Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2016 01
Exécuté par Karolane (administrateur) sur NYCTANGEL (22-11-2016 00:53:44)
Exécuté depuis C:\Users\Karolane\Desktop
Profils chargés: Karolane (Profils disponibles: Karolane)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Intel Corporation) C:\WINDOWS\System32\igfxCUIService.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ROG Game First III\AsusGameFirstService.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe
() C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel Corporation) C:\WINDOWS\System32\IPROSetMonitor.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AEGIS\AEGIS_AlertService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AEGIS\AsSysLevelUpSrc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AEGIS\AsToastHelper.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AEGIS\AEGIS_SysMode.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{9AF45D7C-34F1-4BA0-B799-825C8C04494C}\AiChargerDT.exe
(Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Lighting\ASUS_Manager_Lighting.exe
() C:\Program Files (x86)\ASUS\ASUS Manager\Lighting\CheckCD_RomLighting.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Ai Charger II\Ai_ChargerII_TrayIcon(ASUS_Manager).exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe
() C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\WINDOWS\System32\SkyDrive.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\WINDOWS\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\WINDOWS\System32\Taskmgr.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Users\Karolane\Desktop\ZHPDiag3.exe
(Microsoft Corporation) C:\WINDOWS\System32\wlanext.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\WINDOWS\splwow64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1386712 2014-06-12] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-04-11] (Intel Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2398776 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [280576 2013-09-25] (Realtek Semiconductor Corporation)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3216032 2015-01-19] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2860832 2016-10-12] (Valve Corporation)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4177784 2016-01-15] (Disc Soft Ltd)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\Run: [uTorrent] => C:\Users\Karolane\AppData\Roaming\uTorrent\uTorrent.exe [2139840 2016-09-09] (BitTorrent Inc.)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8641240 2016-02-12] (Piriform Ltd)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\Run: [Spotify Web Helper] => C:\Users\Karolane\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1523312 2016-08-23] (Spotify Ltd)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\Run: [Spotify] => C:\Users\Karolane\AppData\Roaming\Spotify\Spotify.exe [6930544 2016-08-23] (Spotify Ltd)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\Run: [Chromium] => c:\users\karolane\appdata\local\chromium\application\chrome.exe [1068544 2016-03-18] (The Chromium Authors)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\Run: [Discord] => C:\Users\Karolane\AppData\Local\Discord\app-0.0.296\Discord.exe [62471352 2016-08-24] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\MountPoints2: H - "H:\Setup.exe" 
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\MountPoints2: {51d75b0b-de7e-11e5-826c-40e230cf53a8} - "H:\Setup.exe" 
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\MountPoints2: {51d75b50-de7e-11e5-826c-40e230cf53a8} - "H:\Setup.exe" 
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\MountPoints2: {51d75cc1-de7e-11e5-826c-40e230cf53a8} - "I:\AutoRun.exe" 
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\MountPoints2: {51d75d04-de7e-11e5-826c-40e230cf53a8} - "F:\Setup.exe" 
HKU\S-1-5-21-4124948268-44185721-827295383-1001\...\MountPoints2: {ed5079aa-ef9f-11e5-8277-40e230cf53a8} - "J:\windows\Autorun.exe" {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A10B02 PID_0083
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-25] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Pas de fichier
Startup: C:\Users\Karolane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FacebookGamesNotifier.exe.lnk [2016-06-29]
ShortcutTarget: FacebookGamesNotifier.exe.lnk -> C:\Users\Karolane\AppData\Local\Facebook\Games\FacebookGamesNotifier.exe (Pas de fichier)
GroupPolicy: Restriction <======= ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 24.200.241.37 24.202.72.13
Tcpip\..\Interfaces\{8CF76956-89B8-478C-ABC3-848E4D66807D}: [DhcpNameServer] 192.168.0.1 24.200.241.37 24.202.72.13
Tcpip\..\Interfaces\{B428ADF4-87F7-4330-AAFA-B176E01B2124}: [DhcpNameServer] 192.168.0.1 24.200.241.37 24.202.72.13

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-4124948268-44185721-827295383-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-4124948268-44185721-827295383-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKU\S-1-5-21-4124948268-44185721-827295383-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-10-08] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll => Pas de fichier
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-10-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-09-29] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-09-29] (Oracle Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-21] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-21] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-21] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-10-21] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: gz8gno9g.default
