPDiag.txt
2016-06-01 14:48 - 2016-06-01 20:27 - 00002601 _____ C:\DelFix.txt
2016-06-01 14:41 - 2016-06-05 15:10 - 00001428 _____ C:\Users\suzanne\Desktop\RGSA.exe - Raccourci.lnk
2016-06-01 14:23 - 2016-06-01 14:29 - 04002104 _____ (Secunia) C:\Users\suzanne\Downloads\PSISetup.exe
2016-06-01 14:00 - 2016-06-05 15:10 - 00001912 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SumatraPDF.lnk
2016-06-01 14:00 - 2016-06-01 14:00 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\SumatraPDF
2016-06-01 14:00 - 2016-06-01 14:00 - 00000000 ____D C:\Program Files (x86)\SumatraPDF
2016-06-01 13:23 - 2016-06-01 13:23 - 05106760 _____ (Krzysztof Kowalczyk) C:\Users\suzanne\Desktop\SumatraPDF-3.1.1-64-install.exe
2016-05-31 13:14 - 2016-05-31 13:14 - 00087001 _____ C:\erreur malware.txt
2016-05-31 12:19 - 2016-06-02 08:34 - 00000290 __RSH C:\Users\suzanne\ntuser.pol
2016-05-31 12:15 - 2016-05-31 12:15 - 00002158 _____ C:\pcfiXtraydujbz.lnk
2016-05-31 11:38 - 2016-05-31 12:25 - 00030963 _____ C:\WINDOWS\3852fe3fb7bdccec493c0acafad9d081.ps1
2016-05-31 11:38 - 2016-05-31 11:38 - 00000000 ____D C:\WINDOWS\system32\SSL
2016-05-31 11:37 - 2016-05-31 11:37 - 00001354 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Орera.lnk
2016-05-31 11:37 - 2016-05-31 11:37 - 00001318 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzilla Firеfox.lnk
2016-05-31 11:37 - 2016-05-31 11:37 - 00000996 ___RS C:\Users\suzanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Exрlorеr.lnk
2016-05-31 11:37 - 2016-05-31 11:37 - 00000000 ____D C:\ProgramData\VideoFetcher
2016-05-30 21:27 - 2016-05-30 21:27 - 00000250 _____ C:\Users\suzanne\jonquilles supercity.txt
2016-05-26 19:17 - 2016-05-26 19:17 - 00003564 _____ C:\WINDOWS\System32\Tasks\HP AR Program Upload - 677bcb1d1ad5412c9c728931d4fcd0b0d8a0835361e644a9a621d6b8a9226939
2016-05-26 19:14 - 2016-05-26 19:14 - 00120792 _____ C:\Users\suzanne\Downloads\attestation-droits.pdf
2016-05-26 19:13 - 2016-05-26 19:13 - 00117409 _____ C:\Users\suzanne\Downloads\garantie-VCACSPGARB.pdf
2016-05-26 17:36 - 2016-05-26 17:36 - 00001291 _____ C:\analyse Malwarebyte.txt
2016-05-26 12:53 - 2016-05-26 12:53 - 02263552 _____ C:\Users\suzanne\ZHPCleaner.exe
2016-05-25 20:02 - 2016-05-25 20:02 - 00000000 ____D C:\Users\suzanne\AppData\Local\Glarysoft
2016-05-25 19:57 - 2016-05-25 19:57 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
2016-05-24 22:58 - 2016-05-24 22:58 - 02062896 _____ C:\WINDOWS\system32\duplicatefichiersdoublesCcleaner.txt
2016-05-24 16:07 - 2016-06-01 12:43 - 00000000 ___RD C:\Users\suzanne\Documents\Scanned Documents
2016-05-24 16:07 - 2016-05-24 16:07 - 00000000 ____D C:\Users\suzanne\Documents\Fax
2016-05-24 15:45 - 2016-05-24 15:45 - 00000000 ____D C:\Users\suzanne\AppData\Local\CEF
2016-05-24 12:17 - 2016-05-24 12:17 - 00278465 _____ C:\Users\suzanne\Downloads\IR-Form-2042-2016-16110228281152.pdf
2016-05-24 12:14 - 2016-05-24 12:14 - 00101239 _____ C:\Users\suzanne\Downloads\dmPDF.pdf
2016-05-24 12:13 - 2016-05-24 12:13 - 00028625 _____ C:\Users\suzanne\Downloads\accueil.html
2016-05-23 20:22 - 2016-05-23 20:22 - 01378550 _____ (Igor Pavlov) C:\Users\suzanne\Desktop\7_Zip_(64bit)_v16.02.exe
2016-05-23 14:36 - 2016-06-05 15:10 - 00001082 _____ C:\Users\suzanne\Desktop\Cheat Engine.lnk
2016-05-23 13:55 - 2016-05-23 14:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.5.1
