Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 13-09-2017 02
Exécuté par ricjl (administrateur) sur DESKTOP-RCO33E3 (14-09-2017 12:59:10)
Exécuté depuis C:\Users\ricjl\Desktop
Profils chargés: ricjl (Profils disponibles: ricjl)
Platform: Windows 10 Home Version 1703 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9216000 2017-07-14] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [231640 2016-09-20] (Realtek Semiconductor Corporation)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [701984 2017-07-13] (HP Inc.)
HKU\S-1-5-21-3516338008-667468210-408359847-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-3516338008-667468210-408359847-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [228864 2017-03-18] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Audio Switch.lnk [2016-09-20]
ShortcutTarget: HP Audio Switch.lnk -> C:\Program Files (x86)\HP\HPAudioSwitch\launcher.vbs ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2017-02-01]
ShortcutTarget: HP JumpStart Launch.lnk -> C:\Windows\Installer\{B90CB0DE-2E60-41C4-9857-466EB98192BF}\HPlogo_blue.ico ()
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{c67585d1-e6ea-4a8d-aa94-31fa432a9ecf}: [DhcpNameServer] 192.168.0.254
Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-03] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-03] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-05-27] (HP Inc.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-03] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-03] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-05-27] (HP Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-3516338008-667468210-408359847-1001 -> hxxps://www.msn.com/fr-fr
FireFox:
========
FF ProfilePath: C:\Users\ricjl\AppData\Roaming\TomTom\HOME\Profiles\zd7o6zx1.default [2017-05-15]
FF ProfilePath: C:\Users\ricjl\AppData\Roaming\Mozilla\Firefox\Profiles\j1wnumyj.default-1488124160414 [2017-09-14]
FF Homepage: Mozilla\Firefox\Profiles\j1wnumyj.default-1488124160414 -> about:home
FF Extension: (Français Language Pack) - C:\Users\ricjl\AppData\Roaming\Mozilla\Firefox\Profiles\j1wnumyj.default-1488124160414\Extensions\langpack-fr@firefox.mozilla.org.xpi [2017-09-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-03] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-03] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [125656 2016-09-20] (Realtek Semiconductor Corp.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424384 2017-08-28] (Microsoft Corporation)
R2 HPJumpStartBridge; C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-05-23] (HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-04-07] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.)
R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324608 2017-07-14] (Realtek Semiconductor)
R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [207360 2017-01-22] (Realtek Semiconductor Corp.)
R2 tbaseprovisioning; C:\WINDOWS\SysWOW64\tbaseprovisioning.exe [51208 2017-01-09] (Advanced Micro Devices, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-26] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 amdkmcsp; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [100744 2017-01-09] (Advanced Micro Devices, Inc. )
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0316113.inf_amd64_b5633153ec60c552\atikmdag.sys [36565896 2017-09-05] (Advanced Micro Devices, Inc.)
S3 amdkmdan; C:\WINDOWS\system32\DRIVERS\atikmnag.sys [20267024 2016-02-05] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0316113.inf_amd64_b5633153ec60c552\atikmpag.sys [520072 2017-09-05] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [82704 2016-02-05] (Advanced Micro Devices, Inc.)
