Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-10-2017
Exécuté par Thomas (administrateur) sur THOMAS-PC (11-10-2017 13:46:08)
Exécuté depuis C:\Users\Thomas\Desktop
Profils chargés: Thomas (Profils disponibles: Thomas)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12558440 2014-06-07] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-10-10] (AVAST Software)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction - Chrome <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{48CFF69D-FEFD-4E25-B7F4-DDC24288EE04}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{DDFD1262-A6F8-44CB-BE3D-FB5319585FB2}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{E6CEA33B-44B1-4519-9FE2-058EB0CF23F1}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-309827564-2679735670-3825272786-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-10-10] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-26] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-10-10] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-26] (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ddh8lqri.default [2017-10-11]
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\ddh8lqri.default -> hxxp://www.bing.com/search
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\ddh8lqri.default -> Microsoft (Bing)
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\ddh8lqri.default -> Microsoft (Bing)
FF Homepage: Mozilla\Firefox\Profiles\ddh8lqri.default -> hxxp://www.msn.com/?pc=AV01
FF Keyword.URL: Mozilla\Firefox\Profiles\ddh8lqri.default -> hxxp://www.bing.com/search
FF Extension: (PDF Architect 2 Creator) - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2014-12-04] [non signé]
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ddh8lqri.default\searchplugins\bing-avast.xml [2014-12-24]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll [2014-11-07] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll [2014-11-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-26] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-10-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-10-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
Chrome:
=======
CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default [2017-10-11]
CHR Extension: (Google Slides) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-11]
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-11]
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-11]
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-11]
CHR Extension: (Adobe Acrobat) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-10-11]
CHR Extension: (Google Sheets) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-11]
CHR Extension: (Google Docs hors connexion) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-11]
CHR Extension: (Avast Online Security) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-11]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-11]
CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-11]
CHR Extension: (Chrome Media Router) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-11]
CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default [2017-10-11] <==== ATTENTION
CHR Extension: (Google Slides) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-11]
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-11]
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-11]
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-11]
CHR Extension: (Adobe Acrobat) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-10-11]
CHR Extension: (Google Sheets) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-11]
CHR Extension: (Google Docs hors connexion) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-11]
CHR Extension: (Avast Online Security) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-11]
CHR Extension: (Shine) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\jidbpkjafbnohlnbflllphpkfmojpdac [2017-10-11]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-11]
CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-11]
CHR Extension: (Chrome Media Router) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-11]
CHR HKLM-x32\...\Chrome\Extension: [clgckgfbhciacomhlchmgdnplmdiadbj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dgjepfldodmdfmdidhhgamnklbdibndi] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
StartMenuInternet: Google Chrome.KDAXDWZQJYORPPGQHV6DBTQHWY - C:\Users\Thomas\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7446024 2017-10-10] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-10-10] (AVAST Software)
S4 Ds3Service; D:\Téléchargements\SCP Driver\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [321032 2017-10-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-10-10] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-10-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57736 2017-10-10] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [47008 2017-10-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [147776 2017-10-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110376 2017-10-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84416 2017-10-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1020536 2017-10-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [587168 2017-10-10] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [201352 2017-10-10] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [363440 2017-10-10] (AVAST Software)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-08-21] ()
