Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 02-07-2016
Exécuté par Walid SAH (administrateur) sur WALID (07-07-2016 10:33:27)
Exécuté depuis C:\Users\Walid SAH\Desktop
Profils chargés: Walid SAH (Profils disponibles: Walid SAH)
Platform: Microsoft Windows 10 Professionnel Version 1511 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Baidu, Inc.) C:\Program Files\PC Faster\5.1.0.0\PCFasterSvc.exe
(Intel Corporation) C:\Windows\System32\IntelCpHeciSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Baidu, Inc.) C:\Program Files\Baidu Security\MoboMarket\1.2.8.4379\bassvc.exe
() C:\Program Files\EagleGet\EGMonitor.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
() C:\Program Files\MeditelInternet\MeditelInternet_Service.exe
(Baidu Inc.) C:\Program Files\baidu\Baidu Browser\sparkservice.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
() C:\Program Files\MeditelInternet\MeditelInternet_Launcher.exe
(BitTorrent Inc.) C:\Users\Walid SAH\AppData\Roaming\uTorrent\uTorrent.exe
(© 2015 Microsoft Corporation) C:\Users\Walid SAH\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(EagleGet.com) C:\Program Files\EagleGet\EagleGet.exe
() C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\ace_engine.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(BitTorrent Inc.) C:\Users\Walid SAH\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
(BitTorrent Inc.) C:\Users\Walid SAH\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\ace_update.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [7549184 2015-09-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1024256 2015-09-26] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3527368 2015-09-26] (Synaptics Incorporated)
HKLM\...\Run: [MeditelInternet_MeditelInternet_Launcher.exe] => C:\Program Files\MeditelInternet\MeditelInternet_Launcher.exe [928312 2014-05-22] ()
HKLM\...\Run: [PCFIXTRAYATUCN] => c:\pcfiXtraymhvmp.lnk [1983 2016-06-16] ()
HKLM\...\Run: [PCFIXTRAYMRDWA] => c:\pcfiXtraywnyzf.lnk [1983 2016-06-16] ()
HKLM\...\Run: [PCFIXTRAYVMCJM] => c:\pcfiXtrayafqjp.lnk [1983 2016-06-16] ()
HKLM\...\Run: [PCFIXTRAYWURPA] => c:\pcfiXtraymvjzm.lnk [1983 2016-06-17] ()
HKLM\...\Run: [PCFIXTRAYJRMWV] => c:\pcfiXtraycisuq.lnk [1983 2016-06-18] ()
HKLM\...\Run: [PCFIXTRAYUQROF] => c:\pcfiXtraypwacv.lnk [1983 2016-06-18] ()
HKLM\...\Run: [PCFIXTRAYHNUML] => c:\pcfiXtrayjnrct.lnk [1983 2016-06-19] ()
HKLM\...\Run: [PCFIXTRAYFHWFJ] => c:\pcfiXtrayufgzy.lnk [1983 2016-06-19] ()
HKLM\...\Run: [PCFIXTRAYWOGHU] => c:\pcfiXtraysorht.lnk [1983 2016-06-19] ()
HKLM\...\Run: [PCFIXTRAYNRKHG] => c:\pcfiXtrayetici.lnk [1983 2016-06-20] ()
HKLM\...\Run: [PCFIXTRAYOOGDJ] => c:\pcfiXtraysmspu.lnk [1983 2016-06-20] ()
HKLM\...\Run: [PCFIXTRAYYPEKY] => c:\pcfiXtraybmefk.lnk [1983 2016-06-21] ()
HKLM\...\Run: [PCFIXTRAYXWLIK] => c:\pcfiXtrayrtfbo.lnk [1983 2016-06-22] ()
HKLM\...\Run: [PCFIXTRAYHREZF] => c:\pcfiXtraygzyto.lnk [1983 2016-06-23] ()
HKLM\...\Run: [PCFIXTRAYPKBFY] => c:\pcfiXtraywllfc.lnk [1983 2016-06-23] ()
HKLM\...\Run: [PCFIXTRAYKNRAW] => c:\pcfiXtrayujjmb.lnk [1983 2016-06-29] ()
HKLM\...\Run: [PCFIXTRAYCYMVW] => c:\pcfiXtraylcscw.lnk [1983 2016-06-29] ()
HKLM\...\Run: [PCFIXTRAYYZSIJ] => c:\pcfiXtraylzhpu.lnk [1983 2016-06-30] ()
HKLM\...\Run: [PCFIXTRAYELGPZ] => c:\pcfiXtrayxybzz.lnk [1983 2016-06-30] ()
HKLM\...\Run: [PCFIXTRAYIRLWT] => c:\pcfiXtraymhwza.lnk [1983 2016-07-01] ()
HKLM\...\Run: [PCFIXTRAYLDRUX] => c:\pcfiXtraykrguc.lnk [1983 2016-07-01] ()
HKLM\...\Run: [PCFIXTRAYRISEN] => c:\pcfiXtraynlkud.lnk [1983 2016-07-01] ()
HKLM\...\Run: [PCFIXTRAYPVZFV] => c:\pcfiXtrayuhvrp.lnk [1983 2016-07-02] ()
HKLM\...\Run: [PCFIXTRAYBSIRI] => c:\pcfiXtrayfoyef.lnk [1983 2016-07-02] ()
HKLM\...\Run: [PCFIXTRAYCUCNV] => c:\pcfiXtrayjntaz.lnk [1983 2016-07-02] ()
HKLM\...\Run: [PCFIXTRAYNVQCH] => c:\pcfiXtraywcavt.lnk [1983 2016-07-03] ()
HKLM\...\Run: [PCFIXTRAYMYGJG] => c:\pcfiXtraymkhed.lnk [1983 2016-07-03] ()
HKLM\...\Run: [PCFIXTRAYEXYIH] => c:\pcfiXtraygblns.lnk [1983 2016-07-03] ()
HKLM\...\Run: [PCFIXTRAYTMWUK] => c:\pcfiXtrayjataw.lnk [1983 2016-07-04] ()
HKLM\...\Run: [PCFIXTRAYMUTIT] => c:\pcfiXtraydvyqw.lnk [1983 2016-07-04] ()
HKLM\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs,
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [uTorrent] => C:\Users\Walid SAH\AppData\Roaming\uTorrent\uTorrent.exe [2133504 2016-05-16] (BitTorrent Inc.)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [BingSvc] => C:\Users\Walid SAH\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-15] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [EagleGet] => C:\Program Files\EagleGet\Eagleget.exe [1891328 2015-08-19] (EagleGet.com)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [AceStream] => C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\ace_engine.exe [27000 2016-05-19] ()
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53130368 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [QGuan10in1] => C:\Users\Walid SAH\AppData\Roaming\UPUpdata\service72564.exe /autorun
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\MountPoints2: {15b9d9f9-1468-11e6-a0c3-f8a9638e69f8} - "F:\.\Setup.exe" AUTORUN=1
IFEO\SppExtComObj.exe: [Debugger] SppExtComObjPatcher.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Pas de fichier
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9899312d-57e4-46bf-951c-a97f450a5c33}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{c2f7991d-ec63-441d-bf57-71888d3d129e}: [NameServer] 41.214.140.4 41.214.140.5
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131108796709024254&GUID=33BA2FD6-7E38-40BD-844C-8835DC6BA87F
HKU\S-1-5-21-691611659-2595466276-322701303-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131108796709050112&GUID=33BA2FD6-7E38-40BD-844C-8835DC6BA87F
SearchScopes: HKU\S-1-5-21-691611659-2595466276-322701303-1003 -> {C3BA2C37-52A7-4CC9-B212-1A0DEA3F3924} URL = hxxp://www.search.ask.com/web?tpid=SPC-C2-5&o=APN10951&pf=V7&p2=^B20^YYYYYY^CH^MA&gct=&itbv=12.35.0.2546&apn_uid=5DDE37A9-D7DA-485F-BB1C-EF8D41F262CD&apn_ptnrs=^B20&apn_dtid=^YYYYYY^CH^MA&apn_dbr=microsoftedge.exe_0_20.10240.16384.0&doi=2015-11-08&trgb=CR&q={searchTerms}&psv=&pt=tb
BHO: EGet Class -> {1E871FF8-029C-4732-8AA7-39E3D3872057} -> C:\Program Files\EagleGet\eagleSniffer.dll [2015-08-19] (EagleGet.com)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-05-27] (Microsoft Corporation)
BHO: Ó¦Óñ¦Ò»¼ü°²×°²å¼þ -> {50F4150A-48B2-417A-BE4C-C83F580FB904} -> C:\Program Files\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll [2014-05-30] (腾讯公司)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-05-17] (Microsoft Corporation)
Toolbar: HKLM - Pas de nom - {5350432D-4332-2D35-00A7-7A786E7484D7} - Pas de fichier
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-17] ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-08-26] (Google, Inc.)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @mozilla.zeniko.ch/SumatraPDF_Browser_Plugin -> C:\Program Files\SumatraPDF\npPdfViewer.dll [2014-05-14] (Simon Bünzli)
FF Plugin: @qq.com/npAndroidAssistant -> C:\Program Files\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll [2014-05-30] (腾讯公司)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-691611659-2595466276-322701303-1003: @acestream.net/acestreamplugin,version=3.1.0 -> C:\Users\Walid SAH\AppData\Roaming\ACEStream\player\npace_plugin.dll [2015-08-06] (Innovative Digital Technologies)
FF Plugin HKU\S-1-5-21-691611659-2595466276-322701303-1003: eagleget.com/EagleGet32 -> C:\Program Files\EagleGet\npEagleget.dll [2015-08-19] (EagleGet)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
FF HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Walid SAH\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi
FF Extension: Ace Stream Web Extension - C:\Users\Walid SAH\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2015-12-18]
Chrome:
=======
CHR HomePage: ChromeDefaultData -> search.ask.com/?gct=hp
CHR StartupUrls: ChromeDefaultData -> "hxxp://d2ucfwpxlh3zh3.cloudfront.net/?ts=AHEqBX0lAH4oAU..&v=20160615&uid=5BD2F4FF77537BA2DF0BC518DD6C1D1E&ptid=clc&mode=loadm"
CHR DefaultSearchURL: ChromeDefaultData -> hxxp://d2ucfwpxlh3zh3.cloudfront.net/chrome.php?q={searchTerms}&ts=AHEqBX0lAH4oAU..&v=20160615&uid=5BD2F4FF77537BA2DF0BC518DD6C1D1E&ptid=clc&mode=loadm
CHR DefaultSearchKeyword: ChromeDefaultData -> hohosearch
CHR Profile: C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData
CHR Extension: (Google Docs) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-25]
CHR Extension: (Google Drive) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-07]
CHR Extension: (YouTube) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Recherche Google) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-07]
CHR Extension: (Bing) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2016-06-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-05]
CHR Extension: (EagleGet Free Downloader) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\kaebhgioafceeldhgjmendlfhbfjefmo [2016-06-10]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-20]
CHR Extension: (Gmail) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-25]
CHR HKLM\...\Chrome\Extension: [aaaaapdcjfaomkafnbpoclmfakjianjd] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaapdcjfaomkafnbpoclmfakjianjd.crx [2016-01-08]
CHR HKLM\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files\EagleGet\addon\eagleget_cext@eagleget.com.crx [2015-07-10]
CHR HKU\S-1-5-21-691611659-2595466276-322701303-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-691611659-2595466276-322701303-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files\EagleGet\addon\eagleget_cext@eagleget.com.crx [2015-07-10]
CHR HKU\S-1-5-21-691611659-2595466276-322701303-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BASSVC; C:\Program Files\Baidu Security\MoboMarket\1.2.8.4379\bassvc.exe [208928 2014-12-17] (Baidu, Inc.)