R0 amdpsp; C:\WINDOWS\System32\DRIVERS\amdpsp.sys [255368 2017-01-09] (Advanced Micro Devices, Inc. )
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110088 2016-12-12] (Advanced Micro Devices)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [253888 2017-09-14] (Malwarebytes)
R1 MpKsl25551bc7; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{742E7CC4-99DA-4FE8-AA21-6BF14CB61CCE}\MpKsl25551bc7.sys [44928 2017-09-14] (Microsoft Corporation)
R1 MpKsl75a3ebfc; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6C43A5B9-BCCE-4A01-8A7A-30062CBFD2C4}\MpKsl75a3ebfc.sys [44928 2017-09-14] (Microsoft Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-07-14] (Realtek )
R3 RtkBtFilter; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [723920 2017-07-20] (Realtek Semiconductor Corporation)
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [419296 2017-07-14] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [6804480 2017-05-03] (Realtek Semiconductor Corporation )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-14 12:59 - 2017-09-14 13:00 - 000013712 _____ C:\Users\ricjl\Desktop\FRST.txt
2017-09-14 12:59 - 2017-09-14 12:59 - 000000000 ____D C:\FRST
2017-09-14 12:58 - 2017-09-14 12:58 - 002398208 _____ (Farbar) C:\Users\ricjl\Desktop\FRST64.exe
2017-09-14 11:23 - 2017-09-14 11:23 - 000099188 _____ C:\Users\ricjl\Desktop\ZHPDiag.txt
2017-09-14 11:14 - 2017-09-14 11:14 - 000001123 _____ C:\Users\ricjl\Desktop\ZHPFixReport.txt
2017-09-14 11:08 - 2017-09-14 11:08 - 003067264 _____ (Nicolas Coolman) C:\Users\ricjl\Downloads\zhpfix_2017-6-13-1.exe
2017-09-14 11:08 - 2017-09-14 11:08 - 000000000 ____D C:\Users\ricjl\Downloads\Quarantine
2017-09-13 17:29 - 2017-09-13 17:30 - 008182736 _____ (Malwarebytes) C:\Users\ricjl\Downloads\adwcleaner_7.0.2.1(1).exe
2017-09-13 16:03 - 2017-09-13 16:03 - 008182736 _____ (Malwarebytes) C:\Users\ricjl\Downloads\adwcleaner_7.0.2.1.exe
2017-09-13 15:33 - 2017-09-13 15:47 - 000000912 _____ C:\Users\ricjl\Desktop\ZHPCleaner.lnk
2017-09-13 15:32 - 2017-09-13 15:32 - 002869632 _____ C:\Users\ricjl\Downloads\zhpcleaner_2017.8.31.148.exe
2017-09-12 18:09 - 2017-09-14 11:18 - 000000872 _____ C:\Users\ricjl\Desktop\ZHPDiag.lnk
2017-09-12 18:09 - 2017-09-12 18:09 - 002837888 _____ C:\Users\ricjl\Downloads\ZHPDiag3.exe
2017-09-11 20:28 - 2017-09-11 20:28 - 000000000 ____D C:\Users\ricjl\OneDrive\Documents\My Bluetooth
2017-09-08 20:10 - 2017-09-08 20:11 - 000000114 _____ C:\Users\ricjl\Desktop\Cnet.url
2017-09-06 17:55 - 2017-09-06 17:55 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-09-06 17:55 - 2017-09-06 17:55 - 000001000 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-09-06 17:55 - 2017-09-06 17:55 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-06 17:54 - 2017-09-06 17:55 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-09-05 19:45 - 2017-09-14 11:17 - 000253888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-09-05 19:45 - 2017-09-11 20:30 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-09-05 19:45 - 2017-09-08 11:18 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-09-05 19:45 - 2017-09-05 19:45 - 000192960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-09-05 19:45 - 2017-09-05 19:45 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-05 19:45 - 2017-09-05 19:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-09-05 19:44 - 2017-08-24 11:27 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-09-05 19:28 - 2017-09-05 19:29 - 000000000 ____D C:\Users\ricjl\OneDrive\Documents\Editeur de registre
2017-09-05 19:27 - 2017-09-06 09:16 - 000000000 ____D C:\Users\ricjl\OneDrive\Documents\Facture free - Freemobile
2017-09-05 18:19 - 2017-09-05 18:19 - 000022528 _____ C:\Users\ricjl\OneDrive\Documents\Eau en ligne Suez (conf. paiement ).msg
2017-09-05 18:10 - 2017-09-05 18:10 - 000023552 _____ C:\Users\ricjl\OneDrive\Documents\Engie home service (conf. paiement).msg
2017-09-05 16:58 - 2017-09-05 16:58 - 000000000 ___HD C:\OneDriveTemp
2017-09-05 16:28 - 2017-09-05 16:28 - 000000085 _____ C:\WINDOWS\wininit.ini
2017-09-05 11:17 - 2017-09-05 11:17 - 000003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2017-09-05 11:17 - 2017-09-05 11:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings
2017-09-05 11:17 - 2017-09-05 11:17 - 000000000 ____D C:\Program Files (x86)\AMD
2017-09-05 11:07 - 2017-09-05 11:06 - 010313608 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 008471432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2017-09-05 11:07 - 2017-09-05 11:06 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2017-09-05 11:07 - 2017-09-05 11:06 - 002527624 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 002189704 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 001032072 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 001032072 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000915848 _____ (AMD) C:\WINDOWS\system32\coinst_17.10.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000798632 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2017-09-05 11:07 - 2017-09-05 11:06 - 000798632 _____ C:\WINDOWS\system32\atiapfxx.blb
