Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 06-12-2017
Exécuté par Administrateur (administrateur) sur PC150034 (07-12-2017 14:16:25)
Exécuté depuis C:\Users\pierrons\Desktop
Profils chargés: pierrons & Administrateur (Profils disponibles: KASSTTARm & pierrons & AUDRANg & Administrateur & BOSSOt & install & Administrateur)
Platform: Windows 7 Professional Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation) C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
(Oracle Corporation) C:\oracle\product\10.2.0\client_1\bin\omtsreco.exe
() C:\Program Files (x86)\TotalAV\SecurityService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin\ccSvcHst.exe
(GlavSoft LLC.) C:\Program Files\TightVNC\tvnserver.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin\ccSvcHst.exe
() C:\Program Files (x86)\TotalAV\TotalAV.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(GlavSoft LLC.) C:\Program Files\TightVNC\tvnserver.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Mairie de la seyne sur mer ) C:\mess\scrut.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7570136 2014-04-15] (Realtek Semiconductor)
HKLM\...\Run: [tvncontrol] => C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-19] (GlavSoft LLC.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-12] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1165920 2017-07-20] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [*WerKernelReporting] => C:\Windows\SYSTEM32\WerFault.exe [415232 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-2124312534-615130240-1430679421-3757\...\Run: [GoogleChromeAutoLaunch_00B7E50F2E56A964050F046B9BF01392] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
HKU\S-1-5-21-2124312534-615130240-1430679421-3757\...\Run: [Google Update] => C:\Users\pierrons\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-11-29] (Google Inc.)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\scrut.lnk [2017-12-07]
ShortcutTarget: scrut.lnk -> C:\mess\scrut.exe (Mairie de la seyne sur mer )
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
Tcpip\Parameters: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{06DD59CB-14D0-4EF2-99D5-9FA2C6CFE9C5}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{201F8CCF-8EF3-4957-AC08-634B440A0C7A}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{A4F49F5F-0518-45D7-AA73-6A68DF4AFEDF}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{CDD69CAB-FA76-4DCC-99F5-BE43CBCBA310}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{D6EFCFFC-7E5B-4087-B5AC-57BE3D938366}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/29
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/29
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/29
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/29
HKU\S-1-5-21-2124312534-615130240-1430679421-3757\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/29
HKU\S-1-5-21-2124312534-615130240-1430679421-3757\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/29
HKU\S-1-5-21-2124312534-615130240-1430679421-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.fr/?gws_rd=ssl
HKU\S-1-5-21-2124312534-615130240-1430679421-500\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/29
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> c:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> c:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: Pas de nom -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> Pas de fichier
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-09] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-09] (Oracle Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
FireFox:
========
FF DefaultProfile: 3aktwevf.default
FF ProfilePath: C:\Users\administrateur\AppData\Roaming\Mozilla\Firefox\Profiles\3aktwevf.default [2017-11-29]
FF Homepage: Mozilla\Firefox\Profiles\3aktwevf.default -> hxxp://www.google.fr/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-06-04] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-06-04] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Users\pierrons\Documents\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-09] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-24] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2124312534-615130240-1430679421-3757: @tools.google.com/Google Update;version=3 -> C:\Users\pierrons\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-2124312534-615130240-1430679421-3757: @tools.google.com/Google Update;version=9 -> C:\Users\pierrons\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-29] (Google Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [looohgelibjoplmkhecmalapkgadkfcc] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2124312534-615130240-1430679421-3757\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [looohgelibjoplmkhecmalapkgadkfcc] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-06-12] (Advanced Micro Devices, Inc.) [Fichier non signé]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 BrcmMgmtAgent; C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [213504 2014-04-01] (Broadcom Corporation) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
R2 OracleMTSRecoveryService; C:\oracle\product\10.2.0\client_1\bin\omtsreco.exe [53248 2006-10-11] (Oracle Corporation) [Fichier non signé]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 SecurityService; C:\Program Files (x86)\TotalAV\SecurityService.exe [441704 2017-11-02] ()
R2 SepMasterService; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin\ccSvcHst.exe [157976 2017-06-06] (Symantec Corporation)
S3 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin64\snac64.exe [378088 2017-06-06] (Symantec Corporation)
R2 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-19] (GlavSoft LLC.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-12-04] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 ACPI; C:\Windows\System32\drivers\ACPI.sys [334208 2010-11-21] () [Fichier non signé]
R3 AmdPPM; C:\Windows\system32\drivers\amdppm.sys [60928 2009-07-14] () [Fichier non signé]
R2 AODDriver4.3; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
R1 BHDrvx64; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Data\Definitions\BASHDefs\20171127.001\BHDrvx64.sys [1872024 2017-10-17] (Symantec Corporation)
R1 ccSettings_{DEB2F3C1-242C-4DAE-BA79-61E77B61DAAF}; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\ccSetx64.sys [174328 2017-06-06] (Symantec Corporation)
R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-21] () [Fichier non signé]
R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-21] () [Fichier non signé]
R0 Disk; C:\Windows\System32\drivers\disk.sys [73664 2016-01-21] () [Fichier non signé]
S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2015-12-08] () [Fichier non signé]
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [508056 2017-10-19] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [158360 2017-10-19] (Symantec Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77432 2017-11-29] ()
R3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368 2010-11-21] () [Fichier non signé]
R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-21] () [Fichier non signé]
R3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] () [Fichier non signé]
R1 IDSVia64; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Data\Definitions\IPSDefs\20171206.021\IDSvia64.sys [1056920 2017-12-07] (Symantec Corporation)
R3 kbdclass; C:\Windows\System32\DRIVERS\kbdclass.sys [50768 2009-07-14] () [Fichier non signé]
R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-21] () [Fichier non signé]
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193968 2017-12-07] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-12-07] (Malwarebytes)
R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] () [Fichier non signé]
R3 mouclass; C:\Windows\System32\DRIVERS\mouclass.sys [49216 2009-07-14] () [Fichier non signé]
R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] () [Fichier non signé]
R0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [15424 2009-07-14] () [Fichier non signé]
R1 mssmbios; C:\Windows\system32\drivers\mssmbios.sys [32320 2009-07-14] () [Fichier non signé]
R0 pci; C:\Windows\System32\drivers\pci.sys [184704 2010-11-21] () [Fichier non signé]
R3 rdpbus; C:\Windows\system32\drivers\rdpbus.sys [24064 2009-07-14] () [Fichier non signé]
R3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-14] () [Fichier non signé]
R1 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] () [Fichier non signé]
S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624 2009-07-14] () [Fichier non signé]
R1 SRTSP; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\SRTSP64.SYS [801920 2017-06-06] (Symantec Corporation)
R1 SRTSPX; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\SRTSPX64.SYS [49280 2017-06-06] (Symantec Corporation)
S3 SyDvCtrl; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin64\SyDvCtrl64.sys [44528 2017-06-06] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\symefasi\0603000.00F\symefasi.sys [1717912 2017-06-06] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102608 2017-06-06] (Symantec Corporation)