R3 frzway; C:\Windows\System32\DRIVERS\frzway.sys [34552 2015-08-27] (The OpenVPN Project)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () [Fichier non signé]
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [192960 2017-10-11] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [101824 2017-10-11] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-10-11] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [253888 2017-10-11] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [84256 2017-10-11] (Malwarebytes)
S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [121416 2012-05-12] (MotioninJoy) [Fichier non signé]
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)
S1 avadbykz; \??\C:\Windows\system32\drivers\avadbykz.sys [X]
S3 clwvd6; system32\DRIVERS\clwvd6.sys [X]
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
S1 fclcgtrf; \??\C:\Windows\system32\drivers\fclcgtrf.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-10-11 13:30 - 2017-10-11 13:33 - 000192960 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-10-11 13:30 - 2017-10-11 13:33 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-10-11 13:30 - 2017-10-11 13:30 - 000253888 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-10-11 13:30 - 2017-10-11 13:30 - 000101824 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-10-11 13:30 - 2017-10-11 13:30 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-10-11 13:29 - 2017-10-11 13:29 - 000001827 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-10-11 13:29 - 2017-10-11 13:29 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-10-11 13:29 - 2017-10-11 13:29 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-11 13:29 - 2017-08-21 07:20 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-10-11 13:28 - 2017-10-11 13:28 - 065942208 _____ (Malwarebytes ) C:\Users\Thomas\Downloads\malwarebytes-anti-malware_3-2-2-2029_fr_215092.exe
2017-10-11 13:21 - 2017-10-11 13:22 - 000000000 ____D C:\AdwCleaner
2017-10-11 13:18 - 2017-10-11 13:18 - 008250832 _____ (Malwarebytes) C:\Users\Thomas\Downloads\adwcleaner_7.0.3.1.exe
2017-10-11 12:13 - 2014-05-14 18:23 - 002477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-10-11 12:13 - 2014-05-14 18:23 - 000058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-10-11 12:13 - 2014-05-14 18:23 - 000044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-10-11 12:13 - 2014-05-14 18:21 - 002620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-10-11 12:12 - 2014-05-14 18:23 - 000700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-10-11 12:12 - 2014-05-14 18:23 - 000581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-10-11 12:12 - 2014-05-14 18:23 - 000038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-10-11 12:12 - 2014-05-14 18:23 - 000036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-10-11 12:12 - 2014-05-14 18:20 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-10-11 12:12 - 2014-05-14 18:17 - 000092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-10-11 12:12 - 2014-05-14 09:23 - 000198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-10-11 12:12 - 2014-05-14 09:23 - 000179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-10-11 12:12 - 2014-05-14 09:20 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-10-11 12:12 - 2014-05-14 09:17 - 000033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-10-11 12:06 - 2017-10-11 13:46 - 000019395 _____ C:\Users\Thomas\Desktop\FRST.txt
2017-10-11 11:42 - 2017-10-11 11:42 - 007178424 _____ (VS Revo Group ) C:\Users\Thomas\Downloads\revosetup.exe
2017-10-11 11:42 - 2017-10-11 11:42 - 000000994 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-10-11 11:42 - 2017-10-11 11:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-10-11 11:42 - 2017-10-11 11:42 - 000000000 ____D C:\Program Files\VS Revo Group
2017-10-11 04:29 - 2017-10-11 04:29 - 000000000 _____ C:\autoexec.bat
2017-10-11 04:27 - 2017-10-11 04:27 - 002755584 _____ C:\Users\Thomas\Downloads\SH-Alt-Install.exe
2017-10-11 03:48 - 2017-10-11 03:48 - 000304112 _____ ( ) C:\Users\Thomas\Downloads\cleanserp_uninstall.exe
2017-10-11 03:15 - 2017-10-11 12:43 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\ZHP
2017-10-11 03:15 - 2017-10-11 03:15 - 002946944 _____ C:\Users\Thomas\Downloads\ZHPCleaner.exe
2017-10-11 03:15 - 2017-10-11 03:15 - 000000832 _____ C:\Users\Thomas\Desktop\ZHPCleaner.lnk
2017-10-11 03:15 - 2017-10-11 03:15 - 000000000 ____D C:\Users\Thomas\AppData\Local\ZHP
2017-10-11 02:43 - 2017-10-11 13:46 - 000000000 ____D C:\FRST
2017-10-11 02:40 - 2017-10-11 02:40 - 002401792 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe
2017-10-11 02:29 - 2017-10-11 02:29 - 000003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-10-11 02:29 - 2017-10-11 02:29 - 000003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-10-11 02:29 - 2017-10-11 02:29 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-10-11 02:29 - 2017-10-11 02:29 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-10-11 02:29 - 2017-10-11 02:29 - 000000000 ____D C:\Program Files (x86)\Google