2017-09-05 11:07 - 2017-09-05 11:06 - 000770952 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000543112 _____ C:\WINDOWS\system32\dgtrayicon.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000543112 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000537992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000522632 _____ C:\WINDOWS\system32\GameManager64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000475016 _____ C:\WINDOWS\system32\atieah64.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000469384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000458632 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000402312 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000356744 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000325512 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000269704 _____ C:\WINDOWS\system32\clinfo.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000267656 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000236424 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000233352 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000194952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000159112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000147984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000139720 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000124808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000121240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000121240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000120368 _____ C:\WINDOWS\system32\kapp_ci.sbin
2017-09-05 11:07 - 2017-09-05 11:06 - 000114056 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000112520 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000106376 _____ C:\WINDOWS\system32\atidxx64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000103816 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000103304 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000093064 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000092840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000092840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000090504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000060296 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000036232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000033672 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000855432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000687496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000559984 _____ C:\WINDOWS\system32\amdmiracast.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000505736 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000351624 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000185600 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000154152 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000128968 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000106248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000082824 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000066440 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000000144 _____ C:\WINDOWS\SysWOW64\amd-vulkan32.json
2017-09-05 11:07 - 2017-09-05 11:05 - 000000144 _____ C:\WINDOWS\system32\amd-vulkan64.json
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-14 12:54 - 2016-12-16 12:21 - 000000000 ____D C:\Users\ricjl\AppData\LocalLow\Mozilla
2017-09-14 12:50 - 2017-07-26 21:21 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-09-14 11:20 - 2017-04-04 15:03 - 000000000 ____D C:\Users\ricjl\AppData\Local\ZHP
2017-09-14 11:20 - 2017-02-26 17:26 - 000000000 ____D C:\Users\ricjl\AppData\Roaming\ZHP
2017-09-14 11:17 - 2017-07-26 21:27 - 000000000 ____D C:\Users\ricjl
2017-09-14 11:16 - 2017-07-26 21:46 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-09-14 11:16 - 2017-07-26 21:25 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-09-14 11:16 - 2017-03-18 13:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2017-09-14 09:12 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-09-14 09:11 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-14 09:11 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-14 09:07 - 2017-07-26 21:46 - 000004174 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{33E0D601-299E-4B57-B5BF-76B902424FFF}
2017-09-14 00:22 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-09-13 17:34 - 2017-02-26 15:35 - 000000000 ____D C:\AdwCleaner
2017-09-13 15:19 - 2017-07-14 22:03 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForricjl.job
2017-09-13 13:03 - 2017-01-06 14:03 - 000000000 ____D C:\Users\ricjl\AppData\Local\Packages
2017-09-13 12:58 - 2017-01-08 22:30 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-09-13 12:38 - 2017-01-08 22:30 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-09-13 12:19 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-09-13 12:19 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-09-12 14:23 - 2017-01-06 14:43 - 000000000 ____D C:\Users\ricjl\AppData\Local\ElevatedDiagnostics
2017-09-12 12:55 - 2017-07-26 21:46 - 000003256 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForricjl
2017-09-12 10:52 - 2017-01-09 15:29 - 000000000 ____D C:\Users\ricjl\AppData\Local\Spotify
2017-09-12 10:49 - 2017-01-09 15:29 - 000000000 ____D C:\Users\ricjl\AppData\Roaming\Spotify
2017-09-10 22:45 - 2017-02-12 18:19 - 000000000 ____D C:\Users\ricjl\AppData\Roaming\vlc
2017-09-09 09:21 - 2017-08-01 23:00 - 000003374 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3516338008-667468210-408359847-1001
2017-09-09 09:21 - 2017-01-06 14:09 - 000002414 _____ C:\Users\ricjl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-09 09:20 - 2016-12-03 12:00 - 000000000 ___RD C:\Users\ricjl\OneDrive
