Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 02-10-2017
Exécuté par Bienvenue a vous (administrateur) sur BIENVENUE (02-10-2017 19:38:07)
Exécuté depuis C:\Users\Bienvenue a vous\Downloads
Profils chargés: Bienvenue a vous (Profils disponibles: Bienvenue a vous)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.7\ToolbarUpdater.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe********************************************* [107192 2012-09-11] ()
HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239592 2017-09-14] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [239856 2017-09-14] (AVAST Software)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-09-11] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-09-24] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3481912 2017-09-20] (Dropbox, Inc.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2183752 2017-04-02] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3194625449-3299177095-439917427-1001\...\Run: [Chromium] => "c:\users\bienvenue a vous\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory=Default --restore-last-session
HKU\S-1-5-21-3194625449-3299177095-439917427-1001\...\Run: [Flvto YouTube Downloader] => "C:\Users\Bienvenue a vous\AppData\Local\Flvto YouTube Downloader\FlvtoYoutubeDownloader.Redesign.exe" /minimize
GroupPolicy: Restriction - Chrome <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{40AA9D97-CA12-4CA6-8661-ED15570560F4}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{97B055FE-DD25-4A59-A2F4-3F38BB7EBD21}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{D2562CFA-672D-4392-BA96-BBD5B9DD6AD5}: [DhcpNameServer] 192.168.88.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_17_04_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CzzyD0D0Ezz0EtAyEtA0EyB0ByCyCtN0D0Tzu0StCzzyDtAtN1L2XzutAtFtByDtFtCtFtCtDzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StByCzy0A0B0CyB0AtGtD0B0F0CtGyCtDzy0DtGtB0AtAtBtGyEyEtDyDtD0AtA0AtB0AtC0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCyD0EyBtBtC0F0CtGtCyCzzyCtGyE0B0C0BtGzzyEtA0AtGyDyByC0FyCtB0CyCyD0B0BtD2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCyBzytB%26cr%3D1712669871%26a%3Dwbf_adsrch_17_04_ssg01%26os_ver%3D6.3%26os%3DWindows%2B8.1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_17_04_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CzzyD0D0Ezz0EtAyEtA0EyB0ByCyCtN0D0Tzu0StCzzyDtAtN1L2XzutAtFtByDtFtCtFtCtDzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StByCzy0A0B0CyB0AtGtD0B0F0CtGyCtDzy0DtGtB0AtAtBtGyEyEtDyDtD0AtA0AtB0AtC0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCyD0EyBtBtC0F0CtGtCyCzzyCtGyE0B0C0BtGzzyEtA0AtGyDyByC0FyCtB0CyCyD0B0BtD2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCyBzytB%26cr%3D1712669871%26a%3Dwbf_adsrch_17_04_ssg01%26os_ver%3D6.3%26os%3DWindows%2B8.1
HKU\S-1-5-21-3194625449-3299177095-439917427-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3194625449-3299177095-439917427-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ef374c7b&q={searchTerms}
SearchScopes: HKLM -> {26080cad-4adc-49ac-8c63-eda16e595cbd} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ef374c7b&q={searchTerms}
SearchScopes: HKLM-x32 -> {26080cad-4adc-49ac-8c63-eda16e595cbd} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-3194625449-3299177095-439917427-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ef374c7b&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-09-14] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-21] (Google Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-09-14] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-11-21] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-21] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-11-21] (Google Inc.)
Toolbar: HKU\S-1-5-21-3194625449-3299177095-439917427-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-21] (Google Inc.)
FireFox:
========
FF DefaultProfile: pwsdycql.default
FF ProfilePath: C:\Users\Bienvenue a vous\AppData\Roaming\Mozilla\Firefox\Profiles\pwsdycql.default [2017-10-02]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\pwsdycql.default -> Yahoo! Powered
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\pwsdycql.default -> Yahoo! Powered
FF Homepage: Mozilla\Firefox\Profiles\pwsdycql.default -> hxxp://www.google.fr/
FF Keyword.URL: Mozilla\Firefox\Profiles\pwsdycql.default -> user_pref("keyword.URL", true);
FF Extension: (Avast SafePrice) - C:\Users\Bienvenue a vous\AppData\Roaming\Mozilla\Firefox\Profiles\pwsdycql.default\Extensions\sp@avast.com.xpi [2017-09-02]
FF Extension: (Avast Online Security) - C:\Users\Bienvenue a vous\AppData\Roaming\Mozilla\Firefox\Profiles\pwsdycql.default\Extensions\wrc@avast.com.xpi [2017-09-02]
FF Extension: (Adblock Plus) - C:\Users\Bienvenue a vous\AppData\Roaming\Mozilla\Firefox\Profiles\pwsdycql.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-10-01]
FF Extension: (Activity Stream) - C:\Program Files (x86)\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-09-29] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-12] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-12] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.7\\npsitesafety.dll [Pas de fichier]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
Chrome:
=======
CHR NewTab: Default -> Active:"chrome-extension://clgckgfbhciacomhlchmgdnplmdiadbj/newtab.html"
CHR Profile: C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default [2017-10-02]
CHR Extension: (Google Slides) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-02]
CHR Extension: (Google Docs) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-02]
CHR Extension: (Google Drive) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-02]
CHR Extension: (YouTube) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-02]
CHR Extension: (Adblock Plus) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-10-02]
CHR Extension: (Handy Tab) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\clgckgfbhciacomhlchmgdnplmdiadbj [2017-10-02]
CHR Extension: (Avast SafePrice) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-10-02]
CHR Extension: (Google Sheets) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-02]
CHR Extension: (Avast Online Security) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-02]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-02]
CHR Extension: (Gmail) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-02]
CHR Extension: (Chrome Media Router) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-02]
CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clgckgfbhciacomhlchmgdnplmdiadbj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-09-07] (Apple Inc.)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7452288 2017-09-14] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [275208 2017-09-14] (AVAST Software)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1428656 2017-09-14] (AVG Technologies CZ, s.r.o.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-27] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-27] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [49992 2017-09-20] (Dropbox, Inc.)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Fichier non signé]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 vToolbarUpdater40.3.7; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.7\ToolbarUpdater.exe [1354312 2017-04-02] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [320528 2017-09-14] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [198976 2017-09-14] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [343296 2017-09-14] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [57736 2017-09-14] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [47016 2017-09-14] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [41832 2017-09-14] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [147784 2017-09-14] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [110376 2017-09-14] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [84416 2017-09-14] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1016384 2017-09-14] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [590880 2017-09-14] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [199312 2017-09-18] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [361784 2017-09-25] (AVAST Software)