R3 cphs; C:\WINDOWS\system32\IntelCpHeciSvc.exe [290224 2015-11-24] (Intel Corporation)
S2 dowidoly; C:\Program Files\7CF1005F-1466010781-E311-B2A0-F8A9638E69F8\jnsu4C08.tmp [244224 2016-06-16] () [Fichier non signé]
R2 egGetSvc; C:\Program Files\EagleGet\EGMonitor.exe [235520 2015-08-19] () [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [283568 2015-11-24] (Intel Corporation)
R2 MeditelInternet_Service; C:\Program Files\MeditelInternet\MeditelInternet_Service.exe [346680 2014-05-22] ()
R2 PCFasterSvc_{PCFaster_5.1.0.0}; C:\Program Files\PC Faster\5.1.0.0\PCFasterSvc.exe [1714448 2015-05-07] (Baidu, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [263936 2015-09-26] (Realtek Semiconductor)
R2 SparkSvc; C:\Program Files\baidu\Baidu Browser\sparkservice.exe [97080 2016-03-07] (Baidu Inc.)
S3 SparkUpdater; C:\Program Files\Baidu\SparkUpdate\Sparkupdate.exe [1371960 2015-08-06] (Baidu.com, Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [217288 2015-09-26] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23256 2015-10-30] (Microsoft Corporation)
S2 rijufoze; C:\Program Files\7CF1005F-1466010781-E311-B2A0-F8A9638E69F8\hnsu64D2.tmp [X]
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 eagleGet; C:\WINDOWS\System32\Drivers\eagleGet.sys [94720 2015-07-29] (eagleGet) [Fichier non signé]
S3 hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\ew_cdcacm.sys [108032 2013-10-23] (Huawei Technologies Co., Ltd.)
S3 hwusb_wwanecm; C:\WINDOWS\System32\drivers\ew_wwanecm.sys [316544 2013-11-01] (Huawei Technologies Co., Ltd.)
S3 intaud_WaveExtensible; C:\WINDOWS\system32\drivers\intelaud.sys [44096 2015-07-20] (Intel Corporation)
R3 iwdbus; C:\WINDOWS\System32\drivers\iwdbus.sys [35392 2015-07-20] (Intel Corporation)
R3 MEI; C:\WINDOWS\System32\drivers\HECI.sys [55104 2012-07-17] (Intel Corporation)
R1 MpKsl8aab2167; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{63CBBE41-5A21-4CE9-B6DE-BAAF96EC1756}\MpKsl8aab2167.sys [39168 2016-07-02] (Microsoft Corporation)
R1 MpKslc2aa3c4a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A8FA2E03-E781-42DD-B5A1-1E28AF772898}\MpKslc2aa3c4a.sys [39168 2016-07-01] (Microsoft Corporation)
R1 MpKslf6b79154; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8CDCEC82-274C-4E48-A487-8A5EB2743485}\MpKslf6b79154.sys [39168 2016-07-04] (Microsoft Corporation)
R3 netr28; C:\WINDOWS\system32\DRIVERS\netr28.sys [1527456 2015-06-12] (MediaTek Inc.)
R3 NPF; C:\Users\Walid SAH\Desktop\Selfishnet win 7\npf.sys [42000 2007-01-25] (CACE Technologies)
S3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [239360 2015-06-05] (Realtek Semiconductor Corp.)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [494080 2015-10-30] (Realtek )
R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [944768 2015-06-02] (Ralink Technology, Corp.)
S3 SmbDrv; C:\WINDOWS\system32\DRIVERS\Smb_driver.sys [18864 2011-10-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [35528 2015-09-26] (Synaptics Incorporated)
R1 TsDefenseBt; C:\WINDOWS\System32\DRIVERS\TSDEFENSEBT.SYS [14008 2016-06-15] (Tencent)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)
S1 QMUdisk; \??\C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\QMUdisk.sys [X]
S1 softaal; \??\C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\softaal.sys [X]
S1 SRepairDrv; \??\C:\Program Files\Tencent\QQPCMGR\SRepairDrv [X]
S3 TcHardWare; \??\C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\QQPCHW.sys [X]
S2 tsnethlp; \??\C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\TsNetHlp.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
NETSVC: HpSvc -> pas de chemin du fichier.
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-07-07 10:33 - 2016-07-07 10:34 - 00021073 _____ C:\Users\Walid SAH\Desktop\FRST.txt
2016-07-07 10:33 - 2016-07-07 10:33 - 00000000 ____D C:\FRST
2016-07-07 10:32 - 2016-07-07 10:32 - 01740288 _____ (Farbar) C:\Users\Walid SAH\Desktop\FRST.exe
2016-07-04 21:38 - 2016-07-04 21:38 - 00001983 _____ C:\pcfiXtraydvyqw.lnk
2016-07-04 15:50 - 2016-07-04 15:50 - 00001983 _____ C:\pcfiXtrayjataw.lnk
2016-07-03 18:39 - 2016-07-03 18:39 - 00001983 _____ C:\pcfiXtraygblns.lnk
2016-07-03 17:45 - 2016-07-03 17:45 - 00001983 _____ C:\pcfiXtraymkhed.lnk
2016-07-03 05:25 - 2016-07-03 05:25 - 00001983 _____ C:\pcfiXtraywcavt.lnk
2016-07-02 20:46 - 2016-07-02 20:46 - 00001983 _____ C:\pcfiXtrayjntaz.lnk
2016-07-02 18:54 - 2016-07-02 18:54 - 00001983 _____ C:\pcfiXtrayfoyef.lnk
2016-07-02 03:43 - 2016-07-02 03:43 - 00001983 _____ C:\pcfiXtrayuhvrp.lnk
2016-07-01 02:46 - 2016-07-01 02:46 - 00001983 _____ C:\pcfiXtraynlkud.lnk
2016-07-01 02:14 - 2016-07-01 02:14 - 00001983 _____ C:\pcfiXtraykrguc.lnk
2016-07-01 00:06 - 2016-07-01 00:06 - 00001983 _____ C:\pcfiXtraymhwza.lnk
2016-06-30 01:14 - 2016-06-30 01:14 - 00001585 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-06-30 01:14 - 2016-06-30 01:14 - 00000000 ____D C:\Riot Games
2016-06-30 01:14 - 2016-06-30 01:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-06-30 00:54 - 2016-06-30 00:54 - 00001983 _____ C:\pcfiXtrayxybzz.lnk
2016-06-30 00:49 - 2016-06-30 01:13 - 00000000 __SHD C:\AI_RecycleBin
2016-06-30 00:41 - 2016-06-30 00:41 - 00001983 _____ C:\pcfiXtraylzhpu.lnk
2016-06-29 21:20 - 2016-06-29 21:20 - 00001983 _____ C:\pcfiXtraylcscw.lnk
2016-06-29 20:41 - 2016-06-29 20:41 - 00001983 _____ C:\pcfiXtrayujjmb.lnk
2016-06-23 05:42 - 2016-06-23 05:42 - 00001983 _____ C:\pcfiXtraywllfc.lnk
2016-06-23 05:29 - 2016-06-23 05:29 - 00001983 _____ C:\pcfiXtraygzyto.lnk
2016-06-22 04:44 - 2016-06-22 04:44 - 00001983 _____ C:\pcfiXtrayrtfbo.lnk
2016-06-21 00:33 - 2016-06-21 00:33 - 00001983 _____ C:\pcfiXtraybmefk.lnk
2016-06-20 16:46 - 2016-06-20 16:46 - 00001983 _____ C:\pcfiXtraysmspu.lnk
2016-06-20 06:51 - 2016-06-20 06:51 - 00538213 _____ C:\Users\Walid SAH\Desktop\programme-pour-maigrir.pdf
2016-06-20 06:45 - 2016-06-20 06:45 - 00001983 _____ C:\pcfiXtrayetici.lnk
2016-06-19 22:30 - 2016-06-19 22:30 - 00001983 _____ C:\pcfiXtraysorht.lnk
2016-06-19 22:07 - 2016-06-19 22:07 - 00001983 _____ C:\pcfiXtrayufgzy.lnk
2016-06-19 16:26 - 2016-06-19 16:26 - 00001983 _____ C:\pcfiXtrayjnrct.lnk
2016-06-18 21:01 - 2016-06-18 21:01 - 00001983 _____ C:\pcfiXtraypwacv.lnk
2016-06-18 13:04 - 2016-06-18 13:04 - 00001983 _____ C:\pcfiXtraycisuq.lnk
2016-06-17 00:20 - 2016-06-17 00:20 - 09717952 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2016-06-17 00:02 - 2016-06-17 00:02 - 00001983 _____ C:\pcfiXtraymvjzm.lnk
2016-06-16 21:19 - 2016-06-16 21:19 - 00001983 _____ C:\pcfiXtrayafqjp.lnk
2016-06-16 20:59 - 2016-06-16 20:59 - 00001983 _____ C:\pcfiXtraywnyzf.lnk
2016-06-16 20:33 - 2016-06-16 20:19 - 00000000 ___HD C:\$SysReset
2016-06-16 20:26 - 2016-06-16 20:26 - 00001983 _____ C:\pcfiXtraymhvmp.lnk
2016-06-16 20:08 - 2016-06-16 20:09 - 00000000 ___HD C:\$Windows.~BT
2016-06-16 19:58 - 2016-06-16 20:19 - 00000000 _____ C:\Recovery.txt
2016-06-15 23:25 - 2016-06-15 23:25 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\node-webkit
2016-06-15 22:21 - 2016-06-15 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件
2016-06-15 22:20 - 2016-06-15 23:23 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2016-06-15 18:01 - 2016-06-16 20:58 - 00000000 ____D C:\ProgramData\AVAST Software
2016-06-15 17:54 - 2016-02-18 09:10 - 05267952 _____ () C:\Users\Walid SAH\AppData\Roaming\ziptool_wc-9015_setup.exe
2016-06-15 17:53 - 2016-06-15 22:12 - 00039928 _____ (Tencent) C:\WINDOWS\system32\Drivers\TS888.sys
2016-06-15 17:47 - 2016-06-15 17:47 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\yiwanzhushou
2016-06-15 17:47 - 2016-06-15 17:47 - 00000000 ____D C:\Program Files\yiwanplayer
2016-06-15 17:37 - 2016-06-15 22:24 - 00000000 ____D C:\ProgramData\TXQMPC
2016-06-15 17:37 - 2016-06-15 17:36 - 00102008 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernelEx.sys
2016-06-15 17:37 - 2016-06-15 17:36 - 00014008 _____ (Tencent) C:\WINDOWS\system32\Drivers\TSDefenseBt.sys
2016-06-15 17:37 - 2015-09-01 04:26 - 01099376 _____ C:\Users\Walid SAH\AppData\Roaming\inst_buychannel_01.exe
2016-06-15 17:36 - 2016-06-15 22:19 - 00000000 ____D C:\Program Files\Common Files\Tencent
2016-06-15 17:36 - 2016-06-15 17:36 - 00159608 _____ (电脑管家) C:\WINDOWS\system32\Drivers\TFsFlt.sys
2016-06-15 17:35 - 2016-06-15 23:23 - 00000000 ____D C:\ProgramData\Tencent
2016-06-15 17:35 - 2016-06-15 18:09 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Tencent
2016-06-15 17:35 - 2016-06-15 17:35 - 00000000 ____D C:\Program Files\Tencent
2016-06-15 17:21 - 2016-04-22 10:39 - 51987648 _____ C:\Users\Walid SAH\AppData\Roaming\qqpcmgr_v11.5.17490.219_72530_Silence.exe
2016-06-15 17:20 - 2016-06-15 17:48 - 00000000 ____D C:\Program Files\Lattionmesos
