Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version:17-08-2015
Exécuté par Annie (administrateur) sur CLEMENT (18-08-2015 22:15:03)
Exécuté depuis C:\Users\Annie\Downloads
Profils chargés: Annie (Profils disponibles: Annie)
Platform: Microsoft Windows 8.1 avec Bing (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut chemin: "C:\Program Files\speed browser\Application\browser.exe" -- "%1")
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\shopperz\Iijahl.exe
() C:\Program Files\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Acer Incorporated) C:\Program Files\Acer\AOP Framework\CCDMonitorService.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Acer Cloud Technology) C:\Program Files\Acer\AOP Framework\acer\ccd.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Touch Tools\TouchToolsLaunchSvc.exe
() C:\Users\Annie\AppData\Roaming\7D1DE1A0-1435435284-81E4-2A17-40E230EC1DF7\hnsj714.tmp
(Useful Technology) C:\ProgramData\smbcuRySQqm\KegJoqEMU.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Web Bar Media) C:\Program Files\WebBar\2.0.5574.22315\wb.exe
() C:\Program Files\Acer\abDocs\abDocsDllLoader.exe
() C:\Users\Annie\AppData\Local\Temp\isdkr4TJ6mEN\ISightHost.exe
(Acer) C:\Program Files\Acer\Acer Portal\AcerPortal.exe
(Pay By Ads LTD) C:\Users\Annie\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe
(Spotify Ltd) C:\Program Files\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files\OLBPre\OLBPre.exe
() C:\Program Files\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Incorporated) C:\Program Files\Acer\Screen Grasp\GestureDetection.exe
(Acer Incorporated) C:\Program Files\Acer\Screen Grasp\Launch Screen Grasp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporated) C:\Program Files\Acer\AOP Framework\BackgroundAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\SecureLine\SecureLine.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\PluginContainer.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO:) C:\Program Files\Acer\User Experience Improvement Program\Plugin\AppMonitor\AppMonitorPlugIn.exe
() C:\Program Files\Product Deals\bin\utilProductDeals.exe
() C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\updater.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\10\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\8\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\12\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\5\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\12\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe
() C:\Program Files\Product Deals\updateProductDeals.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\2\Plugin.exe
() C:\Program Files\Product Deals\bin\ProductDeals.BrowserAdapter.exe
() C:\Program Files\Product Deals\bin\ProductDeals.expext.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\windows\System32\DptfPolicyLpmServiceHelper.exe [73216 2014-08-05] (Intel Corporation)
HKLM\...\Run: [RtkNGUI] => C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe [7761920 2015-04-15] (Realtek Semiconductor)
HKLM\...\Run: [shopperz] => C:\Program Files\shopperz\Qqbvgtgao.exe
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-07-16] (AVAST Software)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [abDocsDllLoader] => C:\Program Files\Acer\abDocs\abDocsDllLoader.exe [91488 2015-07-27] ()
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [Optimizer Pro] => C:\Program Files\Optimizer Pro 3.97\OptProLauncher.exe
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [GoogleChromeAutoLaunch_09A4DCBE8BC647162B5AF27650A1936F] => C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [796672 2015-05-12] (Crossbrowse)
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [AcerPortal] => C:\Program Files\Acer\Acer Portal\AcerPortal.exe [2674528 2015-07-23] (Acer)
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [Super Optimizer] => C:\Program Files\Super Optimizer\SupOptLauncher.exe [676400 2015-07-03] ()
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [Yahoo! Search] => C:\Users\Annie\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe [660736 2015-07-14] (Pay By Ads LTD)
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [Spotify Web Helper] => C:\Program Files\Spotify\Data\SpotifyWebHelper.exe [1168896 2015-04-15] (Spotify Ltd)
HKU\S-1-5-18\...\Run: [abDocsDllLoader] => C:\Program Files\Acer\abDocs\abDocsDllLoaderMonitor.exe [1769312 2015-07-27] ()
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk [2015-07-03]
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\OLBPre\OLBPre.exe ()
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files\Acer\shellext\Win32\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files\Acer\shellext\Win32\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files\Acer\shellext\Win32\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-07-16] (AVAST Software)
BootExecute: autocheck autochk * sdnclean.exe
GroupPolicy: Stratégie de groupe sur Chrome détecté(e) <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Stratégie de restriction <======= ATTENTION
CHR HKU\.DEFAULT\SOFTWARE\Policies\Google: Stratégie de restriction <======= ATTENTION
CHR HKU\S-1-5-21-3759724607-1905011068-270333926-1001\SOFTWARE\Policies\Google: Stratégie de restriction <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1435436459&z=66836ca399e98ab60e50aedgczbcfwdz3c3q7z8w3t&from=cornl&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hppp&ts=1435435349&z=6ad50088a6399ee93e3b04bg3z0c9w7zcc8wfc0z1b&from=2sq1&uid=3219913727_198264_DA9C3DDB
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1435436459&z=66836ca399e98ab60e50aedgczbcfwdz3c3q7z8w3t&from=cornl&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.oursurfing.com/web/?type=dspp&ts=1435435349&z=6ad50088a6399ee93e3b04bg3z0c9w7zcc8wfc0z1b&from=2sq1&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://fr.search.yahoo.com/?fr=hp-ddc-bd&type=pr-bir-re__alt__ddc_dsssyc_bd_com
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hppp&ts=1435435349&z=6ad50088a6399ee93e3b04bg3z0c9w7zcc8wfc0z1b&from=2sq1&uid=3219913727_198264_DA9C3DDB
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.oursurfing.com/web/?type=dspp&ts=1435435349&z=6ad50088a6399ee93e3b04bg3z0c9w7zcc8wfc0z1b&from=2sq1&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1435436459&z=66836ca399e98ab60e50aedgczbcfwdz3c3q7z8w3t&from=cornl&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1435436459&z=66836ca399e98ab60e50aedgczbcfwdz3c3q7z8w3t&from=cornl&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://fr.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://fr.search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=pr-bir-re__alt__ddc_dss_bd_com&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://fr.search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=pr-bir-re__alt__ddc_dss_bd_com&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=ima&utm_campaign=install_ie&utm_content=ds&from=ima&uid=3219913727_198264_DA9C3DDB&ts=1435435425&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=ima&utm_campaign=install_ie&utm_content=ds&from=ima&uid=3219913727_198264_DA9C3DDB&ts=1435435425&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {A3D76D5B-E8A2-40B5-9FB8-5A12ECFEA8AE} URL = hxxp://searchsimple-a.akamaihd.net/?affID=re&q={searchTerms}&r=247
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=ima&utm_campaign=install_ie&utm_content=ds&from=ima&uid=3219913727_198264_DA9C3DDB&ts=1435435425&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=ima&utm_campaign=install_ie&utm_content=ds&from=ima&uid=3219913727_198264_DA9C3DDB&ts=1435435425&type=default&q={searchTerms}
BHO: Pas de nom -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> Pas de fichier
BHO: Pas de nom -> {72a94386-d7dd-4032-86b6-e013e104f0ab} -> Pas de fichier
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-16] (AVAST Software)
BHO: Pas de nom -> {9771c444-42b0-4e23-a7fb-ff707123ab30} -> Pas de fichier
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-04] (Google Inc.)
