Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 07-12-2016
Exécuté par grawy (administrateur) sur LAPTOP-9LPJ059J (10-12-2016 17:41:23)
Exécuté depuis C:\Users\grawy\Desktop
Profils chargés: grawy (Profils disponibles: grawy)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
() C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Dashlane, Inc.) C:\Users\grawy\AppData\Roaming\Dashlane\Dashlane.exe
() C:\Users\grawy\AppData\Roaming\Dashlane\DashlanePlugin.exe
(Sony) C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Wargaming.net) C:\Games\World_of_Tanks\WargamingGameUpdater.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.427\SSScheduler.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\OEM\Preload\FubTracking\FubTracking.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\Users\grawy\AppData\Roaming\Dashlane\DashlanePlugin.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dashlane SAS) C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\SecureLine\secureline.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
() C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerButton_NB.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO:) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1611.3123.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-07-07] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-23] (NVIDIA Corporation)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [91488 2016-08-15] ()
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [MalTray] => C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe [818640 2016-09-05] (Glarysoft Ltd)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [Dashlane] => C:\Users\grawy\AppData\Roaming\Dashlane\Dashlane.exe [478592 2016-11-07] (Dashlane, Inc.)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [DashlanePlugin] => C:\Users\grawy\AppData\Roaming\Dashlane\DashlanePlugin.exe [536960 2016-11-07] ()
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2032000 2016-03-22] (Sony)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [XperiaCompanion] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2032000 2016-03-22] (Sony)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [43984 2016-07-08] (Glarysoft Ltd)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [World of Tanks] => C:\Games\World_of_Tanks\WargamingGameUpdater.exe [3135752 2016-11-18] (Wargaming.net)
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers-x32: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\Win32\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers-x32: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\Win32\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers-x32: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\Win32\shellext_win.dll [2016-09-09] (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2016-11-12]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.427\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Restriction <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{3e95d670-75b5-4410-9d06-34756b57c7b4}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{5639250f-5d4c-4074-a898-a963dce74471}: [DhcpNameServer] 192.16.128.24
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131129791535392988&GUID=D1F879F4-E265-4BAC-B38A-C4E5C678A296
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131129791535513180&GUID=D1F879F4-E265-4BAC-B38A-C4E5C678A296
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer15.msn.com/?pc=ACTE
SearchScopes: HKLM -> DefaultScope {5A2AC6D9-614A-49A6-919C-C72B6BBBFDD5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {5A2AC6D9-614A-49A6-919C-C72B6BBBFDD5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {5A2AC6D9-614A-49A6-919C-C72B6BBBFDD5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {5A2AC6D9-614A-49A6-919C-C72B6BBBFDD5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2366026084-1936062465-64343542-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: Dashlane BHO -> {42D79B50-CC4A-4A8E-860F-BE674AF053A2} -> C:\Users\grawy\AppData\Roaming\Dashlane\ie\Dashlanei.dll [2016-11-07] (Dashlane, Inc.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Dashlane Toolbar - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\Users\grawy\AppData\Roaming\Dashlane\ie\KWIEBar.dll [2016-11-07] (Dashlane, Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-2366026084-1936062465-64343542-1001 -> hxxp://www.google.fr/
FireFox:
========
FF DefaultProfile: laswqfix.default
FF DefaultProfile: graxybones@gmail.com
FF ProfilePath: C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default [2016-12-10]
FF NewTab: Mozilla\Firefox\Profiles\laswqfix.default -> about:newtab
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\laswqfix.default -> Recherche sécurisée
FF Homepage: Mozilla\Firefox\Profiles\laswqfix.default -> hxxp://www.google.fr/
FF Keyword.URL: Mozilla\Firefox\Profiles\laswqfix.default -> user_pref("keyword.URL", true);
FF Extension: (Bing-Google) - C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default\Extensions\@Bing-Google.xpi [2015-12-19]
FF Extension: (Dashlane) - C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default\Extensions\jetpack-extension@dashlane.com.xpi [2016-08-18]
FF Extension: (Français Language Pack) - C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2016-06-13]
FF SearchPlugin: C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default\searchplugins\McSiteAdvisor.xml [2016-05-22]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2015-12-19]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-12] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2009-09-07] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2016-07-14] ()
FF Plugin HKU\S-1-5-21-2366026084-1936062465-64343542-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\grawy\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-07-14] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2366026084-1936062465-64343542-1001: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll [2015-11-20] (Sony Network Entertainment International LLC)
Chrome:
=======
CHR Profile: C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default [2016-12-10]
CHR Extension: (Google Slides) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-15]
CHR Extension: (Google Docs) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-15]
CHR Extension: (Google Drive) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-15]
CHR Extension: (YouTube) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-15]
CHR Extension: (Recherche Google) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-15]
CHR Extension: (Dashlane) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdjamakpfbbddfjaooikfcpapjohcfmg [2016-10-08]
CHR Extension: (Google Sheets) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-15]
CHR Extension: (Google Docs hors connexion) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-23]
CHR Extension: (Bing2Google) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgoehlfmhfafaiepckjikpphoklijedl [2015-12-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-10]
CHR Extension: (Gmail) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-15]
CHR Extension: (Chrome Media Router) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-26]
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx"
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2267352 2016-08-30] (Acer Incorporated)
R2 Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [82944 2015-12-04] (Dashlane SAS)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573568 2015-05-14] (Acer Incorporated)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [350064 2016-07-14] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-23] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [370064 2015-12-15] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-07-06] (Intel Corporation)
S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsupdatesvr.exe [133480 2015-08-28] (Zhuhai Kingsoft Office Software Co.,Ltd)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.427\McCHSvc.exe [329480 2016-10-13] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1868432 2015-06-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-23] (NVIDIA Corporation)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [398176 2015-07-09] (Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [450400 2015-07-09] (Acer Incorporated)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [592392 2016-05-29] ()
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [251232 2015-09-14] (acer)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [44640 2014-09-05] (The OpenVPN Project)
R3 ETDI2C; C:\WINDOWS\system32\DRIVERS\ETDI2C.sys [175152 2015-06-09] (ELAN Microelectronic Corp.)