R1 SymIRON; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\Ironx64.SYS [308896 2017-06-06] (Symantec Corporation)
R1 SYMNETS; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\SYMNETS.SYS [567448 2017-06-06] (Symantec Corporation)
R1 SysPlant; C:\Windows\System32\Drivers\SysPlant.sys [195896 2017-06-07] (Symantec Corporation)
R1 Teefer2; C:\Windows\System32\DRIVERS\Teefer.sys [124928 2017-06-06] (Symantec Corporation)
R1 TermDD; C:\Windows\system32\drivers\termdd.sys [63360 2010-11-21] () [Fichier non signé]
R3 TPM; C:\Windows\System32\drivers\tpm.sys [147904 2016-02-05] () [Fichier non signé]
R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-21] () [Fichier non signé]
S3 usbccgp; C:\Windows\system32\drivers\usbccgp.sys [99840 2017-10-18] () [Fichier non signé]
R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [56320 2017-10-18] () [Fichier non signé]
R3 usbhub; C:\Windows\system32\drivers\usbhub.sys [344064 2017-10-18] () [Fichier non signé]
R3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2017-10-18] () [Fichier non signé]
S3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2016-02-03] () [Fichier non signé]
S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2017-10-18] () [Fichier non signé]
R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [36432 2009-07-14] () [Fichier non signé]
R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [71552 2010-11-21] () [Fichier non signé]
R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [296320 2015-04-11] () [Fichier non signé]
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-21] () [Fichier non signé]
R3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] () [Fichier non signé]
U1 aswbdisk; pas de ImagePath
S3 NAVENG; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Data\Definitions\SDSDefs\20170606.009\ENG64.SYS [X]
S3 NAVEX15; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Data\Definitions\SDSDefs\20170606.009\EX64.SYS [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-07 14:16 - 2017-12-07 14:18 - 000020074 _____ C:\Users\pierrons\Desktop\FRST.txt
2017-12-07 14:16 - 2017-12-07 14:16 - 000000000 ____D C:\FRST
2017-12-07 14:15 - 2017-12-07 14:15 - 002390528 _____ (Farbar) C:\Users\pierrons\Desktop\FRST64.exe
2017-12-07 13:25 - 2017-12-07 13:25 - 007176464 _____ (AVAST Software) C:\Users\pierrons\Downloads\ca69a4c6-fa29-4e5c-9d39-72a8469d33c6.tmp
2017-12-07 11:57 - 2017-12-07 11:57 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-12-07 11:57 - 2017-12-07 11:57 - 000193968 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2017-12-07 11:56 - 2017-12-07 11:56 - 000001874 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-12-07 11:56 - 2017-12-07 11:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-12-07 11:56 - 2017-12-07 11:56 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-12-07 11:56 - 2017-12-07 11:56 - 000000000 ____D C:\Program Files\Malwarebytes
2017-12-07 11:56 - 2017-11-29 09:11 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-12-07 11:54 - 2017-12-07 11:55 - 083316440 _____ (Malwarebytes ) C:\Users\pierrons\Documents\mb3-setup-35891.35891-3.3.1.2183-1.0.262-1.0.3374.exe
2017-12-06 11:49 - 2017-12-06 11:49 - 000000000 ____D C:\Users\pierrons\Documents\Nouveau dossier
2017-12-04 17:04 - 2017-12-04 17:09 - 000000000 ____D C:\Users\pierrons\Documents\Techno Bitches
2017-12-04 15:34 - 2017-12-06 11:13 - 000022906 _____ C:\Users\pierrons\Documents\Henry Bi.odt
2017-11-30 10:49 - 2017-11-30 10:49 - 000000000 ____D C:\Users\pierrons\Documents\Dessins hENRI
2017-11-29 11:03 - 2017-11-29 11:03 - 000002370 _____ C:\Users\pierrons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-29 11:03 - 2017-11-29 11:03 - 000002362 _____ C:\Users\pierrons\Desktop\Google Chrome.lnk
2017-11-29 11:01 - 2017-10-12 01:55 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-11-29 11:01 - 2017-10-12 01:37 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-11-29 10:56 - 2017-11-29 10:57 - 000001023 _____ C:\Users\pierrons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TotalAV.lnk
2017-11-29 10:56 - 2017-11-29 10:57 - 000000000 ____D C:\Users\pierrons\Documents\TotalAV
2017-11-29 10:23 - 2017-11-29 10:23 - 000000000 ____D C:\ProgramData\SecuritySuite
2017-11-29 10:13 - 2017-11-29 10:13 - 000000000 ____D C:\Users\administrateur\Documents\TotalAV
2017-11-29 10:12 - 2017-11-29 10:13 - 000000000 ____D C:\Users\administrateur\AppData\Roaming\TotalAV
2017-11-29 10:12 - 2017-11-29 10:12 - 000001023 _____ C:\Users\administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TotalAV.lnk
2017-11-29 10:12 - 2017-11-29 10:12 - 000000000 ____D C:\Users\administrateur\AppData\Local\CrashDumps
2017-11-29 10:11 - 2017-11-29 10:27 - 000000000 ____D C:\Program Files (x86)\TotalAV
2017-11-29 10:11 - 2017-11-29 10:12 - 000001886 _____ C:\Users\administrateur\Desktop\TotalAV.lnk
2017-11-27 10:35 - 2017-11-27 10:36 - 000000000 ____D C:\Users\pierrons\Documents\Assurance clés opel
2017-11-24 16:29 - 2017-11-27 11:58 - 000000000 ____D C:\Users\pierrons\Documents\Pikard
2017-11-24 14:52 - 2017-11-24 14:52 - 000231458 _____ C:\Users\pierrons\Documents\Courrier assurance dossier 6403161.pdf
2017-11-20 15:50 - 2017-11-20 15:50 - 000018114 _____ C:\Users\pierrons\Desktop\homonymes-homophones-grammaticaux-ca-sa (1).webp
2017-11-20 15:49 - 2017-11-20 15:49 - 000018114 _____ C:\Users\pierrons\Desktop\homonymes-homophones-grammaticaux-ca-sa.webp
2017-11-17 16:14 - 2017-11-17 16:17 - 000000000 ____D C:\Users\pierrons\Documents\IAM dome 2017
2017-11-16 11:12 - 2017-10-18 03:06 - 000327168 _____ C:\Windows\system32\Drivers\usbport.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000099840 _____ C:\Windows\system32\Drivers\usbccgp.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000056320 _____ C:\Windows\system32\Drivers\usbehci.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000030720 _____ C:\Windows\system32\Drivers\usbuhci.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000025600 _____ C:\Windows\system32\Drivers\usbohci.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000007808 _____ C:\Windows\system32\Drivers\usbd.sys
2017-11-16 11:12 - 2017-09-07 14:05 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-11-16 11:11 - 2017-10-18 03:06 - 000344064 _____ C:\Windows\system32\Drivers\usbhub.sys
2017-11-16 11:11 - 2017-09-07 14:05 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-11-16 11:11 - 2017-09-07 14:05 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-11-16 11:09 - 2017-10-18 08:31 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-16 11:09 - 2017-10-18 07:45 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-16 11:09 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-16 11:09 - 2017-10-14 09:23 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-11-16 11:09 - 2017-10-14 09:23 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-11-16 11:09 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-16 11:09 - 2017-10-14 09:12 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-11-16 11:09 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-16 11:09 - 2017-10-14 09:11 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-11-16 11:09 - 2017-10-14 09:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-11-16 11:09 - 2017-10-14 09:11 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-11-16 11:09 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-16 11:09 - 2017-10-14 09:05 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-11-16 11:09 - 2017-10-14 09:04 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-11-16 11:09 - 2017-10-14 09:02 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-11-16 11:09 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-16 11:09 - 2017-10-14 09:01 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-11-16 11:09 - 2017-10-14 09:01 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-11-16 11:09 - 2017-10-14 09:00 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-11-16 11:09 - 2017-10-14 08:55 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-16 11:09 - 2017-10-14 08:53 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-11-16 11:09 - 2017-10-14 08:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-11-16 11:09 - 2017-10-14 08:47 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-16 11:09 - 2017-10-14 08:46 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-11-16 11:09 - 2017-10-14 08:43 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-11-16 11:09 - 2017-10-14 08:43 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-11-16 11:09 - 2017-10-14 08:41 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-11-16 11:09 - 2017-10-14 08:40 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-11-16 11:09 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-16 11:09 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-16 11:09 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-16 11:09 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-16 11:09 - 2017-10-14 08:28 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-11-16 11:09 