R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
S3 avgTap; C:\WINDOWS\system32\DRIVERS\avgTap.sys [54888 2016-12-09] (The OpenVPN Project)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
U1 aswbdisk; pas de ImagePath
S3 dbx; system32\DRIVERS\dbx.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-10-02 19:38 - 2017-10-02 19:38 - 000021381 _____ C:\Users\Bienvenue a vous\Downloads\FRST.txt
2017-10-02 19:37 - 2017-10-02 19:38 - 000000000 ____D C:\FRST
2017-10-02 19:37 - 2017-10-02 19:37 - 002399744 _____ (Farbar) C:\Users\Bienvenue a vous\Downloads\FRST64.exe
2017-10-02 19:07 - 2017-10-02 19:07 - 000000210 _____ C:\Users\Bienvenue
2017-10-02 19:05 - 2017-10-02 19:05 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-10-02 19:05 - 2017-10-02 19:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-10-02 19:04 - 2017-10-02 19:04 - 001324424 _____ (RARLab) C:\Users\Bienvenue a vous\Downloads\WinRAR.exe
2017-10-02 19:02 - 2017-10-02 19:02 - 002900864 _____ C:\Users\Bienvenue a vous\Downloads\ZHPDiag3.exe
2017-10-02 18:50 - 2017-10-02 18:50 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-10-02 18:44 - 2017-10-02 18:46 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\Bienvenue a vous\Downloads\SpyHunter-Installer (1).exe
2017-10-02 18:23 - 2017-10-02 18:23 - 000002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-10-02 18:23 - 2017-10-02 18:23 - 000002275 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-10-02 18:20 - 2017-10-02 18:21 - 001130328 _____ (Google Inc.) C:\Users\Bienvenue a vous\Downloads\ChromeSetup(3).exe
2017-10-02 18:15 - 2017-10-02 18:15 - 001130328 _____ (Google Inc.) C:\Users\Bienvenue a vous\Downloads\ChromeSetup(2).exe
2017-10-02 18:10 - 2017-10-02 18:36 - 000003116 _____ C:\WINDOWS\System32\Tasks\WinZip Malware Protector_startup
2017-10-01 19:32 - 2017-10-01 19:32 - 001622528 _____ C:\Users\Bienvenue a vous\Downloads\ResetBrowser.exe
2017-10-01 19:29 - 2017-10-01 19:35 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\WiperSoft
2017-10-01 19:25 - 2017-10-01 19:29 - 000000000 ____D C:\Program Files\WiperSoft
2017-10-01 19:24 - 2017-10-01 19:24 - 001979944 _____ (WiperSoft) C:\Users\Bienvenue a vous\Downloads\WiperSoft-installer.exe
2017-10-01 19:17 - 2017-10-01 19:17 - 001130328 _____ (Google Inc.) C:\Users\Bienvenue a vous\Downloads\ChromeSetup(1).exe
2017-10-01 18:55 - 2017-10-01 18:57 - 000016039 _____ C:\Users\Bienvenue a vous\Desktop\ZHPCleaner.txt
2017-10-01 18:46 - 2017-10-02 19:08 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\ZHP
2017-10-01 18:46 - 2017-10-02 19:08 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\ZHP
2017-10-01 18:45 - 2017-10-01 18:45 - 002882432 _____ C:\Users\Bienvenue a vous\Downloads\zhpcleaner_2017.9.13.157.exe
2017-10-01 17:37 - 2017-10-01 17:38 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\Bienvenue a vous\Downloads\SpyHunter-Installer.exe
2017-10-01 14:21 - 2017-09-26 11:53 - 002459284 _____ C:\Users\Bienvenue a vous\Desktop\Pinnacle Studio Ultimate 21.1.0 + Keygen (FULL).rar
2017-10-01 14:16 - 2017-10-01 14:17 - 002459837 _____ C:\Users\Bienvenue a vous\Downloads\#P.S.U.21.1.0.K#.rar
2017-10-01 12:05 - 2017-10-01 12:05 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\ElevatedDiagnostics
2017-10-01 12:03 - 2017-10-01 12:03 - 000487072 _____ ( ) C:\Users\Bienvenue a vous\Downloads\pinnacle_14.exe
2017-10-01 12:01 - 2017-10-02 18:13 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\uTorrent
2017-10-01 11:59 - 2017-10-01 11:59 - 000487072 _____ ( ) C:\Users\Bienvenue a vous\Downloads\pinnacle_14_torrent.exe
2017-10-01 11:59 - 2017-10-01 11:59 - 000487072 _____ ( ) C:\Users\Bienvenue a vous\Downloads\pinnacle_14_torrent (1).exe
2017-10-01 11:59 - 2017-10-01 11:59 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf
2017-10-01 11:57 - 2017-10-01 11:58 - 001750232 _____ (BitTorrent Inc.) C:\Users\Bienvenue a vous\Downloads\uTorrent.exe
2017-09-30 00:21 - 2017-09-30 00:23 - 004077357 _____ C:\Users\Bienvenue a vous\Downloads\Plus belle la vie episode 3374 by Rashanseri35 - Dailymotion.mp4
2017-09-30 00:12 - 2017-09-30 00:22 - 073430304 _____ C:\Users\Bienvenue a vous\Downloads\Plus belle la vie episode 3373 by Rashanseri35 - Dailymotion.mp4
2017-09-29 23:17 - 2017-09-29 23:33 - 091574478 _____ C:\Users\Bienvenue a vous\Downloads\Plus belle la vie episode 3376 by Rashanseri35 - Dailymotion.mp4
2017-09-29 23:15 - 2017-09-29 23:17 - 004625888 _____ C:\Users\Bienvenue a vous\Downloads\Plus belle la vie episode 3377 by Mirasalto - Dailymotion.mp4
2017-09-29 23:09 - 2017-09-29 23:30 - 123894019 _____ C:\Users\Bienvenue a vous\Downloads\Plus Belle la Vie 3375 - PBLV 3375 by Unlucky - Dailymotion.mp4
2017-09-29 23:08 - 2017-09-29 23:12 - 001470828 _____ C:\Users\Bienvenue a vous\Downloads\Plus Belle la Vie 3374 - PBLV 3374 by Unlucky - Dailymotion.mp4
2017-09-29 23:07 - 2017-09-29 23:09 - 000456412 _____ C:\Users\Bienvenue a vous\Downloads\Plus Belle la Vie 3373 - PBLV 3373 by Unlucky - Dailymotion.mp4
2017-09-29 22:13 - 2017-09-29 22:21 - 000000081 _____ C:\Users\Bienvenue a vous\Downloads\téléchargement (1).htm
2017-09-29 21:33 - 2017-09-29 21:33 - 000029299 _____ C:\Users\Bienvenue a vous\Downloads\Grey's Anatomy S14E02 VOSTFR HDTV.torrent
2017-09-26 22:09 - 2017-09-26 22:26 - 189114950 _____ C:\Users\Bienvenue a vous\Downloads\PNL - Jusqu'au dernier gramme [Clip Officiel] - Part. Finale.mp4
2017-09-26 22:07 - 2017-09-26 22:22 - 097782278 _____ C:\Users\Bienvenue a vous\Downloads\PNL - Bené [Clip Officiel] - Part.3.mp4
2017-09-26 22:05 - 2017-09-26 22:20 - 057243135 _____ C:\Users\Bienvenue a vous\Downloads\PNL - DA [Clip Officiel].mp4
2017-09-26 22:02 - 2017-09-26 22:22 - 092785080 _____ C:\Users\Bienvenue a vous\Downloads\PNL - Onizuka [Clip Officiel] - Part.2.mp4
2017-09-26 22:01 - 2017-09-26 22:20 - 076300025 _____ C:\Users\Bienvenue a vous\Downloads\PNL - J'Suis QLF [Clip Officiel].mp4
2017-09-26 22:00 - 2017-09-26 22:09 - 061126874 _____ C:\Users\Bienvenue a vous\Downloads\PNL - Naha [Clip Officiel] - Part.1.mp4
2017-09-24 16:49 - 2017-09-24 16:49 - 000001761 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-09-24 16:49 - 2017-09-24 16:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-09-24 16:49 - 2017-09-24 16:49 - 000000000 ____D C:\Program Files\iPod
2017-09-24 16:48 - 2017-09-24 16:49 - 000000000 ____D C:\Program Files\iTunes
2017-09-24 16:44 - 2017-09-24 16:44 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
2017-09-24 16:44 - 2017-09-24 16:44 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2017-09-22 00:51 - 2017-09-22 00:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-09-21 16:13 - 2017-09-21 16:13 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\Steam
2017-09-21 15:51 - 2017-09-21 15:51 - 001446792 _____ C:\Users\Bienvenue a vous\Downloads\SteamSetup.exe
2017-09-20 21:08 - 2017-09-20 21:10 - 000000953 _____ C:\Users\Bienvenue a vous\Downloads\téléchargement.htm
2017-09-20 20:48 - 2017-09-20 20:54 - 001017620 _____ C:\Users\Bienvenue a vous\Downloads\Booba - DKR (Clip officiel).mp3.crdownload
2017-09-20 19:43 - 2017-09-20 19:43 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\FlvtoConverter
2017-09-20 19:42 - 2017-09-20 19:42 - 000000000 ____D C:\Users\Bienvenue a vous\Documents\YouTubeDownloads
2017-09-20 19:42 - 2017-09-20 19:42 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\FlvtoYoutubeDownloader
2017-09-20 19:41 - 2017-09-20 19:41 - 000002331 _____ C:\Users\Bienvenue a vous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto YouTube Downloader.lnk
2017-09-20 19:41 - 2017-09-20 19:41 - 000001446 _____ C:\Users\Bienvenue a vous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall Flvto YouTube Downloader.lnk
2017-09-20 19:41 - 2017-09-20 19:41 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-20 19:37 - 2017-09-22 17:03 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\Flvto YouTube Downloader
2017-09-20 19:37 - 2017-09-20 19:37 - 000275856 _____ (Hotger) C:\Users\Bienvenue a vous\Downloads\FYDLoad_inflvto_1.exe
2017-09-20 18:48 - 2017-09-20 18:48 - 000049992 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2017-09-20 18:48 - 2017-09-20 18:48 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2017-09-20 18:48 - 2017-09-20 18:48 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2017-09-20 18:48 - 2017-09-20 18:48 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2017-09-15 20:06 - 2017-09-15 20:06 - 001204208 _____ (Adobe Systems Incorporated) C:\Users\Bienvenue a vous\Downloads\flashplayer27_ga_install.exe
2017-09-14 23:39 - 2017-09-14 23:39 - 000401488 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-09-13 15:50 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-09-13 15:50 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-09-13 15:50 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-09-13 15:50 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-09-13 15:50 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-09-13 15:50 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-09-13 15:50 - 2017-08-13 18:15 - 007078912 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2017-09-13 15:50 - 2017-08-13 17:52 - 005274624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2017-09-13 15:50 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-09-13 15:50 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-09-13 15:50 - 2017-08-13 17:25 - 007797248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-09-13 15:50 - 2017-08-13 17:18 - 005270016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-09-13 15:50 - 2017-08-12 11:30 - 022361344 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-09-13 15:50 - 2017-08-12 11:26 - 019789736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-09-13 15:50 - 2017-08-11 05:30 - 004170240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-09-13 15:50 - 2017-08-11 03:43 - 000865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-09-13 15:49 - 2017-08-18 00:07 - 000537200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-09-13 15:49 - 2017-08-18 00:03 - 000450392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-09-13 15:49 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-09-13 15:49 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-09-13 15:49 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-09-13 15:49 - 2017-08-13 18:05 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-09-13 15:49 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-09-13 15:49 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-09-13 15:49 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-09-13 15:49 - 2017-08-13 17:52 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll
2017-09-13 15:49 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-09-13 15:49 - 2017-08-13 17:44 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-09-13 15:49 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-09-13 15:49 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-09-13 15:49 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-09-13 15:49 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-09-13 15:49 - 2017-08-12 02:39 - 001364552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-09-13 15:49 - 2017-08-12 01:59 - 007440728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-09-13 15:49 - 2017-08-12 01:58 - 001737600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-09-13 15:49 - 2017-08-12 01:58 - 001502000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-09-13 15:49 - 2017-08-11 22:46 - 000367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll
2017-09-13 15:49 - 2017-08-11 22:29 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll
2017-09-13 15:49 - 2017-08-11 22:13 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-09-13 15:49 - 2017-08-11 05:27 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2017-09-13 15:49 - 2017-08-11 05:27 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-09-13 15:49 - 2017-08-11 04:38 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-09-13 15:49 - 2017-08-11 04:08 - 001753600 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-09-13 15:49 - 2017-08-11 04:08 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-09-13 15:49 - 2017-08-11 04:02 - 001084928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-09-13 15:49 - 2017-08-11 03:52 - 001491456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-09-13 15:49 - 2017-08-11 03:44 - 001095680 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-09-13 15:49 - 2017-08-06 23:20 - 000607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-09-13 15:49 - 2017-08-06 09:13 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-09-13 15:49 - 2017-07-17 21:53 - 004298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-09-13 15:49 - 2017-07-17 01:55 - 003551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-09-13 15:49 - 2017-07-14 01:03 - 002013528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-09-13 15:49 - 2017-07-12 22:29 - 000420440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2017-09-13 15:49 - 2017-07-12 22:29 - 000075440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2017-09-13 15:49 - 2017-07-12 22:25 - 000308872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2017-09-13 15:49 - 2017-07-12 22:25 - 000066112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2017-09-13 15:49 - 2017-07-08 05:14 - 000100184 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
2017-09-13 15:48 - 2017-08-19 19:27 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2017-09-13 15:48 - 2017-08-19 18:48 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2017-09-13 15:48 - 2017-08-18 00:07 - 000140016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-09-13 15:48 - 2017-08-18 00:03 - 000136832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-09-13 15:48 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-09-13 15:48 - 2017-08-15 16:01 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-09-13 15:48 - 2017-08-13 19:19 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
2017-09-13 15:48 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-09-13 15:48 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-09-13 15:48 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2017-09-13 15:48 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-09-13 15:48 - 2017-08-13 18:21 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-09-13 15:48 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-09-13 15:48 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-09-13 15:48 - 2017-08-13 18:14 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-09-13 15:48 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-09-13 15:48 - 2017-08-13 17:51 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-09-13 15:48 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-09-13 15:48 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-09-13 15:48 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-09-13 15:48 - 2017-08-11 03:49 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
2017-09-13 15:48 - 2017-08-11 03:41 - 000307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
2017-09-13 15:48 - 2017-07-22 20:34 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsium.dll
2017-09-13 15:48 - 2017-07-22 19:32 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsium.dll
2017-09-13 15:48 - 2017-07-08 21:03 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2017-09-13 15:48 - 2017-07-08 20:43 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2017-09-13 15:48 - 2017-07-08 20:30 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2017-09-13 15:48 - 2017-07-08 20:20 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-09-13 15:48 - 2017-07-08 19:25 - 001436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-09-13 15:48 - 2017-07-08 19:00 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-09-11 14:18 - 2017-09-11 14:18 - 000000436 _____ C:\Users\Bienvenue a vous\Downloads\url.htm
2017-09-07 21:20 - 2017-09-07 21:20 - 000000000 ____D C:\Users\Bienvenue a vous\Documents\ASUS
2017-09-04 17:01 - 2017-09-20 19:33 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\Apple Computer
2017-09-04 17:01 - 2017-09-04 17:01 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\Apple Computer
2017-09-04 16:59 - 2017-09-24 16:44 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-09-04 16:59 - 2017-09-04 16:59 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\Apple