BHO: Pas de nom -> {dd01946e-5501-4e11-b279-efdffd4c1487} -> Pas de fichier
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-04] (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{1EBBE0DB-EE3F-4078-9B11-AE62D35584AB}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{E103F082-04AD-422A-9124-47159AB3F281}: [DhcpNameServer] 192.168.224.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.oursurfing.com/?type=sc&ts=1435435294&z=6ee1bb526c10d21e731d95cg7z6c8wdz7c8w3o5t4c&from=2sq1&uid=3219913727_198264_DA9C3DDB
FireFox:
========
FF Plugin: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Pas de fichier]
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Pas de fichier]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-08-04] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-08-04] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{72a94386-d7dd-4032-86b6-e013e104f0ab}] - C:\Program Files\shopperz\Firefox
FF Extension: shopperz - C:\Program Files\shopperz\Firefox [2015-06-27]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-07-03]
Chrome:
=======
CHR Profile: C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Product Deals) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaogcninhibjjfnjhhljkmdkepfnf [2015-07-12]
CHR Extension: (Google Slides) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-03]
CHR Extension: (Google Docs) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-03]
CHR Extension: (Google Drive) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-03]
CHR Extension: (YouTube) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-03]
CHR Extension: (On Stage) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjckjniplnhjdkbicmdgglfjppkiakfo [2015-07-03]
CHR Extension: (Google Search) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-03]
CHR Extension: (Google Sheets) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-03]
CHR Extension: (Avast Online Security) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-03]
CHR Extension: (Attachment Icons for Gmail) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\johdeoloijidhejmalfkpchbihbiamph [2015-07-27]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-03]
CHR Extension: (Gmail) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-03]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-07-03]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-03]
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 22134214; c:\Program Files\Super Optimizer\SupOptStats.dll [2914864 2015-07-03] ()
R2 61f76811-bdfc-40ef-a7e6-83623e1d92c3; C:\Program Files\shopperz\Iijahl.exe [285544 2015-06-24] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-16] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109008 2015-07-16] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3218624 2015-07-16] (Avast Software)
R2 BTDevManager; C:\Program Files\REALTEK\REALTEK Bluetooth\BTDevMgr.exe [161496 2015-04-15] ()
R2 CCDMonitorService; C:\Program Files\Acer\AOP Framework\CCDMonitorService.exe [2858336 2015-07-23] (Acer Incorporated)
S3 cphs; C:\windows\system32\IntelCpHeciSvc.exe [280680 2015-04-15] (Intel Corporation)
R2 DptfParticipantProcessorService; C:\windows\system32\DptfParticipantProcessorService.exe [75264 2014-08-05] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\windows\system32\DptfPolicyCriticalService.exe [89088 2014-08-05] (Intel Corporation)
R2 DptfPolicyLpmService; C:\windows\system32\DptfPolicyLpmService.exe [82432 2014-08-05] (Intel Corporation)
R2 e7a149cb; c:\Program Files\Optimizer Pro 3.97\OptProMon.dll [2988688 2015-06-27] () <==== ATTENTION
R2 igfxCUIService1.0.0.0; C:\windows\system32\igfxCUIService.exe [280680 2015-04-15] (Intel Corporation)
R2 KegJoqEMU; C:\ProgramData\smbcuRySQqm\KegJoqEMU.exe [2732000 2015-06-27] (Useful Technology)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2015-04-15] (Acer Incorporate)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [466664 2015-04-15] (Acer Incorporated)
R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [6086640 2015-05-19] (Reimage®)
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [442088 2015-04-15] (Acer Incorporated)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [451432 2015-01-27] ()
R2 Service Mgr OnStage; C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\PluginContainer.exe [1202400 2015-08-18] ()
R2 TouchToolsLaunchService; C:\Program Files\Acer\Acer Touch Tools\TouchToolsLaunchSvc.exe [247040 2015-04-15] (Acer Incorporated)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [242944 2015-01-06] (acer)
R2 Update Mgr OnStage; C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\updater.exe [716512 2015-08-18] ()
R2 Update Product Deals; C:\Program Files\Product Deals\updateProductDeals.exe [466680 2015-08-18] ()
R2 Util Product Deals; C:\Program Files\Product Deals\bin\utilProductDeals.exe [466680 2015-08-18] ()
R2 vicoqudu; C:\Users\Annie\AppData\Roaming\7D1DE1A0-1435435284-81E4-2A17-40E230EC1DF7\hnsj714.tmp [165376 2015-06-27] () [Fichier non signé]
S2 wbsvc; C:\Program Files\WebBar\wbsvc.exe [37144 2015-04-06] (Web Bar Media)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [288128 2015-04-15] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22192 2015-04-15] (Microsoft Corporation)
S2 0188861436605132mcinstcleanup; C:\Users\Annie\AppData\Local\Temp\018886~1.EXE -cleanup -nolog [X]
S2 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 oxd; c:\windows\oxd.exe [X]
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ACC_SensorDriver; C:\windows\System32\drivers\ACC_SensorDriver.sys [19968 2015-04-15] ()
S3 ALS_SensorDriver; C:\windows\System32\drivers\ALS_SensorDriver.sys [12288 2015-04-15] (Intel Corporation)
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24016 2015-07-16] (AVAST Software)
R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [26096 2015-07-16] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [76000 2015-07-16] (AVAST Software)
R0 aswNdisFlt; C:\windows\System32\DRIVERS\aswNdisFlt.sys [275856 2015-07-16] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81728 2015-07-16] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49776 2015-07-16] (AVAST Software)
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [788784 2015-07-16] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [433264 2015-07-16] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [113592 2015-07-16] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [208664 2015-07-16] (AVAST Software)
S3 AX88179; C:\windows\system32\DRIVERS\ax88179_178a.sys [60816 2013-07-08] (ASIX Electronics Corp.)
R1 BasicRender; C:\windows\System32\drivers\BasicRender.sys [25600 2014-11-21] (Microsoft Corporation)
S3 BCMSDH43XX; C:\windows\system32\DRIVERS\bcmdhd63.sys [296664 2013-08-13] (Broadcom Corp)
S3 BthLEEnum; C:\windows\system32\DRIVERS\BthLEEnum.sys [186880 2014-11-21] (Microsoft Corporation)
R3 BthMini; C:\windows\System32\Drivers\BTHMINI.sys [23552 2014-11-21] (Microsoft Corporation)
R3 camera; C:\windows\system32\DRIVERS\camera.sys [462336 2015-04-15] (Intel Corporation)
R1 cherimoya; C:\windows\System32\drivers\cherimoya.sys [56344 2015-06-18] (Cherimoya Ltd)
R3 CM3218x; C:\windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
R3 CPLMACPI; C:\windows\system32\DRIVERS\CPLMACPI.sys [16488 2015-04-15] (Capella Microsystems, Inc.)
S3 DptfDevAmbient; C:\windows\System32\drivers\DptfDevAmbient.sys [36352 2014-08-05] (Intel Corporation)
S3 DptfDevDBPT; C:\windows\System32\drivers\DptfDevPower.sys [17408 2014-08-05] (Intel Corporation)
R3 DptfDevDisplay; C:\windows\System32\drivers\DptfDevDisplay.sys [19968 2014-08-05] (Intel Corporation)
R3 DptfDevGen; C:\windows\System32\drivers\DptfDevGen.sys [28160 2014-08-05] (Intel Corporation)
R3 DptfDevProc; C:\windows\System32\drivers\DptfDevProc.sys [72704 2014-08-05] (Intel Corporation)
R3 DptfManager; C:\windows\System32\drivers\DptfManager.sys [174080 2014-08-05] (Intel Corporation)
R3 GPIO; C:\windows\System32\drivers\iaiogpioe.sys [23552 2014-05-18] (Intel Corporation)
R3 GpioVirtual; C:\windows\System32\drivers\iaiogpiovirtual.sys [16896 2014-03-23] (Intel Corporation)
S3 GYRO_SensorDriver; C:\windows\System32\drivers\GYRO_SensorDriver.sys [18944 2015-04-15] ()
R3 iaioi2c; C:\windows\System32\drivers\iaioi2ce.sys [62464 2014-05-18] (Intel Corporation)
R3 iaiouart; C:\windows\System32\drivers\iaiouart.sys [87552 2014-03-23] (Intel Corporation)
R1 innfd_1_10_0_14; C:\windows\System32\drivers\innfd_1_10_0_14.sys [52720 2015-04-10] (Infonaut)
S3 intaud_WaveExtensible; C:\windows\system32\drivers\intelaud.sys [32152 2015-04-15] (Intel Corporation)
R3 IntelSST; C:\windows\system32\drivers\isstrtc.sys [264192 2015-04-15] (Intel(R) Corporation)
R3 iwdbus; C:\windows\System32\drivers\iwdbus.sys [23448 2015-04-15] (Intel Corporation)
R3 kxspb; C:\windows\System32\drivers\kxspb.sys [34272 2015-04-15] (Kionix, Inc.)