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-16 11:09 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-16 11:09 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-16 11:09 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-16 11:09 - 2017-10-14 08:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-11-16 11:09 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-16 11:09 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-16 11:09 - 2017-10-14 07:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-11-16 11:09 - 2017-10-14 07:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-11-16 11:09 - 2017-10-14 07:52 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-11-16 11:09 - 2017-10-14 07:51 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-11-16 11:09 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-16 11:09 - 2017-10-14 07:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-11-16 11:09 - 2017-10-14 07:47 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-11-16 11:09 - 2017-10-14 07:46 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-11-16 11:09 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-16 11:09 - 2017-10-14 07:45 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-11-16 11:09 - 2017-10-14 07:45 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-11-16 11:09 - 2017-10-14 07:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-11-16 11:09 - 2017-10-14 07:35 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-11-16 11:09 - 2017-10-14 07:35 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-11-16 11:09 - 2017-10-14 07:34 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-11-16 11:09 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-16 11:09 - 2017-10-14 07:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-11-16 11:09 - 2017-10-14 07:32 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-11-16 11:09 - 2017-10-14 07:31 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-11-16 11:09 - 2017-10-14 07:30 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-11-16 11:09 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-16 11:09 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-16 11:09 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-16 11:09 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-16 11:09 - 2017-10-14 07:23 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-11-16 11:09 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-16 11:09 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-16 11:09 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-16 11:08 - 2017-10-17 00:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-16 11:08 - 2017-10-16 23:34 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-16 11:08 - 2017-10-16 22:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-16 11:08 - 2017-10-12 01:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-16 11:08 - 2017-10-12 01:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-16 11:08 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-16 11:08 - 2017-10-12 01:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-11-16 11:08 - 2017-10-12 01:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-11-16 11:08 - 2017-10-12 01:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-11-16 11:08 - 2017-10-12 01:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-11-16 11:08 - 2017-10-12 01:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-16 11:08 - 2017-10-12 01:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-11-16 11:08 - 2017-10-12 01:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-11-16 11:08 - 2017-10-12 01:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-11-16 11:08 - 2017-10-12 01:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-11-16 11:08 - 2017-10-12 01:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-11-16 11:08 - 2017-10-12 01:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-16 11:08 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-16 11:08 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-16 11:08 - 2017-10-12 01:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-16 11:08 - 2017-10-12 01:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-11-15 16:47 - 2017-11-15 16:47 - 000000000 _____ C:\Windows\system32\last.dump
2017-11-15 11:06 - 2017-11-15 11:06 - 000000000 ____D C:\Users\pierrons\AppData\Local\AVAST Software
2017-11-15 11:00 - 2017-11-15 11:00 - 000554053 _____ ( ) C:\Users\pierrons\Documents\Avast_safe_zone_browser.exe
2017-11-15 10:55 - 2017-11-15 10:55 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-11-15 10:54 - 2017-11-15 11:38 - 000000000 _____ C:\Windows\SysWOW64\last.dump
2017-11-15 10:51 - 2017-11-16 11:34 - 000000000 ____D C:\ProgramData\AVAST Software
2017-11-15 10:50 - 2017-11-15 10:50 - 007154952 _____ (AVAST Software) C:\Users\pierrons\Documents\avast_free_antivirus_setup_online.exe
2017-11-14 11:21 - 2017-11-14 11:21 - 002396870 _____ C:\Users\pierrons\Desktop\Vinz VERSO flyer expo
2017-11-14 11:12 - 2017-11-29 13:36 - 000000000 ____D C:\Users\pierrons\Documents\Fuite Collines
2017-11-09 17:06 - 2017-11-09 17:06 - 000067809 _____ C:\Users\pierrons\Desktop\CV_Amandine_BOUTARD.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-07 13:21 - 2015-06-03 09:04 - 000000128 _____ C:\Windows\system32\config\netlogon.ftl
2017-12-07 12:23 - 2009-07-14 05:45 - 000016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-12-07 12:23 - 2009-07-14 05:45 - 000016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-12-07 12:19 - 2015-04-11 09:44 - 000747320 _____ C:\Windows\system32\perfh00C.dat
2017-12-07 12:19 - 2015-04-11 09:44 - 000149844 _____ C:\Windows\system32\perfc00C.dat
2017-12-07 12:19 - 2009-07-14 06:13 - 001668080 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-07 12:19 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-12-07 12:12 - 2015-04-11 10:05 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2017-12-07 12:11 - 2015-06-15 14:30 - 000001507 _____ C:\Users\Public\Desktop\coriolis.lnk
2017-12-07 12:11 - 2015-06-12 10:08 - 000001507 _____ C:\Users\Public\Desktop\apollon.lnk
2017-12-07 12:11 - 2015-06-12 04:02 - 000001507 _____ C:\Users\bossot\Desktop\coriolis.lnk
2017-12-07 12:11 - 2015-06-12 04:02 - 000001507 _____ C:\Users\bossot\Desktop\apollon.lnk
2017-12-07 10:50 - 2017-11-02 11:13 - 000000000 ____D C:\Users\pierrons\Documents\LS77 nov-dec2017
2017-12-06 14:34 - 2017-09-27 14:33 - 000000000 ____D C:\Users\pierrons\AppData\Local\CrashDumps
2017-11-29 11:37 - 2015-12-28 15:28 - 000000000 ____D C:\Users\pierrons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2017-11-29 10:59 - 2015-09-29 13:44 - 000000000 ____D C:\Users\pierrons\AppData\Local\Google
2017-11-29 10:48 - 2016-01-14 10:09 - 000000000 ____D C:\Users\administrateur\AppData\Local\Google
2017-11-29 10:48 - 2015-09-29 13:45 - 000000000 ____D C:\Program Files (x86)\Google
2017-11-29 10:48 - 2015-06-03 09:53 - 000000000 __SHD C:\Users\administrateur\AppData\Local\EmieUserList
2017-11-29 10:48 - 2015-06-03 09:53 - 000000000 __SHD C:\Users\administrateur\AppData\Local\EmieSiteList
2017-11-29 10:11 - 2015-06-03 09:26 - 000000000 ____D C:\Users\administrateur
2017-11-28 15:30 - 2017-06-20 10:41 - 000000000 ____D C:\Users\pierrons\Documents\LS75 Juillet-Aout2017
2017-11-28 15:28 - 2016-10-21 09:39 - 000000000 ____D C:\Users\pierrons\Documents\Heures Supplémentaires
2017-11-22 14:02 - 2017-09-26 14:02 - 000000000 ____D C:\Users\pierrons\Documents\Mariage
2017-11-20 17:30 - 2016-01-29 12:01 - 000000000 ____D C:\Users\pierrons\AppData\Roaming\vlc
2017-11-16 14:32 - 2016-01-06 15:24 - 000000000 ____D C:\Users\pierrons\Documents\NONEM Organisation
2017-11-16 11:35 - 2009-07-14 05:45 - 000294640 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-16 11:08 - 2015-05-21 15:55 - 000000000 ____D C:\Windows\system32\MRT
2017-11-16 11:01 - 2017-10-11 11:11 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-11-16 11:01 - 2015-05-21 15:55 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-11-15 11:02 - 2015-06-03 09:06 - 000025575 __RSH C:\ProgramData\ntuser.pol
2017-11-15 11:02 - 2009-07-14 04:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2017-11-15 11:02 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-11-10 11:16 - 2017-08-22 09:49 - 000000000 ____D C:\Users\pierrons\Documents\LS76 sept_oct2017
Certains fichiers dans TEMP:
====================
2015-06-09 15:19 - 2015-06-09 15:19 - 000096288 _____ () C:\Users\administrateur\AppData\Local\Temp\cct.dll
2015-06-09 15:19 - 2015-06-09 15:19 - 000287120 _____ (Ask Partner Network) C:\Users\administrateur\AppData\Local\Temp\JavaIC.dll
2015-06-09 15:19 - 2015-06-09 15:19 - 000331488 _____ (McAfee, Inc.) C:\Users\administrateur\AppData\Local\Temp\msscct32.dll
2015-06-09 15:19 - 2015-06-09 15:19 - 000323352 _____ (Yahoo Inc.) C:\Users\administrateur\AppData\Local\Temp\YSearchUtil.dll
2015-05-21 13:41 - 2014-03-13 22:06 - 006730304 _____ (Foxit Corporation) C:\Users\install\AppData\Local\Temp\FoxitUpdater.exe
2016-07-21 02:03 - 2016-07-21 02:03 - 000741440 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u101-windows-au.exe