2017-09-08 12:17 - 2017-03-17 18:23 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2017-09-07 09:18 - 2017-07-26 21:20 - 000453576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-09-06 17:40 - 2017-01-09 20:21 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-09-05 16:29 - 2017-07-07 19:49 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-09-05 16:28 - 2017-07-07 19:50 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-09-05 12:39 - 2010-02-07 19:19 - 000000000 ____D C:\swsetup
2017-09-05 11:19 - 2016-09-20 02:16 - 000000000 ____D C:\Program Files (x86)\HP
2017-09-05 11:16 - 2017-07-26 21:25 - 000000000 ____D C:\Program Files\AMD
2017-09-05 11:13 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF
2017-09-05 11:11 - 2017-06-07 15:55 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2017-09-05 11:10 - 2017-07-26 21:25 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-05 11:06 - 2017-02-20 05:12 - 000020360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2017-09-05 11:06 - 2017-02-20 05:12 - 000020360 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2017-09-05 11:06 - 2017-02-20 05:10 - 001507720 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2017-09-05 10:05 - 2016-09-20 05:11 - 000000000 ____D C:\WINDOWS\HP
2017-09-04 08:19 - 2016-09-20 02:19 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-09-03 22:49 - 2017-03-18 23:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-09-02 17:15 - 2017-03-18 23:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-09-02 17:15 - 2017-03-18 23:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-30 16:53 - 2017-04-13 20:17 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-28 21:36 - 2017-07-26 21:48 - 002128636 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-28 21:36 - 2017-03-20 07:10 - 000942718 _____ C:\WINDOWS\system32\perfh00C.dat
2017-08-28 21:36 - 2017-03-20 07:10 - 000195576 _____ C:\WINDOWS\system32\perfc00C.dat
2017-08-24 12:59 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-24 09:02 - 2017-02-25 12:05 - 000544424 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-15 18:54 - 2017-02-26 16:05 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
==================== Fichiers à la racine de certains dossiers =======
2017-01-06 14:03 - 2017-09-14 12:50 - 001071075 _____ () C:\Users\ricjl\AppData\Local\BTServer.log
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-09-08 10:22
==================== Fin de FRST.txt ============================
Exécuté par ricjl (administrateur) sur DESKTOP-RCO33E3 (14-09-2017 12:59:10)
Exécuté depuis C:\Users\ricjl\Desktop
Profils chargés: ricjl (Profils disponibles: ricjl)
Platform: Windows 10 Home Version 1703 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\tbaseprovisioning.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\REALTEK Bluetooth\BTServer.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9216000 2017-07-14] (Realtek Semiconductor)
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [231640 2016-09-20] (Realtek Semiconductor Corporation)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [701984 2017-07-13] (HP Inc.)
HKU\S-1-5-21-3516338008-667468210-408359847-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-3516338008-667468210-408359847-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [228864 2017-03-18] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Audio Switch.lnk [2016-09-20]
ShortcutTarget: HP Audio Switch.lnk -> C:\Program Files (x86)\HP\HPAudioSwitch\launcher.vbs ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP JumpStart Launch.lnk [2017-02-01]
ShortcutTarget: HP JumpStart Launch.lnk -> C:\Windows\Installer\{B90CB0DE-2E60-41C4-9857-466EB98192BF}\HPlogo_blue.ico ()
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{c67585d1-e6ea-4a8d-aa94-31fa432a9ecf}: [DhcpNameServer] 192.168.0.254
Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-09-03] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-03] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-05-27] (HP Inc.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-09-03] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-09-03] (Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-05-27] (HP Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-03] (Microsoft Corporation)
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-3516338008-667468210-408359847-1001 -> hxxps://www.msn.com/fr-fr
FireFox:
========
FF ProfilePath: C:\Users\ricjl\AppData\Roaming\TomTom\HOME\Profiles\zd7o6zx1.default [2017-05-15]
FF ProfilePath: C:\Users\ricjl\AppData\Roaming\Mozilla\Firefox\Profiles\j1wnumyj.default-1488124160414 [2017-09-14]
FF Homepage: Mozilla\Firefox\Profiles\j1wnumyj.default-1488124160414 -> about:home
FF Extension: (Français Language Pack) - C:\Users\ricjl\AppData\Roaming\Mozilla\Firefox\Profiles\j1wnumyj.default-1488124160414\Extensions\langpack-fr@firefox.mozilla.org.xpi [2017-09-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-13] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-13] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-09-03] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-03] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [125656 2016-09-20] (Realtek Semiconductor Corp.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424384 2017-08-28] (Microsoft Corporation)
R2 HPJumpStartBridge; C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-05-23] (HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-04-07] (HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.)
R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324608 2017-07-14] (Realtek Semiconductor)
R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [207360 2017-01-22] (Realtek Semiconductor Corp.)