FF ProfilePath: C:\Users\Karolane\AppData\Roaming\Mozilla\Firefox\Profiles\gz8gno9g.default [2016-11-21]
FF NewTab: Mozilla\Firefox\Profiles\gz8gno9g.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\gz8gno9g.default -> Yahoo! Powered
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\gz8gno9g.default -> Yahoo! Powered
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-09-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-09-29] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-10-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-04-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome: 
=======
CHR HomePage: Default -> hxxp://search.conduit.com/?ctid=CT3282812&SearchSource=48&CUI=UN73883129732521399&UM=2&sspv=CHNTR1
CHR StartupUrls: Default -> "hxxp://www.google.com/","hxxp://moodle.emica.ca/"
CHR Profile: C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default [2016-11-22]
CHR Extension: (Google Slides) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-02-19]
CHR Extension: (Google Docs) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-02-19]
CHR Extension: (Google Drive) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-02-19]
CHR Extension: (YouTube) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-02-19]
CHR Extension: (Adblock Plus) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (Google Search) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-02-19]
CHR Extension: (Google Sheets) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-02-19]
CHR Extension: (Google Docs Offline) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-14]
CHR Extension: (AdBlock) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-11-12]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-01]
CHR Extension: (Gmail) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-02-19]
CHR Extension: (Chrome Media Router) - C:\Users\Karolane\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-24]

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2014-06-17] ()
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Fichier non signé]
R2 AsusGameFirstService; C:\Program Files (x86)\ASUS\ROG Game First III\AsusGameFirstService.exe [345912 2014-08-29] (ASUSTeK)
R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [35328 2013-05-07] (Realtek Semiconductor Corporation) [Fichier non signé]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-08-02] ()
R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [59392 2013-09-26] () [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3291848 2016-10-08] (Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1369464 2016-01-15] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [240416 2016-03-10] (EasyAntiCheat Ltd)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Fichier non signé]
S4 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Fichier non signé]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-06-14] (NVIDIA Corporation)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-04-11] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [282096 2014-03-11] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1881144 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3634232 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2522680 2016-06-14] (NVIDIA Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 AiChargerDT; C:\Windows\SysWow64\drivers\AiChargerDT.sys [14880 2012-10-18] (ASUSTek Computer Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-06-17] ()
R0 assdv2; C:\Windows\System32\Drivers\assdv2.sys [21816 2013-12-05] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-03-01] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-03-01] (Disc Soft Ltd)
R3 e1dexpress; C:\WINDOWS\system32\DRIVERS\e1d64x64.sys [457496 2014-03-13] (Intel Corporation)
S3 massfilter_hs; C:\WINDOWS\system32\drivers\massfilter_hs.sys [18456 2011-07-07] (HandSet Incorporated)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [118272 2014-03-20] (Intel Corporation)
R1 NFC_Driver; C:\WINDOWS\System32\drivers\NFC_Driver.sys [48336 2014-03-27] (Titan ARC Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28216 2016-06-14] (NVIDIA Corporation)
R3 NVVADARM; C:\WINDOWS\system32\drivers\nvvadarm.sys [47760 2015-11-10] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R3 RtkBtFilter; C:\WINDOWS\system32\DRIVERS\RtkBtfilter.sys [548056 2013-09-05] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\system32\DRIVERS\rtwlane.sys [3757784 2014-12-17] (Realtek Semiconductor Corporation                           )
R1 VBoxUSBMon; C:\WINDOWS\system32\DRIVERS\VBoxUSBMon.sys [133248 2016-07-06] (BigNox Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
R2 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U0 aswVmm; pas de ImagePath

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Trois mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-11-22 00:53 - 2016-11-22 00:54 - 00024024 _____ C:\Users\Karolane\Desktop\FRST.txt
2016-11-22 00:53 - 2016-11-22 00:53 - 02412544 _____ (Farbar) C:\Users\Karolane\Desktop\FRST64.exe
2016-11-22 00:53 - 2016-11-22 00:53 - 00000000 ____D C:\FRST
2016-11-22 00:50 - 2016-11-22 00:50 - 00147814 _____ C:\Users\Karolane\Desktop\ZHPDiagrapport.txt
