Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version:24-08-2015
Exécuté par sonda hachicha jmour (administrateur) sur SONDAHACHICHAJM (24-08-2015 19:30:18)
Exécuté depuis C:\Users\sonda hachicha jmour\Downloads
Profils chargés: sonda hachicha jmour (Profils disponibles: sonda hachicha jmour)
Platform: Microsoft Windows 7 Édition Starter Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files\Asus\InstantOn for EPC\InsOnSrv.exe
() C:\Windows\System32\AsusService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Nico Mak Computing) C:\Program Files\File Association Helper\FAHWindow.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\ExpressGateUtil\VAWinService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(ASUS) C:\Program Files\Asus\InstantOn for EPC\InsOnWMI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-20] (Avast Software s.r.o.)
HKLM\...\Run: [FAHConsole] => C:\Program Files\File Association Helper\FAHConsole.exe [616632 2014-01-28] (Nico Mak Computing)
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-04-26] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {CC5FC992-B0AA-47CD-9DC2-83445083CBB8} => C:\Program Files\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt.dll [2010-09-02] ()
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {618A47A2-528B-4D9A-AFC8-97D3233511E2} => C:\Program Files\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt.dll [2010-09-02] ()
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
ProxyServer: [S-1-5-21-2818782407-1015158998-1588875052-1000] => 172.16.0.2:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2818782407-1015158998-1588875052-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKU\S-1-5-21-2818782407-1015158998-1588875052-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com
HKU\S-1-5-21-2818782407-1015158998-1588875052-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
HKU\S-1-5-21-2818782407-1015158998-1588875052-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.google.com/
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1444&systemid=1&v=a13277-115&apn_uid=2230621125514654&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2818782407-1015158998-1588875052-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-2818782407-1015158998-1588875052-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1444&systemid=1&v=a13277-115&apn_uid=2230621125514654&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-26] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-19] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-19] (Google Inc.)
Toolbar: HKU\S-1-5-21-2818782407-1015158998-1588875052-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-19] (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2DE42316-8C92-4B17-B9CE-A49C93FBAC5E}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{C0867542-9E53-46C6-88FB-D76A740E53E4}: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-07]
Chrome:
=======
CHR Profile: C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-07-18]
CHR Extension: (Google Drive) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-18]
CHR Extension: (YouTube) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-18]
CHR Extension: (Google Search) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-18]
CHR Extension: (Zwinky) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehjkfdmkpocpileolmldepapdjbfegei [2014-11-01]
CHR Extension: (Elite Unzip) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffjcmnpnoopgilmnfhloocdcbnimmmea [2014-10-29]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR Extension: (Gmail) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-18]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-26]
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ASUS InstantOn; C:\Program Files\ASUS\InstantOn for EPC\InsOnSrv.exe [92800 2011-12-01] (ASUS)
R2 AsusService; C:\windows\system32\AsusService.exe [224680 2011-08-08] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-26] (Avast Software s.r.o.)
S3 DCDhcpService; C:\Program Files\WiSharing\DCDhcpService.exe [108544 2011-09-16] (Atheros Communication Inc.) [Fichier non signé]
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Fichier non signé]
R2 VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [91464 2011-03-26] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AiDriver; C:\windows\System32\DRIVERS\AiDriver.sys [14720 2012-05-07] (ASUSTek Computer Inc.)
R1 AsIO; C:\windows\System32\drivers\AsIO.sys [11456 2010-06-28] ()
R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11832 2010-08-03] ()
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24144 2015-04-26] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [74976 2015-04-26] (Avast Software s.r.o.)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81728 2015-04-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49904 2015-04-26] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [787760 2015-04-26] (Avast Software s.r.o.)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [428120 2015-07-05] (Avast Software s.r.o.)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [106912 2015-04-26] (Avast Software s.r.o.)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [209048 2015-04-26] ()
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [120104 2011-11-29] (ELAN Microelectronics Corp.)