2016-10-20 02:02 - 2016-10-20 02:03 - 000737856 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-01-19 03:02 - 2017-01-19 03:02 - 000739904 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-04-20 02:02 - 2017-04-20 02:02 - 000739904 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-07-21 02:03 - 2017-07-21 02:03 - 000739904 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u141-windows-au.exe
2017-10-19 02:03 - 2017-11-29 11:01 - 001856576 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u151-windows-au.exe
2015-10-22 02:03 - 2015-10-22 02:03 - 000585824 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u65-windows-au.exe
2015-11-19 03:03 - 2015-11-19 03:03 - 000585824 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u66-windows-au.exe
2016-03-24 03:03 - 2016-03-24 03:03 - 000736320 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u77-windows-au.exe
2016-05-27 02:03 - 2016-06-30 02:03 - 000739904 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u91-windows-au.exe
2017-09-18 14:40 - 2017-09-18 14:41 - 030950664 _____ () C:\Users\pierrons\AppData\Local\Temp\vlc-2.2.6-win32.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys
[2015-04-11 09:59] - [2015-04-11 09:59] - 000296320 _____ () D41D8CD98F00B204E9800998ECF8427E
C:\Windows\system32\Drivers\volsnap.sys => D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <==== ATTENTION
C:\Windows\system32\drivers\acpi.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\amdppm.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\cdrom.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\CompositeBus.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\disk.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\drmk.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\drmkaud.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\hdaudbus.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\hidclass.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\hidparse.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\hidusb.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\i8042prt.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\kbdclass.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\kbdhid.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\monitor.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\mouclass.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\mouhid.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\msisadrv.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\mssmbios.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\pci.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\portcls.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\rdpbus.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\serenum.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\serial.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\sermouse.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\termdd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\tpm.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\umbus.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbccgp.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbehci.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbhub.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbohci.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbport.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\USBSTOR.SYS -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbuhci.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\vdrvroot.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\volmgr.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\volsnap.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\winusb.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\wmiacpi.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
BCD (recoveryenabled=No -> recoveryenabled=Yes) <==== restauré(es) avec succès
LastRegBack: 2017-06-01 23:07
==================== Fin de FRST.txt ============================
Exécuté par Administrateur (administrateur) sur PC150034 (07-12-2017 14:16:25)
Exécuté depuis C:\Users\pierrons\Desktop
Profils chargés: pierrons & Administrateur (Profils disponibles: KASSTTARm & pierrons & AUDRANg & Administrateur & BOSSOt & install & Administrateur)
Platform: Windows 7 Professional Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation) C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe
(Oracle Corporation) C:\oracle\product\10.2.0\client_1\bin\omtsreco.exe
() C:\Program Files (x86)\TotalAV\SecurityService.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin\ccSvcHst.exe
(GlavSoft LLC.) C:\Program Files\TightVNC\tvnserver.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin\ccSvcHst.exe
() C:\Program Files (x86)\TotalAV\TotalAV.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(GlavSoft LLC.) C:\Program Files\TightVNC\tvnserver.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Mairie de la seyne sur mer ) C:\mess\scrut.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\pierrons\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7570136 2014-04-15] (Realtek Semiconductor)
HKLM\...\Run: [tvncontrol] => C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-19] (GlavSoft LLC.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2017-01-19] (Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => c:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-06-12] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1165920 2017-07-20] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [*WerKernelReporting] => C:\Windows\SYSTEM32\WerFault.exe [415232 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-2124312534-615130240-1430679421-3757\...\Run: [GoogleChromeAutoLaunch_00B7E50F2E56A964050F046B9BF01392] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
HKU\S-1-5-21-2124312534-615130240-1430679421-3757\...\Run: [Google Update] => C:\Users\pierrons\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-11-29] (Google Inc.)
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\scrut.lnk [2017-12-07]
ShortcutTarget: scrut.lnk -> C:\mess\scrut.exe (Mairie de la seyne sur mer )
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
Tcpip\Parameters: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{06DD59CB-14D0-4EF2-99D5-9FA2C6CFE9C5}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{201F8CCF-8EF3-4957-AC08-634B440A0C7A}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{A4F49F5F-0518-45D7-AA73-6A68DF4AFEDF}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{CDD69CAB-FA76-4DCC-99F5-BE43CBCBA310}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Tcpip\..\Interfaces\{D6EFCFFC-7E5B-4087-B5AC-57BE3D938366}: [DhcpNameServer] 10.10.11.30 10.10.11.29
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/29
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/29
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/29
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/29
HKU\S-1-5-21-2124312534-615130240-1430679421-3757\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/HPCOM14/29
HKU\S-1-5-21-2124312534-615130240-1430679421-3757\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/29
HKU\S-1-5-21-2124312534-615130240-1430679421-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.fr/?gws_rd=ssl
HKU\S-1-5-21-2124312534-615130240-1430679421-500\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/HPCOM14/29
BHO: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> c:\Program Files\AMD\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: SteadyVideoBHO Class -> {6C680BAE-655C-4E3D-8FC4-E6A520C3D928} -> c:\Program Files (x86)\amd\SteadyVideo\SteadyVideo.dll [2012-02-14] (Advanced Micro Devices)
BHO-x32: Pas de nom -> {6D53EC84-6AAE-4787-AEEE-F4628F01010C} -> Pas de fichier
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-06-09] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-06-09] (Oracle Corporation)
Filter: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/mp4 - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files\AMD\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
Filter-x32: video/x-flv - {20C75730-7C25-476B-95DC-C65810F9E489} - c:\Program Files (x86)\amd\SteadyVideo\VideoMIMEFilter.dll [2011-06-08] (Advanced Micro Devices)
FireFox:
========
FF DefaultProfile: 3aktwevf.default
FF ProfilePath: C:\Users\administrateur\AppData\Roaming\Mozilla\Firefox\Profiles\3aktwevf.default [2017-11-29]
FF Homepage: Mozilla\Firefox\Profiles\3aktwevf.default -> hxxp://www.google.fr/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-06-04] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-06-04] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Users\pierrons\Documents\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-06-09] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-06-09] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-24] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2124312534-615130240-1430679421-3757: @tools.google.com/Google Update;version=3 -> C:\Users\pierrons\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-29] (Google Inc.)