2016-11-22 00:48 - 2016-11-22 00:48 - 00147814 _____ C:\Users\Karolane\Desktop\ZHPDiag.txt
2016-11-22 00:42 - 2016-11-22 00:42 - 02472448 _____ C:\Users\Karolane\Desktop\ZHPDiag3.exe
2016-11-22 00:42 - 2016-11-22 00:42 - 00000886 _____ C:\Users\Karolane\Desktop\ZHPDiag.lnk
2016-11-22 00:24 - 2016-11-22 00:25 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2016-11-22 00:24 - 2016-11-22 00:24 - 00001261 _____ C:\Users\Karolane\Desktop\CrystalDiskInfo Shizuku Edition.lnk
2016-11-22 00:24 - 2016-11-22 00:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2016-11-22 00:23 - 2016-11-22 00:24 - 106360056 _____ (Crystal Dew World ) C:\Users\Karolane\Desktop\CrystalDiskInfo7_0_4ShizukuFull-en.exe
2016-11-22 00:03 - 2016-11-22 00:03 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2016-11-22 00:03 - 2016-04-14 00:38 - 00113216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2016-11-22 00:03 - 2016-04-14 00:38 - 00102976 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2016-11-22 00:03 - 2016-04-14 00:38 - 00056384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2016-11-21 23:48 - 2016-11-21 23:53 - 00000000 ____D C:\Users\Karolane\Desktop\Sims 4 paint
2016-11-19 21:29 - 2016-11-19 21:29 - 00001660 _____ C:\Users\Karolane\Desktop\TS4 - Raccourci.lnk
2016-11-19 20:39 - 2016-11-19 21:06 - 00000000 ____D C:\Program Files (x86)\The Sims 4
2016-11-19 20:39 - 2016-11-19 20:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\The Sims 4
2016-11-15 02:32 - 2016-11-15 02:32 - 00993632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2016-11-15 02:32 - 2016-11-15 02:32 - 00987848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2016-11-15 02:32 - 2016-11-15 02:32 - 00690016 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp120_clr0400.dll
2016-11-15 02:32 - 2016-11-15 02:32 - 00484552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp120_clr0400.dll
2016-11-15 02:32 - 2016-11-15 02:32 - 00030912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aspnet_counters.dll
2016-11-15 02:32 - 2016-11-15 02:32 - 00029376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aspnet_counters.dll
2016-11-15 02:32 - 2016-11-15 02:32 - 00018600 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2016-11-15 02:32 - 2016-11-15 02:32 - 00018592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2016-11-15 02:14 - 2016-11-15 02:14 - 00000000 ____D C:\Users\Karolane\AppData\Local\TSR Workshop
2016-11-15 02:13 - 2016-11-15 02:13 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\TSRWorkshop
2016-11-15 02:13 - 2016-11-15 02:13 - 00000000 ____D C:\Users\Karolane\AppData\Local\Ibibi_HB
2016-11-15 02:12 - 2016-11-15 02:12 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\The Sims Resource
2016-11-14 00:44 - 2016-11-14 00:44 - 00000013 _____ C:\Users\Karolane\Desktop\Nouveau document texte.txt
2016-11-11 14:48 - 2016-10-28 16:04 - 00828408 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-11-11 14:48 - 2016-10-28 16:04 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-09 04:11 - 2016-11-02 15:48 - 00372568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2016-11-09 04:11 - 2016-11-02 15:48 - 00315224 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2016-11-09 04:11 - 2016-11-02 09:03 - 00044032 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2016-11-09 04:11 - 2016-11-02 09:00 - 00035840 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2016-11-09 04:11 - 2016-10-27 13:53 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-11-09 04:11 - 2016-10-27 13:51 - 02896384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2016-11-09 04:11 - 2016-10-27 13:37 - 00817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2016-11-09 04:11 - 2016-10-27 13:28 - 25763328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2016-11-09 04:11 - 2016-10-27 13:19 - 06047744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-11-09 04:11 - 2016-10-27 13:08 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2016-11-09 04:11 - 2016-10-27 13:07 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll
2016-11-09 04:11 - 2016-10-27 13:05 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2016-11-09 04:11 - 2016-10-27 12:57 - 01033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2016-11-09 04:11 - 2016-10-27 12:49 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll
2016-11-09 04:11 - 2016-10-27 12:47 - 00378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-11-09 04:11 - 2016-10-27 12:46 - 00806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2016-11-09 04:11 - 2016-10-27 12:46 - 00725504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2016-11-09 04:11 - 2016-10-27 12:44 - 02131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2016-11-09 04:11 - 2016-10-27 12:17 - 15257088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2016-11-09 04:11 - 2016-10-27 12:16 - 02920448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2016-11-09 04:11 - 2016-10-27 12:03 - 01543680 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2016-11-09 04:11 - 2016-10-27 11:54 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2016-11-09 04:11 - 2016-10-27 10:05 - 20304896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2016-11-09 04:11 - 2016-10-25 09:11 - 04169216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2016-11-09 04:11 - 2016-10-22 12:35 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-11-09 04:11 - 2016-10-22 12:34 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2016-11-09 04:11 - 2016-10-22 12:27 - 02287616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2016-11-09 04:11 - 2016-10-22 12:21 - 00663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2016-11-09 04:11 - 2016-10-22 11:58 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2016-11-09 04:11 - 2016-10-22 11:57 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll
2016-11-09 04:11 - 2016-10-22 11:56 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2016-11-09 04:11 - 2016-10-22 11:51 - 00880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2016-11-09 04:11 - 2016-10-22 11:46 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll
2016-11-09 04:11 - 2016-10-22 11:45 - 00693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2016-11-09 04:11 - 2016-10-22 11:45 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2016-11-09 04:11 - 2016-10-22 11:44 - 04608000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-11-09 04:11 - 2016-10-22 11:43 - 02055680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2016-11-09 04:11 - 2016-10-22 11:30 - 13654016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2016-11-09 04:11 - 2016-10-22 11:12 - 02444800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2016-11-09 04:11 - 2016-10-22 11:09 - 01312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2016-11-09 04:11 - 2016-10-22 11:09 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2016-11-09 04:11 - 2016-10-13 14:06 - 01385280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2016-11-09 04:11 - 2016-10-13 14:06 - 01124376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2016-11-09 04:11 - 2016-10-12 03:01 - 00377176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2016-11-09 04:11 - 2016-10-11 15:21 - 00497448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-11-09 04:11 - 2016-10-11 15:21 - 00399776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-11-09 04:11 - 2016-10-11 13:34 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2016-11-09 04:11 - 2016-10-11 12:47 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2016-11-09 04:11 - 2016-10-11 11:55 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2016-11-09 04:11 - 2016-10-10 16:17 - 00444248 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2016-11-09 04:11 - 2016-10-10 16:17 - 00333656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2016-11-09 04:11 - 2016-10-09 17:59 - 00551256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2016-11-09 04:11 - 2016-10-08 18:12 - 00445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2016-11-09 04:11 - 2016-10-08 17:53 - 03754496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2016-11-09 04:11 - 2016-10-08 17:21 - 01445376 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2016-11-09 04:11 - 2016-10-08 17:18 - 00840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2016-11-09 04:11 - 2016-10-08 17:07 - 00332288 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAnimation.dll
2016-11-09 04:11 - 2016-10-08 17:02 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2016-11-09 04:11 - 2016-10-08 16:49 - 02410496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2016-11-09 04:11 - 2016-10-08 16:21 - 00254464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAnimation.dll
2016-11-09 04:11 - 2016-10-07 20:34 - 01660040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2016-11-09 04:11 - 2016-10-07 20:34 - 01212248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2016-11-09 04:11 - 2016-10-04 15:39 - 00101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bowser.sys
2016-11-09 04:11 - 2016-10-04 15:23 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\asycfilt.dll
2016-11-09 04:11 - 2016-10-04 15:08 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2016-11-09 04:11 - 2016-10-04 15:08 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\asycfilt.dll
2016-11-09 04:11 - 2016-09-09 17:52 - 00921944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2016-11-09 04:11 - 2016-09-09 17:14 - 00275800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2016-11-09 04:11 - 2016-09-09 09:15 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2016-11-09 04:11 - 2016-09-09 09:09 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2016-11-09 04:11 - 2016-09-09 09:04 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2016-11-09 04:11 - 2016-09-09 09:03 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2016-11-09 04:11 - 2016-09-09 09:02 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2016-11-09 04:11 - 2016-09-09 08:38 - 00446124 _____ C:\WINDOWS\system32\ApnDatabase.xml
2016-11-09 04:11 - 2016-09-03 13:20 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsidsc.dll
2016-11-09 04:11 - 2016-09-03 13:06 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll
2016-11-09 04:11 - 2016-09-03 12:21 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsidsc.dll
2016-11-09 04:11 - 2016-09-03 11:12 - 00512512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2016-11-09 04:11 - 2016-09-03 11:05 - 01094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2016-11-09 04:11 - 2016-09-03 10:58 - 00397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2016-11-09 04:11 - 2016-09-02 09:05 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2016-11-09 04:11 - 2016-09-02 09:05 - 00262144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2016-11-09 04:11 - 2016-09-01 09:33 - 00377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2016-11-09 04:11 - 2016-09-01 09:33 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2016-11-09 04:11 - 2016-09-01 09:31 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2016-11-09 04:11 - 2016-08-30 09:11 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2016-11-09 04:11 - 2016-08-29 21:45 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xolehlp.dll
2016-11-09 04:11 - 2016-08-29 21:18 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcprx.dll
2016-11-09 04:11 - 2016-08-29 21:18 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xolehlp.dll
2016-11-09 04:11 - 2016-08-29 21:03 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcprx.dll
2016-11-09 04:11 - 2016-08-22 08:34 - 01628672 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2016-11-06 19:55 - 2016-11-20 16:22 - 00000000 ____D C:\Users\Karolane\Desktop\SIms
2016-10-26 23:43 - 2016-10-26 23:43 - 00000000 ____D C:\Users\Karolane\AppData\Local\Malfatto Software
2016-10-22 23:28 - 2016-10-22 23:28 - 00000795 _____ C:\Users\Karolane\Desktop\Documents - Raccourci.lnk
2016-10-22 17:07 - 2016-10-22 17:07 - 00000136 _____ C:\Users\Karolane\Desktop\The Sims™ 3 Into the Future - Raccourci.lnk
2016-10-22 17:05 - 2016-10-22 17:05 - 00000897 _____ C:\Users\Karolane\Desktop\µTorrent.lnk
2016-10-22 17:03 - 2016-10-22 17:03 - 00000695 _____ C:\Users\Karolane\Desktop\RollerCoaster Tycoon 3 Platinum.lnk
2016-10-22 17:01 - 2016-10-22 17:01 - 00000608 _____ C:\Users\Karolane\Desktop\Wakfu.lnk
2016-10-22 17:00 - 2016-10-22 17:00 - 00002167 _____ C:\Users\Karolane\Desktop\Skype.lnk
2016-10-22 16:59 - 2016-10-22 16:59 - 00000436 _____ C:\Users\Karolane\Desktop\Ce PC - Raccourci.lnk
2016-10-22 16:55 - 2016-10-22 16:55 - 00001005 _____ C:\Users\Karolane\Desktop\Minecraft.lnk
2016-10-22 16:55 - 2016-10-22 16:55 - 00000222 _____ C:\Users\Karolane\Desktop\WAKFU.url
2016-10-22 16:55 - 2016-10-22 16:55 - 00000222 _____ C:\Users\Karolane\Desktop\Undertale.url
2016-10-22 16:54 - 2016-10-22 16:54 - 00001834 _____ C:\Users\Karolane\Desktop\League of Legends.lnk
2016-10-22 16:54 - 2016-10-22 16:54 - 00000953 _____ C:\Users\Karolane\Desktop\Steam.lnk
2016-10-22 16:54 - 2016-10-22 16:54 - 00000222 _____ C:\Users\Karolane\Desktop\Stardew Valley.url
2016-10-22 16:54 - 2016-10-22 16:54 - 00000222 _____ C:\Users\Karolane\Desktop\ARK Survival Evolved.url
2016-10-22 16:45 - 2016-10-22 16:45 - 03017653 _____ C:\Users\Karolane\Downloads\166_honeycomb_icons_and_ini_s_by_dave___by_dave_reddit-d8oe6qm.rar
2016-10-22 16:45 - 2016-10-22 16:45 - 00000000 ____D C:\Users\Karolane\Downloads\166_honeycomb_icons_and_ini_s_by_dave___by_dave_reddit-d8oe6qm
2016-10-22 16:38 - 2016-10-22 16:38 - 00000295 _____ C:\Users\Karolane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Corbeille.lnk
2016-10-22 16:27 - 2016-10-22 16:27 - 01043603 _____ C:\Users\Karolane\Downloads\cleartext_for_rainmeter__v3_2_3___16_sep_2016__by_redsaph-d8lh1a9.rmskin
2016-10-22 16:26 - 2016-10-22 16:26 - 00380414 _____ C:\Users\Karolane\Downloads\visbubble__round_visualizer_for_rainmeter__v3_0__by_undefinist-d82wfbx.rmskin
2016-10-22 16:25 - 2016-10-22 16:25 - 00124566 _____ C:\Users\Karolane\Downloads\rainmeter___elegance_1_0_by_lilshizzy-d3jpo7v.rmskin
2016-10-22 16:24 - 2016-10-22 16:24 - 01821463 _____ C:\Users\Karolane\Downloads\honeycomb_by_apiium-d7q5yuz.rmskin
2016-10-22 16:21 - 2016-10-22 16:26 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\Rainmeter
2016-10-21 02:42 - 2016-10-21 02:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016
2016-10-11 19:17 - 2016-09-17 12:21 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adsmsext.dll
2016-10-11 19:17 - 2016-09-12 16:01 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2016-10-11 19:17 - 2016-09-08 15:41 - 00121176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2016-10-11 19:17 - 2016-09-08 09:00 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2016-10-11 19:17 - 2016-09-08 09:00 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2016-10-11 19:17 - 2016-09-07 16:57 - 01560064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2016-10-11 19:17 - 2016-09-07 16:56 - 01491456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2016-10-11 19:17 - 2016-08-25 14:40 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2016-10-11 19:17 - 2016-08-12 19:03 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifibus.sys
2016-10-11 19:17 - 2016-08-12 19:02 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2016-10-11 19:17 - 2016-08-12 19:01 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2016-10-11 19:17 - 2016-08-12 17:19 - 09323008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2016-10-11 19:17 - 2016-08-12 16:17 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2016-10-11 19:17 - 2016-08-12 15:52 - 13317120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2016-10-11 19:17 - 2016-08-11 20:58 - 01946176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2016-10-11 19:17 - 2016-08-11 13:33 - 00096256 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\parport.sys
2016-10-11 19:17 - 2016-08-11 13:33 - 00083456 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys
2016-10-11 19:17 - 2016-08-11 13:33 - 00023040 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serenum.sys
2016-10-11 19:17 - 2016-08-11 00:46 - 00420184 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2016-10-11 19:17 - 2016-08-03 10:36 - 01102848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2016-10-11 19:17 - 2016-08-03 10:33 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2016-10-11 19:17 - 2016-07-30 11:36 - 02537472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2016-10-11 19:17 - 2016-07-26 08:40 - 00162850 _____ C:\WINDOWS\SysWOW64\C_932.NLS
2016-10-11 19:17 - 2016-07-23 13:12 - 00954880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2016-10-11 19:14 - 2016-08-27 13:26 - 19789232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2016-10-11 19:14 - 2016-08-27 13:26 - 02411048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2016-10-11 19:14 - 2016-08-27 13:26 - 00113656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RestoreOptIn.exe
2016-10-11 19:14 - 2016-08-27 11:11 - 01049600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2016-10-11 19:14 - 2016-08-27 10:55 - 12879360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2016-10-11 19:14 - 2016-08-20 17:12 - 02463744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2016-10-11 18:26 - 2016-10-11 18:26 - 00051311 _____ C:\Users\Karolane\Downloads\Pirates.des.Caraibes.Quadrilogie.VFQ.torrent
2016-10-07 21:52 - 2016-10-07 21:52 - 00443632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp140.dll
2016-10-07 21:52 - 2016-10-07 21:52 - 00085744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vcruntime140.dll
2016-10-07 21:49 - 2016-10-07 21:49 - 00244504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\concrt140.dll
2016-10-07 21:45 - 2016-10-07 21:45 - 00271112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vccorlib140.dll
2016-10-04 18:30 - 2016-11-21 01:57 - 00000000 ____D C:\Users\Karolane\AppData\Local\MyFreeCams
2016-10-04 18:30 - 2014-12-10 00:38 - 00053248 _____ (TODO: <Company name>) C:\WINDOWS\SysWOW64\ImageOle.dll
2016-10-01 22:03 - 2016-10-01 22:03 - 00054790 _____ C:\Users\Karolane\Downloads\Dirty Dancing 2 TRUEFRENCH DvDRiP Xvid Ac3-UTT.torrent
2016-10-01 22:01 - 2016-10-01 22:01 - 00027198 _____ C:\Users\Karolane\Downloads\thelorax720pATC-French-Movies.Net.torrent
2016-10-01 22:00 - 2016-10-01 22:00 - 00015811 _____ C:\Users\Karolane\Downloads\Greace.DVDRip.x264.AC3.VFQ-Vip3r.mkv.torrent
2016-10-01 11:45 - 2016-10-01 11:45 - 00002321 _____ C:\Users\Karolane\Downloads\Heroes of Might and Magic 3 HD Edition-RELOADED.torrent
2016-10-01 11:44 - 2016-10-01 11:44 - 00097084 _____ C:\Users\Karolane\Downloads\Might.and.Magic.Heroes.VII.v1.3.1.FRENCH-Mephisto.torrent
2016-10-01 11:37 - 2016-10-01 11:37 - 00020426 _____ C:\Users\Karolane\Downloads\Sid.Meiers.Civilization.V-Mephisto.torrent
2016-10-01 11:27 - 2016-10-01 11:27 - 00010748 _____ C:\Users\Karolane\Downloads\[PC] Age of Empires 2 HD Edition v2.8.994.0 [FULL FR].torrent
2016-09-29 17:45 - 2016-10-15 15:58 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\.minecraft
2016-09-29 17:43 - 2016-09-29 17:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2016-09-29 16:37 - 2016-11-21 01:41 - 00000000 ____D C:\Users\Karolane\Documents\minecraft 1.7
2016-09-24 15:30 - 2016-09-25 18:46 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\discord
2016-09-24 15:30 - 2016-09-24 15:30 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2016-09-24 15:30 - 2016-09-24 15:30 - 00000000 ____D C:\Users\Karolane\AppData\Local\SquirrelTemp
2016-09-24 15:30 - 2016-09-24 15:30 - 00000000 ____D C:\Users\Karolane\AppData\Local\Discord
2016-09-21 16:00 - 2016-09-21 16:00 - 76595984 _____ (Curse) C:\Users\Karolane\Downloads\CurseClientSetup.exe
2016-09-21 16:00 - 2016-09-21 16:00 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\Curse
2016-09-17 15:56 - 2016-09-17 15:56 - 00089147 _____ C:\Users\Karolane\Downloads\One Piece T01-82.torrent
2016-09-15 16:36 - 2016-09-15 16:36 - 00000041 _____ C:\Users\Karolane\inst.ini
2016-09-15 16:36 - 2016-09-15 16:36 - 00000000 ____D C:\Users\Karolane\vmlogs
2016-09-15 16:36 - 2016-09-15 16:36 - 00000000 ____D C:\Users\Karolane\Nox_share
2016-09-15 16:36 - 2016-07-06 03:09 - 00133248 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys
2016-09-15 16:35 - 2016-09-16 17:12 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\Nox
2016-09-15 16:35 - 2016-09-16 17:12 - 00000000 ____D C:\Users\Karolane\AppData\Local\Nox
2016-09-15 16:35 - 2016-07-06 03:09 - 00281728 _____ (BigNox Corporation) C:\WINDOWS\system32\Drivers\XQHDrv.sys
2016-09-14 02:13 - 2016-08-20 18:05 - 05273600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2016-09-14 02:13 - 2016-08-20 17:50 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-09-14 02:13 - 2016-08-20 17:27 - 05268480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2016-09-14 02:13 - 2016-08-09 17:47 - 00611576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2016-09-14 02:13 - 2016-08-04 09:17 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2016-09-14 02:13 - 2016-08-03 13:06 - 00675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2016-09-14 02:13 - 2016-08-03 13:05 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2016-09-14 02:11 - 2016-08-22 11:06 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2016-09-14 02:11 - 2016-08-20 20:03 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2016-09-14 02:11 - 2016-08-20 20:01 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2016-09-14 02:11 - 2016-08-20 20:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2016-09-14 02:11 - 2016-08-20 17:55 - 00104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2016-09-14 02:11 - 2016-08-14 11:14 - 01376768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2016-09-14 02:11 - 2016-07-08 17:35 - 00101208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2016-09-14 02:11 - 2016-07-08 09:17 - 00319488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2016-09-14 02:11 - 2016-07-07 17:32 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2016-09-14 02:11 - 2016-07-07 15:23 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2016-09-14 02:11 - 2016-07-07 15:18 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2016-09-14 02:11 - 2016-07-07 15:11 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll
2016-09-14 02:11 - 2016-07-07 14:35 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2016-09-14 02:11 - 2016-07-07 14:14 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2016-09-14 02:11 - 2016-07-03 22:02 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2016-09-14 02:11 - 2016-07-01 15:39 - 00157016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dssenh.dll
2016-09-11 17:41 - 2016-09-11 17:41 - 00048762 _____ C:\Users\Karolane\Downloads\The.Office.US.S02.COMPLETE.PROPER.VOSTFR.VOSTEN.WEB-DL.x264-LeRalouf.torrent
2016-09-11 17:40 - 2016-09-11 17:40 - 00042057 _____ C:\Users\Karolane\Downloads\The.Office.US.S01.COMPLETE.720p.PROPER.VOSTFR.VOSTEN.WEB-DL.H264-LeRalouf.torrent
2016-09-10 22:21 - 2016-09-10 22:21 - 00096590 _____ C:\Users\Karolane\Downloads\MTS_Delphy_1048017_Sims3Dashboard.rar
2016-09-10 22:21 - 2016-09-10 22:21 - 00000000 ____D C:\Users\Karolane\Downloads\MTS_Delphy_1048017_Sims3Dashboard
2016-09-09 21:45 - 2016-09-09 21:45 - 00037602 _____ C:\Users\Karolane\Downloads\MTS_FordGT90Concept_1409967_ts3cla.zip
2016-09-09 21:45 - 2016-09-09 21:45 - 00000000 ____D C:\Users\Karolane\Downloads\MTS_FordGT90Concept_1409967_ts3cla
2016-09-02 15:53 - 2016-09-02 16:02 - 00000000 ____D C:\Users\Karolane\AppData\Local\UNDERTALE
2016-08-25 20:31 - 2016-08-25 20:32 - 28037582 _____ (Aequus Gaming Ltd. ) C:\Users\Karolane\Downloads\LSI - LoL Summoner Information (v4.15.0) Setup.exe
2016-08-25 09:16 - 2016-08-25 09:16 - 00003244 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task
2016-08-24 16:37 - 2016-08-24 16:37 - 00022224 _____ C:\Users\Karolane\Downloads\Girl's High School S1+OAV+Bonus [BDRIP][720p Vostfr].torrent

==================== Trois mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-11-22 00:43 - 2016-02-24 16:44 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\ZHP
2016-11-22 00:26 - 2014-09-06 13:34 - 00806638 _____ C:\WINDOWS\system32\perfh00C.dat
2016-11-22 00:26 - 2014-09-06 13:34 - 00156992 _____ C:\WINDOWS\system32\perfc00C.dat
2016-11-22 00:26 - 2014-03-18 05:03 - 01820486 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-11-22 00:26 - 2013-08-22 08:36 - 00000000 ____D C:\WINDOWS\Inf
2016-11-22 00:24 - 2016-02-19 17:43 - 00003592 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4124948268-44185721-827295383-1001
2016-11-22 00:22 - 2016-02-19 17:59 - 00001092 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-22 00:22 - 2016-02-19 17:42 - 00000000 ___DO C:\Users\Karolane\OneDrive
2016-11-22 00:19 - 2016-02-24 16:30 - 00000520 _____ C:\WINDOWS\Tasks\ParetoLogic Update Version3 Startup Task.job
2016-11-22 00:19 - 2013-08-22 09:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-11-22 00:18 - 2016-02-20 09:42 - 00000000 ____D C:\ProgramData\AVAST Software
2016-11-22 00:17 - 2013-08-22 08:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-11-22 00:15 - 2016-02-19 18:01 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-22 00:14 - 2016-02-19 17:59 - 00001096 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-22 00:04 - 2016-02-19 17:36 - 00000000 ____D C:\Users\Karolane\AppData\Local\NVIDIA
2016-11-22 00:01 - 2016-02-26 18:26 - 00000000 ____D C:\Users\Karolane\AppData\Local\CrashDumps
2016-11-22 00:01 - 2016-02-19 17:56 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\Skype
2016-11-21 22:27 - 2016-03-16 22:00 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\TS3Client
2016-11-21 20:52 - 2016-03-01 04:27 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\vlc
2016-11-21 18:00 - 2016-02-24 16:30 - 00000494 _____ C:\WINDOWS\Tasks\ParetoLogic Registration3.job
2016-11-21 16:00 - 2013-08-22 10:36 - 00000000 ____D C:\WINDOWS\rescache
2016-11-21 15:16 - 2016-03-08 19:31 - 01424384 ___SH C:\Users\Karolane\Documents\Thumbs.db
2016-11-21 02:21 - 2016-02-19 18:19 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-11-21 01:30 - 2016-02-28 19:41 - 07588864 ___SH C:\Users\Karolane\Desktop\Thumbs.db
2016-11-19 21:50 - 2016-02-19 17:31 - 00000000 ____D C:\Users\Karolane
2016-11-19 21:44 - 2016-03-01 05:14 - 00000000 ____D C:\Users\Karolane\AppData\Roaming\uTorrent
2016-11-19 21:29 - 2016-03-01 18:04 - 00000000 ____D C:\Users\Karolane\Documents\Electronic Arts
2016-11-19 21:05 - 2016-03-01 05:17 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2016-11-17 04:22 - 2016-02-24 16:29 - 00000468 _____ C:\WINDOWS\Tasks\ParetoLogic Update Version3.job
2016-11-16 03:28 - 2013-08-22 10:20 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-11-14 20:15 - 2016-02-19 18:00 - 00002227 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-14 04:02 - 2016-02-25 00:08 - 00463872 ___SH C:\Users\Karolane\Downloads\Thumbs.db
2016-11-11 14:45 - 2013-08-22 09:44 - 00572344 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-11-11 14:41 - 2013-08-22 10:36 - 00000000 ___RD C:\WINDOWS\ToastData
2016-11-09 14:40 - 2016-02-22 04:06 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-11-09 14:37 - 2016-02-22 04:06 - 141011376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-11-02 15:03 - 2016-02-19 17:59 - 00000000 ____D C:\Users\Karolane\AppData\Local\Google
2016-10-30 02:03 - 2016-02-24 16:29 - 00000000 ____D C:\ProgramData\ParetoLogic
2016-10-27 20:22 - 2016-10-01 12:37 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2016-10-27 13:26 - 2016-04-04 14:29 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

==================== Fichiers à la racine de certains dossiers =======

2016-02-19 17:37 - 2016-11-22 00:20 - 0763086 _____ () C:\Users\Karolane\AppData\Local\BTServer.log
2015-01-19 04:28 - 2015-01-19 04:28 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Certains fichiers dans TEMP:
====================
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1045547468629673020.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1130661142431181970.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1156729779355806784.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1161207336459140212.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1251752360380998554.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-127314403396194953.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1395842487488767275.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1449095111873050112.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1756615511623586053.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1800047950894758859.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1861812678059459992.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1934600507877716452.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1958109153881936191.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-1975958207316060952.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-2618700431704111517.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-2631755174316905022.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-2790252393641425145.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-3318062103606267675.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-3569483686037756026.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-376325896650694243.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-3842236226777592876.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-3907611376837359405.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-4092365610852861178.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-4437306032417547800.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-4449489926398087942.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-468400475842782909.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-4693638020160401691.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-49375122876572458.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-4953975325261148002.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-5084114104441165785.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-527199635074387034.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-5287988055617361300.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-548880888124296693.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-5557312463966547341.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-5644837602423956593.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-6137532917332661201.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-6523640231180896902.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-661548524835985030.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-6831408170828569035.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-687471341194302136.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-6895886886868827179.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-699385543475874449.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7072309667032737986.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7201448689026505041.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7346587326766158759.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7448423182316544196.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7482485747459420243.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7534823351308291456.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7651269125037914732.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7739269918735253470.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7867997111860204603.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-7880723074607599645.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-8069170828851257993.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-8273685027636633145.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-8455859599673968024.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-8596502532857667940.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-8622000618206504641.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-9075594446933567083.dll
C:\Users\Karolane\AppData\Local\Temp\jansi-64-9093425139356380578.dll
C:\Users\Karolane\AppData\Local\Temp\jre-8u101-windows-au.exe


==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement


LastRegBack: 2016-11-15 14:12

==================== Fin de FRST.txt ============================