R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2009-07-20] ( )
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-08-24 19:30 - 2015-08-24 19:33 - 00012983 _____ C:\Users\sonda hachicha jmour\Downloads\FRST.txt
2015-08-24 19:29 - 2015-08-24 19:30 - 00000000 ____D C:\FRST
2015-08-24 19:28 - 2015-08-24 19:28 - 01690112 _____ (Farbar) C:\Users\sonda hachicha jmour\Downloads\FRST.exe
2015-08-24 18:24 - 2015-08-11 01:33 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-08-24 18:24 - 2015-08-11 01:20 - 19871232 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-08-19 19:45 - 2015-07-30 14:13 - 00103120 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 02943488 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 02061312 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00566784 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00173056 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-08-19 02:24 - 2015-07-20 18:56 - 00093184 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00073728 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-08-19 02:24 - 2015-07-20 18:56 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-08-19 02:23 - 2015-07-15 18:59 - 03989952 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2015-08-19 02:23 - 2015-07-15 18:59 - 03934656 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-08-19 02:23 - 2015-07-15 18:59 - 00137664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-08-19 02:23 - 2015-07-15 18:59 - 00078784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys
2015-08-19 02:23 - 2015-07-15 18:59 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-08-19 02:23 - 2015-07-15 18:56 - 01308160 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 01159168 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 01061376 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00552960 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-08-19 02:23 - 2015-07-15 18:54 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-08-19 02:23 - 2015-07-15 18:54 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-08-19 02:23 - 2015-07-15 18:54 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00010752 _____ (Microsoft Corporation) C:\windows\system32\msmmsp.dll
2015-08-19 02:23 - 2015-07-15 18:53 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-08-19 02:23 - 2015-07-15 18:49 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-08-19 02:23 - 2015-07-15 18:48 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-08-19 02:23 - 2015-07-15 18:44 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-08-19 02:23 - 2015-07-15 18:44 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-08-19 02:23 - 2015-07-15 17:36 - 00225792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-08-19 02:23 - 2015-07-15 17:36 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-08-19 02:23 - 2015-07-15 17:36 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-08-19 02:22 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 01251328 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00909824 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-08-19 02:22 - 2015-07-30 17:52 - 02384384 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-08-19 02:22 - 2015-07-30 17:49 - 00299520 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-08-19 02:22 - 2015-07-28 21:04 - 00015808 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2015-08-19 02:22 - 2015-07-28 21:00 - 00952832 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00635904 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00598528 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-08-19 02:22 - 2015-07-28 20:54 - 00934400 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-08-19 02:22 - 2015-07-21 01:12 - 00342736 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-08-19 02:22 - 2015-07-16 21:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-08-19 02:22 - 2015-07-16 20:51 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-08-19 02:22 - 2015-07-16 20:51 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-08-19 02:22 - 2015-07-16 20:50 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-08-19 02:22 - 2015-07-16 20:50 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-08-19 02:22 - 2015-07-16 20:49 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-08-19 02:22 - 2015-07-16 20:43 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-08-19 02:22 - 2015-07-16 20:43 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-08-19 02:22 - 2015-07-16 20:41 - 00479232 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-08-19 02:22 - 2015-07-16 20:39 - 00664064 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-08-19 02:22 - 2015-07-16 20:39 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-08-19 02:22 - 2015-07-16 20:39 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-08-19 02:22 - 2015-07-16 20:38 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-08-19 02:22 - 2015-07-16 20:32 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-08-19 02:22 - 2015-07-16 20:29 - 00418304 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-08-19 02:22 - 2015-07-16 20:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-08-19 02:22 - 2015-07-16 20:20 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-08-19 02:22 - 2015-07-16 