Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Exécuté par elise (administrateur) sur SHERLOCK (06-04-2016 10:59:41)
Exécuté depuis C:\Users\elise\Downloads
Profils chargés: elise & (Profils disponibles: elise)
Platform: Windows 8.1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(Microsoft Corporation) C:\Windows\Temp\6C43351C-BF05-4D3C-BC8D-F8F4327D8962\DismHost.exe
(AppWork GmbH) C:\Users\elise\AppData\Local\JDownloader 2.0\JDownloader2.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [807392 2016-03-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [YoukuMediaCenter] => "C:\Users\elise\AppData\Roaming\ytmediacenter\YoukuMediaCenter.exe" iku://
HKLM-x32\...\Run: [InstantBurn] => start
HKLM-x32\...\Run: [CLMLServer] => --sr=r_hkcu
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\IBurn.exe [701736 2011-07-11] (CyberLink Corporation.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\...\Run: [UpdatePPShortCut] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-05-25] (cyberlink)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-09-28] (Qualcomm®Atheros®)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{57D4362A-49F0-4B08-8601-94B7E5BF7A08}: [DhcpNameServer] 192.168.48.1
Tcpip\..\Interfaces\{E340E5C5-F523-4ACD-A0E9-94B5D8D37727}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-220448781-1098012972-3520226397-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-02-09] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-02-09] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-02-09] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-03-30] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-02-09] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-30] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102
FF Homepage: hxxps://www.google.fr
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-26] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-26] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-30] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
FF Extension: New XKit - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\@new-xkit.xpi [2016-04-05]
FF Extension: LavaFox V2 - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\info@djzig.com [2016-04-05]
FF Extension: Français Language Pack - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\langpack-fr@firefox.mozilla.org.xpi [2016-04-05]
FF Extension: Video DownloadHelper - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-04-05]
FF Extension: Adblock Plus - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-05]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-19] [non signé]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => non trouvé(e)
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [955736 2016-03-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466504 2016-03-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466504 2016-03-17] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1424880 2016-03-17] (Avira Operations GmbH & Co. KG)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Fichier non signé]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-09-28] (Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG)
S3 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344976 2014-12-15] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-09-28] (Atheros) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4221952 2014-09-09] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2015-03-18] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128664 2016-03-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [137952 2016-03-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [68936 2016-03-17] (Avira Operations GmbH & Co. KG)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-09-28] (Qualcomm Atheros)
R1 CLBStor; C:\Windows\System32\DRIVERS\CLBStor.sys [24560 2011-07-11] (Cyberlink Co.,Ltd.)
R2 CLBUDF; C:\Windows\System32\Drivers\CLBUDF.sys [377840 2011-07-11] (CyberLink Corporation.)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation)
S3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-09-28] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-06] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-04-06 10:59 - 2016-04-06 11:00 - 00019861 _____ C:\Users\elise\Downloads\FRST.txt
2016-04-06 10:59 - 2016-04-06 10:59 - 02374144 _____ (Farbar) C:\Users\elise\Downloads\FRST64.exe
2016-04-06 10:59 - 2016-04-06 10:59 - 00000000 ____D C:\FRST
2016-04-05 21:55 - 2016-04-05 22:27 - 745256330 _____ C:\Users\elise\Downloads\Jeruzalem.2015.FRENCH.BDRip.XViD-FUNKKY.zone-telechargement.com.avi
2016-04-05 17:57 - 2016-04-05 17:57 - 00000000 ____D C:\Users\elise\Desktop\bookmarkbackups
2016-04-03 18:49 - 2016-04-03 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2016-04-03 18:49 - 2016-04-03 18:49 - 00000000 ____D C:\Program Files (x86)\HD Tune
2016-04-03 12:25 - 2016-04-03 12:25 - 00000000 ____D C:\Users\elise\Downloads\London.Boulevard.2011.FRENCH.BRRiP.XviD-AUTOPSiE
2016-04-03 12:06 - 2016-04-03 12:51 - 733877121 _____ C:\Users\elise\Downloads\Love.Rosie.2014.FRENCH.DVDRip.XviD-GLUPS.zone-telechargement.com.avi
2016-04-02 13:16 - 2016-04-02 13:16 - 00004510 _____ C:\Users\elise\AppData\Roaming\CamStudio.cfg
2016-04-02 13:16 - 2016-04-02 13:16 - 00000408 _____ C:\Users\elise\AppData\Roaming\CamShapes.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 00000408 _____ C:\Users\elise\AppData\Roaming\CamLayout.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 00000046 _____ C:\Users\elise\AppData\Roaming\Camdata.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio 2.7
2016-04-02 13:16 - 2016-04-02 13:16 - 00000000 ____D C:\Program Files (x86)\CamStudio 2.7
2016-04-02 13:11 - 2016-04-02 13:11 - 00000000 ____D C:\Users\elise\AppData\Local\ScreenCapture
2016-04-02 13:11 - 2016-04-02 13:11 - 00000000 ____D C:\Users\elise\AppData\Local\Movavi
2016-04-02 13:10 - 2016-04-02 13:10 - 00004908 _____ C:\ProgramData\lbogtyso.zat
2016-04-02 13:10 - 2016-04-02 13:10 - 00000016 _____ C:\ProgramData\mntemp
2016-04-02 13:10 - 2016-04-02 13:10 - 00000000 ____D C:\ProgramData\Movavi Screen Capture 7
2016-04-02 13:10 - 2016-04-02 13:10 - 00000000 ____D C:\ProgramData\Movavi
2016-04-02 13:10 - 2016-04-02 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Screen Capture 7
2016-04-02 13:10 - 2016-04-02 13:10 - 00000000 ____D C:\Program Files (x86)\Movavi Screen Capture 7
2016-03-31 20:39 - 2016-03-31 21:16 - 734953486 _____ C:\Users\elise\Downloads\Dracula.Untold.2014.TRUEFRENCH.DVDRip.XviD-DesTroY.zone-telechargement.com.avi
2016-03-30 18:49 - 2016-03-30 18:49 - 611487013 _____ C:\Windows\MEMORY.DMP
2016-03-30 18:49 - 2016-03-30 18:49 - 00000000 ____D C:\Windows\Minidump
2016-03-28 10:46 - 2016-03-28 10:46 - 00119625 _____ C:\Users\elise\Desktop\Bookmarks 1
2016-03-26 15:13 - 2016-04-06 10:19 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-26 15:13 - 2016-03-26 15:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-26 15:13 - 2016-03-26 15:13 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-26 15:13 - 2016-03-26 15:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-26 15:13 - 2016-03-10 15:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-26 15:13 - 2016-03-10 15:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-26 15:13 - 2016-03-10 15:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-26 14:59 - 2016-03-26 15:01 - 00000000 ____D C:\AdwCleaner