R2 tbaseprovisioning; C:\WINDOWS\SysWOW64\tbaseprovisioning.exe [51208 2017-01-09] (Advanced Micro Devices, Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-26] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 amdkmcsp; C:\WINDOWS\system32\DRIVERS\amdkmcsp.sys [100744 2017-01-09] (Advanced Micro Devices, Inc. )
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0316113.inf_amd64_b5633153ec60c552\atikmdag.sys [36565896 2017-09-05] (Advanced Micro Devices, Inc.)
S3 amdkmdan; C:\WINDOWS\system32\DRIVERS\atikmnag.sys [20267024 2016-02-05] (Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0316113.inf_amd64_b5633153ec60c552\atikmpag.sys [520072 2017-09-05] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [82704 2016-02-05] (Advanced Micro Devices, Inc.)
R0 amdpsp; C:\WINDOWS\System32\DRIVERS\amdpsp.sys [255368 2017-01-09] (Advanced Micro Devices, Inc. )
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110088 2016-12-12] (Advanced Micro Devices)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [253888 2017-09-14] (Malwarebytes)
R1 MpKsl25551bc7; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{742E7CC4-99DA-4FE8-AA21-6BF14CB61CCE}\MpKsl25551bc7.sys [44928 2017-09-14] (Microsoft Corporation)
R1 MpKsl75a3ebfc; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6C43A5B9-BCCE-4A01-8A7A-30062CBFD2C4}\MpKsl75a3ebfc.sys [44928 2017-09-14] (Microsoft Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [954368 2017-07-14] (Realtek )
R3 RtkBtFilter; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [723920 2017-07-20] (Realtek Semiconductor Corporation)
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [419296 2017-07-14] (Realsil Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [6804480 2017-05-03] (Realtek Semiconductor Corporation )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-14 12:59 - 2017-09-14 13:00 - 000013712 _____ C:\Users\ricjl\Desktop\FRST.txt
2017-09-14 12:59 - 2017-09-14 12:59 - 000000000 ____D C:\FRST
2017-09-14 12:58 - 2017-09-14 12:58 - 002398208 _____ (Farbar) C:\Users\ricjl\Desktop\FRST64.exe
2017-09-14 11:23 - 2017-09-14 11:23 - 000099188 _____ C:\Users\ricjl\Desktop\ZHPDiag.txt
2017-09-14 11:14 - 2017-09-14 11:14 - 000001123 _____ C:\Users\ricjl\Desktop\ZHPFixReport.txt
2017-09-14 11:08 - 2017-09-14 11:08 - 003067264 _____ (Nicolas Coolman) C:\Users\ricjl\Downloads\zhpfix_2017-6-13-1.exe
2017-09-14 11:08 - 2017-09-14 11:08 - 000000000 ____D C:\Users\ricjl\Downloads\Quarantine
2017-09-13 17:29 - 2017-09-13 17:30 - 008182736 _____ (Malwarebytes) C:\Users\ricjl\Downloads\adwcleaner_7.0.2.1(1).exe
2017-09-13 16:03 - 2017-09-13 16:03 - 008182736 _____ (Malwarebytes) C:\Users\ricjl\Downloads\adwcleaner_7.0.2.1.exe
2017-09-13 15:33 - 2017-09-13 15:47 - 000000912 _____ C:\Users\ricjl\Desktop\ZHPCleaner.lnk
2017-09-13 15:32 - 2017-09-13 15:32 - 002869632 _____ C:\Users\ricjl\Downloads\zhpcleaner_2017.8.31.148.exe
2017-09-12 18:09 - 2017-09-14 11:18 - 000000872 _____ C:\Users\ricjl\Desktop\ZHPDiag.lnk
2017-09-12 18:09 - 2017-09-12 18:09 - 002837888 _____ C:\Users\ricjl\Downloads\ZHPDiag3.exe
2017-09-11 20:28 - 2017-09-11 20:28 - 000000000 ____D C:\Users\ricjl\OneDrive\Documents\My Bluetooth
2017-09-08 20:10 - 2017-09-08 20:11 - 000000114 _____ C:\Users\ricjl\Desktop\Cnet.url
2017-09-06 17:55 - 2017-09-06 17:55 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-09-06 17:55 - 2017-09-06 17:55 - 000001000 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-09-06 17:55 - 2017-09-06 17:55 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-06 17:54 - 2017-09-06 17:55 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-09-05 19:45 - 2017-09-14 11:17 - 000253888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-09-05 19:45 - 2017-09-11 20:30 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-09-05 19:45 - 2017-09-08 11:18 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-09-05 19:45 - 2017-09-05 19:45 - 000192960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-09-05 19:45 - 2017-09-05 19:45 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-05 19:45 - 2017-09-05 19:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-09-05 19:44 - 2017-08-24 11:27 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-09-05 19:28 - 2017-09-05 19:29 - 000000000 ____D C:\Users\ricjl\OneDrive\Documents\Editeur de registre
2017-09-05 19:27 - 2017-09-06 09:16 - 000000000 ____D C:\Users\ricjl\OneDrive\Documents\Facture free - Freemobile
2017-09-05 18:19 - 2017-09-05 18:19 - 000022528 _____ C:\Users\ricjl\OneDrive\Documents\Eau en ligne Suez (conf. paiement ).msg
2017-09-05 18:10 - 2017-09-05 18:10 - 000023552 _____ C:\Users\ricjl\OneDrive\Documents\Engie home service (conf. paiement).msg
2017-09-05 16:58 - 2017-09-05 16:58 - 000000000 ___HD C:\OneDriveTemp
2017-09-05 16:28 - 2017-09-05 16:28 - 000000085 _____ C:\WINDOWS\wininit.ini
