cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:13-04-2016
Exécuté par space (administrateur) sur SPACE-PC (13-04-2016 20:46:30)
Exécuté depuis C:\Users\space\Desktop
Profils chargés: space (Profils disponibles: space)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Oppoos.com) C:\Program Files (x86)\Genie Soft\Genie Wifi\GenieWifiService.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Microsoft Corp.) C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(CybelSoft) C:\Program Files\ma-config.com\MaConfigAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\ccSvcHst.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TechSmith Corporation) C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\ccSvcHst.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avpui.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Joyent, Inc) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Symantec Corporation) C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\SymcPCCULaunchSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\plugin-nm-server.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13631704 2013-06-28] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [BLEServicesCtrl] => C:\Program Files (x86)\Intel\Bluetooth\BleServicesCtrl.exe [184112 2012-09-17] (Intel Corporation)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Bing Bar] => C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\mswinext.exe [243544 2010-04-27] (Microsoft Corp.)
HKLM-x32\...\Run: [Microsoft Default Manager] => C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe [288088 2009-11-11] (Microsoft Corporation)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2312896 2016-02-12] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3898960 2015-04-20] (Tonec Inc.)
HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\Run: [GoogleChromeAutoLaunch_618D2F99882999688E6E590BBFC48950] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [874648 2016-04-06] (Google Inc.)
HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\Policies\Explorer: []
HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\MountPoints2: E - E:\hbcd\wintools\autorun.exe
HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\MountPoints2: {ab3add1b-7b82-11e4-a3c1-806e6f6e6963} - I:\hbcd\wintools\autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2015-07-26] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Pas de fichier
ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2014-04-21] (Tonec Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2015-10-01]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iSCTsysTray.lnk [2014-02-15]
ShortcutTarget: iSCTsysTray.lnk -> C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTsysTray.exe (Intel Corporation)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{9E09659B-2CEB-4C78-AB17-2E78E0D1FC17}: [NameServer] 4.2.2.4,4.2.2.3
Tcpip\..\Interfaces\{9E09659B-2CEB-4C78-AB17-2E78E0D1FC17}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-02-21] (Internet Download Manager, Tonec Inc.)
BHO: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-19] (Google Inc.)
BHO: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\x64\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-02-21] (Internet Download Manager, Tonec Inc.)
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: Virtual Keyboard Plugin -> {4A66AD60-A03D-4D01-86F0-5F0F7C0EF1AD} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-01-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-23] (Oracle Corporation)
BHO-x32: Programme d’aide de l’Assistant de connexion au compte Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Content Blocker Plugin -> {93BC2EA7-2F17-4729-948A-D2E03FFB2412} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-19] (Google Inc.)
BHO-x32: Safe Money Plugin -> {AB379017-4C03-4E00-8EDF-E6D6AF7CCF82} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\IEExt\ie_plugin.dll [2016-03-03] (Kaspersky Lab ZAO)
BHO-x32: Bing Bar BHO -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-23] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-19] (Google Inc.)