2016-05-23 13:55 - 2016-05-23 14:36 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.5.1
2016-05-22 16:49 - 2016-05-22 16:49 - 19946468 _____ C:\Users\suzanne\Downloads\CommunityShowcaseRuralLandscapes2.themepack
2016-05-22 16:45 - 2016-05-22 16:45 - 19896179 _____ C:\Users\suzanne\Downloads\SunnyShores.themepack
2016-05-22 14:54 - 2016-05-22 14:54 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\Opera Software
2016-05-22 14:54 - 2016-05-22 14:54 - 00000000 ____D C:\Users\suzanne\AppData\Local\Opera Software
2016-05-17 23:40 - 2016-06-04 22:53 - 00001064 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-05-17 23:40 - 2016-05-25 00:54 - 00004046 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2016-05-12 17:15 - 2016-05-12 17:15 - 00000000 ____D C:\Users\suzanne\.swt
2016-05-12 17:14 - 2016-05-25 08:36 - 00000000 ____D C:\Program Files\Vuze
2016-05-12 17:14 - 2016-05-19 03:42 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\Azureus
2016-05-12 12:28 - 2016-06-05 15:10 - 00001004 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2016-05-12 12:28 - 2016-05-12 12:28 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-05-12 12:28 - 2016-05-12 12:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-05-12 12:24 - 2016-05-23 20:24 - 00000000 ____D C:\Program Files\7-Zip
2016-05-12 12:24 - 2016-05-12 12:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-05-12 11:42 - 2016-05-19 20:35 - 00003330 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 5
2016-05-12 11:42 - 2016-05-19 20:35 - 00002990 _____ C:\WINDOWS\System32\Tasks\GU5SkipUAC
2016-05-12 11:42 - 2016-05-12 11:44 - 00001939 _____ C:\GUDownLoaddebug.txt
2016-05-12 11:42 - 2016-05-12 11:42 - 00020160 _____ (Glarysoft Ltd) C:\WINDOWS\system32\Drivers\GUBootStartup.sys
2016-05-11 13:05 - 2016-05-11 13:05 - 01622528 _____ C:\Users\suzanne\Downloads\ResetBrowser.exe
2016-05-11 07:36 - 2016-05-11 07:36 - 00000000 ____D C:\Users\suzanne\Documents\font ecran
2016-05-09 15:21 - 2016-05-09 15:21 - 00302011 _____ C:\Users\suzanne\Desktop\WindowsUpdateDiagnostic.diagcab
2016-05-08 09:40 - 2016-05-08 09:40 - 00030675 _____ C:\Users\suzanne\Downloads\Facture_Free_201605_4369146_624977607.pdf
2016-05-07 19:17 - 2016-06-05 15:10 - 00001989 _____ C:\Users\Public\Desktop\Avast Antivirus Gratuit.lnk
2016-05-07 19:17 - 2016-05-07 19:17 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-05-07 19:17 - 2016-05-07 19:17 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-05-07 19:17 - 2016-05-07 19:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-06-06 16:16 - 2015-10-09 21:39 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-06-06 16:09 - 2014-09-01 17:33 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\ClassicShell
2016-06-06 16:00 - 2014-03-04 18:06 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2948816991-2814650765-2217703592-1002
2016-06-06 15:55 - 2015-11-22 15:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-06-06 15:55 - 2014-12-18 11:26 - 00000000 ____D C:\Program Files (x86)\Java
2016-06-06 13:40 - 2014-10-24 15:35 - 00000000 ____D C:\Users\suzanne\AppData\Local\CrashDumps
2016-06-06 10:51 - 2015-02-22 21:27 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\ZHP
2016-06-06 10:42 - 2016-04-03 21:15 - 02212352 _____ C:\Users\suzanne\ZHPDiag3.exe
2016-06-06 10:42 - 2014-03-04 17:56 - 00000000 ____D C:\Users\suzanne