20:19 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-08-19 02:22 - 2015-07-16 20:17 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-08-19 02:22 - 2015-07-16 20:12 - 04520448 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-08-19 02:22 - 2015-07-16 20:10 - 12856832 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-08-19 02:22 - 2015-07-16 20:06 - 02052608 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-08-19 02:22 - 2015-07-16 20:06 - 00689152 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-08-19 02:22 - 2015-07-16 20:06 - 00685568 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-08-19 02:22 - 2015-07-16 20:05 - 01155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-08-19 02:22 - 2015-07-16 19:42 - 01951232 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-08-19 02:22 - 2015-07-16 19:38 - 01310720 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-08-19 02:22 - 2015-07-16 19:37 - 00710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-08-19 02:21 - 2015-07-16 20:45 - 02279424 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-08-19 02:21 - 2015-07-10 18:34 - 03221504 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-08-19 02:21 - 2015-07-10 18:34 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-08-19 02:21 - 2015-07-10 18:33 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\aaclient.dll
2015-08-19 02:21 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2015-08-19 02:21 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2015-08-19 02:20 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\notepad.exe
2015-08-19 02:20 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\windows\notepad.exe
2015-08-19 02:07 - 2015-07-15 03:55 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\basesrv.dll
2015-08-19 02:07 - 2015-07-10 18:34 - 12875776 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-08-19 02:05 - 2015-07-15 03:55 - 01390592 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-08-19 02:05 - 2015-07-15 03:55 - 01241088 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-08-19 02:05 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-08-19 02:05 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-08-24 19:27 - 2009-07-14 05:34 - 00016160 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-24 19:27 - 2009-07-14 05:34 - 00016160 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-24 19:26 - 2013-07-18 13:46 - 00001058 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-24 19:20 - 2013-07-18 08:48 - 01191711 _____ C:\windows\WindowsUpdate.log
2015-08-24 19:00 - 2014-05-26 14:49 - 00001002 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-08-24 18:14 - 2013-07-18 13:46 - 00001054 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-24 18:13 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-08-24 18:13 - 2009-07-14 05:39 - 00083110 _____ C:\windows\setupact.log
2015-08-21 23:38 - 2013-07-18 13:52 - 00002087 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-21 14:58 - 2009-07-14 05:33 - 00407624 _____ C:\windows\system32\FNTCACHE.DAT
2015-08-21 14:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET
2015-08-21 14:31 - 2012-08-06 10:55 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-21 14:31 - 2012-08-06 10:23 - 00457742 _____ C:\windows\PFRO.log
2015-08-20 02:20 - 2014-12-12 23:05 - 00000000 ____D C:\windows\system32\appraiser
2015-08-20 02:20 - 2014-06-08 15:12 - 00000000 ___SD C:\windows\system32\CompatTel
2015-08-20 02:20 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\nl-NL
2015-08-20 02:20 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\it-IT
2015-08-20 02:20 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\fr-FR
2015-08-20 02:20 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE
2015-08-20 02:19 - 2011-02-16 16:44 - 00000000 ____D C:\windows\system32\Drivers\nl-NL
2015-08-20 02:19 - 2011-02-16 16:39 - 00000000 ____D C:\windows\system32\Drivers\it-IT
2015-08-20 02:19 - 2011-02-16 16:34 - 00000000 ____D C:\windows\system32\Drivers\fr-FR
2015-08-20 02:19 - 2011-02-16 16:29 - 00000000 ____D C:\windows\system32\Drivers\de-DE
2015-08-19 20:59 - 2013-10-02 15:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-19 20:53 - 2012-08-06 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-19 20:35 - 2014-01-28 18:56 - 00000000 ____D C:\windows\system32\MRT
2015-08-19 20:17 - 2014-01-28 18:55 - 129304528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-08-19 00:01 - 2014-05-26 14:49 - 00778440 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2015-08-19 00:01 - 2012-08-06 10:53 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2015-08-08 23:32 - 2015-04-11 00:14 - 00000000 ___SD C:\windows\system32\GWX
==================== Fichiers à la racine de certains dossiers =======
2014-03-22 23:58 - 2014-03-22 23:58 - 0004096 ____H () C:\Users\sonda hachicha jmour\AppData\Local\keyfile3.drm
2014-12-20 22:51 - 2014-12-20 22:51 - 0000000 _____ () C:\Users\sonda hachicha jmour\AppData\Local\{0ADAF9B8-6FC0-473D-BE3E-47AC55F06EC7}
Certains fichiers dans TEMP:
====================
C:\Users\sonda hachicha jmour\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\sonda hachicha jmour\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyg09pq.dll
C:\Users\sonda hachicha jmour\AppData\Local\Temp\MybabylonTB.exe
