Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015
Ran by evelyne (administrator) on EVELYNE on 03-06-2015 17:24:47
Running from C:\Users\evelyne pigeat\Desktop
Loaded Profiles: evelyne (Available Profiles: evelyne)
Platform: Windows 8.1 Single Language (X64) OS Language: Français (France)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
() C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(Toshiba Corporation) C:\Program Files\TOSHIBA\Teco\TecoService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Users\evelyne pigeat\AppData\Local\Google\Update\GoogleUpdate.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Teco\TecoResident.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Hotkey\TCrdMain_Win8.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\OFFICE11\OUTLOOK.EXE
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\Toshiba.Tempro.UI.CommonNotifier.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(McAfee, Inc.) C:\Program Files (x86)\McAfee Security Scan\3.8.130\SSScheduler.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [TSSSrv] => C:\Program Files (x86)\TOSHIBA\System Setting\TSSSrv.exe [296008 2013-10-22] (TOSHIBA Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2778864 2014-08-06] (Synaptics Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4022898307-792280897-3800642082-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1199576 2014-02-08] (Spotify Ltd)
HKU\S-1-5-21-4022898307-792280897-3800642082-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-4022898307-792280897-3800642082-1001\...\Run: [Google Update] => C:\Users\evelyne pigeat\AppData\Local\Google\Update\GoogleUpdate.exe [107912 2014-11-01] (Google Inc.)
HKU\S-1-5-21-4022898307-792280897-3800642082-1001\...\Policies\Explorer: [HideSCAHealth] 0
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-06-03]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.8.130\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PC Sync.lnk [2014-07-07]
ShortcutTarget: PC Sync.lnk -> C:\Program Files (x86)\PC Sync\Voxsync.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-4022898307-792280897-3800642082-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr/
HKU\S-1-5-21-4022898307-792280897-3800642082-1001\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://toshiba.eu/symbaloo_c
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF ProfilePath: C:\Users\evelyne pigeat\AppData\Roaming\Mozilla\Firefox\Profiles\7bt0vkvl.default-1429127022836
FF Homepage: https://www.google.fr/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin -> C:\Program Files (x86)\McAfee Security Scan\3.8.130\npMcAfeeMss.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll [2014-10-10] (pdfforge GmbH)
FF Plugin HKU\S-1-5-21-4022898307-792280897-3800642082-1001: @Google.com/GoogleEarthPlugin -> C:\Users\evelyne pigeat\AppData\Local\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin HKU\S-1-5-21-4022898307-792280897-3800642082-1001: @tools.google.com/Google Update;version=3 -> C:\Users\evelyne pigeat\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Plugin HKU\S-1-5-21-4022898307-792280897-3800642082-1001: @tools.google.com/Google Update;version=9 -> C:\Users\evelyne pigeat\AppData\Local\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.)
FF Extension: Adblock Plus - C:\Users\evelyne pigeat\AppData\Roaming\Mozilla\Firefox\Profiles\7bt0vkvl.default-1429127022836\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-04-16]

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [312448 2013-10-01] (Windows (R) Win 7 DDK provider) [File not signed]
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
R2 dts_apo_service; C:\Program Files (x86)\DTS, Inc\DTS Studio Sound\dts_apo_service.exe [19792 2013-11-07] ()
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-25] (WildTangent)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.8.130\McCHSvc.exe [235216 2013-09-06] (McAfee, Inc.)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-10-10] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-10-10] (pdfforge GmbH)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [116088 2013-07-19] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S4 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4226560 2014-10-27] (Qualcomm Atheros Communications, Inc.)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-08-22] (Disc Soft Ltd)
