Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 29-06-2017
Exécuté par Catherine (administrateur) sur PC (29-06-2017 09:55:42)
Exécuté depuis C:\Users\Catherine\Desktop
Profils chargés: Catherine (Profils disponibles: Catherine)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
() C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(France Telecom SA) C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(PC Tools) C:\Program Files\PC Tools Firewall Plus\FWService.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Packard Bell BV) C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(France Telecom SA) C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe
(PC Tools) C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_26_0_0_131.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_26_0_0_131.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6265376 2008-08-04] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [894512 2007-06-08] (Synaptics, Inc.)
HKLM\...\Run: [SmpcSys] => C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe [1038136 2008-07-07] (Packard Bell BV)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [CardDetectorHUAWEI1752_1552] => C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe [282624 2009-08-25] (France Telecom SA)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1833504 2008-08-04] (Realtek Semiconductor Corp.)
HKLM\...\Run: [00PCTFW] => C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2672600 2011-04-07] (PC Tools)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220288 2017-06-15] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [263232 2017-06-27] (AVG Technologies CZ, s.r.o.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\ezShellStart.exe,
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6278424 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\Run: [SmpcSys] => C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe [1038136 2008-07-07] (Packard Bell BV)
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {2611a727-f5fc-11de-b419-0017c48e2ce6} - G:\AutoRunCardDetector.exe
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {591eec08-e4ea-11de-8401-00238bcddd79} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {876d5ced-fd51-11e0-8bda-00238bcddd79} - G:\LaunchU3.exe
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {c10698ec-9ab6-11e2-8a5d-00238bcddd79} - E:\LaunchU3.exe
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {d87af5cf-4e21-11df-9b7d-00238bcddd79} - E:\InstallTomTomHOME.exe
HKU\S-1-5-18\...\Run: [ZoneAlarm Windows 10 Upgrader] => "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay
ShellExecuteHooks: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\System32\ezUPBHook.dll [49152 2009-12-09] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E1C6F3E4-CF5B-437D-8AB2-911DFA26AC27}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=6.4.1.14
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=6.4.1.14
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=6.4.1.14
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
URLSearchHook: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 - (Pas de nom) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - Pas de fichier
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s=OJGCCxjhumy6LWoFU-Tlnyy3IeA?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-04-21] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-21] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> Pas de nom - {D3028143-6145-4318-99D3-3EDCE54A95A9} - Pas de fichier
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {5A779DC0-837B-4590-AC42-C7C0847478C5} hxxp://logicielsgratuits.orange.fr/download_service/Install/OrangeInstaller.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Catherine\AppData\Roaming\TomTom\HOME\Profiles\wpbp8xhg.default [2010-04-24]
FF Extension: (Map status indicator) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2010-04-22] [non signé]
FF ProfilePath: C:\Users\Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\s0texf1b.default-1498583122127 [2017-06-29]
FF Homepage: Mozilla\Firefox\Profiles\s0texf1b.default-1498583122127 -> google.fr
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-12-15] [non signé]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-04-11] [non signé]
FF HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-20] ()
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.5.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.istartsurf.com/?type=hp&ts=1423843684&from=profr&uid=WDCXWD5000BEVT-22ZAT0_WD-WXLX0877765777657
CHR StartupUrls: Default -> "hxxps://www.google.com/?trackid=sp-006"
CHR DefaultSearchURL: Default -> hxxps://www.google.de/search?q={searchTerms}?trackid=sp-006
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSuggestURL: Default -> hxxps://www.google.com/complete/search?client=chrome&q={searchTerms}
CHR Profile: C:\Users\Catherine\AppData\Local\Google\Chrome\User Data\Default [2017-06-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Catherine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-12]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeActiveFileMonitor6.0; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832 2007-09-11] ()
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-06-26] (Adobe Systems Incorporated) [Fichier non signé]
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [264432 2017-06-27] (AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [5866488 2017-06-27] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [1189720 2017-06-15] (AVG Technologies CZ, s.r.o.)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [Fichier non signé]
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2009-01-08] (Macrovision Europe Ltd.) [Fichier non signé]
R2 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [77824 2009-08-25] (France Telecom SA) [Fichier non signé]
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-08-26] (Google)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Fichier non signé]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-10-16] (Hewlett-Packard Co.) [Fichier non signé]
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [634880 2008-10-16] (Hewlett-Packard Co.) [Fichier non signé]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2008-07-18] (Hewlett-Packard) [Fichier non signé]
R2 PCToolsFirewallPlus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [286000 2011-01-24] (PC Tools)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Fichier non signé]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-07-18] (Hewlett-Packard) [Fichier non signé]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 avgbdisk; C:\Windows\system32\drivers\avgbdiskx.sys [135872 2017-06-27] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\system32\drivers\avgbidsdriverx.sys [260616 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\system32\drivers\avgbidshx.sys [151024 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\Windows\system32\drivers\avgblogx.sys [270344 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\system32\drivers\avgbunivx.sys [43992 2017-06-27] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\Windows\system32\drivers\avgHwid.sys [35264 2017-06-27] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [116344 2017-06-27] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\system32\drivers\avgRdr.sys [62528 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [63280 2017-06-27] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\system32\drivers\avgSnx.sys [766728 2017-06-27] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\system32\drivers\avgSP.sys [489416 2017-06-27] (AVG Technologies CZ, s.r.o.)