FF Plugin HKU\S-1-5-21-2124312534-615130240-1430679421-3757: @tools.google.com/Google Update;version=9 -> C:\Users\pierrons\AppData\Local\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-29] (Google Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [looohgelibjoplmkhecmalapkgadkfcc] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2124312534-615130240-1430679421-3757\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [looohgelibjoplmkhecmalapkgadkfcc] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AMD FUEL Service; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-06-12] (Advanced Micro Devices, Inc.) [Fichier non signé]
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.)
R2 BrcmMgmtAgent; C:\Program Files\Broadcom\MgmtAgent\BrcmMgmtAgent.exe [213504 2014-04-01] (Broadcom Corporation) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
R2 OracleMTSRecoveryService; C:\oracle\product\10.2.0\client_1\bin\omtsreco.exe [53248 2006-10-11] (Oracle Corporation) [Fichier non signé]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [290520 2014-01-08] (Realtek Semiconductor)
R2 SecurityService; C:\Program Files (x86)\TotalAV\SecurityService.exe [441704 2017-11-02] ()
R2 SepMasterService; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin\ccSvcHst.exe [157976 2017-06-06] (Symantec Corporation)
S3 SNAC; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin64\snac64.exe [378088 2017-06-06] (Symantec Corporation)
R2 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [2179056 2013-07-19] (GlavSoft LLC.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-12-04] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 ACPI; C:\Windows\System32\drivers\ACPI.sys [334208 2010-11-21] () [Fichier non signé]
R3 AmdPPM; C:\Windows\system32\drivers\amdppm.sys [60928 2009-07-14] () [Fichier non signé]
R2 AODDriver4.3; c:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-11-04] (Advanced Micro Devices)
R1 BHDrvx64; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Data\Definitions\BASHDefs\20171127.001\BHDrvx64.sys [1872024 2017-10-17] (Symantec Corporation)
R1 ccSettings_{DEB2F3C1-242C-4DAE-BA79-61E77B61DAAF}; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\ccSetx64.sys [174328 2017-06-06] (Symantec Corporation)
R1 cdrom; C:\Windows\System32\DRIVERS\cdrom.sys [147456 2010-11-21] () [Fichier non signé]
R3 CompositeBus; C:\Windows\system32\drivers\CompositeBus.sys [38912 2010-11-21] () [Fichier non signé]
R0 Disk; C:\Windows\System32\drivers\disk.sys [73664 2016-01-21] () [Fichier non signé]
S3 drmkaud; C:\Windows\system32\drivers\drmkaud.sys [5632 2015-12-08] () [Fichier non signé]
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [508056 2017-10-19] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [158360 2017-10-19] (Symantec Corporation)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77432 2017-11-29] ()
R3 HDAudBus; C:\Windows\system32\drivers\HDAudBus.sys [122368 2010-11-21] () [Fichier non signé]
R3 HidUsb; C:\Windows\System32\DRIVERS\hidusb.sys [30208 2010-11-21] () [Fichier non signé]
R3 i8042prt; C:\Windows\system32\drivers\i8042prt.sys [105472 2009-07-14] () [Fichier non signé]
R1 IDSVia64; C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Data\Definitions\IPSDefs\20171206.021\IDSvia64.sys [1056920 2017-12-07] (Symantec Corporation)
R3 kbdclass; C:\Windows\System32\DRIVERS\kbdclass.sys [50768 2009-07-14] () [Fichier non signé]
R3 kbdhid; C:\Windows\System32\DRIVERS\kbdhid.sys [33280 2010-11-21] () [Fichier non signé]
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193968 2017-12-07] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-12-07] (Malwarebytes)
R3 monitor; C:\Windows\System32\DRIVERS\monitor.sys [30208 2009-07-14] () [Fichier non signé]
R3 mouclass; C:\Windows\System32\DRIVERS\mouclass.sys [49216 2009-07-14] () [Fichier non signé]
R3 mouhid; C:\Windows\System32\DRIVERS\mouhid.sys [31232 2009-07-14] () [Fichier non signé]
R0 msisadrv; C:\Windows\System32\drivers\msisadrv.sys [15424 2009-07-14] () [Fichier non signé]
R1 mssmbios; C:\Windows\system32\drivers\mssmbios.sys [32320 2009-07-14] () [Fichier non signé]
R0 pci; C:\Windows\System32\drivers\pci.sys [184704 2010-11-21] () [Fichier non signé]
R3 rdpbus; C:\Windows\system32\drivers\rdpbus.sys [24064 2009-07-14] () [Fichier non signé]
R3 Serenum; C:\Windows\system32\drivers\serenum.sys [23552 2009-07-14] () [Fichier non signé]
R1 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] () [Fichier non signé]
S3 sermouse; C:\Windows\system32\drivers\sermouse.sys [26624 2009-07-14] () [Fichier non signé]
R1 SRTSP; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\SRTSP64.SYS [801920 2017-06-06] (Symantec Corporation)
R1 SRTSPX; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\SRTSPX64.SYS [49280 2017-06-06] (Symantec Corporation)
S3 SyDvCtrl; C:\Program Files (x86)\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Bin64\SyDvCtrl64.sys [44528 2017-06-06] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\symefasi\0603000.00F\symefasi.sys [1717912 2017-06-06] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102608 2017-06-06] (Symantec Corporation)
R1 SymIRON; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\Ironx64.SYS [308896 2017-06-06] (Symantec Corporation)
R1 SYMNETS; C:\Windows\System32\Drivers\SEP\0E00096F\00C8.105\x64\SYMNETS.SYS [567448 2017-06-06] (Symantec Corporation)
R1 SysPlant; C:\Windows\System32\Drivers\SysPlant.sys [195896 2017-06-07] (Symantec Corporation)
R1 Teefer2; C:\Windows\System32\DRIVERS\Teefer.sys [124928 2017-06-06] (Symantec Corporation)
R1 TermDD; C:\Windows\system32\drivers\termdd.sys [63360 2010-11-21] () [Fichier non signé]
R3 TPM; C:\Windows\System32\drivers\tpm.sys [147904 2016-02-05] () [Fichier non signé]
R3 umbus; C:\Windows\System32\DRIVERS\umbus.sys [48640 2010-11-21] () [Fichier non signé]
S3 usbccgp; C:\Windows\system32\drivers\usbccgp.sys [99840 2017-10-18] () [Fichier non signé]
R3 usbehci; C:\Windows\system32\drivers\usbehci.sys [56320 2017-10-18] () [Fichier non signé]
R3 usbhub; C:\Windows\system32\drivers\usbhub.sys [344064 2017-10-18] () [Fichier non signé]
R3 usbohci; C:\Windows\system32\drivers\usbohci.sys [25600 2017-10-18] () [Fichier non signé]
S3 USBSTOR; C:\Windows\System32\DRIVERS\USBSTOR.SYS [91648 2016-02-03] () [Fichier non signé]
S3 usbuhci; C:\Windows\system32\drivers\usbuhci.sys [30720 2017-10-18] () [Fichier non signé]
R0 vdrvroot; C:\Windows\System32\drivers\vdrvroot.sys [36432 2009-07-14] () [Fichier non signé]
R0 volmgr; C:\Windows\System32\drivers\volmgr.sys [71552 2010-11-21] () [Fichier non signé]
R0 volsnap; C:\Windows\System32\drivers\volsnap.sys [296320 2015-04-11] () [Fichier non signé]
S3 WinUsb; C:\Windows\System32\DRIVERS\WinUsb.sys [41984 2010-11-21] () [Fichier non signé]
R3 WmiAcpi; C:\Windows\system32\drivers\wmiacpi.sys [14336 2009-07-14] () [Fichier non signé]
U1 aswbdisk; pas de ImagePath
S3 NAVENG; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Data\Definitions\SDSDefs\20170606.009\ENG64.SYS [X]
S3 NAVEX15; \??\C:\ProgramData\Symantec\Symantec Endpoint Protection\14.0.2415.0200.105\Data\Definitions\SDSDefs\20170606.009\EX64.SYS [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-07 14:16 - 2017-12-07 14:18 - 000020074 _____ C:\Users\pierrons\Desktop\FRST.txt
2017-12-07 14:16 - 2017-12-07 14:16 - 000000000 ____D C:\FRST