S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [30424 2016-04-16] (Sony Mobile Communications)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160 2016-07-18] (Glarysoft Ltd)
R1 GUSBootStartup; C:\WINDOWS\System32\drivers\GUSBootStartup.sys [20160 2016-07-18] (Glarysoft Ltd)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [349960 2016-07-12] (Intel Corporation)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21344 2015-07-09] (Acer Incorporated)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7116288 2016-07-16] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46768 2015-05-18] (NVIDIA Corporation)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14688 2015-07-09] (Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-05-29] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [411712 2015-05-19] (Realsil Semiconductor Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-12-10 17:41 - 2016-12-10 17:42 - 00024698 _____ C:\Users\grawy\Desktop\FRST.txt
2016-12-10 17:41 - 2016-12-10 17:41 - 00000000 ____D C:\FRST
2016-12-10 17:39 - 2016-12-10 17:40 - 02420224 _____ (Farbar) C:\Users\grawy\Desktop\FRST64.exe
2016-12-10 16:04 - 2016-12-10 16:04 - 00131534 _____ C:\Users\grawy\Desktop\ZHPDiag.txt
2016-12-10 15:59 - 2016-12-10 15:59 - 00000000 ___HD C:\OneDriveTemp
2016-12-10 15:45 - 2016-12-10 15:50 - 07839808 _____ (McAfee, Inc.) C:\Users\grawy\Downloads\MCPR.exe
2016-12-09 22:56 - 2016-12-09 23:10 - 00000387 _____ C:\Users\grawy\Desktop\cnet.txt
2016-12-09 22:40 - 2016-12-09 22:40 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2016-12-09 22:26 - 2016-12-09 22:27 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-12-09 22:26 - 2016-12-09 22:26 - 00001922 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2016-12-09 22:26 - 2016-12-09 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-12-09 22:24 - 2016-12-09 22:26 - 03521617 _____ (Nicolas Coolman ) C:\Users\grawy\Downloads\zhpfix_2015.10.19.9.exe
2016-12-09 18:34 - 2016-12-09 22:15 - 03521617 _____ (Nicolas Coolman ) C:\Users\grawy\Downloads\ZHPFix.exe
2016-12-09 17:36 - 2016-12-09 17:36 - 00000879 _____ C:\Users\grawy\Desktop\ZHPCleaner.lnk
2016-12-09 17:34 - 2016-12-09 17:36 - 02601984 _____ C:\Users\grawy\Downloads\ZHPCleaner.exe
2016-12-09 17:15 - 2016-12-10 16:01 - 00000000 ____D C:\Users\grawy\AppData\Roaming\ZHP
2016-12-09 17:15 - 2016-12-10 16:00 - 00000869 _____ C:\Users\grawy\Desktop\ZHPDiag.lnk
2016-12-09 17:13 - 2016-12-09 17:15 - 02105344 _____ C:\Users\grawy\Downloads\ZHPDiag3.exe
2016-12-09 16:51 - 2016-12-09 16:53 - 00428148 _____ C:\WINDOWS\Minidump\120916-33500-01.dmp
2016-12-09 16:51 - 2016-12-09 16:51 - 807034795 _____ C:\WINDOWS\MEMORY.DMP
2016-12-09 16:51 - 2016-12-09 16:51 - 00000000 ____D C:\WINDOWS\Minidump
2016-12-09 16:50 - 2016-12-09 16:50 - 00012864 ____N C:\bootsqm.dat
2016-12-09 16:26 - 2016-12-09 16:43 - 16479168 _____ C:\Users\grawy\Downloads\Glary_Utilities_v5.65.0.86.exe
2016-12-09 16:21 - 2016-12-09 16:21 - 00006682 _____ C:\Users\grawy\OneDrive\Documents\CheckDiskReport.txt
2016-12-09 06:54 - 2016-12-09 06:59 - 02405672 _____ (Trend Micro Inc.) C:\Users\grawy\Downloads\HousecallLauncher64.exe
2016-12-08 16:26 - 2012-09-20 05:00 - 00390656 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMBL.DLL
2016-12-08 16:24 - 2016-12-08 16:24 - 00000000 ___HD C:\ProgramData\CanonIJFAX
2016-12-08 16:24 - 2012-09-21 05:00 - 00303104 _____ (CANON INC.) C:\WINDOWS\system32\CNCALBL.DLL
2016-12-08 15:15 - 2016-12-08 15:18 - 00416708 _____ C:\Users\grawy\Downloads\claudie.maurin_1_3122016_FLUX_RSS___veille_informationnelle.pdf
2016-12-08 15:08 - 2016-12-08 15:14 - 00440283 _____ C:\Users\grawy\Downloads\claudie.maurin_2_3122016_GOOGLE_ALERTE___Outil_veille_informationnelle.pdf
2016-12-02 16:31 - 2016-12-02 16:31 - 00155606 _____ C:\Users\grawy\Downloads\attestation.pdf
2016-12-02 16:23 - 2016-12-02 16:23 - 00552765 _____ C:\Users\grawy\OneDrive\Documents\Bulletin d'affiliation Portabilité des Garanties.pdf
2016-12-02 15:50 - 2016-12-02 15:51 - 00552268 _____ C:\Users\grawy\OneDrive\Documents\IMG_20161202_0002.pdf
2016-12-02 15:44 - 2016-12-02 15:45 - 00544723 _____ C:\Users\grawy\OneDrive\Documents\IMG_20161202_0001.pdf
2016-12-02 12:57 - 2016-12-02 12:58 - 00615434 _____ C:\Users\grawy\Downloads\téléchargement.pdf
2016-12-02 12:50 - 2016-12-02 12:50 - 00301035 _____ C:\Users\grawy\Downloads\Pack_Infinity_Famille__Prestation_de_Services_-_Formule__Pack_INFINITY_Famille.pdf
2016-12-02 12:49 - 2016-12-02 12:50 - 00453320 _____ C:\Users\grawy\Downloads\Notice_d_information_du_pack_infinity_famille_0215_V5.pdf
2016-12-01 21:19 - 2016-12-01 21:22 - 07485473 _____ C:\Users\grawy\Downloads\cv6.zip
2016-12-01 14:25 - 2016-12-01 14:25 - 00352175 _____ C:\Users\grawy\Downloads\M1_151228_B.pdf
2016-12-01 13:53 - 2016-12-01 13:53 - 00328329 _____ C:\Users\grawy\Downloads\M1_151228_A.pdf
2016-12-01 13:48 - 2016-12-01 13:48 - 00000000 ____D C:\Users\grawy\Downloads\a trier
2016-11-28 11:10 - 2016-11-28 11:17 - 00010616 _____ C:\Users\grawy\OneDrive\Documents\Fiche de paye base.xlsx
2016-11-19 17:27 - 2016-11-19 17:27 - 00000000 ____D C:\Users\grawy\AppData\Local\IsolatedStorage
2016-11-19 17:21 - 2016-11-19 17:33 - 00000000 ___HD C:\ProgramData\CanonIJMIG
2016-11-19 16:27 - 2016-11-19 16:27 - 00000000 ___HD C:\ProgramData\CanonIJMyPrinter
2016-11-19 16:24 - 2016-11-19 16:24 - 00000000 ____D C:\ProgramData\Canon IJ Network Tool
