Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Exécuté par JeanJean (administrateur) sur MONPC (29-03-2016 21:12:30)
Exécuté depuis C:\Users\JeanJean\Desktop
Profils chargés: UpdatusUser & JeanJean (Profils disponibles: UpdatusUser & JeanJean)
Platform: Windows 8 (X64) Langue: Français (France)
Internet Explorer Version 10 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\RADS\system\rads_user_kernel.exe
() C:\Program Files (x86)\RADS\projects\lol_launcher\releases\0.0.1.13\deploy\LoLLauncher.exe
() C:\Program Files (x86)\RADS\projects\lol_patcher\releases\0.0.0.53\deploy\LoLPatcher.exe
() C:\Program Files (x86)\RADS\projects\lol_air_client\releases\0.0.1.192\deploy\LolClient.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\SnippingTool.exe


==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-20] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1215632 2012-08-17] (Realtek Semiconductor)
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [107192 2012-09-11] (ASUS)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-09-24] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUS InstantKey] => C:\Program Files (x86)\ASUS\ASUS Instant Key\Ikey_start.exe [20456 2012-02-20] (ASUS)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [78352 2012-05-23] (cyberlink)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595480 2016-03-20] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-03-29] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-801840802-1643253040-2827169636-1002\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-801840802-1643253040-2827169636-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)
HKU\S-1-5-18\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
AppInit_DLLs: C:\PROGRA~2\NVIDIA~1\3DVISI~1\NVSTIN~1.DLL => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit64.dll [18856 2012-10-02] (NVIDIA Corporation)
AppInit_DLLs: ,C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [247144 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\3DVISI~1\nvStInit.dll => C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvStInit.dll [17288 2012-10-02] (NVIDIA Corporation)
AppInit_DLLs-x32: ,C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
AppInit_DLLs-x32: ,C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [202600 2012-10-08] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-03-29] (AVAST Software)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{FC2A4DC1-5165-450B-BADE-04BAEE7D491B}: [DhcpNameServer] 89.2.0.1 89.2.0.2

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-801840802-1643253040-2827169636-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
SearchScopes: HKU\S-1-5-21-801840802-1643253040-2827169636-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-03-29] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-03-29] (AVAST Software)

FireFox:
========
FF ProfilePath: C:\Users\JeanJean\AppData\Roaming\Mozilla\Firefox\Profiles\1bn8dha5.default
FF DefaultSearchEngine: DuckDuckGo
FF Homepage: hxxps://startpage.com/
FF Plugin: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-28] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-28] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-01-20] (VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-28] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-28] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2012-10-02] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2012-10-02] (NVIDIA Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Extension: Fasterfox - C:\Users\JeanJean\AppData\Roaming\Mozilla\Firefox\Profiles\1bn8dha5.default\extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi [2016-03-29]
FF Extension: Flash and Video Download - C:\Users\JeanJean\AppData\Roaming\Mozilla\Firefox\Profiles\1bn8dha5.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-03-29]
FF Extension: AdBlock Ultimate - C:\Users\JeanJean\AppData\Roaming\Mozilla\Firefox\Profiles\1bn8dha5.default\Extensions\adblockultimate@adblockultimate.net.xpi [2016-03-29]
FF Extension: Ghostery - C:\Users\JeanJean\AppData\Roaming\Mozilla\Firefox\Profiles\1bn8dha5.default\Extensions\firefox@ghostery.com.xpi [2016-03-29]
FF Extension: Adblock Plus - C:\Users\JeanJean\AppData\Roaming\Mozilla\Firefox\Profiles\1bn8dha5.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-03-29]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-16] [non signé]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-03-29]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => non trouvé(e)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-03-29]

==================== Services (Avec liste blanche) ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-03-29] (AVAST Software)
S2 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [243728 2012-05-23] (CyberLink)
S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [227896 2016-03-25] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [5971000 2016-03-25] (GOG.com)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-04-17] ()
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [15440 2012-07-26] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)