S3 RTWlanE; C:\Windows\system32\DRIVERS\rtwlane.sys [1936088 2013-07-31] (Realtek Semiconductor Corporation                           )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [34544 2014-08-06] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [32624 2013-08-19] (Windows (R) Win 7 DDK provider)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-02] (Intel Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-03 17:24 - 2015-06-03 17:25 - 00011320 _____ () C:\Users\evelyne pigeat\Desktop\FRST.txt
2015-06-03 17:24 - 2015-06-03 17:24 - 02108928 _____ (Farbar) C:\Users\evelyne pigeat\Desktop\FRST64.exe
2015-06-03 17:24 - 2015-06-03 17:24 - 00000000 ____D () C:\FRST
2015-06-03 17:22 - 2015-06-03 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-06-03 17:19 - 2015-06-03 17:22 - 00925936 _____ (McAfee, Inc.) C:\Users\evelyne pigeat\Downloads\SecurityScan_Release_small.exe
2015-06-03 17:17 - 2015-06-03 17:22 - 00002193 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-06-03 17:17 - 2015-06-03 17:22 - 00000000 ____D () C:\Program Files (x86)\McAfee Security Scan
2015-06-03 17:17 - 2015-06-03 17:17 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2015-06-03 17:17 - 2015-06-03 17:17 - 00000000 ____D () C:\ProgramData\McAfee
2015-06-03 14:13 - 2015-06-03 14:13 - 00000000 ____D () C:\Users\evelyne pigeat\Documents\PC Cleaner
2015-06-03 09:13 - 2015-06-03 09:13 - 00000000 ____D () C:\ProgramData\TOSHIBA Tempro
2015-06-03 09:13 - 2015-06-03 09:13 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2015-06-03 07:00 - 2015-06-03 11:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-06-03 06:32 - 2015-06-03 06:31 - 00179570 _____ () C:\Users\evelyne pigeat\Desktop\Attestation Dispo Specifique 2015.odt
2015-06-03 06:32 - 2015-06-03 06:31 - 00109283 _____ () C:\Users\evelyne pigeat\Desktop\dispositif Specifique 2015.odt
2015-06-03 06:32 - 2015-06-03 06:31 - 00070391 _____ () C:\Users\evelyne pigeat\Desktop\DIF 2015.odt
2015-06-03 06:31 - 2015-06-03 06:31 - 00000000 ____D () C:\Users\evelyne pigeat\Downloads\pieces jointes_03_06_2015
2015-06-03 06:28 - 2015-06-03 06:29 - 00359750 _____ () C:\Users\evelyne pigeat\Downloads\pieces jointes_03_06_2015.zip
2015-06-02 12:51 - 2015-06-03 17:04 - 00810140 _____ () C:\Windows\WindowsUpdate.log
2015-06-02 12:50 - 2015-06-03 16:53 - 00000580 _____ () C:\Windows\setupact.log
2015-06-02 12:50 - 2015-06-03 13:21 - 00009252 _____ () C:\Windows\PFRO.log
2015-06-02 12:50 - 2015-06-02 12:50 - 00000000 _____ () C:\Windows\setuperr.log
2015-06-02 12:27 - 2015-06-03 09:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-06-02 11:17 - 2015-06-02 11:17 - 00000000 ____D () C:\Program Files (x86)\ESET
2015-06-02 10:10 - 2015-06-02 10:10 - 00000000 ____D () C:\ProgramData\Reimage Protector
2015-06-02 10:09 - 2015-06-02 10:42 - 00000000 ____D () C:\Program Files\Reimage
2015-06-02 10:08 - 2015-06-02 10:46 - 00000000 ____D () C:\rei
2015-06-01 22:13 - 2015-06-01 22:16 - 00001026 _____ () C:\Users\Public\Desktop\Poursuivre l'installation de Reimage Repair.lnk
2015-06-01 22:12 - 2015-06-01 23:11 - 00000099 _____ () C:\Windows\Reimage.ini
2015-06-01 22:12 - 2015-06-01 22:12 - 00768512 _____ (Reimage®) C:\Users\evelyne pigeat\Downloads\ReimageRepair.exe
2015-06-01 21:39 - 2015-06-03 09:55 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-06-01 21:24 - 2015-06-01 21:39 - 05481336 _____ (Avast Software s.r.o.) C:\Users\Public\Desktop\avast_free_antivirus_setup_online_01net.exe
2015-06-01 21:24 - 2015-06-01 21:39 - 05481336 _____ (Avast Software s.r.o.) C:\Users\evelyne pigeat\Downloads\avast_free_antivirus_setup_online_01net.exe
2015-06-01 15:43 - 2015-06-01 21:20 - 04165564 _____ () C:\Users\evelyne pigeat\Downloads\WindowsDefender(1).msi.part
2015-06-01 14:24 - 2015-06-01 14:24 - 00000000 ___HD () C:\$SysReset
2015-06-01 13:22 - 2015-06-01 13:23 - 00608344 _____ () C:\Users\evelyne pigeat\Downloads\MCPR.exe
2015-06-01 11:41 - 2015-06-01 12:31 - 04062973 _____ (Avira Operations GmbH & Co. KG) C:\Users\evelyne pigeat\Downloads\avira_fr_av_556c0352610e8__ws.exe
2015-06-01 08:39 - 2015-03-20 06:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\compstui.dll