2017-09-05 11:17 - 2017-09-05 11:17 - 000003160 _____ C:\WINDOWS\System32\Tasks\StartCN
2017-09-05 11:17 - 2017-09-05 11:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings
2017-09-05 11:17 - 2017-09-05 11:17 - 000000000 ____D C:\Program Files (x86)\AMD
2017-09-05 11:07 - 2017-09-05 11:06 - 010313608 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 008471432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2017-09-05 11:07 - 2017-09-05 11:06 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2017-09-05 11:07 - 2017-09-05 11:06 - 002527624 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 002189704 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 001032072 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 001032072 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000915848 _____ (AMD) C:\WINDOWS\system32\coinst_17.10.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000798632 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2017-09-05 11:07 - 2017-09-05 11:06 - 000798632 _____ C:\WINDOWS\system32\atiapfxx.blb
2017-09-05 11:07 - 2017-09-05 11:06 - 000770952 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000543112 _____ C:\WINDOWS\system32\dgtrayicon.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000543112 _____ (AMD) C:\WINDOWS\system32\atiesrxx.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000537992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000522632 _____ C:\WINDOWS\system32\GameManager64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000475016 _____ C:\WINDOWS\system32\atieah64.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000469384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000458632 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000402312 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiapfxx.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000356744 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000325512 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000269704 _____ C:\WINDOWS\system32\clinfo.exe
2017-09-05 11:07 - 2017-09-05 11:06 - 000267656 _____ C:\WINDOWS\system32\hsa-thunk64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000236424 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000233352 _____ C:\WINDOWS\SysWOW64\hsa-thunk.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000194952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000159112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000147984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000139720 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000124808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000121240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000121240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000120368 _____ C:\WINDOWS\system32\kapp_ci.sbin
2017-09-05 11:07 - 2017-09-05 11:06 - 000114056 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000112520 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000106376 _____ C:\WINDOWS\system32\atidxx64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000103816 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000103304 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000093064 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000092840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000092840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000090504 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000060296 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000036232 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2017-09-05 11:07 - 2017-09-05 11:06 - 000033672 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000855432 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000687496 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000559984 _____ C:\WINDOWS\system32\amdmiracast.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000505736 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000351624 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000185600 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdhcp64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000154152 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdhcp32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000128968 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000106248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000082824 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000066440 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2017-09-05 11:07 - 2017-09-05 11:05 - 000000144 _____ C:\WINDOWS\SysWOW64\amd-vulkan32.json
2017-09-05 11:07 - 2017-09-05 11:05 - 000000144 _____ C:\WINDOWS\system32\amd-vulkan64.json
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-14 12:54 - 2016-12-16 12:21 - 000000000 ____D C:\Users\ricjl\AppData\LocalLow\Mozilla