2016-11-19 15:53 - 2016-12-08 16:10 - 00000000 ___HD C:\ProgramData\CanonIJETV
2016-11-12 17:15 - 2016-11-12 17:15 - 00000000 ____D C:\Users\grawy\AppData\Local\ElevatedDiagnostics
2016-11-12 01:34 - 2016-11-12 01:35 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-12-10 16:25 - 2016-08-29 10:50 - 00000000 ____D C:\Users\grawy
2016-12-10 16:25 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-10 16:25 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-12-10 16:22 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-10 16:22 - 2016-01-26 09:46 - 00007597 _____ C:\Users\grawy\AppData\Local\resmon.resmoncfg
2016-12-10 16:21 - 2016-08-29 11:06 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-10 16:14 - 2016-08-29 10:42 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-12-10 16:02 - 2016-07-18 20:14 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-12-10 16:00 - 2015-12-19 17:30 - 00000000 ____D C:\Users\grawy\AppData\Local\CrashDumps
2016-12-10 15:59 - 2015-12-15 17:05 - 00000000 ___RD C:\Users\grawy\OneDrive
2016-12-10 15:58 - 2016-08-29 10:45 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-12-10 15:58 - 2015-12-15 17:01 - 00000000 __SHD C:\Users\grawy\IntelGraphicsProfiles
2016-12-10 15:57 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2016-12-10 15:55 - 2016-08-29 11:06 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2016-12-10 15:54 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2016-12-10 15:54 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-12-10 15:45 - 2016-07-16 23:40 - 01240518 _____ C:\WINDOWS\system32\perfh00C.dat
2016-12-10 15:45 - 2016-07-16 23:40 - 00291784 _____ C:\WINDOWS\system32\perfc00C.dat
2016-12-10 15:45 - 2015-07-16 04:31 - 02811910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-09 22:44 - 2016-02-15 10:21 - 00000000 ____D C:\Users\grawy\Desktop\fongecif RH
2016-12-09 14:49 - 2016-07-08 21:43 - 00747949 _____ C:\Users\grawy\AppData\Local\census.cache
2016-12-09 14:49 - 2016-07-08 21:43 - 00126706 _____ C:\Users\grawy\AppData\Local\ars.cache
2016-12-08 17:12 - 2016-09-07 09:17 - 00000000 ____D C:\Users\grawy\Desktop\autre
2016-12-08 16:13 - 2016-03-14 17:03 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-08 16:11 - 2016-10-26 13:57 - 00000000 ____D C:\Users\grawy\Downloads\Nouveau dossier (2)
2016-12-08 16:11 - 2016-08-29 10:45 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-12-08 16:11 - 2016-08-29 10:45 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-12-08 16:11 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Media
2016-12-08 16:11 - 2016-01-19 13:09 - 00000000 ____D C:\Users\grawy\Downloads\Nouveau dossier
2016-12-08 16:11 - 2015-12-15 18:07 - 00000000 ____D C:\Users\grawy\AppData\Roaming\Dashlane
2016-12-08 16:11 - 2015-12-15 17:01 - 00000000 ____D C:\Users\grawy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dashlane
2016-12-08 16:11 - 2015-08-28 09:38 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2016-12-08 16:10 - 2016-02-10 09:51 - 00000000 ___HD C:\ProgramData\CanonIJEGV
2016-12-08 16:10 - 2016-02-10 09:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2016-12-08 16:10 - 2015-12-15 20:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-08 16:09 - 2016-01-19 13:09 - 00000000 ____D C:\Users\grawy\Downloads\farm simulator mods
2016-12-08 15:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\registration
2016-12-08 15:55 - 2015-12-15 20:30 - 00000000 ____D C:\Users\grawy\AppData\Roaming\Skype
2016-12-08 15:50 - 2015-12-15 17:01 - 00000000 ____D C:\Users\grawy\AppData\Local\Packages
2016-12-08 15:49 - 2015-12-15 20:30 - 00000000 ____D C:\ProgramData\Skype
2016-12-08 15:48 - 2016-02-10 09:33 - 00000000 ____D C:\Program Files\Canon
2016-12-08 15:48 - 2016-02-10 09:31 - 00000000 ___HD C:\Program Files\CanonBJ
2016-12-08 15:48 - 2016-02-10 09:29 - 00000000 ____D C:\Program Files (x86)\Canon
2016-12-08 15:47 - 2016-10-26 17:14 - 00000000 ____D C:\AdwCleaner
2016-12-08 15:47 - 2016-03-30 11:28 - 00000000 __RHD C:\MSOCache
2016-12-07 15:43 - 2016-11-05 16:47 - 00000000 ____D C:\Users\grawy\Desktop\teste
2016-12-02 16:23 - 2016-02-10 09:49 - 00000000 ____D C:\ProgramData\CanonIJPLM
2016-11-20 15:45 - 2015-12-21 07:33 - 00000176 _____ C:\Users\grawy\OneDrive\Documents\add.txt
2016-11-19 16:19 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-11-19 16:11 - 2016-02-10 09:39 - 00000000 ____D C:\ProgramData\CanonIJWSpt
2016-11-14 21:54 - 2015-12-15 17:44 - 00002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-14 21:54 - 2015-12-15 17:44 - 00002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-13 11:06 - 2016-10-26 14:01 - 00000000 ____D C:\Users\grawy\Downloads\comptalia
2016-11-12 17:46 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2016-11-12 16:34 - 2016-08-29 11:06 - 00003988 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-11-12 16:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-11-12 16:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-11-12 15:45 - 2016-04-10 14:46 - 00051032 _____ C:\Users\grawy\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-12 01:35 - 2016-08-29 11:06 - 00002926 _____ C:\WINDOWS\System32\Tasks\avast! SL Update
2016-11-12 01:35 - 2016-08-29 11:06 - 00002654 _____ C:\WINDOWS\System32\Tasks\Avast SecureLine
2016-11-11 09:29 - 2015-12-15 18:20 - 00001960 _____ C:\Users\grawy\Desktop\Dashlane.lnk
