Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 21-10-2017 Exécuté par admin (administrateur) sur WIN7-TMI02 (23-10-2017 13:35:27) Exécuté depuis C:\Users\admin\Desktop Profils chargés: admin (Profils disponibles: admin) Platform: Microsoft Windows 7 Professionnel Service Pack 1 (X86) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe (Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Google Inc.) C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EBAPI\eEBSvc.exe (Microsoft) C:\dell\DBRM\Reminder\DbrmTrayicon.exe (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe (Facebook) C:\Users\admin\AppData\Local\Facebook\Games\FacebookGameroom.exe (Glarysoft Ltd) C:\Program Files\Glary Utilities 5\Integrator.exe (Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSrv.exe (Broadcom Corp.) C:\Program Files\Broadcom\BPowMon\BPowMon.exe (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE (SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE (GlavSoft LLC.) C:\Program Files\TightVNC\tvnserver.exe (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe (Symantec Corporation) C:\Program Files\Norton Security\Engine\22.8.0.50\ns.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Symantec Corporation) C:\Program Files\Norton Security\Engine\22.8.0.50\ns.exe (The CefSharp Authors) C:\Users\admin\AppData\Local\Facebook\Games\Facebook Gameroom Browser.exe (Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe (Farbar) C:\Users\admin\Desktop\FRST (1).exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [] => [X] HKLM\...\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [206336 2010-05-20] (Microsoft) HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1002984 2016-11-14] (Microsoft Corporation) HKLM\...\Run: [tvncontrol] => C:\Program Files\TightVNC\tvnserver.exe [1397728 2017-03-14] (GlavSoft LLC.) HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation) HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation) HKU\S-1-5-21-3296189353-1229904073-3014392722-1000\...\Run: [GUDelayStartup] => C:\Program Files\Glary Utilities 5\StartupManager.exe [44024 2017-09-15] (Glarysoft Ltd) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2017-01-27] (Microsoft Corporation) Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2017-08-19] ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\admin\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook) GroupPolicy: Restriction - Chrome <==== ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{C0B0AF93-2CD7-4739-9A98-706C33F25A51}: [DhcpNameServer] 192.168.1.254 Internet Explorer: ================== HKU\S-1-5-21-3296189353-1229904073-3014392722-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://g.uk.msn.com/USSMB/7 HKU\S-1-5-21-3296189353-1229904073-3014392722-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://g.uk.msn.com/USSMB/7 SearchScopes: HKLM -> {82533C67-3CF6-42D9-BD21-368A19678A89} URL = hxxp://www.bing.com/search?q={searchTerms}&form=DLSDF8&pc=MDDS&src=IE-SearchBox SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3296189353-1229904073-3014392722-1000 -> DefaultScope {82533C67-3CF6-42D9-BD21-368A19678A89} URL = SearchScopes: HKU\S-1-5-21-3296189353-1229904073-3014392722-1000 -> {82533C67-3CF6-42D9-BD21-368A19678A89} URL = BHO: Norton Identity Protection -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.8.0.50\coIEPlg.dll [2016-09-23] (Symantec Corporation) BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-09-01] (Oracle Corporation) BHO: ADMenIEExtension -> {8813edb9-3e7e-4447-aa92-ebf802fe2d88} -> C:\Program Files\AD-RH\AD-Men Services Client\IEExtension\adxloader.dll [2012-08-27] () BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-09-01] (Oracle Corporation) Toolbar: HKLM - AD-Men IE Extension - {8959799e-24ab-445b-b540-dbfcb6697459} - C:\Program Files\AD-RH\AD-Men Services Client\IEExtension\adxloader.dll [2012-08-27] () DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_131-windows-i586.cab DPF: {CAFEEFAC-0018-0000-00131-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_131-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_131-windows-i586.cab Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation) Filter: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) Filter: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc.) FireFox: ======== FF DefaultProfile: s9lmb3rl.default FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\s9lmb3rl.default [2017-10-12] FF Extension: (Avast Online Security) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\s9lmb3rl.default\Extensions\wrc@avast.com.xpi [2017-09-01] FF Extension: (Click to call with Skype) - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-09-07] [non signé] FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.2.15\coFFAddon FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.5.2.15\coFFAddon [2017-10-23] FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_27_0_0_170.dll [2017-10-16] () FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-09-01] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-09-01] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-10] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3296189353-1229904073-3014392722-1000: @citrixonline.com/appdetectorplugin -> C:\Users\admin\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2017-04-13] (Citrix Online) FF Plugin HKU\S-1-5-21-3296189353-1229904073-3014392722-1000: @zoom.us/ZoomVideoPlugin -> C:\Users\admin\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2017-09-11] (Zoom Video Communications, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CCMSDK.dll [2012-03-28] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\cgpcfg.dll [2012-03-28] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\CgpCore.dll [2012-03-28] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\confmgr.dll [2012-03-28] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxlogging.dll [2012-03-28] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\ctxmui.dll [2012-03-28] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icafile.dll [2012-03-28] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\icalogon.dll [2012-03-28] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npicaN.dll [2012-03-28] () FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2017-08-10] (Adobe Systems Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\sslsdk_b.dll [2012-03-19] (Citrix Systems, Inc.) FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\TcpPServ.dll [2012-03-28] (Citrix Systems, Inc.) FF ExtraCheck: C:\Program Files\mozilla firefox\browser\defaults\preferences\my-prefs.js [2015-03-25] <==== ATTENTION (Pointe vers un fichier *.cfg) FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2013-04-09] <==== ATTENTION Chrome: ======= CHR DefaultProfile: Default CHR StartupUrls: Default -> "hxxp://google.fr/" CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default [2017-10-23] CHR Extension: (Docs) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12] CHR Extension: (Google Drive) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-12] CHR Extension: (YouTube) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-12] CHR Extension: (Norton Security Toolbar) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjabmdjcfcfdmffimndhafhblfmpjdpe [2017-10-21] CHR Extension: (Adobe Acrobat) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-10-12] CHR Extension: (Google Docs hors connexion) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-12] CHR Extension: (Norton Identity Safe) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2017-10-21] CHR Extension: (Skype) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-10-12] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-12] CHR Extension: (Gmail) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-12] CHR Extension: (Chrome Media Router) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-14] CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-10-17] CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\System Profile [2017-10-17] CHR HKLM\...