2016-03-25 16:45 - 2016-03-25 17:10 - 1482088996 _____ C:\Users\elise\Downloads\Star.Wars.Episode.VII.The.Force.Awakens.2015.VOSTFR.BRRiP.XviD-ToRo.www.Zone-Telechargement.com.avi
2016-03-24 10:21 - 2016-03-24 10:21 - 00000645 _____ C:\Users\elise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xperia M.lnk
2016-03-21 01:02 - 2016-04-04 12:11 - 00000000 ____D C:\Users\elise\Downloads\YoonMin
2016-03-20 23:35 - 2016-03-20 23:45 - 00000000 ____D C:\Users\elise\Documents\Bookmarks
2016-03-19 15:00 - 2016-03-20 16:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-13 22:27 - 2016-03-14 22:53 - 00022974 _____ C:\Users\elise\Downloads\Yoonmin Fic Rec.ods
2016-03-13 21:26 - 2016-03-13 21:53 - 253531531 _____ C:\Users\elise\Downloads\Média(s).mp4
2016-03-09 22:52 - 2016-03-09 23:06 - 741084742 _____ C:\Users\elise\Downloads\Grave.Encounters.2011.VOSTFR-www.Zone-Telechargement.com.avi
2016-03-09 18:18 - 2016-02-20 17:45 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 18:18 - 2016-02-06 18:58 - 00987648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 18:18 - 2016-02-06 18:32 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 18:18 - 2016-02-05 21:06 - 00046768 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 18:18 - 2016-01-24 20:19 - 00419160 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-03-09 18:18 - 2016-01-24 20:19 - 00378712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-09 18:18 - 2016-01-24 20:19 - 00331608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-03-09 18:18 - 2016-01-24 13:57 - 01335296 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-03-09 18:18 - 2016-01-24 13:45 - 01063424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-03-09 18:18 - 2016-01-15 18:56 - 02487296 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-09 18:18 - 2016-01-15 18:45 - 01482240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-09 18:18 - 2016-01-10 18:41 - 01707008 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-03-09 18:18 - 2016-01-10 18:31 - 01344512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-03-09 18:18 - 2016-01-09 03:49 - 00218448 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-03-09 18:18 - 2016-01-09 03:49 - 00192120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-03-09 18:18 - 2016-01-09 03:38 - 00091992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-03-09 18:18 - 2016-01-07 01:46 - 00148752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-03-09 18:18 - 2016-01-07 01:45 - 00177712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-03-09 18:18 - 2016-01-06 20:25 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-03-09 18:18 - 2016-01-06 18:47 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-03-09 18:18 - 2016-01-05 17:00 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-09 18:18 - 2015-12-30 23:53 - 02017624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 18:18 - 2015-12-30 22:49 - 00470360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-03-09 18:18 - 2015-12-20 16:57 - 00839168 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-03-09 18:18 - 2015-12-20 16:56 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2016-03-09 18:18 - 2015-12-20 16:43 - 00696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-03-09 18:18 - 2015-11-19 16:33 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 18:18 - 2015-11-19 16:26 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-09 09:30 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 09:30 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 09:30 - 2016-02-08 22:29 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-03-09 09:30 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 09:30 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 09:30 - 2016-02-08 22:07 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-03-09 09:30 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 09:30 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 09:30 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 09:30 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 09:30 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 09:30 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 09:30 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 09:30 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 09:30 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 09:30 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 09:30 - 2016-02-08 20:14 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-03-09 09:30 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 09:30 - 2016-02-08 19:42 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-03-09 09:30 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 09:30 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 09:30 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 09:30 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 09:30 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 09:30 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 09:30 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 09:29 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 09:29 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 09:29 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 09:29 - 2016-02-08 19:15 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-03-09 09:27 - 2016-02-12 21:14 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 09:27 - 2016-02-12 17:14 - 03708416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 09:27 - 2016-02-12 16:55 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-03-09 09:27 - 2016-02-12 16:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 09:27 - 2016-02-12 16:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 09:27 - 2016-02-12 16:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 09:27 - 2016-02-12 16:51 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 09:27 - 2016-02-12 16:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 09:27 - 2016-02-12 16:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 09:27 - 2016-02-12 16:48 - 02244096 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 09:27 - 2016-02-12 16:47 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 09:27 - 2016-02-12 16:46 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 09:27 - 2016-02-11 16:21 - 00869576 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-03-09 09:27 - 2016-02-11 16:21 - 00678600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2016-03-09 09:27 - 2016-02-11 16:20 - 00875720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-03-09 09:27 - 2016-02-11 16:20 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2016-03-09 09:27 - 2016-02-06 20:08 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 09:27 - 2016-02-05 21:07 - 00292696 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL
2016-03-09 09:27 - 2016-02-05 21:07 - 00243032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL
2016-03-09 09:27 - 2016-02-05 17:03 - 15432704 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 09:27 - 2016-02-05 17:00 - 13318144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 09:27 - 2016-02-05 16:59 - 07784960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-09 09:27 - 2016-02-05 16:55 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-03-09 09:27 - 2016-02-05 16:48 - 07075840 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-03-09 09:27 - 2016-02-05 16:47 - 05268480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-03-09 09:27 - 2016-02-04 20:18 - 04174336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 09:27 - 2016-02-03 22:37 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-09 09:27 - 2016-02-03 22:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-09 09:27 - 2016-02-03 17:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-03-09 09:27 - 2016-02-03 17:00 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 09:27 - 2016-02-03 17:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 09:27 - 2016-01-31 21:16 - 00148832 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 09:26 - 2016-02-04 20:18 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 09:26 - 2016-02-04 20:12 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 09:26 - 2016-02-04 19:44 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 09:26 - 2016-02-04 19:39 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 09:23 - 2016-02-04 19:24 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 09:23 - 2016-02-04 19:02 - 00483328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-04-06 10:40 - 2015-09-23 20:24 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-06 10:28 - 2015-10-30 11:46 - 00000000 ____D C:\Users\elise\AppData\Local\JDownloader 2.0
2016-04-06 10:24 - 2015-09-23 11:14 - 00003936 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3DF4A0A9-D39D-4C90-A407-23D756401274}
2016-04-06 10:19 - 2015-09-23 11:12 - 00000000 ___RD C:\Users\elise\OneDrive
2016-04-06 10:18 - 2015-09-23 11:08 - 00000165 _____ C:\Users\elise\AppData\Roaming\sp_data.sys
2016-04-06 10:17 - 2015-09-23 11:07 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2016-04-06 00:37 - 2015-09-23 13:48 - 00000000 ____D C:\Users\elise\AppData\Roaming\vlc
2016-04-06 00:15 - 2016-02-13 08:11 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2016-04-05 22:40 - 2015-10-28 10:54 - 00000000 ____D C:\Users\elise\Desktop\CAROTTE
2016-04-05 22:27 - 2015-09-25 22:04 - 03172864 ___SH C:\Users\elise\Downloads\Thumbs.db
2016-04-05 12:46 - 2015-11-03 20:44 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2016-04-05 12:46 - 2015-09-23 11:14 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2016-04-05 12:32 - 2015-10-19 10:00 - 06595072 ___SH C:\Users\elise\Desktop\Thumbs.db
2016-04-04 21:29 - 2015-09-23 16:54 - 00388096 ___SH C:\Users\elise\Documents\Thumbs.db
2016-04-04 20:37 - 2015-11-22 21:48 - 00000000 ____D C:\Users\elise\Desktop\Suga Free
2016-04-04 11:43 - 2015-09-23 23:20 - 00000000 ____D C:\Users\elise\AppData\Local\CrashDumps
2016-04-03 23:49 - 2015-09-23 11:11 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-220448781-1098012972-3520226397-1001
2016-04-03 18:49 - 2015-09-23 16:54 - 00000000 ____D C:\Users\elise\Documents\TVXQ
2016-04-03 17:41 - 2015-09-23 11:05 - 00000000 ____D C:\Users\elise\AppData\Local\Packages
2016-04-02 11:20 - 2015-11-01 23:11 - 00000000 ____D C:\Users\elise\Downloads\Jd
2016-04-01 16:32 - 2015-10-29 16:12 - 00000000 ____D C:\Users\elise\Downloads\BTS
2016-04-01 00:55 - 2014-10-29 14:12 - 00813786 _____ C:\Windows\system32\perfh00C.dat
2016-04-01 00:55 - 2014-10-29 14:12 - 00159832 _____ C:\Windows\system32\perfc00C.dat
2016-04-01 00:55 - 2014-03-18 17:26 - 01824010 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-01 00:55 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-04-01 00:12 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-01 00:09 - 2013-08-22 15:25 - 00786432 ___SH C:\Windows\system32\config\BBI
2016-03-30 19:06 - 2015-09-25 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-30 19:06 - 2015-09-25 00:19 - 00000000 ____D C:\ProgramData\Oracle
2016-03-30 19:06 - 2015-09-25 00:19 - 00000000 ____D C:\Program Files (x86)\Java
2016-03-30 19:05 - 2015-09-25 00:20 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-03-30 19:05 - 2015-09-25 00:20 - 00000000 ____D C:\Users\elise\.oracle_jre_usage
2016-03-30 18:40 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2016-03-28 10:52 - 2016-03-06 19:18 - 00000000 ____D C:\Users\elise\AppData\Roaming\HandBrake
2016-03-27 09:50 - 2015-10-08 20:57 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-26 20:53 - 2015-09-23 20:23 - 00000000 ____D C:\Users\elise\AppData\Local\Adobe
2016-03-26 20:52 - 2015-09-23 20:24 - 00003890 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-26 15:26 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-26 15:26 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-24 22:08 - 2014-10-29 15:02 - 00000000 ____D C:\Windows\Panther
2016-03-24 22:04 - 2016-02-13 16:22 - 00000000 ___HD C:\$WINDOWS.~BT
2016-03-24 21:10 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-24 21:08 - 2015-09-23 11:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-24 21:08 - 2015-09-23 11:02 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-20 16:53 - 2015-09-23 11:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-19 17:29 - 2015-11-22 15:43 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-03-18 23:18 - 2015-11-25 12:00 - 00000000 ____D C:\Users\elise\AppData\Roaming\dvdcss
2016-03-18 22:09 - 2016-03-06 18:52 - 00000000 ____D C:\ProgramData\CyberLink
2016-03-17 17:26 - 2015-09-25 12:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-03-17 17:25 - 2015-09-25 12:31 - 00137952 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2016-03-17 17:25 - 2015-09-25 12:31 - 00128664 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2016-03-17 17:25 - 2015-09-25 12:31 - 00068936 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2016-03-12 22:35 - 2016-02-27 00:35 - 00000000 ____D C:\Users\elise\Downloads\A nommer
2016-03-12 12:55 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2016-03-12 02:11 - 2015-09-27 01:15 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-12 02:10 - 2015-09-26 12:10 - 00000000 ____D C:\Windows\system32\MRT
2016-03-12 02:08 - 2015-09-26 12:10 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-11 17:46 - 2015-09-23 14:13 - 00003096 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-220448781-1098012972-3520226397-1001
2016-03-09 16:56 - 2013-08-22 16:44 - 00517688 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-09 10:28 - 2013-08-22 15:25 - 00000199 _____ C:\Windows\win.ini
2016-03-09 09:22 - 2015-12-09 13:55 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-09 09:22 - 2015-12-09 13:55 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-09 09:22 - 2015-12-09 13:55 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-08 09:00 - 2015-09-27 09:54 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:00 - 2015-09-27 09:54 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-07 01:27 - 2016-03-06 19:18 - 00000882 _____ C:\Users\elise\Desktop\Handbrake.lnk
==================== Fichiers à la racine de certains dossiers =======