==================== Fichiers à la racine de certains dossiers =======
2016-07-11 19:07 - 2016-07-12 20:07 - 0000070 _____ () C:\Users\grawy\AppData\Roaming\WB.CFG
2016-07-08 21:43 - 2016-12-09 14:49 - 0126706 _____ () C:\Users\grawy\AppData\Local\ars.cache
2016-07-08 21:43 - 2016-12-09 14:49 - 0747949 _____ () C:\Users\grawy\AppData\Local\census.cache
2016-07-08 21:03 - 2016-07-08 21:03 - 0000036 _____ () C:\Users\grawy\AppData\Local\housecall.guid.cache
2016-01-26 09:46 - 2016-12-10 16:22 - 0007597 _____ () C:\Users\grawy\AppData\Local\resmon.resmoncfg
2016-07-13 13:25 - 2016-07-13 13:25 - 0000000 _____ () C:\Users\grawy\AppData\Local\{837D0412-A380-48F3-B7B0-86B237CFD107}
2016-08-29 10:45 - 2016-08-29 10:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-12-08 16:23
==================== Fin de FRST.txt ============================
Exécuté par grawy (administrateur) sur LAPTOP-9LPJ059J (10-12-2016 17:41:23)
Exécuté depuis C:\Users\grawy\Desktop
Profils chargés: grawy (Profils disponibles: grawy)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
() C:\Program Files\AVAST Software\SecureLine\vpnsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALSvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Dashlane, Inc.) C:\Users\grawy\AppData\Roaming\Dashlane\Dashlane.exe
() C:\Users\grawy\AppData\Roaming\Dashlane\DashlanePlugin.exe
(Sony) C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe
(Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
(Wargaming.net) C:\Games\World_of_Tanks\WargamingGameUpdater.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.427\SSScheduler.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe
() C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QALockHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\OEM\Preload\FubTracking\FubTracking.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
() C:\Users\grawy\AppData\Roaming\Dashlane\DashlanePlugin.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dashlane SAS) C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\SecureLine\secureline.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
() C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerButton_NB.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO:
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1611.3123.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14040792 2015-07-07] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-23] (NVIDIA Corporation)
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-03-18] (CANON INC.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM-x32\...\Run: [abDocsDllLoader] => C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe [91488 2016-08-15] ()
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [MalTray] => C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe [818640 2016-09-05] (Glarysoft Ltd)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [Dashlane] => C:\Users\grawy\AppData\Roaming\Dashlane\Dashlane.exe [478592 2016-11-07] (Dashlane, Inc.)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [DashlanePlugin] => C:\Users\grawy\AppData\Roaming\Dashlane\DashlanePlugin.exe [536960 2016-11-07] ()
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2032000 2016-03-22] (Sony)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [XperiaCompanion] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [2032000 2016-03-22] (Sony)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [43984 2016-07-08] (Glarysoft Ltd)
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\...\Run: [World of Tanks] => C:\Games\World_of_Tanks\WargamingGameUpdater.exe [3135752 2016-11-18] (Wargaming.net)
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers-x32: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\Win32\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers-x32: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\Win32\shellext_win.dll [2016-09-09] (Acer Incorporated)
ShellIconOverlayIdentifiers-x32: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\Win32\shellext_win.dll [2016-09-09] (Acer Incorporated)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2016-11-12]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.427\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Restriction <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{3e95d670-75b5-4410-9d06-34756b57c7b4}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{5639250f-5d4c-4074-a898-a963dce74471}: [DhcpNameServer] 192.16.128.24
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131129791535392988&GUID=D1F879F4-E265-4BAC-B38A-C4E5C678A296
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131129791535513180&GUID=D1F879F4-E265-4BAC-B38A-C4E5C678A296
HKU\S-1-5-21-2366026084-1936062465-64343542-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer15.msn.com/?pc=ACTE
SearchScopes: HKLM -> DefaultScope {5A2AC6D9-614A-49A6-919C-C72B6BBBFDD5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM -> {5A2AC6D9-614A-49A6-919C-C72B6BBBFDD5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> DefaultScope {5A2AC6D9-614A-49A6-919C-C72B6BBBFDD5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKLM-x32 -> {5A2AC6D9-614A-49A6-919C-C72B6BBBFDD5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-2366026084-1936062465-64343542-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL =
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2015-02-23] (CANON INC.)
