Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:20-12-2015 Exécuté par Giovanny (administrateur) sur GIOVANNY-TOSH (22-12-2015 19:45:36) Exécuté depuis C:\Users\Giovanny\Downloads Profils chargés: Giovanny (Profils disponibles: Giovanny) Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: FF) Mode d'amorçage: Safe Mode (with Networking) Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation) HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation) HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH) HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation) HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation) HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [711576 2010-12-20] (TOSHIBA Corporation) HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation) HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-08-22] (Toshiba Europe GmbH) HKLM\...\Run: [TOSHIBA Face Recognition] => C:\Program Files\Toshiba\SmartFaceV\SmartFaceVWatcher.exe [256000 2011-01-17] (TOSHIBA Corporation) HKLM-x32\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [252792 2010-06-04] (TOSHIBA) HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294712 2010-11-29] (TOSHIBA Corporation) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.) HKLM-x32\...\Run: [RSDTRAY] => C:\Program Files (x86)\Rising\RSD\popwndexe.exe [126656 2015-10-13] (Beijing Rising Information Technology Co., Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597040 2015-10-06] (Oracle Corporation) HKLM\...\Winlogon: [Userinit] C:\Windows\SysWOW64\userinit.exe, HKU\S-1-5-19\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA) HKU\S-1-5-20\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA) HKU\S-1-5-21-1816041268-3535503258-635196661-1000\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA) HKU\S-1-5-21-1816041268-3535503258-635196661-1000\...\Run: [ultracopier] => C:\Program Files (x86)\Supercopier\supercopier.exe [178688 2014-02-19] (ultracopier.first-world.info) HKU\S-1-5-21-1816041268-3535503258-635196661-1000\...\MountPoints2: {2c03b73c-8224-11e1-a33c-386077956373} - F:\Vodaphone_uninstaller.exe HKU\S-1-5-21-1816041268-3535503258-635196661-1000\...\MountPoints2: {76b81b38-29a1-11e1-bed5-386077956373} - G:\Vodaphone_uninstaller.exe HKU\S-1-5-21-1816041268-3535503258-635196661-1000\...\MountPoints2: {cd911fb0-7f2f-11e1-8c0e-386077956373} - F:\SFR_Setup.exe HKU\S-1-5-21-1816041268-3535503258-635196661-1000\...\MountPoints2: {cd911fc2-7f2f-11e1-8c0e-386077956373} - F:\SFR_Setup.exe HKU\S-1-5-18\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA) ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => Pas de fichier ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Pas de fichier Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk [2011-08-22] ShortcutTarget: Toshiba Places Icon Utility.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Toshiba) Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-22] ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-22] ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe) CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3E01ED9B-73E8-4657-991F-EFCB1F0D90F8}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{514E62A7-37D6-470F-AD1C-8E00AA8482C7}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.hao123.com/?tn=97951667_hao_pg HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-1816041268-3535503258-635196661-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://fr.msn.com/ HKU\S-1-5-21-1816041268-3535503258-635196661-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.google.fr/ HKU\S-1-5-21-1816041268-3535503258-635196661-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.hao123.com/?tn=97951667_hao_pg URLSearchHook: [S-1-5-21-1816041268-3535503258-635196661-1000] ATTENTION => URLSearchHook par défaut est absent SearchScopes: HKU\S-1-5-21-1816041268-3535503258-635196661-1000 -> {A060E7FB-91F5-4c7c-BD0F-4A11A581D878} URL = hxxps://www.baidu.com/s?wd={searchTerms}&tn=96010190_dg BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2014-10-26] (RealDownloader) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier BHO: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-21] (AO Kaspersky Lab) BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2014-10-26] (RealDownloader) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\ssv.dll [2015-11-14] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier BHO-x32: Kaspersky Protection plugin -> {C66D064F-82FE-4E1A-B06A-B2490BA48B18} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\IEExt\ie_plugin.dll [2015-12-21] (AO Kaspersky Lab) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\jp2ssv.dll [2015-11-14] (Oracle Corporation) BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-12-05] () Toolbar: HKLM - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\IEExt\ie_plugin.dll [2015-12-21] (AO Kaspersky Lab) Toolbar: HKLM-x32 - Kaspersky Protection toolbar - {3507FA00-ADA2-4A02-99B9-51AD26CA9120} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\IEExt\ie_plugin.dll [2015-12-21] (AO Kaspersky Lab) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - Pas de fichier Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - Pas de fichier Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier FireFox: ======== FF ProfilePath: C:\Users\Giovanny\AppData\Roaming\Mozilla\Firefox\Profiles\0ccgedf9.default-1415124513343 FF Homepage: about:home FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-12] () FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [Pas de fichier] FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-12] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] () FF Plugin-x32: @java.com/DTPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\dtplugin\npDeployJava1.dll [2015-11-14] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.65.2 -> C:\Program Files (x86)\Java\jre1.8.0_65\bin\plugin2\npjp2.dll [2015-11-14] (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\progra~2\mcafee\msc\npmcsn~1.dll [Pas de fichier] FF Plugin-x32: @mcafee.com/SAFFPlugin -> C:\Program Files (x86)\McAfee\SiteAdvisor\npmcffplg32.dll [Pas de fichier] FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Pas de fichier] FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [Pas de fichier] FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-01-16] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-01-16] (NVIDIA Corporation) FF Plugin-x32: @real.com/nppl3260;version=17.0.15.10 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2014-11-09] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=17.0.15 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2014-10-26] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=17.0.15.10 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2014-11-09] (RealPlayer Cloud) FF Plugin-x32: @videolan.org/vlc,version=2.1.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-09-23] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Users\Giovanny\AppData\Roaming\mozilla\plugins\np-mswmp.dll [2009-09-25] (Microsoft Corporation) FF SearchPlugin: C:\Users\Giovanny\AppData\Roaming\Mozilla\Firefox\Profiles\0ccgedf9.default-1415124513343\searchplugins\facebook.xml [2015-12-12] FF Extension: 20-20 3D Viewer - WEB - C:\Users\Giovanny\AppData\Roaming\Mozilla\Firefox\Profiles\0ccgedf9.default-1415124513343\Extensions\2020Player_WEB@2020Technologies.com [2015-07-26] [non signé] FF Extension: Pin It button - C:\Users\Giovanny\AppData\Roaming\Mozilla\Firefox\Profiles\0ccgedf9.default-1415124513343\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2015-08-21] FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore => non trouvé(e) FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor => non trouvé(e) FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-11-09] [non signé] FF HKLM-x32\...\Firefox\Extensions: [{338950EA-82DB-44C1-930D-0C28E023C9F0}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF HKLM-x32\...\Firefox\Extensions: [light_plugin_D772DC8D6FAF43A29B25C4EBAA5AD1DE@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox FF Extension: Kaspersky Protection - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\FFExt\light_plugin_firefox [2015-12-22] Chrome: ======= CHR HKLM\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka CHR HKLM-x32\...\Chrome\Extension: [eahebamiopdhefndnmappcihfajigkka] - hxxps://chrome.google.com/webstore/detail/eahebamiopdhefndnmappcihfajigkka CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx ==================== Services (Avec liste blanche) ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S2 AVP16.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\avp.exe [194000 2015-12-21] (Kaspersky Lab ZAO) S2 comyninu; C:\Program Files (x86)\DD33B6E6-1438978213-361E-871D-386077956373\hnscB33B.tmp [161792 2015-09-04] () [Fichier non signé] S2 GFNEXSrv; C:\Windows\System32\GFNEXSrv.exe [162824 2010-09-09] () S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Fichier non signé] S2 MSSQL$EBP; C:\Program Files\Microsoft SQL Server\MSSQL10_50.EBP\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation) S2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39568 2014-10-26] () S2 RealPlayer Cloud Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1141848 2014-11-09] (RealNetworks, Inc.) S2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [31856 2014-10-30] () S2 RsMgrSvc; C:\Program Files (x86)\Rising\RSD\RsMgrSvc.exe [196288 2015-08-31] (Beijing Rising Information Technology Co., Ltd.) S2 SFR.DashBoard.Service; C:\Program Files (x86)\SFR\Gestionnaire de Connexion\SFR.DashBoard.Service.exe [25008 2011-12-07] (SFR) S4 SQLAgent$EBP; C:\Program Files\Microsoft SQL Server\MSSQL10_50.EBP\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation) S2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH) S3 vssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 