S3 MAG_SensorDriver; C:\windows\System32\drivers\MAG_SensorDriver.sys [20480 2015-04-15] ()
R0 MBI; C:\windows\System32\drivers\MBI.sys [21968 2014-03-17] (Intel Corporation)
R0 ngvss; C:\windows\system32\Drivers\ngvss.sys [95112 2015-07-16] (AVAST Software)
R3 ov2722; C:\windows\System32\drivers\ov2722.sys [49152 2015-04-15] (Intel Corporation)
R3 PMIC; C:\windows\System32\drivers\PMIC.sys [66560 2014-09-02] (Intel Corporation)
R3 rtii2sac; C:\windows\system32\DRIVERS\rtii2sac.sys [174808 2015-04-15] (Realtek Semiconductor Corp.)
R3 RtkUart; C:\windows\System32\drivers\RtkUart.sys [508120 2015-04-15] (Realtek Semiconductor Corporation)
R3 RtlWlans; C:\windows\system32\DRIVERS\rtwlans.sys [2862296 2015-04-15] (Realtek Semiconductor Corporation )
S3 SensorFusion; C:\windows\System32\drivers\HIDFusion.sys [58216 2015-04-15] (Intel Corporation)
R3 SensorsHIDClassDriver; C:\windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
R3 SynRMIHID; C:\windows\System32\drivers\SynRMIHID.sys [36080 2014-11-12] (Synaptics Incorporated)
R3 TXEI; C:\windows\System32\drivers\TXEI.sys [75792 2014-01-11] (Intel Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-07-16] (Avast Software)
S3 WdNisDrv; C:\windows\System32\Drivers\WdNisDrv.sys [84800 2015-04-15] (Microsoft Corporation)
S3 wmbclass; C:\windows\system32\DRIVERS\wmbclass.sys [224256 2014-11-21] (Microsoft Corporation)
R0 Wof; C:\windows\system32\Drivers\Wof.sys [138584 2014-11-21] (Microsoft Corporation)
R1 wsfd_1_10_0_19; C:\windows\System32\drivers\wsfd_1_10_0_19.sys [48512 2015-06-16] (WS)
R3 WUDFSensorLP; C:\windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
R1 {33ec41ea-c5a6-4add-92af-1f91084dc817}Gw; C:\windows\System32\drivers\{33ec41ea-c5a6-4add-92af-1f91084dc817}Gw.sys [43152 2015-07-27] (StdLib)
R1 {4765b08d-0fb4-48ca-bf21-02642a05e93d}Gw; C:\windows\System32\drivers\{4765b08d-0fb4-48ca-bf21-02642a05e93d}Gw.sys [43152 2015-07-09] (StdLib)
R1 {67dd08e6-1f1c-4831-8665-fceabba5df96}Gw; C:\windows\System32\drivers\{67dd08e6-1f1c-4831-8665-fceabba5df96}Gw.sys [43152 2015-08-04] (StdLib)
R1 {9d137548-46b5-486c-959a-b80a01c74d8c}Gw; C:\windows\System32\drivers\{9d137548-46b5-486c-959a-b80a01c74d8c}Gw.sys [43152 2015-08-16] (StdLib)
R1 {b23324d7-7205-42d5-9c80-b9f087c9bac7}Gw; C:\windows\System32\drivers\{b23324d7-7205-42d5-9c80-b9f087c9bac7}Gw.sys [43152 2015-07-16] (StdLib)
R1 {b4539f3b-7626-4bf1-878a-d49f20d6006d}Gw; C:\windows\System32\drivers\{b4539f3b-7626-4bf1-878a-d49f20d6006d}Gw.sys [43152 2015-07-28] (StdLib)
R1 {e498cfa0-a2e0-463c-9e67-cf0791e016e0}Gw; C:\windows\System32\drivers\{e498cfa0-a2e0-463c-9e67-cf0791e016e0}Gw.sys [43152 2015-08-09] (StdLib)
R1 {e789ddb0-d21e-4917-9218-742217563d5b}Gw; C:\windows\System32\drivers\{e789ddb0-d21e-4917-9218-742217563d5b}Gw.sys [43152 2015-07-12] (StdLib)
R1 {e8bbec8c-4837-488c-bb91-2413047df2f2}Gw; C:\windows\System32\drivers\{e8bbec8c-4837-488c-bb91-2413047df2f2}Gw.sys [43152 2015-07-07] (StdLib)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-08-18 22:15 - 2015-08-18 22:15 - 00031480 _____ C:\Users\Annie\Downloads\FRST.txt
2015-08-18 22:14 - 2015-08-18 22:15 - 00000000 ____D C:\FRST
2015-08-18 22:10 - 2015-08-18 22:14 - 01677312 _____ (Farbar) C:\Users\Annie\Downloads\FRST.exe
2015-08-18 21:55 - 2015-08-18 07:43 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{e8f86a2b-9795-4081-a2b1-81009cb11e6d}Gw.sys
2015-08-18 21:43 - 2015-08-18 21:43 - 00322648 _____ C:\windows\Minidump\081815-12203-01.dmp
2015-08-18 21:43 - 2015-08-18 21:43 - 00000000 ____D C:\windows\Minidump
2015-08-16 21:01 - 2015-08-16 21:01 - 00001963 _____ C:\Users\Public\Desktop\abPhoto.lnk
2015-08-16 20:55 - 2015-08-16 10:30 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{9d137548-46b5-486c-959a-b80a01c74d8c}Gw.sys
2015-08-10 20:33 - 2015-08-10 20:34 - 02369912 _____ C:\Users\Annie\Downloads\PepperZip_unlimited_setup (1).exe
2015-08-10 20:32 - 2015-08-10 20:32 - 00815796 _____ C:\Users\Annie\Downloads\AdBlock Installer (1).zip
2015-08-10 20:31 - 2015-08-10 20:31 - 02369912 _____ C:\Users\Annie\Downloads\PepperZip_unlimited_setup.exe
2015-08-10 20:30 - 2015-08-10 20:31 - 00815796 _____ C:\Users\Annie\Downloads\AdBlock Installer.zip
2015-08-10 17:55 - 2015-08-10 17:56 - 10795685 _____ C:\Users\Annie\Downloads\Ferrari_Win7Theme.themepack
2015-08-09 20:58 - 2015-08-09 08:42 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{e498cfa0-a2e0-463c-9e67-cf0791e016e0}Gw.sys
2015-08-04 21:27 - 2015-08-04 21:27 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Skype
2015-08-04 21:27 - 2015-08-04 21:27 - 00000000 ____D C:\Users\Annie\AppData\Local\Skype
2015-08-04 21:26 - 2015-08-04 21:26 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Spotify
2015-08-04 21:26 - 2015-08-04 21:26 - 00000000 ____D C:\Users\Annie\AppData\Local\Spotify
2015-08-04 20:34 - 2015-08-04 20:34 - 00000000 ____D C:\windows\system32\vbox
2015-08-04 20:31 - 2015-08-04 08:47 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{67dd08e6-1f1c-4831-8665-fceabba5df96}Gw.sys
2015-07-29 21:47 - 2015-07-29 21:47 - 00001959 _____ C:\Users\Public\Desktop\abMedia.lnk
2015-07-29 21:24 - 2015-07-29 21:24 - 00001927 _____ C:\Users\Public\Desktop\abDocs.lnk
2015-07-28 22:06 - 2015-07-28 08:34 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{b4539f3b-7626-4bf1-878a-d49f20d6006d}Gw.sys
2015-07-27 22:11 - 2015-08-06 18:04 - 00000000 ____D C:\ProgramData\jolkjaonlfahpajgdpfcgdmkfecifeni
2015-07-27 22:11 - 2015-07-27 22:12 - 00000000 ____D C:\Program Files\saavvingtooyou
2015-07-27 21:52 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-07-27 21:52 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-07-27 21:50 - 2015-07-27 21:51 - 00001988 _____ C:\Users\Public\Desktop\Acer Portal.lnk
2015-07-27 21:33 - 2015-07-27 10:08 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{33ec41ea-c5a6-4add-92af-1f91084dc817}Gw.sys
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-08-18 22:09 - 2015-06-27 22:03 - 00000000 ____D C:\Users\Annie\AppData\Local\BreakingNewsAlert
2015-08-18 22:03 - 2015-06-27 22:03 - 00003478 _____ C:\windows\Tasks\65a12941-6f3e-4d3d-8701-e02e4660d59f-1-7.job
2015-08-18 22:03 - 2015-06-27 22:03 - 00003142 _____ C:\windows\Tasks\65a12941-6f3e-4d3d-8701-e02e4660d59f-1-6.job
2015-08-18 22:03 - 2015-06-27 22:03 - 00002450 _____ C:\windows\Tasks\65a12941-6f3e-4d3d-8701-e02e4660d59f-5.job
2015-08-18 22:00 - 2013-08-22 10:17 - 00000000 ____D C:\windows\system32\sru
