Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:10-01-2015 01 Exécuté par kevin (administrateur) sur KEVIN-PC (16-01-2016 19:31:25) Exécuté depuis C:\Users\kevin\Desktop Profils chargés: kevin (Profils disponibles: kevin) Platform: Windows 7 Home Premium (X64) Langue: Français (France) Internet Explorer Version 9 (Navigateur par défaut: Chrome) Mode d'amorçage: Safe Mode (with Networking) Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Microsoft Corporation) C:\Windows\System32\userinit.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1814312 2009-08-15] (Synaptics Incorporated) HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2009-10-21] (IDT, Inc.) HKLM\...\Run: [SmartMenu] => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [610872 2009-08-25] () HKLM-x32\...\Run: [Corel File Shell Monitor] => C:\Program Files (x86)\Corel\Corel Paint Shop Pro Photo X2\CorelIOMonitor.exe [15544 2009-08-25] () HKLM-x32\...\Run: [HPCam_Menu] => c:\Program Files (x86)\Hewlett-Packard\Media\Webcam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.) HKLM-x32\...\Run: [QlbCtrl.exe] => C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [323640 2009-11-24] ( Hewlett-Packard Development Company, L.P.) HKLM-x32\...\Run: [WirelessAssistant] => C:\Program Files (x86)\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [498744 2009-07-23] (Hewlett-Packard) HKLM-x32\...\Run: [AppleSyncNotifier] => C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe [59240 2012-02-23] (Apple Inc.) HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.) HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [49208 2011-03-24] (Hewlett-Packard) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [F-Secure Manager] => C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Common\FSM32.EXE [311976 2012-03-15] (F-Secure Corporation) HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-07-06] (RealNetworks, Inc.) HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-05-07] (Oracle Corporation) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-08-20] (Hewlett-Packard Company) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\Run: [HPADVISOR] => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1685048 2009-09-29] (Hewlett-Packard) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [1938624 2014-10-21] (Valve Corporation) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\Run: [Facebook Update] => C:\Users\kevin\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-08-12] (Facebook Inc.) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\Run: [HP Photosmart 5510 series (NET)] => C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe [2676584 2011-09-16] (Hewlett-Packard Co.) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\Run: [SkyDrive] => C:\Users\kevin\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [277672 2014-10-10] (Microsoft Corporation) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\Run: [DAEMON Tools Lite] => C:\Users\kevin\Downloads\DT\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\Run: [Gestionnaire Antidote.exe] => C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe [542136 2008-12-03] (Druide informatique inc.) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\RunOnce: [Uninstall C:\Users\kevin\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\kevin\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112_1\amd64" HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\RunOnce: [Chrome Cleanup Tool] => C:\Users\kevin\AppData\Local\Temp\6F99.exe [4481864 2016-01-16] (Google) <===== ATTENTION HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_15_0_0_167_ActiveX.exe [854704 2014-09-23] (Adobe Systems Incorporated) HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\RunOnce: [Report] => C:\AdwCleaner\AdwCleaner[C1].txt [39889 2016-01-16] () HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: G - G:\AutoRun.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {02e007cf-e90c-11df-ac52-002713d0ad68} - G:\SFR.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {02e007ee-e90c-11df-ac52-002713d0ad68} - G:\SFR.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {02e007f1-e90c-11df-ac52-002713d0ad68} - G:\SFR.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {78f4881d-a496-11e0-bb43-002713d0ad68} - G:\SFR_Setup.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {81b99461-6fa6-11e3-94bf-002713d0ad68} - G:\SetupWi-Fi.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {81b99469-6fa6-11e3-94bf-002713d0ad68} - G:\SetupWi-Fi.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {88c83153-acfe-11df-ba7d-002314544afc} - G:\AutoRun.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {944484ba-707d-11e3-a16e-002713d0ad68} - G:\SetupWi-Fi.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {b3de31ac-a919-11df-962e-002314544afc} - G:\AutoRun.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {c1267411-0606-11e0-98db-002314544afc} - G:\AutoRunCardDetector.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {c1267474-0606-11e0-98db-00f1d000f1d0} - G:\AutoRunCardDetector.exe HKU\S-1-5-21-3187615589-208416031-95359937-1000\...\MountPoints2: {fb8dc338-ab1e-11df-a217-002713d0ad68} - G:\AutoRun.exe HKU\S-1-5-18\...