R3 avgStmXP; C:\Windows\system32\drivers\avgStmXP.sys [195128 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\Windows\system32\drivers\avgVmm.sys [289240 2017-06-27] (AVG Technologies CZ, s.r.o.)
S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [103040 2009-06-15] (Huawei Technologies Co., Ltd.)
R2 PCTAppEvent; C:\Windows\system32\drivers\PCTAppEvent.sys [160576 2011-03-02] (PC Tools)
R3 PCTFW-PacketFilter; C:\Windows\system32\drivers\pctNdis-PacketFilter.sys [89472 2011-01-12] (PC Tools)
R1 pctgntdi; C:\Windows\System32\drivers\pctgntdi.sys [251560 2011-01-17] (PC Tools)
S3 pctNdis; C:\Windows\System32\DRIVERS\pctNdis.sys [57536 2010-07-08] (PC Tools)
R3 pctNdisMP; C:\Windows\System32\DRIVERS\pctNdis.sys [57536 2010-07-08] (PC Tools)
R3 pctplfw; C:\Windows\System32\drivers\pctplfw.sys [125248 2011-01-17] (PC Tools)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-12-18] () [Fichier non signé]
S3 aswHdsKe; pas de ImagePath
U2 avgStm; pas de ImagePath
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
U3 awpcfh4k; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-06-29 09:55 - 2017-06-29 09:57 - 00021680 _____ C:\Users\Catherine\Desktop\FRST.txt
2017-06-29 09:55 - 2017-06-29 09:55 - 00000000 ____D C:\FRST
2017-06-29 09:54 - 2017-06-29 09:54 - 01779712 _____ (Farbar) C:\Users\Catherine\Desktop\FRST.exe
2017-06-28 19:39 - 2017-06-28 19:39 - 00119667 _____ C:\Users\Catherine\Desktop\ZHPDiag.txt
2017-06-28 17:50 - 2017-06-28 17:50 - 02757504 _____ C:\Users\Catherine\Desktop\ZHPDiag3.exe
2017-06-27 16:54 - 2017-06-27 16:54 - 00000848 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-06-27 16:54 - 2017-06-27 16:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-27 16:48 - 2017-06-27 16:48 - 00001024 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-06-27 16:48 - 2017-06-27 16:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-06-27 16:48 - 2017-06-27 16:48 - 00000000 ____D C:\Program Files\VS Revo Group
2017-06-27 13:52 - 2017-06-27 13:53 - 04110280 _____ C:\Users\Catherine\Desktop\adwcleaner_6.047.exe
2017-06-27 12:57 - 2017-06-29 09:36 - 00000000 ____D C:\Users\Catherine\AppData\Roaming\ZHP
2017-06-27 12:57 - 2017-06-28 19:35 - 00000000 ____D C:\Users\Catherine\AppData\Local\ZHP
2017-06-27 12:56 - 2017-06-27 12:56 - 02799488 _____ C:\Users\Catherine\Desktop\ZHPCleaner.exe
2017-06-27 12:23 - 2017-06-27 11:18 - 00304400 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2017-06-27 11:21 - 2017-06-27 11:21 - 00000000 ____D C:\Users\Catherine\AppData\Roaming\AVG
2017-06-27 11:19 - 2017-06-27 11:18 - 00766728 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00489416 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00289240 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00270344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgblogx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00260616 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdriverx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00195128 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStmXP.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00151024 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidshx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00135872 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbdiskx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00116344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00063280 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00062528 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00043992 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbunivx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00035264 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys
2017-06-27 11:16 - 2017-06-27 12:21 - 00000747 _____ C:\Users\Public\Desktop\AVG.lnk
2017-06-27 11:16 - 2017-06-27 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-06-27 11:15 - 2017-06-27 11:17 - 00000000 ____D C:\Program Files\AVG
2017-06-27 11:12 - 2017-06-27 14:47 - 00000000 ____D C:\ProgramData\Avg
2017-06-27 11:12 - 2017-06-27 12:20 - 00000000 ____D C:\Users\Catherine\AppData\Local\AvgSetupLog
2017-06-27 11:12 - 2017-06-27 11:20 - 00000000 ____D C:\Users\Catherine\AppData\Local\Avg
2017-06-27 11:07 - 2017-06-27 11:07 - 00000000 ____D C:\Users\Catherine\Downloads\SafeZone Installer
2017-06-26 12:00 - 2017-06-28 14:29 - 00002942 _____ C:\Users\Catherine\Desktop\Joueurs Agent US.txt
2017-06-26 11:59 - 2017-06-28 14:27 - 00002651 _____ C:\Users\Catherine\Desktop\Seniors NCAA non drafté.txt