2016-06-06 09:02 - 2013-08-22 17:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-06 08:26 - 2015-09-27 09:19 - 00000000 ____D C:\Program Files\Java
2016-06-06 05:12 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2016-06-06 04:59 - 2013-08-22 16:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-06-06 01:32 - 2013-10-07 13:19 - 00065536 _____ C:\WINDOWS\system32\spu_storage.bin
2016-06-06 00:07 - 2015-05-10 10:06 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-06-05 18:52 - 2014-03-06 16:39 - 00000000 ____D C:\Program Files (x86)\Google
2016-06-05 18:47 - 2014-11-13 15:59 - 00000000 ____D C:\Program Files (x86)\SolSuite
2016-06-05 18:47 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Registration
2016-06-05 15:10 - 2016-05-03 13:58 - 00002001 _____ C:\Users\suzanne\Desktop\FileHippo App Manager.lnk
2016-06-05 15:10 - 2016-03-13 21:50 - 00001147 _____ C:\Users\suzanne\Desktop\Calendrier Xtra - Raccourci.lnk
2016-06-05 15:10 - 2016-02-18 17:56 - 00002074 _____ C:\Users\Public\Desktop\Collecteur Automatique.lnk
2016-06-05 15:10 - 2015-09-27 20:59 - 00000989 _____ C:\Users\Public\Desktop\DriversCloud.com - Démarrer la détection.lnk
2016-06-05 15:10 - 2015-07-08 15:42 - 00000885 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-06-05 15:10 - 2015-06-14 18:18 - 00000938 _____ C:\Users\Public\Desktop\VLC media player.lnk
2016-06-05 15:10 - 2015-06-12 18:10 - 00002031 _____ C:\Users\suzanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileHippo App Manager.lnk
2016-06-05 15:10 - 2015-05-10 10:05 - 00001085 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-06-05 15:10 - 2014-09-01 17:33 - 00002263 _____ C:\Users\suzanne\AppData\Roaming\Microsoft\Windows\Start Menu\startscreen.lnk
2016-06-05 15:10 - 2014-08-25 12:48 - 00001093 _____ C:\Users\Public\Desktop\Picasa 3.lnk
2016-06-05 15:10 - 2014-04-11 10:23 - 00001291 _____ C:\Users\suzanne\Desktop\Revo Uninstaller.lnk
2016-06-05 15:10 - 2014-03-04 17:56 - 00000932 _____ C:\Users\suzanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-06-05 13:00 - 2014-11-13 15:59 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\SolSuite
2016-06-05 08:51 - 2016-01-17 18:04 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-06-05 06:46 - 2014-03-06 16:39 - 00000000 ____D C:\Users\suzanne\AppData\Local\Google
2016-06-04 13:01 - 2013-09-10 01:16 - 00846474 _____ C:\WINDOWS\system32\perfh00C.dat
2016-06-04 13:01 - 2013-09-10 01:16 - 00174564 _____ C:\WINDOWS\system32\perfc00C.dat
2016-06-04 13:01 - 2013-08-26 08:09 - 01966994 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-06-04 13:01 - 2013-08-22 15:36 - 00000000 ____D C:\WINDOWS\Inf
2016-06-04 12:53 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\FileManager
2016-06-04 11:58 - 2014-11-17 20:04 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\Mozilla
2016-06-02 08:57 - 2015-09-17 10:14 - 00000000 ____D C:\ProgramData\GlarySoft
2016-06-02 08:57 - 2015-09-17 08:32 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\GlarySoft
2016-06-02 08:34 - 2014-05-01 14:05 - 00000290 __RSH C:\ProgramData\ntuser.pol
2016-06-02 08:27 - 2013-08-26 08:04 - 00000000 ____D C:\Users\Administrator
2016-06-01 14:34 - 2014-10-19 10:57 - 00000000 ____D C:\ProgramData\Oracle
2016-06-01 13:44 - 2015-10-24 05:47 - 00000000 ____D C:\Users\suzanne\.oracle_jre_usage
2016-06-01 13:19 - 2015-09-13 11:12 - 00000000 ____D C:\Users\suzanne\AppData\Local\Adobe
2016-06-01 12:53 - 2016-03-19 17:43 - 00000000 ____D C:\Users\suzanne\Documents\retraite3-1ermois_files