2016-06-15 17:20 - 2016-06-15 17:20 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-06-15 17:19 - 2016-06-20 16:20 - 00000000 ____D C:\Program Files\Chaekgrewege
2016-06-15 17:19 - 2016-06-15 22:13 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\UPUpdata
2016-06-15 17:19 - 2016-06-15 17:20 - 00000000 ____D C:\Program Files\Clzghthupase
2016-06-15 17:13 - 2016-06-15 23:23 - 00000000 ____D C:\Program Files\7CF1005F-1466010781-E311-B2A0-F8A9638E69F8
2016-06-15 17:13 - 2016-06-15 17:10 - 00001045 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-06-15 17:11 - 2016-06-15 22:13 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\app
2016-06-15 17:09 - 2016-06-15 17:11 - 00000000 ____D C:\Program Files\ContentPush
2016-06-15 17:09 - 2016-06-15 17:09 - 00000000 ____D C:\Program Files\WeatherChickn
2016-06-14 20:50 - 2016-05-28 06:05 - 01232576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00973504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00440512 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00249536 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00042688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-06-14 20:50 - 2016-05-28 05:25 - 05797216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-06-14 20:50 - 2016-05-28 05:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2016-06-14 20:50 - 2016-05-28 05:25 - 00354656 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2016-06-14 20:50 - 2016-05-28 05:25 - 00354656 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-06-14 20:50 - 2016-05-28 05:25 - 00173920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-06-14 20:50 - 2016-05-28 05:25 - 00096096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-06-14 20:50 - 2016-05-28 05:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-06-14 20:50 - 2016-05-28 05:22 - 00317280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2016-06-14 20:50 - 2016-05-28 05:18 - 00023776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-06-14 20:50 - 2016-05-28 05:10 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2016-06-14 20:50 - 2016-05-28 05:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-06-14 20:50 - 2016-05-28 05:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-06-14 20:50 - 2016-05-28 05:08 - 00260960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-06-14 20:50 - 2016-05-28 05:08 - 00203104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
2016-06-14 20:50 - 2016-05-28 05:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-06-14 20:50 - 2016-05-28 05:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-06-14 20:50 - 2016-05-28 05:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-06-14 20:50 - 2016-05-28 05:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-06-14 20:50 - 2016-05-28 05:06 - 00613120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-06-14 20:50 - 2016-05-28 05:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-06-14 20:50 - 2016-05-28 05:04 - 00505136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-06-14 20:50 - 2016-05-28 05:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-06-14 20:50 - 2016-05-28 05:04 - 00139616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-06-14 20:50 - 2016-05-28 05:04 - 00111608 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2016-06-14 20:50 - 2016-05-28 05:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2016-06-14 20:50 - 2016-05-28 04:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-06-14 20:50 - 2016-05-28 04:57 - 01714528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-06-14 20:50 - 2016-05-28 04:57 - 01396592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-06-14 20:50 - 2016-05-28 04:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-06-14 20:50 - 2016-05-28 04:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-06-14 20:50 - 2016-05-28 04:57 - 00484192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-06-14 20:50 - 2016-05-28 04:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-06-14 20:50 - 2016-05-28 04:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-06-14 20:50 - 2016-05-28 04:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\olepro32.dll
2016-06-14 20:50 - 2016-05-28 04:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-06-14 20:50 - 2016-05-28 04:31 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys
2016-06-14 20:50 - 2016-05-28 04:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-06-14 20:50 - 2016-05-28 04:25 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2016-06-14 20:50 - 2016-05-28 04:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-06-14 20:50 - 2016-05-28 04:25 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2016-06-14 20:50 - 2016-05-28 04:24 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-06-14 20:50 - 2016-05-28 04:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-06-14 20:50 - 2016-05-28 04:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
2016-06-14 20:50 - 2016-05-28 04:23 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-06-14 20:50 - 2016-05-28 04:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-06-14 20:50 - 2016-05-28 04:22 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-06-14 20:50 - 2016-05-28 04:22 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-06-14 20:50 - 2016-05-28 04:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-06-14 20:50 - 2016-05-28 04:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-06-14 20:50 - 2016-05-28 04:21 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-06-14 20:50 - 2016-05-28 04:21 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpscript.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
2016-06-14 20:50 - 2016-05-28 04:20 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-06-14 20:50 - 2016-05-28 04:19 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-06-14 20:50 - 2016-05-28 04:19 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-06-14 20:50 - 2016-05-28 04:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2016-06-14 20:50 - 2016-05-28 04:19 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2016-06-14 20:50 - 2016-05-28 04:18 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-06-14 20:50 - 2016-05-28 04:18 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2016-06-14 20:50 - 2016-05-28 04:18 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-06-14 20:50 - 2016-05-28 04:18 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
2016-06-14 20:50 - 2016-05-28 04:18 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-06-14 20:50 - 2016-05-28 04:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
2016-06-14 20:50 - 2016-05-28 04:14 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-06-14 20:50 - 2016-05-28 04:13 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-06-14 20:50 - 2016-05-28 04:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-06-14 20:50 - 2016-05-28 04:13 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-06-14 20:50 - 2016-05-28 04:13 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-06-14 20:50 - 2016-05-28 04:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-06-14 20:50 - 2016-05-28 04:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-06-14 20:50 - 2016-05-28 04:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-06-14 20:50 - 2016-05-28 04:12 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-06-14 20:50 - 2016-05-28 04:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 01152000 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-06-14 20:50 - 2016-05-28 04:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-06-14 20:50 - 2016-05-28 04:11 - 00740352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00612352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-06-14 20:50 - 2016-05-28 04:10 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-06-14 20:50 - 2016-05-28 04:09 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2016-06-14 20:50 - 2016-05-28 04:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-06-14 20:50 - 2016-05-28 04:08 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-06-14 20:50 - 2016-05-28 04:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-06-14 20:50 - 2016-05-28 04:06 - 03196928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-06-14 20:50 - 2016-05-28 04:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-06-14 20:50 - 2016-05-28 04:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-06-14 20:50 - 2016-05-28 04:04 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-06-14 20:50 - 2016-05-28 04:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 02974208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-06-14 20:50 - 2016-05-28 04:03 - 01800704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 01733632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-06-14 20:50 - 2016-05-28 04:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-06-14 20:50 - 2016-05-28 04:02 - 01896960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-06-14 20:50 - 2016-05-28 04:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 02880512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 01193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 01900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-06-14 20:50 - 2016-05-28 03:56 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-06-14 20:50 - 2016-05-28 03:54 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-06-08 03:09 - 2016-07-07 10:21 - 00000000 ____D C:\Users\Walid SAH\AppData\LocalLow\uTorrent