2017-06-13 15:58 - 2017-06-13 15:58 - 06286848 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-06-29 09:49 - 2016-11-16 14:03 - 00000000 ____D C:\Users\Catherine\AppData\LocalLow\Mozilla
2017-06-29 09:37 - 2013-06-03 10:37 - 00000000 ____D C:\ProgramData\TEMP
2017-06-29 09:33 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-29 09:33 - 2006-11-02 14:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-29 09:33 - 2006-11-02 14:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-29 00:42 - 2006-11-02 15:01 - 00032562 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-06-28 20:41 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\inf
2017-06-28 19:30 - 2015-02-13 16:18 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2017-06-28 19:27 - 2015-02-13 16:18 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-06-28 19:27 - 2014-11-13 00:13 - 00006622 _____ C:\Windows\wininit.ini
2017-06-28 17:26 - 2015-03-30 17:52 - 00000000 ____D C:\Users\Catherine\Desktop\Intersaison 2017-18
2017-06-28 14:05 - 2016-10-04 11:54 - 00041472 _____ C:\Users\Catherine\Desktop\Listing Joueurs Recrutement.xls
2017-06-28 12:20 - 2015-08-08 16:13 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-06-28 12:09 - 2015-06-14 20:39 - 00000000 ____D C:\AdwCleaner
2017-06-28 10:38 - 2013-08-04 17:32 - 00000000 ____D C:\Users\Catherine\Desktop\Julien
2017-06-28 10:36 - 2008-01-21 10:41 - 01615904 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-28 10:36 - 2008-01-21 10:40 - 00722488 _____ C:\Windows\system32\perfh00C.dat
2017-06-28 10:36 - 2008-01-21 10:40 - 00146290 _____ C:\Windows\system32\perfc00C.dat
2017-06-28 09:58 - 2013-09-08 23:27 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-06-27 17:06 - 2006-11-02 12:23 - 00454297 ____R C:\Windows\system32\Drivers\etc\hosts.20170628-010536.backup
2017-06-27 16:54 - 2013-09-08 23:27 - 00000860 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-06-27 15:43 - 2006-11-02 12:23 - 00454297 ____R C:\Windows\system32\Drivers\etc\hosts.20170627-170614.backup
2017-06-27 15:01 - 2009-01-08 14:24 - 00000000 ____D C:\Program Files\Google
2017-06-27 11:31 - 2015-02-13 12:11 - 00000000 ____D C:\ProgramData\AVAST Software
2017-06-26 20:18 - 2012-11-04 17:40 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-06-26 20:18 - 2012-11-04 17:40 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-06-26 20:18 - 2010-07-03 12:20 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-06-26 20:17 - 2009-01-08 14:27 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-26 19:39 - 2016-05-25 19:53 - 00002682 _____ C:\Users\Catherine\Desktop\NM1 - NM2.txt
2017-06-26 19:30 - 2006-11-02 12:23 - 00454297 ____R C:\Windows\system32\Drivers\etc\hosts.20170627-154308.backup
2017-06-26 17:40 - 2006-11-02 12:23 - 00454297 ____R C:\Windows\system32\Drivers\etc\hosts.20170626-193029.backup
2017-06-26 00:43 - 2016-04-30 23:10 - 00000000 _____ C:\Windows\system32\last.dump
2017-06-25 22:49 - 2016-05-01 13:09 - 00000000 ____D C:\Program Files\PC Tools Firewall Plus
2017-06-24 13:18 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170625-225244.backup
2017-06-23 12:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170624-131833.backup
2017-06-21 17:57 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170623-121410.backup
2017-06-21 17:50 - 2012-02-27 14:44 - 00000000 ____D C:\Users\Catherine\AppData\Roaming\vlc
2017-06-20 20:51 - 2014-06-07 11:13 - 00000000 ____D C:\Users\Catherine\AppData\Local\Adobe
2017-06-20 20:11 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170621-175731.backup
2017-06-20 00:06 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170620-201105.backup
2017-06-18 21:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170620-000615.backup
2017-06-18 20:10 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170618-211424.backup
2017-06-18 01:22 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170618-201025.backup
2017-06-17 19:27 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170618-012203.backup
2017-06-17 15:33 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170617-192730.backup
2017-06-15 23:44 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170617-153343.backup
2017-06-14 19:19 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170615-234438.backup
2017-06-13 23:34 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170614-191911.backup
2017-06-13 17:18 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170613-233424.backup
2017-06-12 00:38 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170613-171858.backup
2017-06-11 18:23 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170612-003801.backup