\Run: [Gestionnaire Antidote.exe] => C:\Program Files (x86)\Druide\Antidote\Gestionnaire Antidote.exe [542136 2008-12-03] (Druide informatique inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Device Monitor 3.lnk [2012-05-23] ShortcutTarget: Device Monitor 3.lnk -> C:\Program Files (x86)\PIXELA\Everio MediaBrowser 3\MBCameraMonitor.exe (PIXELA CORPORATION) Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2013-09-17] ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) Startup: C:\Users\kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\VDownloader.lnk [2013-03-31] ShortcutTarget: VDownloader.lnk -> C:\Program Files (x86)\VDownloader\VDownloader.exe (Vitzo) ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{1309C347-6535-41C8-91CF-B1035CB57D20}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{452F8C67-B4BD-4C13-AFE4-CB21BB4E0F93}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{494D7936-D331-4508-9A6E-B46236A50CF1}: [DhcpNameServer] 172.16.1.1 Tcpip\..\Interfaces\{8966B9CB-162E-48C3-91A3-5945BB7A20B0}: [DhcpNameServer] 192.168.0.1 192.168.0.1 Tcpip\..\Interfaces\{AC7AFC3E-CA0C-4362-977D-6C7C630ED0A9}: [DhcpNameServer] 172.20.2.39 172.20.2.10 Tcpip\..\Interfaces\{D1632FF4-3B53-4FFA-B786-864C7B3362A3}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-3187615589-208416031-95359937-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.fr/ URLSearchHook: HKU\S-1-5-21-3187615589-208416031-95359937-1000 - (Pas de nom) - {338c5d66-6b92-40a7-a216-9830d2e54103} - Pas de fichier SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = SearchScopes: HKLM -> {FE84A2FC-8D0B-46EA-852A-9FC657B1EF15} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {3E7B7643-5EFF-EE5C-4AEB-2AB43F1915B4} URL = SearchScopes: HKLM-x32 -> {FE84A2FC-8D0B-46EA-852A-9FC657B1EF15} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKU\S-1-5-21-3187615589-208416031-95359937-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = SearchScopes: HKU\S-1-5-21-3187615589-208416031-95359937-1000 -> {3E7B7643-5EFF-EE5C-4AEB-2AB43F1915B4} URL = SearchScopes: HKU\S-1-5-21-3187615589-208416031-95359937-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL = SearchScopes: HKU\S-1-5-21-3187615589-208416031-95359937-1000 -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = SearchScopes: HKU\S-1-5-21-3187615589-208416031-95359937-1000 -> {FE84A2FC-8D0B-46EA-852A-9FC657B1EF15} URL = hxxp://www.bing.com/search?q={searchTerms}&form=HPNTDF&pc=HPNTDF&src=IE-SearchBox BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-04-16] (RealDownloader) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-07-05] (Oracle Corporation) BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation) BHO-x32: Browsing Protection Class -> {C6867EB7-8350-4856-877F-93CF8AE3DC9C} -> C:\Program Files (x86)\SFR\Pack Sécurité\apps\OnlineSafety\BPP\iescript\BaseLitmus.dll [2012-08-10] (F-Secure Corporation) BHO-x32: Bing Bar Helper -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-07-07] (Microsoft Corporation.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-07-05] (Oracle Corporation) Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll [2011-07-07] (Microsoft Corporation.) Toolbar: HKLM-x32 - Browsing Protection Toolbar - {265EEE8E-3228-44D3-AEA5-F7FDF5860049} - C:\Program Files (x86)\SFR\Pack Sécurité\apps\OnlineSafety\BPP\iescript\BaseLitmus.dll [2012-08-10] (F-Secure Corporation) Toolbar: HKU\S-1-5-21-3187615589-208416031-95359937-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier Toolbar: HKU\S-1-5-21-3187615589-208416031-95359937-1000 -> Pas de nom - {338C5D66-6B92-40A7-A216-9830D2E54103} - Pas de fichier DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab DPF: HKLM-x32 {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} hxxp://a532.g.akamai.net/f/532/6712/5m/virtools.download.akamai.com/6712/player/install3.5/installer.exe DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab FireFox: ======== FF ProfilePath: C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tgeqm1we.default FF NetworkProxy: "no_proxies_on", "*.local" FF NetworkProxy: "type", 0 FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll [2014-09-11] () FF Plugin: @java.com/DTPlugin,version=10.5.0 -> C:\Windows\system32\npDeployJava1.dll [2012-07-02] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll [2014-09-11] () FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] () FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google) FF Plugin-x32: @java.com/DTPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-07-05] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=10.60.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-07-05] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation) FF Plugin-x32: @qq.com/npchrome -> C:\Program Files (x86)\Common Files\Tencent\Npchrome\npchrome.dll [Pas de fichier] FF Plugin-x32: @qq.com/npqscall -> C:\Program Files (x86)\Common Files\Tencent\NPQSCALL\npqscall.dll [Pas de fichier] FF Plugin-x32: @real.com/nppl3260;version=16.0.2.32 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2013-07-06] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-04-16] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-04-16] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.2 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-04-16] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-10-01] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-10-01] (RealNetworks, Inc.) FF Plugin-x32: @real.com/nprpplugin;version=16.0.2.32 