===================== Pilotes (Avec liste blanche) ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-03-29] (AVAST Software)
S1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-03-29] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-03-29] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-03-29] (AVAST Software)
S0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-03-29] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-03-29] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-03-29] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-03-29] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-03-29] (AVAST Software)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [61824 2012-10-31] (ASUS Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-27] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3265256 2012-09-20] (Broadcom Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-10-08] (Intel Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [284008 2012-10-08] (NVIDIA Corporation)
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-10-09] (Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [34216 2012-07-26] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [258288 2012-07-26] (Microsoft Corporation)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-10-09] (Windows (R) Win 7 DDK provider)
R4 avkmgr; \SystemRoot\system32\DRIVERS\avkmgr.sys [X]
U0 msahci; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-03-29 21:12 - 2016-03-29 21:12 - 00015977 _____ C:\Users\JeanJean\Desktop\FRST.txt
2016-03-29 21:10 - 2016-03-29 21:12 - 00000000 ____D C:\FRST
2016-03-29 21:10 - 2016-03-29 21:10 - 02374144 _____ (Farbar) C:\Users\JeanJean\Desktop\FRST64.exe
2016-03-29 21:09 - 2016-03-29 21:09 - 00000085 _____ C:\WINDOWS\wininit.ini
2016-03-29 19:01 - 2016-03-29 19:01 - 00000000 ____D C:\AdwCleaner
2016-03-29 18:57 - 2016-03-29 18:59 - 03102208 _____ C:\Users\JeanJean\Desktop\adwcleaner_5.107.exe
2016-03-29 18:18 - 2016-03-29 18:18 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\vlc
2016-03-29 18:16 - 2016-03-29 18:16 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-29 18:14 - 2016-03-29 18:15 - 30510920 _____ C:\Users\JeanJean\Downloads\vlc-2.2.2-win32.exe
2016-03-29 17:56 - 2016-03-29 18:03 - 00000000 ____D C:\Users\JeanJean\AppData\Local\Mozilla
2016-03-29 17:56 - 2016-03-29 17:56 - 00001161 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-03-29 17:56 - 2016-03-29 17:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-29 17:54 - 2016-03-29 17:54 - 01622528 _____ C:\Users\JeanJean\Desktop\ResetBrowser.exe
2016-03-29 16:57 - 2016-03-29 16:59 - 00000038 _____ C:\Program Files (x86)\lockfile
2016-03-29 16:55 - 2016-03-29 17:00 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-03-29 16:37 - 2016-03-29 16:37 - 05659241 _____ (Swearware) C:\Users\JeanJean\Desktop\ComboFix.exe
2016-03-29 16:37 - 2016-03-29 16:37 - 01725440 _____ (Farbar) C:\Users\JeanJean\Desktop\FRST.exe
2016-03-29 16:35 - 2016-03-29 16:35 - 03521617 _____ (Nicolas Coolman ) C:\Users\JeanJean\Downloads\ZHPFix.exe
2016-03-29 16:17 - 2016-03-29 16:17 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2016-03-29 16:11 - 2016-03-29 21:11 - 00000000 ____D C:\Users\JeanJean\Desktop\Nettoyage
2016-03-29 16:09 - 2016-03-29 16:12 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-03-29 16:09 - 2016-03-29 16:09 - 143659408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-03-29 13:08 - 2016-03-29 13:08 - 00000000 ____D C:\Users\JeanJean\Documents\League of Legends
2016-03-29 13:04 - 2016-03-29 13:04 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\LolClient
2016-03-29 00:57 - 2016-03-29 00:57 - 00003068 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1459205857
2016-03-29 00:57 - 2016-03-29 00:57 - 00001039 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk
2016-03-29 00:57 - 2016-03-29 00:57 - 00001039 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2016-03-29 00:56 - 2016-03-29 00:56 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2016-03-29 00:53 - 2016-03-29 00:50 - 01070904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6AEB.tmp
2016-03-29 00:53 - 2016-03-29 00:50 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6B0F.tmp
2016-03-29 00:53 - 2016-03-29 00:50 - 00398152 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-03-29 00:53 - 2016-03-29 00:50 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6B10.tmp
2016-03-29 00:53 - 2016-03-29 00:50 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6B11.tmp
2016-03-29 00:53 - 2016-03-29 00:50 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6B0D.tmp
2016-03-29 00:53 - 2016-03-29 00:50 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6AFC.tmp