16.0.0\x64\vssbridge64.exe [144640 2015-07-09] (AO Kaspersky Lab) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) S2 gopibeko; C:\Users\Giovanny\AppData\Local\DD33B6E6-1438985472-361E-871D-386077956373\snsi1C1C.tmp [X] S2 hyverumu; C:\Program Files (x86)\DD33B6E6-1438978213-361E-871D-386077956373\jnsm865F.tmp [X] S2 jisuxizy; C:\Program Files (x86)\DD33B6E6-1438978213-361E-871D-386077956373\knse924A.tmp [X] S2 perobubi; C:\Program Files (x86)\DD33B6E6-1438978213-361E-871D-386077956373\knsgC2BF.tmp [X] S2 vuzizepy; C:\Program Files (x86)\DD33B6E6-1438978213-361E-871D-386077956373\knsuF997.tmp [X] ===================== Pilotes (Avec liste blanche) ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [389816 2015-07-06] (Kaspersky Lab ZAO) S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2015-06-22] (Kaspersky Lab ZAO) S0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [53432 2015-06-06] (Kaspersky Lab ZAO) S1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [70000 2015-06-27] (Kaspersky Lab ZAO) S2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [68280 2015-06-06] (Kaspersky Lab ZAO) R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [181640 2015-12-21] (AO Kaspersky Lab) S1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [227000 2015-12-21] (AO Kaspersky Lab) S1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [940928 2015-12-21] (AO Kaspersky Lab) R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [39096 2015-06-11] (Kaspersky Lab ZAO) S3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [41144 2015-06-06] (Kaspersky Lab ZAO) S3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO) S1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41352 2015-12-21] (AO Kaspersky Lab) R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-06-11] (Kaspersky Lab ZAO) R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [103096 2015-06-16] (Kaspersky Lab ZAO) S1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [187056 2015-06-23] (Kaspersky Lab ZAO) S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited) S2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-04-24] (Anchorfree Inc.) S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-15] (Apple, Inc.) [Fichier non signé] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2015-12-22 19:45 - 2015-12-22 19:46 - 00020152 _____ C:\Users\Giovanny\Downloads\FRST.txt 2015-12-22 19:45 - 2015-12-22 19:45 - 00000000 ____D C:\FRST 2015-12-22 19:44 - 2015-12-22 19:44 - 02370560 _____ (Farbar) C:\Users\Giovanny\Downloads\FRST64.exe 2015-12-22 18:43 - 2015-12-22 18:43 - 00000000 ____D C:\Users\Giovanny\AppData\Local\ElevatedDiagnostics 2015-12-22 16:34 - 2015-12-22 16:34 - 00000000 ____D C:\Users\Giovanny\ultracopier 2015-12-22 16:33 - 2015-12-22 16:33 - 06232582 _____ C:\Users\Giovanny\Downloads\supercopier_4-0-1-13_fr_11010_32.exe 2015-12-22 16:33 - 2015-12-22 16:33 - 00000000 ____D C:\Users\Giovanny\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Supercopier 2015-12-22 16:33 - 2015-12-22 16:33 - 00000000 ____D C:\Program Files (x86)\Supercopier 2015-12-20 23:39 - 2015-12-20 23:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2015-12-20 23:39 - 2015-12-20 23:38 - 00002056 _____ C:\Users\Public\Desktop\Kaspersky Anti-Virus.lnk 2015-12-20 23:37 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll 2015-12-20 23:36 - 2015-12-22 19:22 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2015-12-20 23:36 - 2015-12-20 23:36 - 00000000 ____D C:\Windows\ELAMBKUP 2015-12-20 23:36 - 2015-12-20 23:36 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab 2015-12-20 23:35 - 2015-12-21 21:37 - 00940928 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys 2015-12-20 23:35 - 2015-12-21 21:37 - 00181640 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys 2015-12-20 23:29 - 2015-12-20 23:33 - 172903624 _____ (Kaspersky Lab) C:\Users\Giovanny\Downloads\kav16.0.0.614fr-fr.exe 2015-12-20 23:28 - 2015-12-21 00:18 - 00000000 ____D C:\ProgramData\Kaspersky Lab Setup Files 2015-12-20 23:27 - 2015-12-20 23:27 - 01768320 _____ (Kaspersky Lab) C:\Users\Giovanny\Downloads\kts16.0.0.614fr_8937.exe 2015-12-20 22:11 - 2015-12-22 19:38 - 01016904 _____ C:\Windows\ntbtlog.txt 2015-12-12 07:05 - 2015-12-12 07:05 - 18872512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2015-12-10 16:23 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2015-12-10 16:23 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2015-12-10 16:23 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2015-12-10 16:23 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2015-12-10 16:23 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2015-12-10 16:23 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2015-12-10 16:23 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2015-12-10 16:23 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2015-12-10 16:23 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2015-12-10 16:23 