2015-06-01 08:39 - 2015-03-20 06:08 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2015-06-01 08:39 - 2015-03-20 05:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2015-06-01 08:39 - 2015-03-20 05:07 - 01091072 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2015-06-01 08:39 - 2015-01-06 06:01 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndproxy.sys
2015-06-01 08:39 - 2015-01-06 05:59 - 00080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2015-06-01 08:39 - 2015-01-06 04:12 - 00185856 _____ (Microsoft Corporation) C:\Windows\system32\rascfg.dll
2015-06-01 08:39 - 2015-01-06 04:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rascfg.dll
2015-06-01 08:33 - 2015-04-16 09:17 - 00325464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBXHCI.SYS
2015-06-01 08:33 - 2015-04-14 01:37 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\authz.dll
2015-06-01 08:33 - 2015-04-14 01:34 - 00180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authz.dll
2015-06-01 08:33 - 2015-04-10 03:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\UIAutomationCore.dll
2015-06-01 08:33 - 2015-04-10 03:17 - 01018880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAutomationCore.dll
2015-06-01 08:33 - 2015-04-09 01:41 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rgb9rast.dll
2015-06-01 08:33 - 2015-04-09 01:07 - 00410336 _____ () C:\Windows\system32\ApnDatabase.xml
2015-06-01 08:33 - 2015-04-02 01:42 - 03097600 _____ (Microsoft Corporation) C:\Windows\system32\msftedit.dll
2015-06-01 08:33 - 2015-04-02 01:30 - 02483712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msftedit.dll
2015-06-01 08:33 - 2015-04-01 07:21 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2015-06-01 08:33 - 2015-04-01 07:18 - 00468480 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2015-06-01 08:33 - 2015-04-01 07:17 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2015-06-01 08:33 - 2015-04-01 07:08 - 00774144 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2015-06-01 08:33 - 2015-04-01 06:46 - 03633664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2015-06-01 08:33 - 2015-04-01 06:17 - 02551808 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2015-06-01 08:33 - 2015-04-01 06:17 - 00903168 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2015-06-01 08:33 - 2015-04-01 05:53 - 00391680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2015-06-01 08:33 - 2015-04-01 05:53 - 00272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2015-06-01 08:33 - 2015-04-01 05:45 - 02749952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2015-06-01 08:33 - 2015-04-01 05:45 - 00699392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2015-06-01 08:33 - 2015-04-01 05:14 - 01920000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2015-06-01 08:33 - 2015-04-01 05:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2015-06-01 08:33 - 2015-03-02 04:43 - 00222208 _____ (Microsoft Corporation) C:\Windows\system32\rastapi.dll
2015-06-01 08:33 - 2015-03-02 04:21 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastapi.dll
2015-05-31 18:15 - 2015-05-31 18:29 - 05155328 _____ () C:\Users\evelyne pigeat\Downloads\WindowsDefender.msi
2015-05-28 13:42 - 2015-05-29 15:51 - 00000000 ____D () C:\Users\evelyne pigeat\Desktop\VCM ST LEU
2015-05-28 13:23 - 2015-05-28 15:45 - 00000000 ____D () C:\Users\evelyne pigeat\Desktop\VCM ST LOUIS
2015-05-27 05:36 - 2015-05-27 05:36 - 01124544 _____ (Adobe Systems Incorporated) C:\Users\evelyne pigeat\Downloads\flashplayer17au_ha_install.exe
2015-05-17 15:30 - 2015-05-19 10:20 - 00000000 ____D () C:\Users\evelyne pigeat\Desktop\martial
2015-05-15 13:00 - 2015-05-15 13:00 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4022898307-792280897-3800642082-1001Core1d08ef6610c8f3.job
2015-05-14 14:09 - 2015-05-14 14:09 - 00000000 ___HD () C:\Windows\system32\CanonIJ Uninstaller Information
2015-05-14 14:09 - 2015-05-14 14:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon iP3300
2015-05-14 14:09 - 2006-09-13 05:00 - 00234496 _____ (CANON INC.) C:\Windows\system32\CNMLM84.DLL
2015-05-14 14:08 - 2015-05-14 14:08 - 09009752 _____ () C:\Users\evelyne pigeat\Downloads\ip3300vst64200ea23.exe
2015-05-14 14:08 - 2015-05-14 14:08 - 00000000 ___HD () C:\Program Files\CanonBJ