Toolbar: HKLM-x32 - @C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll,-100 - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-19] (Google Inc.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\space\AppData\Roaming\Mozilla\Firefox\Profiles\8zim8t3w.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-07] ()
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-02-12] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-07] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2010-12-11] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.0.72 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-05-13] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-05-13] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-23] (Oracle Corporation)
FF Plugin-x32: @kaspersky.com/content_blocker_663BE8 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2016-03-03] ()
FF Plugin-x32: @kaspersky.com/online_banking_08806E -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2016-03-03] ()
FF Plugin-x32: @kaspersky.com/virtual_keyboard_074028 -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2016-03-03] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\3.0.40818.0\npctrl.dll [2009-08-17] ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpWinExt,version=5.0 -> C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\npwinext.dll [2010-04-27] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-12-13] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-12-13] (NVIDIA Corporation)
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [2015-08-18] ( Garena)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-12-17] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-02-12] (Adobe Systems)
FF Plugin HKU\S-1-5-21-3992479630-2482588009-2382292733-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\space\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-27] (Unity Technologies ApS)
FF Extension: Test Pilot - C:\Users\space\AppData\Roaming\Mozilla\Firefox\Profiles\8zim8t3w.default\extensions\testpilot@labs.mozilla.com.xpi [2015-05-28]
FF Extension: Dangerous Websites Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com [2016-03-03]
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com [2016-03-03]
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com [2016-03-03]
FF HKLM-x32\...\Firefox\Extensions: [msntoolbar@msn.com] - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox
FF Extension: Bing Bar - C:\Program Files (x86)\MSN Toolbar\Platform\5.0.1449.0\Firefox [2015-09-30] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [{27182e60-b5f3-411c-b545-b44205977502}] - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension
FF Extension: Search Helper Extension - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension [2015-09-30] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2015-10-01] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [content_blocker_663BE8@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard_074028@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking_08806E@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\FFExt\online_banking@kaspersky.com
FF HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\space\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\space\AppData\Roaming\IDM\idmmzcc5 [2016-04-13] [non signé]
FF HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF HKU\S-1-5-21-3992479630-2482588009-2382292733-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\space\AppData\Roaming\IDM\idmmzcc5
StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 10\firefox.exe

Chrome:
=======
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\ppGoogleNaClPluginChrome.dll => Pas de fichier
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\pdf.dll => Pas de fichier
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.112\gcswf32.dll => Pas de fichier
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll => Pas de fichier
CHR Plugin: (Google Earth Plugin) - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll => Pas de fichier
CHR Profile: C:\Users\space\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\space\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\space\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]
CHR Extension: (Recherche Google) - C:\Users\space\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Kaspersky Protection) - C:\Users\space\AppData\Local\Google\Chrome\User Data\Default\Extensions\dbhjdbfgekjfcfkkfjjmlmojhbllhbho [2015-12-26]
CHR Extension: (ZenMate VPN - Sécurité internet & Unblock) - C:\Users\space\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2016-03-09]
CHR Extension: (AdBlock) - C:\Users\space\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-03-18]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\space\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Gmail) - C:\Users\space\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-04-20]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-04-20]
CHR HKLM-x32\...\Chrome\Extension: [dbhjdbfgekjfcfkkfjjmlmojhbllhbho] - hxxps://chrome.google.com/webstore/detail/dbhjdbfgekjfcfkkfjjmlmojhbllhbho
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-04-20]

==================== Services (Avec liste blanche) ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [693440 2016-01-28] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2021592 2016-04-05] (Adobe Systems, Incorporated)
R2 AVP15.0.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 15.0.2\avp.exe [194000 2015-12-25] (Kaspersky Lab ZAO)
S3 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [433784 2015-06-16] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [413304 2015-06-16] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [831096 2015-07-21] (BlueStack Systems, Inc.)
R2 GenieWifiService; C:\Program Files (x86)\Genie Soft\Genie Wifi\GenieWifiService.exe [51352 2015-03-05] (Oppoos.com) [Fichier non signé]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Fichier non signé]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Fichier non signé]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Fichier non signé]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [732160 2012-12-10] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [803872 2012-12-10] (Intel(R) Corporation)
S2 ISCTAgent; C:\Program Files\Intel\Intel(R) Smart Connect Technology Agent\iSCTAgent.exe [149032 2012-10-22] ()
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-13] (Intel Corporation)
R2 MaConfigAgent; C:\Program Files\ma-config.com\MaConfigAgent.exe [2820424 2014-10-15] (CybelSoft)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 Norton PC Checkup Application Launcher; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\SymcPCCULaunchSvc.exe [123320 2012-08-13] (Symantec Corporation)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3559240 2014-11-23] (INCA Internet Co., Ltd.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
R2 PCCUJobMgr; C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.18.16\ccSvcHst.exe [126392 2012-08-13] (Symantec Corporation)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5419792 2014-11-28] (TeamViewer GmbH)
R2 TechSmith Uploader Service; C:\Program Files (x86)\Common Files\TechSmith Shared\Uploader\UploaderService.exe [3408384 2015-01-26] (TechSmith Corporation) [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 appliand; C:\Windows\System32\DRIVERS\appliand.sys [33888 2010-06-24] (Applian Technologies Inc.)