2015-08-18 21:59 - 2013-08-22 08:13 - 00000226 _____ C:\windows\win.ini
2015-08-18 21:55 - 2015-06-27 21:22 - 01355750 _____ C:\windows\WindowsUpdate.log
2015-08-18 21:54 - 2015-06-27 22:08 - 00000000 ____D C:\Program Files\Product Deals
2015-08-18 21:53 - 2015-06-27 22:20 - 00000000 ____D C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8
2015-08-18 21:51 - 2014-11-21 05:40 - 01824010 _____ C:\windows\system32\PerfStringBackup.INI
2015-08-18 21:50 - 2015-06-27 22:20 - 00000000 ____D C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8
2015-08-18 21:48 - 2015-06-27 21:46 - 00000000 ___RD C:\Users\Annie\OneDrive
2015-08-18 21:43 - 2013-08-22 09:23 - 00023736 _____ C:\windows\setupact.log
2015-08-18 21:43 - 2013-08-22 09:23 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-08-16 21:08 - 2013-08-22 10:05 - 00000000 ____D C:\windows\CbsTemp
2015-08-16 21:01 - 2015-02-12 12:29 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-08-16 20:59 - 2015-06-27 21:41 - 00000000 ____D C:\Users\Annie\AppData\Local\clear.fi
2015-08-16 20:51 - 2013-08-22 08:13 - 00262144 ___SH C:\windows\system32\config\BBI
2015-08-10 17:33 - 2014-11-21 05:31 - 00028732 _____ C:\windows\PFRO.log
2015-08-09 21:07 - 2015-02-12 12:29 - 00000000 ____D C:\ProgramData\Acer
2015-08-09 20:54 - 2013-08-22 10:17 - 00000000 ____D C:\windows\AppReadiness
2015-08-09 20:52 - 2015-07-01 22:25 - 00000000 ____D C:\Users\Annie\AppData\Local\WebBar
2015-08-09 18:55 - 2015-07-03 18:48 - 00000954 _____ C:\windows\Tasks\globalUpdateUpdateTaskMachineUA1d0b5b0254b6d2e.job
2015-08-06 18:15 - 2015-06-29 22:31 - 00000000 ____D C:\Users\Annie\AppData\Local\CrashDumps
2015-08-06 18:02 - 2015-07-09 22:04 - 00000000 ____D C:\Program Files\Glorious Soup
2015-08-04 21:56 - 2015-06-28 16:51 - 00445952 ___SH C:\Users\Annie\Desktop\Thumbs.db
2015-08-04 21:26 - 2015-02-12 12:30 - 00002519 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-04 21:26 - 2015-02-12 12:30 - 00000000 ____D C:\ProgramData\Skype
2015-08-04 21:26 - 2015-02-12 12:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-04 20:52 - 2015-07-01 22:19 - 00046822 _____ C:\windows\system32\ScanResults.xml
2015-08-04 20:50 - 2015-07-03 21:39 - 00002151 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-04 20:45 - 2015-07-01 22:12 - 00000464 _____ C:\windows\system32\ScannerSettings
2015-08-04 20:27 - 2013-08-22 09:22 - 00335520 _____ C:\windows\system32\FNTCACHE.DAT
2015-07-29 22:10 - 2013-08-22 10:17 - 00000000 ____D C:\windows\system32\fr-FR
2015-07-29 21:24 - 2015-02-12 12:29 - 00000000 ____D C:\Program Files\Acer
2015-07-27 21:51 - 2015-02-12 12:16 - 00000000 ___HD C:\OEM
==================== Fichiers à la racine de certains dossiers =======
2015-06-27 22:24 - 2015-06-27 22:24 - 0613255 _____ (CMI Limited) C:\Users\Annie\AppData\Local\nsgB361.tmp
2015-07-01 22:25 - 2015-07-03 21:30 - 0000199 _____ () C:\Users\Annie\AppData\Local\recently-fix.db
Certains fichiers dans TEMP:
====================
C:\Users\Annie\AppData\Local\Temp\{0BAB31D7-8573-44BE-8EFB-9D1E5CF497D2}.dll
C:\Users\Annie\AppData\Local\Temp\{1F441C25-0EFF-40C7-8FB4-FA2A17AFE789}.dll
C:\Users\Annie\AppData\Local\Temp\{7D742F13-838B-4B74-BC9B-E103BED3ADB5}.dll
C:\Users\Annie\AppData\Local\Temp\{7FBF6C0A-9365-4AE3-A23A-004D944ED023}.dll
C:\Users\Annie\AppData\Local\Temp\{9C42A63B-A30D-4744-B765-547B52281E43}.dll
C:\Users\Annie\AppData\Local\Temp\{9FAB5F31-1370-4B8A-AEBC-A380AA4887AF}.dll
C:\Users\Annie\AppData\Local\Temp\{AD8B73A3-FF3E-4DFE-B5BB-C1F4998C27DD}.dll
C:\Users\Annie\AppData\Local\Temp\{B134E96C-229B-401D-AFB7-4852811192A0}.dll
C:\Users\Annie\AppData\Local\Temp\{B6019E0B-1EC8-4195-A098-C1DDB12A6064}-GoogleUpdateSetup.exe
C:\Users\Annie\AppData\Local\Temp\{EA8CD9D0-3095-47C0-B38D-B37B075D624F}.dll
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\windows\explorer.exe => Le fichier est signé numériquement
C:\windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\windows\system32\wininit.exe => Le fichier est signé numériquement
C:\windows\system32\svchost.exe => Le fichier est signé numériquement
C:\windows\system32\services.exe => Le fichier est signé numériquement
C:\windows\system32\User32.dll => Le fichier est signé numériquement
C:\windows\system32\userinit.exe => Le fichier est signé numériquement
C:\windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2015-07-13 21:26
==================== Fin de journal ============================
Exécuté par Annie (administrateur) sur CLEMENT (18-08-2015 22:15:03)
Exécuté depuis C:\Users\Annie\Downloads
Profils chargés: Annie (Profils disponibles: Annie)
Platform: Microsoft Windows 8.1 avec Bing (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut chemin: "C:\Program Files\speed browser\Application\browser.exe" -- "%1")
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\shopperz\Iijahl.exe
() C:\Program Files\Realtek\REALTEK Bluetooth\BTDevMgr.exe
(Acer Incorporated) C:\Program Files\Acer\AOP Framework\CCDMonitorService.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Acer Cloud Technology) C:\Program Files\Acer\AOP Framework\acer\ccd.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Touch Tools\TouchToolsLaunchSvc.exe
() C:\Users\Annie\AppData\Roaming\7D1DE1A0-1435435284-81E4-2A17-40E230EC1DF7\hnsj714.tmp
(Useful Technology) C:\ProgramData\smbcuRySQqm\KegJoqEMU.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Web Bar Media) C:\Program Files\WebBar\2.0.5574.22315\wb.exe
() C:\Program Files\Acer\abDocs\abDocsDllLoader.exe
() C:\Users\Annie\AppData\Local\Temp\isdkr4TJ6mEN\ISightHost.exe
(Acer) C:\Program Files\Acer\Acer Portal\AcerPortal.exe
(Pay By Ads LTD) C:\Users\Annie\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe
(Spotify Ltd) C:\Program Files\Spotify\Data\SpotifyWebHelper.exe
() C:\Program Files\OLBPre\OLBPre.exe
() C:\Program Files\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Acer Incorporated) C:\Program Files\Acer\Screen Grasp\GestureDetection.exe
(Acer Incorporated) C:\Program Files\Acer\Screen Grasp\Launch Screen Grasp.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporated) C:\Program Files\Acer\AOP Framework\BackgroundAgent.exe
(AVAST Software) C:\Program Files\AVAST Software\SecureLine\SecureLine.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\PluginContainer.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(TODO:
() C:\Program Files\Product Deals\bin\utilProductDeals.exe