2016-04-02 13:16 - 2016-04-02 13:16 - 0000046 _____ () C:\Users\elise\AppData\Roaming\Camdata.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 0000408 _____ () C:\Users\elise\AppData\Roaming\CamLayout.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 0000408 _____ () C:\Users\elise\AppData\Roaming\CamShapes.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 0004510 _____ () C:\Users\elise\AppData\Roaming\CamStudio.cfg
2015-09-23 11:08 - 2016-04-06 10:18 - 0000165 _____ () C:\Users\elise\AppData\Roaming\sp_data.sys
2015-12-17 00:45 - 2015-12-17 01:18 - 0000032 _____ () C:\Users\elise\AppData\Local\temp.tmp
2015-06-14 03:25 - 2015-06-14 03:25 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-04-02 13:10 - 2016-04-02 13:10 - 0004908 _____ () C:\ProgramData\lbogtyso.zat
2016-04-02 13:10 - 2016-04-02 13:10 - 0000016 _____ () C:\ProgramData\mntemp
2014-10-29 08:25 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-10-29 08:25 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-10-29 08:25 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
Certains fichiers dans TEMP:
====================
C:\Users\elise\AppData\Local\Temp\130906718386027240.exe
C:\Users\elise\AppData\Local\Temp\13090671839924212492.exe
C:\Users\elise\AppData\Local\Temp\360InI.dll
C:\Users\elise\AppData\Local\Temp\atdl.exe
C:\Users\elise\AppData\Local\Temp\avgnt.exe
C:\Users\elise\AppData\Local\Temp\Browser_V5.5.7852.9_f_4690_(Build1512022057).exe
C:\Users\elise\AppData\Local\Temp\COMAP.EXE
C:\Users\elise\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\elise\AppData\Local\Temp\InstallOnline_inside.exe
C:\Users\elise\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\elise\AppData\Local\Temp\jre-8u66-windows-au.exe
C:\Users\elise\AppData\Local\Temp\jre-8u71-windows-au.exe
C:\Users\elise\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\elise\AppData\Local\Temp\jre-8u77-windows-au.exe
C:\Users\elise\AppData\Local\Temp\McCSPInstall.dll
C:\Users\elise\AppData\Local\Temp\mccspuninstall.exe
C:\Users\elise\AppData\Local\Temp\mediaOnly_youkuclient_setup_6.7.2.11138.exe
C:\Users\elise\AppData\Local\Temp\OfficeAssist.0744.80.1227.exe
C:\Users\elise\AppData\Local\Temp\proxy_vole5677773754207582024.dll
C:\Users\elise\AppData\Local\Temp\proxy_vole7604126703501441847.dll
C:\Users\elise\AppData\Local\Temp\proxy_vole820240255258933338.dll
C:\Users\elise\AppData\Local\Temp\sqlite3.dll
C:\Users\elise\AppData\Local\Temp\youkuclient_setup_t_itudouuninstall_6.7.5.12118.exe
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-04-03 12:58
==================== Fin de FRST.txt ============================
Exécuté par elise (administrateur) sur SHERLOCK (06-04-2016 10:59:41)
Exécuté depuis C:\Users\elise\Downloads
Profils chargés: elise & (Profils disponibles: elise)
Platform: Windows 8.1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(cyberlink) C:\Program Files (x86)\CyberLink\Shared files\brs.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(Microsoft Corporation) C:\Windows\Temp\6C43351C-BF05-4D3C-BC8D-F8F4327D8962\DismHost.exe
(AppWork GmbH) C:\Users\elise\AppData\Local\JDownloader 2.0\JDownloader2.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2531472 2014-12-13] (NVIDIA Corporation)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [807392 2016-03-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [YoukuMediaCenter] => "C:\Users\elise\AppData\Roaming\ytmediacenter\YoukuMediaCenter.exe" iku://
HKLM-x32\...\Run: [InstantBurn] => start
HKLM-x32\...\Run: [CLMLServer] => --sr=r_hkcu
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\InstantBurn\Win2K\IBurn.exe [701736 2011-07-11] (CyberLink Corporation.)
HKLM-x32\...\Run: [BDRegion] => C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [107816 2011-03-09] (CyberLink)
HKLM-x32\...\Run: [UpdatePPShortCut] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [87336 2010-02-03] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Cyberlink\Shared files\brs.exe [75048 2011-05-25] (cyberlink)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-09-28] (Qualcomm®Atheros®)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.1.11.399\ASUSWSShellExt64.dll [2013-06-26] (ASUS Cloud Corporation.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{57D4362A-49F0-4B08-8601-94B7E5BF7A08}: [DhcpNameServer] 192.168.48.1
Tcpip\..\Interfaces\{E340E5C5-F523-4ACD-A0E9-94B5D8D37727}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-220448781-1098012972-3520226397-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-1\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-220448781-1098012972-3520226397-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-2\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-02-09] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-02-09] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-02-09] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-03-30] (Oracle Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-02-09] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-30] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102
FF Homepage: hxxps://www.google.fr
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_197.dll [2016-03-26] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_197.dll [2016-03-26] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-02-25] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-30] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-30] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
FF Extension: New XKit - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\@new-xkit.xpi [2016-04-05]
FF Extension: LavaFox V2 - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\info@djzig.com [2016-04-05]
FF Extension: Français Language Pack - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\langpack-fr@firefox.mozilla.org.xpi [2016-04-05]
FF Extension: Video DownloadHelper - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-04-05]
FF Extension: Adblock Plus - C:\Users\elise\AppData\Roaming\Mozilla\Firefox\Profiles\slzoquk4.default-1459871815102\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-05]
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}.xpi [2016-03-19] [non signé]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor\saffplg.xpi => non trouvé(e)
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [955736 2016-03-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466504 2016-03-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466504 2016-03-17] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1424880 2016-03-17] (Avira Operations GmbH & Co. KG)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Fichier non signé]
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-09-28] (Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG)
S3 CLKMSVC10_38F51D56; C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe [241648 2011-04-20] (CyberLink)
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1037568 2014-09-18] (Intel Corporation)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [344976 2014-12-15] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2014-10-03] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [156960 2015-02-25] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1701520 2014-12-13] (NVIDIA Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-09-28] (Atheros) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [4221952 2014-09-09] (Qualcomm Atheros Communications, Inc.)