2017-10-10 15:34 - 2017-10-10 15:34 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-10 15:32 - 2017-10-10 15:33 - 068408664 _____ (Malwarebytes ) C:\Users\Thomas\Downloads\mb3-setup-consumer-3.2.2.2029.exe
2017-10-10 06:53 - 2017-10-10 06:52 - 000401488 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-10-10 03:06 - 2017-10-10 03:06 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\[Worker]
2017-10-10 03:05 - 2017-10-10 03:05 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\com.shirogames.evoland2
2017-10-10 02:54 - 2017-10-10 02:56 - 362949077 _____ C:\Users\Thomas\Downloads\IGG-Evoland.2.v1.0.9106.rar
2017-10-10 02:49 - 2017-10-11 03:48 - 000000290 __RSH C:\ProgramData\ntuser.pol
2017-10-10 02:48 - 2017-10-10 02:48 - 000569633 _____ ( ) C:\Users\Thomas\Downloads\IGG-Evoland.2.v1.0.9106.rar.exe
2017-10-02 17:29 - 2017-10-02 17:29 - 000087662 _____ C:\Users\Thomas\Downloads\RELEVES_MR QUINTANE THOMAS_20170711 (1).pdf
2017-10-01 20:26 - 2017-10-01 20:26 - 000180689 _____ C:\Users\Thomas\Downloads\justificatif. PEpdf.pdf
2017-09-27 20:57 - 2017-09-27 20:57 - 000001057 _____ C:\Users\Public\Desktop\nJoy For Android.lnk
2017-09-27 20:57 - 2017-09-27 20:57 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\Nemex
2017-09-27 20:57 - 2017-09-27 20:57 - 000000000 ____D C:\Users\Thomas\AppData\Local\Nemex
2017-09-27 20:57 - 2017-09-27 20:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\nJoy
2017-09-27 20:57 - 2017-09-27 20:57 - 000000000 ____D C:\Program Files (x86)\Nemex
2017-09-27 20:56 - 2017-09-27 20:56 - 001858035 _____ (Nemex ) C:\Users\Thomas\Downloads\NemexnJoySetup126.exe
2017-09-27 20:45 - 2017-09-27 20:45 - 000000000 ____D C:\Users\Thomas\AppData\Local\NEGU_Soft
2017-09-27 20:44 - 2017-09-27 20:44 - 000001063 _____ C:\Users\Public\Desktop\Ultimate Control.lnk
2017-09-27 20:44 - 2017-09-27 20:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Control
2017-09-27 20:44 - 2017-09-27 20:44 - 000000000 ____D C:\Program Files (x86)\Ultimate Control
2017-09-27 20:43 - 2017-09-27 20:43 - 000543608 _____ (NEGU Soft ) C:\Users\Thomas\Downloads\ultimate_control_v1.2_win_setup.exe
2017-09-27 20:41 - 2017-09-27 20:42 - 021204288 _____ C:\Users\Thomas\Downloads\droidpad-setup-2.1.exe
2017-09-22 18:51 - 2017-09-22 19:20 - 000000000 ____D C:\Users\Thomas\Desktop\Sauvetage data Trend
2017-09-21 15:06 - 2017-09-21 15:06 - 000189847 _____ C:\Users\Thomas\Downloads\48344671 (2).PDF
2017-09-21 15:05 - 2017-09-21 15:05 - 000227286 _____ C:\Users\Thomas\Downloads\48344671 (1).PDF
2017-09-20 21:34 - 2017-09-20 21:34 - 000189845 _____ C:\Users\Thomas\Downloads\48344671.PDF
2017-09-20 10:54 - 2017-09-20 10:54 - 000000000 __SHD C:\found.001
2017-09-20 10:42 - 2017-09-20 10:43 - 363723288 _____ (GOG.com ) C:\Users\Thomas\Downloads\setup_abes_oddysee_2.0.0.4.exe
2017-09-19 14:10 - 2017-09-19 14:10 - 000011302 _____ C:\Users\Thomas\Downloads\Identifiant La Poste_Quintane.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-10-11 13:32 - 2009-07-14 06:45 - 000017152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-10-11 13:32 - 2009-07-14 06:45 - 000017152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-10-11 13:24 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-10-11 13:17 - 2015-04-06 08:19 - 000000000 ____D C:\Users\Thomas\Desktop\Hearthstone
2017-10-11 12:02 - 2015-02-15 11:53 - 000000000 ____D C:\Program Files (x86)\Steam
2017-10-11 12:01 - 2016-12-18 07:08 - 000000000 ____D C:\Users\Thomas\Documents\Assassin's Creed III
2017-10-11 04:28 - 2014-06-07 15:38 - 000000000 ____D C:\Users\Thomas
2017-10-11 03:35 - 2009-07-14 07:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-10-11 02:53 - 2014-06-07 17:15 - 000000000 ____D C:\Users\Thomas\AppData\Local\Google
2017-10-11 01:45 - 2015-01-30 18:50 - 000000000 ____D C:\Users\Thomas\AppData\Local\Battle.net
2017-10-10 15:52 - 2015-02-26 08:31 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\FlvtoConverter
2017-10-10 08:44 - 2015-01-30 18:50 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-10-10 06:54 - 2017-03-09 22:23 - 000003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-10-10 06:52 - 2017-03-09 22:23 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-10-10 06:52 - 2017-03-09 22:23 - 000321032 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-10-10 06:52 - 2017-03-09 22:23 - 000198976 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-10-10 06:52 - 2017-03-09 22:23 - 000057736 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 001020536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000587168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000363440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000201352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000147776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000110376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000084416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000047008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-10-10 06:52 - 2014-06-07 19:40 - 000000000 ____D C:\ProgramData\AVAST Software
2017-10-10 02:49 - 2009-07-14 05:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2017-10-05 03:27 - 2017-02-06 06:50 - 000000000 ____D C:\Users\Thomas\AppData\Local\SquirrelTemp
2017-09-30 12:11 - 2014-07-11 23:47 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\TS3Client