() C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\updater.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\10\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\3\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\8\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\12\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\5\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\12\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\7\Plugin.exe
() C:\Program Files\Product Deals\updateProductDeals.exe
() C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\plugins\2\Plugin.exe
() C:\Program Files\Product Deals\bin\ProductDeals.BrowserAdapter.exe
() C:\Program Files\Product Deals\bin\ProductDeals.expext.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\windows\System32\DptfPolicyLpmServiceHelper.exe [73216 2014-08-05] (Intel Corporation)
HKLM\...\Run: [RtkNGUI] => C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe [7761920 2015-04-15] (Realtek Semiconductor)
HKLM\...\Run: [shopperz] => C:\Program Files\shopperz\Qqbvgtgao.exe
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-07-16] (AVAST Software)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [abDocsDllLoader] => C:\Program Files\Acer\abDocs\abDocsDllLoader.exe [91488 2015-07-27] ()
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [Optimizer Pro] => C:\Program Files\Optimizer Pro 3.97\OptProLauncher.exe
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [GoogleChromeAutoLaunch_09A4DCBE8BC647162B5AF27650A1936F] => C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [796672 2015-05-12] (Crossbrowse)
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [AcerPortal] => C:\Program Files\Acer\Acer Portal\AcerPortal.exe [2674528 2015-07-23] (Acer)
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [Super Optimizer] => C:\Program Files\Super Optimizer\SupOptLauncher.exe [676400 2015-07-03] ()
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [Yahoo! Search] => C:\Users\Annie\AppData\Local\Pay-By-Ads\Yahoo! Search\1.3.26.12\dsrlte.exe [660736 2015-07-14] (Pay By Ads LTD)
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\...\Run: [Spotify Web Helper] => C:\Program Files\Spotify\Data\SpotifyWebHelper.exe [1168896 2015-04-15] (Spotify Ltd)
HKU\S-1-5-18\...\Run: [abDocsDllLoader] => C:\Program Files\Acer\abDocs\abDocsDllLoaderMonitor.exe [1769312 2015-07-27] ()
Startup: C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MyPC Backup.lnk [2015-07-03]
ShortcutTarget: MyPC Backup.lnk -> C:\Program Files\OLBPre\OLBPre.exe ()
ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files\Acer\shellext\Win32\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files\Acer\shellext\Win32\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files\Acer\shellext\Win32\shellext_win.dll [2015-07-23] (Acer Incorporated)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-07-16] (AVAST Software)
BootExecute: autocheck autochk * sdnclean.exe
GroupPolicy: Stratégie de groupe sur Chrome détecté(e) <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Stratégie de restriction <======= ATTENTION
CHR HKU\.DEFAULT\SOFTWARE\Policies\Google: Stratégie de restriction <======= ATTENTION
CHR HKU\S-1-5-21-3759724607-1905011068-270333926-1001\SOFTWARE\Policies\Google: Stratégie de restriction <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.sweet-page.com/web/?type=ds&ts=1435436459&z=66836ca399e98ab60e50aedgczbcfwdz3c3q7z8w3t&from=cornl&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hppp&ts=1435435349&z=6ad50088a6399ee93e3b04bg3z0c9w7zcc8wfc0z1b&from=2sq1&uid=3219913727_198264_DA9C3DDB
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1435436459&z=66836ca399e98ab60e50aedgczbcfwdz3c3q7z8w3t&from=cornl&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.oursurfing.com/web/?type=dspp&ts=1435435349&z=6ad50088a6399ee93e3b04bg3z0c9w7zcc8wfc0z1b&from=2sq1&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://fr.search.yahoo.com/?fr=hp-ddc-bd&type=pr-bir-re__alt__ddc_dsssyc_bd_com
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.oursurfing.com/?type=hppp&ts=1435435349&z=6ad50088a6399ee93e3b04bg3z0c9w7zcc8wfc0z1b&from=2sq1&uid=3219913727_198264_DA9C3DDB
HKU\S-1-5-21-3759724607-1905011068-270333926-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.oursurfing.com/web/?type=dspp&ts=1435435349&z=6ad50088a6399ee93e3b04bg3z0c9w7zcc8wfc0z1b&from=2sq1&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1435436459&z=66836ca399e98ab60e50aedgczbcfwdz3c3q7z8w3t&from=cornl&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.sweet-page.com/web/?type=ds&ts=1435436459&z=66836ca399e98ab60e50aedgczbcfwdz3c3q7z8w3t&from=cornl&uid=3219913727_198264_DA9C3DDB&q={searchTerms}
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://fr.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://fr.search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=pr-bir-re__alt__ddc_dss_bd_com&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://fr.search.yahoo.com/yhs/search?hspart=ddc&hsimp=yhs-ddc_bd&type=pr-bir-re__alt__ddc_dss_bd_com&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=ima&utm_campaign=install_ie&utm_content=ds&from=ima&uid=3219913727_198264_DA9C3DDB&ts=1435435425&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=ima&utm_campaign=install_ie&utm_content=ds&from=ima&uid=3219913727_198264_DA9C3DDB&ts=1435435425&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {A3D76D5B-E8A2-40B5-9FB8-5A12ECFEA8AE} URL = hxxp://searchsimple-a.akamaihd.net/?affID=re&q={searchTerms}&r=247
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=ima&utm_campaign=install_ie&utm_content=ds&from=ima&uid=3219913727_198264_DA9C3DDB&ts=1435435425&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3759724607-1905011068-270333926-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://www.mystartsearch.com/web/?utm_source=b&utm_medium=ima&utm_campaign=install_ie&utm_content=ds&from=ima&uid=3219913727_198264_DA9C3DDB&ts=1435435425&type=default&q={searchTerms}
BHO: Pas de nom -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> Pas de fichier
BHO: Pas de nom -> {72a94386-d7dd-4032-86b6-e013e104f0ab} -> Pas de fichier
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-16] (AVAST Software)
BHO: Pas de nom -> {9771c444-42b0-4e23-a7fb-ff707123ab30} -> Pas de fichier
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-04] (Google Inc.)