R3 appliandMP; C:\Windows\System32\DRIVERS\appliand.sys [33888 2010-06-24] (Applian Technologies Inc.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [145528 2015-06-16] (BlueStack Systems)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [132920 2013-03-25] (Motorola Solutions, Inc.)
R0 cm_km_w; C:\Windows\System32\DRIVERS\cm_km_w.sys [247016 2015-12-25] (Kaspersky Lab UK Ltd)
S3 DrvAgent64; C:\Windows\SysWOW64\Drivers\DrvAgent64.SYS [13824 2015-03-20] (Phoenix Technologies) [Fichier non signé]
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [20968 2012-10-22] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [19944 2012-10-22] ()
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46016 2012-10-22] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [478392 2016-03-03] (Kaspersky Lab ZAO)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [64368 2015-12-25] (Kaspersky Lab ZAO)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [159960 2015-12-25] (Kaspersky Lab ZAO)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [227000 2016-03-03] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [843168 2016-03-03] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [39280 2015-12-25] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [49008 2016-03-03] (Kaspersky Lab ZAO)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [47992 2016-03-03] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [24944 2015-12-25] (Kaspersky Lab ZAO)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [65208 2015-12-25] (Kaspersky Lab ZAO)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [89272 2016-03-03] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [190648 2015-12-25] (Kaspersky Lab ZAO)
S3 ma-config_amd64; C:\Program Files\ma-config.com\Drivers\ma-config_amd64.sys [17568 2014-02-24] (CybelSoft)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-04-09] ()
S3 WPRO_41_2001; C:\Windows\System32\drivers\WPRO_41_2001.sys [34752 2014-08-06] ()
S3 gkernel; \??\C:\Users\space\AppData\Local\Temp\gkernel.sys [X]
U4 klkbdflt2; system32\DRIVERS\klkbdflt2.sys [X]
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 vmci; \SystemRoot\system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-04-13 20:46 - 2016-04-13 20:47 - 00033452 _____ C:\Users\space\Desktop\FRST.txt
2016-04-13 20:45 - 2016-04-13 20:46 - 00000000 ____D C:\FRST
2016-04-13 20:43 - 2016-04-13 20:44 - 02375168 _____ (Farbar) C:\Users\space\Desktop\FRST64.exe
2016-04-13 19:53 - 2016-04-13 19:53 - 00001175 _____ C:\Users\space\Desktop\ZHPFixReport.txt
2016-04-13 19:42 - 2016-04-13 19:42 - 00000000 ____H C:\ProgramData\cm-lock
2016-04-13 19:41 - 2016-04-13 19:41 - 00003476 _____ C:\Windows\System32\Tasks\Garena+ Plugin Host Service
2016-04-13 14:18 - 2016-04-13 14:19 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-04-13 14:18 - 2016-04-13 14:18 - 00001863 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2016-04-13 14:17 - 2016-04-13 14:18 - 03521617 _____ (Nicolas Coolman ) C:\Users\space\Downloads\ZHPFix.exe
2016-04-12 20:32 - 2016-04-12 20:32 - 00165150 _____ C:\Users\space\Desktop\ZHPDiag1.txt
2016-04-12 20:26 - 2016-04-12 20:26 - 02185728 _____ C:\Users\space\ZHPDiag3.exe