2017-06-11 17:56 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170611-182332.backup
2017-06-10 20:48 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170611-175614.backup
2017-06-09 17:49 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170610-204846.backup
2017-06-09 13:08 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170609-174913.backup
2017-06-08 18:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170609-130841.backup
2017-06-08 13:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170608-181446.backup
2017-06-06 23:52 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170608-131459.backup
2017-06-06 17:18 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-235257.backup
2017-06-06 16:31 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-171809.backup
2017-06-06 12:44 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-163137.backup
2017-06-06 00:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-124458.backup
2017-06-05 19:39 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-001412.backup
2017-06-05 16:11 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170605-193911.backup
2017-06-04 18:13 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170605-161153.backup
2017-06-03 23:06 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170604-181330.backup
2017-06-02 22:23 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170603-230600.backup
2017-06-02 19:28 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170602-222352.backup
2017-06-02 17:47 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170602-192823.backup
2017-06-01 19:46 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170602-174702.backup
2017-06-01 00:44 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170601-194619.backup
2017-05-31 19:34 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170601-004425.backup
2017-05-31 18:35 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170531-193403.backup
2017-05-30 12:52 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170531-183549.backup
2017-05-30 00:19 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170530-125249.backup
==================== Fichiers à la racine de certains dossiers =======
2015-09-16 01:04 - 2015-09-16 01:04 - 6420480 _____ () C:\Program Files\GUTBBFA.tmp
2012-08-27 21:02 - 2012-08-27 21:02 - 0000000 _____ () C:\Users\Catherine\AppData\Roaming\pdfconverter
2011-07-07 17:24 - 2011-07-07 17:24 - 0000043 _____ () C:\Users\Catherine\AppData\Roaming\stats.txt
2009-12-18 19:38 - 2012-10-03 23:28 - 0014870 _____ () C:\Users\Catherine\AppData\Roaming\wklnhst.dat
2011-10-15 13:36 - 2017-05-04 20:34 - 0000680 _____ () C:\Users\Catherine\AppData\Local\d3d9caps.dat
2009-12-10 09:31 - 2016-06-26 13:07 - 0070656 _____ () C:\Users\Catherine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2009-12-09 19:59 - 2015-05-24 18:43 - 0004606 _____ () C:\ProgramData\hpzinstall.log
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-06-29 09:41
==================== Fin de FRST.txt ============================
Exécuté par Catherine (administrateur) sur PC (29-06-2017 09:55:42)
Exécuté depuis C:\Users\Catherine\Desktop
Profils chargés: Catherine (Profils disponibles: Catherine)
Platform: Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
() C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avgsvcx.exe
(France Telecom SA) C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(PC Tools) C:\Program Files\PC Tools Firewall Plus\FWService.exe
(Prolific Technology Inc.) C:\Windows\System32\IoctlSvc.exe
(TomTom) C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Packard Bell BV) C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(France Telecom SA) C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe
(PC Tools) C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Framework\Common\avguix.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_26_0_0_131.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_26_0_0_131.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [6265376 2008-08-04] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [894512 2007-06-08] (Synaptics, Inc.)
HKLM\...\Run: [SmpcSys] => C:\Program Files\Packard Bell\SetupMyPC\SmpSys.exe [1038136 2008-07-07] (Packard Bell BV)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [CardDetectorHUAWEI1752_1552] => C:\Program Files\CardDetector\HUAWEI1752_1552\CardDetector.exe [282624 2009-08-25] (France Telecom SA)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1833504 2008-08-04] (Realtek Semiconductor Corp.)