BHO: Pas de nom -> {dd01946e-5501-4e11-b279-efdffd4c1487} -> Pas de fichier
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-04] (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{1EBBE0DB-EE3F-4078-9B11-AE62D35584AB}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{E103F082-04AD-422A-9124-47159AB3F281}: [DhcpNameServer] 192.168.224.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.oursurfing.com/?type=sc&ts=1435435294&z=6ee1bb526c10d21e731d95cg7z6c8wdz7c8w3o5t4c&from=2sq1&uid=3219913727_198264_DA9C3DDB
FireFox:
========
FF Plugin: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-10-21] (Foxit Corporation)
FF Plugin: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Pas de fichier]
FF Plugin: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files\globalUpdate\Update\1.3.25.0\npglobalupdateUpdate4.dll [Pas de fichier]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-08-04] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-08-04] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [{72a94386-d7dd-4032-86b6-e013e104f0ab}] - C:\Program Files\shopperz\Firefox
FF Extension: shopperz - C:\Program Files\shopperz\Firefox [2015-06-27]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-07-03]
Chrome:
=======
CHR Profile: C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Product Deals) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaaaogcninhibjjfnjhhljkmdkepfnf [2015-07-12]
CHR Extension: (Google Slides) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-07-03]
CHR Extension: (Google Docs) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-03]
CHR Extension: (Google Drive) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-07-03]
CHR Extension: (YouTube) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-07-03]
CHR Extension: (On Stage) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjckjniplnhjdkbicmdgglfjppkiakfo [2015-07-03]
CHR Extension: (Google Search) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-07-03]
CHR Extension: (Google Sheets) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-07-03]
CHR Extension: (Avast Online Security) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-03]
CHR Extension: (Attachment Icons for Gmail) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\johdeoloijidhejmalfkpchbihbiamph [2015-07-27]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-07-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-03]
CHR Extension: (Gmail) - C:\Users\Annie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-03]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-07-03]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-03]
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 22134214; c:\Program Files\Super Optimizer\SupOptStats.dll [2914864 2015-07-03] ()
R2 61f76811-bdfc-40ef-a7e6-83623e1d92c3; C:\Program Files\shopperz\Iijahl.exe [285544 2015-06-24] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-07-16] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109008 2015-07-16] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3218624 2015-07-16] (Avast Software)
R2 BTDevManager; C:\Program Files\REALTEK\REALTEK Bluetooth\BTDevMgr.exe [161496 2015-04-15] ()
R2 CCDMonitorService; C:\Program Files\Acer\AOP Framework\CCDMonitorService.exe [2858336 2015-07-23] (Acer Incorporated)
S3 cphs; C:\windows\system32\IntelCpHeciSvc.exe [280680 2015-04-15] (Intel Corporation)
R2 DptfParticipantProcessorService; C:\windows\system32\DptfParticipantProcessorService.exe [75264 2014-08-05] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\windows\system32\DptfPolicyCriticalService.exe [89088 2014-08-05] (Intel Corporation)
R2 DptfPolicyLpmService; C:\windows\system32\DptfPolicyLpmService.exe [82432 2014-08-05] (Intel Corporation)
R2 e7a149cb; c:\Program Files\Optimizer Pro 3.97\OptProMon.dll [2988688 2015-06-27] () <==== ATTENTION
R2 igfxCUIService1.0.0.0; C:\windows\system32\igfxCUIService.exe [280680 2015-04-15] (Intel Corporation)
R2 KegJoqEMU; C:\ProgramData\smbcuRySQqm\KegJoqEMU.exe [2732000 2015-06-27] (Useful Technology)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2015-04-15] (Acer Incorporate)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [466664 2015-04-15] (Acer Incorporated)
R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [6086640 2015-05-19] (Reimage®)
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [442088 2015-04-15] (Acer Incorporated)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
R2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [451432 2015-01-27] ()
R2 Service Mgr OnStage; C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8\PluginContainer.exe [1202400 2015-08-18] ()
R2 TouchToolsLaunchService; C:\Program Files\Acer\Acer Touch Tools\TouchToolsLaunchSvc.exe [247040 2015-04-15] (Acer Incorporated)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [242944 2015-01-06] (acer)
R2 Update Mgr OnStage; C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8\updater.exe [716512 2015-08-18] ()
R2 Update Product Deals; C:\Program Files\Product Deals\updateProductDeals.exe [466680 2015-08-18] ()
R2 Util Product Deals; C:\Program Files\Product Deals\bin\utilProductDeals.exe [466680 2015-08-18] ()
R2 vicoqudu; C:\Users\Annie\AppData\Roaming\7D1DE1A0-1435435284-81E4-2A17-40E230EC1DF7\hnsj714.tmp [165376 2015-06-27] () [Fichier non signé]
S2 wbsvc; C:\Program Files\WebBar\wbsvc.exe [37144 2015-04-06] (Web Bar Media)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [288128 2015-04-15] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [22192 2015-04-15] (Microsoft Corporation)
S2 0188861436605132mcinstcleanup; C:\Users\Annie\AppData\Local\Temp\018886~1.EXE -cleanup -nolog [X]
S2 gupdate; "C:\Program Files\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 oxd; c:\windows\oxd.exe [X]
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ACC_SensorDriver; C:\windows\System32\drivers\ACC_SensorDriver.sys [19968 2015-04-15] ()
S3 ALS_SensorDriver; C:\windows\System32\drivers\ALS_SensorDriver.sys [12288 2015-04-15] (Intel Corporation)
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24016 2015-07-16] (AVAST Software)
R1 aswKbd; C:\windows\system32\drivers\aswKbd.sys [26096 2015-07-16] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [76000 2015-07-16] (AVAST Software)
R0 aswNdisFlt; C:\windows\System32\DRIVERS\aswNdisFlt.sys [275856 2015-07-16] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81728 2015-07-16] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49776 2015-07-16] (AVAST Software)
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [788784 2015-07-16] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [433264 2015-07-16] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [113592 2015-07-16] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [208664 2015-07-16] (AVAST Software)
S3 AX88179; C:\windows\system32\DRIVERS\ax88179_178a.sys [60816 2013-07-08] (ASIX Electronics Corp.)
R1 BasicRender; C:\windows\System32\drivers\BasicRender.sys [25600 2014-11-21] (Microsoft Corporation)
S3 BCMSDH43XX; C:\windows\system32\DRIVERS\bcmdhd63.sys [296664 2013-08-13] (Broadcom Corp)
S3 BthLEEnum; C:\windows\system32\DRIVERS\BthLEEnum.sys [186880 2014-11-21] (Microsoft Corporation)
R3 BthMini; C:\windows\System32\Drivers\BTHMINI.sys [23552 2014-11-21] (Microsoft Corporation)
R3 camera; C:\windows\system32\DRIVERS\camera.sys [462336 2015-04-15] (Intel Corporation)
R1 cherimoya; C:\windows\System32\drivers\cherimoya.sys [56344 2015-06-18] (Cherimoya Ltd)
R3 CM3218x; C:\windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
R3 CPLMACPI; C:\windows\system32\DRIVERS\CPLMACPI.sys [16488 2015-04-15] (Capella Microsystems, Inc.)
S3 DptfDevAmbient; C:\windows\System32\drivers\DptfDevAmbient.sys [36352 2014-08-05] (Intel Corporation)
S3 DptfDevDBPT; C:\windows\System32\drivers\DptfDevPower.sys [17408 2014-08-05] (Intel Corporation)
R3 DptfDevDisplay; C:\windows\System32\drivers\DptfDevDisplay.sys [19968 2014-08-05] (Intel Corporation)
R3 DptfDevGen; C:\windows\System32\drivers\DptfDevGen.sys [28160 2014-08-05] (Intel Corporation)
R3 DptfDevProc; C:\windows\System32\drivers\DptfDevProc.sys [72704 2014-08-05] (Intel Corporation)
R3 DptfManager; C:\windows\System32\drivers\DptfManager.sys [174080 2014-08-05] (Intel Corporation)
R3 GPIO; C:\windows\System32\drivers\iaiogpioe.sys [23552 2014-05-18] (Intel Corporation)
R3 GpioVirtual; C:\windows\System32\drivers\iaiogpiovirtual.sys [16896 2014-03-23] (Intel Corporation)
S3 GYRO_SensorDriver; C:\windows\System32\drivers\GYRO_SensorDriver.sys [18944 2015-04-15] ()
R3 iaioi2c; C:\windows\System32\drivers\iaioi2ce.sys [62464 2014-05-18] (Intel Corporation)
R3 iaiouart; C:\windows\System32\drivers\iaiouart.sys [87552 2014-03-23] (Intel Corporation)
R1 innfd_1_10_0_14; C:\windows\System32\drivers\innfd_1_10_0_14.sys [52720 2015-04-10] (Infonaut)
S3 intaud_WaveExtensible; C:\windows\system32\drivers\intelaud.sys [32152 2015-04-15] (Intel Corporation)
R3 IntelSST; C:\windows\system32\drivers\isstrtc.sys [264192 2015-04-15] (Intel(R) Corporation)
R3 iwdbus; C:\windows\System32\drivers\iwdbus.sys [23448 2015-04-15] (Intel Corporation)
R3 kxspb; C:\windows\System32\drivers\kxspb.sys [34272 2015-04-15] (Kionix, Inc.)