2017-09-24 11:38 - 2017-02-06 06:52 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\discord
2017-09-20 10:57 - 2015-03-14 02:04 - 427700528 _____ C:\Windows\MEMORY.DMP
2017-09-20 10:57 - 2015-03-14 02:04 - 000000000 ____D C:\Windows\Minidump
2017-09-13 21:28 - 2016-06-23 03:27 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-09-12 12:04 - 2016-10-09 12:00 - 000003920 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1476007224
2017-09-12 12:00 - 2015-12-03 21:00 - 000000000 ____D C:\Program Files\Common Files\AV
==================== Fichiers à la racine de certains dossiers =======
2014-06-07 20:04 - 2017-01-08 12:57 - 000000125 _____ () C:\Users\Thomas\AppData\Roaming\D2Info0
2014-11-24 22:29 - 2014-11-30 21:27 - 000000121 _____ () C:\Users\Thomas\AppData\Roaming\D2Info1
2014-06-07 20:04 - 2017-01-02 16:10 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_1
2014-06-07 20:04 - 2017-01-08 13:04 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_2
2014-06-07 20:04 - 2016-12-16 11:37 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_3
2014-06-07 20:04 - 2016-03-02 17:14 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_4
2014-06-07 20:04 - 2014-12-12 21:13 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_5
2014-06-07 20:05 - 2014-07-07 15:28 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_6
2014-07-07 20:05 - 2014-07-08 01:39 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_7
2014-11-24 22:29 - 2014-11-30 21:30 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId1_1
2014-11-24 22:35 - 2014-11-24 22:36 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId1_2
2014-11-24 22:36 - 2014-11-24 22:37 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId1_3
2014-11-24 22:37 - 2014-11-24 22:38 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId1_4
2017-02-05 06:23 - 2017-02-05 06:23 - 000016421 _____ () C:\Users\Thomas\AppData\Local\recently-used.xbel
2016-01-14 17:29 - 2016-01-14 17:29 - 000006035 _____ () C:\Users\Thomas\AppData\Local\transitiontransition_3ceaa861d2fec025c12608337a53bf74.ini
2014-07-07 15:40 - 2014-07-07 15:40 - 000000057 _____ () C:\ProgramData\Ament.ini
Certains fichiers dans TEMP:
====================
2017-07-22 20:00 - 2015-05-30 13:59 - 015167584 _____ (Ankama Studio) C:\Users\Thomas\AppData\Local\Temp\Ank5C05.tmp.exe
2014-06-07 19:20 - 2014-06-07 19:20 - 004485976 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\dwl4F0.tmp.exe
2015-05-30 13:56 - 2015-05-30 13:56 - 006503984 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\dwl8F7D.tmp.exe
2015-04-20 11:52 - 2015-04-20 11:52 - 000066048 _____ () C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe
2014-05-27 18:12 - 2014-05-27 18:12 - 000918440 _____ (Oracle Corporation) C:\Users\Thomas\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
2014-07-11 23:12 - 2014-07-11 23:12 - 000918952 _____ (Oracle Corporation) C:\Users\Thomas\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
2014-07-28 07:15 - 2014-07-28 07:15 - 000918440 _____ (Oracle Corporation) C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
2016-06-14 20:35 - 2016-06-14 20:35 - 002458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\Thomas\AppData\Local\Temp\libeay32.dll
2015-04-20 11:52 - 2014-05-07 17:43 - 000568832 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll
2016-06-14 20:35 - 2016-06-14 20:35 - 000970912 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\msvcr120.dll
2015-04-20 11:52 - 2014-05-07 17:43 - 000655872 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll
2015-11-22 04:58 - 2015-11-22 04:58 - 000003584 _____ () C:\Users\Thomas\AppData\Local\Temp\ndwd0lgd.dll
2014-11-08 10:33 - 2015-06-21 19:56 - 000610816 _____ () C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
2015-03-28 10:41 - 2015-03-28 10:42 - 045209696 _____ (Skype Technologies S.A.) C:\Users\Thomas\AppData\Local\Temp\SkypeSetup.exe
2014-11-08 10:47 - 2014-10-17 13:39 - 000665682 _____ (SQLite Development Team) C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll
2017-03-15 22:37 - 2017-03-15 22:37 - 014456872 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\vc_redist.x86.exe
2015-01-28 09:11 - 2015-01-28 09:12 - 024743106 _____ () C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win32.exe
2015-09-15 20:24 - 2015-09-15 20:24 - 001072720 _____ () C:\Users\Thomas\AppData\Local\Temp\{8DD05D70-F108-4963-9EE5-EF901975E2D8}-45.0.2454.93_45.0.2454.85_chrome_updater.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-10-10 06:24
==================== Fin de FRST.txt ============================
Exécuté par Thomas (administrateur) sur THOMAS-PC (11-10-2017 13:46:08)
Exécuté depuis C:\Users\Thomas\Desktop
Profils chargés: Thomas (Profils disponibles: Thomas)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 2\creator-ws.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12558440 2014-06-07] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [253344 2017-10-10] (AVAST Software)
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
GroupPolicy: Restriction - Chrome <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{48CFF69D-FEFD-4E25-B7F4-DDC24288EE04}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{DDFD1262-A6F8-44CB-BE3D-FB5319585FB2}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{E6CEA33B-44B1-4519-9FE2-058EB0CF23F1}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-309827564-2679735670-3825272786-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxps://fr.yahoo.com/?fr=hp-avast&type=avastbcl