BHO-x32: Dashlane BHO -> {42D79B50-CC4A-4A8E-860F-BE674AF053A2} -> C:\Users\grawy\AppData\Roaming\Dashlane\ie\Dashlanei.dll [2016-11-07] (Dashlane, Inc.)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Dashlane Toolbar - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\Users\grawy\AppData\Roaming\Dashlane\ie\KWIEBar.dll [2016-11-07] (Dashlane, Inc.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2015-02-23] (CANON INC.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-2366026084-1936062465-64343542-1001 -> hxxp://www.google.fr/
FireFox:
========
FF DefaultProfile: laswqfix.default
FF DefaultProfile: graxybones@gmail.com
FF ProfilePath: C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default [2016-12-10]
FF NewTab: Mozilla\Firefox\Profiles\laswqfix.default -> about:newtab
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\laswqfix.default -> Recherche sécurisée
FF Homepage: Mozilla\Firefox\Profiles\laswqfix.default -> hxxp://www.google.fr/
FF Keyword.URL: Mozilla\Firefox\Profiles\laswqfix.default -> user_pref("keyword.URL", true);
FF Extension: (Bing-Google) - C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default\Extensions\@Bing-Google.xpi [2015-12-19]
FF Extension: (Dashlane) - C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default\Extensions\jetpack-extension@dashlane.com.xpi [2016-08-18]
FF Extension: (Français Language Pack) - C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default\Extensions\langpack-fr@firefox.mozilla.org.xpi [2016-06-13]
FF SearchPlugin: C:\Users\grawy\AppData\Roaming\Mozilla\Firefox\Profiles\laswqfix.default\searchplugins\McSiteAdvisor.xml [2016-05-22]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2015-12-19]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-12] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-12] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2009-09-07] (CANON INC.)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-20] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2016-07-14] ()
FF Plugin HKU\S-1-5-21-2366026084-1936062465-64343542-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\grawy\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-07-14] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2366026084-1936062465-64343542-1001: sony.com/MediaGoDetector -> C:\Program Files (x86)\Sony\Media Go\npMediaGoDetector.dll [2015-11-20] (Sony Network Entertainment International LLC)
Chrome:
=======
CHR Profile: C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default [2016-12-10]
CHR Extension: (Google Slides) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-15]
CHR Extension: (Google Docs) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-15]
CHR Extension: (Google Drive) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-15]
CHR Extension: (YouTube) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-15]
CHR Extension: (Recherche Google) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-15]
CHR Extension: (Dashlane) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdjamakpfbbddfjaooikfcpapjohcfmg [2016-10-08]
CHR Extension: (Google Sheets) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-15]
CHR Extension: (Google Docs hors connexion) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-23]
CHR Extension: (Bing2Google) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgoehlfmhfafaiepckjikpphoklijedl [2015-12-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-10]
CHR Extension: (Gmail) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-15]
CHR Extension: (Chrome Media Router) - C:\Users\grawy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-26]
CHR HKLM-x32\...\Chrome\Extension: [ihenkjeihefokohmemphikjnjbmegdik] - "C:\Program Files (x86)\Sony\Media Go\MediaGoDetector.crx"
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2267352 2016-08-30] (Acer Incorporated)
R2 Dashlane Upgrade Service; C:\Program Files (x86)\Dashlane\Upgrade\DashlaneUpgradeService.exe [82944 2015-12-04] (Dashlane SAS)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573568 2015-05-14] (Acer Incorporated)
S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [350064 2016-07-14] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-23] (NVIDIA Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [370064 2015-12-15] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [140456 2012-03-28] ()
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-07-06] (Intel Corporation)
S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5113\wtoolex\wpsupdatesvr.exe [133480 2015-08-28] (Zhuhai Kingsoft Office Software Co.,Ltd)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.427\McCHSvc.exe [329480 2016-10-13] (McAfee, Inc.)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1868432 2015-06-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-23] (NVIDIA Corporation)
R3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [398176 2015-07-09] (Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [450400 2015-07-09] (Acer Incorporated)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [592392 2016-05-29] ()
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [251232 2015-09-14] (acer)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [44640 2014-09-05] (The OpenVPN Project)
R3 ETDI2C; C:\WINDOWS\system32\DRIVERS\ETDI2C.sys [175152 2015-06-09] (ELAN Microelectronic Corp.)