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2013-07-06] (RealPlayer) FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-04-16] (RealDownloader) FF Plugin-x32: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll [2013-02-15] (RocketLife, LLP) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [2014-10-26] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll [2014-10-26] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-12-13] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2013-12-18] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3187615589-208416031-95359937-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\kevin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited) FF Plugin HKU\S-1-5-21-3187615589-208416031-95359937-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\kevin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2011-02-07] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-3187615589-208416031-95359937-1000: hp.com/HPDetect -> C:\Users\kevin\AppData\Roaming\HewlettPackard\HPDetect\1.0.0.0\npHPDetect.dll [2012-08-30] (HP) FF Plugin HKU\S-1-5-21-3187615589-208416031-95359937-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-07-03] () FF Extension: Pas de nom - C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tgeqm1we.default\extensions\OneClickDownload@OneClickDownload.com [non trouvé(e)] FF Extension: VideoFileDownload - Download YouTube Videos - C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tgeqm1we.default\extensions\plugin@videofiledownload.com [2012-07-19] [non signé] FF Extension: Browsing Protection - C:\Program Files (x86)\SFR\Pack Sécurité\apps\OnlineSafety\BPP\litmus-ff@f-secure.com [2012-09-05] [non signé] FF Extension: Pas de nom - C:\Program Files\Web Assistant\Firefox [non trouvé(e)] FF Extension: Pas de nom - C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tgeqm1we.default\extensions\ascsurfingprotection@iobit.com [non trouvé(e)] FF Extension: Pas de nom - C:\Users\kevin\AppData\Roaming\Mozilla\Firefox\Profiles\tgeqm1we.default\extensions\quick_start@gmail.com [non trouvé(e)] FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-07-06] [non signé] FF HKLM-x32\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext FF Extension: RealPlayer Browser Record Plugin - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2014-01-08] [non signé] FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [non signé] FF HKLM-x32\...\Firefox\Extensions: [litmus-ff@f-secure.com] - C:\Program Files (x86)\SFR\Pack Sécurité\apps\OnlineSafety\BPP\litmus-ff@f-secure.com FF HKLM-x32\...\Firefox\Extensions: [{FCE04E1F-9378-4f39-96F6-5689A9159E45}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext Chrome: ======= CHR Plugin: (Widevine Content Decryption Module) - C:\Users\kevin\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.6.703\_platform_specific\win_x86\widevinecdmadapter.dll => Pas de fichier CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\PepperFlash\pepflashplayer.dll () CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.111\pdf.dll => Pas de fichier CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) CHR Plugin: (QQ2013 Firefox Plugin) - C:\Program Files (x86)\Common Files\Tencent\NPQSCALL\npqscall.dll => Pas de fichier CHR Plugin: (QQ2013 Chrome Plugin for Chrome V23.0.1271.64 or latest version) - C:\Program Files (x86)\Common Files\Tencent\Npchrome\npchrome.dll => Pas de fichier CHR Plugin: (Tencent SSO Platform) - C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.2.1\Bin\npSSOAxCtrlForPTLogin.dll => Pas de fichier CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.) CHR Plugin: (Java Deployment Toolkit 7.0.600.19) - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation) CHR Plugin: (Java(TM) Platform SE 7 U60) - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) CHR Plugin: (Windows Live® Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () CHR Plugin: (RealNetworks(tm) RealDownloader Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.) CHR Plugin: (RealNetworks(tm) RealDownloader HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.) CHR Plugin: (RealNetworks(tm) RealDownloader PepperFlashVideoShim Plug-In (32-bit) ) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.) CHR Plugin: (RealDownloader Plugin) - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader) CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) CHR Plugin: (RocketLife Secure Plug-In Layer) - C:\ProgramData\Visan\plugins\npRLSecurePluginLayer.dll (RocketLife, LLP) CHR Plugin: (Unity Player) - C:\Users\kevin\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS) CHR Plugin: (Facebook Video Calling Plugin) - C:\Users\kevin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) CHR Plugin: (HPDetect) - C:\Users\kevin\AppData\Roaming\HewlettPackard\HPDetect\1.0.0.0\npHPDetect.dll (HP) CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll () CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation) CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) CHR Plugin: (RealPlayer Download Plugin) - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) CHR Profile: C:\Users\kevin\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (RealDownloader) - C:\Users\kevin\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-09-09] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\kevin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-01-16] CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\kevin\AppData\Local\funmoods.crx CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\kevin\AppData\Local\funmoods-speeddial.crx CHR HKLM\...