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [73512 2015-03-18] (ASUS Corporation)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [128664 2016-03-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [137952 2016-03-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-15] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [68936 2016-03-17] (Avira Operations GmbH & Co. KG)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-09-28] (Qualcomm Atheros)
R1 CLBStor; C:\Windows\System32\DRIVERS\CLBStor.sys [24560 2011-07-11] (Cyberlink Co.,Ltd.)
R2 CLBUDF; C:\Windows\System32\Drivers\CLBUDF.sys [377840 2011-07-11] (CyberLink Corporation.)
R3 dptf_cpu; C:\Windows\System32\drivers\dptf_cpu.sys [38720 2014-09-18] (Intel Corporation)
R3 dptf_pch; C:\Windows\System32\drivers\dptf_pch.sys [38208 2014-09-18] (Intel Corporation)
S3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-09-28] (Disc Soft Ltd)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 esif_lf; C:\Windows\System32\drivers\esif_lf.sys [216360 2014-09-18] (Intel Corporation)
R0 IntelHSWPcc; C:\Windows\System32\drivers\IntelPcc.sys [79016 2014-08-26] (Intel Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-06] (Malwarebytes)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2015-02-25] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-04-06 10:59 - 2016-04-06 11:00 - 00019861 _____ C:\Users\elise\Downloads\FRST.txt
2016-04-06 10:59 - 2016-04-06 10:59 - 02374144 _____ (Farbar) C:\Users\elise\Downloads\FRST64.exe
2016-04-06 10:59 - 2016-04-06 10:59 - 00000000 ____D C:\FRST
2016-04-05 21:55 - 2016-04-05 22:27 - 745256330 _____ C:\Users\elise\Downloads\Jeruzalem.2015.FRENCH.BDRip.XViD-FUNKKY.zone-telechargement.com.avi
2016-04-05 17:57 - 2016-04-05 17:57 - 00000000 ____D C:\Users\elise\Desktop\bookmarkbackups
2016-04-03 18:49 - 2016-04-03 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune
2016-04-03 18:49 - 2016-04-03 18:49 - 00000000 ____D C:\Program Files (x86)\HD Tune
2016-04-03 12:25 - 2016-04-03 12:25 - 00000000 ____D C:\Users\elise\Downloads\London.Boulevard.2011.FRENCH.BRRiP.XviD-AUTOPSiE
2016-04-03 12:06 - 2016-04-03 12:51 - 733877121 _____ C:\Users\elise\Downloads\Love.Rosie.2014.FRENCH.DVDRip.XviD-GLUPS.zone-telechargement.com.avi
2016-04-02 13:16 - 2016-04-02 13:16 - 00004510 _____ C:\Users\elise\AppData\Roaming\CamStudio.cfg
2016-04-02 13:16 - 2016-04-02 13:16 - 00000408 _____ C:\Users\elise\AppData\Roaming\CamShapes.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 00000408 _____ C:\Users\elise\AppData\Roaming\CamLayout.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 00000046 _____ C:\Users\elise\AppData\Roaming\Camdata.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio 2.7
2016-04-02 13:16 - 2016-04-02 13:16 - 00000000 ____D C:\Program Files (x86)\CamStudio 2.7
2016-04-02 13:11 - 2016-04-02 13:11 - 00000000 ____D C:\Users\elise\AppData\Local\ScreenCapture
2016-04-02 13:11 - 2016-04-02 13:11 - 00000000 ____D C:\Users\elise\AppData\Local\Movavi
2016-04-02 13:10 - 2016-04-02 13:10 - 00004908 _____ C:\ProgramData\lbogtyso.zat
2016-04-02 13:10 - 2016-04-02 13:10 - 00000016 _____ C:\ProgramData\mntemp
2016-04-02 13:10 - 2016-04-02 13:10 - 00000000 ____D C:\ProgramData\Movavi Screen Capture 7
2016-04-02 13:10 - 2016-04-02 13:10 - 00000000 ____D C:\ProgramData\Movavi
2016-04-02 13:10 - 2016-04-02 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Screen Capture 7
2016-04-02 13:10 - 2016-04-02 13:10 - 00000000 ____D C:\Program Files (x86)\Movavi Screen Capture 7
2016-03-31 20:39 - 2016-03-31 21:16 - 734953486 _____ C:\Users\elise\Downloads\Dracula.Untold.2014.TRUEFRENCH.DVDRip.XviD-DesTroY.zone-telechargement.com.avi
2016-03-30 18:49 - 2016-03-30 18:49 - 611487013 _____ C:\Windows\MEMORY.DMP
2016-03-30 18:49 - 2016-03-30 18:49 - 00000000 ____D C:\Windows\Minidump
2016-03-28 10:46 - 2016-03-28 10:46 - 00119625 _____ C:\Users\elise\Desktop\Bookmarks 1
2016-03-26 15:13 - 2016-04-06 10:19 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-03-26 15:13 - 2016-03-26 15:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-03-26 15:13 - 2016-03-26 15:13 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-03-26 15:13 - 2016-03-26 15:13 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-03-26 15:13 - 2016-03-10 15:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-03-26 15:13 - 2016-03-10 15:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-03-26 15:13 - 2016-03-10 15:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-03-26 14:59 - 2016-03-26 15:01 - 00000000 ____D C:\AdwCleaner
2016-03-25 16:45 - 2016-03-25 17:10 - 1482088996 _____ C:\Users\elise\Downloads\Star.Wars.Episode.VII.The.Force.Awakens.2015.VOSTFR.BRRiP.XviD-ToRo.www.Zone-Telechargement.com.avi
2016-03-24 10:21 - 2016-03-24 10:21 - 00000645 _____ C:\Users\elise\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Xperia M.lnk
2016-03-21 01:02 - 2016-04-04 12:11 - 00000000 ____D C:\Users\elise\Downloads\YoonMin
2016-03-20 23:35 - 2016-03-20 23:45 - 00000000 ____D C:\Users\elise\Documents\Bookmarks
2016-03-19 15:00 - 2016-03-20 16:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-03-13 22:27 - 2016-03-14 22:53 - 00022974 _____ C:\Users\elise\Downloads\Yoonmin Fic Rec.ods
2016-03-13 21:26 - 2016-03-13 21:53 - 253531531 _____ C:\Users\elise\Downloads\Média(s).mp4
2016-03-09 22:52 - 2016-03-09 23:06 - 741084742 _____ C:\Users\elise\Downloads\Grave.Encounters.2011.VOSTFR-www.Zone-Telechargement.com.avi