2017-12-07 14:15 - 2017-12-07 14:15 - 002390528 _____ (Farbar) C:\Users\pierrons\Desktop\FRST64.exe
2017-12-07 13:25 - 2017-12-07 13:25 - 007176464 _____ (AVAST Software) C:\Users\pierrons\Downloads\ca69a4c6-fa29-4e5c-9d39-72a8469d33c6.tmp
2017-12-07 11:57 - 2017-12-07 11:57 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-12-07 11:57 - 2017-12-07 11:57 - 000193968 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2017-12-07 11:56 - 2017-12-07 11:56 - 000001874 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-12-07 11:56 - 2017-12-07 11:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-12-07 11:56 - 2017-12-07 11:56 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-12-07 11:56 - 2017-12-07 11:56 - 000000000 ____D C:\Program Files\Malwarebytes
2017-12-07 11:56 - 2017-11-29 09:11 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-12-07 11:54 - 2017-12-07 11:55 - 083316440 _____ (Malwarebytes ) C:\Users\pierrons\Documents\mb3-setup-35891.35891-3.3.1.2183-1.0.262-1.0.3374.exe
2017-12-06 11:49 - 2017-12-06 11:49 - 000000000 ____D C:\Users\pierrons\Documents\Nouveau dossier
2017-12-04 17:04 - 2017-12-04 17:09 - 000000000 ____D C:\Users\pierrons\Documents\Techno Bitches
2017-12-04 15:34 - 2017-12-06 11:13 - 000022906 _____ C:\Users\pierrons\Documents\Henry Bi.odt
2017-11-30 10:49 - 2017-11-30 10:49 - 000000000 ____D C:\Users\pierrons\Documents\Dessins hENRI
2017-11-29 11:03 - 2017-11-29 11:03 - 000002370 _____ C:\Users\pierrons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-29 11:03 - 2017-11-29 11:03 - 000002362 _____ C:\Users\pierrons\Desktop\Google Chrome.lnk
2017-11-29 11:01 - 2017-10-12 01:55 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2017-11-29 11:01 - 2017-10-12 01:37 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2017-11-29 10:56 - 2017-11-29 10:57 - 000001023 _____ C:\Users\pierrons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TotalAV.lnk
2017-11-29 10:56 - 2017-11-29 10:57 - 000000000 ____D C:\Users\pierrons\Documents\TotalAV
2017-11-29 10:23 - 2017-11-29 10:23 - 000000000 ____D C:\ProgramData\SecuritySuite
2017-11-29 10:13 - 2017-11-29 10:13 - 000000000 ____D C:\Users\administrateur\Documents\TotalAV
2017-11-29 10:12 - 2017-11-29 10:13 - 000000000 ____D C:\Users\administrateur\AppData\Roaming\TotalAV
2017-11-29 10:12 - 2017-11-29 10:12 - 000001023 _____ C:\Users\administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TotalAV.lnk
2017-11-29 10:12 - 2017-11-29 10:12 - 000000000 ____D C:\Users\administrateur\AppData\Local\CrashDumps
2017-11-29 10:11 - 2017-11-29 10:27 - 000000000 ____D C:\Program Files (x86)\TotalAV
2017-11-29 10:11 - 2017-11-29 10:12 - 000001886 _____ C:\Users\administrateur\Desktop\TotalAV.lnk
2017-11-27 10:35 - 2017-11-27 10:36 - 000000000 ____D C:\Users\pierrons\Documents\Assurance clés opel
2017-11-24 16:29 - 2017-11-27 11:58 - 000000000 ____D C:\Users\pierrons\Documents\Pikard
2017-11-24 14:52 - 2017-11-24 14:52 - 000231458 _____ C:\Users\pierrons\Documents\Courrier assurance dossier 6403161.pdf
2017-11-20 15:50 - 2017-11-20 15:50 - 000018114 _____ C:\Users\pierrons\Desktop\homonymes-homophones-grammaticaux-ca-sa (1).webp
2017-11-20 15:49 - 2017-11-20 15:49 - 000018114 _____ C:\Users\pierrons\Desktop\homonymes-homophones-grammaticaux-ca-sa.webp
2017-11-17 16:14 - 2017-11-17 16:17 - 000000000 ____D C:\Users\pierrons\Documents\IAM dome 2017
2017-11-16 11:12 - 2017-10-18 03:06 - 000327168 _____ C:\Windows\system32\Drivers\usbport.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000099840 _____ C:\Windows\system32\Drivers\usbccgp.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000056320 _____ C:\Windows\system32\Drivers\usbehci.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000030720 _____ C:\Windows\system32\Drivers\usbuhci.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000025600 _____ C:\Windows\system32\Drivers\usbohci.sys
2017-11-16 11:12 - 2017-10-18 03:06 - 000007808 _____ C:\Windows\system32\Drivers\usbd.sys
2017-11-16 11:12 - 2017-09-07 14:05 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2017-11-16 11:12 - 2017-09-07 14:05 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2017-11-16 11:11 - 2017-10-18 03:06 - 000344064 _____ C:\Windows\system32\Drivers\usbhub.sys
2017-11-16 11:11 - 2017-09-07 14:05 - 000995272 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2017-11-16 11:11 - 2017-09-07 14:05 - 000922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2017-11-16 11:09 - 2017-10-18 08:31 - 000395976 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-11-16 11:09 - 2017-10-18 07:45 - 000347336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-11-16 11:09 - 2017-10-14 09:38 - 025731584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-11-16 11:09 - 2017-10-14 09:23 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-11-16 11:09 - 2017-10-14 09:23 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-11-16 11:09 - 2017-10-14 09:13 - 002903552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-11-16 11:09 - 2017-10-14 09:12 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-11-16 11:09 - 2017-10-14 09:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-11-16 11:09 - 2017-10-14 09:11 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-11-16 11:09 - 2017-10-14 09:11 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-11-16 11:09 - 2017-10-14 09:11 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-11-16 11:09 - 2017-10-14 09:09 - 005979648 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-11-16 11:09 - 2017-10-14 09:05 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-11-16 11:09 - 2017-10-14 09:04 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-11-16 11:09 - 2017-10-14 09:02 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-11-16 11:09 - 2017-10-14 09:01 - 000816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-11-16 11:09 - 2017-10-14 09:01 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-11-16 11:09 - 2017-10-14 09:01 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-11-16 11:09 - 2017-10-14 09:00 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-11-16 11:09 - 2017-10-14 08:55 - 000968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-11-16 11:09 - 2017-10-14 08:53 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-11-16 11:09 - 2017-10-14 08:47 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-11-16 11:09 - 2017-10-14 08:47 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-11-16 11:09 - 2017-10-14 08:46 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-11-16 11:09 - 2017-10-14 08:43 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-11-16 11:09 - 2017-10-14 08:43 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-11-16 11:09 - 2017-10-14 08:41 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-11-16 11:09 - 2017-10-14 08:40 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-11-16 11:09 - 2017-10-14 08:31 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-11-16 11:09 - 2017-10-14 08:30 - 015266816 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-11-16 11:09 - 2017-10-14 08:30 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-11-16 11:09 - 2017-10-14 08:29 - 000807936 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-11-16 11:09 - 2017-10-14 08:28 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-11-16 11:09 - 2017-10-14 08:27 - 002134528 