S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [30424 2016-04-16] (Sony Mobile Communications)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [20160 2016-07-18] (Glarysoft Ltd)
R1 GUSBootStartup; C:\WINDOWS\System32\drivers\GUSBootStartup.sys [20160 2016-07-18] (Glarysoft Ltd)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [349960 2016-07-12] (Intel Corporation)
R3 LMDriver; C:\WINDOWS\System32\drivers\LMDriver.sys [21344 2015-07-09] (Acer Incorporated)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7116288 2016-07-16] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46768 2015-05-18] (NVIDIA Corporation)
R3 RadioShim; C:\WINDOWS\System32\drivers\RadioShim.sys [14688 2015-07-09] (Acer Incorporated)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [886528 2015-05-29] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [411712 2015-05-19] (Realsil Semiconductor Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-12-10 17:41 - 2016-12-10 17:42 - 00024698 _____ C:\Users\grawy\Desktop\FRST.txt
2016-12-10 17:41 - 2016-12-10 17:41 - 00000000 ____D C:\FRST
2016-12-10 17:39 - 2016-12-10 17:40 - 02420224 _____ (Farbar) C:\Users\grawy\Desktop\FRST64.exe
2016-12-10 16:04 - 2016-12-10 16:04 - 00131534 _____ C:\Users\grawy\Desktop\ZHPDiag.txt
2016-12-10 15:59 - 2016-12-10 15:59 - 00000000 ___HD C:\OneDriveTemp
2016-12-10 15:45 - 2016-12-10 15:50 - 07839808 _____ (McAfee, Inc.) C:\Users\grawy\Downloads\MCPR.exe
2016-12-09 22:56 - 2016-12-09 23:10 - 00000387 _____ C:\Users\grawy\Desktop\cnet.txt
2016-12-09 22:40 - 2016-12-09 22:40 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2016-12-09 22:26 - 2016-12-09 22:27 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-12-09 22:26 - 2016-12-09 22:26 - 00001922 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2016-12-09 22:26 - 2016-12-09 22:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-12-09 22:24 - 2016-12-09 22:26 - 03521617 _____ (Nicolas Coolman ) C:\Users\grawy\Downloads\zhpfix_2015.10.19.9.exe
2016-12-09 18:34 - 2016-12-09 22:15 - 03521617 _____ (Nicolas Coolman ) C:\Users\grawy\Downloads\ZHPFix.exe
2016-12-09 17:36 - 2016-12-09 17:36 - 00000879 _____ C:\Users\grawy\Desktop\ZHPCleaner.lnk
2016-12-09 17:34 - 2016-12-09 17:36 - 02601984 _____ C:\Users\grawy\Downloads\ZHPCleaner.exe
2016-12-09 17:15 - 2016-12-10 16:01 - 00000000 ____D C:\Users\grawy\AppData\Roaming\ZHP
2016-12-09 17:15 - 2016-12-10 16:00 - 00000869 _____ C:\Users\grawy\Desktop\ZHPDiag.lnk
2016-12-09 17:13 - 2016-12-09 17:15 - 02105344 _____ C:\Users\grawy\Downloads\ZHPDiag3.exe
2016-12-09 16:51 - 2016-12-09 16:53 - 00428148 _____ C:\WINDOWS\Minidump\120916-33500-01.dmp
2016-12-09 16:51 - 2016-12-09 16:51 - 807034795 _____ C:\WINDOWS\MEMORY.DMP
2016-12-09 16:51 - 2016-12-09 16:51 - 00000000 ____D C:\WINDOWS\Minidump
2016-12-09 16:50 - 2016-12-09 16:50 - 00012864 ____N C:\bootsqm.dat
2016-12-09 16:26 - 2016-12-09 16:43 - 16479168 _____ C:\Users\grawy\Downloads\Glary_Utilities_v5.65.0.86.exe
2016-12-09 16:21 - 2016-12-09 16:21 - 00006682 _____ C:\Users\grawy\OneDrive\Documents\CheckDiskReport.txt
2016-12-09 06:54 - 2016-12-09 06:59 - 02405672 _____ (Trend Micro Inc.) C:\Users\grawy\Downloads\HousecallLauncher64.exe
2016-12-08 16:26 - 2012-09-20 05:00 - 00390656 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMBL.DLL
2016-12-08 16:24 - 2016-12-08 16:24 - 00000000 ___HD C:\ProgramData\CanonIJFAX
2016-12-08 16:24 - 2012-09-21 05:00 - 00303104 _____ (CANON INC.) C:\WINDOWS\system32\CNCALBL.DLL
2016-12-08 15:15 - 2016-12-08 15:18 - 00416708 _____ C:\Users\grawy\Downloads\claudie.maurin_1_3122016_FLUX_RSS___veille_informationnelle.pdf
2016-12-08 15:08 - 2016-12-08 15:14 - 00440283 _____ C:\Users\grawy\Downloads\claudie.maurin_2_3122016_GOOGLE_ALERTE___Outil_veille_informationnelle.pdf
2016-12-02 16:31 - 2016-12-02 16:31 - 00155606 _____ C:\Users\grawy\Downloads\attestation.pdf