2016-04-11 12:04 - 2016-04-11 12:04 - 00000000 ____D C:\Users\space\Downloads\Nouveau dossier
2016-04-09 21:25 - 2016-04-09 21:25 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-04-09 21:24 - 2016-04-09 22:10 - 00000000 ____D C:\ProgramData\RogueKiller
2016-04-07 22:22 - 2016-04-12 21:19 - 00000000 ____D C:\Users\space\AppData\LocalLow\HPAppData
2016-04-06 21:59 - 2016-04-12 20:31 - 00165147 _____ C:\Users\space\Desktop\ZHPDiag.txt
2016-04-06 21:53 - 2016-04-12 20:26 - 00000629 _____ C:\Users\space\Desktop\ZHPDiag.lnk
2016-04-06 21:50 - 2016-04-06 21:50 - 02179072 _____ C:\Users\space\Downloads\ZHPDiag3.exe
2016-04-06 19:42 - 2016-04-06 19:47 - 00007603 _____ C:\Users\space\AppData\Local\Resmon.ResmonCfg
2016-04-06 17:55 - 2016-04-06 17:55 - 00001620 _____ C:\Users\space\Desktop\11.txt
2016-04-06 16:34 - 2016-04-06 17:54 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-04-06 16:34 - 2016-04-06 16:34 - 00001116 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-04-06 16:34 - 2016-04-06 16:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-04-06 16:34 - 2016-04-06 16:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-04-06 16:34 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-04-06 16:34 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-04-06 16:34 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-04-05 19:39 - 2016-04-05 19:41 - 03119168 _____ C:\Users\space\Downloads\adwcleaner_5.109.exe
2016-04-04 20:39 - 2016-04-04 20:39 - 00009238 _____ C:\Users\space\Desktop\JRT.txt
2016-04-01 13:54 - 2016-04-01 13:54 - 00000000 ____D C:\Users\space\Documents\SelfMV
2016-04-01 13:54 - 2016-04-01 13:54 - 00000000 ____D C:\Users\Public\Documents\NativeFus_Log
2016-04-01 13:53 - 2016-04-01 13:54 - 00000000 ____D C:\Users\space\AppData\Roaming\Samsung
2016-04-01 13:53 - 2016-04-01 13:53 - 00001983 _____ C:\Users\Public\Desktop\Samsung Kies 3.lnk
2016-04-01 13:53 - 2016-04-01 13:53 - 00000000 ____D C:\Users\space\Documents\samsung
2016-04-01 13:53 - 2016-04-01 13:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2016-04-01 13:53 - 2016-04-01 13:53 - 00000000 ____D C:\Program Files (x86)\Samsung
2016-04-01 13:53 - 2014-05-07 17:42 - 00144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\Windows\SysWOW64\secman.dll
2016-04-01 13:38 - 2016-04-01 13:38 - 00001201 _____ C:\Users\Public\Desktop\Genie Wifi.lnk
2016-04-01 13:32 - 2016-04-01 20:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genie Soft
2016-04-01 13:32 - 2016-04-01 14:38 - 00000000 ____D C:\Users\space\Documents\Genie Soft
2016-04-01 13:32 - 2016-04-01 13:38 - 00000000 ____D C:\Program Files (x86)\Genie Soft
2016-04-01 13:28 - 2016-04-01 13:28 - 00000000 ____D C:\Users\Public\Documents\GenieSoft
2016-03-31 23:53 - 2016-03-31 23:53 - 00003248 _____ C:\Windows\System32\Tasks\{7E040E47-A1D3-4C25-AE3D-97025217D064}
2016-03-31 19:44 - 2016-03-31 19:44 - 00000000 ____D C:\Users\space\AppData\Roaming\PDAppFlex
2016-03-31 02:38 - 2016-03-31 02:38 - 00000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecs
2016-03-31 02:03 - 2016-03-31 02:03 - 00001122 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2015.lnk
2016-03-31 02:03 - 2016-03-31 02:03 - 00000000 ____D C:\Users\space\Documents\Adobe