S3 MAG_SensorDriver; C:\windows\System32\drivers\MAG_SensorDriver.sys [20480 2015-04-15] ()
R0 MBI; C:\windows\System32\drivers\MBI.sys [21968 2014-03-17] (Intel Corporation)
R0 ngvss; C:\windows\system32\Drivers\ngvss.sys [95112 2015-07-16] (AVAST Software)
R3 ov2722; C:\windows\System32\drivers\ov2722.sys [49152 2015-04-15] (Intel Corporation)
R3 PMIC; C:\windows\System32\drivers\PMIC.sys [66560 2014-09-02] (Intel Corporation)
R3 rtii2sac; C:\windows\system32\DRIVERS\rtii2sac.sys [174808 2015-04-15] (Realtek Semiconductor Corp.)
R3 RtkUart; C:\windows\System32\drivers\RtkUart.sys [508120 2015-04-15] (Realtek Semiconductor Corporation)
R3 RtlWlans; C:\windows\system32\DRIVERS\rtwlans.sys [2862296 2015-04-15] (Realtek Semiconductor Corporation )
S3 SensorFusion; C:\windows\System32\drivers\HIDFusion.sys [58216 2015-04-15] (Intel Corporation)
R3 SensorsHIDClassDriver; C:\windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
R3 SensorsServiceDriver; C:\windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
R3 SynRMIHID; C:\windows\System32\drivers\SynRMIHID.sys [36080 2014-11-12] (Synaptics Incorporated)
R3 TXEI; C:\windows\System32\drivers\TXEI.sys [75792 2014-01-11] (Intel Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-07-16] (Avast Software)
S3 WdNisDrv; C:\windows\System32\Drivers\WdNisDrv.sys [84800 2015-04-15] (Microsoft Corporation)
S3 wmbclass; C:\windows\system32\DRIVERS\wmbclass.sys [224256 2014-11-21] (Microsoft Corporation)
R0 Wof; C:\windows\system32\Drivers\Wof.sys [138584 2014-11-21] (Microsoft Corporation)
R1 wsfd_1_10_0_19; C:\windows\System32\drivers\wsfd_1_10_0_19.sys [48512 2015-06-16] (WS)
R3 WUDFSensorLP; C:\windows\system32\DRIVERS\WUDFRd.sys [190976 2014-11-21] (Microsoft Corporation)
R1 {33ec41ea-c5a6-4add-92af-1f91084dc817}Gw; C:\windows\System32\drivers\{33ec41ea-c5a6-4add-92af-1f91084dc817}Gw.sys [43152 2015-07-27] (StdLib)
R1 {4765b08d-0fb4-48ca-bf21-02642a05e93d}Gw; C:\windows\System32\drivers\{4765b08d-0fb4-48ca-bf21-02642a05e93d}Gw.sys [43152 2015-07-09] (StdLib)
R1 {67dd08e6-1f1c-4831-8665-fceabba5df96}Gw; C:\windows\System32\drivers\{67dd08e6-1f1c-4831-8665-fceabba5df96}Gw.sys [43152 2015-08-04] (StdLib)
R1 {9d137548-46b5-486c-959a-b80a01c74d8c}Gw; C:\windows\System32\drivers\{9d137548-46b5-486c-959a-b80a01c74d8c}Gw.sys [43152 2015-08-16] (StdLib)
R1 {b23324d7-7205-42d5-9c80-b9f087c9bac7}Gw; C:\windows\System32\drivers\{b23324d7-7205-42d5-9c80-b9f087c9bac7}Gw.sys [43152 2015-07-16] (StdLib)
R1 {b4539f3b-7626-4bf1-878a-d49f20d6006d}Gw; C:\windows\System32\drivers\{b4539f3b-7626-4bf1-878a-d49f20d6006d}Gw.sys [43152 2015-07-28] (StdLib)
R1 {e498cfa0-a2e0-463c-9e67-cf0791e016e0}Gw; C:\windows\System32\drivers\{e498cfa0-a2e0-463c-9e67-cf0791e016e0}Gw.sys [43152 2015-08-09] (StdLib)
R1 {e789ddb0-d21e-4917-9218-742217563d5b}Gw; C:\windows\System32\drivers\{e789ddb0-d21e-4917-9218-742217563d5b}Gw.sys [43152 2015-07-12] (StdLib)
R1 {e8bbec8c-4837-488c-bb91-2413047df2f2}Gw; C:\windows\System32\drivers\{e8bbec8c-4837-488c-bb91-2413047df2f2}Gw.sys [43152 2015-07-07] (StdLib)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-08-18 22:15 - 2015-08-18 22:15 - 00031480 _____ C:\Users\Annie\Downloads\FRST.txt
2015-08-18 22:14 - 2015-08-18 22:15 - 00000000 ____D C:\FRST
2015-08-18 22:10 - 2015-08-18 22:14 - 01677312 _____ (Farbar) C:\Users\Annie\Downloads\FRST.exe
2015-08-18 21:55 - 2015-08-18 07:43 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{e8f86a2b-9795-4081-a2b1-81009cb11e6d}Gw.sys
2015-08-18 21:43 - 2015-08-18 21:43 - 00322648 _____ C:\windows\Minidump\081815-12203-01.dmp
2015-08-18 21:43 - 2015-08-18 21:43 - 00000000 ____D C:\windows\Minidump
2015-08-16 21:01 - 2015-08-16 21:01 - 00001963 _____ C:\Users\Public\Desktop\abPhoto.lnk
2015-08-16 20:55 - 2015-08-16 10:30 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{9d137548-46b5-486c-959a-b80a01c74d8c}Gw.sys
2015-08-10 20:33 - 2015-08-10 20:34 - 02369912 _____ C:\Users\Annie\Downloads\PepperZip_unlimited_setup (1).exe
2015-08-10 20:32 - 2015-08-10 20:32 - 00815796 _____ C:\Users\Annie\Downloads\AdBlock Installer (1).zip
2015-08-10 20:31 - 2015-08-10 20:31 - 02369912 _____ C:\Users\Annie\Downloads\PepperZip_unlimited_setup.exe
2015-08-10 20:30 - 2015-08-10 20:31 - 00815796 _____ C:\Users\Annie\Downloads\AdBlock Installer.zip
2015-08-10 17:55 - 2015-08-10 17:56 - 10795685 _____ C:\Users\Annie\Downloads\Ferrari_Win7Theme.themepack
2015-08-09 20:58 - 2015-08-09 08:42 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{e498cfa0-a2e0-463c-9e67-cf0791e016e0}Gw.sys
2015-08-04 21:27 - 2015-08-04 21:27 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Skype
2015-08-04 21:27 - 2015-08-04 21:27 - 00000000 ____D C:\Users\Annie\AppData\Local\Skype
2015-08-04 21:26 - 2015-08-04 21:26 - 00000000 ____D C:\Users\Annie\AppData\Roaming\Spotify
2015-08-04 21:26 - 2015-08-04 21:26 - 00000000 ____D C:\Users\Annie\AppData\Local\Spotify
2015-08-04 20:34 - 2015-08-04 20:34 - 00000000 ____D C:\windows\system32\vbox
2015-08-04 20:31 - 2015-08-04 08:47 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{67dd08e6-1f1c-4831-8665-fceabba5df96}Gw.sys
2015-07-29 21:47 - 2015-07-29 21:47 - 00001959 _____ C:\Users\Public\Desktop\abMedia.lnk
2015-07-29 21:24 - 2015-07-29 21:24 - 00001927 _____ C:\Users\Public\Desktop\abDocs.lnk
2015-07-28 22:06 - 2015-07-28 08:34 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{b4539f3b-7626-4bf1-878a-d49f20d6006d}Gw.sys
2015-07-27 22:11 - 2015-08-06 18:04 - 00000000 ____D C:\ProgramData\jolkjaonlfahpajgdpfcgdmkfecifeni
2015-07-27 22:11 - 2015-07-27 22:12 - 00000000 ____D C:\Program Files\saavvingtooyou
2015-07-27 21:52 - 2015-07-14 16:14 - 00301056 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-07-27 21:52 - 2015-07-14 16:14 - 00035840 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-07-27 21:50 - 2015-07-27 21:51 - 00001988 _____ C:\Users\Public\Desktop\Acer Portal.lnk
2015-07-27 21:33 - 2015-07-27 10:08 - 00043152 _____ (StdLib) C:\windows\system32\Drivers\{33ec41ea-c5a6-4add-92af-1f91084dc817}Gw.sys
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-08-18 22:09 - 2015-06-27 22:03 - 00000000 ____D C:\Users\Annie\AppData\Local\BreakingNewsAlert
2015-08-18 22:03 - 2015-06-27 22:03 - 00003478 _____ C:\windows\Tasks\65a12941-6f3e-4d3d-8701-e02e4660d59f-1-7.job
2015-08-18 22:03 - 2015-06-27 22:03 - 00003142 _____ C:\windows\Tasks\65a12941-6f3e-4d3d-8701-e02e4660d59f-1-6.job
2015-08-18 22:03 - 2015-06-27 22:03 - 00002450 _____ C:\windows\Tasks\65a12941-6f3e-4d3d-8701-e02e4660d59f-5.job
2015-08-18 22:00 - 2013-08-22 10:17 - 00000000 ____D C:\windows\system32\sru
2015-08-18 21:59 - 2013-08-22 08:13 - 00000226 _____ C:\windows\win.ini
2015-08-18 21:55 - 2015-06-27 21:22 - 01355750 _____ C:\windows\WindowsUpdate.log
2015-08-18 21:54 - 2015-06-27 22:08 - 00000000 ____D C:\Program Files\Product Deals
2015-08-18 21:53 - 2015-06-27 22:20 - 00000000 ____D C:\Program Files\Common Files\2988696b-294c-4054-b34f-e97ca58a10e8
2015-08-18 21:51 - 2014-11-21 05:40 - 01824010 _____ C:\windows\system32\PerfStringBackup.INI
2015-08-18 21:50 - 2015-06-27 22:20 - 00000000 ____D C:\ProgramData\2988696b-294c-4054-b34f-e97ca58a10e8
2015-08-18 21:48 - 2015-06-27 21:46 - 00000000 ___RD C:\Users\Annie\OneDrive
2015-08-18 21:43 - 2013-08-22 09:23 - 00023736 _____ C:\windows\setupact.log
2015-08-18 21:43 - 2013-08-22 09:23 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-08-16 21:08 - 2013-08-22 10:05 - 00000000 ____D C:\windows\CbsTemp
2015-08-16 21:01 - 2015-02-12 12:29 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer
2015-08-16 20:59 - 2015-06-27 21:41 - 00000000 ____D C:\Users\Annie\AppData\Local\clear.fi
2015-08-16 20:51 - 2013-08-22 08:13 - 00262144 ___SH C:\windows\system32\config\BBI
2015-08-10 17:33 - 2014-11-21 05:31 - 00028732 _____ C:\windows\PFRO.log
2015-08-09 21:07 - 2015-02-12 12:29 - 00000000 ____D C:\ProgramData\Acer
2015-08-09 20:54 - 2013-08-22 10:17 - 00000000 ____D C:\windows\AppReadiness
2015-08-09 20:52 - 2015-07-01 22:25 - 00000000 ____D C:\Users\Annie\AppData\Local\WebBar
2015-08-09 18:55 - 2015-07-03 18:48 - 00000954 _____ C:\windows\Tasks\globalUpdateUpdateTaskMachineUA1d0b5b0254b6d2e.job
2015-08-06 18:15 - 2015-06-29 22:31 - 00000000 ____D C:\Users\Annie\AppData\Local\CrashDumps
2015-08-06 18:02 - 2015-07-09 22:04 - 00000000 ____D C:\Program Files\Glorious Soup
2015-08-04 21:56 - 2015-06-28 16:51 - 00445952 ___SH C:\Users\Annie\Desktop\Thumbs.db
2015-08-04 21:26 - 2015-02-12 12:30 - 00002519 _____ C:\Users\Public\Desktop\Skype.lnk
2015-08-04 21:26 - 2015-02-12 12:30 - 00000000 ____D C:\ProgramData\Skype
2015-08-04 21:26 - 2015-02-12 12:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-04 20:52 - 2015-07-01 22:19 - 00046822 _____ C:\windows\system32\ScanResults.xml
2015-08-04 20:50 - 2015-07-03 21:39 - 00002151 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-04 20:45 - 2015-07-01 22:12 - 00000464 _____ C:\windows\system32\ScannerSettings
2015-08-04 20:27 - 2013-08-22 09:22 - 00335520 _____ C:\windows\system32\FNTCACHE.DAT
2015-07-29 22:10 - 2013-08-22 10:17 - 00000000 ____D C:\windows\system32\fr-FR
2015-07-29 21:24 - 2015-02-12 12:29 - 00000000 ____D C:\Program Files\Acer
2015-07-27 21:51 - 2015-02-12 12:16 - 00000000 ___HD C:\OEM
==================== Fichiers à la racine de certains dossiers =======
2015-06-27 22:24 - 2015-06-27 22:24 - 0613255 _____ (CMI Limited) C:\Users\Annie\AppData\Local\nsgB361.tmp
2015-07-01 22:25 - 2015-07-03 21:30 - 0000199 _____ () C:\Users\Annie\AppData\Local\recently-fix.db
Certains fichiers dans TEMP:
====================
C:\Users\Annie\AppData\Local\Temp\{0BAB31D7-8573-44BE-8EFB-9D1E5CF497D2}.dll
C:\Users\Annie\AppData\Local\Temp\{1F441C25-0EFF-40C7-8FB4-FA2A17AFE789}.dll
C:\Users\Annie\AppData\Local\Temp\{7D742F13-838B-4B74-BC9B-E103BED3ADB5}.dll
C:\Users\Annie\AppData\Local\Temp\{7FBF6C0A-9365-4AE3-A23A-004D944ED023}.dll
C:\Users\Annie\AppData\Local\Temp\{9C42A63B-A30D-4744-B765-547B52281E43}.dll
C:\Users\Annie\AppData\Local\Temp\{9FAB5F31-1370-4B8A-AEBC-A380AA4887AF}.dll
C:\Users\Annie\AppData\Local\Temp\{AD8B73A3-FF3E-4DFE-B5BB-C1F4998C27DD}.dll
C:\Users\Annie\AppData\Local\Temp\{B134E96C-229B-401D-AFB7-4852811192A0}.dll
C:\Users\Annie\AppData\Local\Temp\{B6019E0B-1EC8-4195-A098-C1DDB12A6064}-GoogleUpdateSetup.exe
C:\Users\Annie\AppData\Local\Temp\{EA8CD9D0-3095-47C0-B38D-B37B075D624F}.dll
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\windows\explorer.exe => Le fichier est signé numériquement
C:\windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\windows\system32\wininit.exe => Le fichier est signé numériquement
C:\windows\system32\svchost.exe => Le fichier est signé numériquement
C:\windows\system32\services.exe => Le fichier est signé numériquement
C:\windows\system32\User32.dll => Le fichier est signé numériquement
C:\windows\system32\userinit.exe => Le fichier est signé numériquement
C:\windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2015-07-13 21:26
==================== Fin de journal ============================