2016-06-07 18:32 - 2016-06-07 18:32 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-07-07 10:33 - 2015-09-25 06:20 - 00001076 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-07 10:31 - 2015-09-25 10:30 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\uTorrent
2016-07-07 10:22 - 2015-09-25 05:45 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Skype
2016-07-07 10:21 - 2015-09-25 06:20 - 00001072 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-07 10:21 - 2015-09-25 05:31 - 00000000 __SHD C:\Users\Walid SAH\IntelGraphicsProfiles
2016-07-07 00:39 - 2014-06-22 13:33 - 00400552 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-07-05 01:20 - 2015-09-25 06:10 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-07-05 01:07 - 2015-09-25 10:51 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Kodi
2016-07-04 21:48 - 2015-09-25 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Baidu PC Faster
2016-07-04 21:44 - 2015-10-30 15:07 - 00155764 _____ C:\WINDOWS\system32\perfc00C.dat
2016-07-04 21:44 - 2015-10-30 15:07 - 00016150 _____ C:\WINDOWS\system32\perfh00C.dat
2016-07-04 21:44 - 2015-10-30 05:47 - 00000000 ____D C:\WINDOWS\INF
2016-07-04 21:44 - 2015-09-25 23:03 - 01034676 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-07-04 21:38 - 2016-03-02 04:13 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-07-03 05:27 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-07-02 03:49 - 2015-10-30 05:48 - 00000000 ___HD C:\Program Files\WindowsApps
2016-07-01 00:06 - 2016-03-02 04:01 - 00000000 ____D C:\Users\Walid SAH
2016-06-30 19:55 - 2015-09-25 06:22 - 00002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-30 19:55 - 2015-09-25 06:22 - 00002242 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-30 19:55 - 2014-12-01 18:15 - 00001940 _____ C:\Users\Walid SAH\Desktop\Internet Explorer.lnk
2016-06-30 19:47 - 2015-09-25 05:48 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\.ACEStream
2016-06-30 19:38 - 2015-09-02 20:22 - 00000000 ___HD C:\_acestream_cache_
2016-06-30 01:31 - 2014-11-15 10:45 - 00000000 ____D C:\Users\Walid SAH\Desktop\ENSA
2016-06-30 01:20 - 2015-09-25 05:14 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\Packages
2016-06-30 00:53 - 2015-10-30 05:13 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-06-30 00:51 - 2015-11-10 00:35 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Riot Games
2016-06-18 14:58 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\rescache
2016-06-17 00:04 - 2015-11-07 23:52 - 00002013 _____ C:\Users\Walid SAH\Desktop\Ace Player.lnk
2016-06-16 21:04 - 2016-03-02 02:54 - 00000000 ___DC C:\WINDOWS\Panther
2016-06-16 18:37 - 2015-10-30 05:39 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-15 23:47 - 2015-09-25 05:33 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\baidu
2016-06-15 23:46 - 2015-09-25 05:56 - 00000000 ____D C:\Program Files\baidu
2016-06-15 18:16 - 2015-11-08 00:05 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2016-06-15 18:06 - 2015-09-25 05:33 - 00000000 ____D C:\ProgramData\Baidu
2016-06-15 17:58 - 2015-09-25 05:55 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\MiniService
2016-06-15 17:51 - 2016-03-02 03:55 - 00342608 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-15 17:37 - 2015-09-25 18:35 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\VirtualStore
2016-06-15 13:29 - 2015-09-10 04:28 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-15 13:26 - 2015-10-30 05:48 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-06-15 13:26 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-06-15 13:26 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-06-14 21:21 - 2015-09-25 10:45 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-06-14 21:20 - 2014-06-22 13:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-06-14 21:15 - 2014-06-22 13:30 - 139785240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-06-14 18:33 - 2015-10-30 05:49 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-06-14 18:33 - 2015-10-30 05:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-06-13 21:24 - 2013-08-22 06:13 - 00000167 _____ C:\WINDOWS\win.ini
2016-06-11 02:12 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-06-09 03:15 - 2015-09-25 05:42 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\Google
2016-06-08 23:17 - 2016-01-08 01:16 - 00000000 ___RD C:\Program Files\Skype
2016-06-08 23:17 - 2015-09-25 11:18 - 00000000 ____D C:\ProgramData\Skype
2016-06-07 18:34 - 2015-09-25 10:46 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-07 18:32 - 2015-09-25 10:45 - 00000000 ____D C:\Program Files\Kodi
==================== Fichiers à la racine de certains dossiers =======
2016-06-15 17:37 - 2015-09-01 04:26 - 1099376 _____ () C:\Users\Walid SAH\AppData\Roaming\inst_buychannel_01.exe
2016-06-15 17:21 - 2016-04-22 10:39 - 51987648 _____ () C:\Users\Walid SAH\AppData\Roaming\qqpcmgr_v11.5.17490.219_72530_Silence.exe
2016-06-15 17:54 - 2016-02-18 09:10 - 5267952 _____ () C:\Users\Walid SAH\AppData\Roaming\ziptool_wc-9015_setup.exe
2015-09-25 05:47 - 2015-09-25 20:22 - 0014501 _____ () C:\ProgramData\Duplicaterecord.js
Fichiers à déplacer ou supprimer:
====================
C:\ProgramData\Duplicaterecord.js
Certains fichiers dans TEMP:
====================
C:\Users\Walid SAH\AppData\Local\Temp\3650.tmp.exe
C:\Users\Walid SAH\AppData\Local\Temp\4DAB.tmp.exe
C:\Users\Walid SAH\AppData\Local\Temp\avast_free_antivirus_setup_online.exe
C:\Users\Walid SAH\AppData\Local\Temp\BaiduBrowser_MiniDownloader.exe
C:\Users\Walid SAH\AppData\Local\Temp\condefclean.exe
C:\Users\Walid SAH\AppData\Local\Temp\FRST.exe
C:\Users\Walid SAH\AppData\Local\Temp\ICReinstall_4DAB.tmp.exe
C:\Users\Walid SAH\AppData\Local\Temp\LeagueofLegends_EUW_Installer_2016_05_13.exe
C:\Users\Walid SAH\AppData\Local\Temp\ludashisetup.exe
C:\Users\Walid SAH\AppData\Local\Temp\sony-vegas-pro-13-crack-32-bit-kickass.exe
C:\Users\Walid SAH\AppData\Local\Temp\sony-vegas-pro_13-build-290_fr_124204-13.0.exe
C:\Users\Walid SAH\AppData\Local\Temp\spark_install.exe
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-07-01 05:53
==================== Fin de FRST.txt ============================
Exécuté par Walid SAH (administrateur) sur WALID (07-07-2016 10:33:27)
Exécuté depuis C:\Users\Walid SAH\Desktop
Profils chargés: Walid SAH (Profils disponibles: Walid SAH)
Platform: Microsoft Windows 10 Professionnel Version 1511 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Baidu, Inc.) C:\Program Files\PC Faster\5.1.0.0\PCFasterSvc.exe
(Intel Corporation) C:\Windows\System32\IntelCpHeciSvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Baidu, Inc.) C:\Program Files\Baidu Security\MoboMarket\1.2.8.4379\bassvc.exe
() C:\Program Files\EagleGet\EGMonitor.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe
() C:\Program Files\MeditelInternet\MeditelInternet_Service.exe
(Baidu Inc.) C:\Program Files\baidu\Baidu Browser\sparkservice.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
() C:\Program Files\MeditelInternet\MeditelInternet_Launcher.exe
(BitTorrent Inc.) C:\Users\Walid SAH\AppData\Roaming\uTorrent\uTorrent.exe
(© 2015 Microsoft Corporation) C:\Users\Walid SAH\AppData\Local\Microsoft\BingSvc\BingSvc.exe
(EagleGet.com) C:\Program Files\EagleGet\EagleGet.exe
() C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\ace_engine.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(BitTorrent Inc.) C:\Users\Walid SAH\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
(BitTorrent Inc.) C:\Users\Walid SAH\AppData\Roaming\uTorrent\updates\3.4.7_42330\utorrentie.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
() C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\ace_update.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