\Chrome\Extension: [ccjleegmemocfpghkhpjmiccjcacackp] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.8.0.50\Exts\Chrome.crx [2017-10-23] CHR HKLM\...\Chrome\Extension: [clgckgfbhciacomhlchmgdnplmdiadbj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-08-16] CHR HKU\S-1-5-21-3296189353-1229904073-3014392722-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 EpsonBidirectionalService; C:\Program Files\Common Files\EPSON\EBAPI\eEBSVC.exe [94208 2006-12-19] (SEIKO EPSON CORPORATION) [Fichier non signé] R2 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [153600 2009-09-14] (SEIKO EPSON CORPORATION) R2 EPSON_PM_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RP7.EXE [121856 2009-09-14] (SEIKO EPSON CORPORATION) S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Fichier non signé] R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [103696 2016-11-14] (Microsoft Corporation) R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Fichier non signé] R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [280864 2016-11-14] (Microsoft Corporation) S4 NOBU; C:\Program Files\Dell\Dell Datasafe Online\NOBuAgent.exe [2075480 2010-08-25] (Dell, Inc.) R2 NS; C:\Program Files\Norton Security\Engine\22.8.0.50\NS.exe [289080 2016-09-24] (Symantec Corporation) S4 ntrtscan; c:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe [1323912 2010-06-22] (Trend Micro Inc.) R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Fichier non signé] S3 RoxMediaDB12OEM; C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [1116656 2010-11-25] (Sonic Solutions) S2 RoxWatch12; C:\Program Files\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [219632 2010-11-25] (Sonic Solutions) S4 svcGenericHost; c:\Program Files\Trend Micro\Client Server Security Agent\HostedAgent\svcGenericHost.exe [45056 2010-07-05] (Trend Micro Inc.) [Fichier non signé] S4 tmlisten; c:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe [1358160 2010-06-22] (Trend Micro Inc.) S4 TmPfw; c:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe [497008 2009-07-15] (Trend Micro Inc.) S4 TmProxy; c:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe [689416 2009-07-15] (Trend Micro Inc.) R2 tvnserver; C:\Program Files\TightVNC\tvnserver.exe [1397728 2017-03-14] (GlavSoft LLC.) R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 BHDrvx86; C:\Program Files\Norton Security\NortonData\22.5.2.15\Definitions\BASHDefs\20171018.001\BHDrvx86.sys [1367704 2017-10-18] (Symantec Corporation) R1 ccSet_NS; C:\Windows\system32\drivers\NS\1608000.032\ccSetx86.sys [137456 2016-06-02] (Symantec Corporation) R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [393368 2017-10-20] (Symantec Corporation) R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [126616 2017-10-20] (Symantec Corporation) R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [17472 2017-06-13] (Glarysoft Ltd) R1 IDSVix86; C:\Program Files\Norton Security\NortonData\22.5.2.15\Definitions\IPSDefs\20171020.001\IDSvix86.sys [845976 2017-10-20] (Symantec Corporation) R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [252808 2016-08-25] (Microsoft Corporation) S3 PCDSRVC{E9D79540-57D5953E-06020101}_0; c:\program files\dell support center\pcdsrvc.pkms [21744 2010-07-31] (PC-Doctor, Inc.) R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [3127000 2014-12-16] (Realtek Semiconductor Corporation ) R3 SRTSP; C:\Windows\System32\Drivers\NS\1608000.032\SRTSP.SYS [634096 2016-09-23] (Symantec Corporation) R1 SRTSPX; C:\Windows\system32\drivers\NS\1608000.032\SRTSPX.SYS [43248 2016-09-23] (Symantec Corporation) R0 SymEFASI; C:\Windows\System32\drivers\NS\1608000.032\SYMEFASI.SYS [1291992 2016-09-23] (Symantec Corporation) R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [87792 2017-10-23] (Symantec Corporation) R1 SymIRON; C:\Windows\system32\drivers\NS\1608000.032\Ironx86.SYS [229616 2016-09-23] (Symantec Corporation) R1 SymNetS; C:\Windows\System32\Drivers\NS\1608000.032\SYMNETS.SYS [423640 2016-09-23] (Symantec Corporation) S2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [158224 2009-07-06] (Trend Micro Inc.) R2 TmFilter; c:\Program Files\Trend Micro\Client Server Security Agent\TmXPFlt.sys [230928 2010-05-10] (Trend Micro Inc.) R1 tmlwf; C:\Windows\System32\DRIVERS\tmlwf.sys [146448 2009-07-15] (Trend Micro Inc.) R2 TmPreFilter; c:\Program Files\Trend Micro\Client Server Security Agent\TmPreFlt.sys [36368 2010-05-10] (Trend Micro Inc.) R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [89872 2009-07-15] (Trend Micro Inc.) R2 tmwfp; C:\Windows\System32\DRIVERS\tmwfp.sys [283152 2009-07-15] (Trend Micro Inc.) R2 VSApiNt; c:\Program Files\Trend Micro\Client Server Security Agent\VSApiNt.sys [1322808 2010-05-10] (Trend Micro Inc.) U1 aswbdisk; pas de ImagePath S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X] S4 LMIRfsClientNP; pas de ImagePath S3 NAVENG; \??\C:\Program Files\Norton Security\NortonData\22.5.2.15\Definitions\SDSDefs\20171021.002\NAVENG.SYS [X] S3 NAVEX15; \??\C:\Program Files\Norton Security\NortonData\22.5.2.15\Definitions\SDSDefs\20171021.002\NAVEX15.SYS [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-10-23 13:35 - 2017-10-23 13:36 - 000023591 _____ C:\Users\admin\Desktop\FRST.txt 2017-10-23 13:31 - 2017-10-23 13:35 - 000000000 ____D C:\FRST 2017-10-23 13:31 - 2017-10-23 13:31 - 001799168 _____ (Farbar) C:\Users\admin\Desktop\FRST (1).exe 2017-10-23 13:30 - 2017-10-23 13:30 - 001799168 _____ (Farbar) C:\Users\admin\Desktop\FRST.exe 2017-10-23 11:42 - 2017-10-23 11:42 - 000000000 ____D C:\Users\admin\AppData\Roaming\BACS.exe 2017-10-21 17:38 - 2017-10-21 17:38 - 000000000 ____D C:\NPE 2017-10-21 17:34 - 2017-10-21 17:35 - 003435712 _____ (Symantec Corporation) C:\Users\admin\Downloads\NPE.exe 2017-10-21 17:33 - 2017-10-21 18:35 - 000000000 ____D C:\Users\admin\AppData\Local\NPE 2017-10-21 17:25 - 2017-10-23 13:19 - 000002228 _____ C:\Users\Public\Desktop\Norton Security.lnk 2017-10-21 17:25 - 2017-10-23 11:42 - 000087792 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT.SYS 2017-10-21 17:25 - 2017-10-23 11:42 - 000008234 _____ C:\Windows\system32\Drivers\SYMEVENT.CAT 2017-10-21 17:25 - 2017-10-21 17:33 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared 2017-10-21 17:22 - 2017-10-23 13:19 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security 2017-10-21 17:22 - 2017-10-23 13:19 - 000000000 ____D C:\Windows\system32\Drivers\NS 2017-10-21 17:22 - 2017-10-21 17:34 - 000000000 ____D C:\ProgramData\Norton 2017-10-21 17:22 - 2017-10-21 17:22 - 000000000 ____D C:\ProgramData\NortonInstaller 2017-10-21 17:22 - 2017-10-21 17:22 - 000000000 ____D C:\Program Files\NortonInstaller 2017-10-21 17:22 - 2017-10-21 17:22 - 000000000 ____D C:\Program Files\Norton Security 2017-10-21 17:03 - 2017-10-21 17:11 - 144845224 _____ (Symantec Corporation) C:\Users\admin\Downloads\NS_22.5.2.15_SYMTB_PROMO_4_MRFTT_CC010_13034-FR-FR (1).exe 2017-10-19 20:17 - 2017-10-19 20:24 - 144845224 _____ (Symantec Corporation) C:\Users\admin\Downloads\NS_22.5.2.15_SYMTB_PROMO_4_MRFTT_CC010_13034-FR-FR.exe 2017-10-19 11:31 - 2017-10-19 11:31 - 000033220 _____ C:\Users\admin\Downloads\20906953 (12).pdf 2017-10-17 18:03 - 2017-10-17 18:03 - 000002449 _____ C:\Users\admin\Downloads\fixlist.txt 2017-10-17 17:46 - 2017-10-17 18:18 - 000000456 _____ C:\DelFix.txt 2017-10-13 14:48 - 2017-10-13 14:48 - 000916241 _____ C:\Users\admin\Downloads\certificatScolarite_BRISSI_ENZO_10_13_14_48_32.pdf 2017-10-13 13:10 - 2017-10-13 13:10 - 000376060 _____ C:\Users\admin\Downloads\FORMULAIRE DAEU A DEMANDE CARTE ETUDIANTE 2017.2018.pdf 2017-10-13 12:12 - 2017-10-13 12:12 - 000172273 _____ C:\Users\admin\Desktop\attestation (1).pdf 2017-10-13 12:11 - 2017-10-13 12:11 - 000172273 _____ C:\Users\admin\Downloads\attestation (1).pdf 2017-10-13 11:49 - 2017-10-13 11:49 - 000229327 _____ C:\Users\admin\Desktop\AMAGUIZ.pdf 2017-10-12 19:01 - 2017-10-12 19:02 - 005189808 _____ (Enigma Software Group USA, LLC.) C:\Users\admin\Downloads\SpyHunter-Installer.exe 2017-10-12 18:45 - 2017-10-13 10:07 - 000002141 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-10-12 18:45 - 2017-10-13 10:07 - 000002129 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2017-10-12 16:42 - 2017-10-12 16:42 - 124059592 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe 2017-10-12 16:19 - 2017-10-12 16:21 - 071535032 _____ (Malwarebytes ) C:\Users\admin\Desktop\mb3-setup-35891.35891-3.2.2.2029-1.0.212-1.0.2951.exe 2017-10-12 13:57 - 2017-09-13 17:13 - 004001512 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe 2017-10-12 13:57 - 2017-09-13 17:13 - 003945704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-10-12 13:57 - 2017-09-13 17:13 - 000137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2017-10-12 13:57 - 2017-09-13 17:13 - 000067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2017-10-12 13:57 - 2017-09-13 17:10 - 001310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000830464 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000828928 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000428032 _____ (Microsoft Corporation) C:\Windows\system32\wlanmsm.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000392704 _____ (Microsoft Corporation) C:\Windows\system32\wlansec.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\wlanhlp.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000080896 _____ (Microsoft Corporation) C:\Windows\system32\wlanapi.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2017-10-12 13:57 - 2017-09-13 17:09 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 001062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 000644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 000554496 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 000038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 000017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2017-10-12 13:57 - 2017-09-13 17:08 - 000006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2017-10-12 13:57 - 2017-09-13 16:53 - 000271360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2017-10-12 13:57 - 2017-09-13 16:50 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe 2017-10-12 13:57 - 2017-09-13 16:50 - 000050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys 2017-10-12 13:57 - 2017-09-13 16:50 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2017-10-12 13:57 - 2017-09-13 16:50 - 000029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll 2017-10-12 13:57 - 2017-09-13 16:50 - 000016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe 2017-10-12 13:57 - 2017-09-13 16:48 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2017-10-12 13:57 - 2017-09-13 16:46 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2017-10-12 13:57 - 2017-09-13 16:46 - 000124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2017-10-12 13:57 - 2017-09-13 16:46 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2017-10-12 13:57 - 2017-09-13 16:46 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2017-10-12 13:57 - 2017-09-13 16:46 - 000036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2017-10-12 13:57 - 2017-09-13 16:46 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2017-10-12 13:57 - 2017-09-13 16:46 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2017-10-12 13:57 - 2017-09-09 01:47 - 000347344 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2017-10-12 13:57 - 2017-09-08 17:14 - 001213672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-10-12 13:57 - 2017-09-08 17:10 - 001549824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2017-10-12 13:57 - 2017-09-08 17:10 - 001363968 _____ (Microsoft Corporation) C:\Windows\system32\Query.dll 2017-10-12 13:57 - 2017-09-08 17:10 - 000109568 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll 2017-10-12 13:57 - 2017-09-08 17:09 - 001400320 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2017-10-12 13:57 - 2017-09-08 17:09 - 000666624 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2017-10-12 13:57 - 2017-09-08 17:09 - 000337408 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2017-10-12 13:57 - 2017-09-08 17:09 - 000306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2017-10-12 13:57 - 2017-09-08 17:09 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll 2017-10-12 13:57 - 2017-09-08 17:09 - 000104448 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll 2017-10-12 13:57 - 2017-09-08 17:09 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2017-10-12 13:57 - 2017-09-08 17:09 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll 2017-10-12 13:57 - 2017-09-08 17:00 - 000427520 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2017-10-12 13:57 - 2017-09-08 17:00 - 000164352 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2017-10-12 13:57 - 2017-09-08 16:59 - 000086528 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2017-10-12 13:57 - 2017-09-08 16:59 - 000009728 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll 2017-10-12 13:57 - 2017-09-08 16:50 - 002402304 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2017-10-12 13:57 - 2017-09-08 16:20 - 000640512 _____ (Microsoft Corporation) C:\Windows\system32\mswstr10.dll 2017-10-12 13:57 - 2017-09-08 16:20 - 000345088 _____ (Microsoft Corporation) C:\Windows\system32\msexcl40.dll 2017-10-12 13:57 - 2017-09-08 16:20 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\msjint40.dll 2017-10-12 13:57 - 2017-09-07 21:27 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2017-10-12 13:57 - 2017-09-07 21:26 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2017-10-12 13:57 - 2017-09-07 21:11 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2017-10-12 13:57 - 2017-09-07 21:10 - 000499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2017-10-12 13:57 - 2017-09-07 21:10 - 000341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2017-10-12 13:57 - 2017-09-07 21:10 - 000047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2017-10-12 13:57 - 2017-09-07 21:09 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2017-10-12 13:57 - 2017-09-07 21:04 - 020267008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-10-12 13:57 - 2017-09-07 21:03 - 002292736 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-10-12 13:57 - 2017-09-07 21:03 - 000047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2017-10-12 13:57 - 2017-09-07 21:02 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2017-10-12 13:57 - 2017-09-07 20:59 - 000476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2017-10-12 13:57 - 2017-09-07 20:58 - 000663040 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2017-10-12 13:57 - 2017-09-07 20:58 - 000620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-10-12 13:57 - 2017-09-07 20:58 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2017-10-12 13:57 - 2017-09-07 20:58 - 000104960 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2017-10-12 13:57 - 2017-09-07 20:52 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2017-10-12 13:57 - 2017-09-07 20:49 - 000416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2017-10-12 13:57 - 2017-09-07 20:44 - 000073216 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx 2017-10-12 13:57 - 2017-09-07 20:44 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2017-10-12 13:57 - 2017-09-07 20:43 - 000091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2017-10-12 13:57 - 2017-09-07 20:40 - 000168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2017-10-12 13:57 - 2017-09-07 20:39 - 000076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2017-10-12 13:57 - 2017-09-07 20:37 - 000279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2017-10-12 13:57 - 2017-09-07 20:36 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2017-10-12 13:57 - 2017-09-07 20:29 - 004547072 