2016-03-29 00:53 - 2016-03-29 00:50 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6B0E.tmp
2016-03-29 00:53 - 2016-03-29 00:50 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6AFD.tmp
2016-03-29 00:50 - 2016-03-29 00:53 - 00003924 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-03-29 00:50 - 2016-03-29 00:50 - 01070904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-03-29 00:50 - 2016-03-29 00:50 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys.1459205446093
2016-03-29 00:50 - 2016-03-29 00:50 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-03-29 00:50 - 2016-03-29 00:50 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.1459205443218
2016-03-29 00:50 - 2016-03-29 00:50 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-03-29 00:50 - 2016-03-29 00:50 - 00286440 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.1459205441671
2016-03-29 00:50 - 2016-03-29 00:50 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-03-29 00:50 - 2016-03-29 00:50 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys.1459205449187
2016-03-29 00:50 - 2016-03-29 00:50 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-03-29 00:50 - 2016-03-29 00:50 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-03-29 00:50 - 2016-03-29 00:50 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-03-29 00:50 - 2016-03-29 00:50 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-03-29 00:50 - 2016-03-29 00:50 - 00001924 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-03-29 00:50 - 2016-03-29 00:50 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2016-03-29 00:50 - 2016-03-29 00:50 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\AVAST Software
2016-03-29 00:50 - 2016-03-29 00:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2016-03-29 00:50 - 2016-03-29 00:49 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys.1459205449187
2016-03-29 00:49 - 2016-03-29 00:49 - 00052184 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-03-29 00:46 - 2016-03-29 00:56 - 00000000 ____D C:\ProgramData\AVAST Software
2016-03-29 00:46 - 2016-03-29 00:56 - 00000000 ____D C:\Program Files\AVAST Software
2016-03-29 00:46 - 2016-03-29 00:46 - 05066104 _____ (AVAST Software) C:\Users\JeanJean\Downloads\avast_free_antivirus_setup_online.exe
2016-03-29 00:36 - 2016-03-29 00:36 - 02166272 _____ C:\Users\JeanJean\Downloads\ZHPDiag3.exe
2016-03-29 00:15 - 2016-03-29 00:15 - 00000000 ____D C:\Users\JeanJean\Downloads\Autorun
2016-03-29 00:09 - 2016-03-29 00:09 - 01610352 _____ (Malwarebytes) C:\Users\JeanJean\Downloads\JRT.exe
2016-03-28 23:57 - 2016-03-29 15:10 - 00000834 _____ C:\Users\JeanJean\Desktop\ZHPCleaner.lnk
2016-03-28 23:57 - 2016-03-28 23:57 - 02102784 _____ C:\Users\JeanJean\Downloads\ZHPCleaner.exe
2016-03-28 23:53 - 2016-03-29 16:22 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\ZHP
2016-03-28 23:53 - 2016-03-28 23:54 - 00289416 _____ C:\Users\JeanJean\ZHPDiag3.exe
2016-03-28 23:51 - 2016-03-29 18:20 - 00028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2016-03-28 23:51 - 2016-03-29 00:06 - 00000000 ____D C:\ProgramData\RogueKiller
2016-03-28 23:50 - 2016-03-28 23:51 - 23872072 _____ C:\Users\JeanJean\Desktop\RogueKillerX64.exe
2016-03-28 23:45 - 2016-03-28 23:45 - 00000000 ____D C:\Users\JeanJean\Downloads\procexp
2016-03-28 23:28 - 2016-03-28 23:28 - 00000000 ____D C:\Users\JeanJean\AppData\Local\ElevatedDiagnostics
2016-03-28 21:47 - 2016-03-28 21:47 - 00000000 ____D C:\Users\JeanJean\AppData\Local\CEF
2016-03-28 21:46 - 2016-03-28 21:49 - 00000000 ____D C:\Program Files (x86)\GalaxyClient
2016-03-28 21:46 - 2016-03-28 21:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-03-28 21:46 - 2016-03-28 21:46 - 00000000 ____D C:\ProgramData\GOG.com
2016-03-28 21:46 - 2015-06-05 02:38 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00064352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00022368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00011616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:38 - 00011616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00961192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00062304 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00020832 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00019808 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00017760 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00016224 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00015712 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00014176 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00013664 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00012640 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00012128 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00011616 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-eventing-provider-l1-1-0.dll