HKLM\...\Run: [00PCTFW] => C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe [2672600 2011-04-07] (PC Tools)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKLM\...\Run: [AvgUi] => C:\Program Files\AVG\Framework\Common\avguirnx.exe [220288 2017-06-15] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [263232 2017-06-27] (AVG Technologies CZ, s.r.o.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\ezShellStart.exe,
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6278424 2015-04-23] (Piriform Ltd)
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\Run: [SmpcSys] => C:\Program Files\PACKARD BELL\SetUpMyPC\SmpSys.exe [1038136 2008-07-07] (Packard Bell BV)
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: F - F:\LaunchU3.exe -a
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {2611a727-f5fc-11de-b419-0017c48e2ce6} - G:\AutoRunCardDetector.exe
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {591eec08-e4ea-11de-8401-00238bcddd79} - F:\LaunchU3.exe -a
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {876d5ced-fd51-11e0-8bda-00238bcddd79} - G:\LaunchU3.exe
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {c10698ec-9ab6-11e2-8a5d-00238bcddd79} - E:\LaunchU3.exe
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\MountPoints2: {d87af5cf-4e21-11df-9b7d-00238bcddd79} - E:\InstallTomTomHOME.exe
HKU\S-1-5-18\...\Run: [ZoneAlarm Windows 10 Upgrader] => "C:\ProgramData\CheckPoint\ZoneAlarm\Data\Updates\unpacked==win10=update_win10.zip\upgrade.exe" /delay
ShellExecuteHooks: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\System32\ezUPBHook.dll [49152 2009-12-09] (EasyBits Software Corp.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
BootExecute: autocheck autochk * sdnclean.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E1C6F3E4-CF5B-437D-8AB2-911DFA26AC27}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=6.4.1.14
HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=6.4.1.14
HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.symantec.com/redirects/security_response/fix_homepage/index.jsp?lg=fr&pid=N360&pvid=6.4.1.14
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2550105237-623170298-2393949704-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
URLSearchHook: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 - (Pas de nom) - {AEEC3B59-CA98-4EBA-A140-57B94E283583} - Pas de fichier
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACPW
SearchScopes: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> {70D46D94-BF1E-45ED-B567-48701376298E} URL = hxxp://127.0.0.1:4664/search&s=OJGCCxjhumy6LWoFU-Tlnyy3IeA?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
BHO: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-10-22] (Hewlett-Packard Co.)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-04-21] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-21] (Oracle Corporation)
BHO: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-10-22] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-2550105237-623170298-2393949704-1000 -> Pas de nom - {D3028143-6145-4318-99D3-3EDCE54A95A9} - Pas de fichier
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: {5A779DC0-837B-4590-AC42-C7C0847478C5} hxxp://logicielsgratuits.orange.fr/download_service/Install/OrangeInstaller.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Catherine\AppData\Roaming\TomTom\HOME\Profiles\wpbp8xhg.default [2010-04-24]
FF Extension: (Map status indicator) - C:\Program Files\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2010-04-22] [non signé]
FF ProfilePath: C:\Users\Catherine\AppData\Roaming\Mozilla\Firefox\Profiles\s0texf1b.default-1498583122127 [2017-06-29]
FF Homepage: Mozilla\Firefox\Profiles\s0texf1b.default-1498583122127 -> google.fr
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-12-15] [non signé]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010-04-11] [non signé]
FF HKU\S-1-5-21-2550105237-623170298-2393949704-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-20] ()
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.5.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.istartsurf.com/?type=hp&ts=1423843684&from=profr&uid=WDCXWD5000BEVT-22ZAT0_WD-WXLX0877765777657
CHR StartupUrls: Default -> "hxxps://www.google.com/?trackid=sp-006"
CHR DefaultSearchURL: Default -> hxxps://www.google.de/search?q={searchTerms}?trackid=sp-006
CHR DefaultSearchKeyword: Default -> google
CHR DefaultSuggestURL: Default -> hxxps://www.google.com/complete/search?client=chrome&q={searchTerms}
CHR Profile: C:\Users\Catherine\AppData\Local\Google\Chrome\User Data\Default [2017-06-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Catherine\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-12-12]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeActiveFileMonitor6.0; C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe [124832 2007-09-11] ()
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [272384 2017-06-26] (Adobe Systems Incorporated) [Fichier non signé]
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [264432 2017-06-27] (AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [5866488 2017-06-27] (AVG Technologies CZ, s.r.o.)
R2 avgsvc; C:\Program Files\AVG\Framework\Common\avgsvcx.exe [1189720 2017-06-15] (AVG Technologies CZ, s.r.o.)