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-10-12 13:57 - 2017-09-07 20:29 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2017-10-12 13:57 - 2017-09-07 20:26 - 000694784 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2017-10-12 13:57 - 2017-09-07 20:26 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2017-10-12 13:57 - 2017-09-07 20:25 - 002058752 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2017-10-12 13:57 - 2017-09-07 20:25 - 001155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2017-10-12 13:57 - 2017-09-07 20:17 - 013677568 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-10-12 13:57 - 2017-09-07 20:01 - 002767872 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2017-10-12 13:57 - 2017-09-07 19:57 - 001316864 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-10-12 13:57 - 2017-09-07 19:57 - 000710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2017-10-12 13:57 - 2017-09-07 17:12 - 002755072 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll 2017-10-12 13:57 - 2017-09-07 16:48 - 000313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys 2017-10-12 13:57 - 2017-09-07 16:48 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys 2017-10-12 13:57 - 2017-09-07 16:48 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys 2017-10-12 13:57 - 2017-08-19 17:10 - 003209216 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll 2017-10-12 13:57 - 2017-08-19 17:10 - 000103424 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll 2017-10-12 13:57 - 2017-08-19 17:10 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll 2017-10-12 13:57 - 2017-08-19 16:57 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe 2017-10-12 13:57 - 2017-08-19 16:57 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe 2017-10-12 13:57 - 2017-08-14 19:35 - 000827904 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2017-10-12 13:57 - 2017-08-14 19:35 - 000015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll 2017-10-12 13:57 - 2017-08-13 23:35 - 000031744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys 2017-10-01 13:15 - 2017-10-12 16:34 - 000000000 ____D C:\Users\admin\AppData\Roaming\ZHP 2017-10-01 13:15 - 2017-10-01 13:15 - 000000000 ____D C:\Users\admin\AppData\Local\ZHP 2017-10-01 11:32 - 2017-10-17 19:12 - 003931256 _____ (Google) C:\Users\admin\Desktop\chrome_cleanup_tool.exe 2017-10-01 11:28 - 2017-10-01 11:28 - 000000000 ____D C:\Users\admin\AppData\Roaming\Google 2017-09-29 12:33 - 2017-09-29 12:33 - 003487377 _____ C:\Users\admin\Downloads\CP-EBOOK-2.pdf 2017-09-27 15:41 - 2017-09-27 15:41 - 000723152 _____ (Spotify Ltd) C:\Users\admin\Downloads\SpotifySetup.exe 2017-09-27 11:24 - 2017-09-27 11:24 - 000356695 _____ C:\Users\admin\Downloads\Encart tarifaire_VF.pdf 2017-09-26 19:04 - 2017-09-26 19:04 - 000110794 _____ C:\Users\admin\Downloads\RELEVES_MR OU MME MARC BRISSI_20170627 (1).pdf 2017-09-26 19:04 - 2017-09-26 19:04 - 000102921 _____ C:\Users\admin\Downloads\RELEVES_MR OU MME MARC BRISSI_20170712 (1).pdf 2017-09-26 12:01 - 2017-09-26 12:02 - 000000000 ____D C:\Users\admin\Desktop\PROJET JARDIN & PERMACULTURE 2017-09-25 21:24 - 2017-10-12 18:30 - 000000000 _____ C:\Windows\system32\last.dump 2017-09-24 21:20 - 2017-09-24 21:20 - 006309501 _____ C:\Users\admin\Downloads\4_étapes_pour_construire_une_activité_de_coaching_qui_cartonne.pdf 2017-09-24 12:32 - 2017-09-24 12:32 - 000654669 _____ C:\Users\admin\Desktop\25ba083ce31ebf80a8aafd7b1cf2881fb5108de9.pdf ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-10-23 13:27 - 2009-07-14 06:34 - 000014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2017-10-23 13:27 - 2009-07-14 06:34 - 000014256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2017-10-23 13:19 - 2017-06-13 13:46 - 000000000 ____D C:\Program Files\Glary Utilities 5 2017-10-23 13:19 - 2017-01-27 14:10 - 000065536 _____ C:\Windows\system32\Ikeext.etl 2017-10-23 13:18 - 2009-07-14 06:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-10-23 11:57 - 