\Chrome\Extension: [dlnembnfbcpjnepmfjmngjenhhajpdfd] - C:\Program Files\Web Assistant\source.crx CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-04-16] ==================== Services (Avec liste blanche) ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2013-09-17] (Adobe Systems) [Fichier non signé] S2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d15ed671de43d681\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation) S2 ezSharedSvc; C:\Windows\SysWOW64\ezsvc7.dll [129584 2009-02-22] (EasyBits Sofware AS) [Fichier non signé] S3 FSDFWD; C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\FWES\Program\fsdfwd.exe [914088 2012-03-15] (F-Secure Corporation) S2 fshoster; C:\Program Files (x86)\SFR\Pack Sécurité\fshoster32.exe [188400 2013-01-18] (F-Secure Corporation) S3 FSMA; C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Common\FSMA32.EXE [213672 2012-03-15] (F-Secure Corporation) S2 FSORSPClient; C:\Program Files (x86)\SFR\Pack Sécurité\apps\CCF_Reputation\fsorsp.exe [60352 2013-06-25] (F-Secure Corporation) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Fichier non signé] S2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2009-08-20] (Hewlett-Packard Company) [Fichier non signé] S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2152768 2014-04-08] (IObit) S2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-04-16] () S2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-06] () S2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d15ed671de43d681\STacSV64.exe [240640 2009-10-21] (IDT, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310728 2011-09-30] () R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-04-05] (Disc Soft Ltd) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 F-Secure Gatekeeper; C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Anti-Virus\minifilter\fsgk.sys [203304 2014-06-09] (F-Secure Corporation) S1 F-Secure HIPS; C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\HIPS\drivers\fshs.sys [69960 2014-06-23] (F-Secure Corporation) U5 fsbts; C:\Windows\System32\Drivers\fsbts.sys [56016 2012-08-30] () S3 fsccsys1346840192; C:\Windows\System32\drivers\fsccsys.sys [58424 2012-08-10] (F-Secure Corporation) S1 FSES; C:\Windows\System32\drivers\fses.sys [46024 2012-03-15] (F-Secure Corporation) S1 FSFW; C:\Windows\System32\drivers\fsdfw.sys [95112 2012-03-15] (F-Secure Corporation) S1 fsvista; C:\Program Files (x86)\SFR\Pack Sécurité\apps\ComputerSecurity\Anti-Virus\minifilter\fsvista.sys [15016 2012-03-15] () S3 GTUHSBUS; C:\Windows\System32\DRIVERS\gtuhsbus.sys [88576 2009-05-29] (Option N.V.) [Fichier non signé] S3 GTUHSNDISIPXP; C:\Windows\System32\DRIVERS\gtuhs51.sys [129536 2009-05-29] (Option N.V.) [Fichier non signé] S3 GTUHSSER; C:\Windows\System32\DRIVERS\gtuhsser.sys [10496 2009-05-29] (Option N.V.) S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2011-09-30] () S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [22528 2011-05-10] (Apple Inc.) [Fichier non signé] S3 btwaudio; system32\drivers\btwaudio.sys [X] S3 btwavdt; system32\DRIVERS\btwavdt.sys [X] S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X] S3 btwrchid; system32\DRIVERS\btwrchid.sys [X] U4 eabfiltr; pas de ImagePath U5 fsbts; C:\Windows\SysWOW64\Drivers\fsbts.sys [42672 2012-09-05] () S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2016-01-16 19:23 - 2016-01-16 19:25 - 00052858 _____ C:\Users\kevin\Desktop\Addition.txt 2016-01-16 19:20 - 2016-01-16 19:31 - 00030223 _____ C:\Users\kevin\Desktop\FRST.txt 2016-01-16 19:18 - 2016-01-16 19:18 - 00000079 _____ C:\Users\kevin\Downloads\poiuyt.txt 2016-01-16 19:06 - 2016-01-16 19:31 - 00000000 ____D C:\FRST 2016-01-16 19:06 - 2016-01-16 19:06 - 02370560 _____ (Farbar) C:\Users\kevin\Desktop\FRST64.exe 2016-01-16 19:03 - 2016-01-16 18:52 - 00039889 _____ C:\Users\kevin\Downloads\AdwCleaner[C1].txt 2016-01-16 19:03 - 2016-01-16 18:50 - 00037953 _____ C:\Users\kevin\Downloads\AdwCleaner[S1].txt 2016-01-16 18:49 - 2016-01-16 18:51 - 00000000 ____D C:\AdwCleaner 2016-01-16 18:48 - 2016-01-16 18:49 - 01754112 _____ C:\Users\kevin\Downloads\adwcleaner_5.029.exe 2016-01-16 18:21 - 2016-01-16 18:21 - 00170451 _____ C:\Users\kevin\Desktop\ZHPDiag.txt 2016-01-16 18:05 - 2016-01-16 18:05 - 02077392 _____ (Microsoft Corporation) C:\Users\kevin\Downloads\IE11-Windows6.1.exe 2016-01-16 17:59 - 2016-01-16 18:01 - 00000000 ____D C:\Users\kevin\AppData\Roaming\ZHP 2016-01-16 17:59 - 2016-01-16 18:00 - 00000782 _____ C:\Users\kevin\Desktop\ZHPDiag.lnk 2016-01-16 17:59 - 2016-01-16 17:59 - 02080768 _____ C:\Users\kevin\ZHPDiag3.exe 2016-01-16 17:58 - 2016-01-16 17:59 - 00000326 _____ C:\Windows\Tasks\Chrome Cleanup Tool logs upload retry.job 2016-01-16 17:58 - 2016-01-16 17:58 - 01901056 _____ C:\Users\kevin\Desktop\ZHPDiag3.exe 2016-01-16 17:58 - 2016-01-16 17:58 - 00000318 _____ C:\Windows\Tasks\Chrome Cleanup Tool post reboot run.job 2016-01-16 17:34 - 2016-01-16 17:34 - 00000000 ____D C:\ProgramData\Easybits Magic Desktop for HP 2016-01-16 17:13 - 2016-01-16 17:13 - 00000000 _____ C:\Users\kevin\AppData\Local\{F395B3E6-8D8C-4E52-8E53-83F69D117F4D} ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2016-01-16 