2016-03-30 23:48 - 2016-03-30 23:48 - 00001018 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Animate CC 2015.lnk
2016-03-30 20:48 - 2016-04-02 11:26 - 00000000 ___RD C:\Users\space\Creative Cloud Files
2016-03-30 20:08 - 2016-03-30 20:08 - 00001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-03-30 20:08 - 2016-03-30 20:08 - 00001223 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2016-03-30 19:21 - 2016-03-30 19:22 - 00692416 _____ (Adobe Systems Incorporated) C:\Users\space\Downloads\CreativeCloudSet-Up.exe
2016-03-30 12:58 - 2016-03-21 15:53 - 734539136 _____ C:\Users\space\Documents\مترجم بجودة عالية - Bluray 720p - Daddy's Home (2016) فيلم.mp4
2016-03-30 12:57 - 2016-03-28 15:03 - 838938537 _____ C:\Users\space\Documents\مترجم بجودة عالية - Bluray 720p - Ted (2012) الفيلم الاجنبي.mp4
2016-03-30 12:56 - 2016-03-28 17:34 - 839127198 _____ C:\Users\space\Documents\مترجم بجودة عالية - Bluray 720p - Ted 2 (2015) فيلم.mp4
2016-03-30 12:56 - 2016-03-21 09:47 - 239595710 _____ C:\Users\space\Documents\مشاهدة فيلم The 5th Wave 2016 مترجم اون لاين.flv
2016-03-30 12:55 - 2016-03-17 22:56 - 477172436 _____ C:\Users\space\Documents\the Hangover.mp4
2016-03-20 12:22 - 2016-03-20 18:29 - 01766791 _____ C:\Users\space\Documents\eng.pptx
2016-03-20 12:13 - 2016-03-20 12:13 - 00000000 ____D C:\Users\space\Downloads\20160320040942
2016-03-18 20:41 - 2016-03-18 20:43 - 00051808 _____ C:\Users\space\Documents\20160318_144408.mp4.sfk
2016-03-18 20:41 - 2016-03-18 20:43 - 00016896 _____ C:\Users\space\Documents\20160318_143907.mp4.sfk
2016-03-18 20:41 - 2016-03-18 20:43 - 00015248 _____ C:\Users\space\Documents\20160318_145118.mp4.sfk
2016-03-18 20:41 - 2016-03-18 20:43 - 00013456 _____ C:\Users\space\Documents\20160318_143534.mp4.sfk
2016-03-18 20:41 - 2016-03-18 20:43 - 00009808 _____ C:\Users\space\Documents\20160318_142621.mp4.sfk
2016-03-18 20:41 - 2016-03-18 20:43 - 00009296 _____ C:\Users\space\Documents\20160318_144310.mp4.sfk
2016-03-18 20:41 - 2016-03-18 20:43 - 00005216 _____ C:\Users\space\Documents\20160318_145014.mp4.sfk
2016-03-18 20:41 - 2016-03-18 20:43 - 00004928 _____ C:\Users\space\Documents\20160318_144227.mp4.sfk
2016-03-18 20:37 - 2016-03-18 20:37 - 00000000 ____D C:\Users\space\AppData\Roaming\Publish Providers
2016-03-18 20:36 - 2016-03-18 20:36 - 00002464 _____ C:\Users\space\Documents\Register Movie Studio Platinum.htm
2016-03-18 20:14 - 2016-03-18 20:40 - 00000000 ____D C:\Users\space\Documents\Movie Studio Platinum 13.0 Projects
2016-03-18 19:37 - 2016-03-18 19:37 - 00000000 ____D C:\ProgramData\Apple
2016-03-18 19:36 - 2016-03-18 20:05 - 00000000 ____D C:\Users\space\Documents\AirDroid
2016-03-18 19:36 - 2016-03-18 19:37 - 00000000 ____D C:\Users\Public\Documents\AirDroid
2016-03-18 19:20 - 2016-03-18 19:20 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_btmaux_01009.Wdf
2016-03-18 14:58 - 2016-03-18 14:58 - 00001196 _____ C:\Users\Public\Desktop\Movie Studio Platinum 13.0 (64-bit).lnk
2016-03-18 14:58 - 2016-03-18 14:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2016-03-18 14:57 - 2016-03-18 20:14 - 00000000 ____D C:\Users\space\AppData\Local\Sony
2016-03-18 14:57 - 2016-03-18 14:57 - 00000000 ____D C:\ProgramData\Sony
2016-03-18 14:57 - 2016-03-18 14:57 - 00000000 ____D C:\Program Files\Sony