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-10-10] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: PDF Architect Helper -> {691B33B0-B86E-47F3-81C7-56E4FE3B929C} -> C:\Program Files (x86)\PDF Architect 2\creator-ie-helper.dll [2014-10-10] (pdfforge GmbH)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-26] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-10-10] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-26] (Oracle Corporation)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {DEEB13D7-CEA9-45FB-B77C-E039BEC85221} - C:\Program Files (x86)\PDF Architect 2\creator-ie-plugin.dll [2014-10-10] (pdfforge GmbH)
FireFox:
========
FF ProfilePath: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ddh8lqri.default [2017-10-11]
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\ddh8lqri.default -> hxxp://www.bing.com/search
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\ddh8lqri.default -> Microsoft (Bing)
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\ddh8lqri.default -> Microsoft (Bing)
FF Homepage: Mozilla\Firefox\Profiles\ddh8lqri.default -> hxxp://www.msn.com/?pc=AV01
FF Keyword.URL: Mozilla\Firefox\Profiles\ddh8lqri.default -> hxxp://www.bing.com/search
FF Extension: (PDF Architect 2 Creator) - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension [2014-12-04] [non signé]
FF SearchPlugin: C:\Users\Thomas\AppData\Roaming\Mozilla\Firefox\Profiles\ddh8lqri.default\searchplugins\bing-avast.xml [2014-12-24]
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_2_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 2\resources\pdfarchitect2firefoxextension
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll [2014-11-07] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll [2014-11-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-26] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-10-11] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-10-11] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
Chrome:
=======
CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default [2017-10-11]
CHR Extension: (Google Slides) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-11]
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-11]
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-11]
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-11]
CHR Extension: (Adobe Acrobat) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-10-11]
CHR Extension: (Google Sheets) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-11]
CHR Extension: (Google Docs hors connexion) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-11]
CHR Extension: (Avast Online Security) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-11]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-11]
CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-11]
CHR Extension: (Chrome Media Router) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-11]
CHR Profile: C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default [2017-10-11] <==== ATTENTION
CHR Extension: (Google Slides) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-11]
CHR Extension: (Google Docs) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-11]
CHR Extension: (Google Drive) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-11]
CHR Extension: (YouTube) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-11]
CHR Extension: (Adobe Acrobat) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-10-11]
CHR Extension: (Google Sheets) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-11]
CHR Extension: (Google Docs hors connexion) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-11]
CHR Extension: (Avast Online Security) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-10-11]
CHR Extension: (Shine) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\jidbpkjafbnohlnbflllphpkfmojpdac [2017-10-11]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-11]
CHR Extension: (Gmail) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-11]
CHR Extension: (Chrome Media Router) - C:\Users\Thomas\AppData\Local\Google\Chrome\User Data\Sauvegarde Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-11]
CHR HKLM-x32\...\Chrome\Extension: [clgckgfbhciacomhlchmgdnplmdiadbj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [dgjepfldodmdfmdidhhgamnklbdibndi] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
StartMenuInternet: Google Chrome.KDAXDWZQJYORPPGQHV6DBTQHWY - C:\Users\Thomas\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7446024 2017-10-10] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [281416 2017-10-10] (AVAST Software)
S4 Ds3Service; D:\Téléchargements\SCP Driver\ScpServer\bin\ScpService.exe [381952 2014-03-13] (Scarlet.Crush Productions) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
R2 PDF Architect 2 Creator; C:\Program Files (x86)\PDF Architect 2\creator-ws.exe [738856 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [321032 2017-10-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-10-10] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-10-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57736 2017-10-10] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [47008 2017-10-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41832 2017-09-07] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [147776 2017-10-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110376 2017-10-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84416 2017-10-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1020536 2017-10-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [587168 2017-10-10] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [201352 2017-10-10] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [363440 2017-10-10] (AVAST Software)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-08-21] ()
R3 frzway; C:\Windows\System32\DRIVERS\frzway.sys [34552 2015-08-27] (The OpenVPN Project)
S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () [Fichier non signé]
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [192960 2017-10-11] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [101824 2017-10-11] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-10-11] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [253888 2017-10-11] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [84256 2017-10-11] (Malwarebytes)
S3 MotioninJoyXFilter; C:\Windows\System32\DRIVERS\MijXfilt.sys [121416 2012-05-12] (MotioninJoy) [Fichier non signé]
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)
R2 SGDrv; C:\Windows\System32\DRIVERS\SGdrv64.sys [7680 2011-04-11] (Phoenix Technologies Ltd.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2015-05-25] (SplitmediaLabs Limited)
S1 avadbykz; \??\C:\Windows\system32\drivers\avadbykz.sys [X]
S3 clwvd6; system32\DRIVERS\clwvd6.sys [X]
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
S1 fclcgtrf; \??\C:\Windows\system32\drivers\fclcgtrf.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-10-11 13:30 - 2017-10-11 13:33 - 000192960 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-10-11 13:30 - 2017-10-11 13:33 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-10-11 13:30 - 2017-10-11 13:30 - 000253888 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-10-11 13:30 - 2017-10-11 13:30 - 000101824 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-10-11 13:30 - 2017-10-11 13:30 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-10-11 13:29 - 2017-10-11 13:29 - 000001827 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-10-11 13:29 - 2017-10-11 13:29 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-10-11 13:29 - 2017-10-11 13:29 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-10-11 13:29 - 2017-08-21 07:20 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-10-11 13:28 - 2017-10-11 13:28 - 065942208 _____ (Malwarebytes ) C:\Users\Thomas\Downloads\malwarebytes-anti-malware_3-2-2-2029_fr_215092.exe
2017-10-11 13:21 - 2017-10-11 13:22 - 000000000 ____D C:\AdwCleaner
2017-10-11 13:18 - 2017-10-11 13:18 - 008250832 _____ (Malwarebytes) C:\Users\Thomas\Downloads\adwcleaner_7.0.3.1.exe
2017-10-11 12:13 - 2014-05-14 18:23 - 002477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-10-11 12:13 - 2014-05-14 18:23 - 000058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-10-11 12:13 - 2014-05-14 18:23 - 000044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-10-11 12:13 - 2014-05-14 18:21 - 002620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-10-11 12:12 - 2014-05-14 18:23 - 000700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-10-11 12:12 - 2014-05-14 18:23 - 000581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-10-11 12:12 - 2014-05-14 18:23 - 000038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-10-11 12:12 - 2014-05-14 18:23 - 000036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-10-11 12:12 - 2014-05-14 18:20 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-10-11 12:12 - 2014-05-14 18:17 - 000092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-10-11 12:12 - 2014-05-14 09:23 - 000198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-10-11 12:12 - 2014-05-14 09:23 - 000179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-10-11 12:12 - 2014-05-14 09:20 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-10-11 12:12 - 2014-05-14 09:17 - 000033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-10-11 12:06 - 2017-10-11 13:46 - 000019395 _____ C:\Users\Thomas\Desktop\FRST.txt
2017-10-11 11:42 - 2017-10-11 11:42 - 007178424 _____ (VS Revo Group ) C:\Users\Thomas\Downloads\revosetup.exe
2017-10-11 11:42 - 2017-10-11 11:42 - 000000994 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-10-11 11:42 - 2017-10-11 11:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-10-11 11:42 - 2017-10-11 11:42 - 000000000 ____D C:\Program Files\VS Revo Group
2017-10-11 04:29 - 2017-10-11 04:29 - 000000000 _____ C:\autoexec.bat
2017-10-11 04:27 - 2017-10-11 04:27 - 002755584 _____ C:\Users\Thomas\Downloads\SH-Alt-Install.exe
2017-10-11 03:48 - 2017-10-11 03:48 - 000304112 _____ ( ) C:\Users\Thomas\Downloads\cleanserp_uninstall.exe
2017-10-11 03:15 - 2017-10-11 12:43 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\ZHP
2017-10-11 03:15 - 2017-10-11 03:15 - 002946944 _____ C:\Users\Thomas\Downloads\ZHPCleaner.exe
2017-10-11 03:15 - 2017-10-11 03:15 - 000000832 _____ C:\Users\Thomas\Desktop\ZHPCleaner.lnk
2017-10-11 03:15 - 2017-10-11 03:15 - 000000000 ____D C:\Users\Thomas\AppData\Local\ZHP