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2015-12-10 16:23 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2015-12-10 16:23 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2015-12-10 16:23 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2015-12-10 16:23 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2015-12-10 16:23 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2015-12-10 16:23 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2015-12-10 16:23 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll 2015-12-10 16:23 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll 2015-12-10 16:23 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll 2015-12-10 16:23 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll 2015-12-10 16:23 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-12-10 16:23 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-12-10 16:23 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll 2015-12-10 16:23 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2015-12-10 16:23 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll 2015-12-10 16:23 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-12-10 16:23 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll 2015-12-10 16:23 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll 2015-12-10 16:23 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2015-12-10 16:23 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2015-12-10 16:23 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys 2015-12-10 16:23 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll 2015-12-10 16:23 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll 2015-12-10 16:23 - 2015-10-09 00:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2015-12-10 16:23 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL 2015-12-10 16:23 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll 2015-12-10 16:23 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL 2015-12-10 16:23 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL 2015-12-10 16:23 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll 2015-12-10 16:23 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL 2015-12-10 16:23 - 2015-10-09 00:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll 2015-12-10 16:23 - 2015-10-08 20:13 - 00419928 _____ C:\Windows\SysWOW64\locale.nls 2015-12-10 16:23 - 2015-10-08 19:52 - 00419928 _____ C:\Windows\system32\locale.nls 2015-12-10 16:22 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-12-10 16:22 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-12-10 16:22 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-12-10 16:22 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-12-10 16:22 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-12-10 16:22 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-12-10 16:22 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-12-10 16:22 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-12-10 16:22 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-12-10 16:22 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-12-10 16:22 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-12-10 16:22 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-12-10 16:22 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-12-10 16:22 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-12-10 16:22 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-12-10 16:22 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-12-10 16:22 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-12-10 16:22 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-12-10 16:22 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-12-10 16:22 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-12-10 16:22 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-12-10 16:22 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-12-10 16:22 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-12-10 16:22 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-12-10 16:22 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-12-10 16:22 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2015-12-10 16:22 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2015-12-10 16:22 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-12-10 16:22 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-12-10 16:22 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-12-10 16:22 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-12-10 16:22 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-12-10 16:22 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-12-10 16:22 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-12-10 16:22 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-12-10 16:22 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-12-10 16:22 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-12-10 16:22 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-12-10 16:22 