C:\Users\sonda hachicha jmour\AppData\Local\Temp\propsys.dll
C:\Users\sonda hachicha jmour\AppData\Local\Temp\{49AD5689-96C1-4874-B6E6-0DDF827912A6}-30.0.1599.69_chrome_installer.exe
C:\Users\sonda hachicha jmour\AppData\Local\Temp\{570D7B8B-FBC5-4FD4-AC77-3DF2E0752CD9}-40.0.2214.115_chrome_installer.exe
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\windows\explorer.exe => Le fichier est signé numériquement
C:\windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\windows\system32\wininit.exe => Le fichier est signé numériquement
C:\windows\system32\svchost.exe => Le fichier est signé numériquement
C:\windows\system32\services.exe => Le fichier est signé numériquement
C:\windows\system32\User32.dll => Le fichier est signé numériquement
C:\windows\system32\userinit.exe => Le fichier est signé numériquement
C:\windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2015-06-22 18:10
==================== Fin de FRST.txt ============================
Exécuté par sonda hachicha jmour (administrateur) sur SONDAHACHICHAJM (24-08-2015 19:30:18)
Exécuté depuis C:\Users\sonda hachicha jmour\Downloads
Profils chargés: sonda hachicha jmour (Profils disponibles: sonda hachicha jmour)
Platform: Microsoft Windows 7 Édition Starter Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files\Asus\InstantOn for EPC\InsOnSrv.exe
() C:\Windows\System32\AsusService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Nico Mak Computing) C:\Program Files\File Association Helper\FAHWindow.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\ExpressGateUtil\VAWinService.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(ASUS) C:\Program Files\Asus\InstantOn for EPC\InsOnWMI.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-20] (Avast Software s.r.o.)
HKLM\...\Run: [FAHConsole] => C:\Program Files\File Association Helper\FAHConsole.exe [616632 2014-01-28] (Nico Mak Computing)
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-04-26] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {CC5FC992-B0AA-47CD-9DC2-83445083CBB8} => C:\Program Files\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt.dll [2010-09-02] ()
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {618A47A2-528B-4D9A-AFC8-97D3233511E2} => C:\Program Files\Asus\ASUS WebStorage\3.0.108.222\AsusWSShellExt.dll [2010-09-02] ()
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
ProxyServer: [S-1-5-21-2818782407-1015158998-1588875052-1000] => 172.16.0.2:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2818782407-1015158998-1588875052-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
HKU\S-1-5-21-2818782407-1015158998-1588875052-1000\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://eeepc.asus.com
HKU\S-1-5-21-2818782407-1015158998-1588875052-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.msn.com/?pc=AV01
HKU\S-1-5-21-2818782407-1015158998-1588875052-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=56626&homepage=hxxp://www.google.com/
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP07&src=IE-SearchBox
SearchScopes: HKLM -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1444&systemid=1&v=a13277-115&apn_uid=2230621125514654&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2818782407-1015158998-1588875052-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01
SearchScopes: HKU\S-1-5-21-2818782407-1015158998-1588875052-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2001} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=1444&systemid=1&v=a13277-115&apn_uid=2230621125514654&apn_dtid=IME001&o=APN10653&apn_ptnrs=AGE&q={searchTerms}
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems Incorporated)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-26] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-19] (Google Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-19] (Google Inc.)
Toolbar: HKU\S-1-5-21-2818782407-1015158998-1588875052-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2015-08-19] (Google Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2DE42316-8C92-4B17-B9CE-A49C93FBAC5E}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{C0867542-9E53-46C6-88FB-D76A740E53E4}: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-07]
Chrome:
=======
CHR Profile: C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-07-18]
CHR Extension: (Google Drive) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-18]
CHR Extension: (YouTube) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-18]
CHR Extension: (Google Search) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-18]
CHR Extension: (Zwinky) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehjkfdmkpocpileolmldepapdjbfegei [2014-11-01]
CHR Extension: (Elite Unzip) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffjcmnpnoopgilmnfhloocdcbnimmmea [2014-10-29]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-09]
CHR Extension: (Gmail) - C:\Users\sonda hachicha jmour\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-18]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-26]
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ASUS InstantOn; C:\Program Files\ASUS\InstantOn for EPC\InsOnSrv.exe [92800 2011-12-01] (ASUS)
R2 AsusService; C:\windows\system32\AsusService.exe [224680 2011-08-08] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-26] (Avast Software s.r.o.)