2017-09-04 16:59 - 2017-09-04 16:59 - 000000000 ____D C:\ProgramData\Apple Computer
2017-09-04 16:58 - 2017-09-04 16:58 - 000000000 ____D C:\Program Files\Bonjour
2017-09-04 16:58 - 2017-09-04 16:58 - 000000000 ____D C:\Program Files (x86)\Bonjour
2017-09-04 16:57 - 2017-09-04 16:58 - 000000000 ____D C:\Program Files\Common Files\Apple
2017-09-04 16:56 - 2017-09-04 16:59 - 000000000 ____D C:\ProgramData\Apple
2017-09-04 16:55 - 2017-09-04 16:55 - 000000000 _____ C:\WINDOWS\SysWOW64\last.dump
2017-09-04 16:50 - 2017-09-04 16:54 - 261024072 _____ (Apple Inc.) C:\Users\Bienvenue a vous\Downloads\iTunes64Setup.exe
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-10-02 19:33 - 2017-07-13 22:18 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\LocalLow\Mozilla
2017-10-02 19:16 - 2017-05-16 19:18 - 000000296 _____ C:\WINDOWS\Tasks\{B7258769-4D82-40CF-B9C0-70D1592E2865}.job
2017-10-02 19:10 - 2016-11-21 01:19 - 000003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3194625449-3299177095-439917427-1001
2017-10-02 19:05 - 2017-06-28 13:56 - 000000000 ____D C:\Program Files (x86)\WinRAR
2017-10-02 18:34 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-02 18:33 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2017-10-02 18:23 - 2016-11-21 01:19 - 000000000 ____D C:\Program Files (x86)\Google
2017-10-02 18:21 - 2017-04-02 20:10 - 000003600 _____ C:\WINDOWS\System32\Tasks\AVG EUpdate Task
2017-10-02 18:07 - 2016-11-21 01:13 - 000000401 _____ C:\Users\Bienvenue a vous\AppData\Roaming\sp_data.sys
2017-10-02 18:06 - 2017-09-01 23:51 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-10-02 18:06 - 2017-07-13 22:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-02 18:04 - 2017-01-29 20:11 - 000000000 ____D C:\Program Files\Sandboxie
2017-10-02 18:02 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2017-10-02 17:52 - 2016-12-12 03:26 - 000003984 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E8DC47EB-A450-4B08-8499-42EDC30ECEF7}
2017-10-01 19:35 - 2016-11-25 21:50 - 000000000 ____D C:\Users\Bienvenue a vous\Desktop\GameCapture
2017-10-01 19:35 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-10-01 12:01 - 2016-12-07 14:16 - 000000290 __RSH C:\ProgramData\ntuser.pol
2017-09-29 20:23 - 2017-07-07 16:26 - 000000000 ____D C:\Program Files (x86)\Nostale_FR
2017-09-25 14:40 - 2017-06-05 01:02 - 000361784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2017-09-22 19:12 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-22 19:12 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-22 00:51 - 2017-01-27 15:43 - 000000000 ____D C:\Program Files (x86)\Dropbox
2017-09-19 14:46 - 2017-06-05 01:11 - 000003920 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1496617857
2017-09-19 14:46 - 2017-06-05 01:11 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-09-19 14:45 - 2016-12-07 13:49 - 000000000 ____D C:\Users\Bienvenue a vous
2017-09-18 23:39 - 2017-06-05 01:02 - 000199312 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2017-09-16 13:31 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2017-09-14 23:39 - 2017-06-05 01:02 - 000590880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000147784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000110376 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000084416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000047016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000003914 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-09-14 23:38 - 2017-06-05 01:09 - 000041832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 001016384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 000343296 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 000320528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 000198976 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 000057736 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-09-14 19:50 - 2012-08-17 02:52 - 000000000 ____D C:\ProgramData\Adobe
2017-09-14 19:35 - 2013-08-22 16:44 - 000337928 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-09-14 19:29 - 2013-08-22 17:36 - 000000000 ___RD C:\WINDOWS\ToastData
2017-09-13 16:21 - 2016-11-23 23:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-09-13 16:18 - 2016-11-23 23:05 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-09-13 16:18 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-09-12 15:24 - 2017-07-13 22:21 - 000004670 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-09-12 15:24 - 2017-07-13 22:17 - 000004496 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-09-12 15:24 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-09-12 15:24 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-09-07 21:20 - 2016-11-21 01:10 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\VirtualStore
2017-09-03 21:26 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-09-03 19:37 - 2012-07-26 10:12 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-09-02 01:54 - 2017-08-10 13:57 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-09-02 01:54 - 2017-08-10 13:57 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
==================== Fichiers à la racine de certains dossiers =======
2017-05-14 14:59 - 2017-05-15 15:02 - 000000046 _____ () C:\Users\Bienvenue a vous\AppData\Roaming\MCVi2UserDetail.ini
2016-11-21 01:18 - 2016-11-21 01:18 - 000017885 _____ () C:\Users\Bienvenue a vous\AppData\Roaming\Sahokerogebu
2016-11-21 01:13 - 2017-10-02 18:07 - 000000401 _____ () C:\Users\Bienvenue a vous\AppData\Roaming\sp_data.sys
2016-11-22 13:26 - 2017-05-16 20:16 - 000000307 _____ () C:\Users\Bienvenue a vous\AppData\Roaming\WB.CFG
2012-08-17 02:52 - 2012-07-30 08:03 - 000000217 _____ () C:\ProgramData\SetStretch.cmd
2012-08-17 02:52 - 2009-07-22 12:04 - 000024576 _____ () C:\ProgramData\SetStretch.exe
Fichiers à déplacer ou supprimer:
====================
C:\Windows\Tasks\{B7258769-4D82-40CF-B9C0-70D1592E2865}.job
Certains fichiers dans TEMP:
====================
2017-01-27 16:13 - 2017-01-27 16:13 - 000053248 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\0nnxt4ai.dll
2017-01-28 21:51 - 2017-01-28 21:51 - 000019456 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\1_-xfgpe.dll
2016-10-12 13:36 - 2016-10-12 13:36 - 000211576 _____ (383 Media, Inc.) C:\Users\Bienvenue a vous\AppData\Local\Temp\DRHelper_installFinish.exe
2016-10-12 13:36 - 2016-10-12 13:36 - 000211576 _____ (383 Media, Inc.) C:\Users\Bienvenue a vous\AppData\Local\Temp\DRHelper_installStart.exe
2017-01-28 21:51 - 2017-01-28 21:51 - 000006656 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\kg_v5jay.dll
2017-01-29 23:38 - 2017-01-29 23:38 - 000019456 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\kwvchzem.dll
2017-01-27 16:13 - 2017-01-27 16:13 - 000006656 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\ofapw4ap.dll
2017-01-29 20:11 - 2017-01-29 20:11 - 005485792 _____ (Sandboxie Holdings, LLC) C:\Users\Bienvenue a vous\AppData\Local\Temp\SandboxieInstall-64-bit-182033937.exe
2016-08-16 09:48 - 2016-08-16 09:48 - 000488960 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\sqlite3.exe
2017-01-27 16:20 - 2017-01-27 16:20 - 000040960 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\xsqhwoyz.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-09-25 21:14
==================== Fin de FRST.txt ============================
Exécuté par Bienvenue a vous (administrateur) sur BIENVENUE (02-10-2017 19:38:07)
Exécuté depuis C:\Users\Bienvenue a vous\Downloads
Profils chargés: Bienvenue a vous (Profils disponibles: Bienvenue a vous)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Nico Mak Computing) C:\Program Files (x86)\WinZip Malware Protector\WinZipMalwareProtector.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.7\ToolbarUpdater.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12936848 2012-07-13] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe********************************************* [107192 2012-09-11] ()
HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239592 2017-09-14] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [239856 2017-09-14] (AVAST Software)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-09-11] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-09-24] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mcui_exe] => "C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\AsusWSPanel.exe [3417984 2012-08-28] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3481912 2017-09-20] (Dropbox, Inc.)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2183752 2017-04-02] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3194625449-3299177095-439917427-1001\...\Run: [Chromium] => "c:\users\bienvenue a vous\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory=Default --restore-last-session
HKU\S-1-5-21-3194625449-3299177095-439917427-1001\...\Run: [Flvto YouTube Downloader] => "C:\Users\Bienvenue a vous\AppData\Local\Flvto YouTube Downloader\FlvtoYoutubeDownloader.Redesign.exe" /minimize
GroupPolicy: Restriction - Chrome <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{40AA9D97-CA12-4CA6-8661-ED15570560F4}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{97B055FE-DD25-4A59-A2F4-3F38BB7EBD21}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{D2562CFA-672D-4392-BA96-BBD5B9DD6AD5}: [DhcpNameServer] 192.168.88.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_17_04_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CzzyD0D0Ezz0EtAyEtA0EyB0ByCyCtN0D0Tzu0StCzzyDtAtN1L2XzutAtFtByDtFtCtFtCtDzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StByCzy0A0B0CyB0AtGtD0B0F0CtGyCtDzy0DtGtB0AtAtBtGyEyEtDyDtD0AtA0AtB0AtC0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCyD0EyBtBtC0F0CtGtCyCzzyCtGyE0B0C0BtGzzyEtA0AtGyDyByC0FyCtB0CyCyD0B0BtD2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCyBzytB%26cr%3D1712669871%26a%3Dwbf_adsrch_17_04_ssg01%26os_ver%3D6.3%26os%3DWindows%2B8.1
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_adsrch_17_04_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0D0CzzyD0D0Ezz0EtAyEtA0EyB0ByCyCtN0D0Tzu0StCzzyDtAtN1L2XzutAtFtByDtFtCtFtCtDzztN1L1Czu1ByEtN1L1G1B1V1N2Y1L1Qzu2StByCzy0A0B0CyB0AtGtD0B0F0CtGyCtDzy0DtGtB0AtAtBtGyEyEtDyDtD0AtA0AtB0AtC0B2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCyD0EyBtBtC0F0CtGtCyCzzyCtGyE0B0C0BtGzzyEtA0AtGyDyByC0FyCtB0CyCyD0B0BtD2QtN0A0LzutBtN1B2Z1V1T1S1NzutCtCyBzytB%26cr%3D1712669871%26a%3Dwbf_adsrch_17_04_ssg01%26os_ver%3D6.3%26os%3DWindows%2B8.1
HKU\S-1-5-21-3194625449-3299177095-439917427-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3194625449-3299177095-439917427-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ef374c7b&q={searchTerms}
SearchScopes: HKLM -> {26080cad-4adc-49ac-8c63-eda16e595cbd} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ef374c7b&q={searchTerms}
SearchScopes: HKLM-x32 -> {26080cad-4adc-49ac-8c63-eda16e595cbd} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-3194625449-3299177095-439917427-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://www.bing.com/search?FORM=INCOH2&PC=IC05&PTAG=ICO-ef374c7b&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-09-14] (AVAST Software)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-21] (Google Inc.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-09-14] (AVAST Software)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-11-21] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-21] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-11-21] (Google Inc.)
Toolbar: HKU\S-1-5-21-3194625449-3299177095-439917427-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-11-21] (Google Inc.)
FireFox:
========
FF DefaultProfile: pwsdycql.default
FF ProfilePath: C:\Users\Bienvenue a vous\AppData\Roaming\Mozilla\Firefox\Profiles\pwsdycql.default [2017-10-02]
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\pwsdycql.default -> Yahoo! Powered
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\pwsdycql.default -> Yahoo! Powered
FF Homepage: Mozilla\Firefox\Profiles\pwsdycql.default -> hxxp://www.google.fr/
FF Keyword.URL: Mozilla\Firefox\Profiles\pwsdycql.default -> user_pref("keyword.URL", true);
FF Extension: (Avast SafePrice) - C:\Users\Bienvenue a vous\AppData\Roaming\Mozilla\Firefox\Profiles\pwsdycql.default\Extensions\sp@avast.com.xpi [2017-09-02]
FF Extension: (Avast Online Security) - C:\Users\Bienvenue a vous\AppData\Roaming\Mozilla\Firefox\Profiles\pwsdycql.default\Extensions\wrc@avast.com.xpi [2017-09-02]
FF Extension: (Adblock Plus) - C:\Users\Bienvenue a vous\AppData\Roaming\Mozilla\Firefox\Profiles\pwsdycql.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-10-01]
FF Extension: (Activity Stream) - C:\Program Files (x86)\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-09-29] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_27_0_0_130.dll [2017-09-12] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_130.dll [2017-09-12] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.7\\npsitesafety.dll [Pas de fichier]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
Chrome:
=======
CHR NewTab: Default -> Active:"chrome-extension://clgckgfbhciacomhlchmgdnplmdiadbj/newtab.html"
CHR Profile: C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default [2017-10-02]
CHR Extension: (Google Slides) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-02]
CHR Extension: (Google Docs) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-02]
CHR Extension: (Google Drive) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-02]
CHR Extension: (YouTube) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-02]
CHR Extension: (Adblock Plus) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-10-02]
CHR Extension: (Handy Tab) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\clgckgfbhciacomhlchmgdnplmdiadbj [2017-10-02]
CHR Extension: (Avast SafePrice) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-10-02]
CHR Extension: (Google Sheets) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-02]
CHR Extension: (Google Docs hors connexion) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-02]
CHR Extension: (Avast Online Security) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-02]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-02]
CHR Extension: (Gmail) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-02]
CHR Extension: (Chrome Media Router) - C:\Users\Bienvenue a vous\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-02]
CHR HKLM-x32\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [clgckgfbhciacomhlchmgdnplmdiadbj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-09-07] (Apple Inc.)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7452288 2017-09-14] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [275208 2017-09-14] (AVAST Software)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1428656 2017-09-14] (AVG Technologies CZ, s.r.o.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-27] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-01-27] (Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [49992 2017-09-20] (Dropbox, Inc.)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2451456 2012-07-13] (Realsil Microelectronics Inc.) [Fichier non signé]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 vToolbarUpdater40.3.7; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.7\ToolbarUpdater.exe [1354312 2017-04-02] (AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [320528 2017-09-14] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [198976 2017-09-14] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [343296 2017-09-14] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [57736 2017-09-14] (AVAST Software s.r.o.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [47016 2017-09-14] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [41832 2017-09-14] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [147784 2017-09-14] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [110376 2017-09-14] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [84416 2017-09-14] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1016384 2017-09-14] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [590880 2017-09-14] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [199312 2017-09-18] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [361784 2017-09-25] (AVAST Software)
R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
S3 avgTap; C:\WINDOWS\system32\DRIVERS\avgTap.sys [54888 2016-12-09] (The OpenVPN Project)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