2016-03-28 21:46 - 2015-06-05 02:18 - 00011616 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-xstate-l2-1-0.dll
2016-03-28 21:42 - 2016-03-28 21:45 - 116718336 _____ (GOG.com ) C:\Users\JeanJean\Downloads\setup_galaxy_1.1.8.8.exe
2016-03-28 21:08 - 2016-03-28 21:08 - 00000000 ____D C:\sources
2016-03-28 20:45 - 2016-03-28 20:45 - 00000000 ____D C:\Users\JeanJean\Downloads\The_Witcher_2_ee_wallpapers
2016-03-28 20:43 - 2016-03-28 20:43 - 00083664 _____ (Gibson Research Corp., Laguna Niguel, California, USA.) C:\Users\JeanJean\Downloads\never10.exe
2016-03-28 20:42 - 2016-03-28 20:42 - 00000000 ____D C:\ProgramData\Riot Games
2016-03-28 20:36 - 2016-03-28 20:36 - 00000000 ____D C:\Users\JeanJean\Downloads\The_Witcher_2_ee_triss_playboy
2016-03-28 19:49 - 2016-02-17 17:37 - 05624984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc140.dll
2016-03-28 19:48 - 2016-03-28 19:48 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\WinRAR
2016-03-28 19:44 - 2016-03-28 19:44 - 00890176 _____ (GOG.com ) C:\Users\JeanJean\Downloads\setup_the_witcher2_ee_3.4.0.25.exe
2016-03-28 19:35 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2016-03-28 19:35 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2016-03-28 19:35 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2016-03-28 19:35 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2016-03-28 19:35 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2016-03-28 19:34 - 2016-03-29 16:59 - 00000000 ____D C:\Program Files (x86)\RADS
2016-03-28 19:34 - 2016-03-28 19:34 - 00001572 _____ C:\Users\Public\Desktop\League of Legends.lnk
2016-03-28 19:33 - 2016-03-28 19:35 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\Riot Games
2016-03-28 19:03 - 2012-07-26 07:26 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20160328-190338.backup
2016-03-28 18:51 - 2016-03-29 00:50 - 00000000 ____D C:\Program Files\Common Files\AV
2016-03-28 18:44 - 2016-03-28 18:44 - 00000000 ____D C:\Program Files (x86)\Cisco
2016-03-28 18:38 - 2016-03-28 18:44 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel PROSet Wireless
2016-03-28 18:35 - 2016-03-28 23:38 - 00000000 ____D C:\Program Files (x86)\Avira
2016-03-28 18:35 - 2014-05-15 03:02 - 00059424 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2016-03-28 18:35 - 2014-05-15 00:43 - 03286528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-03-28 18:35 - 2014-05-15 00:43 - 01623040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2016-03-28 18:35 - 2014-05-15 00:43 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2016-03-28 18:35 - 2014-05-15 00:42 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-03-28 18:34 - 2016-03-28 23:38 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-28 18:34 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2016-03-28 18:34 - 2012-11-06 06:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2016-03-28 18:34 - 2012-11-06 06:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wushareduxresources.dll
2016-03-28 18:28 - 2016-03-29 19:22 - 00002790 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2016-03-28 18:28 - 2016-03-28 18:28 - 00000824 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-03-28 18:28 - 2016-03-28 18:28 - 00000000 ____D C:\Program Files\CCleaner
2016-03-28 18:25 - 2016-03-28 18:25 - 00000000 ____D C:\Program Files\Common Files\Lavasoft
2016-03-28 18:21 - 2016-03-28 18:21 - 00001271 _____ C:\Users\JeanJean\Desktop\Should I Remove It.lnk
2016-03-28 18:21 - 2016-03-28 18:21 - 00000000 __SHD C:\WINDOWS\SysWOW64\AI_RecycleBin
2016-03-28 18:21 - 2016-03-28 18:21 - 00000000 ____D C:\Program Files (x86)\Reason
2016-03-28 18:17 - 2016-03-28 18:17 - 00003542 _____ C:\WINDOWS\System32\Tasks\ASUS Touchpad Launcher (x64)
2016-03-28 18:12 - 2016-03-29 17:56 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\Mozilla
2016-03-28 17:59 - 2016-03-29 21:09 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2016-03-28 17:59 - 2016-03-29 21:09 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2016-03-28 17:59 - 2016-03-28 17:59 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2016-03-28 17:58 - 2016-03-28 17:58 - 00001104 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-03-28 17:58 - 2016-03-28 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-28 17:58 - 2016-03-28 17:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-28 17:58 - 2016-03-28 17:58 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-28 17:58 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-03-28 17:58 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-03-28 17:58 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-03-28 17:57 - 2016-03-28 18:29 - 00000000 ____D C:\Program Files\PDFCreator