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Sofware AS) [Fichier non signé]
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [654848 2009-01-08] (Macrovision Europe Ltd.) [Fichier non signé]
R2 FTRTSVC; C:\Program Files\Common Files\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe [77824 2009-08-25] (France Telecom SA) [Fichier non signé]
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-08-26] (Google)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [Fichier non signé]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [135168 2008-10-16] (Hewlett-Packard Co.) [Fichier non signé]
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [634880 2008-10-16] (Hewlett-Packard Co.) [Fichier non signé]
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2008-07-18] (Hewlett-Packard) [Fichier non signé]
R2 PCToolsFirewallPlus; C:\Program Files\PC Tools Firewall Plus\FWService.exe [286000 2011-01-24] (PC Tools)
R2 PLFlash DeviceIoControl Service; C:\Windows\system32\IoctlSvc.exe [81920 2006-12-19] (Prolific Technology Inc.) [Fichier non signé]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-07-18] (Hewlett-Packard) [Fichier non signé]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 avgbdisk; C:\Windows\system32\drivers\avgbdiskx.sys [135872 2017-06-27] (AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\Windows\system32\drivers\avgbidsdriverx.sys [260616 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\Windows\system32\drivers\avgbidshx.sys [151024 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgblog; C:\Windows\system32\drivers\avgblogx.sys [270344 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\Windows\system32\drivers\avgbunivx.sys [43992 2017-06-27] (AVG Technologies CZ, s.r.o.)
S3 avgHwid; C:\Windows\system32\drivers\avgHwid.sys [35264 2017-06-27] (AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\Windows\system32\drivers\avgMonFlt.sys [116344 2017-06-27] (AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\Windows\system32\drivers\avgRdr.sys [62528 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\Windows\system32\drivers\avgRvrt.sys [63280 2017-06-27] (AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\Windows\system32\drivers\avgSnx.sys [766728 2017-06-27] (AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\Windows\system32\drivers\avgSP.sys [489416 2017-06-27] (AVG Technologies CZ, s.r.o.)
R3 avgStmXP; C:\Windows\system32\drivers\avgStmXP.sys [195128 2017-06-27] (AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\Windows\system32\drivers\avgVmm.sys [289240 2017-06-27] (AVG Technologies CZ, s.r.o.)
S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [103040 2009-06-15] (Huawei Technologies Co., Ltd.)
R2 PCTAppEvent; C:\Windows\system32\drivers\PCTAppEvent.sys [160576 2011-03-02] (PC Tools)
R3 PCTFW-PacketFilter; C:\Windows\system32\drivers\pctNdis-PacketFilter.sys [89472 2011-01-12] (PC Tools)
R1 pctgntdi; C:\Windows\System32\drivers\pctgntdi.sys [251560 2011-01-17] (PC Tools)
S3 pctNdis; C:\Windows\System32\DRIVERS\pctNdis.sys [57536 2010-07-08] (PC Tools)
R3 pctNdisMP; C:\Windows\System32\DRIVERS\pctNdis.sys [57536 2010-07-08] (PC Tools)
R3 pctplfw; C:\Windows\System32\drivers\pctplfw.sys [125248 2011-01-17] (PC Tools)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-12-18] () [Fichier non signé]
S3 aswHdsKe; pas de ImagePath
U2 avgStm; pas de ImagePath
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
U3 awpcfh4k; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-06-29 09:55 - 2017-06-29 09:57 - 00021680 _____ C:\Users\Catherine\Desktop\FRST.txt
2017-06-29 09:55 - 2017-06-29 09:55 - 00000000 ____D C:\FRST
2017-06-29 09:54 - 2017-06-29 09:54 - 01779712 _____ (Farbar) C:\Users\Catherine\Desktop\FRST.exe
2017-06-28 19:39 - 2017-06-28 19:39 - 00119667 _____ C:\Users\Catherine\Desktop\ZHPDiag.txt
2017-06-28 17:50 - 2017-06-28 17:50 - 02757504 _____ C:\Users\Catherine\Desktop\ZHPDiag3.exe
2017-06-27 16:54 - 2017-06-27 16:54 - 00000848 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-06-27 16:54 - 2017-06-27 16:54 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-06-27 16:48 - 2017-06-27 16:48 - 00001024 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-06-27 16:48 - 2017-06-27 16:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-06-27 16:48 - 2017-06-27 16:48 - 00000000 ____D C:\Program Files\VS Revo Group
2017-06-27 13:52 - 2017-06-27 13:53 - 04110280 _____ C:\Users\Catherine\Desktop\adwcleaner_6.047.exe
2017-06-27 12:57 - 2017-06-29 09:36 - 00000000 ____D C:\Users\Catherine\AppData\Roaming\ZHP
2017-06-27 12:57 - 2017-06-28 19:35 - 00000000 ____D C:\Users\Catherine\AppData\Local\ZHP
2017-06-27 12:56 - 2017-06-27 12:56 - 02799488 _____ C:\Users\Catherine\Desktop\ZHPCleaner.exe
2017-06-27 12:23 - 2017-06-27 11:18 - 00304400 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2017-06-27 11:21 - 2017-06-27 11:21 - 00000000 ____D C:\Users\Catherine\AppData\Roaming\AVG