U1 aswbdisk; pas de ImagePath
S3 dbx; system32\DRIVERS\dbx.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-10-02 19:38 - 2017-10-02 19:38 - 000021381 _____ C:\Users\Bienvenue a vous\Downloads\FRST.txt
2017-10-02 19:37 - 2017-10-02 19:38 - 000000000 ____D C:\FRST
2017-10-02 19:37 - 2017-10-02 19:37 - 002399744 _____ (Farbar) C:\Users\Bienvenue a vous\Downloads\FRST64.exe
2017-10-02 19:07 - 2017-10-02 19:07 - 000000210 _____ C:\Users\Bienvenue
2017-10-02 19:05 - 2017-10-02 19:05 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-10-02 19:05 - 2017-10-02 19:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-10-02 19:04 - 2017-10-02 19:04 - 001324424 _____ (RARLab) C:\Users\Bienvenue a vous\Downloads\WinRAR.exe
2017-10-02 19:02 - 2017-10-02 19:02 - 002900864 _____ C:\Users\Bienvenue a vous\Downloads\ZHPDiag3.exe
2017-10-02 18:50 - 2017-10-02 18:50 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-10-02 18:44 - 2017-10-02 18:46 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\Bienvenue a vous\Downloads\SpyHunter-Installer (1).exe
2017-10-02 18:23 - 2017-10-02 18:23 - 000002287 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-10-02 18:23 - 2017-10-02 18:23 - 000002275 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-10-02 18:20 - 2017-10-02 18:21 - 001130328 _____ (Google Inc.) C:\Users\Bienvenue a vous\Downloads\ChromeSetup(3).exe
2017-10-02 18:15 - 2017-10-02 18:15 - 001130328 _____ (Google Inc.) C:\Users\Bienvenue a vous\Downloads\ChromeSetup(2).exe
2017-10-02 18:10 - 2017-10-02 18:36 - 000003116 _____ C:\WINDOWS\System32\Tasks\WinZip Malware Protector_startup
2017-10-01 19:32 - 2017-10-01 19:32 - 001622528 _____ C:\Users\Bienvenue a vous\Downloads\ResetBrowser.exe
2017-10-01 19:29 - 2017-10-01 19:35 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\WiperSoft
2017-10-01 19:25 - 2017-10-01 19:29 - 000000000 ____D C:\Program Files\WiperSoft
2017-10-01 19:24 - 2017-10-01 19:24 - 001979944 _____ (WiperSoft) C:\Users\Bienvenue a vous\Downloads\WiperSoft-installer.exe
2017-10-01 19:17 - 2017-10-01 19:17 - 001130328 _____ (Google Inc.) C:\Users\Bienvenue a vous\Downloads\ChromeSetup(1).exe
2017-10-01 18:55 - 2017-10-01 18:57 - 000016039 _____ C:\Users\Bienvenue a vous\Desktop\ZHPCleaner.txt
2017-10-01 18:46 - 2017-10-02 19:08 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\ZHP
2017-10-01 18:46 - 2017-10-02 19:08 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\ZHP
2017-10-01 18:45 - 2017-10-01 18:45 - 002882432 _____ C:\Users\Bienvenue a vous\Downloads\zhpcleaner_2017.9.13.157.exe
2017-10-01 17:37 - 2017-10-01 17:38 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\Bienvenue a vous\Downloads\SpyHunter-Installer.exe
2017-10-01 14:21 - 2017-09-26 11:53 - 002459284 _____ C:\Users\Bienvenue a vous\Desktop\Pinnacle Studio Ultimate 21.1.0 + Keygen (FULL).rar
2017-10-01 14:16 - 2017-10-01 14:17 - 002459837 _____ C:\Users\Bienvenue a vous\Downloads\#P.S.U.21.1.0.K#.rar
2017-10-01 12:05 - 2017-10-01 12:05 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\ElevatedDiagnostics
2017-10-01 12:03 - 2017-10-01 12:03 - 000487072 _____ ( ) C:\Users\Bienvenue a vous\Downloads\pinnacle_14.exe
2017-10-01 12:01 - 2017-10-02 18:13 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\uTorrent
2017-10-01 11:59 - 2017-10-01 11:59 - 000487072 _____ ( ) C:\Users\Bienvenue a vous\Downloads\pinnacle_14_torrent.exe
2017-10-01 11:59 - 2017-10-01 11:59 - 000487072 _____ ( ) C:\Users\Bienvenue a vous\Downloads\pinnacle_14_torrent (1).exe
2017-10-01 11:59 - 2017-10-01 11:59 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf
2017-10-01 11:57 - 2017-10-01 11:58 - 001750232 _____ (BitTorrent Inc.) C:\Users\Bienvenue a vous\Downloads\uTorrent.exe
2017-09-30 00:21 - 2017-09-30 00:23 - 004077357 _____ C:\Users\Bienvenue a vous\Downloads\Plus belle la vie episode 3374 by Rashanseri35 - Dailymotion.mp4
2017-09-30 00:12 - 2017-09-30 00:22 - 073430304 _____ C:\Users\Bienvenue a vous\Downloads\Plus belle la vie episode 3373 by Rashanseri35 - Dailymotion.mp4
2017-09-29 23:17 - 2017-09-29 23:33 - 091574478 _____ C:\Users\Bienvenue a vous\Downloads\Plus belle la vie episode 3376 by Rashanseri35 - Dailymotion.mp4
2017-09-29 23:15 - 2017-09-29 23:17 - 004625888 _____ C:\Users\Bienvenue a vous\Downloads\Plus belle la vie episode 3377 by Mirasalto - Dailymotion.mp4
2017-09-29 23:09 - 2017-09-29 23:30 - 123894019 _____ C:\Users\Bienvenue a vous\Downloads\Plus Belle la Vie 3375 - PBLV 3375 by Unlucky - Dailymotion.mp4
2017-09-29 23:08 - 2017-09-29 23:12 - 001470828 _____ C:\Users\Bienvenue a vous\Downloads\Plus Belle la Vie 3374 - PBLV 3374 by Unlucky - Dailymotion.mp4
2017-09-29 23:07 - 2017-09-29 23:09 - 000456412 _____ C:\Users\Bienvenue a vous\Downloads\Plus Belle la Vie 3373 - PBLV 3373 by Unlucky - Dailymotion.mp4
2017-09-29 22:13 - 2017-09-29 22:21 - 000000081 _____ C:\Users\Bienvenue a vous\Downloads\téléchargement (1).htm
2017-09-29 21:33 - 2017-09-29 21:33 - 000029299 _____ C:\Users\Bienvenue a vous\Downloads\Grey's Anatomy S14E02 VOSTFR HDTV.torrent
2017-09-26 22:09 - 2017-09-26 22:26 - 189114950 _____ C:\Users\Bienvenue a vous\Downloads\PNL - Jusqu'au dernier gramme [Clip Officiel] - Part. Finale.mp4
2017-09-26 22:07 - 2017-09-26 22:22 - 097782278 _____ C:\Users\Bienvenue a vous\Downloads\PNL - Bené [Clip Officiel] - Part.3.mp4
2017-09-26 22:05 - 2017-09-26 22:20 - 057243135 _____ C:\Users\Bienvenue a vous\Downloads\PNL - DA [Clip Officiel].mp4
2017-09-26 22:02 - 2017-09-26 22:22 - 092785080 _____ C:\Users\Bienvenue a vous\Downloads\PNL - Onizuka [Clip Officiel] - Part.2.mp4
2017-09-26 22:01 - 2017-09-26 22:20 - 076300025 _____ C:\Users\Bienvenue a vous\Downloads\PNL - J'Suis QLF [Clip Officiel].mp4
2017-09-26 22:00 - 2017-09-26 22:09 - 061126874 _____ C:\Users\Bienvenue a vous\Downloads\PNL - Naha [Clip Officiel] - Part.1.mp4
2017-09-24 16:49 - 2017-09-24 16:49 - 000001761 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-09-24 16:49 - 2017-09-24 16:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2017-09-24 16:49 - 2017-09-24 16:49 - 000000000 ____D C:\Program Files\iPod
2017-09-24 16:48 - 2017-09-24 16:49 - 000000000 ____D C:\Program Files\iTunes
2017-09-24 16:44 - 2017-09-24 16:44 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
2017-09-24 16:44 - 2017-09-24 16:44 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2017-09-22 00:51 - 2017-09-22 00:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-09-21 16:13 - 2017-09-21 16:13 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\Steam
2017-09-21 15:51 - 2017-09-21 15:51 - 001446792 _____ C:\Users\Bienvenue a vous\Downloads\SteamSetup.exe
2017-09-20 21:08 - 2017-09-20 21:10 - 000000953 _____ C:\Users\Bienvenue a vous\Downloads\téléchargement.htm
2017-09-20 20:48 - 2017-09-20 20:54 - 001017620 _____ C:\Users\Bienvenue a vous\Downloads\Booba - DKR (Clip officiel).mp3.crdownload
2017-09-20 19:43 - 2017-09-20 19:43 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\FlvtoConverter
2017-09-20 19:42 - 2017-09-20 19:42 - 000000000 ____D C:\Users\Bienvenue a vous\Documents\YouTubeDownloads
2017-09-20 19:42 - 2017-09-20 19:42 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\FlvtoYoutubeDownloader
2017-09-20 19:41 - 2017-09-20 19:41 - 000002331 _____ C:\Users\Bienvenue a vous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Flvto YouTube Downloader.lnk
2017-09-20 19:41 - 2017-09-20 19:41 - 000001446 _____ C:\Users\Bienvenue a vous\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Uninstall Flvto YouTube Downloader.lnk
2017-09-20 19:41 - 2017-09-20 19:41 - 000000000 ____D C:\ProgramData\Package Cache
2017-09-20 19:37 - 2017-09-22 17:03 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\Flvto YouTube Downloader
2017-09-20 19:37 - 2017-09-20 19:37 - 000275856 _____ (Hotger) C:\Users\Bienvenue a vous\Downloads\FYDLoad_inflvto_1.exe
2017-09-20 18:48 - 2017-09-20 18:48 - 000049992 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2017-09-20 18:48 - 2017-09-20 18:48 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2017-09-20 18:48 - 2017-09-20 18:48 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2017-09-20 18:48 - 2017-09-20 18:48 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2017-09-15 20:06 - 2017-09-15 20:06 - 001204208 _____ (Adobe Systems Incorporated) C:\Users\Bienvenue a vous\Downloads\flashplayer27_ga_install.exe