2016-03-28 17:57 - 2016-03-28 17:57 - 00120072 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2016-03-28 17:57 - 2016-03-28 17:57 - 00000256 _____ C:\Users\JeanJean\Documents\autorun_disable.reg
2016-03-28 17:57 - 2016-03-28 17:57 - 00000000 ____D C:\Users\JeanJean\AppData\Local\PDFCreator
2016-03-28 17:57 - 2016-03-28 17:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2016-03-28 17:56 - 2016-03-28 17:56 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\Macromedia
2016-03-28 17:55 - 2016-03-28 17:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2016-03-28 17:55 - 2016-03-28 17:55 - 00000000 ____D C:\Program Files\VideoLAN
2016-03-28 17:53 - 2016-03-28 17:53 - 00000000 ____D C:\WINDOWS\SysWOW64\Adobe
2016-03-28 17:53 - 2016-03-28 17:53 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-03-28 17:53 - 2016-03-28 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2016-03-28 17:53 - 2016-03-28 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-28 17:53 - 2016-03-28 17:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2016-03-28 17:53 - 2016-03-28 17:53 - 00000000 ____D C:\Program Files\WinRAR
2016-03-28 17:53 - 2016-03-28 17:53 - 00000000 ____D C:\Program Files\7-Zip
2016-03-28 17:53 - 2016-03-28 17:53 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-28 17:52 - 2016-03-28 17:52 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2016-03-28 17:52 - 2016-03-28 17:52 - 00000000 ____D C:\Program Files\Java
2016-03-28 17:51 - 2016-03-28 17:53 - 00000000 ____D C:\Users\JeanJean\.oracle_jre_usage
2016-03-28 17:51 - 2016-03-28 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-28 17:51 - 2016-03-28 17:51 - 00097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2016-03-28 17:51 - 2016-03-28 17:51 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\Sun
2016-03-28 17:51 - 2016-03-28 17:51 - 00000000 ____D C:\Users\JeanJean\AppData\LocalLow\Sun
2016-03-28 17:51 - 2016-03-28 17:51 - 00000000 ____D C:\Users\JeanJean\AppData\LocalLow\Oracle
2016-03-28 17:51 - 2016-03-28 17:51 - 00000000 ____D C:\ProgramData\Oracle
2016-03-28 17:51 - 2016-03-28 17:51 - 00000000 ____D C:\Program Files (x86)\Java
2016-03-28 17:50 - 2016-03-28 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-03-28 17:49 - 2016-03-29 17:56 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-28 17:49 - 2016-03-28 22:19 - 00003598 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-801840802-1643253040-2827169636-1002
2016-03-28 17:49 - 2016-03-28 17:49 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-03-28 17:49 - 2016-03-28 17:49 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-03-28 17:44 - 2016-03-28 21:34 - 00000408 _____ C:\Users\JeanJean\AppData\Roaming\sp_data.sys
2016-03-28 17:44 - 2016-03-28 17:44 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\ASUS WebStorage
2016-03-28 17:44 - 2016-03-28 17:44 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\ASUS
2016-03-28 17:43 - 2016-03-28 17:43 - 00001448 _____ C:\Users\JeanJean\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-03-28 17:43 - 2016-03-28 17:43 - 00000000 __RSD C:\Users\Public\Desktop\ASUS
2016-03-28 17:43 - 2016-03-28 17:43 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\Adobe
2016-03-28 17:43 - 2016-03-28 17:43 - 00000000 ____D C:\ProgramData\FolderView
2016-03-28 17:41 - 2016-03-28 17:43 - 00000000 ____D C:\Users\JeanJean\AppData\Local\Packages
2016-03-28 17:41 - 2016-03-28 17:42 - 00000000 ____D C:\Users\JeanJean\AppData\Local\ASUS
2016-03-28 17:41 - 2016-03-28 17:41 - 00000020 ___SH C:\Users\JeanJean\ntuser.ini
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\Voisinage réseau
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\Voisinage d'impression
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\Modèles
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\Mes documents
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\Menu Démarrer
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\Documents\Mes vidéos
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\Documents\Mes images
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\Documents\Ma musique
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 _SHDL C:\Users\JeanJean\AppData\Local\Historique
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 ____D C:\Users\JeanJean\AppData\Roaming\Intel
2016-03-28 17:41 - 2016-03-28 17:41 - 00000000 ____D C:\Users\JeanJean\AppData\Local\VirtualStore
2016-03-28 17:40 - 2016-03-28 23:54 - 00000000 ____D C:\Users\JeanJean
2016-03-28 17:33 - 2016-03-28 17:33 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-03-28 17:32 - 2016-03-28 21:29 - 00296984 _____ C:\WINDOWS\system32\FNTCACHE.DAT