2016-03-18 14:57 - 2016-03-18 14:57 - 00000000 ____D C:\Program Files (x86)\Sony
2016-03-18 14:56 - 2016-03-18 21:41 - 00000000 ____D C:\Users\space\AppData\Roaming\Sony
2016-03-18 14:52 - 2016-02-28 16:50 - 00000000 ____D C:\Users\space\Downloads\Sony.Vegas.Movie.Studio.HD.v13.0.Build955x64.SMarTKiIleR.Startimes.F45

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-04-13 20:25 - 2015-12-24 20:07 - 00000132 _____ C:\Users\space\AppData\Roaming\Adobe PNG Format CS6 Prefs
2016-04-13 20:22 - 2014-12-04 13:52 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-04-13 20:13 - 2014-12-31 18:46 - 00000000 ____D C:\Users\space\AppData\Roaming\Skype
2016-04-13 20:12 - 2014-12-05 11:00 - 00000000 ____D C:\Users\space\Documents\Younes
2016-04-13 19:56 - 2015-12-25 09:48 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2016-04-13 19:53 - 2015-02-18 19:12 - 00000000 ____D C:\Users\space\AppData\Roaming\ZHP
2016-04-13 19:49 - 2009-07-14 05:45 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-04-13 19:49 - 2009-07-14 05:45 - 00020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-04-13 19:39 - 2014-12-04 08:32 - 00000000 ____D C:\ProgramData\NVIDIA
2016-04-13 19:39 - 2014-02-15 18:51 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-04-13 19:39 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-04-13 19:36 - 2014-12-05 12:53 - 00000000 ____D C:\Users\space\AppData\Roaming\DMCache
2016-04-13 14:22 - 2016-01-12 19:24 - 00000000 ____D C:\Program Files (x86)\Popcorn Time
2016-04-13 14:18 - 2015-02-18 19:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-04-13 13:04 - 2014-12-04 14:33 - 00000000 ____D C:\Users\space\AppData\Local\Adobe
2016-04-13 13:02 - 2009-07-14 16:24 - 00738094 _____ C:\Windows\system32\perfh00C.dat
2016-04-13 13:02 - 2009-07-14 16:24 - 00150022 _____ C:\Windows\system32\perfc00C.dat
2016-04-13 13:02 - 2009-07-14 06:13 - 01669168 _____ C:\Windows\system32\PerfStringBackup.INI
2016-04-13 13:02 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-04-12 21:28 - 2015-12-27 12:12 - 00001456 _____ C:\Users\space\AppData\Local\Adobe Save for Web 13.0 Prefs
2016-04-12 20:26 - 2014-02-15 18:03 - 00000000 ____D C:\Users\space
2016-04-11 22:49 - 2014-02-15 18:51 - 00002203 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-04-11 22:49 - 2014-02-15 18:51 - 00002191 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-04-09 10:14 - 2009-07-14 06:08 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-04-07 23:23 - 2014-12-04 13:52 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-04-07 23:22 - 2014-12-04 13:52 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-04-07 23:22 - 2014-12-04 13:52 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-04-07 13:46 - 2016-01-12 19:25 - 00000000 ____D C:\Users\space\Downloads\PopcornTime
2016-04-06 21:23 - 2014-12-05 12:53 - 00000000 ____D C:\Users\space\Downloads\Compressed
2016-04-06 18:09 - 2015-12-25 10:03 - 00002344 _____ C:\Users\space\Desktop\Protection bancaire.lnk
2016-04-06 17:54 - 2014-12-04 14:38 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-04-06 17:54 - 2014-02-15 19:26 - 00000000 ____D C:\Program Files\Adobe
2016-04-05 19:46 - 2015-10-01 15:49 - 00000000 ____D C:\Users\space\AppData\Roaming\Yahoo!