2016-03-09 18:18 - 2016-02-20 17:45 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-03-09 18:18 - 2016-02-20 17:45 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-03-09 18:18 - 2016-02-06 18:58 - 00987648 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-03-09 18:18 - 2016-02-06 18:32 - 00801792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2016-03-09 18:18 - 2016-02-05 21:06 - 00046768 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-03-09 18:18 - 2016-01-24 20:19 - 00419160 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2016-03-09 18:18 - 2016-01-24 20:19 - 00378712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2016-03-09 18:18 - 2016-01-24 20:19 - 00331608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Classpnp.sys
2016-03-09 18:18 - 2016-01-24 13:57 - 01335296 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2016-03-09 18:18 - 2016-01-24 13:45 - 01063424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2016-03-09 18:18 - 2016-01-15 18:56 - 02487296 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2016-03-09 18:18 - 2016-01-15 18:45 - 01482240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2016-03-09 18:18 - 2016-01-10 18:41 - 01707008 _____ (Microsoft Corporation) C:\Windows\system32\comsvcs.dll
2016-03-09 18:18 - 2016-01-10 18:31 - 01344512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comsvcs.dll
2016-03-09 18:18 - 2016-01-09 03:49 - 00218448 _____ (Microsoft Corporation) C:\Windows\system32\rsaenh.dll
2016-03-09 18:18 - 2016-01-09 03:49 - 00192120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rsaenh.dll
2016-03-09 18:18 - 2016-01-09 03:38 - 00091992 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2016-03-09 18:18 - 2016-01-07 01:46 - 00148752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscapi.dll
2016-03-09 18:18 - 2016-01-07 01:45 - 00177712 _____ (Microsoft Corporation) C:\Windows\system32\wscapi.dll
2016-03-09 18:18 - 2016-01-06 20:25 - 00416768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-03-09 18:18 - 2016-01-06 18:47 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\wscsvc.dll
2016-03-09 18:18 - 2016-01-05 17:00 - 00570880 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2016-03-09 18:18 - 2015-12-30 23:53 - 02017624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2016-03-09 18:18 - 2015-12-30 22:49 - 00470360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2016-03-09 18:18 - 2015-12-20 16:57 - 00839168 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2016-03-09 18:18 - 2015-12-20 16:56 - 00616960 _____ (Microsoft Corporation) C:\Windows\system32\msra.exe
2016-03-09 18:18 - 2015-12-20 16:43 - 00696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2016-03-09 18:18 - 2015-11-19 16:33 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2016-03-09 18:18 - 2015-11-19 16:26 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2016-03-09 09:30 - 2016-02-08 23:05 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2016-03-09 09:30 - 2016-02-08 22:39 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2016-03-09 09:30 - 2016-02-08 22:29 - 00099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2016-03-09 09:30 - 2016-02-08 22:28 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2016-03-09 09:30 - 2016-02-08 22:10 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2016-03-09 09:30 - 2016-02-08 22:07 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2016-03-09 09:30 - 2016-02-08 22:05 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-03-09 09:30 - 2016-02-08 22:03 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2016-03-09 09:30 - 2016-02-08 22:02 - 13012480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2016-03-09 09:30 - 2016-02-08 22:02 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2016-03-09 09:30 - 2016-02-08 22:01 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2016-03-09 09:30 - 2016-02-08 21:43 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2016-03-09 09:30 - 2016-02-08 21:39 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2016-03-09 09:30 - 2016-02-08 21:38 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2016-03-09 09:30 - 2016-02-08 20:26 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-03-09 09:30 - 2016-02-08 20:16 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-03-09 09:30 - 2016-02-08 20:14 - 00108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2016-03-09 09:30 - 2016-02-08 20:13 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-03-09 09:30 - 2016-02-08 19:42 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2016-03-09 09:30 - 2016-02-08 19:37 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-03-09 09:30 - 2016-02-08 19:34 - 00798720 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-03-09 09:30 - 2016-02-08 19:33 - 14613504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-03-09 09:30 - 2016-02-08 19:33 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-03-09 09:30 - 2016-02-08 19:19 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-03-09 09:30 - 2016-02-08 19:07 - 01546752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-03-09 09:30 - 2016-02-08 18:55 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-03-09 09:29 - 2016-02-08 22:34 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2016-03-09 09:29 - 2016-02-08 20:27 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-03-09 09:29 - 2016-02-08 19:51 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-03-09 09:29 - 2016-02-08 19:15 - 02880000 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2016-03-09 09:27 - 2016-02-12 21:14 - 00136904 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-03-09 09:27 - 2016-02-12 17:14 - 03708416 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-03-09 09:27 - 2016-02-12 16:55 - 00409088 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2016-03-09 09:27 - 2016-02-12 16:54 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-03-09 09:27 - 2016-02-12 16:54 - 00095744 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2016-03-09 09:27 - 2016-02-12 16:54 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-03-09 09:27 - 2016-02-12 16:51 - 00124928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2016-03-09 