2017-06-10 18:10 - 000000000 ____D C:\Users\admin\Desktop\PHOTOS IPHONE 2017-10-23 11:12 - 2017-01-27 15:02 - 000000000 ____D C:\Program Files\AVAST Software 2017-10-23 11:02 - 2011-05-03 18:17 - 000000422 _____ C:\Windows\Tasks\SystemToolsDailyTest.job 2017-10-23 11:00 - 2017-01-27 15:02 - 000000000 ____D C:\ProgramData\AVAST Software 2017-10-21 20:11 - 2017-01-27 15:04 - 000000000 ____D C:\Program Files\Common Files\AV 2017-10-21 19:32 - 2011-04-07 14:15 - 000000000 ____D C:\Windows\system32\Macromed 2017-10-21 14:11 - 2017-01-27 16:43 - 000000000 ____D C:\Users\admin\Desktop\ALMA 2017-10-19 12:36 - 2017-01-27 14:38 - 000000000 ____D C:\Users\admin\Desktop\Muriel 2017-10-19 11:54 - 2017-03-21 13:19 - 000000000 ____D C:\Users\admin\Desktop\Candidature 2017-10-18 14:29 - 2017-06-10 18:40 - 000000000 ____D C:\Users\admin\Desktop\PHOTOS IPHONE 2 2017-10-18 13:08 - 2017-09-07 10:27 - 000000000 ____D C:\Users\admin\Desktop\Photos anciennes 2017-10-17 18:34 - 2011-05-03 18:15 - 000000000 ____D C:\Users\admin 2017-10-17 18:33 - 2017-01-27 21:11 - 000000000 ____D C:\Users\COMMUNITIES 2017-10-17 18:33 - 2011-05-03 18:28 - 000000000 ____D C:\Users\administrateur 2017-10-17 18:33 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\system32\NDF 2017-10-17 18:33 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\registration 2017-10-17 18:33 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\inf 2017-10-17 18:31 - 2017-01-27 14:08 - 000000000 ____D C:\Users\admin\AppData\Local\ElevatedDiagnostics 2017-10-16 11:46 - 2012-07-20 12:55 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe 2017-10-16 11:46 - 2012-07-20 12:55 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl 2017-10-13 17:14 - 2017-08-15 12:23 - 000000000 ____D C:\Users\admin\Desktop\DAEU 2017-10-13 15:15 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\rescache 2017-10-12 19:06 - 2015-04-08 18:14 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-10-12 18:45 - 2011-05-10 11:59 - 000000000 ____D C:\Program Files\Google 2017-10-12 18:06 - 2015-09-07 13:04 - 000000000 ____D C:\Program Files\Mozilla Firefox 2017-10-12 18:05 - 2017-02-08 15:02 - 000000000 ____D C:\Users\admin\AppData\LocalLow\Mozilla 2017-10-12 17:09 - 2011-04-07 14:21 - 000849332 _____ C:\Windows\system32\PerfStringBackup.INI 2017-10-12 17:09 - 2009-07-14 10:39 - 000406406 _____ C:\Windows\system32\perfh00C.dat 2017-10-12 17:09 - 2009-07-14 10:39 - 000064374 _____ C:\Windows\system32\perfc00C.dat 2017-10-12 17:03 - 2009-07-14 06:33 - 000465136 _____ C:\Windows\system32\FNTCACHE.DAT 2017-10-12 16:45 - 2017-01-27 21:28 - 000000000 ____D C:\Windows\system32\MRT 2017-10-12 16:41 - 2012-04-05 18:20 - 124059592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-10-01 14:15 - 2011-06-08 16:11 - 000000000 ____D C:\Program Files\Common Files\DivX Shared 2017-10-01 14:15 - 2011-06-08 15:52 - 000000000 ____D C:\Program Files\DivX 2017-10-01 14:15 - 2011-06-08 15:46 - 000000000 ____D C:\ProgramData\DivX 2017-10-01 14:14 - 2017-02-02 10:20 - 000000000 ____D C:\Users\admin\AppData\Roaming\DivX 2017-10-01 13:43 - 2011-05-03 18:15 - 000126512 _____ C:\Users\admin\AppData\Local\GDIPFONTCACHEV1.DAT 2017-10-01 12:50 - 2014-06-14 15:08 - 000000000 ____D C:\Program Files\TeamViewer 2017-10-01 12:36 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\tracing 2017-10-01 11:32 - 2017-01-17 14:04 - 000000000 ____D C:\Users\admin\AppData\Local\Google 2017-10-01 10:46 - 2011-05-03 18:25 - 000001716 __RSH C:\ProgramData\ntuser.pol 2017-10-01 10:46 - 2009-07-14 04:37 - 000000000 ___HD C:\Windows\system32\GroupPolicy ==================== Fichiers à la racine de certains dossiers ======= 2011-05-03 23:13 - 2011-05-03 23:13 - 000000190 _____ () C:\Program Files\Common Files\psasetup.log 2017-02-02 10:28 - 2017-02-02 10:28 - 000007605 _____ () C:\Users\admin\AppData\Local\resmon.resmoncfg ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-10-20 09:55 ==================== Fin de FRST.txt ============================