() C:\Program Files\baidu\Baidu Browser\spark.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [7549184 2015-09-26] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1024256 2015-09-26] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3527368 2015-09-26] (Synaptics Incorporated)
HKLM\...\Run: [MeditelInternet_MeditelInternet_Launcher.exe] => C:\Program Files\MeditelInternet\MeditelInternet_Launcher.exe [928312 2014-05-22] ()
HKLM\...\Run: [PCFIXTRAYATUCN] => c:\pcfiXtraymhvmp.lnk [1983 2016-06-16] ()
HKLM\...\Run: [PCFIXTRAYMRDWA] => c:\pcfiXtraywnyzf.lnk [1983 2016-06-16] ()
HKLM\...\Run: [PCFIXTRAYVMCJM] => c:\pcfiXtrayafqjp.lnk [1983 2016-06-16] ()
HKLM\...\Run: [PCFIXTRAYWURPA] => c:\pcfiXtraymvjzm.lnk [1983 2016-06-17] ()
HKLM\...\Run: [PCFIXTRAYJRMWV] => c:\pcfiXtraycisuq.lnk [1983 2016-06-18] ()
HKLM\...\Run: [PCFIXTRAYUQROF] => c:\pcfiXtraypwacv.lnk [1983 2016-06-18] ()
HKLM\...\Run: [PCFIXTRAYHNUML] => c:\pcfiXtrayjnrct.lnk [1983 2016-06-19] ()
HKLM\...\Run: [PCFIXTRAYFHWFJ] => c:\pcfiXtrayufgzy.lnk [1983 2016-06-19] ()
HKLM\...\Run: [PCFIXTRAYWOGHU] => c:\pcfiXtraysorht.lnk [1983 2016-06-19] ()
HKLM\...\Run: [PCFIXTRAYNRKHG] => c:\pcfiXtrayetici.lnk [1983 2016-06-20] ()
HKLM\...\Run: [PCFIXTRAYOOGDJ] => c:\pcfiXtraysmspu.lnk [1983 2016-06-20] ()
HKLM\...\Run: [PCFIXTRAYYPEKY] => c:\pcfiXtraybmefk.lnk [1983 2016-06-21] ()
HKLM\...\Run: [PCFIXTRAYXWLIK] => c:\pcfiXtrayrtfbo.lnk [1983 2016-06-22] ()
HKLM\...\Run: [PCFIXTRAYHREZF] => c:\pcfiXtraygzyto.lnk [1983 2016-06-23] ()
HKLM\...\Run: [PCFIXTRAYPKBFY] => c:\pcfiXtraywllfc.lnk [1983 2016-06-23] ()
HKLM\...\Run: [PCFIXTRAYKNRAW] => c:\pcfiXtrayujjmb.lnk [1983 2016-06-29] ()
HKLM\...\Run: [PCFIXTRAYCYMVW] => c:\pcfiXtraylcscw.lnk [1983 2016-06-29] ()
HKLM\...\Run: [PCFIXTRAYYZSIJ] => c:\pcfiXtraylzhpu.lnk [1983 2016-06-30] ()
HKLM\...\Run: [PCFIXTRAYELGPZ] => c:\pcfiXtrayxybzz.lnk [1983 2016-06-30] ()
HKLM\...\Run: [PCFIXTRAYIRLWT] => c:\pcfiXtraymhwza.lnk [1983 2016-07-01] ()
HKLM\...\Run: [PCFIXTRAYLDRUX] => c:\pcfiXtraykrguc.lnk [1983 2016-07-01] ()
HKLM\...\Run: [PCFIXTRAYRISEN] => c:\pcfiXtraynlkud.lnk [1983 2016-07-01] ()
HKLM\...\Run: [PCFIXTRAYPVZFV] => c:\pcfiXtrayuhvrp.lnk [1983 2016-07-02] ()
HKLM\...\Run: [PCFIXTRAYBSIRI] => c:\pcfiXtrayfoyef.lnk [1983 2016-07-02] ()
HKLM\...\Run: [PCFIXTRAYCUCNV] => c:\pcfiXtrayjntaz.lnk [1983 2016-07-02] ()
HKLM\...\Run: [PCFIXTRAYNVQCH] => c:\pcfiXtraywcavt.lnk [1983 2016-07-03] ()
HKLM\...\Run: [PCFIXTRAYMYGJG] => c:\pcfiXtraymkhed.lnk [1983 2016-07-03] ()
HKLM\...\Run: [PCFIXTRAYEXYIH] => c:\pcfiXtraygblns.lnk [1983 2016-07-03] ()
HKLM\...\Run: [PCFIXTRAYTMWUK] => c:\pcfiXtrayjataw.lnk [1983 2016-07-04] ()
HKLM\...\Run: [PCFIXTRAYMUTIT] => c:\pcfiXtraydvyqw.lnk [1983 2016-07-04] ()
HKLM\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs,
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [uTorrent] => C:\Users\Walid SAH\AppData\Roaming\uTorrent\uTorrent.exe [2133504 2016-05-16] (BitTorrent Inc.)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [BingSvc] => C:\Users\Walid SAH\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-15] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [EagleGet] => C:\Program Files\EagleGet\Eagleget.exe [1891328 2015-08-19] (EagleGet.com)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [AceStream] => C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\ace_engine.exe [27000 2016-05-19] ()
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53130368 2016-05-17] (Skype Technologies S.A.)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Run: [QGuan10in1] => C:\Users\Walid SAH\AppData\Roaming\UPUpdata\service72564.exe /autorun
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\MountPoints2: {15b9d9f9-1468-11e6-a0c3-f8a9638e69f8} - "F:\.\Setup.exe" AUTORUN=1
IFEO\SppExtComObj.exe: [Debugger] SppExtComObjPatcher.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Pas de fichier
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9899312d-57e4-46bf-951c-a97f450a5c33}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{c2f7991d-ec63-441d-bf57-71888d3d129e}: [NameServer] 41.214.140.4 41.214.140.5
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131108796709024254&GUID=33BA2FD6-7E38-40BD-844C-8835DC6BA87F
HKU\S-1-5-21-691611659-2595466276-322701303-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131108796709050112&GUID=33BA2FD6-7E38-40BD-844C-8835DC6BA87F
SearchScopes: HKU\S-1-5-21-691611659-2595466276-322701303-1003 -> {C3BA2C37-52A7-4CC9-B212-1A0DEA3F3924} URL = hxxp://www.search.ask.com/web?tpid=SPC-C2-5&o=APN10951&pf=V7&p2=^B20^YYYYYY^CH^MA&gct=&itbv=12.35.0.2546&apn_uid=5DDE37A9-D7DA-485F-BB1C-EF8D41F262CD&apn_ptnrs=^B20&apn_dtid=^YYYYYY^CH^MA&apn_dbr=microsoftedge.exe_0_20.10240.16384.0&doi=2015-11-08&trgb=CR&q={searchTerms}&psv=&pt=tb
BHO: EGet Class -> {1E871FF8-029C-4732-8AA7-39E3D3872057} -> C:\Program Files\EagleGet\eagleSniffer.dll [2015-08-19] (EagleGet.com)
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-05-27] (Microsoft Corporation)
BHO: Ó¦Óñ¦Ò»¼ü°²×°²å¼þ -> {50F4150A-48B2-417A-BE4C-C83F580FB904} -> C:\Program Files\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll [2014-05-30] (腾讯公司)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-05-17] (Microsoft Corporation)
Toolbar: HKLM - Pas de nom - {5350432D-4332-2D35-00A7-7A786E7484D7} - Pas de fichier
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-05-17] (Microsoft Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-17] ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2015-08-26] (Google, Inc.)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin: @mozilla.zeniko.ch/SumatraPDF_Browser_Plugin -> C:\Program Files\SumatraPDF\npPdfViewer.dll [2014-05-14] (Simon Bünzli)
FF Plugin: @qq.com/npAndroidAssistant -> C:\Program Files\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll [2014-05-30] (腾讯公司)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-691611659-2595466276-322701303-1003: @acestream.net/acestreamplugin,version=3.1.0 -> C:\Users\Walid SAH\AppData\Roaming\ACEStream\player\npace_plugin.dll [2015-08-06] (Innovative Digital Technologies)
FF Plugin HKU\S-1-5-21-691611659-2595466276-322701303-1003: eagleget.com/EagleGet32 -> C:\Program Files\EagleGet\npEagleget.dll [2015-08-19] (EagleGet)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
FF HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\Walid SAH\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi
FF Extension: Ace Stream Web Extension - C:\Users\Walid SAH\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi [2015-12-18]
Chrome:
=======
CHR HomePage: ChromeDefaultData -> search.ask.com/?gct=hp
CHR StartupUrls: ChromeDefaultData -> "hxxp://d2ucfwpxlh3zh3.cloudfront.net/?ts=AHEqBX0lAH4oAU..&v=20160615&uid=5BD2F4FF77537BA2DF0BC518DD6C1D1E&ptid=clc&mode=loadm"
CHR DefaultSearchURL: ChromeDefaultData -> hxxp://d2ucfwpxlh3zh3.cloudfront.net/chrome.php?q={searchTerms}&ts=AHEqBX0lAH4oAU..&v=20160615&uid=5BD2F4FF77537BA2DF0BC518DD6C1D1E&ptid=clc&mode=loadm
CHR DefaultSearchKeyword: ChromeDefaultData -> hohosearch
CHR Profile: C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData
CHR Extension: (Google Docs) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-25]
CHR Extension: (Google Drive) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-07]
CHR Extension: (YouTube) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Recherche Google) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-07]
CHR Extension: (Bing) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2016-06-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-05]
CHR Extension: (EagleGet Free Downloader) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\kaebhgioafceeldhgjmendlfhbfjefmo [2016-06-10]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-20]
CHR Extension: (Gmail) - C:\Users\Walid SAH\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-25]
CHR HKLM\...\Chrome\Extension: [aaaaapdcjfaomkafnbpoclmfakjianjd] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaapdcjfaomkafnbpoclmfakjianjd.crx [2016-01-08]
CHR HKLM\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files\EagleGet\addon\eagleget_cext@eagleget.com.crx [2015-07-10]
CHR HKU\S-1-5-21-691611659-2595466276-322701303-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-691611659-2595466276-322701303-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [kaebhgioafceeldhgjmendlfhbfjefmo] - C:\Program Files\EagleGet\addon\eagleget_cext@eagleget.com.crx [2015-07-10]
CHR HKU\S-1-5-21-691611659-2595466276-322701303-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BASSVC; C:\Program Files\Baidu Security\MoboMarket\1.2.8.4379\bassvc.exe [208928 2014-12-17] (Baidu, Inc.)