2017-10-11 02:43 - 2017-10-11 13:46 - 000000000 ____D C:\FRST
2017-10-11 02:40 - 2017-10-11 02:40 - 002401792 _____ (Farbar) C:\Users\Thomas\Desktop\FRST64.exe
2017-10-11 02:29 - 2017-10-11 02:29 - 000003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-10-11 02:29 - 2017-10-11 02:29 - 000003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-10-11 02:29 - 2017-10-11 02:29 - 000002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-10-11 02:29 - 2017-10-11 02:29 - 000002181 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-10-11 02:29 - 2017-10-11 02:29 - 000000000 ____D C:\Program Files (x86)\Google
2017-10-10 15:34 - 2017-10-10 15:34 - 000000000 ____D C:\Program Files\Malwarebytes
2017-10-10 15:32 - 2017-10-10 15:33 - 068408664 _____ (Malwarebytes ) C:\Users\Thomas\Downloads\mb3-setup-consumer-3.2.2.2029.exe
2017-10-10 06:53 - 2017-10-10 06:52 - 000401488 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-10-10 03:06 - 2017-10-10 03:06 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\[Worker]
2017-10-10 03:05 - 2017-10-10 03:05 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\com.shirogames.evoland2
2017-10-10 02:54 - 2017-10-10 02:56 - 362949077 _____ C:\Users\Thomas\Downloads\IGG-Evoland.2.v1.0.9106.rar
2017-10-10 02:49 - 2017-10-11 03:48 - 000000290 __RSH C:\ProgramData\ntuser.pol
2017-10-10 02:48 - 2017-10-10 02:48 - 000569633 _____ ( ) C:\Users\Thomas\Downloads\IGG-Evoland.2.v1.0.9106.rar.exe
2017-10-02 17:29 - 2017-10-02 17:29 - 000087662 _____ C:\Users\Thomas\Downloads\RELEVES_MR QUINTANE THOMAS_20170711 (1).pdf
2017-10-01 20:26 - 2017-10-01 20:26 - 000180689 _____ C:\Users\Thomas\Downloads\justificatif. PEpdf.pdf
2017-09-27 20:57 - 2017-09-27 20:57 - 000001057 _____ C:\Users\Public\Desktop\nJoy For Android.lnk
2017-09-27 20:57 - 2017-09-27 20:57 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\Nemex
2017-09-27 20:57 - 2017-09-27 20:57 - 000000000 ____D C:\Users\Thomas\AppData\Local\Nemex
2017-09-27 20:57 - 2017-09-27 20:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\nJoy
2017-09-27 20:57 - 2017-09-27 20:57 - 000000000 ____D C:\Program Files (x86)\Nemex
2017-09-27 20:56 - 2017-09-27 20:56 - 001858035 _____ (Nemex ) C:\Users\Thomas\Downloads\NemexnJoySetup126.exe
2017-09-27 20:45 - 2017-09-27 20:45 - 000000000 ____D C:\Users\Thomas\AppData\Local\NEGU_Soft
2017-09-27 20:44 - 2017-09-27 20:44 - 000001063 _____ C:\Users\Public\Desktop\Ultimate Control.lnk
2017-09-27 20:44 - 2017-09-27 20:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ultimate Control
2017-09-27 20:44 - 2017-09-27 20:44 - 000000000 ____D C:\Program Files (x86)\Ultimate Control
2017-09-27 20:43 - 2017-09-27 20:43 - 000543608 _____ (NEGU Soft ) C:\Users\Thomas\Downloads\ultimate_control_v1.2_win_setup.exe
2017-09-27 20:41 - 2017-09-27 20:42 - 021204288 _____ C:\Users\Thomas\Downloads\droidpad-setup-2.1.exe
2017-09-22 18:51 - 2017-09-22 19:20 - 000000000 ____D C:\Users\Thomas\Desktop\Sauvetage data Trend
2017-09-21 15:06 - 2017-09-21 15:06 - 000189847 _____ C:\Users\Thomas\Downloads\48344671 (2).PDF
2017-09-21 15:05 - 2017-09-21 15:05 - 000227286 _____ C:\Users\Thomas\Downloads\48344671 (1).PDF
2017-09-20 21:34 - 2017-09-20 21:34 - 000189845 _____ C:\Users\Thomas\Downloads\48344671.PDF
2017-09-20 10:54 - 2017-09-20 10:54 - 000000000 __SHD C:\found.001
2017-09-20 10:42 - 2017-09-20 10:43 - 363723288 _____ (GOG.com ) C:\Users\Thomas\Downloads\setup_abes_oddysee_2.0.0.4.exe
2017-09-19 14:10 - 2017-09-19 14:10 - 000011302 _____ C:\Users\Thomas\Downloads\Identifiant La Poste_Quintane.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-10-11 13:32 - 2009-07-14 06:45 - 000017152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-10-11 13:32 - 2009-07-14 06:45 - 000017152 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-10-11 13:24 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-10-11 13:17 - 2015-04-06 08:19 - 000000000 ____D C:\Users\Thomas\Desktop\Hearthstone
2017-10-11 12:02 - 2015-02-15 11:53 - 000000000 ____D C:\Program Files (x86)\Steam
2017-10-11 12:01 - 2016-12-18 07:08 - 000000000 ____D C:\Users\Thomas\Documents\Assassin's Creed III
2017-10-11 04:28 - 2014-06-07 15:38 - 000000000 ____D C:\Users\Thomas
2017-10-11 03:35 - 2009-07-14 07:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-10-11 02:53 - 2014-06-07 17:15 - 000000000 ____D C:\Users\Thomas\AppData\Local\Google
2017-10-11 01:45 - 2015-01-30 18:50 - 000000000 ____D C:\Users\Thomas\AppData\Local\Battle.net
2017-10-10 15:52 - 2015-02-26 08:31 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\FlvtoConverter
2017-10-10 08:44 - 2015-01-30 18:50 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-10-10 06:54 - 2017-03-09 22:23 - 000003914 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-10-10 06:52 - 2017-03-09 22:23 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-10-10 06:52 - 2017-03-09 22:23 - 000321032 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-10-10 06:52 - 2017-03-09 22:23 - 000198976 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-10-10 06:52 - 2017-03-09 22:23 - 000057736 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 001020536 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000587168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000363440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000201352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000147776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000110376 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000084416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-10-10 06:52 - 2014-06-07 19:41 - 000047008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-10-10 06:52 - 2014-06-07 19:40 - 000000000 ____D C:\ProgramData\AVAST Software
2017-10-10 02:49 - 2009-07-14 05:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2017-10-05 03:27 - 2017-02-06 06:50 - 000000000 ____D C:\Users\Thomas\AppData\Local\SquirrelTemp
2017-09-30 12:11 - 2014-07-11 23:47 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\TS3Client
2017-09-24 11:38 - 2017-02-06 06:52 - 000000000 ____D C:\Users\Thomas\AppData\Roaming\discord
2017-09-20 10:57 - 2015-03-14 02:04 - 427700528 _____ C:\Windows\MEMORY.DMP
2017-09-20 10:57 - 2015-03-14 02:04 - 000000000 ____D C:\Windows\Minidump
2017-09-13 21:28 - 2016-06-23 03:27 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-09-12 12:04 - 2016-10-09 12:00 - 000003920 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1476007224
2017-09-12 12:00 - 2015-12-03 21:00 - 000000000 ____D C:\Program Files\Common Files\AV
==================== Fichiers à la racine de certains dossiers =======
2014-06-07 20:04 - 2017-01-08 12:57 - 000000125 _____ () C:\Users\Thomas\AppData\Roaming\D2Info0
2014-11-24 22:29 - 2014-11-30 21:27 - 000000121 _____ () C:\Users\Thomas\AppData\Roaming\D2Info1
2014-06-07 20:04 - 2017-01-02 16:10 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_1
2014-06-07 20:04 - 2017-01-08 13:04 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_2
2014-06-07 20:04 - 2016-12-16 11:37 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_3
2014-06-07 20:04 - 2016-03-02 17:14 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_4
2014-06-07 20:04 - 2014-12-12 21:13 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_5
2014-06-07 20:05 - 2014-07-07 15:28 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_6
2014-07-07 20:05 - 2014-07-08 01:39 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId0_7
2014-11-24 22:29 - 2014-11-30 21:30 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId1_1
2014-11-24 22:35 - 2014-11-24 22:36 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId1_2
2014-11-24 22:36 - 2014-11-24 22:37 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId1_3
2014-11-24 22:37 - 2014-11-24 22:38 - 000000008 _____ () C:\Users\Thomas\AppData\Roaming\DofusAppId1_4
2017-02-05 06:23 - 2017-02-05 06:23 - 000016421 _____ () C:\Users\Thomas\AppData\Local\recently-used.xbel
2016-01-14 17:29 - 2016-01-14 17:29 - 000006035 _____ () C:\Users\Thomas\AppData\Local\transitiontransition_3ceaa861d2fec025c12608337a53bf74.ini
2014-07-07 15:40 - 2014-07-07 15:40 - 000000057 _____ () C:\ProgramData\Ament.ini
Certains fichiers dans TEMP:
====================
2017-07-22 20:00 - 2015-05-30 13:59 - 015167584 _____ (Ankama Studio) C:\Users\Thomas\AppData\Local\Temp\Ank5C05.tmp.exe
2014-06-07 19:20 - 2014-06-07 19:20 - 004485976 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\dwl4F0.tmp.exe
2015-05-30 13:56 - 2015-05-30 13:56 - 006503984 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\dwl8F7D.tmp.exe
2015-04-20 11:52 - 2015-04-20 11:52 - 000066048 _____ () C:\Users\Thomas\AppData\Local\Temp\Execute2App.exe
2014-05-27 18:12 - 2014-05-27 18:12 - 000918440 _____ (Oracle Corporation) C:\Users\Thomas\AppData\Local\Temp\jre-7u60-windows-i586-iftw.exe
2014-07-11 23:12 - 2014-07-11 23:12 - 000918952 _____ (Oracle Corporation) C:\Users\Thomas\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
2014-07-28 07:15 - 2014-07-28 07:15 - 000918440 _____ (Oracle Corporation) C:\Users\Thomas\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
2016-06-14 20:35 - 2016-06-14 20:35 - 002458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\Thomas\AppData\Local\Temp\libeay32.dll
2015-04-20 11:52 - 2014-05-07 17:43 - 000568832 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\msvcp90.dll
2016-06-14 20:35 - 2016-06-14 20:35 - 000970912 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\msvcr120.dll
2015-04-20 11:52 - 2014-05-07 17:43 - 000655872 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\msvcr90.dll
2015-11-22 04:58 - 2015-11-22 04:58 - 000003584 _____ () C:\Users\Thomas\AppData\Local\Temp\ndwd0lgd.dll
2014-11-08 10:33 - 2015-06-21 19:56 - 000610816 _____ () C:\Users\Thomas\AppData\Local\Temp\Quarantine.exe
2015-03-28 10:41 - 2015-03-28 10:42 - 045209696 _____ (Skype Technologies S.A.) C:\Users\Thomas\AppData\Local\Temp\SkypeSetup.exe
2014-11-08 10:47 - 2014-10-17 13:39 - 000665682 _____ (SQLite Development Team) C:\Users\Thomas\AppData\Local\Temp\sqlite3.dll
2017-03-15 22:37 - 2017-03-15 22:37 - 014456872 _____ (Microsoft Corporation) C:\Users\Thomas\AppData\Local\Temp\vc_redist.x86.exe
2015-01-28 09:11 - 2015-01-28 09:12 - 024743106 _____ () C:\Users\Thomas\AppData\Local\Temp\vlc-2.1.5-win32.exe
2015-09-15 20:24 - 2015-09-15 20:24 - 001072720 _____ () C:\Users\Thomas\AppData\Local\Temp\{8DD05D70-F108-4963-9EE5-EF901975E2D8}-45.0.2454.93_45.0.2454.85_chrome_updater.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-10-10 06:24
==================== Fin de FRST.txt ============================