2017-09-14 23:39 - 2017-09-14 23:39 - 000401488 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-09-13 15:50 - 2017-08-15 16:06 - 015260160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-09-13 15:50 - 2017-08-15 15:58 - 013673984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-09-13 15:50 - 2017-08-13 20:58 - 025730560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-09-13 15:50 - 2017-08-13 18:54 - 020269056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-09-13 15:50 - 2017-08-13 18:51 - 005981696 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-09-13 15:50 - 2017-08-13 18:24 - 002291200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2017-09-13 15:50 - 2017-08-13 18:15 - 007078912 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2017-09-13 15:50 - 2017-08-13 17:52 - 005274624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2017-09-13 15:50 - 2017-08-13 17:48 - 004547072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-09-13 15:50 - 2017-08-13 17:40 - 003241472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-09-13 15:50 - 2017-08-13 17:25 - 007797248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-09-13 15:50 - 2017-08-13 17:18 - 005270016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-09-13 15:50 - 2017-08-12 11:30 - 022361344 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-09-13 15:50 - 2017-08-12 11:26 - 019789736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-09-13 15:50 - 2017-08-11 05:30 - 004170240 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-09-13 15:50 - 2017-08-11 03:43 - 000865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-09-13 15:49 - 2017-08-18 00:07 - 000537200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-09-13 15:49 - 2017-08-18 00:03 - 000450392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-09-13 15:49 - 2017-08-15 16:01 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2017-09-13 15:49 - 2017-08-13 19:04 - 002899968 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2017-09-13 15:49 - 2017-08-13 18:29 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-09-13 15:49 - 2017-08-13 18:05 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2017-09-13 15:49 - 2017-08-13 18:04 - 000807936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-09-13 15:49 - 2017-08-13 18:04 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-09-13 15:49 - 2017-08-13 18:01 - 002134528 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2017-09-13 15:49 - 2017-08-13 17:52 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll
2017-09-13 15:49 - 2017-08-13 17:44 - 000694784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-09-13 15:49 - 2017-08-13 17:44 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2017-09-13 15:49 - 2017-08-13 17:43 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2017-09-13 15:49 - 2017-08-13 17:27 - 001544704 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-09-13 15:49 - 2017-08-13 17:17 - 002767872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-09-13 15:49 - 2017-08-13 17:13 - 001314816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-09-13 15:49 - 2017-08-12 02:39 - 001364552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2017-09-13 15:49 - 2017-08-12 01:59 - 007440728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-09-13 15:49 - 2017-08-12 01:58 - 001737600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-09-13 15:49 - 2017-08-12 01:58 - 001502000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-09-13 15:49 - 2017-08-11 22:46 - 000367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPTpm12.dll
2017-09-13 15:49 - 2017-08-11 22:29 - 000425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPTpm12.dll
2017-09-13 15:49 - 2017-08-11 22:13 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-09-13 15:49 - 2017-08-11 05:27 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2017-09-13 15:49 - 2017-08-11 05:27 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2017-09-13 15:49 - 2017-08-11 04:38 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-09-13 15:49 - 2017-08-11 04:08 - 001753600 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2017-09-13 15:49 - 2017-08-11 04:08 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2017-09-13 15:49 - 2017-08-11 04:02 - 001084928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2017-09-13 15:49 - 2017-08-11 03:52 - 001491456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2017-09-13 15:49 - 2017-08-11 03:44 - 001095680 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-09-13 15:49 - 2017-08-06 23:20 - 000607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-09-13 15:49 - 2017-08-06 09:13 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-09-13 15:49 - 2017-07-17 21:53 - 004298240 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-09-13 15:49 - 2017-07-17 01:55 - 003551744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-09-13 15:49 - 2017-07-14 01:03 - 002013528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-09-13 15:49 - 2017-07-12 22:29 - 000420440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2017-09-13 15:49 - 2017-07-12 22:29 - 000075440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll
2017-09-13 15:49 - 2017-07-12 22:25 - 000308872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2017-09-13 15:49 - 2017-07-12 22:25 - 000066112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll
2017-09-13 15:49 - 2017-07-08 05:14 - 000100184 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
2017-09-13 15:48 - 2017-08-19 19:27 - 000237568 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2017-09-13 15:48 - 2017-08-19 18:48 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2017-09-13 15:48 - 2017-08-18 00:07 - 000140016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-09-13 15:48 - 2017-08-18 00:03 - 000136832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-09-13 15:48 - 2017-08-15 16:01 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2017-09-13 15:48 - 2017-08-15 16:01 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2017-09-13 15:48 - 2017-08-13 19:19 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys
2017-09-13 15:48 - 2017-08-13 19:05 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-09-13 15:48 - 2017-08-13 18:50 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-09-13 15:48 - 2017-08-13 18:28 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2017-09-13 15:48 - 2017-08-13 18:23 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2017-09-13 15:48 - 2017-08-13 18:21 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2017-09-13 15:48 - 2017-08-13 18:20 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2017-09-13 15:48 - 2017-08-13 18:17 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-09-13 15:48 - 2017-08-13 18:14 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-09-13 15:48 - 2017-08-13 18:07 - 000262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2017-09-13 15:48 - 2017-08-13 17:51 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-09-13 15:48 - 2017-08-13 17:46 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2017-09-13 15:48 - 2017-08-13 17:18 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-09-13 15:48 - 2017-08-13 17:14 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-09-13 15:48 - 2017-08-11 03:49 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll
2017-09-13 15:48 - 2017-08-11 03:41 - 000307200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll
2017-09-13 15:48 - 2017-07-22 20:34 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsium.dll
2017-09-13 15:48 - 2017-07-22 19:32 - 000027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsium.dll
2017-09-13 15:48 - 2017-07-08 21:03 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidcertstorecheck.exe
2017-09-13 15:48 - 2017-07-08 20:43 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidpolicyconverter.exe
2017-09-13 15:48 - 2017-07-08 20:30 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidsvc.dll