R3 cphs; C:\WINDOWS\system32\IntelCpHeciSvc.exe [290224 2015-11-24] (Intel Corporation)
S2 dowidoly; C:\Program Files\7CF1005F-1466010781-E311-B2A0-F8A9638E69F8\jnsu4C08.tmp [244224 2016-06-16] () [Fichier non signé]
R2 egGetSvc; C:\Program Files\EagleGet\EGMonitor.exe [235520 2015-08-19] () [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [283568 2015-11-24] (Intel Corporation)
R2 MeditelInternet_Service; C:\Program Files\MeditelInternet\MeditelInternet_Service.exe [346680 2014-05-22] ()
R2 PCFasterSvc_{PCFaster_5.1.0.0}; C:\Program Files\PC Faster\5.1.0.0\PCFasterSvc.exe [1714448 2015-05-07] (Baidu, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService.exe [263936 2015-09-26] (Realtek Semiconductor)
R2 SparkSvc; C:\Program Files\baidu\Baidu Browser\sparkservice.exe [97080 2016-03-07] (Baidu Inc.)
S3 SparkUpdater; C:\Program Files\Baidu\SparkUpdate\Sparkupdate.exe [1371960 2015-08-06] (Baidu.com, Inc.)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [217288 2015-09-26] (Synaptics Incorporated)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [280376 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23256 2015-10-30] (Microsoft Corporation)
S2 rijufoze; C:\Program Files\7CF1005F-1466010781-E311-B2A0-F8A9638E69F8\hnsu64D2.tmp [X]
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 eagleGet; C:\WINDOWS\System32\Drivers\eagleGet.sys [94720 2015-07-29] (eagleGet) [Fichier non signé]
S3 hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\ew_cdcacm.sys [108032 2013-10-23] (Huawei Technologies Co., Ltd.)
S3 hwusb_wwanecm; C:\WINDOWS\System32\drivers\ew_wwanecm.sys [316544 2013-11-01] (Huawei Technologies Co., Ltd.)
S3 intaud_WaveExtensible; C:\WINDOWS\system32\drivers\intelaud.sys [44096 2015-07-20] (Intel Corporation)
R3 iwdbus; C:\WINDOWS\System32\drivers\iwdbus.sys [35392 2015-07-20] (Intel Corporation)
R3 MEI; C:\WINDOWS\System32\drivers\HECI.sys [55104 2012-07-17] (Intel Corporation)
R1 MpKsl8aab2167; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{63CBBE41-5A21-4CE9-B6DE-BAAF96EC1756}\MpKsl8aab2167.sys [39168 2016-07-02] (Microsoft Corporation)
R1 MpKslc2aa3c4a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A8FA2E03-E781-42DD-B5A1-1E28AF772898}\MpKslc2aa3c4a.sys [39168 2016-07-01] (Microsoft Corporation)
R1 MpKslf6b79154; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8CDCEC82-274C-4E48-A487-8A5EB2743485}\MpKslf6b79154.sys [39168 2016-07-04] (Microsoft Corporation)
R3 netr28; C:\WINDOWS\system32\DRIVERS\netr28.sys [1527456 2015-06-12] (MediaTek Inc.)
R3 NPF; C:\Users\Walid SAH\Desktop\Selfishnet win 7\npf.sys [42000 2007-01-25] (CACE Technologies)
S3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [239360 2015-06-05] (Realtek Semiconductor Corp.)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [494080 2015-10-30] (Realtek )
R3 rtbth; C:\WINDOWS\System32\drivers\rtbth.sys [944768 2015-06-02] (Ralink Technology, Corp.)
S3 SmbDrv; C:\WINDOWS\system32\DRIVERS\Smb_driver.sys [18864 2011-10-14] (Synaptics Incorporated)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [35528 2015-09-26] (Synaptics Incorporated)
R1 TsDefenseBt; C:\WINDOWS\System32\DRIVERS\TSDEFENSEBT.SYS [14008 2016-06-15] (Tencent)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37400 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [246104 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [98648 2015-10-30] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [163328 2015-10-30] (Microsoft Corporation)
S1 QMUdisk; \??\C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\QMUdisk.sys [X]
S1 softaal; \??\C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\softaal.sys [X]
S1 SRepairDrv; \??\C:\Program Files\Tencent\QQPCMGR\SRepairDrv [X]
S3 TcHardWare; \??\C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\QQPCHW.sys [X]
S2 tsnethlp; \??\C:\Program Files\Tencent\QQPCMgr\11.5.17490.219\TsNetHlp.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
NETSVC: HpSvc -> pas de chemin du fichier.
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-07-07 10:33 - 2016-07-07 10:34 - 00021073 _____ C:\Users\Walid SAH\Desktop\FRST.txt
2016-07-07 10:33 - 2016-07-07 10:33 - 00000000 ____D C:\FRST
2016-07-07 10:32 - 2016-07-07 10:32 - 01740288 _____ (Farbar) C:\Users\Walid SAH\Desktop\FRST.exe
2016-07-04 21:38 - 2016-07-04 21:38 - 00001983 _____ C:\pcfiXtraydvyqw.lnk
2016-07-04 15:50 - 2016-07-04 15:50 - 00001983 _____ C:\pcfiXtrayjataw.lnk
2016-07-03 18:39 - 2016-07-03 18:39 - 00001983 _____ C:\pcfiXtraygblns.lnk
2016-07-03 17:45 - 2016-07-03 17:45 - 00001983 _____ C:\pcfiXtraymkhed.lnk
2016-07-03 05:25 - 2016-07-03 05:25 - 00001983 _____ C:\pcfiXtraywcavt.lnk
2016-07-02 20:46 - 2016-07-02 20:46 - 00001983 _____ C:\pcfiXtrayjntaz.lnk
2016-07-02 18:54 - 2016-07-02 18:54 - 00001983 _____ C:\pcfiXtrayfoyef.lnk
2016-07-02 03:43 - 2016-07-02 03:43 - 00001983 _____ C:\pcfiXtrayuhvrp.lnk
2016-07-01 02:46 - 2016-07-01 02:46 - 00001983 _____ C:\pcfiXtraynlkud.lnk
2016-07-01 02:14 - 2016-07-01 02:14 - 00001983 _____ C:\pcfiXtraykrguc.lnk
2016-07-01 00:06 - 2016-07-01 00:06 - 00001983 _____ C:\pcfiXtraymhwza.lnk
2016-06-30 01:14 - 2016-06-30 01:14 - 00001585 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-06-30 01:14 - 2016-06-30 01:14 - 00000000 ____D C:\Riot Games
2016-06-30 01:14 - 2016-06-30 01:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-06-30 00:54 - 2016-06-30 00:54 - 00001983 _____ C:\pcfiXtrayxybzz.lnk
2016-06-30 00:49 - 2016-06-30 01:13 - 00000000 __SHD C:\AI_RecycleBin
2016-06-30 00:41 - 2016-06-30 00:41 - 00001983 _____ C:\pcfiXtraylzhpu.lnk
2016-06-29 21:20 - 2016-06-29 21:20 - 00001983 _____ C:\pcfiXtraylcscw.lnk
2016-06-29 20:41 - 2016-06-29 20:41 - 00001983 _____ C:\pcfiXtrayujjmb.lnk
2016-06-23 05:42 - 2016-06-23 05:42 - 00001983 _____ C:\pcfiXtraywllfc.lnk
2016-06-23 05:29 - 2016-06-23 05:29 - 00001983 _____ C:\pcfiXtraygzyto.lnk
2016-06-22 04:44 - 2016-06-22 04:44 - 00001983 _____ C:\pcfiXtrayrtfbo.lnk
2016-06-21 00:33 - 2016-06-21 00:33 - 00001983 _____ C:\pcfiXtraybmefk.lnk
2016-06-20 16:46 - 2016-06-20 16:46 - 00001983 _____ C:\pcfiXtraysmspu.lnk
2016-06-20 06:51 - 2016-06-20 06:51 - 00538213 _____ C:\Users\Walid SAH\Desktop\programme-pour-maigrir.pdf
2016-06-20 06:45 - 2016-06-20 06:45 - 00001983 _____ C:\pcfiXtrayetici.lnk
2016-06-19 22:30 - 2016-06-19 22:30 - 00001983 _____ C:\pcfiXtraysorht.lnk
2016-06-19 22:07 - 2016-06-19 22:07 - 00001983 _____ C:\pcfiXtrayufgzy.lnk
2016-06-19 16:26 - 2016-06-19 16:26 - 00001983 _____ C:\pcfiXtrayjnrct.lnk
2016-06-18 21:01 - 2016-06-18 21:01 - 00001983 _____ C:\pcfiXtraypwacv.lnk
2016-06-18 13:04 - 2016-06-18 13:04 - 00001983 _____ C:\pcfiXtraycisuq.lnk
2016-06-17 00:20 - 2016-06-17 00:20 - 09717952 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2016-06-17 00:02 - 2016-06-17 00:02 - 00001983 _____ C:\pcfiXtraymvjzm.lnk
2016-06-16 21:19 - 2016-06-16 21:19 - 00001983 _____ C:\pcfiXtrayafqjp.lnk
2016-06-16 20:59 - 2016-06-16 20:59 - 00001983 _____ C:\pcfiXtraywnyzf.lnk
2016-06-16 20:33 - 2016-06-16 20:19 - 00000000 ___HD C:\$SysReset
2016-06-16 20:26 - 2016-06-16 20:26 - 00001983 _____ C:\pcfiXtraymhvmp.lnk
2016-06-16 20:08 - 2016-06-16 20:09 - 00000000 ___HD C:\$Windows.~BT
2016-06-16 19:58 - 2016-06-16 20:19 - 00000000 _____ C:\Recovery.txt
2016-06-15 23:25 - 2016-06-15 23:25 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\node-webkit
2016-06-15 22:21 - 2016-06-15 23:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件
2016-06-15 22:20 - 2016-06-15 23:23 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\腾讯软件
2016-06-15 18:01 - 2016-06-16 20:58 - 00000000 ____D C:\ProgramData\AVAST Software
2016-06-15 17:54 - 2016-02-18 09:10 - 05267952 _____ () C:\Users\Walid SAH\AppData\Roaming\ziptool_wc-9015_setup.exe
2016-06-15 17:53 - 2016-06-15 22:12 - 00039928 _____ (Tencent) C:\WINDOWS\system32\Drivers\TS888.sys
2016-06-15 17:47 - 2016-06-15 17:47 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\yiwanzhushou
2016-06-15 17:47 - 2016-06-15 17:47 - 00000000 ____D C:\Program Files\yiwanplayer
2016-06-15 17:37 - 2016-06-15 22:24 - 00000000 ____D C:\ProgramData\TXQMPC
2016-06-15 17:37 - 2016-06-15 17:36 - 00102008 _____ (Tencent Technology(Shenzhen) Company Limited) C:\WINDOWS\system32\Drivers\TAOKernelEx.sys
2016-06-15 17:37 - 2016-06-15 17:36 - 00014008 _____ (Tencent) C:\WINDOWS\system32\Drivers\TSDefenseBt.sys
2016-06-15 17:37 - 2015-09-01 04:26 - 01099376 _____ C:\Users\Walid SAH\AppData\Roaming\inst_buychannel_01.exe
2016-06-15 17:36 - 2016-06-15 22:19 - 00000000 ____D C:\Program Files\Common Files\Tencent
2016-06-15 17:36 - 2016-06-15 17:36 - 00159608 _____ (电脑管家) C:\WINDOWS\system32\Drivers\TFsFlt.sys
2016-06-15 17:35 - 2016-06-15 23:23 - 00000000 ____D C:\ProgramData\Tencent
2016-06-15 17:35 - 2016-06-15 18:09 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Tencent
2016-06-15 17:35 - 2016-06-15 17:35 - 00000000 ____D C:\Program Files\Tencent
2016-06-15 17:21 - 2016-04-22 10:39 - 51987648 _____ C:\Users\Walid SAH\AppData\Roaming\qqpcmgr_v11.5.17490.219_72530_Silence.exe
2016-06-15 17:20 - 2016-06-15 17:48 - 00000000 ____D C:\Program Files\Lattionmesos
2016-06-15 17:20 - 2016-06-15 17:20 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