2015-05-14 13:19 - 2015-04-30 23:35 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 13:19 - 2015-04-30 23:35 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 13:05 - 2015-03-17 20:26 - 00467776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-05-14 13:05 - 2015-03-09 05:02 - 00057856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2015-05-14 13:04 - 2015-05-01 02:05 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-14 13:04 - 2015-05-01 01:48 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-14 13:04 - 2015-04-10 03:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-05-14 13:04 - 2015-04-10 03:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-05-14 13:04 - 2015-03-20 04:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-05-14 13:04 - 2015-03-04 04:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2015-05-14 13:04 - 2015-03-04 04:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-14 13:04 - 2015-01-30 03:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-05-14 13:03 - 2015-04-02 01:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2015-05-14 13:03 - 2015-04-02 01:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2015-05-14 13:03 - 2015-04-01 06:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2015-05-14 13:03 - 2015-04-01 05:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2015-05-14 13:02 - 2015-04-14 01:48 - 04180480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-14 13:02 - 2015-04-10 04:00 - 01996800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-14 13:02 - 2015-04-10 03:50 - 01387008 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-14 13:02 - 2015-04-10 03:26 - 01560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-14 13:02 - 2015-04-09 01:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-14 13:02 - 2015-04-03 03:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2015-05-14 13:02 - 2015-04-03 03:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2015-05-14 13:02 - 2015-03-13 05:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2015-05-14 13:02 - 2015-03-13 04:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2015-05-14 13:02 - 2015-03-13 03:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-05-14 13:02 - 2015-03-06 05:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2015-05-14 13:00 - 2015-04-25 00:32 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-14 13:00 - 2015-03-13 07:03 - 00239424 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-05-14 13:00 - 2015-03-13 07:03 - 00154432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-05-14 13:00 - 2015-03-11 04:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-14 13:00 - 2015-03-11 04:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-14 13:00 - 2015-03-05 02:09 - 01429504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-14 13:00 - 2015-02-18 02:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-05-14 12:58 - 2015-03-30 08:47 - 00561928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-05-14 12:58 - 2015-03-27 06:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-14 12:58 - 2015-03-27 05:50 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-14 12:58 - 2015-03-27 05:48 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-14 12:58 - 2015-03-06 06:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-14 12:58 - 2015-03-06 05:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-14 12:32 - 2015-05-14 12:32 - 05541448 _____ () C:\Users\evelyne pigeat\Downloads\mypr-win-3_2_1-ea11_2(3).exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-03 17:23 - 2014-03-21 15:20 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4022898307-792280897-3800642082-1001
2015-06-03 17:14 - 2014-11-28 16:46 - 00001002 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-03 17:00 - 2013-08-22 18:36 - 00000000 ____D () C:\Windows\system32\sru
2015-06-03 16:53 - 2013-08-22 17:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-06-03 16:52 - 2013-08-22 16:25 - 00524288 ___SH () C:\Windows\system32\config\BBI
2015-06-03 16:22 - 2014-04-03 16:56 - 00000899 _____ () C:\Users\evelyne pigeat\intlname.ols
2015-06-03 13:34 - 2013-08-22 18:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-06-03 13:26 - 2013-08-22 18:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-06-03 12:38 - 2013-08-22 18:36 - 00000000 ____D () C:\Windows\system32\NDF
2015-06-03 10:04 - 2014-03-21 15:14 - 00000000 ____D () C:\Users\evelyne pigeat
2015-06-03 10:02 - 2015-04-14 05:56 - 00000000 ___SD () C:\Windows\system32\GWX
2015-06-03 10:02 - 2014-09-13 16:05 - 00000000 ____D () C:\Windows\Minidump
2015-06-03 10:02 - 2014-02-08 23:46 - 00000000 ____D () C:\Windows\System32\Tasks\TOSHIBA
2015-06-03 10:02 - 2013-08-22 18:36 - 00000000 __RSD () C:\Windows\Media
2015-06-03 10:02 - 2013-08-22 18:36 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-06-03 09:42 - 2013-08-22 18:36 - 00000000 ____D () C:\Windows\registration
2015-06-03 09:42 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\Sysprep
2015-06-03 09:41 - 2014-08-22 21:33 - 00000000 ____D () C:\Users\evelyne pigeat\AppData\Roaming\DAEMON Tools Lite
2015-06-02 12:36 - 2015-03-17 10:44 - 00000000 ____D () C:\Users\evelyne pigeat\AppData\Local\PDFCreator
2015-06-02 12:30 - 2013-12-06 23:03 - 00000000 ____D () C:\Windows\Panther
2015-06-02 08:52 - 2013-12-05 22:41 - 00005430 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-06-02 08:52 - 2013-08-29 01:29 - 01704758 _____ () C:\Windows\system32\perfh00C.dat
2015-06-02 08:52 - 2013-08-29 01:29 - 00438064 _____ () C:\Windows\system32\perfc00C.dat
2015-06-01 23:07 - 2014-08-25 13:38 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-06-01 12:39 - 2014-02-08 23:47 - 00000000 ____D () C:\ProgramData\Package Cache
2015-06-01 10:09 - 2013-08-22 18:36 - 00000000 ____D () C:\Windows\rescache
2015-06-01 08:43 - 2013-08-22 18:36 - 00000000 ___RD () C:\Windows\ToastData
2015-06-01 07:58 - 2014-10-22 10:23 - 00000000 ____D () C:\Users\evelyne pigeat\Documents\FACTURES
2015-06-01 04:47 - 2014-04-15 11:06 - 00000000 ____D () C:\Users\evelyne pigeat\AppData\Roaming\Skype
2015-05-31 16:49 - 2014-04-12 09:13 - 00000000 ____D () C:\Users\evelyne pigeat\AppData\Roaming\vlc
2015-05-25 09:32 - 2014-03-24 17:29 - 00000382 _____ () C:\Windows\ODBC.INI
2015-05-25 09:31 - 2013-08-22 16:25 - 00000322 _____ () C:\Windows\win.ini
2015-05-24 08:26 - 2014-05-12 16:34 - 00000000 ____D () C:\Users\evelyne pigeat\Documents\ADRIEN
2015-05-21 19:18 - 2015-04-14 05:56 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-05-21 07:55 - 2014-03-21 18:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-21 07:55 - 2013-08-22 17:44 - 00431352 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-21 07:50 - 2013-08-22 18:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-05-21 07:50 - 2013-08-22 16:36 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-19 06:27 - 2014-04-15 11:06 - 00000000 ____D () C:\ProgramData\Skype
2015-05-17 15:44 - 2014-07-15 09:27 - 00000000 ____D () C:\Users\evelyne pigeat\Documents\ISEC SUD
2015-05-15 15:05 - 2014-10-07 16:55 - 00000000 ____D () C:\Users\evelyne pigeat\Documents\DOSSIER AUTO ENTREPRENEUR
2015-05-15 14:47 - 2014-05-12 16:34 - 00000000 ____D () C:\Users\evelyne pigeat\Documents\PAPIERS
2015-05-15 13:00 - 2015-02-05 06:31 - 00001064 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4022898307-792280897-3800642082-1001Core1d040f43d4d710c.job
2015-05-14 14:15 - 2013-08-22 18:36 - 00000000 ____D () C:\Windows\system32\FxsTmp
2015-05-14 13:17 - 2014-03-23 18:44 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-14 13:11 - 2014-03-23 18:44 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-14 13:07 - 2013-08-22 22:12 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-14 12:49 - 2015-05-02 06:58 - 00000346 _____ () C:\Windows\Tasks\SuperEasyDriverUpdater_UPDATES.job
2015-05-14 10:19 - 2014-07-02 11:40 - 00000000 ____D () C:\Users\evelyne pigeat\Documents\BANQUE POSTALE
2015-05-14 07:41 - 2014-05-09 12:39 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk

==================== Files in the root of some directories =======

2014-08-24 18:27 - 2014-08-24 18:27 - 0000316 _____ () C:\Users\evelyne pigeat\AppData\Roaming\aps.uninstall.scan.results
2014-02-08 23:37 - 2014-02-08 23:37 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\evelyne pigeat\AppData\Local\Temp\avgnt.exe
C:\Users\evelyne pigeat\AppData\Local\Temp\ReimagePackage.exe
C:\Users\evelyne pigeat\AppData\Local\Temp\sqlite3.exe
C:\Users\evelyne pigeat\AppData\Local\Temp\_isAC65.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-23 08:08

==================== End of log ============================