2016-06-01 12:47 - 2015-06-14 18:18 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\vlc
2016-05-31 13:17 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Cursors
2016-05-31 13:14 - 2013-08-22 17:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2016-05-31 12:15 - 2013-08-22 16:44 - 00420840 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-05-31 11:39 - 2016-01-13 16:31 - 00000000 ____D C:\ProgramData\Package Cache
2016-05-31 11:37 - 2014-08-31 16:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DivX
2016-05-26 18:08 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\InputMethod
2016-05-26 17:45 - 2015-05-10 10:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-05-25 00:54 - 2015-10-09 21:39 - 00003890 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-05-24 17:17 - 2014-04-08 13:15 - 00000000 ____D C:\Users\suzanne\AppData\Local\ElevatedDiagnostics
2016-05-24 15:47 - 2014-08-26 10:07 - 00000000 ____D C:\ProgramData\Adobe
2016-05-24 15:45 - 2014-09-02 07:56 - 00000000 ____D C:\Users\suzanne\AppData\LocalLow\Adobe
2016-05-24 15:45 - 2014-03-04 17:56 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\Adobe
2016-05-20 06:41 - 2014-08-27 16:50 - 00004182 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-05-19 20:44 - 2016-02-02 17:56 - 00000000 ____D C:\Users\suzanne\AppData\Local\AMD
2016-05-18 08:00 - 2016-02-18 18:02 - 00000000 ____D C:\Users\suzanne\AppData\Local\197BFB00FA
2016-05-17 12:31 - 2013-08-22 17:36 - 00000000 ____D C:\WINDOWS\Globalization
2016-05-12 12:28 - 2015-07-13 00:04 - 00000000 ____D C:\Program Files\WinRAR
2016-05-12 09:40 - 2015-02-20 14:16 - 00000000 ____D C:\ProgramData\Skype
2016-05-11 12:47 - 2014-03-05 20:59 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-05-11 12:27 - 2014-03-05 20:59 - 139319312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-05-07 19:17 - 2014-08-27 16:50 - 01070904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-05-07 19:17 - 2014-08-27 16:50 - 00465792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-05-07 19:17 - 2014-08-27 16:50 - 00287528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-05-07 19:17 - 2014-08-27 16:50 - 00166432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-05-07 19:17 - 2014-08-27 16:50 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-05-07 19:17 - 2014-08-27 16:50 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-05-07 19:17 - 2014-08-27 16:50 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-05-07 19:17 - 2014-08-27 16:50 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-05-07 00:50 - 2015-02-20 14:17 - 00000000 ____D C:\Users\suzanne\AppData\Roaming\Skype

==================== Fichiers à la racine de certains dossiers =======

2015-12-06 15:37 - 2016-02-25 18:54 - 0007609 _____ () C:\Users\suzanne\AppData\Local\resmon.resmoncfg
2014-10-22 11:50 - 2014-10-22 11:50 - 0000057 _____ () C:\ProgramData\Ament.ini

Fichiers à déplacer ou supprimer:
====================
C:\Users\suzanne\ZHPCleaner.exe
C:\Users\suzanne\ZHPDiag3.exe


Certains fichiers dans TEMP:
====================
C:\Users\suzanne\AppData\Local\Temp\libeay32.dll
C:\Users\suzanne\AppData\Local\Temp\msvcr120.dll
C:\Users\suzanne\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement


LastRegBack: 2016-06-04 15:40

==================== Fin de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité