start CreateRestorePoint: CloseProcesses: U3 aswbdisk; pas de ImagePath U3 DfSdkS; pas de ImagePath S1 epp; \??\C:\Program Files (x86)\Emsisoft Anti-Malware\epp.sys [X] S4 IUFileFilter; \??\C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win7_amd64\IUFileFilter.sys [X] S3 massfilter_hs; system32\DRIVERS\massfilter_hs.sys [X] S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X] S3 zghsdiag; system32\DRIVERS\zghsdiag.sys [X] S3 zghsmdm; system32\DRIVERS\zghsmdm.sys [X] S3 zghsnmea; system32\DRIVERS\zghsnmea.sys [X] HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-21-2595492749-1184235732-1776977706-1001\...\Winlogon: [Shell] C:\Windows\system32\explorer.exe [2616320 2016-07-22] (Microsoft Corporation) <==== ATTENTION GroupPolicy: Restriction <==== ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION CHR HKU\S-1-5-21-2595492749-1184235732-1776977706-1001\SOFTWARE\Policies\Google: Restriction <==== ATTENTION Task: {2F92ACE9-A339-41EB-BEF4-80BF91D487C7} - System32\Tasks\{8A748712-B1B7-4492-8274-31A40205B109} => C:\Windows\system32\pcalua.exe -a C:\Users\utilisateur\AppData\Local\Temp\jre-8u31-windows-au.exe <==== ATTENTION Task: {4C23DC68-69E6-4851-8DCF-B14B70E8B9E0} - \jypqgyzw -> Pas de fichier <==== ATTENTION Task: {4E40D02F-A306-4351-B37F-552EFBCC67DF} - System32\Tasks\{79627537-652E-442C-BF58-7D7125CE3E83} => C:\Windows\system32\pcalua.exe -a C:\Users\UTILIS~1\AppData\Local\Temp\really-slick\OpenALwEAX.exe -d C:\Users\UTILIS~1\AppData\Local\Temp\really-slick <==== ATTENTION Task: {9EA90B8C-642C-4E21-BB3A-A32CC403F50D} - \Plus-HD-1.3-chromeinstaller -> Pas de fichier <==== ATTENTION Task: {E218DC97-6FE7-41C0-AEA0-0865C0D3E1DF} - \Plus-HD-1.3-updater -> Pas de fichier <==== ATTENTION Task: C:\Windows\Tasks\One-Click Optimizer - Ashampoo WinOptimizer.job => Ft utilisateur Task: C:\Windows\Tasks\One-Click Optimizer WO12.job => Ft utilisateur SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM -> {DC91FAFB-6CEA-49E5-BB74-9CEE75D09B77} URL = SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente FF user.js: detected! => C:\Users\utilisateur\AppData\Roaming\Mozilla\Firefox\Profiles\y4nnhgf6.default\user.js [2017-09-21] 2017-02-26 06:54 - 2017-01-20 10:58 - 000000020 ___SH () C:\Users\utilisateur\AppData\Roaming\1816CA7466166.ind 2017-02-26 06:54 - 2015-05-25 10:50 - 000000020 ___SH () C:\Users\utilisateur\AppData\Roaming\System413_DataDB.ind 2015-09-27 13:43 - 2015-09-27 13:43 - 001197383 _____ () C:\ProgramData\1443351373.bdinstall.bin 2015-09-27 13:04 - 2015-09-27 13:04 - 000042492 _____ () C:\ProgramData\1443351847.bdinstall.bin 2015-09-27 14:47 - 2015-09-27 14:47 - 000025373 _____ () C:\ProgramData\1443358054.bdinstall.bin 2015-09-27 14:48 - 2015-09-27 14:48 - 000467929 _____ () C:\ProgramData\1443358060.bdinstall.bin 2015-09-27 17:45 - 2015-09-27 17:45 - 000042183 _____ () C:\ProgramData\1443368708.bdinstall.bin 2015-09-27 18:01 - 2015-09-27 18:01 - 000466948 _____ () C:\ProgramData\1443369554.bdinstall.bin 2015-09-28 11:04 - 2015-09-28 11:04 - 000525057 _____ () C:\ProgramData\1443430591.bdinstall.bin 2015-09-28 13:20 - 2015-09-28 13:20 - 000025425 _____ () C:\ProgramData\1443439236.bdinstall.bin 2015-10-02 19:40 - 2015-10-02 19:40 - 000001587 _____ () C:\ProgramData\1443807615.bdinstall.bin 2015-10-02 19:40 - 2015-10-02 19:40 - 000001586 _____ () C:\ProgramData\1443807633.bdinstall.bin 2015-10-02 19:40 - 2015-10-02 19:40 - 000001587 _____ () C:\ProgramData\1443807639.bdinstall.bin 2015-10-02 20:22 - 2015-10-02 20:22 - 000001587 _____ () C:\ProgramData\1443810136.bdinstall.bin 2015-10-02 20:22 - 2015-10-02 20:22 - 000001587 _____ () C:\ProgramData\1443810137.bdinstall.bin 2015-10-02 20:22 - 2015-10-02 20:22 - 000001587 _____ () C:\ProgramData\1443810143.bdinstall.bin 2015-10-02 20:22 - 2015-10-02 20:22 - 000001587 _____ () C:\ProgramData\1443810144.bdinstall.bin 2015-10-02 20:24 - 2015-10-02 20:24 - 000001587 _____ () C:\ProgramData\1443810275.bdinstall.bin 2015-10-02 20:24 - 2015-10-02 20:24 - 000001587 _____ () C:\ProgramData\1443810276.bdinstall.bin 2015-10-02 20:24 - 2015-10-02 20:24 - 000001587 _____ () C:\ProgramData\1443810278.bdinstall.bin 2015-10-02 21:24 - 2015-10-02 21:24 - 000001587 _____ () C:\ProgramData\1443813880.bdinstall.bin 2015-10-02 21:24 - 2015-10-02 21:24 - 000001587 _____ () C:\ProgramData\1443813885.bdinstall.bin 2015-10-02 21:43 - 2015-10-02 21:43 - 000001587 _____ () C:\ProgramData\1443815003.bdinstall.bin 2015-10-02 21:44 - 2015-10-02 21:44 - 000001587 _____ () C:\ProgramData\1443815076.bdinstall.bin 2015-10-02 21:44 - 2015-10-02 21:44 - 000001587 _____ () C:\ProgramData\1443815082.bdinstall.bin 2015-10-02 21:47 - 2015-10-02 21:47 - 000001587 _____ () C:\ProgramData\1443815225.bdinstall.bin 2015-10-02 21:47 - 2015-10-02 21:47 - 000001587 _____ () C:\ProgramData\1443815227.bdinstall.bin 2013-04-23 22:05 - 2013-04-23 22:05 - 000000000 _____ () C:\ProgramData\3d3d3a382621383c2c262642223a_c C:\Users\utilisateur\dxupdate.dll C:\Users\utilisateur\infinst.exe C:\Users\utilisateur\kiak.exe C:\Users\utilisateur\vgvwt.exe R0 avc3; C:\Windows\System32\DRIVERS\avc3.sys [1306464 2015-01-14] (BitDefender) R3 avchv; C:\Windows\System32\DRIVERS\avchv.sys [262544 2015-01-23] (BitDefender) S3 avckf; C:\Windows\System32\DRIVERS\avckf.sys [677104 2015-01-14] (BitDefender) R1 BdfNdisf; c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys [93600 2014-12-15] (BitDefender LLC) R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [107080 2012-10-29] (BitDefender LLC) S3 bdfwfpf_pc; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf_pc.sys [121928 2013-07-02] (Bitdefender SRL) S3 BDSandBox; C:\Windows\system32\drivers\bdsandbox.sys [82824 2015-01-09] (BitDefender SRL) c:\program files\common files\bitdefender C:\Windows\system32\drivers\bdsandbox.sys C:\Windows\System32\DRIVERS\avc3.sys [1306464 2015-01-14] (BitDefender) C:\Windows\System32\DRIVERS\avchv.sys [262544 2015-01-23] (BitDefender) C:\Windows\System32\DRIVERS\avckf.sys [677104 2015-01-14] (BitDefender) Task: C:\Windows\Tasks\One-Click Optimizer - Ashampoo WinOptimizer.job => Ft utilisateur Task: C:\Windows\Tasks\One-Click Optimizer WO12.job => Ft utilisateur AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [135] 2013-04-23 22:05 - 2013-04-23 22:05 - 000000000 _____ () C:\ProgramData\3d3d3a382621383c2c262642223a_c Task: {DDC7A41C-D07E-4391-9908-9E9E69727669} - System32\Tasks\{6D317F27-8634-4CCF-987E-6A96A4DA5DA4} => C:\Windows\system32\pcalua.exe -a C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69\GEARDIFx.exe -d C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69 Hosts: EmptyTemp: end