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-12-10 16:22 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-12-10 16:22 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-12-10 16:22 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-12-10 16:22 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-12-10 16:22 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-12-10 16:22 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-12-10 16:22 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-12-10 16:22 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-12-10 16:22 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-12-10 16:22 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-12-10 16:22 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-12-10 16:22 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-12-10 16:22 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-12-10 16:22 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-12-10 16:22 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-12-10 16:22 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2015-12-10 16:22 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2015-12-10 16:22 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-12-10 16:22 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-12-10 16:22 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-12-10 16:22 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-12-10 16:22 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-12-10 16:22 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-12-10 16:22 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-12-10 16:22 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-12-10 16:20 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll 2015-12-10 16:20 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll 2015-12-03 18:07 - 2015-12-03 18:07 - 00119236 _____ C:\Users\Giovanny\Downloads\routines-journee-memos.pdf 2015-12-03 18:06 - 2015-12-03 18:06 - 00093144 _____ C:\Users\Giovanny\Downloads\restructuration-cognitive-101.pdf 2015-12-03 17:59 - 2015-12-03 17:59 - 00070411 _____ C:\Users\Giovanny\Downloads\trucsadu(3).pdf 2015-12-03 17:59 - 2015-12-03 17:59 - 00070411 _____ C:\Users\Giovanny\Downloads\trucsadu(2).pdf 2015-12-03 17:58 - 2015-12-03 17:58 - 01394672 _____ C:\Users\Giovanny\Downloads\sommeil.pdf 2015-12-03 17:58 - 2015-12-03 17:58 - 01394672 _____ C:\Users\Giovanny\Downloads\sommeil(1).pdf 2015-12-03 17:58 - 2015-12-03 17:58 - 00187034 _____ C:\Users\Giovanny\Downloads\tdah-equilibre-vie(4).pdf 2015-12-03 17:58 - 2015-12-03 17:58 - 00187034 _____ C:\Users\Giovanny\Downloads\tdah-equilibre-vie(3).pdf 2015-12-03 17:58 - 2015-12-03 17:58 - 00187034 _____ C:\Users\Giovanny\Downloads\tdah-equilibre-vie(2).pdf 2015-12-03 17:58 - 2015-12-03 17:58 - 00187034 _____ C:\Users\Giovanny\Downloads\tdah-equilibre-vie(1).pdf 2015-12-03 17:58 - 2015-12-03 17:58 - 00070411 _____ C:\Users\Giovanny\Downloads\trucsadu.pdf 2015-12-03 17:58 - 2015-12-03 17:58 - 00070411 _____ C:\Users\Giovanny\Downloads\trucsadu(1).pdf 2015-12-03 17:57 - 2015-12-03 17:58 - 00187034 _____ C:\Users\Giovanny\Downloads\tdah-equilibre-vie.pdf 2015-11-23 18:58 - 2015-11-23 18:58 - 03159196 _____ C:\Users\Giovanny\Downloads\guide_ecoconstruction.pdf ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2015-12-22 19:45 - 2009-07-14 04:20 - 00000000 ____D C:\Windows 2015-12-22 19:39 - 2011-12-06 20:36 - 00000000 ____D C:\Users\Giovanny 2015-12-22 19:29 - 2009-07-14 05:45 - 00025120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-12-22 19:29 - 2009-07-14 05:45 - 00025120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-12-22 19:21 - 2011-10-17 05:09 - 00000000 ____D C:\ProgramData\NVIDIA 2015-12-22 19:18 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-12-22 17:42 - 2014-11-19 15:32 - 01057280 ___SH C:\Users\Giovanny\Downloads\Thumbs.db 2015-12-22 17:08 - 2013-12-18 10:20 - 00000000 ____D C:\Users\Giovanny\Desktop\bureau 2015-12-22 14:07 - 2013-02-06 20:25 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-12-22 01:52 - 2011-02-11 17:16 - 00814082 _____ C:\Windows\system32\perfh00C.dat 2015-12-22 01:52 - 2011-02-11 17:16 - 00175104 _____ C:\Windows\system32\perfc00C.dat 2015-12-22 01:52 - 2009-07-14 06:13 - 01855234 _____ C:\Windows\system32\PerfStringBackup.INI 2015-12-22 01:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2015-12-21 21:37 - 2015-06-08 19:43 - 00041352 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klpd.sys 2015-12-21 20:26 - 2015-07-04 02:18 - 00227000 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys 2015-12-21 20:25 - 2015-04-04 15:38 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2015-12-21 20:25 - 2015-04-04 15:38 - 00000000 ___SD C:\Windows\system32\GWX 2015-12-20 23:19 - 2015-09-01 15:29 - 00110664 _____ C:\Users\Giovanny\AppData\Local\GDIPFONTCACHEV1.DAT 2015-12-20 23:16 - 2015-09-01 16:16 - 00419888 _____ C:\Windows\system32\FNTCACHE.DAT 2015-12-20 