2017-09-13 15:48 - 2017-07-08 20:20 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-09-13 15:48 - 2017-07-08 19:25 - 001436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-09-13 15:48 - 2017-07-08 19:00 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-09-11 14:18 - 2017-09-11 14:18 - 000000436 _____ C:\Users\Bienvenue a vous\Downloads\url.htm
2017-09-07 21:20 - 2017-09-07 21:20 - 000000000 ____D C:\Users\Bienvenue a vous\Documents\ASUS
2017-09-04 17:01 - 2017-09-20 19:33 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Roaming\Apple Computer
2017-09-04 17:01 - 2017-09-04 17:01 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\Apple Computer
2017-09-04 16:59 - 2017-09-24 16:44 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-09-04 16:59 - 2017-09-04 16:59 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\Apple
2017-09-04 16:59 - 2017-09-04 16:59 - 000000000 ____D C:\ProgramData\Apple Computer
2017-09-04 16:58 - 2017-09-04 16:58 - 000000000 ____D C:\Program Files\Bonjour
2017-09-04 16:58 - 2017-09-04 16:58 - 000000000 ____D C:\Program Files (x86)\Bonjour
2017-09-04 16:57 - 2017-09-04 16:58 - 000000000 ____D C:\Program Files\Common Files\Apple
2017-09-04 16:56 - 2017-09-04 16:59 - 000000000 ____D C:\ProgramData\Apple
2017-09-04 16:55 - 2017-09-04 16:55 - 000000000 _____ C:\WINDOWS\SysWOW64\last.dump
2017-09-04 16:50 - 2017-09-04 16:54 - 261024072 _____ (Apple Inc.) C:\Users\Bienvenue a vous\Downloads\iTunes64Setup.exe
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-10-02 19:33 - 2017-07-13 22:18 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\LocalLow\Mozilla
2017-10-02 19:16 - 2017-05-16 19:18 - 000000296 _____ C:\WINDOWS\Tasks\{B7258769-4D82-40CF-B9C0-70D1592E2865}.job
2017-10-02 19:10 - 2016-11-21 01:19 - 000003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3194625449-3299177095-439917427-1001
2017-10-02 19:05 - 2017-06-28 13:56 - 000000000 ____D C:\Program Files (x86)\WinRAR
2017-10-02 18:34 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-02 18:33 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2017-10-02 18:23 - 2016-11-21 01:19 - 000000000 ____D C:\Program Files (x86)\Google
2017-10-02 18:21 - 2017-04-02 20:10 - 000003600 _____ C:\WINDOWS\System32\Tasks\AVG EUpdate Task
2017-10-02 18:07 - 2016-11-21 01:13 - 000000401 _____ C:\Users\Bienvenue a vous\AppData\Roaming\sp_data.sys
2017-10-02 18:06 - 2017-09-01 23:51 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-10-02 18:06 - 2017-07-13 22:15 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-02 18:04 - 2017-01-29 20:11 - 000000000 ____D C:\Program Files\Sandboxie
2017-10-02 18:02 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2017-10-02 17:52 - 2016-12-12 03:26 - 000003984 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E8DC47EB-A450-4B08-8499-42EDC30ECEF7}
2017-10-01 19:35 - 2016-11-25 21:50 - 000000000 ____D C:\Users\Bienvenue a vous\Desktop\GameCapture
2017-10-01 19:35 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-10-01 12:01 - 2016-12-07 14:16 - 000000290 __RSH C:\ProgramData\ntuser.pol
2017-09-29 20:23 - 2017-07-07 16:26 - 000000000 ____D C:\Program Files (x86)\Nostale_FR
2017-09-25 14:40 - 2017-06-05 01:02 - 000361784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2017-09-22 19:12 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-09-22 19:12 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-09-22 00:51 - 2017-01-27 15:43 - 000000000 ____D C:\Program Files (x86)\Dropbox
2017-09-19 14:46 - 2017-06-05 01:11 - 000003920 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1496617857
2017-09-19 14:46 - 2017-06-05 01:11 - 000001061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-09-19 14:45 - 2016-12-07 13:49 - 000000000 ____D C:\Users\Bienvenue a vous
2017-09-18 23:39 - 2017-06-05 01:02 - 000199312 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswstm.sys
2017-09-16 13:31 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2017-09-14 23:39 - 2017-06-05 01:02 - 000590880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000147784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000110376 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000084416 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000047016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-09-14 23:39 - 2017-06-05 01:02 - 000003914 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-09-14 23:38 - 2017-06-05 01:09 - 000041832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 001016384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 000343296 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 000320528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 000198976 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-09-14 23:38 - 2017-06-05 01:02 - 000057736 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-09-14 19:50 - 2012-08-17 02:52 - 000000000 ____D C:\ProgramData\Adobe
2017-09-14 19:35 - 2013-08-22 16:44 - 000337928 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-09-14 19:29 - 2013-08-22 17:36 - 000000000 ___RD C:\WINDOWS\ToastData
2017-09-13 16:21 - 2016-11-23 23:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-09-13 16:18 - 2016-11-23 23:05 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-09-13 16:18 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-09-12 15:24 - 2017-07-13 22:21 - 000004670 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-09-12 15:24 - 2017-07-13 22:17 - 000004496 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-09-12 15:24 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-09-12 15:24 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-09-07 21:20 - 2016-11-21 01:10 - 000000000 ____D C:\Users\Bienvenue a vous\AppData\Local\VirtualStore
2017-09-03 21:26 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-09-03 19:37 - 2012-07-26 10:12 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-09-02 01:54 - 2017-08-10 13:57 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-09-02 01:54 - 2017-08-10 13:57 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
==================== Fichiers à la racine de certains dossiers =======
2017-05-14 14:59 - 2017-05-15 15:02 - 000000046 _____ () C:\Users\Bienvenue a vous\AppData\Roaming\MCVi2UserDetail.ini
2016-11-21 01:18 - 2016-11-21 01:18 - 000017885 _____ () C:\Users\Bienvenue a vous\AppData\Roaming\Sahokerogebu
2016-11-21 01:13 - 2017-10-02 18:07 - 000000401 _____ () C:\Users\Bienvenue a vous\AppData\Roaming\sp_data.sys
2016-11-22 13:26 - 2017-05-16 20:16 - 000000307 _____ () C:\Users\Bienvenue a vous\AppData\Roaming\WB.CFG
2012-08-17 02:52 - 2012-07-30 08:03 - 000000217 _____ () C:\ProgramData\SetStretch.cmd
2012-08-17 02:52 - 2009-07-22 12:04 - 000024576 _____ () C:\ProgramData\SetStretch.exe
Fichiers à déplacer ou supprimer:
====================
C:\Windows\Tasks\{B7258769-4D82-40CF-B9C0-70D1592E2865}.job
Certains fichiers dans TEMP:
====================
2017-01-27 16:13 - 2017-01-27 16:13 - 000053248 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\0nnxt4ai.dll
2017-01-28 21:51 - 2017-01-28 21:51 - 000019456 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\1_-xfgpe.dll
2016-10-12 13:36 - 2016-10-12 13:36 - 000211576 _____ (383 Media, Inc.) C:\Users\Bienvenue a vous\AppData\Local\Temp\DRHelper_installFinish.exe
2016-10-12 13:36 - 2016-10-12 13:36 - 000211576 _____ (383 Media, Inc.) C:\Users\Bienvenue a vous\AppData\Local\Temp\DRHelper_installStart.exe
2017-01-28 21:51 - 2017-01-28 21:51 - 000006656 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\kg_v5jay.dll
2017-01-29 23:38 - 2017-01-29 23:38 - 000019456 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\kwvchzem.dll
2017-01-27 16:13 - 2017-01-27 16:13 - 000006656 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\ofapw4ap.dll
2017-01-29 20:11 - 2017-01-29 20:11 - 005485792 _____ (Sandboxie Holdings, LLC) C:\Users\Bienvenue a vous\AppData\Local\Temp\SandboxieInstall-64-bit-182033937.exe
2016-08-16 09:48 - 2016-08-16 09:48 - 000488960 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\sqlite3.exe
2017-01-27 16:20 - 2017-01-27 16:20 - 000040960 _____ () C:\Users\Bienvenue a vous\AppData\Local\Temp\xsqhwoyz.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-09-25 21:14
==================== Fin de FRST.txt ============================