19:30 - 2014-10-29 20:50 - 01350186 _____ C:\Windows\ntbtlog.txt 2016-01-16 19:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows 2016-01-16 18:59 - 2010-01-09 07:58 - 05799966 _____ C:\Windows\system32\perfh00C.dat 2016-01-16 18:59 - 2010-01-09 07:58 - 01850232 _____ C:\Windows\system32\perfc00C.dat 2016-01-16 18:59 - 2009-07-14 06:13 - 00006752 _____ C:\Windows\system32\PerfStringBackup.INI 2016-01-16 17:59 - 2010-07-03 19:29 - 00000000 ____D C:\Users\kevin 2016-01-16 17:57 - 2010-07-07 21:34 - 00000000 ____D C:\Users\kevin\AppData\Local\Google 2016-01-16 17:34 - 2014-09-24 17:12 - 00000376 _____ C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_kevin.job 2016-01-16 17:34 - 2010-11-27 16:00 - 00000000 ____D C:\Program Files (x86)\Steam 2016-01-16 17:34 - 2010-01-09 01:28 - 00009988 _____ C:\Windows\SysWOW64\ezdigsgn.dat 2016-01-16 17:33 - 2012-03-31 01:18 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cd0ed3bb2a3d09.job 2016-01-16 17:21 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-01-16 17:13 - 2012-10-13 03:42 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job ==================== Fichiers à la racine de certains dossiers ======= 2014-11-18 23:43 - 2014-11-18 23:43 - 6000640 _____ () C:\Program Files (x86)\GUT646E.tmp 2010-09-18 23:08 - 2010-07-22 22:40 - 2944904 _____ (Ask) C:\Program Files (x86)\Common Files\AskToolbarInstaller.exe 2012-02-11 00:32 - 2010-01-26 10:11 - 0444283 _____ () C:\Program Files (x86)\Common Files\WinPcapNmap.exe 2012-04-18 21:14 - 2012-06-04 15:09 - 0000006 _____ () C:\Program Files (x86)\Common Files\WPVersion.txt 2014-02-16 12:09 - 2014-02-16 22:07 - 0000098 _____ () C:\Users\kevin\AppData\Roaming\MPUI.ini 2013-03-01 17:18 - 2013-03-16 22:00 - 0000472 _____ () C:\Users\kevin\AppData\Roaming\Poladroid prefs.plist 2010-07-16 10:05 - 2013-11-13 13:05 - 0001896 _____ () C:\Users\kevin\AppData\Roaming\wklnhst.dat 2010-07-03 19:40 - 2010-07-03 19:40 - 0000000 _____ () C:\Users\kevin\AppData\Local\AtStart.txt 2010-10-12 21:29 - 2013-04-07 23:10 - 0011264 _____ () C:\Users\kevin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2010-07-03 19:40 - 2010-07-03 19:40 - 0000000 _____ () C:\Users\kevin\AppData\Local\DSwitch.txt 2010-07-03 19:40 - 2010-07-03 19:40 - 0000000 _____ () C:\Users\kevin\AppData\Local\QSwitch.txt 2014-04-08 11:26 - 2014-04-08 11:26 - 0007606 _____ () C:\Users\kevin\AppData\Local\Resmon.ResmonCfg 2010-07-17 16:21 - 2010-07-17 16:21 - 0403048 _____ () C:\Users\kevin\AppData\Local\tmpMITSUBISHIATLANTIS.JPG 2010-07-17 16:21 - 2010-07-17 16:21 - 0309471 _____ () C:\Users\kevin\AppData\Local\tmpMOUNTAIN CHEYENNE 27.0 2010-07-17 16:21 - 2010-07-17 16:21 - 0224882 _____ () C:\Users\kevin\AppData\Local\tmpMOUNTAIN CHEYENNE 27.1 2010-07-17 16:21 - 2010-07-17 16:21 - 0224460 _____ () C:\Users\kevin\AppData\Local\tmpMOUNTAIN CHEYENNE 27.2 2010-07-17 16:21 - 2010-07-17 16:21 - 0230466 _____ () C:\Users\kevin\AppData\Local\tmpMOUNTAIN CHEYENNE 27.3 2010-07-17 16:21 - 2010-07-17 16:21 - 0309471 _____ () C:\Users\kevin\AppData\Local\tmpMOUNTAIN CHEYENNE 27.JPG 2010-07-22 12:58 - 2010-07-22 12:58 - 0721738 _____ () C:\Users\kevin\AppData\Local\tmpXCHEYENNE MOUNTAIN 28.JPG 2011-10-20 09:33 - 2011-10-20 09:33 - 0000000 _____ () C:\Users\kevin\AppData\Local\{008C5DF0-D634-4856-AAFB-7344908A4950} 2014-11-10 18:16 - 2014-11-10 18:16 - 0000000 _____ () C:\Users\kevin\AppData\Local\{013254A4-6F0B-4123-9C13-2A837EBFE8A1} 2011-05-18 06:12 - 2011-05-18 06:12 - 0000000 _____ () C:\Users\kevin\AppData\Local\{030BB866-B17A-4AF4-A481-318F0EDBDEDC} 2011-05-14 12:50 - 2011-05-14 12:50 - 0000000 _____ () C:\Users\kevin\AppData\Local\{03C90D27-E9F7-4C74-90D8-62E1D180BA6E} 2011-09-14 12:15 - 2011-09-14 12:15 - 0000000 _____ () C:\Users\kevin\AppData\Local\{055EC9C0-6AD5-47FA-B690-73F14E9E4844} 2014-09-19 20:13 - 2014-09-19 20:13 - 0000000 _____ () C:\Users\kevin\AppData\Local\{05DD15BA-5972-4592-848C-3934DC434904} 2011-09-12 12:17 - 2011-09-12 12:17 - 0000000 _____ () C:\Users\kevin\AppData\Local\{06F34497-E2B0-44C3-AB8A-58FE6EB8D9E2} 2014-10-07 18:02 - 2014-10-07 18:02 - 0000000 _____ () C:\Users\kevin\AppData\Local\{09F20B12-421D-421B-90C3-08A3FD13B563} 2011-09-20 12:05 - 2011-09-20 12:05 - 0000000 _____ () C:\Users\kevin\AppData\Local\{0A8CF462-BC96-449C-BE99-44E72F915FE3} 2011-06-07 07:21 - 2011-06-07 07:21 - 0000000 _____ () C:\Users\kevin\AppData\Local\{10A2B04A-853D-4E13-95FC-43A8845012E1} 2011-10-31 08:07 - 2011-10-31 08:07 - 0000000 _____ () C:\Users\kevin\AppData\Local\{1603FC5B-8D3C-4C50-91E9-6D8D0B1F8E62} 2011-07-22 12:01 - 2011-07-22 12:01 - 0000000 _____ () C:\Users\kevin\AppData\Local\{1A2C14B2-5141-44D2-A40E-E0FCB4CF2D67} 2011-11-09 20:20 - 2011-11-09 20:20 - 0000000 _____ () C:\Users\kevin\AppData\Local\{1BFDA295-509F-4DEC-B78E-CC4F7ABBC804} 2011-10-04 20:00 - 2011-10-04 20:00 - 0000000 _____ () C:\Users\kevin\AppData\Local\{202CFF53-B0D4-4EB6-BAE8-5786E5069C7E} 2011-08-08 13:47 - 2011-08-08 13:47 - 0000000 _____ () C:\Users\kevin\AppData\Local\{2060F740-DFD6-45E4-BACB-F67533FF50D0} 2014-09-11 18:06 - 2014-09-11 18:06 - 0000000 _____ () C:\Users\kevin\AppData\Local\{222D2E13-6022-4EA7-BB61-3F0C66403DEB} 2011-08-15 09:41 - 2011-08-15 09:41 - 0000000 _____ () C:\Users\kevin\AppData\Local\{22655093-228F-4723-8C86-CEC79482AEE3} 2011-10-10 19:20 - 2011-10-10 19:20 - 0000000 _____ () C:\Users\kevin\AppData\Local\{22848935-D59E-404C-BA25-84CFC3DAAB21} 