23:01 - 2011-12-11 16:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON 2015-12-20 22:59 - 2015-09-28 15:49 - 00000000 ____D C:\Program Files (x86)\Feed Notifier 2015-12-20 22:59 - 2011-08-22 16:10 - 00000000 ____D C:\Program Files (x86)\Google 2015-12-20 22:53 - 2014-11-04 19:36 - 00000000 ____D C:\Users\Giovanny\AppData\Roaming\Panda Security 2015-12-20 22:53 - 2014-11-04 19:35 - 00000000 ____D C:\Program Files (x86)\Panda Security 2015-12-20 22:53 - 2014-11-04 19:33 - 00000000 ____D C:\ProgramData\Panda Security 2015-12-20 22:49 - 2014-08-03 14:33 - 00000000 ____D C:\Users\Giovanny\EasternGraphics 2015-12-20 22:49 - 2014-08-03 14:31 - 00000000 ____D C:\Program Files (x86)\EasternGraphics 2015-12-20 22:48 - 2014-07-31 18:47 - 00000000 ____D C:\ProgramData\EasternGraphics 2015-12-20 22:44 - 2014-11-15 06:49 - 00000000 ____D C:\Program Files (x86)\VS Revo Group 2015-12-20 22:43 - 2015-05-21 18:10 - 00000000 ____D C:\ProgramData\WinZip 2015-12-20 21:57 - 2011-12-06 21:39 - 00000000 ____D C:\Program Files\Common Files\Apple 2015-12-20 21:56 - 2011-12-06 21:39 - 00000000 ____D C:\ProgramData\Apple 2015-12-20 21:52 - 2012-05-21 10:14 - 00000000 ____D C:\Program Files (x86)\Fnac 2015-12-20 21:50 - 2011-08-22 15:39 - 00000000 ____D C:\Program Files (x86)\Adobe 2015-12-20 21:13 - 2015-10-16 05:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-12-12 07:05 - 2015-11-14 07:22 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-12-12 07:05 - 2013-02-06 20:25 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-12-12 07:05 - 2013-02-06 20:25 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-12-11 06:31 - 2012-05-15 00:53 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-12-11 06:31 - 2012-05-15 00:53 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2015-12-11 06:14 - 2011-12-07 11:08 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-12-11 06:11 - 2012-05-15 00:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-12-11 06:04 - 2014-04-07 17:11 - 00000000 ____D C:\Windows\system32\MRT 2015-12-11 05:03 - 2014-04-07 17:10 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-12-06 18:07 - 2015-09-29 16:20 - 00000000 ____D C:\Users\Giovanny\Desktop\Sogio 2015-12-02 16:08 - 2009-07-14 06:08 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2015-12-02 13:18 - 2010-11-21 04:27 - 00301728 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2015-11-27 20:12 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache 2015-11-26 16:56 - 2013-09-01 16:19 - 00000000 ____D C:\Users\Giovanny\Desktop\solene ==================== Fichiers à la racine de certains dossiers ======= 2012-02-24 11:22 - 2012-10-31 09:12 - 0004608 _____ () C:\Users\Giovanny\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2013-12-29 09:11 - 2013-12-29 09:11 - 0000017 _____ () C:\Users\Giovanny\AppData\Local\resmon.resmoncfg 2012-01-18 19:27 - 2012-01-18 19:27 - 0017408 _____ () C:\Users\Giovanny\AppData\Local\WebpageIcons.db 2013-12-22 19:23 - 2013-12-22 19:23 - 1131392 _____ () C:\ProgramData\1387734882.bdinstall.bin 2014-09-16 18:41 - 2014-09-16 18:41 - 0361833 _____ () C:\ProgramData\1410888999.bdinstall.bin 2014-09-16 18:40 - 2014-09-16 18:40 - 0050041 _____ () C:\ProgramData\1410889236.bdinstall.bin 2015-09-03 15:30 - 2015-09-03 15:30 - 0032510 _____ () C:\ProgramData\1441290552.bdinstall.bin Fichiers à déplacer ou supprimer: ==================== C:\Users\Giovanny\ZHPCleaner.exe Certains fichiers dans TEMP: ==================== C:\Users\Giovanny\AppData\Local\Temp\fsd1A57.exe C:\Users\Giovanny\AppData\Local\Temp\fsd2705.exe C:\Users\Giovanny\AppData\Local\Temp\fsd6132.exe C:\Users\Giovanny\AppData\Local\Temp\fsd9AF2.exe C:\Users\Giovanny\AppData\Local\Temp\fsd9E76.exe C:\Users\Giovanny\AppData\Local\Temp\fsdA39E.exe C:\Users\Giovanny\AppData\Local\Temp\fsdA6F.exe C:\Users\Giovanny\AppData\Local\Temp\fsdB023.exe C:\Users\Giovanny\AppData\Local\Temp\fsdB655.exe C:\Users\Giovanny\AppData\Local\Temp\fsdBB8A.exe C:\Users\Giovanny\AppData\Local\Temp\fsdC505.exe C:\Users\Giovanny\AppData\Local\Temp\fsdC97F.exe C:\Users\Giovanny\AppData\Local\Temp\fsdD0F8.exe C:\Users\Giovanny\AppData\Local\Temp\fsdD29A.exe C:\Users\Giovanny\AppData\Local\Temp\fsdDABF.exe C:\Users\Giovanny\AppData\Local\Temp\fsdDDB5.exe C:\Users\Giovanny\AppData\Local\Temp\fsdE9EC.exe C:\Users\Giovanny\AppData\Local\Temp\fsdEB1E.exe C:\Users\Giovanny\AppData\Local\Temp\fsdEBB6.exe C:\Users\Giovanny\AppData\Local\Temp\fsdFBCE.exe C:\Users\Giovanny\AppData\Local\Temp\install1804741.exe C:\Users\Giovanny\AppData\Local\Temp\sqlite3.dll C:\Users\Giovanny\AppData\Local\Temp\tCvRH1618280c.exe C:\Users\Giovanny\AppData\Local\Temp\trJxW1618280c.exe C:\Users\Giovanny\AppData\Local\Temp\ugpVm1618280c.exe C:\Users\Giovanny\AppData\Local\Temp\Uninstall.exe ==================== Bamital & volsnap ================= (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2015-12-02 09:22 ==================== Fin de FRST.txt ============================