2016-12-02 16:23 - 2016-12-02 16:23 - 00552765 _____ C:\Users\grawy\OneDrive\Documents\Bulletin d'affiliation Portabilité des Garanties.pdf
2016-12-02 15:50 - 2016-12-02 15:51 - 00552268 _____ C:\Users\grawy\OneDrive\Documents\IMG_20161202_0002.pdf
2016-12-02 15:44 - 2016-12-02 15:45 - 00544723 _____ C:\Users\grawy\OneDrive\Documents\IMG_20161202_0001.pdf
2016-12-02 12:57 - 2016-12-02 12:58 - 00615434 _____ C:\Users\grawy\Downloads\téléchargement.pdf
2016-12-02 12:50 - 2016-12-02 12:50 - 00301035 _____ C:\Users\grawy\Downloads\Pack_Infinity_Famille__Prestation_de_Services_-_Formule__Pack_INFINITY_Famille.pdf
2016-12-02 12:49 - 2016-12-02 12:50 - 00453320 _____ C:\Users\grawy\Downloads\Notice_d_information_du_pack_infinity_famille_0215_V5.pdf
2016-12-01 21:19 - 2016-12-01 21:22 - 07485473 _____ C:\Users\grawy\Downloads\cv6.zip
2016-12-01 14:25 - 2016-12-01 14:25 - 00352175 _____ C:\Users\grawy\Downloads\M1_151228_B.pdf
2016-12-01 13:53 - 2016-12-01 13:53 - 00328329 _____ C:\Users\grawy\Downloads\M1_151228_A.pdf
2016-12-01 13:48 - 2016-12-01 13:48 - 00000000 ____D C:\Users\grawy\Downloads\a trier
2016-11-28 11:10 - 2016-11-28 11:17 - 00010616 _____ C:\Users\grawy\OneDrive\Documents\Fiche de paye base.xlsx
2016-11-19 17:27 - 2016-11-19 17:27 - 00000000 ____D C:\Users\grawy\AppData\Local\IsolatedStorage
2016-11-19 17:21 - 2016-11-19 17:33 - 00000000 ___HD C:\ProgramData\CanonIJMIG
2016-11-19 16:27 - 2016-11-19 16:27 - 00000000 ___HD C:\ProgramData\CanonIJMyPrinter
2016-11-19 16:24 - 2016-11-19 16:24 - 00000000 ____D C:\ProgramData\Canon IJ Network Tool
2016-11-19 15:53 - 2016-12-08 16:10 - 00000000 ___HD C:\ProgramData\CanonIJETV
2016-11-12 17:15 - 2016-11-12 17:15 - 00000000 ____D C:\Users\grawy\AppData\Local\ElevatedDiagnostics
2016-11-12 01:34 - 2016-11-12 01:35 - 00000000 ___HD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup-Disabled
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-12-10 16:25 - 2016-08-29 10:50 - 00000000 ____D C:\Users\grawy
2016-12-10 16:25 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-10 16:25 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-12-10 16:22 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-10 16:22 - 2016-01-26 09:46 - 00007597 _____ C:\Users\grawy\AppData\Local\resmon.resmoncfg
2016-12-10 16:21 - 2016-08-29 11:06 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-10 16:14 - 2016-08-29 10:42 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2016-12-10 16:02 - 2016-07-18 20:14 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 5
2016-12-10 16:00 - 2015-12-19 17:30 - 00000000 ____D C:\Users\grawy\AppData\Local\CrashDumps
2016-12-10 15:59 - 2015-12-15 17:05 - 00000000 ___RD C:\Users\grawy\OneDrive
2016-12-10 15:58 - 2016-08-29 10:45 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2016-12-10 15:58 - 2015-12-15 17:01 - 00000000 __SHD C:\Users\grawy\IntelGraphicsProfiles
2016-12-10 15:57 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2016-12-10 15:55 - 2016-08-29 11:06 - 00000000 ____D C:\WINDOWS\System32\Tasks\McAfee
2016-12-10 15:54 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2016-12-10 15:54 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2016-12-10 15:45 - 2016-07-16 23:40 - 01240518 _____ C:\WINDOWS\system32\perfh00C.dat
2016-12-10 15:45 - 2016-07-16 23:40 - 00291784 _____ C:\WINDOWS\system32\perfc00C.dat
2016-12-10 15:45 - 2015-07-16 04:31 - 02811910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-09 22:44 - 2016-02-15 10:21 - 00000000 ____D C:\Users\grawy\Desktop\fongecif RH
2016-12-09 14:49 - 2016-07-08 21:43 - 00747949 _____ C:\Users\grawy\AppData\Local\census.cache
2016-12-09 14:49 - 2016-07-08 21:43 - 00126706 _____ C:\Users\grawy\AppData\Local\ars.cache
2016-12-08 17:12 - 2016-09-07 09:17 - 00000000 ____D C:\Users\grawy\Desktop\autre
2016-12-08 16:13 - 2016-03-14 17:03 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-08 16:11 - 2016-10-26 13:57 - 00000000 ____D C:\Users\grawy\Downloads\Nouveau dossier (2)