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-03-29 19:05 - 2012-07-26 07:37 - 00000000 ____D C:\WINDOWS\Inf
2016-03-29 17:53 - 2012-07-26 09:59 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-03-29 17:46 - 2012-08-17 02:52 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2016-03-29 17:24 - 2012-08-17 02:52 - 00000000 ____D C:\ProgramData\Adobe
2016-03-29 16:20 - 2012-08-03 01:06 - 00800978 _____ C:\WINDOWS\system32\perfh00C.dat
2016-03-29 16:20 - 2012-08-03 01:06 - 00155650 _____ C:\WINDOWS\system32\perfc00C.dat
2016-03-29 16:20 - 2012-08-03 01:02 - 00741800 _____ C:\WINDOWS\system32\perfh007.dat
2016-03-29 16:20 - 2012-08-03 01:02 - 00155360 _____ C:\WINDOWS\system32\perfc007.dat
2016-03-29 16:20 - 2012-07-26 09:28 - 02690548 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-29 14:26 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\rescache
2016-03-29 13:43 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\AUInstallAgent
2016-03-29 13:38 - 2012-07-26 10:12 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-29 00:19 - 2012-12-25 21:34 - 00003114 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update
2016-03-28 21:29 - 2012-12-25 21:24 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-28 21:29 - 2012-07-26 09:22 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-28 21:28 - 2012-07-26 07:26 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-03-28 21:26 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\WinStore
2016-03-28 21:26 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2016-03-28 21:26 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2016-03-28 21:26 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2016-03-28 21:25 - 2012-08-03 01:01 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2016-03-28 21:25 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\SysWOW64\winrm
2016-03-28 21:25 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\SysWOW64\WCN
2016-03-28 21:25 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2016-03-28 21:25 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\SysWOW64\slmgr
2016-03-28 21:25 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2016-03-28 21:25 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\system32\winrm
2016-03-28 21:25 - 2012-07-26 10:12 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2016-03-28 21:25 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2016-03-28 21:25 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2016-03-28 21:25 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\SysWOW64\Com
2016-03-28 21:25 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\migwiz
2016-03-28 21:25 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2016-03-28 21:25 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2016-03-28 21:25 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-03-28 21:22 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\system32\WCN
2016-03-28 21:22 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\system32\slmgr
2016-03-28 21:22 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2016-03-28 21:22 - 2012-07-26 07:38 - 00000000 ____D C:\WINDOWS\system32\Dism
2016-03-28 21:21 - 2012-07-26 11:43 - 00000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2016-03-28 21:21 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2016-03-28 21:21 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\Com
2016-03-28 21:19 - 2012-07-26 11:45 - 00000000 ____D C:\Program Files\Windows Journal
2016-03-28 21:19 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\SysWOW64\en-GB
2016-03-28 21:19 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2016-03-28 21:19 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Photo Viewer
2016-03-28 21:19 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Common Files\System
2016-03-28 21:19 - 2012-07-26 07:37 - 00000000 ____D C:\WINDOWS\servicing
2016-03-28 21:18 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\en-GB
2016-03-28 21:16 - 2012-07-26 10:12 - 00000000 ____D C:\WINDOWS\system32\MUI
2016-03-28 18:45 - 2012-12-25 21:20 - 00000000 ____D C:\ProgramData\Intel
2016-03-28 18:44 - 2012-12-25 21:21 - 00000000 ____D C:\Program Files\Common Files\Intel
2016-03-28 18:44 - 2012-12-25 21:20 - 00000000 ____D C:\Program Files (x86)\Intel
2016-03-28 18:41 - 2012-12-25 21:25 - 00000000 ____D C:\WINDOWS\SysWOW64\NV
2016-03-28 18:41 - 2012-12-25 21:25 - 00000000 ____D C:\WINDOWS\system32\NV
2016-03-28 18:37 - 2012-12-25 21:20 - 00000000 ____D C:\Program Files\Intel
2016-03-28 18:36 - 2012-12-25 21:20 - 00000000 ____D C:\Intel
2016-03-28 18:34 - 2012-08-17 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2016-03-28 18:34 - 2012-08-17 02:53 - 00000000 ____D C:\Program Files (x86)\ASUS
2016-03-28 18:33 - 2012-12-25 21:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS Video Magic
2016-03-28 18:33 - 2012-12-25 21:35 - 00000000 ____D C:\Program Files (x86)\CyberLink
2016-03-28 18:33 - 2012-12-25 21:23 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-03-28 18:28 - 2012-08-03 00:24 - 00000000 ____D C:\WINDOWS\Panther
2016-03-28 18:27 - 2012-07-26 10:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-03-28 18:25 - 2012-12-25 21:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-03-28 17:46 - 2012-08-17 02:53 - 00000000 ____D C:\ProgramData\ChangeFolderView
2016-03-28 17:45 - 2012-07-26 07:26 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2016-03-28 17:43 - 2012-08-02 15:33 - 00000000 ____D C:\WINDOWS\Log
2016-03-28 16:31 - 2012-07-26 10:13 - 00262144 _____ C:\WINDOWS\system32\config\BCD-Template