S3 DCDhcpService; C:\Program Files\WiSharing\DCDhcpService.exe [108544 2011-09-16] (Atheros Communication Inc.) [Fichier non signé]
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Fichier non signé]
R2 VideAceWindowsService; C:\ExpressGateUtil\VAWinService.exe [91464 2011-03-26] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AiDriver; C:\windows\System32\DRIVERS\AiDriver.sys [14720 2012-05-07] (ASUSTek Computer Inc.)
R1 AsIO; C:\windows\System32\drivers\AsIO.sys [11456 2010-06-28] ()
R1 AsUpIO; C:\windows\System32\drivers\AsUpIO.sys [11832 2010-08-03] ()
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24144 2015-04-26] ()
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [74976 2015-04-26] (Avast Software s.r.o.)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81728 2015-04-26] (Avast Software s.r.o.)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49904 2015-04-26] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [787760 2015-04-26] (Avast Software s.r.o.)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [428120 2015-07-05] (Avast Software s.r.o.)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [106912 2015-04-26] (Avast Software s.r.o.)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [209048 2015-04-26] ()
R3 ETD; C:\windows\System32\DRIVERS\ETD.sys [120104 2011-11-29] (ELAN Microelectronics Corp.)
R3 kbfiltr; C:\windows\System32\DRIVERS\kbfiltr.sys [13880 2009-07-20] ( )
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-08-24 19:30 - 2015-08-24 19:33 - 00012983 _____ C:\Users\sonda hachicha jmour\Downloads\FRST.txt
2015-08-24 19:29 - 2015-08-24 19:30 - 00000000 ____D C:\FRST
2015-08-24 19:28 - 2015-08-24 19:28 - 01690112 _____ (Farbar) C:\Users\sonda hachicha jmour\Downloads\FRST.exe
2015-08-24 18:24 - 2015-08-11 01:33 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2015-08-24 18:24 - 2015-08-11 01:20 - 19871232 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2015-08-19 19:45 - 2015-07-30 14:13 - 00103120 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 02943488 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 02061312 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00566784 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00173056 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe
2015-08-19 02:24 - 2015-07-20 18:56 - 00093184 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00073728 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00035840 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00034816 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe
2015-08-19 02:24 - 2015-07-20 18:56 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\wups.dll
2015-08-19 02:24 - 2015-07-20 18:56 - 00011776 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll
2015-08-19 02:23 - 2015-07-15 18:59 - 03989952 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2015-08-19 02:23 - 2015-07-15 18:59 - 03934656 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2015-08-19 02:23 - 2015-07-15 18:59 - 00137664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2015-08-19 02:23 - 2015-07-15 18:59 - 00078784 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mountmgr.sys
2015-08-19 02:23 - 2015-07-15 18:59 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2015-08-19 02:23 - 2015-07-15 18:56 - 01308160 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 01159168 _____ (Microsoft Corporation) C:\windows\system32\sysmain.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00400896 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00248832 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00172032 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00100352 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00065536 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2015-08-19 02:23 - 2015-07-15 18:55 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 01061376 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00655360 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00552960 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00262656 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe
2015-08-19 02:23 - 2015-07-15 18:54 - 00259584 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\smss.exe
2015-08-19 02:23 - 2015-07-15 18:54 - 00038912 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00022528 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2015-08-19 02:23 - 2015-07-15 18:54 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll
2015-08-19 02:23 - 2015-07-15 18:54 - 00010752 _____ (Microsoft Corporation) C:\windows\system32\msmmsp.dll
2015-08-19 02:23 - 2015-07-15 18:53 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe
2015-08-19 02:23 - 2015-07-15 18:49 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll
2015-08-19 02:23 - 2015-07-15 18:48 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll
2015-08-19 02:23 - 2015-07-15 18:44 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll
2015-08-19 02:23 - 2015-07-15 18:44 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll
2015-08-19 02:23 - 2015-07-15 17:36 - 00225792 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys
2015-08-19 02:23 - 2015-07-15 17:36 - 00124416 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys
2015-08-19 02:23 - 2015-07-15 17:36 - 00098304 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys
2015-08-19 02:22 - 2015-07-30 18:57 - 01987584 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 01251328 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00909824 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00026624 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2015-08-19 02:22 - 2015-07-30 18:57 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2015-08-19 02:22 - 2015-07-30 17:52 - 02384384 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2015-08-19 02:22 - 2015-07-30 17:49 - 00299520 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2015-08-19 02:22 - 2015-07-28 21:04 - 00015808 _____ (Microsoft Corporation) C:\windows\system32\CompatTelRunner.exe
2015-08-19 02:22 - 2015-07-28 21:00 - 00952832 _____ (Microsoft Corporation) C:\windows\system32\appraiser.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00635904 _____ (Microsoft Corporation) C:\windows\system32\invagent.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00598528 _____ (Microsoft Corporation) C:\windows\system32\generaltel.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00346112 _____ (Microsoft Corporation) C:\windows\system32\devinv.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2015-08-19 02:22 - 2015-07-28 21:00 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\acmigration.dll
2015-08-19 02:22 - 2015-07-28 20:54 - 00934400 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2015-08-19 02:22 - 2015-07-21 01:12 - 00342736 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2015-08-19 02:22 - 2015-07-16 21:06 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2015-08-19 02:22 - 2015-07-16 20:51 - 00504320 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2015-08-19 02:22 - 2015-07-16 20:51 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2015-08-19 02:22 - 2015-07-16 20:50 - 00341504 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2015-08-19 02:22 - 2015-07-16 20:50 - 00047616 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2015-08-19 02:22 - 2015-07-16 20:49 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2015-08-19 02:22 - 2015-07-16 20:43 - 00047104 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2015-08-19 02:22 - 2015-07-16 20:43 - 00030720 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2015-08-19 02:22 - 2015-07-16 20:41 - 00479232 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2015-08-19 02:22 - 2015-07-16 20:39 - 00664064 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2015-08-19 02:22 - 2015-07-16 20:39 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2015-08-19 02:22 - 2015-07-16 20:39 - 00102912 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2015-08-19 02:22 - 2015-07-16 20:38 - 00620032 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2015-08-19 02:22 - 2015-07-16 20:32 - 00667648 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2015-08-19 02:22 - 2015-07-16 20:29 - 00418304 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2015-08-19 02:22 - 2015-07-16 20:24 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2015-08-19 02:22 - 2015-07-16 20:20 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2015-08-19 02:22 - 2015-07-16 20:19 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2015-08-19 02:22 - 2015-07-16 20:17 - 00285696 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2015-08-19 02:22 - 2015-07-16 20:12 - 04520448 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2015-08-19 02:22 - 2015-07-16 20:10 - 12856832 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2015-08-19 02:22 - 2015-07-16 20:06 - 02052608 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2015-08-19 02:22 - 2015-07-16 20:06 - 00689152 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2015-08-19 02:22 - 2015-07-16 20:06 - 00685568 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2015-08-19 02:22 - 2015-07-16 20:05 - 01155072 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2015-08-19 02:22 - 2015-07-16 19:42 - 01951232 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2015-08-19 02:22 - 2015-07-16 19:38 - 01310720 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2015-08-19 02:22 - 2015-07-16 19:37 - 00710144 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2015-08-19 02:21 - 2015-07-16 20:45 - 02279424 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2015-08-19 02:21 - 2015-07-10 18:34 - 03221504 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2015-08-19 02:21 - 2015-07-10 18:34 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2015-08-19 02:21 - 2015-07-10 18:33 - 00131584 _____ (Microsoft Corporation) C:\windows\system32\aaclient.dll