2016-06-15 17:19 - 2016-06-20 16:20 - 00000000 ____D C:\Program Files\Chaekgrewege
2016-06-15 17:19 - 2016-06-15 22:13 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\UPUpdata
2016-06-15 17:19 - 2016-06-15 17:20 - 00000000 ____D C:\Program Files\Clzghthupase
2016-06-15 17:13 - 2016-06-15 23:23 - 00000000 ____D C:\Program Files\7CF1005F-1466010781-E311-B2A0-F8A9638E69F8
2016-06-15 17:13 - 2016-06-15 17:10 - 00001045 _____ C:\WINDOWS\system32\Drivers\etc\hp.bak
2016-06-15 17:11 - 2016-06-15 22:13 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\app
2016-06-15 17:09 - 2016-06-15 17:11 - 00000000 ____D C:\Program Files\ContentPush
2016-06-15 17:09 - 2016-06-15 17:09 - 00000000 ____D C:\Program Files\WeatherChickn
2016-06-14 20:50 - 2016-05-28 06:05 - 01232576 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00973504 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00440512 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00249536 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00081088 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2016-06-14 20:50 - 2016-05-28 06:05 - 00042688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2016-06-14 20:50 - 2016-05-28 05:25 - 05797216 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-06-14 20:50 - 2016-05-28 05:25 - 04268880 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2016-06-14 20:50 - 2016-05-28 05:25 - 00354656 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2016-06-14 20:50 - 2016-05-28 05:25 - 00354656 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2016-06-14 20:50 - 2016-05-28 05:25 - 00173920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2016-06-14 20:50 - 2016-05-28 05:25 - 00096096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2016-06-14 20:50 - 2016-05-28 05:23 - 00388384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2016-06-14 20:50 - 2016-05-28 05:22 - 00317280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2016-06-14 20:50 - 2016-05-28 05:18 - 00023776 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-06-14 20:50 - 2016-05-28 05:10 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkUXBroker.exe
2016-06-14 20:50 - 2016-05-28 05:09 - 00501600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2016-06-14 20:50 - 2016-05-28 05:09 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2016-06-14 20:50 - 2016-05-28 05:08 - 00260960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2016-06-14 20:50 - 2016-05-28 05:08 - 00203104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
2016-06-14 20:50 - 2016-05-28 05:07 - 02921880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-06-14 20:50 - 2016-05-28 05:07 - 00957608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-06-14 20:50 - 2016-05-28 05:07 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-06-14 20:50 - 2016-05-28 05:06 - 04074160 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2016-06-14 20:50 - 2016-05-28 05:06 - 00613120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2016-06-14 20:50 - 2016-05-28 05:06 - 00254656 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
2016-06-14 20:50 - 2016-05-28 05:04 - 00505136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2016-06-14 20:50 - 2016-05-28 05:04 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2016-06-14 20:50 - 2016-05-28 05:04 - 00139616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2016-06-14 20:50 - 2016-05-28 05:04 - 00111608 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2016-06-14 20:50 - 2016-05-28 05:04 - 00097096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2016-06-14 20:50 - 2016-05-28 04:57 - 02195632 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2016-06-14 20:50 - 2016-05-28 04:57 - 01714528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2016-06-14 20:50 - 2016-05-28 04:57 - 01396592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-06-14 20:50 - 2016-05-28 04:57 - 00546456 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2016-06-14 20:50 - 2016-05-28 04:57 - 00521664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2016-06-14 20:50 - 2016-05-28 04:57 - 00484192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2016-06-14 20:50 - 2016-05-28 04:57 - 00316256 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-06-14 20:50 - 2016-05-28 04:31 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdlrecover.exe
2016-06-14 20:50 - 2016-05-28 04:31 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\olepro32.dll
2016-06-14 20:50 - 2016-05-28 04:31 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2016-06-14 20:50 - 2016-05-28 04:31 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsdport.sys
2016-06-14 20:50 - 2016-05-28 04:27 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2016-06-14 20:50 - 2016-05-28 04:25 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2016-06-14 20:50 - 2016-05-28 04:25 - 00037376 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-06-14 20:50 - 2016-05-28 04:25 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2016-06-14 20:50 - 2016-05-28 04:24 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2016-06-14 20:50 - 2016-05-28 04:24 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2016-06-14 20:50 - 2016-05-28 04:24 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\FwRemoteSvr.dll
2016-06-14 20:50 - 2016-05-28 04:23 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2016-06-14 20:50 - 2016-05-28 04:22 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2016-06-14 20:50 - 2016-05-28 04:22 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-06-14 20:50 - 2016-05-28 04:22 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2016-06-14 20:50 - 2016-05-28 04:22 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2016-06-14 20:50 - 2016-05-28 04:22 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2016-06-14 20:50 - 2016-05-28 04:21 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2016-06-14 20:50 - 2016-05-28 04:21 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpscript.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Ndu.sys
2016-06-14 20:50 - 2016-05-28 04:20 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2016-06-14 20:50 - 2016-05-28 04:20 - 00054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2016-06-14 20:50 - 2016-05-28 04:19 - 00258560 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2016-06-14 20:50 - 2016-05-28 04:19 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2016-06-14 20:50 - 2016-05-28 04:19 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2016-06-14 20:50 - 2016-05-28 04:19 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2016-06-14 20:50 - 2016-05-28 04:18 - 00325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2016-06-14 20:50 - 2016-05-28 04:18 - 00211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2016-06-14 20:50 - 2016-05-28 04:18 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2016-06-14 20:50 - 2016-05-28 04:18 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\BrokerLib.dll
2016-06-14 20:50 - 2016-05-28 04:18 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\GnssAdapter.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2016-06-14 20:50 - 2016-05-28 04:17 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Privacy.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 19344384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 00464896 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 00442368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 00291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\polstore.dll
2016-06-14 20:50 - 2016-05-28 04:16 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00349696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2016-06-14 20:50 - 2016-05-28 04:15 - 00293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2016-06-14 20:50 - 2016-05-28 04:15 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 18674176 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPSECSVC.DLL
2016-06-14 20:50 - 2016-05-28 04:14 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2016-06-14 20:50 - 2016-05-28 04:14 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2016-06-14 20:50 - 2016-05-28 04:13 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-06-14 20:50 - 2016-05-28 04:13 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2016-06-14 20:50 - 2016-05-28 04:13 - 00393728 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