2016-12-08 16:11 - 2016-08-29 10:45 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2016-12-08 16:11 - 2016-08-29 10:45 - 00000000 ____D C:\WINDOWS\system32\DAX2
2016-12-08 16:11 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Media
2016-12-08 16:11 - 2016-01-19 13:09 - 00000000 ____D C:\Users\grawy\Downloads\Nouveau dossier
2016-12-08 16:11 - 2015-12-15 18:07 - 00000000 ____D C:\Users\grawy\AppData\Roaming\Dashlane
2016-12-08 16:11 - 2015-12-15 17:01 - 00000000 ____D C:\Users\grawy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dashlane
2016-12-08 16:11 - 2015-08-28 09:38 - 00000000 ___HD C:\WINDOWS\system32\WLANProfiles
2016-12-08 16:10 - 2016-02-10 09:51 - 00000000 ___HD C:\ProgramData\CanonIJEGV
2016-12-08 16:10 - 2016-02-10 09:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities
2016-12-08 16:10 - 2015-12-15 20:30 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-08 16:09 - 2016-01-19 13:09 - 00000000 ____D C:\Users\grawy\Downloads\farm simulator mods
2016-12-08 15:57 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\registration
2016-12-08 15:55 - 2015-12-15 20:30 - 00000000 ____D C:\Users\grawy\AppData\Roaming\Skype
2016-12-08 15:50 - 2015-12-15 17:01 - 00000000 ____D C:\Users\grawy\AppData\Local\Packages
2016-12-08 15:49 - 2015-12-15 20:30 - 00000000 ____D C:\ProgramData\Skype
2016-12-08 15:48 - 2016-02-10 09:33 - 00000000 ____D C:\Program Files\Canon
2016-12-08 15:48 - 2016-02-10 09:31 - 00000000 ___HD C:\Program Files\CanonBJ
2016-12-08 15:48 - 2016-02-10 09:29 - 00000000 ____D C:\Program Files (x86)\Canon
2016-12-08 15:47 - 2016-10-26 17:14 - 00000000 ____D C:\AdwCleaner
2016-12-08 15:47 - 2016-03-30 11:28 - 00000000 __RHD C:\MSOCache
2016-12-07 15:43 - 2016-11-05 16:47 - 00000000 ____D C:\Users\grawy\Desktop\teste
2016-12-02 16:23 - 2016-02-10 09:49 - 00000000 ____D C:\ProgramData\CanonIJPLM
2016-11-20 15:45 - 2015-12-21 07:33 - 00000176 _____ C:\Users\grawy\OneDrive\Documents\add.txt
2016-11-19 16:19 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp
2016-11-19 16:11 - 2016-02-10 09:39 - 00000000 ____D C:\ProgramData\CanonIJWSpt
2016-11-14 21:54 - 2015-12-15 17:44 - 00002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-14 21:54 - 2015-12-15 17:44 - 00002262 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-13 11:06 - 2016-10-26 14:01 - 00000000 ____D C:\Users\grawy\Downloads\comptalia
2016-11-12 17:46 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2016-11-12 16:34 - 2016-08-29 11:06 - 00003988 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2016-11-12 16:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-11-12 16:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-11-12 15:45 - 2016-04-10 14:46 - 00051032 _____ C:\Users\grawy\AppData\Local\GDIPFONTCACHEV1.DAT
2016-11-12 01:35 - 2016-08-29 11:06 - 00002926 _____ C:\WINDOWS\System32\Tasks\avast! SL Update
2016-11-12 01:35 - 2016-08-29 11:06 - 00002654 _____ C:\WINDOWS\System32\Tasks\Avast SecureLine
2016-11-11 09:29 - 2015-12-15 18:20 - 00001960 _____ C:\Users\grawy\Desktop\Dashlane.lnk
==================== Fichiers à la racine de certains dossiers =======
2016-07-11 19:07 - 2016-07-12 20:07 - 0000070 _____ () C:\Users\grawy\AppData\Roaming\WB.CFG
2016-07-08 21:43 - 2016-12-09 14:49 - 0126706 _____ () C:\Users\grawy\AppData\Local\ars.cache
2016-07-08 21:43 - 2016-12-09 14:49 - 0747949 _____ () C:\Users\grawy\AppData\Local\census.cache
2016-07-08 21:03 - 2016-07-08 21:03 - 0000036 _____ () C:\Users\grawy\AppData\Local\housecall.guid.cache
2016-01-26 09:46 - 2016-12-10 16:22 - 0007597 _____ () C:\Users\grawy\AppData\Local\resmon.resmoncfg
2016-07-13 13:25 - 2016-07-13 13:25 - 0000000 _____ () C:\Users\grawy\AppData\Local\{837D0412-A380-48F3-B7B0-86B237CFD107}
2016-08-29 10:45 - 2016-08-29 10:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-12-08 16:23
==================== Fin de FRST.txt ============================