2017-06-27 11:19 - 2017-06-27 11:18 - 00766728 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00489416 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00289240 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00270344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgblogx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00260616 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdriverx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00195128 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStmXP.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00151024 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidshx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00135872 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbdiskx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00116344 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00063280 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00062528 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00043992 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbunivx.sys
2017-06-27 11:19 - 2017-06-27 11:18 - 00035264 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgHwid.sys
2017-06-27 11:16 - 2017-06-27 12:21 - 00000747 _____ C:\Users\Public\Desktop\AVG.lnk
2017-06-27 11:16 - 2017-06-27 12:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2017-06-27 11:15 - 2017-06-27 11:17 - 00000000 ____D C:\Program Files\AVG
2017-06-27 11:12 - 2017-06-27 14:47 - 00000000 ____D C:\ProgramData\Avg
2017-06-27 11:12 - 2017-06-27 12:20 - 00000000 ____D C:\Users\Catherine\AppData\Local\AvgSetupLog
2017-06-27 11:12 - 2017-06-27 11:20 - 00000000 ____D C:\Users\Catherine\AppData\Local\Avg
2017-06-27 11:07 - 2017-06-27 11:07 - 00000000 ____D C:\Users\Catherine\Downloads\SafeZone Installer
2017-06-26 12:00 - 2017-06-28 14:29 - 00002942 _____ C:\Users\Catherine\Desktop\Joueurs Agent US.txt
2017-06-26 11:59 - 2017-06-28 14:27 - 00002651 _____ C:\Users\Catherine\Desktop\Seniors NCAA non drafté.txt
2017-06-13 15:58 - 2017-06-13 15:58 - 06286848 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerInstaller.exe
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-06-29 09:49 - 2016-11-16 14:03 - 00000000 ____D C:\Users\Catherine\AppData\LocalLow\Mozilla
2017-06-29 09:37 - 2013-06-03 10:37 - 00000000 ____D C:\ProgramData\TEMP
2017-06-29 09:33 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-29 09:33 - 2006-11-02 14:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-29 09:33 - 2006-11-02 14:47 - 00003216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-29 00:42 - 2006-11-02 15:01 - 00032562 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-06-28 20:41 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\inf
2017-06-28 19:30 - 2015-02-13 16:18 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2017-06-28 19:27 - 2015-02-13 16:18 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-06-28 19:27 - 2014-11-13 00:13 - 00006622 _____ C:\Windows\wininit.ini
2017-06-28 17:26 - 2015-03-30 17:52 - 00000000 ____D C:\Users\Catherine\Desktop\Intersaison 2017-18
2017-06-28 14:05 - 2016-10-04 11:54 - 00041472 _____ C:\Users\Catherine\Desktop\Listing Joueurs Recrutement.xls
2017-06-28 12:20 - 2015-08-08 16:13 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-06-28 12:09 - 2015-06-14 20:39 - 00000000 ____D C:\AdwCleaner
2017-06-28 10:38 - 2013-08-04 17:32 - 00000000 ____D C:\Users\Catherine\Desktop\Julien
2017-06-28 10:36 - 2008-01-21 10:41 - 01615904 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-28 10:36 - 2008-01-21 10:40 - 00722488 _____ C:\Windows\system32\perfh00C.dat
2017-06-28 10:36 - 2008-01-21 10:40 - 00146290 _____ C:\Windows\system32\perfc00C.dat
2017-06-28 09:58 - 2013-09-08 23:27 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-06-27 17:06 - 2006-11-02 12:23 - 00454297 ____R C:\Windows\system32\Drivers\etc\hosts.20170628-010536.backup
2017-06-27 16:54 - 2013-09-08 23:27 - 00000860 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-06-27 15:43 - 2006-11-02 12:23 - 00454297 ____R C:\Windows\system32\Drivers\etc\hosts.20170627-170614.backup
2017-06-27 15:01 - 2009-01-08 14:24 - 00000000 ____D C:\Program Files\Google
2017-06-27 11:31 - 2015-02-13 12:11 - 00000000 ____D C:\ProgramData\AVAST Software
2017-06-26 20:18 - 2012-11-04 17:40 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-06-26 20:18 - 2012-11-04 17:40 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-06-26 20:18 - 2010-07-03 12:20 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2017-06-26 20:17 - 2009-01-08 14:27 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-26 19:39 - 2016-05-25 19:53 - 00002682 _____ C:\Users\Catherine\Desktop\NM1 - NM2.txt
2017-06-26 19:30 - 2006-11-02 12:23 - 00454297 ____R C:\Windows\system32\Drivers\etc\hosts.20170627-154308.backup
2017-06-26 17:40 - 2006-11-02 12:23 - 00454297 ____R C:\Windows\system32\Drivers\etc\hosts.20170626-193029.backup