2016-06-14 20:50 - 2016-05-28 04:13 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-06-14 20:50 - 2016-05-28 04:12 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2016-06-14 20:50 - 2016-05-28 04:12 - 00614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2016-06-14 20:50 - 2016-05-28 04:12 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2016-06-14 20:50 - 2016-05-28 04:12 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-06-14 20:50 - 2016-05-28 04:11 - 01445888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 01152000 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2016-06-14 20:50 - 2016-05-28 04:11 - 00890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00744448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2016-06-14 20:50 - 2016-05-28 04:11 - 00740352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00612352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-06-14 20:50 - 2016-05-28 04:11 - 00453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2016-06-14 20:50 - 2016-05-28 04:10 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2016-06-14 20:50 - 2016-05-28 04:09 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2016-06-14 20:50 - 2016-05-28 04:08 - 06295552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2016-06-14 20:50 - 2016-05-28 04:08 - 00783872 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2016-06-14 20:50 - 2016-05-28 04:06 - 12128256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-06-14 20:50 - 2016-05-28 04:06 - 03196928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2016-06-14 20:50 - 2016-05-28 04:05 - 03664896 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-06-14 20:50 - 2016-05-28 04:04 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
2016-06-14 20:50 - 2016-05-28 04:04 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2016-06-14 20:50 - 2016-05-28 04:03 - 05323776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 05205504 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 02974208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2016-06-14 20:50 - 2016-05-28 04:03 - 01800704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 01733632 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 01185280 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\internetmail.dll
2016-06-14 20:50 - 2016-05-28 04:03 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2016-06-14 20:50 - 2016-05-28 04:02 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2016-06-14 20:50 - 2016-05-28 04:02 - 01896960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2016-06-14 20:50 - 2016-05-28 04:02 - 00103424 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 02880512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 01500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 01193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2016-06-14 20:50 - 2016-05-28 04:01 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 02230272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 01900032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 01707520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2016-06-14 20:50 - 2016-05-28 04:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2016-06-14 20:50 - 2016-05-28 03:56 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2016-06-14 20:50 - 2016-05-28 03:54 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2016-06-08 03:09 - 2016-07-07 10:21 - 00000000 ____D C:\Users\Walid SAH\AppData\LocalLow\uTorrent
2016-06-07 18:32 - 2016-06-07 18:32 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kodi
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-07-07 10:33 - 2015-09-25 06:20 - 00001076 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-07 10:31 - 2015-09-25 10:30 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\uTorrent
2016-07-07 10:22 - 2015-09-25 05:45 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Skype
2016-07-07 10:21 - 2015-09-25 06:20 - 00001072 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-07 10:21 - 2015-09-25 05:31 - 00000000 __SHD C:\Users\Walid SAH\IntelGraphicsProfiles
2016-07-07 00:39 - 2014-06-22 13:33 - 00400552 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-07-05 01:20 - 2015-09-25 06:10 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-07-05 01:07 - 2015-09-25 10:51 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Kodi
2016-07-04 21:48 - 2015-09-25 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Baidu PC Faster
2016-07-04 21:44 - 2015-10-30 15:07 - 00155764 _____ C:\WINDOWS\system32\perfc00C.dat
2016-07-04 21:44 - 2015-10-30 15:07 - 00016150 _____ C:\WINDOWS\system32\perfh00C.dat
2016-07-04 21:44 - 2015-10-30 05:47 - 00000000 ____D C:\WINDOWS\INF
2016-07-04 21:44 - 2015-09-25 23:03 - 01034676 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-07-04 21:38 - 2016-03-02 04:13 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-07-03 05:27 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-07-02 03:49 - 2015-10-30 05:48 - 00000000 ___HD C:\Program Files\WindowsApps
2016-07-01 00:06 - 2016-03-02 04:01 - 00000000 ____D C:\Users\Walid SAH
2016-06-30 19:55 - 2015-09-25 06:22 - 00002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-06-30 19:55 - 2015-09-25 06:22 - 00002242 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-06-30 19:55 - 2014-12-01 18:15 - 00001940 _____ C:\Users\Walid SAH\Desktop\Internet Explorer.lnk
2016-06-30 19:47 - 2015-09-25 05:48 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\.ACEStream
2016-06-30 19:38 - 2015-09-02 20:22 - 00000000 ___HD C:\_acestream_cache_
2016-06-30 01:31 - 2014-11-15 10:45 - 00000000 ____D C:\Users\Walid SAH\Desktop\ENSA
2016-06-30 01:20 - 2015-09-25 05:14 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\Packages
2016-06-30 00:53 - 2015-10-30 05:13 - 00524288 ___SH C:\WINDOWS\system32\config\BBI
2016-06-30 00:51 - 2015-11-10 00:35 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\Riot Games
2016-06-18 14:58 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\rescache
2016-06-17 00:04 - 2015-11-07 23:52 - 00002013 _____ C:\Users\Walid SAH\Desktop\Ace Player.lnk
2016-06-16 21:04 - 2016-03-02 02:54 - 00000000 ___DC C:\WINDOWS\Panther
2016-06-16 18:37 - 2015-10-30 05:39 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-06-15 23:47 - 2015-09-25 05:33 - 00000000 ____D C:\Users\Walid SAH\AppData\Roaming\baidu
2016-06-15 23:46 - 2015-09-25 05:56 - 00000000 ____D C:\Program Files\baidu
2016-06-15 18:16 - 2015-11-08 00:05 - 00000000 ____D C:\Program Files\AskPartnerNetwork
2016-06-15 18:06 - 2015-09-25 05:33 - 00000000 ____D C:\ProgramData\Baidu
2016-06-15 17:58 - 2015-09-25 05:55 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\MiniService
2016-06-15 17:51 - 2016-03-02 03:55 - 00342608 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-06-15 17:37 - 2015-09-25 18:35 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\VirtualStore
2016-06-15 13:29 - 2015-09-10 04:28 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-06-15 13:26 - 2015-10-30 05:48 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2016-06-15 13:26 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-06-15 13:26 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-06-14 21:21 - 2015-09-25 10:45 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-06-14 21:20 - 2014-06-22 13:30 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-06-14 21:15 - 2014-06-22 13:30 - 139785240 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-06-14 18:33 - 2015-10-30 05:49 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-06-14 18:33 - 2015-10-30 05:49 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-06-13 21:24 - 2013-08-22 06:13 - 00000167 _____ C:\WINDOWS\win.ini
2016-06-11 02:12 - 2015-10-30 05:48 - 00000000 ____D C:\WINDOWS\system32\NDF
2016-06-09 03:15 - 2015-09-25 05:42 - 00000000 ____D C:\Users\Walid SAH\AppData\Local\Google
2016-06-08 23:17 - 2016-01-08 01:16 - 00000000 ___RD C:\Program Files\Skype
2016-06-08 23:17 - 2015-09-25 11:18 - 00000000 ____D C:\ProgramData\Skype
2016-06-07 18:34 - 2015-09-25 10:46 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-07 18:32 - 2015-09-25 10:45 - 00000000 ____D C:\Program Files\Kodi
==================== Fichiers à la racine de certains dossiers =======
2016-06-15 17:37 - 2015-09-01 04:26 - 1099376 _____ () C:\Users\Walid SAH\AppData\Roaming\inst_buychannel_01.exe
2016-06-15 17:21 - 2016-04-22 10:39 - 51987648 _____ () C:\Users\Walid SAH\AppData\Roaming\qqpcmgr_v11.5.17490.219_72530_Silence.exe
2016-06-15 17:54 - 2016-02-18 09:10 - 5267952 _____ () C:\Users\Walid SAH\AppData\Roaming\ziptool_wc-9015_setup.exe
2015-09-25 05:47 - 2015-09-25 20:22 - 0014501 _____ () C:\ProgramData\Duplicaterecord.js
Fichiers à déplacer ou supprimer:
====================
C:\ProgramData\Duplicaterecord.js
Certains fichiers dans TEMP:
====================
C:\Users\Walid SAH\AppData\Local\Temp\3650.tmp.exe
C:\Users\Walid SAH\AppData\Local\Temp\4DAB.tmp.exe
C:\Users\Walid SAH\AppData\Local\Temp\avast_free_antivirus_setup_online.exe
C:\Users\Walid SAH\AppData\Local\Temp\BaiduBrowser_MiniDownloader.exe
C:\Users\Walid SAH\AppData\Local\Temp\condefclean.exe
C:\Users\Walid SAH\AppData\Local\Temp\FRST.exe
C:\Users\Walid SAH\AppData\Local\Temp\ICReinstall_4DAB.tmp.exe
C:\Users\Walid SAH\AppData\Local\Temp\LeagueofLegends_EUW_Installer_2016_05_13.exe
C:\Users\Walid SAH\AppData\Local\Temp\ludashisetup.exe
C:\Users\Walid SAH\AppData\Local\Temp\sony-vegas-pro-13-crack-32-bit-kickass.exe
C:\Users\Walid SAH\AppData\Local\Temp\sony-vegas-pro_13-build-290_fr_124204-13.0.exe
C:\Users\Walid SAH\AppData\Local\Temp\spark_install.exe
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-07-01 05:53
==================== Fin de FRST.txt ============================