==================== Fichiers à la racine de certains dossiers =======

2016-03-29 16:57 - 2016-03-29 16:59 - 0000038 _____ () C:\Program Files (x86)\lockfile
2014-01-21 16:54 - 2014-01-21 16:54 - 0097464 _____ () C:\Program Files (x86)\lol.launcher.admin.exe
2014-01-21 16:54 - 2014-01-21 16:54 - 0097464 _____ () C:\Program Files (x86)\lol.launcher.exe
2016-03-28 17:44 - 2016-03-28 21:34 - 0000408 _____ () C:\Users\JeanJean\AppData\Roaming\sp_data.sys
2012-08-17 02:52 - 2012-07-30 08:03 - 0000217 _____ () C:\ProgramData\SetStretch.cmd
2012-08-17 02:52 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2012-12-25 21:40 - 2012-12-25 21:41 - 0000109 _____ () C:\ProgramData\{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}.log
2012-12-25 21:36 - 2012-12-25 21:39 - 0000110 _____ () C:\ProgramData\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}.log
2012-12-25 21:39 - 2012-12-25 21:40 - 0000108 _____ () C:\ProgramData\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}.log
2012-12-25 21:35 - 2012-12-25 21:36 - 0000110 _____ () C:\ProgramData\{E3739848-5329-48E3-8D28-5BBD6E8BE384}.log

Fichiers à déplacer ou supprimer:
====================
C:\Users\JeanJean\ZHPDiag3.exe


Certains fichiers dans TEMP:
====================
C:\Users\JeanJean\AppData\Local\Temp\avgnt.exe
C:\Users\JeanJean\AppData\Local\Temp\dllnt_dump.dll


==================== Bamital & volsnap =================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement


LastRegBack: 2012-08-02 15:24

==================== Fin de FRST.txt ============================