09:27 - 2016-02-12 16:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2016-03-09 09:27 - 2016-02-12 16:51 - 00029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2016-03-09 09:27 - 2016-02-12 16:48 - 02244096 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-03-09 09:27 - 2016-02-12 16:47 - 00897024 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2016-03-09 09:27 - 2016-02-12 16:46 - 00726528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2016-03-09 09:27 - 2016-02-11 16:21 - 00869576 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2016-03-09 09:27 - 2016-02-11 16:21 - 00678600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2016-03-09 09:27 - 2016-02-11 16:20 - 00875720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2016-03-09 09:27 - 2016-02-11 16:20 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2016-03-09 09:27 - 2016-02-06 20:08 - 00031744 _____ (Microsoft Corporation) C:\Windows\system32\seclogon.dll
2016-03-09 09:27 - 2016-02-05 21:07 - 00292696 _____ (Microsoft Corporation) C:\Windows\system32\WMASF.DLL
2016-03-09 09:27 - 2016-02-05 21:07 - 00243032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMASF.DLL
2016-03-09 09:27 - 2016-02-05 17:03 - 15432704 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2016-03-09 09:27 - 2016-02-05 17:00 - 13318144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2016-03-09 09:27 - 2016-02-05 16:59 - 07784960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2016-03-09 09:27 - 2016-02-05 16:55 - 05264384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2016-03-09 09:27 - 2016-02-05 16:48 - 07075840 _____ (Microsoft Corporation) C:\Windows\system32\glcndFilter.dll
2016-03-09 09:27 - 2016-02-05 16:47 - 05268480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\glcndFilter.dll
2016-03-09 09:27 - 2016-02-04 20:18 - 04174336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-03-09 09:27 - 2016-02-03 22:37 - 01661576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2016-03-09 09:27 - 2016-02-03 22:36 - 01212248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2016-03-09 09:27 - 2016-02-03 17:09 - 00086016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\olepro32.dll
2016-03-09 09:27 - 2016-02-03 17:00 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\asycfilt.dll
2016-03-09 09:27 - 2016-02-03 17:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\asycfilt.dll
2016-03-09 09:27 - 2016-01-31 21:16 - 00148832 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBSTOR.SYS
2016-03-09 09:26 - 2016-02-04 20:18 - 00358912 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-03-09 09:26 - 2016-02-04 20:12 - 00044032 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-03-09 09:26 - 2016-02-04 19:44 - 00301568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2016-03-09 09:26 - 2016-02-04 19:39 - 00035840 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2016-03-09 09:23 - 2016-02-04 19:24 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\mfds.dll
2016-03-09 09:23 - 2016-02-04 19:02 - 00483328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfds.dll
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-04-06 10:40 - 2015-09-23 20:24 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-06 10:28 - 2015-10-30 11:46 - 00000000 ____D C:\Users\elise\AppData\Local\JDownloader 2.0
2016-04-06 10:24 - 2015-09-23 11:14 - 00003936 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{3DF4A0A9-D39D-4C90-A407-23D756401274}
2016-04-06 10:19 - 2015-09-23 11:12 - 00000000 ___RD C:\Users\elise\OneDrive
2016-04-06 10:18 - 2015-09-23 11:08 - 00000165 _____ C:\Users\elise\AppData\Roaming\sp_data.sys
2016-04-06 10:17 - 2015-09-23 11:07 - 00000000 ____D C:\ProgramData\ASUS Smart Gesture
2016-04-06 00:37 - 2015-09-23 13:48 - 00000000 ____D C:\Users\elise\AppData\Roaming\vlc
2016-04-06 00:15 - 2016-02-13 08:11 - 00003490 _____ C:\Windows\System32\Tasks\AutoKMS
2016-04-05 22:40 - 2015-10-28 10:54 - 00000000 ____D C:\Users\elise\Desktop\CAROTTE
2016-04-05 22:27 - 2015-09-25 22:04 - 03172864 ___SH C:\Users\elise\Downloads\Thumbs.db
2016-04-05 12:46 - 2015-11-03 20:44 - 00003474 _____ C:\Windows\System32\Tasks\ASUS Live Update1
2016-04-05 12:46 - 2015-09-23 11:14 - 00003464 _____ C:\Windows\System32\Tasks\ASUS Live Update2
2016-04-05 12:32 - 2015-10-19 10:00 - 06595072 ___SH C:\Users\elise\Desktop\Thumbs.db
2016-04-04 21:29 - 2015-09-23 16:54 - 00388096 ___SH C:\Users\elise\Documents\Thumbs.db
2016-04-04 20:37 - 2015-11-22 21:48 - 00000000 ____D C:\Users\elise\Desktop\Suga Free
2016-04-04 11:43 - 2015-09-23 23:20 - 00000000 ____D C:\Users\elise\AppData\Local\CrashDumps
2016-04-03 23:49 - 2015-09-23 11:11 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-220448781-1098012972-3520226397-1001
2016-04-03 18:49 - 2015-09-23 16:54 - 00000000 ____D C:\Users\elise\Documents\TVXQ
2016-04-03 17:41 - 2015-09-23 11:05 - 00000000 ____D C:\Users\elise\AppData\Local\Packages
2016-04-02 11:20 - 2015-11-01 23:11 - 00000000 ____D C:\Users\elise\Downloads\Jd
2016-04-01 16:32 - 2015-10-29 16:12 - 00000000 ____D C:\Users\elise\Downloads\BTS
2016-04-01 00:55 - 2014-10-29 14:12 - 00813786 _____ C:\Windows\system32\perfh00C.dat
2016-04-01 00:55 - 2014-10-29 14:12 - 00159832 _____ C:\Windows\system32\perfc00C.dat
2016-04-01 00:55 - 2014-03-18 17:26 - 01824010 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-01 00:55 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf
2016-04-01 00:12 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-01 00:09 - 2013-08-22 15:25 - 00786432 ___SH C:\Windows\system32\config\BBI
2016-03-30 19:06 - 2015-09-25 00:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-03-30 19:06 - 2015-09-25 00:19 - 00000000 ____D C:\ProgramData\Oracle
2016-03-30 19:06 - 2015-09-25 00:19 - 00000000 ____D C:\Program Files (x86)\Java