2011-07-06 15:37 - 2011-07-06 15:37 - 0000000 _____ () C:\Users\kevin\AppData\Local\{271C5013-5704-4BC3-A064-EFBAA2F27BAB} 2011-07-15 20:30 - 2011-07-15 20:30 - 0000000 _____ () C:\Users\kevin\AppData\Local\{288ECCA2-4085-4CA1-B869-0F20DB55B35D} 2011-10-07 15:42 - 2011-10-07 15:42 - 0000000 _____ () C:\Users\kevin\AppData\Local\{2A51F9C5-3D80-4968-A041-90B14E9C72D1} 2014-10-05 00:11 - 2014-10-05 00:11 - 0000000 _____ () C:\Users\kevin\AppData\Local\{2CDB12D9-6F9B-425E-96D3-D0F40BF397D3} 2014-10-06 16:07 - 2014-10-06 16:07 - 0000000 _____ () C:\Users\kevin\AppData\Local\{30645D55-9B4D-4F7D-BADB-7D8B005F581B} 2011-09-15 06:50 - 2011-09-15 06:50 - 0000000 _____ () C:\Users\kevin\AppData\Local\{30F05B3B-D054-4750-85E6-5649299A9426} 2011-10-23 23:58 - 2011-10-23 23:58 - 0000000 _____ () C:\Users\kevin\AppData\Local\{342E872E-9F2D-4617-86E4-F1941E7947AA} 2011-10-09 07:15 - 2011-10-09 07:15 - 0000000 _____ () C:\Users\kevin\AppData\Local\{34F45101-F1B1-4145-97F7-D11802092EBB} 2011-10-24 20:43 - 2011-10-24 20:43 - 0000000 _____ () C:\Users\kevin\AppData\Local\{366C069D-BE17-45D3-8A20-5FD9D4357F22} 2011-09-07 08:30 - 2011-09-07 08:30 - 0000000 _____ () C:\Users\kevin\AppData\Local\{36FC744F-3E8E-4D68-ACEA-F66079C14776} 2014-09-08 06:43 - 2014-09-08 06:43 - 0000000 _____ () C:\Users\kevin\AppData\Local\{37F7304C-2B9E-47E1-B1D5-2832D239C024} 2011-07-06 14:57 - 2011-07-06 14:57 - 0000000 _____ () C:\Users\kevin\AppData\Local\{39AC717E-3888-4BF3-8B06-EB48740D2675} 2011-10-29 13:12 - 2011-10-29 13:12 - 0000000 _____ () C:\Users\kevin\AppData\Local\{3D7C9294-8AAD-42A0-8B97-175C450EFBD9} 2011-10-31 13:14 - 2011-10-31 13:14 - 0000000 _____ () C:\Users\kevin\AppData\Local\{3D86C352-FBA8-4A70-91C3-E6B7FA3848BF} 2011-10-21 20:32 - 2011-10-21 20:32 - 0000000 _____ () C:\Users\kevin\AppData\Local\{3DAD0E09-3B46-4F13-A963-6AB221004F95} 2011-06-13 08:56 - 2011-06-13 08:56 - 0000000 _____ () C:\Users\kevin\AppData\Local\{3F4D47F3-E22C-4817-9825-6ADDCE07D4CA} 2011-10-07 06:44 - 2011-10-07 06:44 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4040656B-2D54-46DB-86E7-5EA2E7778BB3} 2011-07-16 10:14 - 2011-07-16 10:14 - 0000000 _____ () C:\Users\kevin\AppData\Local\{43C18884-30BA-42CD-A7F7-F15284C78048} 2011-07-16 08:10 - 2011-07-16 08:10 - 0000000 _____ () C:\Users\kevin\AppData\Local\{43E7B40E-0FBA-4817-933E-70EECD6FD62D} 2011-09-13 12:05 - 2011-09-13 12:05 - 0000000 _____ () C:\Users\kevin\AppData\Local\{445BF153-0F9B-436D-8971-D5D5A877CD3F} 2011-11-06 14:41 - 2011-11-06 14:41 - 0000000 _____ () C:\Users\kevin\AppData\Local\{46E9D310-8C28-4C1B-AB63-CD16265DCE0B} 2011-09-22 12:10 - 2011-09-22 12:10 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4820C927-296E-4649-8FB9-C887F9B63BCA} 2011-07-12 15:21 - 2011-07-12 15:21 - 0000000 _____ () C:\Users\kevin\AppData\Local\{489B7F1E-BAB0-484D-8138-835E37C26E7F} 2011-07-25 10:47 - 2011-07-25 10:47 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4A16BB64-6814-475D-9B79-595CDE8F35BB} 2011-11-03 13:59 - 2011-11-03 13:59 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4B2F715B-52A1-4E3D-B222-29F5E5CEC043} 2011-09-28 12:53 - 2011-09-28 12:53 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4B3EFF1A-16F3-4EF6-9391-1328286650CD} 2011-07-12 09:32 - 2011-07-12 09:32 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4B71DBB1-87BD-42E0-BED2-9BB15ACE9260} 2014-09-09 11:35 - 2014-09-09 11:35 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4C80C043-661F-45CA-AADE-AD92CEA65CAA} 2011-09-25 09:32 - 2011-09-25 09:32 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4DB833D3-14FD-480C-B498-D711CD920FC5} 2011-07-23 07:58 - 2011-07-23 07:58 - 0000000 _____ () C:\Users\kevin\AppData\Local\{4E8E1E1D-2571-4C44-9FA6-41FFED879D5E} 2011-10-29 12:08 - 2011-10-29 12:08 - 0000000 _____ () C:\Users\kevin\AppData\Local\{510B3A89-ABC5-4F0F-B8A5-46D6DF95917B} 2011-09-14 06:27 - 2011-09-14 06:27 - 0000000 _____ () C:\Users\kevin\AppData\Local\{5494A0C2-F8D6-4BBD-B5DC-45CA995E853E} 2011-10-24 20:49 - 2011-10-24 20:49 - 0000000 _____ () C:\Users\kevin\AppData\Local\{5501FDFB-D7D4-4612-8692-743E4752B4EF} 2014-09-05 05:33 - 2014-09-05 05:33 - 0000000 _____ () C:\Users\kevin\AppData\Local\{5BAAD4AF-976A-4C02-9591-3BA3875C669E} 2014-10-13 15:36 - 2014-10-13 15:36 - 0000000 _____ () C:\Users\kevin\AppData\Local\{5CBBDC96-58DA-4B9A-B93F-89C48193D751} 2011-07-08 21:29 - 2011-07-08 21:29 - 0000000 _____ () C:\Users\kevin\AppData\Local\{5DB848BD-F970-426D-92A3-219CC3AAC33A} 2011-10-28 10:41 - 2011-10-28 10:41 - 0000000 _____ () C:\Users\kevin\AppData\Local\{61E1F205-1737-4D16-AADA-C2B09AD94BA3} 2011-07-21 14:53 - 2011-07-21 14:53 - 0000000 _____ () C:\Users\kevin\AppData\Local\{66FBCC72-9864-456D-B692-A4EEE82EA21A} 2011-09-27 06:46 - 2011-09-27 06:46 - 0000000 _____ () C:\Users\kevin\AppData\Local\{67CE9EFC-21B5-4730-9431-CF20B945777A} 2011-09-18 20:07 - 2011-09-18 20:07 - 0000000 _____ () C:\Users\kevin\AppData\Local\{6A536D52-1514-4D83-8BDA-E5D5E4DBC289} 2014-09-23 17:31 - 2014-09-23 17:31 - 0000000 _____ () C:\Users\kevin\AppData\Local\{713ACC86-E45F-4162-A770-A5911AC9393F} 2011-07-31 12:14 - 2011-07-31 12:14 - 0000000 _____ () C:\Users\kevin\AppData\Local\{71A20890-73C1-442F-8767-4342929C4C52} 2011-10-26 13:05 - 2011-10-26 13:05 - 0000000 _____ () C:\Users\kevin\AppData\Local\{78915BF6-F881-460A-82F7-F7DCE4BF24FB} 2014-11-18 22:11 - 2014-11-18 22:11 - 0000000 _____ () C:\Users\kevin\AppData\Local\{7BEE1B2C-DA32-44BA-A657-DB4E6F50F4A7} 2011-10-27 12:05 - 2011-10-27 12:05 - 0000000 _____ () C:\Users\kevin\AppData\Local\{7D0B27B0-FF83-4AC9-AF99-FDA6B1EBA369} 2011-07-20 23:02 - 2011-07-20 23:02 - 0000000 _____ () C:\Users\kevin\AppData\Local\{7E1EF77D-54A6-4EC9-B437-CB19CD351C19} 2011-07-19 12:15 - 2011-07-19 12:15 - 0000000 _____ () C:\Users\kevin\AppData\Local\{7F3ACC36-F103-44F1-964B-0D2F193871AE} 2011-07-23 00:59 - 2011-07-23 00:59 - 0000000 _____ () C:\Users\kevin\AppData\Local\{7F8F2A2F-6CCB-4644-AC70-065D000B3741} 2011-09-10 19:57 - 2011-09-10 19:57 - 0000000 _____ () C:\Users\kevin\AppData\Local\{81ACEC00-00AE-4717-A2E7-02BE7A71FD3D} 2011-10-24 20:23 - 2011-10-24 20:23 - 0000000 _____ () C:\Users\kevin\AppData\Local\{82BA9C46-AD3E-405B-A680-9F3C4604DD6C} 2011-11-07 17:55 - 2011-11-07 17:55 - 0000000 _____ () C:\Users\kevin\AppData\Local\{82C84B9C-86F6-483D-9FF5-9F28C390B7B9} 2011-10-26 13:06 - 2011-10-26 13:06 - 0000000 _____ () C:\Users\kevin\AppData\Local\{84EA720B-6F6E-4B9B-8585-53FFA39CF339} 2011-07-01 17:56 - 2011-07-01 17:56 - 0000000 _____ () C:\Users\kevin\AppData\Local\{8641893F-444B-4CC8-AA46-7374E0BFE12A} 2011-09-17 11:11 - 2011-09-17 11:11 - 0000000 _____ () C:\Users\kevin\AppData\Local\{893FA89A-DA66-46F5-976A-D6E8970B6DC5} 2011-10-18 17:30 - 2011-10-18 17:30 - 0000000 _____ () C:\Users\kevin\AppData\Local\{8B36CAC5-592F-47EB-A7EA-02E8FB33E6C4} 2011-07-05 16:02 - 2011-07-05 16:02 - 0000000 _____ () C:\Users\kevin\AppData\Local\{8B571C4F-3689-4BDE-867F-DDA0B968C96C} 2014-09-05 05:35 - 2014-09-05 05:35 - 0000000 _____ () C:\Users\kevin\AppData\Local\{8DA45CE6-DB1C-481F-B4E1-24A497C87EC9} 2011-07-17 12:30 - 2011-07-17 12:30 - 0000000 _____ () C:\Users\kevin\AppData\Local\{8E8D880E-466C-442B-B420-29847A163AF1} 2011-10-19 12:13 - 2011-10-19 12:13 - 0000000 _____ () C:\Users\kevin\AppData\Local\{905B6A58-0D21-4FDC-9FC7-6E43599E6B48} 2011-10-05 12:27 - 2011-10-05 12:27 - 0000000 _____ () C:\Users\kevin\AppData\Local\{926C4B7E-8A0F-4973-A071-F4A809ABC7A1} 2011-07-11 11:49 - 2011-07-11 11:49 - 0000000 _____ () C:\Users\kevin\AppData\Local\{93EF7C52-7C90-4E86-A448-6F73A1D4B5EC} 2011-07-06 13:51 - 2011-07-06 13:51 - 0000000 _____ () C:\Users\kevin\AppData\Local\{94FDAA63-75B1-4978-8F10-388A61E85550} 2011-10-08 21:52 - 2011-10-08 21:52 - 0000000 _____ () C:\Users\kevin\AppData\Local\{968FA1EB-7662-4423-BB82-F3A5E392598F} 2014-09-17 19:02 - 2014-09-17 19:02 - 0000000 _____ () C:\Users\kevin\AppData\Local\{98ED514E-0AFE-47D7-8A63-5311C42235D2} 2011-12-24 23:58 - 2011-12-24 23:58 - 0000000 _____ () C:\Users\kevin\AppData\Local\{992D6442-3D2D-4232-A865-B93096B2EC64} 2011-10-04 20:18 - 2011-10-04 20:18 - 0000000 _____ () C:\Users\kevin\AppData\Local\{9A99220A-2B0B-48D6-90D0-CE6F73D93060} 2011-07-18 12:07 - 2011-07-18 12:07 - 0000000 _____ () C:\Users\kevin\AppData\Local\{9CC6382A-B05B-4FDD-8B5A-5E4B78327CA9} 2014-08-26 11:38 - 2014-08-26 11:38 - 0000000 _____ () C:\Users\kevin\AppData\Local\{9DA95BD9-3296-4361-B8B8-E6484EEF48DC} 2011-09-04 08:52 - 2011-09-04 08:52 - 0000000 _____ () C:\Users\kevin\AppData\Local\{9F644EB1-6046-4BDD-83FB-86E4668EBF50} 2014-08-31 14:25 - 2014-08-31 14:25 - 0000000 _____ () C:\Users\kevin\AppData\Local\{9FF760C8-CEE2-4357-ADF6-C08AF760F4EF} 2014-09-10 16:20 - 2014-09-10 16:20 - 0000000 _____ () C:\Users\kevin\AppData\Local\{A0CAC066-DAF6-4B10-81BF-396430190F9F} 2011-09-08 15:22 - 2011-09-08 15:22 - 0000000 _____ () C:\Users\kevin\AppData\Local\{A640F033-F391-4E13-9A8F-282DA5DAF66C} 2011-08-20 04:42 - 2011-08-20 04:42 - 0000000 _____ () C:\Users\kevin\AppData\Local\{A661E773-7E27-4478-B5E6-649CC7C45B20} 2011-10-08 10:11 - 2011-10-08 10:11 - 0000000 _____ () C:\Users\kevin\AppData\Local\{A9F1064D-095D-4827-90BF-2516E378A150} 2011-06-02 19:08 - 2011-06-02 19:08 - 0000000 _____ () C:\Users\kevin\AppData\Local\{AAA80CE9-D512-4F66-A1A6-16A839AF99A2} 2014-10-16 13:34 - 2014-10-16 13:34 - 0000000 _____ () C:\Users\kevin\AppData\Local\{AB94E822-D796-4A5E-B387-3F5EDE6DC04C} 2011-06-07 06:01 - 2011-06-07 06:01 - 0000000 _____ () C:\Users\kevin\AppData\Local\{AC70AAB2-6ADE-472B-AB09-235194D7287B} 2011-08-05 16:06 - 2011-08-05 16:06 - 0000000 _____ () C:\Users\kevin\AppData\Local\{B03054B5-32BD-4356-8B2B-E3EE2EC27DF2} 2011-11-07 01:29 - 2011-11-07 01:29 - 0000000 _____ () C:\Users\kevin\AppData\Local\{B077278A-6358-4AAB-B1AE-3BB68D3DC18C} 2011-08-10 10:54 - 2011-08-10 10:54 - 0000000 _____ () C:\Users\kevin\AppData\Local\{B09C3BC7-F6B8-4231-98C0-BAA7D421D371} 2011-07-28 13:58 - 2011-07-28 13:58 - 0000000 _____ () C:\Users\kevin\AppData\Local\{B17A6D5A-69C7-494D-B8AC-60485CFC4B76} 2011-07-09 03:59 - 2011-07-09 03:59 - 0000000 _____ () C:\Users\kevin\AppData\Local\{B2801DD2-597B-4D9C-A70F-96AFC3053B72} 2014-09-22 16:48 - 2014-09-22 16:48 - 0000000 _____ () C:\Users\kevin\AppData\Local\{B839154A-BBD7-413B-951C-9D5B70792EB9} 2011-07-15 18:09 - 2011-07-15 18:09 - 0000000 _____ () C:\Users\kevin\AppData\Local\{BBB78387-29E4-4F23-BB51-5AA4AC95039A} 2011-10-29 21:25 - 2011-10-29 21:25 - 0000000 _____ () C:\Users\kevin\AppData\Local\{BC0D3BC2-990D-4484-9A81-4616FB2CAD40} 2011-11-07 01:15 - 2011-11-07 01:15 - 0000000 _____ () C:\Users\kevin\AppData\Local\{BDDE4D5E-06F4-4BA0-9FB6-B73596EF0435} 2011-10-12 12:10 - 2011-10-12 12:10 - 0000000 _____ () C:\Users\kevin\AppData\Local\{BEECD2D9-6062-4DFC-AE82-B27C3760876F} 2011-12-26 20:20 - 2011-12-26 20:20 - 0000000 _____ () C:\Users\kevin\AppData\Local\{C02DD874-6224-483E-B1C8-F17AB3226800} 2011-10-02 11:20 - 2011-10-02 11:20 - 0000000 _____ () C:\Users\kevin\AppData\Local\{C1BF1228-15A6-45A9-97A6-75E7FA596CB5} 2011-07-11 10:20 - 2011-07-11 10:20 - 0000000 _____ () C:\Users\kevin\AppData\Local\{C26BC068-2AA4-44EA-A955-01D55B83A108} 2014-09-21 12:35 - 2014-09-21 12:35 - 0000000 _____ () C:\Users\kevin\AppData\Local\{C4ECD81B-8E66-4E48-B868-A1E92065C1DC} 2014-09-02 16:50 - 2014-09-02 16:50 - 0000000 _____ () C:\Users\kevin\AppData\Local\{C752485F-0478-4C86-9EDF-B8555651AF9A} 2011-09-29 15:45 - 2011-09-29 15:45 - 0000000 _____ () C:\Users\kevin\AppData\Local\{C77328FE-7933-407D-81F8-20619D548E7D} 2014-10-25 21:26 - 2014-10-25 21:26 - 0000000 _____ () C:\Users\kevin\AppData\Local\{D28B56F3-D4A0-4059-9742-C49E0398A933} 2011-10-29 21:20 - 2011-10-29 21:20 - 0000000 _____ () C:\Users\kevin\AppData\Local\{D583CF00-B9C9-488B-AD7B-B50EB5FEE72D} 2011-06-11 18:44 - 2011-06-11 18:44 - 0000000 _____ () C:\Users\kevin\AppData\Local\{DA077B4D-7410-4232-BDE9-8D082B39E9C7} 2011-06-27 16:38 - 2011-06-27 16:39 - 0000000 _____ () C:\Users\kevin\AppData\Local\{DA1DB974-5BD6-43D1-8976-A36E9C1E44DD} 2011-09-23 07:32 - 2011-09-23 07:32 - 0000000 _____ () C:\Users\kevin\AppData\Local\{DA33D6EC-129F-4683-AA69-C76D3E2BBA14} 2011-10-26 10:25 - 2011-10-26 10:25 - 0000000 _____ () C:\Users\kevin\AppData\Local\{DCC61D0B-050B-48CD-9436-107AEF760043} 2011-07-20 07:37 - 2011-07-20 07:37 - 0000000 _____ () C:\Users\kevin\AppData\Local\{DD2D279F-1277-45F3-97F8-E8F13DB58432} 2011-10-28 18:56 - 2011-10-28 18:56 - 0000000 _____ () C:\Users\kevin\AppData\Local\{DF752BBC-3DCB-44A5-9724-563F1426F901} 2011-10-04 12:20 - 2011-10-04 12:20 - 0000000 _____ () C:\Users\kevin\AppData\Local\{E0258DD4-D1FE-48B9-93E3-9A06C043B294} 2012-01-02 19:38 - 2012-01-02 19:40 - 0000000 _____ () C:\Users\kevin\AppData\Local\{E0E0A5E8-26BF-4327-8654-FBA1C47646E3} 2014-10-09 12:15 - 2014-10-09 12:15 - 0000000 _____ () C:\Users\kevin\AppData\Local\{E435908F-3433-4064-B0C8-801E1718EA94} 2011-09-22 09:14 - 2011-09-22 09:14 - 0000000 _____ () C:\Users\kevin\AppData\Local\{EA1FFB09-04CD-4477-A621-5251877A4B4E} 2011-10-22 09:51 - 2011-10-22 09:51 - 0000000 _____ () C:\Users\kevin\AppData\Local\{EC9E70DE-6A77-44E4-B449-3E82C559A79F} 2011-12-01 22:39 - 2011-12-01 22:39 - 0000000 _____ () C:\Users\kevin\AppData\Local\{ED7029B3-453B-43FB-A832-CAA3D4645EBB} 2011-11-09 18:24 - 2011-11-09 18:24 - 0000000 _____ () C:\Users\kevin\AppData\Local\{EF8D6BF5-7ADD-47BE-893B-305E99CBCC70} 2011-07-08 12:03 - 2011-07-08 12:03 - 0000000 _____ () C:\Users\kevin\AppData\Local\{F2AF0368-4BC6-4620-9B95-7255F6DD2889} 2016-01-16 17:13 - 2016-01-16 17:13 - 0000000 _____ () C:\Users\kevin\AppData\Local\{F395B3E6-8D8C-4E52-8E53-83F69D117F4D} 2011-08-09 07:00 - 2011-08-09 07:00 - 0000000 _____ () C:\Users\kevin\AppData\Local\{F60EDBCC-0ECD-406C-9BBD-7A8E4BB910B5} 2011-10-30 22:09 - 2011-10-30 22:09 - 0000000 _____ () C:\Users\kevin\AppData\Local\{F6F4684E-4A96-49B5-94D4-F5F9AF17DB9B} 2011-06-15 09:53 - 2011-06-15 09:53 - 0000000 _____ () C:\Users\kevin\AppData\Local\{F7E46619-2524-4664-9F77-8E38C9DDD1EC} 2011-07-24 10:55 - 2011-07-24 10:55 - 0000000 _____ () C:\Users\kevin\AppData\Local\{FAF711DA-63DA-4BB7-9FAA-318DCEF9FB4D} 2011-10-29 20:37 - 2011-10-29 20:37 - 0000000 _____ () C:\Users\kevin\AppData\Local\{FB0DE7B9-79E6-4449-B1C2-8B07E4E0C363} 2014-08-30 09:04 - 2014-08-30 09:04 - 0000000 _____ () C:\Users\kevin\AppData\Local\{FB4F2032-C5DB-4122-ABD9-FDB0E9D63355} 2011-08-11 14:48 - 2011-08-11 14:48 - 0000000 _____ () C:\Users\kevin\AppData\Local\{FB675AD2-4C68-4254-943A-E5460E9DF428} 2012-06-24 16:36 - 2012-06-24 16:36 - 0000057 _____ () C:\ProgramData\Ament.ini 2014-10-11 00:00 - 2014-11-18 23:38 - 0000184 _____ () C:\ProgramData\HPWALog.txt 2012-05-06 21:26 - 2013-04-20 19:46 - 0000848 ___SH () C:\ProgramData\KGyGaAvL.sys 2012-04-22 20:57 - 2012-04-22 20:57 - 0000097 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2010-04-24 01:49 - 2010-04-24 01:49 - 0000032 _____ () C:\ProgramData\{051B9612-4D82-42AC-8C63-CD2DCEDC1CB3}.log 2010-01-09 01:17 - 2010-01-09 01:17 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log 2010-04-24 01:48 - 2010-04-24 01:48 - 0000032 _____ () C:\ProgramData\{23F3DA62-2D9E-4A69-B8D5-BE8E9E148092}.log 2010-01-09 01:13 - 2010-01-09 01:14 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log 2010-04-24 01:48 - 2010-04-24 01:48 - 0000032 _____ () C:\ProgramData\{4FC670EB-5F02-4B07-90DB-022B86BFEFD0}.log 2010-04-24 01:49 - 2010-04-24 01:49 - 0000032 _____ () C:\ProgramData\{9867824A-C86D-4A83-8F3C-E7A86BE0AFD3}.log 2010-01-09 01:12 - 2010-01-09 01:13 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log 2010-01-09 01:14 - 2010-01-09 01:17 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log 2010-04-24 01:49 - 2010-04-24 01:49 - 0000105 _____ () C:\ProgramData\{d36dd326-7280-11d8-97c8-000129760cbe}.log Fichiers à déplacer ou supprimer: ==================== C:\Users\kevin\AppData\Local\Temp\6F99.exe C:\Users\kevin\ZHPDiag3.exe Certains fichiers dans TEMP: ==================== C:\Users\kevin\AppData\Local\Temp\6F99.exe ==================== Bamital & volsnap ================= (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement ATTENTION: ==> Impossible d'accéder au BCD. LastRegBack: 2010-09-18 11:02 ==================== Fin de FRST.txt ============================