2015-08-19 02:21 - 2015-07-01 21:30 - 00206848 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2015-08-19 02:21 - 2015-07-01 21:30 - 00082432 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2015-08-19 02:20 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\windows\system32\notepad.exe
2015-08-19 02:20 - 2015-07-09 18:42 - 00179712 _____ (Microsoft Corporation) C:\windows\notepad.exe
2015-08-19 02:07 - 2015-07-15 03:55 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\basesrv.dll
2015-08-19 02:07 - 2015-07-10 18:34 - 12875776 _____ (Microsoft Corporation) C:\windows\system32\shell32.dll
2015-08-19 02:05 - 2015-07-15 03:55 - 01390592 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2015-08-19 02:05 - 2015-07-15 03:55 - 01241088 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2015-08-19 02:05 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2015-08-19 02:05 - 2015-07-15 03:51 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-08-24 19:27 - 2009-07-14 05:34 - 00016160 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-24 19:27 - 2009-07-14 05:34 - 00016160 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-24 19:26 - 2013-07-18 13:46 - 00001058 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-24 19:20 - 2013-07-18 08:48 - 01191711 _____ C:\windows\WindowsUpdate.log
2015-08-24 19:00 - 2014-05-26 14:49 - 00001002 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2015-08-24 18:14 - 2013-07-18 13:46 - 00001054 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-24 18:13 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2015-08-24 18:13 - 2009-07-14 05:39 - 00083110 _____ C:\windows\setupact.log
2015-08-21 23:38 - 2013-07-18 13:52 - 00002087 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-21 14:58 - 2009-07-14 05:33 - 00407624 _____ C:\windows\system32\FNTCACHE.DAT
2015-08-21 14:54 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET
2015-08-21 14:31 - 2012-08-06 10:55 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-08-21 14:31 - 2012-08-06 10:23 - 00457742 _____ C:\windows\PFRO.log
2015-08-20 02:20 - 2014-12-12 23:05 - 00000000 ____D C:\windows\system32\appraiser
2015-08-20 02:20 - 2014-06-08 15:12 - 00000000 ___SD C:\windows\system32\CompatTel
2015-08-20 02:20 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\nl-NL
2015-08-20 02:20 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\it-IT
2015-08-20 02:20 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\fr-FR
2015-08-20 02:20 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\de-DE
2015-08-20 02:19 - 2011-02-16 16:44 - 00000000 ____D C:\windows\system32\Drivers\nl-NL
2015-08-20 02:19 - 2011-02-16 16:39 - 00000000 ____D C:\windows\system32\Drivers\it-IT
2015-08-20 02:19 - 2011-02-16 16:34 - 00000000 ____D C:\windows\system32\Drivers\fr-FR
2015-08-20 02:19 - 2011-02-16 16:29 - 00000000 ____D C:\windows\system32\Drivers\de-DE
2015-08-19 20:59 - 2013-10-02 15:24 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-08-19 20:53 - 2012-08-06 10:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-08-19 20:35 - 2014-01-28 18:56 - 00000000 ____D C:\windows\system32\MRT
2015-08-19 20:17 - 2014-01-28 18:55 - 129304528 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2015-08-19 00:01 - 2014-05-26 14:49 - 00778440 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2015-08-19 00:01 - 2012-08-06 10:53 - 00142536 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2015-08-08 23:32 - 2015-04-11 00:14 - 00000000 ___SD C:\windows\system32\GWX
==================== Fichiers à la racine de certains dossiers =======
2014-03-22 23:58 - 2014-03-22 23:58 - 0004096 ____H () C:\Users\sonda hachicha jmour\AppData\Local\keyfile3.drm
2014-12-20 22:51 - 2014-12-20 22:51 - 0000000 _____ () C:\Users\sonda hachicha jmour\AppData\Local\{0ADAF9B8-6FC0-473D-BE3E-47AC55F06EC7}
Certains fichiers dans TEMP:
====================
C:\Users\sonda hachicha jmour\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\sonda hachicha jmour\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpyg09pq.dll
C:\Users\sonda hachicha jmour\AppData\Local\Temp\MybabylonTB.exe
C:\Users\sonda hachicha jmour\AppData\Local\Temp\propsys.dll
C:\Users\sonda hachicha jmour\AppData\Local\Temp\{49AD5689-96C1-4874-B6E6-0DDF827912A6}-30.0.1599.69_chrome_installer.exe
C:\Users\sonda hachicha jmour\AppData\Local\Temp\{570D7B8B-FBC5-4FD4-AC77-3DF2E0752CD9}-40.0.2214.115_chrome_installer.exe
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\windows\explorer.exe => Le fichier est signé numériquement
C:\windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\windows\system32\wininit.exe => Le fichier est signé numériquement
C:\windows\system32\svchost.exe => Le fichier est signé numériquement
C:\windows\system32\services.exe => Le fichier est signé numériquement
C:\windows\system32\User32.dll => Le fichier est signé numériquement
C:\windows\system32\userinit.exe => Le fichier est signé numériquement
C:\windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2015-06-22 18:10
==================== Fin de FRST.txt ============================