2017-09-14 12:50 - 2017-07-26 21:21 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-09-14 11:20 - 2017-04-04 15:03 - 000000000 ____D C:\Users\ricjl\AppData\Local\ZHP
2017-09-14 11:20 - 2017-02-26 17:26 - 000000000 ____D C:\Users\ricjl\AppData\Roaming\ZHP
2017-09-14 11:17 - 2017-07-26 21:27 - 000000000 ____D C:\Users\ricjl
2017-09-14 11:16 - 2017-07-26 21:46 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-09-14 11:16 - 2017-07-26 21:25 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-09-14 11:16 - 2017-03-18 13:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2017-09-14 09:12 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-09-14 09:11 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-14 09:11 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-14 09:07 - 2017-07-26 21:46 - 000004174 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{33E0D601-299E-4B57-B5BF-76B902424FFF}
2017-09-14 00:22 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-09-13 17:34 - 2017-02-26 15:35 - 000000000 ____D C:\AdwCleaner
2017-09-13 15:19 - 2017-07-14 22:03 - 000000364 _____ C:\WINDOWS\Tasks\HPCeeScheduleForricjl.job
2017-09-13 13:03 - 2017-01-06 14:03 - 000000000 ____D C:\Users\ricjl\AppData\Local\Packages
2017-09-13 12:58 - 2017-01-08 22:30 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-09-13 12:38 - 2017-01-08 22:30 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-09-13 12:19 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-09-13 12:19 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-09-12 14:23 - 2017-01-06 14:43 - 000000000 ____D C:\Users\ricjl\AppData\Local\ElevatedDiagnostics
2017-09-12 12:55 - 2017-07-26 21:46 - 000003256 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForricjl
2017-09-12 10:52 - 2017-01-09 15:29 - 000000000 ____D C:\Users\ricjl\AppData\Local\Spotify
2017-09-12 10:49 - 2017-01-09 15:29 - 000000000 ____D C:\Users\ricjl\AppData\Roaming\Spotify
2017-09-10 22:45 - 2017-02-12 18:19 - 000000000 ____D C:\Users\ricjl\AppData\Roaming\vlc
2017-09-09 09:21 - 2017-08-01 23:00 - 000003374 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3516338008-667468210-408359847-1001
2017-09-09 09:21 - 2017-01-06 14:09 - 000002414 _____ C:\Users\ricjl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-09 09:20 - 2016-12-03 12:00 - 000000000 ___RD C:\Users\ricjl\OneDrive
2017-09-08 12:17 - 2017-03-17 18:23 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2017-09-07 09:18 - 2017-07-26 21:20 - 000453576 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-09-06 17:40 - 2017-01-09 20:21 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-09-05 16:29 - 2017-07-07 19:49 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-09-05 16:28 - 2017-07-07 19:50 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2017-09-05 12:39 - 2010-02-07 19:19 - 000000000 ____D C:\swsetup
2017-09-05 11:19 - 2016-09-20 02:16 - 000000000 ____D C:\Program Files (x86)\HP
2017-09-05 11:16 - 2017-07-26 21:25 - 000000000 ____D C:\Program Files\AMD
2017-09-05 11:13 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF
2017-09-05 11:11 - 2017-06-07 15:55 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2017-09-05 11:10 - 2017-07-26 21:25 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-05 11:06 - 2017-02-20 05:12 - 000020360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2017-09-05 11:06 - 2017-02-20 05:12 - 000020360 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2017-09-05 11:06 - 2017-02-20 05:10 - 001507720 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2017-09-05 10:05 - 2016-09-20 05:11 - 000000000 ____D C:\WINDOWS\HP
2017-09-04 08:19 - 2016-09-20 02:19 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2017-09-03 22:49 - 2017-03-18 23:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-09-02 17:15 - 2017-03-18 23:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-09-02 17:15 - 2017-03-18 23:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-30 16:53 - 2017-04-13 20:17 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-28 21:36 - 2017-07-26 21:48 - 002128636 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-28 21:36 - 2017-03-20 07:10 - 000942718 _____ C:\WINDOWS\system32\perfh00C.dat
2017-08-28 21:36 - 2017-03-20 07:10 - 000195576 _____ C:\WINDOWS\system32\perfc00C.dat
2017-08-24 12:59 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-08-24 09:02 - 2017-02-25 12:05 - 000544424 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-08-15 18:54 - 2017-02-26 16:05 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
==================== Fichiers à la racine de certains dossiers =======
2017-01-06 14:03 - 2017-09-14 12:50 - 001071075 _____ () C:\Users\ricjl\AppData\Local\BTServer.log
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-09-08 10:22
==================== Fin de FRST.txt ============================