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-11-16 11:09 - 2017-10-14 08:21 - 003241472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-11-16 11:09 - 2017-10-14 08:14 - 020269056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-11-16 11:09 - 2017-10-14 08:09 - 001544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-11-16 11:09 - 2017-10-14 08:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-11-16 11:09 - 2017-10-14 07:58 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-11-16 11:09 - 2017-10-14 07:53 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-11-16 11:09 - 2017-10-14 07:53 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-11-16 11:09 - 2017-10-14 07:52 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-11-16 11:09 - 2017-10-14 07:52 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-11-16 11:09 - 2017-10-14 07:51 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-11-16 11:09 - 2017-10-14 07:50 - 002293760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-11-16 11:09 - 2017-10-14 07:47 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-11-16 11:09 - 2017-10-14 07:47 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-11-16 11:09 - 2017-10-14 07:46 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-11-16 11:09 - 2017-10-14 07:45 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-11-16 11:09 - 2017-10-14 07:45 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-11-16 11:09 - 2017-10-14 07:45 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-11-16 11:09 - 2017-10-14 07:38 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-11-16 11:09 - 2017-10-14 07:35 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-11-16 11:09 - 2017-10-14 07:35 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-11-16 11:09 - 2017-10-14 07:34 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-11-16 11:09 - 2017-10-14 07:33 - 004542464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-11-16 11:09 - 2017-10-14 07:33 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-11-16 11:09 - 2017-10-14 07:32 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-11-16 11:09 - 2017-10-14 07:31 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-11-16 11:09 - 2017-10-14 07:30 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-11-16 11:09 - 2017-10-14 07:28 - 013680128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-11-16 11:09 - 2017-10-14 07:25 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-11-16 11:09 - 2017-10-14 07:24 - 000694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-11-16 11:09 - 2017-10-14 07:23 - 002058752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-11-16 11:09 - 2017-10-14 07:23 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-11-16 11:09 - 2017-10-14 07:10 - 002767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-11-16 11:09 - 2017-10-14 07:07 - 001314304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-11-16 11:09 - 2017-10-14 07:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-11-16 11:08 - 2017-10-17 00:07 - 001680616 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-11-16 11:08 - 2017-10-16 23:34 - 003222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-11-16 11:08 - 2017-10-16 22:55 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-11-16 11:08 - 2017-10-12 01:58 - 000382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 014635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 012574720 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2017-11-16 11:08 - 2017-10-12 01:55 - 002319872 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 002058240 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000151552 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2017-11-16 11:08 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2017-11-16 11:08 - 2017-10-12 01:55 - 000005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2017-11-16 11:08 - 2017-10-12 01:40 - 000308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-11-16 11:08 - 2017-10-12 01:39 - 000591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-11-16 11:08 - 2017-10-12 01:38 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-11-16 11:08 - 2017-10-12 01:38 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-11-16 11:08 - 2017-10-12 01:37 - 012574208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2017-11-16 11:08 - 2017-10-12 01:37 - 011410944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 001549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 001400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 001363968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Query.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000111104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-11-16 11:08 - 2017-10-12 01:37 - 000010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-11-16 11:08 - 2017-10-12 01:26 - 000427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-11-16 11:08 - 2017-10-12 01:26 - 000164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-11-16 11:08 - 2017-10-12 01:25 - 000086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-11-16 11:08 - 2017-10-12 01:25 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-11-16 11:08 - 2017-10-12 01:24 - 000008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2017-11-16 11:08 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2017-11-16 11:08 - 2017-10-12 01:24 - 000004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2017-11-16 11:08 - 2017-10-12 01:20 - 000113152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2017-11-16 11:08 - 2017-10-12 01:16 - 000034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-11-15 16:47 - 2017-11-15 16:47 - 000000000 _____ C:\Windows\system32\last.dump
2017-11-15 11:06 - 2017-11-15 11:06 - 000000000 ____D C:\Users\pierrons\AppData\Local\AVAST Software
2017-11-15 11:00 - 2017-11-15 11:00 - 000554053 _____ ( ) C:\Users\pierrons\Documents\Avast_safe_zone_browser.exe
2017-11-15 10:55 - 2017-11-15 10:55 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-11-15 10:54 - 2017-11-15 11:38 - 000000000 _____ C:\Windows\SysWOW64\last.dump
2017-11-15 10:51 - 2017-11-16 11:34 - 000000000 ____D C:\ProgramData\AVAST Software
2017-11-15 10:50 - 2017-11-15 10:50 - 007154952 _____ (AVAST Software) C:\Users\pierrons\Documents\avast_free_antivirus_setup_online.exe
2017-11-14 11:21 - 2017-11-14 11:21 - 002396870 _____ C:\Users\pierrons\Desktop\Vinz VERSO flyer expo
2017-11-14 11:12 - 2017-11-29 13:36 - 000000000 ____D C:\Users\pierrons\Documents\Fuite Collines
2017-11-09 17:06 - 2017-11-09 17:06 - 000067809 _____ C:\Users\pierrons\Desktop\CV_Amandine_BOUTARD.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-07 13:21 - 2015-06-03 09:04 - 000000128 _____ C:\Windows\system32\config\netlogon.ftl
2017-12-07 12:23 - 2009-07-14 05:45 - 000016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-12-07 12:23 - 2009-07-14 05:45 - 000016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-12-07 12:19 - 2015-04-11 09:44 - 000747320 _____ C:\Windows\system32\perfh00C.dat
2017-12-07 12:19 - 2015-04-11 09:44 - 000149844 _____ C:\Windows\system32\perfc00C.dat
2017-12-07 12:19 - 2009-07-14 06:13 - 001668080 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-07 12:19 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-12-07 12:12 - 2015-04-11 10:05 - 000065536 _____ C:\Windows\system32\spu_storage.bin