2017-06-26 00:43 - 2016-04-30 23:10 - 00000000 _____ C:\Windows\system32\last.dump
2017-06-25 22:49 - 2016-05-01 13:09 - 00000000 ____D C:\Program Files\PC Tools Firewall Plus
2017-06-24 13:18 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170625-225244.backup
2017-06-23 12:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170624-131833.backup
2017-06-21 17:57 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170623-121410.backup
2017-06-21 17:50 - 2012-02-27 14:44 - 00000000 ____D C:\Users\Catherine\AppData\Roaming\vlc
2017-06-20 20:51 - 2014-06-07 11:13 - 00000000 ____D C:\Users\Catherine\AppData\Local\Adobe
2017-06-20 20:11 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170621-175731.backup
2017-06-20 00:06 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170620-201105.backup
2017-06-18 21:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170620-000615.backup
2017-06-18 20:10 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170618-211424.backup
2017-06-18 01:22 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170618-201025.backup
2017-06-17 19:27 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170618-012203.backup
2017-06-17 15:33 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170617-192730.backup
2017-06-15 23:44 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170617-153343.backup
2017-06-14 19:19 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170615-234438.backup
2017-06-13 23:34 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170614-191911.backup
2017-06-13 17:18 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170613-233424.backup
2017-06-12 00:38 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170613-171858.backup
2017-06-11 18:23 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170612-003801.backup
2017-06-11 17:56 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170611-182332.backup
2017-06-10 20:48 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170611-175614.backup
2017-06-09 17:49 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170610-204846.backup
2017-06-09 13:08 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170609-174913.backup
2017-06-08 18:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170609-130841.backup
2017-06-08 13:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170608-181446.backup
2017-06-06 23:52 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170608-131459.backup
2017-06-06 17:18 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-235257.backup
2017-06-06 16:31 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-171809.backup
2017-06-06 12:44 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-163137.backup
2017-06-06 00:14 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-124458.backup
2017-06-05 19:39 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170606-001412.backup
2017-06-05 16:11 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170605-193911.backup
2017-06-04 18:13 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170605-161153.backup
2017-06-03 23:06 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170604-181330.backup
2017-06-02 22:23 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170603-230600.backup
2017-06-02 19:28 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170602-222352.backup
2017-06-02 17:47 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170602-192823.backup
2017-06-01 19:46 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170602-174702.backup
2017-06-01 00:44 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170601-194619.backup
2017-05-31 19:34 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170601-004425.backup
2017-05-31 18:35 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170531-193403.backup
2017-05-30 12:52 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170531-183549.backup
2017-05-30 00:19 - 2006-11-02 12:23 - 00454431 ____R C:\Windows\system32\Drivers\etc\hosts.20170530-125249.backup
==================== Fichiers à la racine de certains dossiers =======
2015-09-16 01:04 - 2015-09-16 01:04 - 6420480 _____ () C:\Program Files\GUTBBFA.tmp
2012-08-27 21:02 - 2012-08-27 21:02 - 0000000 _____ () C:\Users\Catherine\AppData\Roaming\pdfconverter
2011-07-07 17:24 - 2011-07-07 17:24 - 0000043 _____ () C:\Users\Catherine\AppData\Roaming\stats.txt
2009-12-18 19:38 - 2012-10-03 23:28 - 0014870 _____ () C:\Users\Catherine\AppData\Roaming\wklnhst.dat
2011-10-15 13:36 - 2017-05-04 20:34 - 0000680 _____ () C:\Users\Catherine\AppData\Local\d3d9caps.dat
2009-12-10 09:31 - 2016-06-26 13:07 - 0070656 _____ () C:\Users\Catherine\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2009-12-09 19:59 - 2015-05-24 18:43 - 0004606 _____ () C:\ProgramData\hpzinstall.log
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-06-29 09:41
==================== Fin de FRST.txt ============================