2016-03-30 19:05 - 2015-09-25 00:20 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2016-03-30 19:05 - 2015-09-25 00:20 - 00000000 ____D C:\Users\elise\.oracle_jre_usage
2016-03-30 18:40 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF
2016-03-28 10:52 - 2016-03-06 19:18 - 00000000 ____D C:\Users\elise\AppData\Roaming\HandBrake
2016-03-27 09:50 - 2015-10-08 20:57 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-26 20:53 - 2015-09-23 20:23 - 00000000 ____D C:\Users\elise\AppData\Local\Adobe
2016-03-26 20:52 - 2015-09-23 20:24 - 00003890 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-03-26 15:26 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-03-26 15:26 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness
2016-03-24 22:08 - 2014-10-29 15:02 - 00000000 ____D C:\Windows\Panther
2016-03-24 22:04 - 2016-02-13 16:22 - 00000000 ___HD C:\$WINDOWS.~BT
2016-03-24 21:10 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp
2016-03-24 21:08 - 2015-09-23 11:02 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2016-03-24 21:08 - 2015-09-23 11:02 - 00000000 ___SD C:\Windows\system32\GWX
2016-03-20 16:53 - 2015-09-23 11:16 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-03-19 17:29 - 2015-11-22 15:43 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2016-03-18 23:18 - 2015-11-25 12:00 - 00000000 ____D C:\Users\elise\AppData\Roaming\dvdcss
2016-03-18 22:09 - 2016-03-06 18:52 - 00000000 ____D C:\ProgramData\CyberLink
2016-03-17 17:26 - 2015-09-25 12:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-03-17 17:25 - 2015-09-25 12:31 - 00137952 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2016-03-17 17:25 - 2015-09-25 12:31 - 00128664 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2016-03-17 17:25 - 2015-09-25 12:31 - 00068936 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2016-03-12 22:35 - 2016-02-27 00:35 - 00000000 ____D C:\Users\elise\Downloads\A nommer
2016-03-12 12:55 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache
2016-03-12 02:11 - 2015-09-27 01:15 - 00000000 ____D C:\Windows\system32\appraiser
2016-03-12 02:10 - 2015-09-26 12:10 - 00000000 ____D C:\Windows\system32\MRT
2016-03-12 02:08 - 2015-09-26 12:10 - 143659408 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-03-11 17:46 - 2015-09-23 14:13 - 00003096 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-220448781-1098012972-3520226397-1001
2016-03-09 16:56 - 2013-08-22 16:44 - 00517688 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-09 10:28 - 2013-08-22 15:25 - 00000199 _____ C:\Windows\win.ini
2016-03-09 09:22 - 2015-12-09 13:55 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-03-09 09:22 - 2015-12-09 13:55 - 00372224 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-03-09 09:22 - 2015-12-09 13:55 - 00325632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2016-03-08 09:00 - 2015-09-27 09:54 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-03-08 09:00 - 2015-09-27 09:54 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-03-07 01:27 - 2016-03-06 19:18 - 00000882 _____ C:\Users\elise\Desktop\Handbrake.lnk
==================== Fichiers à la racine de certains dossiers =======
2016-04-02 13:16 - 2016-04-02 13:16 - 0000046 _____ () C:\Users\elise\AppData\Roaming\Camdata.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 0000408 _____ () C:\Users\elise\AppData\Roaming\CamLayout.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 0000408 _____ () C:\Users\elise\AppData\Roaming\CamShapes.ini
2016-04-02 13:16 - 2016-04-02 13:16 - 0004510 _____ () C:\Users\elise\AppData\Roaming\CamStudio.cfg
2015-09-23 11:08 - 2016-04-06 10:18 - 0000165 _____ () C:\Users\elise\AppData\Roaming\sp_data.sys
2015-12-17 00:45 - 2015-12-17 01:18 - 0000032 _____ () C:\Users\elise\AppData\Local\temp.tmp
2015-06-14 03:25 - 2015-06-14 03:25 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-04-02 13:10 - 2016-04-02 13:10 - 0004908 _____ () C:\ProgramData\lbogtyso.zat
2016-04-02 13:10 - 2016-04-02 13:10 - 0000016 _____ () C:\ProgramData\mntemp
2014-10-29 08:25 - 2012-09-07 13:40 - 0000256 _____ () C:\ProgramData\SetStretch.cmd
2014-10-29 08:25 - 2009-07-22 12:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe
2014-10-29 08:25 - 2012-09-07 13:37 - 0000103 _____ () C:\ProgramData\SetStretch.VBS
Certains fichiers dans TEMP:
====================
C:\Users\elise\AppData\Local\Temp\130906718386027240.exe
C:\Users\elise\AppData\Local\Temp\13090671839924212492.exe
C:\Users\elise\AppData\Local\Temp\360InI.dll
C:\Users\elise\AppData\Local\Temp\atdl.exe
C:\Users\elise\AppData\Local\Temp\avgnt.exe
C:\Users\elise\AppData\Local\Temp\Browser_V5.5.7852.9_f_4690_(Build1512022057).exe
C:\Users\elise\AppData\Local\Temp\COMAP.EXE
C:\Users\elise\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
C:\Users\elise\AppData\Local\Temp\InstallOnline_inside.exe
C:\Users\elise\AppData\Local\Temp\jre-8u65-windows-au.exe
C:\Users\elise\AppData\Local\Temp\jre-8u66-windows-au.exe
C:\Users\elise\AppData\Local\Temp\jre-8u71-windows-au.exe
C:\Users\elise\AppData\Local\Temp\jre-8u73-windows-au.exe
C:\Users\elise\AppData\Local\Temp\jre-8u77-windows-au.exe
C:\Users\elise\AppData\Local\Temp\McCSPInstall.dll
C:\Users\elise\AppData\Local\Temp\mccspuninstall.exe
C:\Users\elise\AppData\Local\Temp\mediaOnly_youkuclient_setup_6.7.2.11138.exe
C:\Users\elise\AppData\Local\Temp\OfficeAssist.0744.80.1227.exe
C:\Users\elise\AppData\Local\Temp\proxy_vole5677773754207582024.dll
C:\Users\elise\AppData\Local\Temp\proxy_vole7604126703501441847.dll
C:\Users\elise\AppData\Local\Temp\proxy_vole820240255258933338.dll
C:\Users\elise\AppData\Local\Temp\sqlite3.dll
C:\Users\elise\AppData\Local\Temp\youkuclient_setup_t_itudouuninstall_6.7.5.12118.exe
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-04-03 12:58
==================== Fin de FRST.txt ============================