2017-12-07 12:11 - 2015-06-15 14:30 - 000001507 _____ C:\Users\Public\Desktop\coriolis.lnk
2017-12-07 12:11 - 2015-06-12 10:08 - 000001507 _____ C:\Users\Public\Desktop\apollon.lnk
2017-12-07 12:11 - 2015-06-12 04:02 - 000001507 _____ C:\Users\bossot\Desktop\coriolis.lnk
2017-12-07 12:11 - 2015-06-12 04:02 - 000001507 _____ C:\Users\bossot\Desktop\apollon.lnk
2017-12-07 10:50 - 2017-11-02 11:13 - 000000000 ____D C:\Users\pierrons\Documents\LS77 nov-dec2017
2017-12-06 14:34 - 2017-09-27 14:33 - 000000000 ____D C:\Users\pierrons\AppData\Local\CrashDumps
2017-11-29 11:37 - 2015-12-28 15:28 - 000000000 ____D C:\Users\pierrons\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2017-11-29 10:59 - 2015-09-29 13:44 - 000000000 ____D C:\Users\pierrons\AppData\Local\Google
2017-11-29 10:48 - 2016-01-14 10:09 - 000000000 ____D C:\Users\administrateur\AppData\Local\Google
2017-11-29 10:48 - 2015-09-29 13:45 - 000000000 ____D C:\Program Files (x86)\Google
2017-11-29 10:48 - 2015-06-03 09:53 - 000000000 __SHD C:\Users\administrateur\AppData\Local\EmieUserList
2017-11-29 10:48 - 2015-06-03 09:53 - 000000000 __SHD C:\Users\administrateur\AppData\Local\EmieSiteList
2017-11-29 10:11 - 2015-06-03 09:26 - 000000000 ____D C:\Users\administrateur
2017-11-28 15:30 - 2017-06-20 10:41 - 000000000 ____D C:\Users\pierrons\Documents\LS75 Juillet-Aout2017
2017-11-28 15:28 - 2016-10-21 09:39 - 000000000 ____D C:\Users\pierrons\Documents\Heures Supplémentaires
2017-11-22 14:02 - 2017-09-26 14:02 - 000000000 ____D C:\Users\pierrons\Documents\Mariage
2017-11-20 17:30 - 2016-01-29 12:01 - 000000000 ____D C:\Users\pierrons\AppData\Roaming\vlc
2017-11-16 14:32 - 2016-01-06 15:24 - 000000000 ____D C:\Users\pierrons\Documents\NONEM Organisation
2017-11-16 11:35 - 2009-07-14 05:45 - 000294640 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-16 11:08 - 2015-05-21 15:55 - 000000000 ____D C:\Windows\system32\MRT
2017-11-16 11:01 - 2017-10-11 11:11 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
2017-11-16 11:01 - 2015-05-21 15:55 - 127017032 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-11-15 11:02 - 2015-06-03 09:06 - 000025575 __RSH C:\ProgramData\ntuser.pol
2017-11-15 11:02 - 2009-07-14 04:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2017-11-15 11:02 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-11-10 11:16 - 2017-08-22 09:49 - 000000000 ____D C:\Users\pierrons\Documents\LS76 sept_oct2017
Certains fichiers dans TEMP:
====================
2015-06-09 15:19 - 2015-06-09 15:19 - 000096288 _____ () C:\Users\administrateur\AppData\Local\Temp\cct.dll
2015-06-09 15:19 - 2015-06-09 15:19 - 000287120 _____ (Ask Partner Network) C:\Users\administrateur\AppData\Local\Temp\JavaIC.dll
2015-06-09 15:19 - 2015-06-09 15:19 - 000331488 _____ (McAfee, Inc.) C:\Users\administrateur\AppData\Local\Temp\msscct32.dll
2015-06-09 15:19 - 2015-06-09 15:19 - 000323352 _____ (Yahoo Inc.) C:\Users\administrateur\AppData\Local\Temp\YSearchUtil.dll
2015-05-21 13:41 - 2014-03-13 22:06 - 006730304 _____ (Foxit Corporation) C:\Users\install\AppData\Local\Temp\FoxitUpdater.exe
2016-07-21 02:03 - 2016-07-21 02:03 - 000741440 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u101-windows-au.exe
2016-10-20 02:02 - 2016-10-20 02:03 - 000737856 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-01-19 03:02 - 2017-01-19 03:02 - 000739904 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-04-20 02:02 - 2017-04-20 02:02 - 000739904 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-07-21 02:03 - 2017-07-21 02:03 - 000739904 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u141-windows-au.exe
2017-10-19 02:03 - 2017-11-29 11:01 - 001856576 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u151-windows-au.exe
2015-10-22 02:03 - 2015-10-22 02:03 - 000585824 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u65-windows-au.exe
2015-11-19 03:03 - 2015-11-19 03:03 - 000585824 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u66-windows-au.exe
2016-03-24 03:03 - 2016-03-24 03:03 - 000736320 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u77-windows-au.exe
2016-05-27 02:03 - 2016-06-30 02:03 - 000739904 _____ (Oracle Corporation) C:\Users\pierrons\AppData\Local\Temp\jre-8u91-windows-au.exe
2017-09-18 14:40 - 2017-09-18 14:41 - 030950664 _____ () C:\Users\pierrons\AppData\Local\Temp\vlc-2.2.6-win32.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys
[2015-04-11 09:59] - [2015-04-11 09:59] - 000296320 _____ () D41D8CD98F00B204E9800998ECF8427E
C:\Windows\system32\Drivers\volsnap.sys => D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <==== ATTENTION
C:\Windows\system32\drivers\acpi.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\amdppm.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\cdrom.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\CompositeBus.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\disk.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\drmk.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\drmkaud.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\hdaudbus.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\hidclass.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\hidparse.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\hidusb.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\i8042prt.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\kbdclass.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\kbdhid.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\monitor.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\mouclass.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\mouhid.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\msisadrv.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\mssmbios.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\pci.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\portcls.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\rdpbus.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\serenum.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\serial.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\sermouse.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\termdd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\tpm.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\umbus.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbccgp.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbd.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbehci.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbhub.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbohci.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbport.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\USBSTOR.SYS -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\usbuhci.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\vdrvroot.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\volmgr.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\volsnap.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\winusb.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
C:\Windows\system32\drivers\wmiacpi.sys -> MD5 = D41D8CD98F00B204E9800998ECF8427E (0-byte MD5) <======= ATTENTION
BCD (recoveryenabled=No -> recoveryenabled=Yes) <==== restauré(es) avec succès
LastRegBack: 2017-06-01 23:07
==================== Fin de FRST.txt ============================