2016-04-05 19:46 - 2015-02-20 10:02 - 00000000 ____D C:\AdwCleaner
2016-04-04 21:04 - 2015-02-05 20:22 - 00000000 ____D C:\Users\space\AppData\Roaming\vlc
2016-04-02 11:26 - 2015-05-28 16:24 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-04-02 11:23 - 2009-07-14 05:45 - 05102408 _____ C:\Windows\system32\FNTCACHE.DAT
2016-04-01 23:32 - 2014-12-05 12:53 - 00000000 ____D C:\Users\space\Downloads\Video
2016-04-01 21:29 - 2014-02-15 13:41 - 00000000 ____D C:\Users\space\AppData\Local\CrashDumps
2016-04-01 13:53 - 2014-02-15 18:49 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-04-01 12:12 - 2014-02-15 18:38 - 00134600 _____ C:\Users\space\AppData\Local\GDIPFONTCACHEV1.DAT
2016-03-31 23:54 - 2015-10-01 15:49 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2016-03-31 23:52 - 2014-12-05 17:07 - 00000000 ____D C:\ProgramData\VMware
2016-03-31 23:50 - 2014-12-05 17:19 - 00000000 ____D C:\Users\space\AppData\Roaming\VMware
2016-03-31 23:47 - 2015-03-22 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2016-03-31 23:47 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-31 19:44 - 2014-02-15 19:27 - 00000000 ____D C:\Users\space\AppData\Roaming\Adobe
2016-03-31 02:03 - 2014-02-15 19:26 - 00000000 ____D C:\Program Files\Common Files\Adobe
2016-03-31 00:44 - 2014-12-04 14:42 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-03-30 23:38 - 2015-03-22 12:48 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-30 20:49 - 2014-02-15 19:26 - 00000000 ____D C:\ProgramData\Adobe
2016-03-22 22:50 - 2015-08-13 09:11 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-03-22 22:50 - 2014-12-31 18:45 - 00000000 ____D C:\ProgramData\Skype
2016-03-18 19:18 - 2014-02-15 18:47 - 00000000 ____D C:\Program Files (x86)\Intel
2016-03-18 15:01 - 2015-02-23 09:55 - 00000000 ____D C:\Users\space\AppData\Local\ElevatedDiagnostics
2016-03-17 20:06 - 2015-08-23 09:43 - 00000000 ____D C:\Program Files (x86)\Garena Plus

==================== Fichiers à la racine de certains dossiers =======

2015-12-24 20:07 - 2016-04-13 20:25 - 0000132 _____ () C:\Users\space\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-12-09 21:48 - 2015-12-24 13:00 - 0000132 _____ () C:\Users\space\AppData\Roaming\Préfs Format PNG Adobe CS6
2015-05-08 21:03 - 2015-12-24 11:52 - 0001456 _____ () C:\Users\space\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2015-12-27 12:12 - 2016-04-12 21:28 - 0001456 _____ () C:\Users\space\AppData\Local\Adobe Save for Web 13.0 Prefs
2016-04-06 19:42 - 2016-04-06 19:47 - 0007603 _____ () C:\Users\space\AppData\Local\Resmon.ResmonCfg
2016-02-12 12:02 - 2016-02-12 12:02 - 0000000 _____ () C:\Users\space\AppData\Local\{8902307F-46F0-4F78-BA35-ADD692DC1733}
2016-04-13 19:42 - 2016-04-13 19:42 - 0000000 ____H () C:\ProgramData\cm-lock
2015-01-20 20:13 - 2015-10-01 15:51 - 0008936 _____ () C:\ProgramData\hpzinstall.log
2015-04-17 20:23 - 2015-04-17 20:23 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Fichiers à déplacer ou supprimer:
====================
C:\Users\space\ZHPDiag3.exe


==================== Bamital & volsnap =================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement


testsigning: ==> 'testsigning' est activé. Rechercher un éventuel pilote non signé <===== ATTENTION


nointegritychecks: ==> "IntegrityChecks" is disabled. <===== ATTENTION


LastRegBack: 2015-09-21 14:25

==================== Fin de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité