Publicité
Publicité
Commentaire : FRST samedi matin
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:17-12-2015
Exécuté par Guinarwen (administrateur) sur GUINARWEN-PC-W7 (19-12-2015 11:23:28)
Exécuté depuis C:\Users\Guinarwen\Desktop
Profils chargés: Guinarwen (Profils disponibles: Guinarwen)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(OLYMPUS CORPORATION) C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
() C:\Users\Guinarwen\AppData\Local\Viber\Viber.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Applian Technologies, Inc.) C:\Program Files (x86)\Freecorder\FLVSrvc.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files (x86)\QuickTime\QTTask.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.4.537\AsusWSPanel.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Farbar) C:\Users\Guinarwen\Desktop\FRST64 (1).exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-15] (Apple Inc.)
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-10-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [Freecorder FLV Service] => C:\Program Files (x86)\Freecorder\FLVSrvc.exe [167936 2011-03-24] (Applian Technologies, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-09-15] (Apple Inc.)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217632 2015-07-21] (Geek Software GmbH)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)
HKLM-x32\...\Run: [OV3_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [55320 2015-05-13] (OLYMPUS CORPORATION)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.4.537\AsusWSPanel.exe [5563688 2015-10-12] (ASUS Cloud Corporation)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [Syncables] => C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [MobileDocuments] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [GoogleChromeAutoLaunch_DDC5FD927B446CE6DC19DA22AC297C05] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [741704 2015-12-11] (Google Inc.)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22790776 2015-11-04] (Google)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [OV3_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [419864 2015-05-13] (OLYMPUS CORPORATION)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [721504 2015-09-02] (Microsoft Corporation)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [Viber] => C:\Users\Guinarwen\AppData\Local\Viber\Viber.exe [51657424 2015-11-09] ()
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\MountPoints2: {79ec1e15-ae1e-11e0-b5f0-f46d0487d249} - G:\AutoRunCardDetector.exe
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\MountPoints2: {d369654e-95ae-11e5-a14b-f46d0487d249} - F:\Autorun.exe
HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2011-01-12]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk [2011-06-23]
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe ()
Startup: C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2015-12-15]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 - Capture d’écran et lancement.lnk [2014-04-10]
ShortcutTarget: OneNote 2010 - Capture d’écran et lancement.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2011-07-13]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.50
Tcpip\..\Interfaces\{87BAFBC6-17A4-4245-8F27-B0E478D353B4}: [DhcpNameServer] 192.168.0.50
Tcpip\..\Interfaces\{ECD423CE-D6A7-4022-9EF5-BBC71AC730E8}: [DhcpNameServer] 192.168.0.50
Internet Explorer:
==================
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2012-12-06] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-01-12] (Google Inc.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2011-01-12] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-12-06] (Oracle Corporation)
BHO-x32: ContributeBHO Class -> {074C1DC5-9320-4A9A-947D-C042949C6216} -> C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27] (Adobe Systems, Inc.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08] (pdfforge GmbH)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-12-01] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-01-12] (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2011-01-12] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2011-01-12] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18] (Sun Microsystems, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-01-12] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-01-12] (Google Inc.)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27] (Adobe Systems, Inc.)
Toolbar: HKU\.DEFAULT -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-01-12] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\Guinarwen\AppData\Roaming\Mozilla\Firefox\Profiles\kufe7a4a.default-1435593057695
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-11-03] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2012-12-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2012-12-06] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @Skype Technologies S.A..com/Skype Web Plugin -> C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin64.dll [2013-12-04] (Skype)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-11-03] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2011-10-03] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @Skype Technologies S.A..com/Skype Web Plugin -> C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll [2013-12-04] (Skype)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
FF Plugin HKU\S-1-5-21-3228627706-352522292-3759082605-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Guinarwen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-07-20] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-09-24] (Apple Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2012-03-24] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-07-13] [non signé]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.fr/
CHR StartupUrls: Default -> "hxxp://www.google.fr/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\ppGoogleNaClPluginChrome.dll => Pas de fichier
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\pdf.dll => Pas de fichier
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll => Pas de fichier
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll => Pas de fichier
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll => Pas de fichier
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll => Pas de fichier
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Pas de fichier
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll => Pas de fichier
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll => Pas de fichier
CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Unity Player) - C:\Users\Guinarwen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll => Pas de fichier
CHR Profile: C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-29]
CHR Extension: (Google Drive) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Recherche Google) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Google Docs hors connexion) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-30]
CHR Extension: (Gmail) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-29]
CHR HKU\S-1-5-21-3228627706-352522292-3759082605-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-05-27] (Freemake) [Fichier non signé]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [Fichier non signé]
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [Fichier non signé]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [30848 2015-12-16] ()
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-12-19 11:21 - 2015-12-18 23:16 - 01740288 _____ C:\Users\Guinarwen\Desktop\adwcleaner_5.025 (1).exe
2015-12-19 11:21 - 2015-12-18 09:56 - 02370048 _____ (Farbar) C:\Users\Guinarwen\Desktop\FRST64 (1).exe
2015-12-18 23:14 - 2015-12-18 23:14 - 00001321 _____ C:\Rapport-Mabam-2015-12-17-23h14.txt
2015-12-18 22:28 - 2015-12-18 22:29 - 22908888 _____ (Malwarebytes ) C:\Users\Guinarwen\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-18 13:02 - 2015-12-18 13:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\Freecorder 8 Audio
2015-12-18 13:02 - 2015-12-18 13:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\Freecorder 6 Audio
2015-12-18 13:02 - 2015-12-18 13:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\PC_Drivers_Headquarters
2015-12-18 13:02 - 2015-12-18 13:02 - 00000000 ____D C:\Program Files (x86)\Lam librairie
2015-12-18 13:02 - 2015-12-17 10:43 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1FBF74A1-733D-4D24-9FEB-D309D72E9B9D}
2015-12-18 13:02 - 2015-12-17 09:33 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{ADC9B810-CF68-42EC-B843-5DD98E0E411D}
2015-12-18 13:02 - 2015-09-16 20:23 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{244BAC5A-BA45-4AAE-90AC-1008ACDDAC6A}
2015-12-18 13:02 - 2014-09-07 15:56 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0DF15F16-D3E4-4844-892E-F2B35399C0E3}
2015-12-18 13:02 - 2014-08-20 10:06 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{18D9AEFE-26A6-419B-9B62-24B5CF7C7390}
2015-12-18 13:02 - 2014-08-13 23:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{7991B565-8131-42A3-B0B4-384B41431362}
2015-12-18 13:02 - 2014-07-13 21:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{66AD672F-4CAD-4ABA-AB3D-4C8EA6E86A70}
2015-12-18 13:02 - 2014-07-10 20:46 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{7684F1D1-0EC5-4EE4-AFD8-661C5A85B988}
2015-12-18 13:02 - 2014-06-25 15:23 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0329F3E8-1B9F-4405-8025-74EBF8DB7966}
2015-12-18 13:02 - 2014-06-18 20:50 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{83419EE6-4519-454B-98AD-F606874B814F}
2015-12-18 13:02 - 2014-06-18 08:50 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{F915E553-4709-4F3F-859A-B9BC8FAF61DF}
2015-12-18 13:02 - 2014-06-17 19:27 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0D764150-85CD-4CD1-9776-2F25091C951B}
2015-12-18 13:02 - 2014-06-17 07:25 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{FDA8606D-AD42-406A-8B2B-F54AD82851C9}
2015-12-18 13:02 - 2014-06-11 13:48 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{F43429F9-8EA0-41BE-9CCE-6FBA22DB217D}
2015-12-18 13:02 - 2014-06-06 13:36 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{F9392483-61A1-4846-AB51-7017FD4B9AD8}
2015-12-18 13:02 - 2014-06-05 13:17 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{CA4DDEA3-B3DE-499A-95CD-E614C3CFD08D}
2015-12-18 13:02 - 2014-06-05 13:14 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{ACDA798A-6B0F-4602-97EA-5E3BB704B3BB}
2015-12-18 13:02 - 2014-06-05 13:11 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A136CC9A-A523-460F-B959-3A06C4AA1B96}
2015-12-18 13:02 - 2014-06-04 18:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{9F002680-C272-4924-99A9-8DC671565EF2}
2015-12-18 13:02 - 2014-06-03 13:47 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{9DC713BD-5723-49D4-8D22-73064B70D6C6}
2015-12-18 13:02 - 2014-06-02 13:12 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1393270E-73AC-4DFF-8979-9AD1A96970EF}
2015-12-18 13:02 - 2014-06-01 20:47 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{67ECE74B-4FA5-4550-8E96-9F3DE4C93F49}
2015-12-18 13:02 - 2014-05-23 08:52 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{21E7A063-8A04-49B3-9EC7-4C7F66BD1917}
2015-12-18 13:02 - 2014-05-21 13:52 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{071C7AE6-3CFF-45F0-B3D7-82723BC36A63}
2015-12-18 13:02 - 2014-05-15 21:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{2746BC7B-4427-4A8D-B1F3-D22D083FE0C7}
2015-12-18 13:02 - 2014-04-14 21:42 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{B87F8B23-D550-44A2-996B-43F0EAE047DC}
2015-12-18 13:02 - 2014-04-10 20:58 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{55556F9E-0D5E-4439-9B9E-07716FAFF84A}
2015-12-18 13:02 - 2014-03-27 22:14 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{037A65BE-4955-49A7-BB7F-7B3FEF98E132}
2015-12-18 13:02 - 2014-03-16 19:30 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{7300E5EC-A505-4EBB-B66F-7D4192D5B054}
2015-12-18 13:02 - 2014-03-14 16:59 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{40115649-6601-4C29-AC1B-4786F6068BD9}
2015-12-18 13:02 - 2014-03-07 17:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{23E68A84-AC9C-42A2-8D4C-5DEF0B11AF78}
2015-12-18 13:02 - 2014-03-04 22:16 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{B014773A-AACB-4D35-BBE1-F65C6D240330}
2015-12-18 13:02 - 2014-03-04 00:36 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A3D6C462-1705-4888-9522-787F6AC0110F}
2015-12-18 13:02 - 2014-02-26 22:06 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1211B854-F2DC-4D44-9308-9B56FD71F255}
2015-12-18 13:02 - 2014-02-25 22:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{583B77CF-90C8-483C-8E57-A06667E58FDB}
2015-12-18 13:02 - 2014-02-21 21:20 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{47DCC78F-3593-46DE-987F-3CD31F55998A}
2015-12-18 13:02 - 2014-02-16 22:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{85EC6886-F031-4737-AEC7-B1230ED7B26D}
2015-12-18 13:02 - 2014-01-14 21:31 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C52E39E5-C099-48D0-911A-29F60FDE0EBA}
2015-12-18 13:02 - 2013-12-08 23:04 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{4722997E-70C8-42E2-ACA8-3408251D1637}
2015-12-18 13:02 - 2013-08-29 21:56 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C40A936C-EAE4-4D6D-ABD1-1575D7BDDD8B}
2015-12-18 13:02 - 2013-08-27 19:15 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{CC5157D6-8AC3-4CD7-AF2D-9594D11CD6B7}
2015-12-18 13:02 - 2013-08-23 20:56 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{7DC0A652-DE6A-42B4-BD04-A0E534ECD886}
2015-12-18 13:02 - 2013-07-10 18:20 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{3BDA1251-2785-4157-BB04-6A1CD8D9D31B}
2015-12-18 13:02 - 2013-01-06 14:50 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{452EDE25-826F-4BC3-8F17-1414FED8CAA1}
2015-12-18 13:02 - 2012-04-22 16:54 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{3CD00244-56B9-4F7C-8884-36E5F7171152}
2015-12-18 13:02 - 2012-04-22 16:53 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{3EF49DA9-C714-4437-B0B7-417641151825}
2015-12-18 13:02 - 2012-04-19 20:33 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{D29E9118-571F-4DBE-B37A-EF2B1CD0E95D}
2015-12-18 13:02 - 2012-04-19 20:33 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{B4A91A38-8575-4999-B8E0-67A4F24A8C8A}
2015-12-18 13:02 - 2012-04-19 18:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{FA555F38-5C67-4923-AEDF-97476F9B3FAB}
2015-12-18 13:02 - 2012-04-19 18:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{17CF59FD-0701-4F29-AFBE-50F29328682F}
2015-12-18 13:02 - 2012-04-19 16:22 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{6453155C-FA28-403C-9977-D96F51432C55}
2015-12-18 13:02 - 2012-04-19 16:22 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{5F7B2EAD-B708-44FD-B909-4F54659AB24D}
2015-12-18 13:02 - 2012-04-19 13:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{AC6ADC67-3045-4BF2-9E3B-17672BBC5412}
2015-12-18 13:02 - 2012-04-19 13:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{45B18E01-39E3-414A-962F-20749054F573}
2015-12-18 13:02 - 2012-04-18 15:48 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C3194972-4008-4ADA-8D08-5593323928C1}
2015-12-18 13:02 - 2012-04-18 12:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0FCE8852-8EDC-4F97-B510-6E1A0BE33C7A}
2015-12-18 13:02 - 2012-04-17 18:06 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1E1FA7C9-7882-4849-8A29-B920E6E8B661}
2015-12-18 13:02 - 2012-04-17 15:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A70C20AA-7198-47F7-A051-84957DB8CDBB}
2015-12-18 13:02 - 2012-04-15 12:59 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{8CEDE7E0-AAC1-424C-914C-CF27451D88D4}
2015-12-18 13:02 - 2012-04-15 12:58 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{E12E3CC8-B205-43B8-8FBD-43719C98E906}
2015-12-18 13:02 - 2012-04-15 12:58 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{10964C88-4F0A-4AC9-9317-6CECC86CC02B}
2015-12-18 13:02 - 2012-02-13 21:38 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A61DEF39-3189-424E-BE68-83392949968E}
2015-12-18 13:02 - 2011-12-28 11:07 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{5B7C614A-D1B0-46AA-8053-F02FE04FCB91}
2015-12-18 13:02 - 2011-12-28 11:06 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{B98DA433-E4E5-4366-AC7B-D246B6B4A7FE}
2015-12-18 13:02 - 2011-11-26 10:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{D22675CF-1C4C-4451-B889-976D6354FCD2}
2015-12-18 13:02 - 2011-11-26 10:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{ACD8B3B8-3DB9-4331-93FC-99AE03212C5B}
2015-12-18 13:02 - 2011-11-25 14:34 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0FCCF4B1-F202-4A38-9D61-2CB97CE2B8BF}
2015-12-18 13:02 - 2011-11-25 14:34 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{066E4FC1-5FA9-4693-B390-53FF6EA9DB1A}
2015-12-18 13:02 - 2011-11-22 22:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{8A5A2872-C31F-47D5-895F-BD9BB56D0081}
2015-12-18 13:02 - 2011-11-22 22:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{5A396690-BE68-4864-A1BA-0B8420F83C76}
2015-12-18 13:02 - 2011-11-21 22:14 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{369EFFF1-8164-4EC1-8117-F2CAA92FB1AD}
2015-12-18 13:02 - 2011-11-21 22:14 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{113EB29D-A485-4E1F-8106-05EDCCE370E8}
2015-12-18 13:02 - 2011-11-19 14:45 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{E8FC14F3-2A66-4BD7-B186-A287879F1BF2}
2015-12-18 13:02 - 2011-11-19 14:45 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{67C1A079-DCFB-49EF-9069-3A5016AA378E}
2015-12-18 13:02 - 2011-11-15 21:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{6800309F-9C2C-4075-B382-E557E06D797A}
2015-12-18 13:02 - 2011-11-15 21:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{39BA3CB5-E6FE-469D-A6CD-BEB7F95AC2C9}
2015-12-18 13:02 - 2011-11-06 14:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{85BE00EB-9864-446E-9E39-7862E493E6D3}
2015-12-18 13:02 - 2011-11-06 14:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0D36C83B-51DE-4C7A-B43F-BE88B712522D}
2015-12-18 13:02 - 2011-10-13 20:30 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{48C1A7AB-54C3-478E-8B98-088E6B64F807}
2015-12-18 13:02 - 2011-10-13 20:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A483ED25-312C-4284-A836-82396E4DBD4C}
2015-12-18 13:02 - 2011-08-27 12:04 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A071A257-A333-4D54-BEF0-8BD844AC1949}
2015-12-18 13:02 - 2011-08-27 12:04 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{54D30694-C1C0-4C73-A1EB-5D387E7F81DF}
2015-12-18 13:02 - 2011-08-14 12:45 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{AA7BC9B7-4EBA-458C-9BB0-B58F5A76BF43}
2015-12-18 13:02 - 2011-08-13 13:09 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{DEC3144B-B9BF-4F5A-A595-280CE6E6B7ED}
2015-12-18 13:02 - 2011-08-13 13:09 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{06AE41F6-D721-4F2B-9CBC-34FFE06A8B83}
2015-12-18 13:02 - 2011-08-13 11:07 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{32D46DD0-1BC0-4DFD-A226-D98FE865BE19}
2015-12-18 13:02 - 2011-08-13 11:07 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{01B9F043-ACF6-4B7A-A292-8815B8C8C278}
2015-12-18 13:02 - 2011-08-13 01:54 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C7337F7D-A15B-4C5E-934B-D2321C1CF7A4}
2015-12-18 13:02 - 2011-08-13 01:54 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C32422E7-40D6-4702-ACFC-4500A6E730C4}
2015-12-18 13:02 - 2011-08-13 00:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A7FBCD05-4151-49FE-8E11-000095831EF3}
2015-12-18 13:02 - 2011-08-13 00:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{5D82451C-59AC-4D51-B66F-67ACAA3F3C0D}
2015-12-18 13:02 - 2011-08-12 22:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{86D5C2A8-51B6-46CD-AFC1-D91517604FC3}
2015-12-18 13:02 - 2011-08-12 22:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{76B40E38-2578-4FE8-803E-A14B6042C0AD}
2015-12-18 13:02 - 2011-08-11 21:36 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{035EB734-32AA-435A-95EC-576E31DCB7F8}
2015-12-18 13:02 - 2011-08-11 21:36 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{02DF90D1-F177-458A-B75C-17108D80F2C9}
2015-12-18 13:02 - 2011-08-11 19:30 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{58D111E9-89C4-40C3-A9DA-F14E050CA6A3}
2015-12-18 13:02 - 2011-07-22 14:27 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{11FA6E89-6343-4CC5-999C-E324C8D1076C}
2015-12-18 13:02 - 2011-06-30 20:26 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{8C8D2642-70F9-42E8-A6C9-20CB7DF17C95}
2015-12-18 13:02 - 2011-06-30 20:26 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{8BE3F0AF-A036-4B8E-ACDC-A59DFEC26D76}
2015-12-18 13:02 - 2011-06-27 09:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1A5D1136-8113-4E9C-90F0-5E79B9F8C082}
2015-12-18 10:20 - 2015-12-18 10:21 - 00050438 _____ C:\Users\Guinarwen\Desktop\Addition.txt
2015-12-18 10:19 - 2015-12-19 11:23 - 00029140 _____ C:\Users\Guinarwen\Desktop\FRST.txt
2015-12-18 10:19 - 2015-12-19 11:23 - 00000000 ____D C:\FRST
2015-12-18 09:14 - 2015-12-18 09:36 - 00216542 _____ C:\Windows\ntbtlog.txt
2015-12-17 22:05 - 2015-12-17 21:52 - 04600536 _____ (Avira Operations GmbH & Co. KG) C:\Users\Guinarwen\Downloads\avira-free-antivirus_15-0-15-129_fr_404708.exe
2015-12-17 21:31 - 2015-12-17 21:31 - 00003601 _____ C:\Users\Guinarwen\Desktop\ZHPFixReport.txt
2015-12-17 21:21 - 2015-12-17 21:21 - 00001851 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2015-12-17 21:21 - 2015-12-17 21:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-12-17 21:20 - 2015-12-17 21:21 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2015-12-17 14:55 - 2015-12-17 14:56 - 12530872 _____ (MPC-HC Team ) C:\Users\Guinarwen\Downloads\MPC-HC.1.7.10.x86.exe
2015-12-17 14:48 - 2015-12-17 14:48 - 00000992 _____ C:\Users\Guinarwen\Desktop\Photo-Expose-Anton-transfert - Raccourci.lnk
2015-12-17 09:23 - 2015-12-17 09:23 - 00212992 _____ C:\Users\Guinarwen\Documents\Strat-pare-feu-Windows-2015-12-17-09h24.wfw
2015-12-17 00:14 - 2015-12-17 00:14 - 00000000 ____D C:\Users\Guinarwen\Downloads\MAJ vers Windows 10
2015-12-16 10:55 - 2015-12-18 23:29 - 00000000 ____D C:\AdwCleaner
2015-12-16 08:55 - 2015-12-19 10:43 - 00000000 ____D C:\Users\Guinarwen\Desktop\Desinfection PC dec2015
2015-12-15 23:46 - 2014-05-23 10:16 - 00043385 ____R C:\Tempo.zhp
2015-12-15 12:19 - 2015-12-18 22:30 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-15 12:19 - 2015-12-18 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-15 12:18 - 2015-12-18 22:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-15 12:18 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-12-15 12:18 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-12-15 12:18 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-12-15 11:37 - 2015-12-19 10:44 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\ZHP
2015-12-15 11:26 - 2015-12-15 11:10 - 01943552 _____ C:\Users\Guinarwen\Downloads\ZHPCleaner.exe
2015-12-15 11:26 - 2015-12-15 10:51 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Guinarwen\Downloads\malwarebytes-anti-malware_2-1-8-1057_fr_215092.exe
2015-12-15 09:53 - 2015-12-15 09:53 - 00008732 _____ C:\rk_7A5E.tmp.txt
2015-12-15 09:16 - 2015-12-15 09:16 - 20834376 _____ C:\Users\Guinarwen\Downloads\RogueKiller(1).exe
2015-12-15 08:58 - 2015-12-16 08:54 - 00030848 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-12-15 08:58 - 2015-12-15 10:02 - 00000000 ____D C:\ProgramData\RogueKiller
2015-12-11 22:21 - 2015-12-11 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2015-12-11 22:13 - 2015-12-11 22:48 - 00000000 ____D C:\xampp
2015-12-11 20:04 - 2015-12-11 20:05 - 112275472 _____ (Bitnami) C:\Users\Guinarwen\Downloads\xampp_5-6-15-1_fr_70674.exe
2015-12-11 19:26 - 2015-12-11 19:27 - 00000000 ____D C:\phpMyAdmin-copies-config
2015-12-11 18:47 - 2015-12-11 18:47 - 10396141 _____ C:\Users\Guinarwen\Downloads\phpMyAdmin-4.5.2-all-languages.zip
2015-12-11 18:10 - 2015-12-11 18:10 - 08169506 _____ C:\Users\Guinarwen\Downloads\wordpress-4.4-fr_FR.zip
2015-12-09 11:35 - 2015-12-09 11:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2015-12-09 10:09 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 10:09 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 10:09 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 10:09 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-12-09 10:09 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-12-09 10:09 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-12-09 10:09 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-12-09 10:09 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-12-09 10:09 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 10:09 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 10:09 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 10:09 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 10:09 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-12-09 10:09 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-12-09 10:09 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 10:09 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 10:09 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2015-12-09 10:09 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-09 10:09 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-12-09 10:09 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 10:09 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-09 10:09 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-12-09 10:09 - 2015-10-09 00:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-09 10:09 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2015-12-09 10:09 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-09 10:09 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-09 10:09 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-09 10:09 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2015-12-09 10:09 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2015-12-09 10:09 - 2015-10-09 00:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2015-12-09 10:09 - 2015-10-08 20:13 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2015-12-09 10:09 - 2015-10-08 19:52 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-09 10:08 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 10:08 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-12-09 10:08 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 10:08 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2015-12-09 10:08 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2015-12-09 10:08 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 10:08 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-12-09 10:08 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-12-09 10:08 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-12-09 10:08 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-12-09 10:08 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 10:08 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-12-09 10:08 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-12-09 10:08 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-12-09 10:08 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-12-09 10:08 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-12-09 10:08 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-12-09 10:08 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-12-09 10:08 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-12-09 10:08 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-12-09 10:08 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-12-09 10:08 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-12-09 10:08 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-12-09 10:08 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-12-09 10:08 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-12-09 10:08 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-09 10:08 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-12-09 10:08 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-12-09 10:08 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-12-09 10:08 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-12-09 10:08 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-12-09 10:08 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-12-09 10:08 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-12-09 10:08 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-12-09 10:08 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-12-09 10:08 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-12-09 10:08 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 10:08 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 10:08 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 10:08 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 10:08 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 10:08 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 10:08 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 10:08 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 10:08 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 10:08 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 10:08 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 10:08 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 10:08 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 10:08 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 10:08 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 10:08 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 10:08 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 10:08 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 10:08 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 10:08 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 10:08 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 10:08 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 10:08 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 10:08 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 10:08 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 10:08 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 10:08 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 10:08 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 10:08 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 10:08 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 10:08 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 10:07 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-09 10:07 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2015-12-02 08:42 - 2015-12-02 08:42 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d12cd5b96a836.job
2015-12-01 21:35 - 2015-12-13 19:14 - 00000000 ____D C:\Users\Guinarwen\Documents\ViberDownloads
2015-12-01 21:26 - 2015-12-19 09:53 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\ViberPC
2015-12-01 21:25 - 2015-12-01 21:25 - 00000971 _____ C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Viber.lnk
2015-12-01 21:25 - 2015-12-01 21:25 - 00000969 _____ C:\Users\Guinarwen\Desktop\Viber.lnk
2015-12-01 21:25 - 2015-12-01 21:25 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber
2015-12-01 21:25 - 2015-12-01 21:25 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\Viber
2015-12-01 21:25 - 2015-12-01 21:25 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\Package Cache
2015-11-30 17:39 - 2015-11-30 17:39 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\FastStone
2015-11-30 17:38 - 2015-11-30 17:38 - 00001107 _____ C:\Users\Public\Desktop\FastStone Image Viewer.lnk
2015-11-30 17:38 - 2015-11-30 17:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer
2015-11-30 17:38 - 2015-11-30 17:38 - 00000000 ____D C:\Program Files (x86)\FastStone Image Viewer
2015-11-30 17:33 - 2015-11-30 17:35 - 05853531 _____ C:\Users\Guinarwen\Downloads\FSViewerSetup55.exe
2015-11-23 18:51 - 2015-11-23 18:51 - 00001111 _____ C:\Users\Guinarwen\Desktop\OLYMPUS Digital Camera Updater.lnk
2015-11-23 18:51 - 2015-11-23 18:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OLYMPUS Digital Camera Updater
2015-11-23 10:57 - 2015-11-23 10:57 - 00000000 ____D C:\Users\Guinarwen\Downloads\AZERTY
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-12-19 10:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2015-12-19 10:05 - 2015-11-08 20:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-19 10:00 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-19 10:00 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-18 23:47 - 2015-07-08 13:25 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-12-18 23:47 - 2015-07-08 13:25 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-18 23:19 - 2009-08-04 11:03 - 06984970 _____ C:\Windows\system32\perfh00C.dat
2015-12-18 23:19 - 2009-08-04 11:03 - 02249390 _____ C:\Windows\system32\perfc00C.dat
2015-12-18 23:19 - 2009-07-14 06:13 - 00006264 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-18 13:02 - 2011-08-12 20:37 - 00000000 ____D C:\Program Files (x86)\Freecorder
2015-12-18 10:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-18 08:22 - 2011-01-12 17:05 - 00000000 ____D C:\ProgramData\Trend Micro
2015-12-17 21:34 - 2013-04-17 11:59 - 00000000 ____D C:\Program Files (x86)\Avira
2015-12-17 21:06 - 2014-08-20 10:00 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-17 21:06 - 2012-06-14 21:33 - 00000000 ____D C:\ProgramData\Avira
2015-12-17 21:01 - 2011-11-26 10:21 - 00562688 ___SH C:\Users\Guinarwen\Thumbs.db
2015-12-17 17:31 - 2011-01-12 16:48 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-17 11:18 - 2015-11-11 20:44 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\MPC-HC
2015-12-16 21:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-16 13:48 - 2015-11-11 14:35 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\CrashDumps
2015-12-15 13:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2015-12-15 12:44 - 2015-09-15 08:38 - 00000000 ___RD C:\Users\Guinarwen\Google Drive
2015-12-15 11:26 - 2015-10-30 14:19 - 00000000 __SHD C:\aws
2015-12-15 11:23 - 2011-06-23 10:55 - 00001431 _____ C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-15 08:42 - 2015-10-30 14:09 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\WebStorage
2015-12-13 20:38 - 2015-09-21 21:01 - 00000295 _____ C:\Users\Guinarwen\Desktop\TXT.txt
2015-12-10 12:19 - 2009-07-14 05:45 - 05151752 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-09 23:34 - 2012-01-23 21:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 23:32 - 2013-03-17 00:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 23:31 - 2013-03-17 00:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 23:31 - 2013-03-17 00:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 23:27 - 2013-07-13 23:23 - 00000000 ____D C:\Windows\system32\MRT
2015-12-09 23:05 - 2011-07-02 11:14 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-12-08 14:11 - 2011-09-15 13:28 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\Paint.NET
2015-12-02 08:42 - 2015-09-15 08:37 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0ef895338d233.job
2015-12-02 08:32 - 2011-04-25 13:04 - 00002988 _____ C:\Windows\system32\AutoRunFilter.ini
2015-11-26 17:37 - 2015-09-15 08:37 - 00002044 _____ C:\Users\Public\Desktop\Google Slides.lnk
2015-11-26 17:37 - 2015-09-15 08:37 - 00002042 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2015-11-26 17:37 - 2015-09-15 08:37 - 00002032 _____ C:\Users\Public\Desktop\Google Docs.lnk
2015-11-26 17:37 - 2015-09-15 08:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-11-23 18:51 - 2015-10-15 13:45 - 00000000 ____D C:\Program Files (x86)\OLYMPUS
2015-11-23 11:31 - 2011-06-23 10:56 - 00168264 _____ C:\Users\Guinarwen\AppData\Local\GDIPFONTCACHEV1.DAT
2015-11-23 11:03 - 2011-06-23 11:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\Adobe
2015-11-23 11:01 - 2011-08-11 21:34 - 00000000 ____D C:\Users\Guinarwen\Downloads\Polices caractères
2015-11-22 18:41 - 2015-11-09 22:21 - 00000000 ____D C:\Users\Guinarwen\Downloads\Bordel A TRIER DE 5Go
==================== Fichiers à la racine de certains dossiers =======
2012-04-25 21:27 - 2012-05-02 22:58 - 0000121 _____ () C:\Users\Guinarwen\AppData\Roaming\Camdata.ini
2012-04-25 21:27 - 2012-05-02 22:58 - 0000408 _____ () C:\Users\Guinarwen\AppData\Roaming\CamLayout.ini
2012-04-25 21:27 - 2012-05-02 22:58 - 0000408 _____ () C:\Users\Guinarwen\AppData\Roaming\CamShapes.ini
2012-04-25 21:27 - 2012-05-02 22:58 - 0004416 _____ () C:\Users\Guinarwen\AppData\Roaming\CamStudio.cfg
2013-08-07 19:07 - 2014-01-13 22:08 - 0000092 _____ () C:\Users\Guinarwen\AppData\Roaming\WB.CFG
2013-07-18 21:45 - 2014-01-13 22:17 - 0000005 _____ () C:\Users\Guinarwen\AppData\Roaming\WBPU-TTL.DAT
2014-04-14 23:16 - 2014-09-07 19:49 - 0000600 _____ () C:\Users\Guinarwen\AppData\Local\PUTTY.RND
2015-06-29 16:37 - 2015-06-29 16:37 - 0000057 _____ () C:\ProgramData\Ament.ini
2011-01-12 17:02 - 2010-07-07 01:10 - 0131472 _____ () C:\ProgramData\FullRemove.exe
2014-08-19 10:21 - 2014-08-19 11:55 - 0004226 _____ () C:\ProgramData\hpzinstall.log
2011-01-12 16:48 - 2011-01-12 16:49 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2011-01-12 16:48 - 2011-01-12 16:48 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Certains fichiers dans TEMP:
====================
C:\Users\Guinarwen\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2013-09-11 17:42
==================== Fin de FRST.txt ============================
Exécuté par Guinarwen (administrateur) sur GUINARWEN-PC-W7 (19-12-2015 11:23:28)
Exécuté depuis C:\Users\Guinarwen\Desktop
Profils chargés: Guinarwen (Profils disponibles: Guinarwen)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe
(AlcorMicro Co., Ltd.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Sonix Technology Co., Ltd.) C:\Windows\vsnp2uvc.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(syncables, LLC) C:\Program Files (x86)\syncables\syncables desktop\syncables.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(OLYMPUS CORPORATION) C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
() C:\Users\Guinarwen\AppData\Local\Viber\Viber.exe
(Sun Microsystems, Inc.) C:\Program Files (x86)\syncables\syncables desktop\jre\bin\javaw.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Applian Technologies, Inc.) C:\Program Files (x86)\Freecorder\FLVSrvc.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Apple Inc.) C:\Program Files (x86)\QuickTime\QTTask.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.4.537\AsusWSPanel.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Farbar) C:\Users\Guinarwen\Desktop\FRST64 (1).exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ASUS WebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\SERVICE\AsusWSService.exe
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-01] (AlcorMicro Co., Ltd.)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-06-10] (ELAN Microelectronic Corp.)
HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [909824 2010-01-21] (Sonix Technology Co., Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-09-15] (Apple Inc.)
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-10-06] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [Freecorder FLV Service] => C:\Program Files (x86)\Freecorder\FLVSrvc.exe [167936 2011-03-24] (Applian Technologies, Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60688 2015-09-15] (Apple Inc.)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217632 2015-07-21] (Geek Software GmbH)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-08-06] (Apple Inc.)
HKLM-x32\...\Run: [OV3_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [55320 2015-05-13] (OLYMPUS CORPORATION)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.4.537\AsusWSPanel.exe [5563688 2015-10-12] (ASUS Cloud Corporation)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [Syncables] => C:\Program Files (x86)\syncables\syncables desktop\Syncables.exe [370480 2010-07-19] (syncables, LLC)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [MobileDocuments] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ubd.exe
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8551848 2015-10-19] (Piriform Ltd)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [GoogleChromeAutoLaunch_DDC5FD927B446CE6DC19DA22AC297C05] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [741704 2015-12-11] (Google Inc.)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22790776 2015-11-04] (Google)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [OV3_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\OV3Monitor.exe [419864 2015-05-13] (OLYMPUS CORPORATION)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [721504 2015-09-02] (Microsoft Corporation)
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\Run: [Viber] => C:\Users\Guinarwen\AppData\Local\Viber\Viber.exe [51657424 2015-11-09] ()
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\MountPoints2: {79ec1e15-ae1e-11e0-b5f0-f46d0487d249} - G:\AutoRunCardDetector.exe
HKU\S-1-5-21-3228627706-352522292-3759082605-1001\...\MountPoints2: {d369654e-95ae-11e5-a14b-f46d0487d249} - F:\Autorun.exe
HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.4.537\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2011-01-12]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk [2011-06-23]
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe ()
Startup: C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2015-12-15]
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 - Capture d’écran et lancement.lnk [2014-04-10]
ShortcutTarget: OneNote 2010 - Capture d’écran et lancement.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk [2011-07-13]
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.50
Tcpip\..\Interfaces\{87BAFBC6-17A4-4245-8F27-B0E478D353B4}: [DhcpNameServer] 192.168.0.50
Tcpip\..\Interfaces\{ECD423CE-D6A7-4022-9EF5-BBC71AC730E8}: [DhcpNameServer] 192.168.0.50
Internet Explorer:
==================
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2012-12-06] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-01-12] (Google Inc.)
BHO: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg64.dll [2011-01-12] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2012-12-06] (Oracle Corporation)
BHO-x32: ContributeBHO Class -> {074C1DC5-9320-4A9A-947D-C042949C6216} -> C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27] (Adobe Systems, Inc.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08] (pdfforge GmbH)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-12-01] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-01-12] (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO -> {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -> C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll [2011-01-12] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Google Dictionary Compression sdch -> {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} -> C:\Program Files (x86)\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll [2011-01-12] (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2011-10-18] (Sun Microsystems, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-01-12] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2011-01-12] (Google Inc.)
Toolbar: HKLM-x32 - Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\IEPlugin\contributeieplugin.dll [2010-03-27] (Adobe Systems, Inc.)
Toolbar: HKU\.DEFAULT -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2011-01-12] (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\Guinarwen\AppData\Roaming\Mozilla\Firefox\Profiles\kufe7a4a.default-1435593057695
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_19_0_0_226.dll [2015-11-03] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2012-12-06] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2012-12-06] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: @Skype Technologies S.A..com/Skype Web Plugin -> C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin64.dll [2013-12-04] (Skype)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_226.dll [2015-11-03] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll [2011-10-03] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @Skype Technologies S.A..com/Skype Web Plugin -> C:\Program Files (x86)\SkypeWebPlugin\npSkypeWebPlugin.dll [2013-12-04] (Skype)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
FF Plugin HKU\S-1-5-21-3228627706-352522292-3759082605-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Guinarwen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-07-20] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2015-09-24] (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2015-09-24] (Apple Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}] - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9}
FF Extension: Adobe Contribute Toolbar - C:\Program Files (x86)\Adobe\Adobe Contribute CS5\Plugins\FirefoxPlugin\{01A8CA0A-4C96-465b-A49B-65C46FAD54F9} [2012-03-24] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-07-13] [non signé]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.fr/
CHR StartupUrls: Default -> "hxxp://www.google.fr/"
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\ppGoogleNaClPluginChrome.dll => Pas de fichier
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\pdf.dll => Pas de fichier
CHR Plugin: (Java Deployment Toolkit 6.0.290.11) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll (Sun Microsystems, Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin6.dll => Pas de fichier
CHR Plugin: (QuickTime Plug-in 7.7.3) - C:\Program Files (x86)\QuickTime\plugins\npqtplugin7.dll => Pas de fichier
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll => Pas de fichier
CHR Plugin: (DivX Plus Web Player) - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll => Pas de fichier
CHR Plugin: (Picasa) - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll => Pas de fichier
CHR Plugin: (Java(TM) Platform SE 6 U29) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (McAfee Security Scanner +) - C:\Program Files (x86)\McAfee Security Scan\3.0.318\npMcAfeeMss.dll => Pas de fichier
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll => Pas de fichier
CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (iTunes Application Detector) - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
CHR Plugin: (Unity Player) - C:\Users\Guinarwen\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll => Pas de fichier
CHR Profile: C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-29]
CHR Extension: (Google Drive) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Recherche Google) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Google Docs hors connexion) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-30]
CHR Extension: (Gmail) - C:\Users\Guinarwen\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-29]
CHR HKU\S-1-5-21-3228627706-352522292-3759082605-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-09-02] (Apple Inc.)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-05-27] (Freemake) [Fichier non signé]
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [Fichier non signé]
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [Fichier non signé]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [30848 2015-12-16] ()
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-08-06] ()
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-12-19 11:21 - 2015-12-18 23:16 - 01740288 _____ C:\Users\Guinarwen\Desktop\adwcleaner_5.025 (1).exe
2015-12-19 11:21 - 2015-12-18 09:56 - 02370048 _____ (Farbar) C:\Users\Guinarwen\Desktop\FRST64 (1).exe
2015-12-18 23:14 - 2015-12-18 23:14 - 00001321 _____ C:\Rapport-Mabam-2015-12-17-23h14.txt
2015-12-18 22:28 - 2015-12-18 22:29 - 22908888 _____ (Malwarebytes ) C:\Users\Guinarwen\Downloads\mbam-setup-2.2.0.1024.exe
2015-12-18 13:02 - 2015-12-18 13:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\Freecorder 8 Audio
2015-12-18 13:02 - 2015-12-18 13:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\Freecorder 6 Audio
2015-12-18 13:02 - 2015-12-18 13:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\PC_Drivers_Headquarters
2015-12-18 13:02 - 2015-12-18 13:02 - 00000000 ____D C:\Program Files (x86)\Lam librairie
2015-12-18 13:02 - 2015-12-17 10:43 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1FBF74A1-733D-4D24-9FEB-D309D72E9B9D}
2015-12-18 13:02 - 2015-12-17 09:33 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{ADC9B810-CF68-42EC-B843-5DD98E0E411D}
2015-12-18 13:02 - 2015-09-16 20:23 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{244BAC5A-BA45-4AAE-90AC-1008ACDDAC6A}
2015-12-18 13:02 - 2014-09-07 15:56 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0DF15F16-D3E4-4844-892E-F2B35399C0E3}
2015-12-18 13:02 - 2014-08-20 10:06 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{18D9AEFE-26A6-419B-9B62-24B5CF7C7390}
2015-12-18 13:02 - 2014-08-13 23:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{7991B565-8131-42A3-B0B4-384B41431362}
2015-12-18 13:02 - 2014-07-13 21:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{66AD672F-4CAD-4ABA-AB3D-4C8EA6E86A70}
2015-12-18 13:02 - 2014-07-10 20:46 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{7684F1D1-0EC5-4EE4-AFD8-661C5A85B988}
2015-12-18 13:02 - 2014-06-25 15:23 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0329F3E8-1B9F-4405-8025-74EBF8DB7966}
2015-12-18 13:02 - 2014-06-18 20:50 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{83419EE6-4519-454B-98AD-F606874B814F}
2015-12-18 13:02 - 2014-06-18 08:50 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{F915E553-4709-4F3F-859A-B9BC8FAF61DF}
2015-12-18 13:02 - 2014-06-17 19:27 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0D764150-85CD-4CD1-9776-2F25091C951B}
2015-12-18 13:02 - 2014-06-17 07:25 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{FDA8606D-AD42-406A-8B2B-F54AD82851C9}
2015-12-18 13:02 - 2014-06-11 13:48 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{F43429F9-8EA0-41BE-9CCE-6FBA22DB217D}
2015-12-18 13:02 - 2014-06-06 13:36 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{F9392483-61A1-4846-AB51-7017FD4B9AD8}
2015-12-18 13:02 - 2014-06-05 13:17 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{CA4DDEA3-B3DE-499A-95CD-E614C3CFD08D}
2015-12-18 13:02 - 2014-06-05 13:14 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{ACDA798A-6B0F-4602-97EA-5E3BB704B3BB}
2015-12-18 13:02 - 2014-06-05 13:11 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A136CC9A-A523-460F-B959-3A06C4AA1B96}
2015-12-18 13:02 - 2014-06-04 18:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{9F002680-C272-4924-99A9-8DC671565EF2}
2015-12-18 13:02 - 2014-06-03 13:47 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{9DC713BD-5723-49D4-8D22-73064B70D6C6}
2015-12-18 13:02 - 2014-06-02 13:12 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1393270E-73AC-4DFF-8979-9AD1A96970EF}
2015-12-18 13:02 - 2014-06-01 20:47 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{67ECE74B-4FA5-4550-8E96-9F3DE4C93F49}
2015-12-18 13:02 - 2014-05-23 08:52 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{21E7A063-8A04-49B3-9EC7-4C7F66BD1917}
2015-12-18 13:02 - 2014-05-21 13:52 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{071C7AE6-3CFF-45F0-B3D7-82723BC36A63}
2015-12-18 13:02 - 2014-05-15 21:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{2746BC7B-4427-4A8D-B1F3-D22D083FE0C7}
2015-12-18 13:02 - 2014-04-14 21:42 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{B87F8B23-D550-44A2-996B-43F0EAE047DC}
2015-12-18 13:02 - 2014-04-10 20:58 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{55556F9E-0D5E-4439-9B9E-07716FAFF84A}
2015-12-18 13:02 - 2014-03-27 22:14 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{037A65BE-4955-49A7-BB7F-7B3FEF98E132}
2015-12-18 13:02 - 2014-03-16 19:30 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{7300E5EC-A505-4EBB-B66F-7D4192D5B054}
2015-12-18 13:02 - 2014-03-14 16:59 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{40115649-6601-4C29-AC1B-4786F6068BD9}
2015-12-18 13:02 - 2014-03-07 17:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{23E68A84-AC9C-42A2-8D4C-5DEF0B11AF78}
2015-12-18 13:02 - 2014-03-04 22:16 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{B014773A-AACB-4D35-BBE1-F65C6D240330}
2015-12-18 13:02 - 2014-03-04 00:36 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A3D6C462-1705-4888-9522-787F6AC0110F}
2015-12-18 13:02 - 2014-02-26 22:06 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1211B854-F2DC-4D44-9308-9B56FD71F255}
2015-12-18 13:02 - 2014-02-25 22:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{583B77CF-90C8-483C-8E57-A06667E58FDB}
2015-12-18 13:02 - 2014-02-21 21:20 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{47DCC78F-3593-46DE-987F-3CD31F55998A}
2015-12-18 13:02 - 2014-02-16 22:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{85EC6886-F031-4737-AEC7-B1230ED7B26D}
2015-12-18 13:02 - 2014-01-14 21:31 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C52E39E5-C099-48D0-911A-29F60FDE0EBA}
2015-12-18 13:02 - 2013-12-08 23:04 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{4722997E-70C8-42E2-ACA8-3408251D1637}
2015-12-18 13:02 - 2013-08-29 21:56 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C40A936C-EAE4-4D6D-ABD1-1575D7BDDD8B}
2015-12-18 13:02 - 2013-08-27 19:15 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{CC5157D6-8AC3-4CD7-AF2D-9594D11CD6B7}
2015-12-18 13:02 - 2013-08-23 20:56 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{7DC0A652-DE6A-42B4-BD04-A0E534ECD886}
2015-12-18 13:02 - 2013-07-10 18:20 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{3BDA1251-2785-4157-BB04-6A1CD8D9D31B}
2015-12-18 13:02 - 2013-01-06 14:50 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{452EDE25-826F-4BC3-8F17-1414FED8CAA1}
2015-12-18 13:02 - 2012-04-22 16:54 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{3CD00244-56B9-4F7C-8884-36E5F7171152}
2015-12-18 13:02 - 2012-04-22 16:53 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{3EF49DA9-C714-4437-B0B7-417641151825}
2015-12-18 13:02 - 2012-04-19 20:33 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{D29E9118-571F-4DBE-B37A-EF2B1CD0E95D}
2015-12-18 13:02 - 2012-04-19 20:33 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{B4A91A38-8575-4999-B8E0-67A4F24A8C8A}
2015-12-18 13:02 - 2012-04-19 18:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{FA555F38-5C67-4923-AEDF-97476F9B3FAB}
2015-12-18 13:02 - 2012-04-19 18:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{17CF59FD-0701-4F29-AFBE-50F29328682F}
2015-12-18 13:02 - 2012-04-19 16:22 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{6453155C-FA28-403C-9977-D96F51432C55}
2015-12-18 13:02 - 2012-04-19 16:22 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{5F7B2EAD-B708-44FD-B909-4F54659AB24D}
2015-12-18 13:02 - 2012-04-19 13:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{AC6ADC67-3045-4BF2-9E3B-17672BBC5412}
2015-12-18 13:02 - 2012-04-19 13:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{45B18E01-39E3-414A-962F-20749054F573}
2015-12-18 13:02 - 2012-04-18 15:48 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C3194972-4008-4ADA-8D08-5593323928C1}
2015-12-18 13:02 - 2012-04-18 12:49 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0FCE8852-8EDC-4F97-B510-6E1A0BE33C7A}
2015-12-18 13:02 - 2012-04-17 18:06 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1E1FA7C9-7882-4849-8A29-B920E6E8B661}
2015-12-18 13:02 - 2012-04-17 15:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A70C20AA-7198-47F7-A051-84957DB8CDBB}
2015-12-18 13:02 - 2012-04-15 12:59 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{8CEDE7E0-AAC1-424C-914C-CF27451D88D4}
2015-12-18 13:02 - 2012-04-15 12:58 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{E12E3CC8-B205-43B8-8FBD-43719C98E906}
2015-12-18 13:02 - 2012-04-15 12:58 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{10964C88-4F0A-4AC9-9317-6CECC86CC02B}
2015-12-18 13:02 - 2012-02-13 21:38 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A61DEF39-3189-424E-BE68-83392949968E}
2015-12-18 13:02 - 2011-12-28 11:07 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{5B7C614A-D1B0-46AA-8053-F02FE04FCB91}
2015-12-18 13:02 - 2011-12-28 11:06 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{B98DA433-E4E5-4366-AC7B-D246B6B4A7FE}
2015-12-18 13:02 - 2011-11-26 10:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{D22675CF-1C4C-4451-B889-976D6354FCD2}
2015-12-18 13:02 - 2011-11-26 10:03 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{ACD8B3B8-3DB9-4331-93FC-99AE03212C5B}
2015-12-18 13:02 - 2011-11-25 14:34 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0FCCF4B1-F202-4A38-9D61-2CB97CE2B8BF}
2015-12-18 13:02 - 2011-11-25 14:34 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{066E4FC1-5FA9-4693-B390-53FF6EA9DB1A}
2015-12-18 13:02 - 2011-11-22 22:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{8A5A2872-C31F-47D5-895F-BD9BB56D0081}
2015-12-18 13:02 - 2011-11-22 22:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{5A396690-BE68-4864-A1BA-0B8420F83C76}
2015-12-18 13:02 - 2011-11-21 22:14 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{369EFFF1-8164-4EC1-8117-F2CAA92FB1AD}
2015-12-18 13:02 - 2011-11-21 22:14 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{113EB29D-A485-4E1F-8106-05EDCCE370E8}
2015-12-18 13:02 - 2011-11-19 14:45 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{E8FC14F3-2A66-4BD7-B186-A287879F1BF2}
2015-12-18 13:02 - 2011-11-19 14:45 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{67C1A079-DCFB-49EF-9069-3A5016AA378E}
2015-12-18 13:02 - 2011-11-15 21:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{6800309F-9C2C-4075-B382-E557E06D797A}
2015-12-18 13:02 - 2011-11-15 21:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{39BA3CB5-E6FE-469D-A6CD-BEB7F95AC2C9}
2015-12-18 13:02 - 2011-11-06 14:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{85BE00EB-9864-446E-9E39-7862E493E6D3}
2015-12-18 13:02 - 2011-11-06 14:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{0D36C83B-51DE-4C7A-B43F-BE88B712522D}
2015-12-18 13:02 - 2011-10-13 20:30 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{48C1A7AB-54C3-478E-8B98-088E6B64F807}
2015-12-18 13:02 - 2011-10-13 20:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A483ED25-312C-4284-A836-82396E4DBD4C}
2015-12-18 13:02 - 2011-08-27 12:04 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A071A257-A333-4D54-BEF0-8BD844AC1949}
2015-12-18 13:02 - 2011-08-27 12:04 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{54D30694-C1C0-4C73-A1EB-5D387E7F81DF}
2015-12-18 13:02 - 2011-08-14 12:45 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{AA7BC9B7-4EBA-458C-9BB0-B58F5A76BF43}
2015-12-18 13:02 - 2011-08-13 13:09 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{DEC3144B-B9BF-4F5A-A595-280CE6E6B7ED}
2015-12-18 13:02 - 2011-08-13 13:09 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{06AE41F6-D721-4F2B-9CBC-34FFE06A8B83}
2015-12-18 13:02 - 2011-08-13 11:07 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{32D46DD0-1BC0-4DFD-A226-D98FE865BE19}
2015-12-18 13:02 - 2011-08-13 11:07 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{01B9F043-ACF6-4B7A-A292-8815B8C8C278}
2015-12-18 13:02 - 2011-08-13 01:54 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C7337F7D-A15B-4C5E-934B-D2321C1CF7A4}
2015-12-18 13:02 - 2011-08-13 01:54 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{C32422E7-40D6-4702-ACFC-4500A6E730C4}
2015-12-18 13:02 - 2011-08-13 00:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{A7FBCD05-4151-49FE-8E11-000095831EF3}
2015-12-18 13:02 - 2011-08-13 00:01 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{5D82451C-59AC-4D51-B66F-67ACAA3F3C0D}
2015-12-18 13:02 - 2011-08-12 22:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{86D5C2A8-51B6-46CD-AFC1-D91517604FC3}
2015-12-18 13:02 - 2011-08-12 22:32 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{76B40E38-2578-4FE8-803E-A14B6042C0AD}
2015-12-18 13:02 - 2011-08-11 21:36 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{035EB734-32AA-435A-95EC-576E31DCB7F8}
2015-12-18 13:02 - 2011-08-11 21:36 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{02DF90D1-F177-458A-B75C-17108D80F2C9}
2015-12-18 13:02 - 2011-08-11 19:30 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{58D111E9-89C4-40C3-A9DA-F14E050CA6A3}
2015-12-18 13:02 - 2011-07-22 14:27 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{11FA6E89-6343-4CC5-999C-E324C8D1076C}
2015-12-18 13:02 - 2011-06-30 20:26 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{8C8D2642-70F9-42E8-A6C9-20CB7DF17C95}
2015-12-18 13:02 - 2011-06-30 20:26 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{8BE3F0AF-A036-4B8E-ACDC-A59DFEC26D76}
2015-12-18 13:02 - 2011-06-27 09:29 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\{1A5D1136-8113-4E9C-90F0-5E79B9F8C082}
2015-12-18 10:20 - 2015-12-18 10:21 - 00050438 _____ C:\Users\Guinarwen\Desktop\Addition.txt
2015-12-18 10:19 - 2015-12-19 11:23 - 00029140 _____ C:\Users\Guinarwen\Desktop\FRST.txt
2015-12-18 10:19 - 2015-12-19 11:23 - 00000000 ____D C:\FRST
2015-12-18 09:14 - 2015-12-18 09:36 - 00216542 _____ C:\Windows\ntbtlog.txt
2015-12-17 22:05 - 2015-12-17 21:52 - 04600536 _____ (Avira Operations GmbH & Co. KG) C:\Users\Guinarwen\Downloads\avira-free-antivirus_15-0-15-129_fr_404708.exe
2015-12-17 21:31 - 2015-12-17 21:31 - 00003601 _____ C:\Users\Guinarwen\Desktop\ZHPFixReport.txt
2015-12-17 21:21 - 2015-12-17 21:21 - 00001851 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2015-12-17 21:21 - 2015-12-17 21:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2015-12-17 21:20 - 2015-12-17 21:21 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2015-12-17 14:55 - 2015-12-17 14:56 - 12530872 _____ (MPC-HC Team ) C:\Users\Guinarwen\Downloads\MPC-HC.1.7.10.x86.exe
2015-12-17 14:48 - 2015-12-17 14:48 - 00000992 _____ C:\Users\Guinarwen\Desktop\Photo-Expose-Anton-transfert - Raccourci.lnk
2015-12-17 09:23 - 2015-12-17 09:23 - 00212992 _____ C:\Users\Guinarwen\Documents\Strat-pare-feu-Windows-2015-12-17-09h24.wfw
2015-12-17 00:14 - 2015-12-17 00:14 - 00000000 ____D C:\Users\Guinarwen\Downloads\MAJ vers Windows 10
2015-12-16 10:55 - 2015-12-18 23:29 - 00000000 ____D C:\AdwCleaner
2015-12-16 08:55 - 2015-12-19 10:43 - 00000000 ____D C:\Users\Guinarwen\Desktop\Desinfection PC dec2015
2015-12-15 23:46 - 2014-05-23 10:16 - 00043385 ____R C:\Tempo.zhp
2015-12-15 12:19 - 2015-12-18 22:30 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-12-15 12:19 - 2015-12-18 22:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2015-12-15 12:18 - 2015-12-18 22:30 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2015-12-15 12:18 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-12-15 12:18 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-12-15 12:18 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2015-12-15 11:37 - 2015-12-19 10:44 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\ZHP
2015-12-15 11:26 - 2015-12-15 11:10 - 01943552 _____ C:\Users\Guinarwen\Downloads\ZHPCleaner.exe
2015-12-15 11:26 - 2015-12-15 10:51 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Guinarwen\Downloads\malwarebytes-anti-malware_2-1-8-1057_fr_215092.exe
2015-12-15 09:53 - 2015-12-15 09:53 - 00008732 _____ C:\rk_7A5E.tmp.txt
2015-12-15 09:16 - 2015-12-15 09:16 - 20834376 _____ C:\Users\Guinarwen\Downloads\RogueKiller(1).exe
2015-12-15 08:58 - 2015-12-16 08:54 - 00030848 _____ C:\Windows\system32\Drivers\TrueSight.sys
2015-12-15 08:58 - 2015-12-15 10:02 - 00000000 ____D C:\ProgramData\RogueKiller
2015-12-11 22:21 - 2015-12-11 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2015-12-11 22:13 - 2015-12-11 22:48 - 00000000 ____D C:\xampp
2015-12-11 20:04 - 2015-12-11 20:05 - 112275472 _____ (Bitnami) C:\Users\Guinarwen\Downloads\xampp_5-6-15-1_fr_70674.exe
2015-12-11 19:26 - 2015-12-11 19:27 - 00000000 ____D C:\phpMyAdmin-copies-config
2015-12-11 18:47 - 2015-12-11 18:47 - 10396141 _____ C:\Users\Guinarwen\Downloads\phpMyAdmin-4.5.2-all-languages.zip
2015-12-11 18:10 - 2015-12-11 18:10 - 08169506 _____ C:\Users\Guinarwen\Downloads\wordpress-4.4-fr_FR.zip
2015-12-09 11:35 - 2015-12-09 11:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evernote
2015-12-09 10:09 - 2015-11-20 19:54 - 03170304 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 02609152 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00709632 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-12-09 10:09 - 2015-11-20 19:54 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-12-09 10:09 - 2015-11-20 19:54 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-12-09 10:09 - 2015-11-20 19:54 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-12-09 10:09 - 2015-11-20 19:34 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-12-09 10:09 - 2015-11-20 19:34 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-12-09 10:09 - 2015-11-20 19:34 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-12-09 10:09 - 2015-11-20 19:34 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-12-09 10:09 - 2015-11-20 19:33 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-12-09 10:09 - 2015-11-11 19:53 - 01735680 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2015-12-09 10:09 - 2015-11-10 19:55 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-12-09 10:09 - 2015-11-10 19:55 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-12-09 10:09 - 2015-11-10 19:55 - 01008640 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2015-12-09 10:09 - 2015-11-10 19:39 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-12-09 10:09 - 2015-11-10 19:37 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-12-09 10:09 - 2015-11-10 18:47 - 03211264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-12-09 10:09 - 2015-11-05 20:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\wshrm.dll
2015-12-09 10:09 - 2015-11-05 20:02 - 00014848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshrm.dll
2015-12-09 10:09 - 2015-11-05 20:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-12-09 10:09 - 2015-11-05 20:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-12-09 10:09 - 2015-11-05 10:53 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rmcast.sys
2015-12-09 10:09 - 2015-11-03 20:04 - 00802304 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2015-12-09 10:09 - 2015-11-03 19:56 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2015-12-09 10:09 - 2015-10-09 00:22 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll
2015-12-09 10:09 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL
2015-12-09 10:09 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll
2015-12-09 10:09 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL
2015-12-09 10:09 - 2015-10-09 00:18 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL
2015-12-09 10:09 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll
2015-12-09 10:09 - 2015-10-09 00:18 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL
2015-12-09 10:09 - 2015-10-09 00:17 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll
2015-12-09 10:09 - 2015-10-08 20:13 - 00419928 _____ C:\Windows\SysWOW64\locale.nls
2015-12-09 10:09 - 2015-10-08 19:52 - 00419928 _____ C:\Windows\system32\locale.nls
2015-12-09 10:08 - 2015-11-11 22:12 - 00387792 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-12-09 10:08 - 2015-11-11 21:52 - 00341192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-12-09 10:08 - 2015-11-11 19:53 - 00525312 _____ (Microsoft Corporation) C:\Windows\system32\catsrvut.dll
2015-12-09 10:08 - 2015-11-11 19:39 - 01242624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2015-12-09 10:08 - 2015-11-11 19:39 - 00487936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\catsrvut.dll
2015-12-09 10:08 - 2015-11-11 17:21 - 25837568 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-12-09 10:08 - 2015-11-11 17:00 - 12856832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-12-09 10:08 - 2015-11-11 16:44 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-12-09 10:08 - 2015-11-11 16:44 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-12-09 10:08 - 2015-11-11 16:41 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-12-09 10:08 - 2015-11-11 16:12 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-12-09 10:08 - 2015-11-11 15:57 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-12-09 10:08 - 2015-11-10 01:24 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-12-09 10:08 - 2015-11-10 01:13 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-12-09 10:08 - 2015-11-10 01:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-12-09 10:08 - 2015-11-10 01:12 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-12-09 10:08 - 2015-11-10 01:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-12-09 10:08 - 2015-11-10 01:11 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-12-09 10:08 - 2015-11-10 01:08 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-12-09 10:08 - 2015-11-10 01:06 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-12-09 10:08 - 2015-11-10 01:06 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-12-09 10:08 - 2015-11-10 01:04 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-12-09 10:08 - 2015-11-10 01:03 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-12-09 10:08 - 2015-11-10 01:02 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-12-09 10:08 - 2015-11-10 01:02 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-12-09 10:08 - 2015-11-10 00:50 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-12-09 10:08 - 2015-11-10 00:47 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-12-09 10:08 - 2015-11-10 00:46 - 04514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-12-09 10:08 - 2015-11-10 00:44 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2015-12-09 10:08 - 2015-11-10 00:37 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-12-09 10:08 - 2015-11-10 00:36 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-12-09 10:08 - 2015-11-10 00:36 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-12-09 10:08 - 2015-11-10 00:35 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-12-09 10:08 - 2015-11-10 00:17 - 02011136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-12-09 10:08 - 2015-11-10 00:14 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-12-09 10:08 - 2015-11-10 00:12 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-12-09 10:08 - 2015-11-08 23:33 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-12-09 10:08 - 2015-11-08 23:32 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-12-09 10:08 - 2015-11-08 23:16 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-12-09 10:08 - 2015-11-08 23:15 - 02887168 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-12-09 10:08 - 2015-11-08 23:15 - 00571392 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-12-09 10:08 - 2015-11-08 23:15 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-12-09 10:08 - 2015-11-08 23:15 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-12-09 10:08 - 2015-11-08 23:14 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-12-09 10:08 - 2015-11-08 23:07 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-12-09 10:08 - 2015-11-08 23:06 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-12-09 10:08 - 2015-11-08 23:04 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-12-09 10:08 - 2015-11-08 23:02 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-12-09 10:08 - 2015-11-08 23:01 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-12-09 10:08 - 2015-11-08 23:01 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-12-09 10:08 - 2015-11-08 23:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-12-09 10:08 - 2015-11-08 23:01 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-12-09 10:08 - 2015-11-08 22:52 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-12-09 10:08 - 2015-11-08 22:48 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-12-09 10:08 - 2015-11-08 22:40 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-12-09 10:08 - 2015-11-08 22:35 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-12-09 10:08 - 2015-11-08 22:32 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-12-09 10:08 - 2015-11-08 22:29 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-12-09 10:08 - 2015-11-08 22:18 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-12-09 10:08 - 2015-11-08 22:15 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-12-09 10:08 - 2015-11-08 22:15 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-12-09 10:08 - 2015-11-08 22:14 - 14456832 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-12-09 10:08 - 2015-11-08 22:14 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-12-09 10:08 - 2015-11-08 22:13 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-12-09 10:08 - 2015-11-08 21:53 - 02487808 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-12-09 10:08 - 2015-11-08 21:41 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-12-09 10:08 - 2015-11-08 21:30 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-12-09 10:07 - 2015-11-03 20:04 - 00241664 _____ (Microsoft Corporation) C:\Windows\system32\els.dll
2015-12-09 10:07 - 2015-11-03 19:55 - 00179712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\els.dll
2015-12-02 08:42 - 2015-12-02 08:42 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d12cd5b96a836.job
2015-12-01 21:35 - 2015-12-13 19:14 - 00000000 ____D C:\Users\Guinarwen\Documents\ViberDownloads
2015-12-01 21:26 - 2015-12-19 09:53 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\ViberPC
2015-12-01 21:25 - 2015-12-01 21:25 - 00000971 _____ C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Viber.lnk
2015-12-01 21:25 - 2015-12-01 21:25 - 00000969 _____ C:\Users\Guinarwen\Desktop\Viber.lnk
2015-12-01 21:25 - 2015-12-01 21:25 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber
2015-12-01 21:25 - 2015-12-01 21:25 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\Viber
2015-12-01 21:25 - 2015-12-01 21:25 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\Package Cache
2015-11-30 17:39 - 2015-11-30 17:39 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\FastStone
2015-11-30 17:38 - 2015-11-30 17:38 - 00001107 _____ C:\Users\Public\Desktop\FastStone Image Viewer.lnk
2015-11-30 17:38 - 2015-11-30 17:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer
2015-11-30 17:38 - 2015-11-30 17:38 - 00000000 ____D C:\Program Files (x86)\FastStone Image Viewer
2015-11-30 17:33 - 2015-11-30 17:35 - 05853531 _____ C:\Users\Guinarwen\Downloads\FSViewerSetup55.exe
2015-11-23 18:51 - 2015-11-23 18:51 - 00001111 _____ C:\Users\Guinarwen\Desktop\OLYMPUS Digital Camera Updater.lnk
2015-11-23 18:51 - 2015-11-23 18:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OLYMPUS Digital Camera Updater
2015-11-23 10:57 - 2015-11-23 10:57 - 00000000 ____D C:\Users\Guinarwen\Downloads\AZERTY
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2015-12-19 10:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2015-12-19 10:05 - 2015-11-08 20:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-12-19 10:00 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-12-19 10:00 - 2009-07-14 05:45 - 00018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-12-18 23:47 - 2015-07-08 13:25 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-12-18 23:47 - 2015-07-08 13:25 - 00000000 ___SD C:\Windows\system32\GWX
2015-12-18 23:19 - 2009-08-04 11:03 - 06984970 _____ C:\Windows\system32\perfh00C.dat
2015-12-18 23:19 - 2009-08-04 11:03 - 02249390 _____ C:\Windows\system32\perfc00C.dat
2015-12-18 23:19 - 2009-07-14 06:13 - 00006264 _____ C:\Windows\system32\PerfStringBackup.INI
2015-12-18 13:02 - 2011-08-12 20:37 - 00000000 ____D C:\Program Files (x86)\Freecorder
2015-12-18 10:20 - 2009-07-14 04:20 - 00000000 ____D C:\Windows
2015-12-18 08:22 - 2011-01-12 17:05 - 00000000 ____D C:\ProgramData\Trend Micro
2015-12-17 21:34 - 2013-04-17 11:59 - 00000000 ____D C:\Program Files (x86)\Avira
2015-12-17 21:06 - 2014-08-20 10:00 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-17 21:06 - 2012-06-14 21:33 - 00000000 ____D C:\ProgramData\Avira
2015-12-17 21:01 - 2011-11-26 10:21 - 00562688 ___SH C:\Users\Guinarwen\Thumbs.db
2015-12-17 17:31 - 2011-01-12 16:48 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-12-17 11:18 - 2015-11-11 20:44 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\MPC-HC
2015-12-16 21:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2015-12-16 13:48 - 2015-11-11 14:35 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\CrashDumps
2015-12-15 13:41 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Help
2015-12-15 12:44 - 2015-09-15 08:38 - 00000000 ___RD C:\Users\Guinarwen\Google Drive
2015-12-15 11:26 - 2015-10-30 14:19 - 00000000 __SHD C:\aws
2015-12-15 11:23 - 2011-06-23 10:55 - 00001431 _____ C:\Users\Guinarwen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-12-15 08:42 - 2015-10-30 14:09 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\WebStorage
2015-12-13 20:38 - 2015-09-21 21:01 - 00000295 _____ C:\Users\Guinarwen\Desktop\TXT.txt
2015-12-10 12:19 - 2009-07-14 05:45 - 05151752 _____ C:\Windows\system32\FNTCACHE.DAT
2015-12-09 23:34 - 2012-01-23 21:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-12-09 23:32 - 2013-03-17 00:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-12-09 23:31 - 2013-03-17 00:25 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2015-12-09 23:31 - 2013-03-17 00:25 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2015-12-09 23:27 - 2013-07-13 23:23 - 00000000 ____D C:\Windows\system32\MRT
2015-12-09 23:05 - 2011-07-02 11:14 - 140158008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-12-08 14:11 - 2011-09-15 13:28 - 00000000 ____D C:\Users\Guinarwen\AppData\Local\Paint.NET
2015-12-02 08:42 - 2015-09-15 08:37 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0ef895338d233.job
2015-12-02 08:32 - 2011-04-25 13:04 - 00002988 _____ C:\Windows\system32\AutoRunFilter.ini
2015-11-26 17:37 - 2015-09-15 08:37 - 00002044 _____ C:\Users\Public\Desktop\Google Slides.lnk
2015-11-26 17:37 - 2015-09-15 08:37 - 00002042 _____ C:\Users\Public\Desktop\Google Sheets.lnk
2015-11-26 17:37 - 2015-09-15 08:37 - 00002032 _____ C:\Users\Public\Desktop\Google Docs.lnk
2015-11-26 17:37 - 2015-09-15 08:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-11-23 18:51 - 2015-10-15 13:45 - 00000000 ____D C:\Program Files (x86)\OLYMPUS
2015-11-23 11:31 - 2011-06-23 10:56 - 00168264 _____ C:\Users\Guinarwen\AppData\Local\GDIPFONTCACHEV1.DAT
2015-11-23 11:03 - 2011-06-23 11:02 - 00000000 ____D C:\Users\Guinarwen\AppData\Roaming\Adobe
2015-11-23 11:01 - 2011-08-11 21:34 - 00000000 ____D C:\Users\Guinarwen\Downloads\Polices caractères
2015-11-22 18:41 - 2015-11-09 22:21 - 00000000 ____D C:\Users\Guinarwen\Downloads\Bordel A TRIER DE 5Go
==================== Fichiers à la racine de certains dossiers =======
2012-04-25 21:27 - 2012-05-02 22:58 - 0000121 _____ () C:\Users\Guinarwen\AppData\Roaming\Camdata.ini
2012-04-25 21:27 - 2012-05-02 22:58 - 0000408 _____ () C:\Users\Guinarwen\AppData\Roaming\CamLayout.ini
2012-04-25 21:27 - 2012-05-02 22:58 - 0000408 _____ () C:\Users\Guinarwen\AppData\Roaming\CamShapes.ini
2012-04-25 21:27 - 2012-05-02 22:58 - 0004416 _____ () C:\Users\Guinarwen\AppData\Roaming\CamStudio.cfg
2013-08-07 19:07 - 2014-01-13 22:08 - 0000092 _____ () C:\Users\Guinarwen\AppData\Roaming\WB.CFG
2013-07-18 21:45 - 2014-01-13 22:17 - 0000005 _____ () C:\Users\Guinarwen\AppData\Roaming\WBPU-TTL.DAT
2014-04-14 23:16 - 2014-09-07 19:49 - 0000600 _____ () C:\Users\Guinarwen\AppData\Local\PUTTY.RND
2015-06-29 16:37 - 2015-06-29 16:37 - 0000057 _____ () C:\ProgramData\Ament.ini
2011-01-12 17:02 - 2010-07-07 01:10 - 0131472 _____ () C:\ProgramData\FullRemove.exe
2014-08-19 10:21 - 2014-08-19 11:55 - 0004226 _____ () C:\ProgramData\hpzinstall.log
2011-01-12 16:48 - 2011-01-12 16:49 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2011-01-12 16:48 - 2011-01-12 16:48 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
Certains fichiers dans TEMP:
====================
C:\Users\Guinarwen\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2013-09-11 17:42
==================== Fin de FRST.txt ============================