Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 19-08-2016
Exécuté par ANI (administrateur) sur ANI-PC (20-08-2016 11:08:04)
Exécuté depuis C:\Users\ANI\Desktop
Profils chargés: ANI (Profils disponibles: ANI)
Platform: Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: "C:\Program Files\UCBrowser\Application\UCBrowser.exe" -- "%1")
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Software 2000 Limited) C:\Windows\System32\spool\drivers\w32x86\3\HP1006MC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(BitTorrent Inc.) C:\Users\ANI\AppData\Roaming\uTorrent\uTorrent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(BitTorrent Inc.) C:\Users\ANI\AppData\Roaming\uTorrent\updates\3.4.8_42449\utorrentie.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(BitTorrent Inc.) C:\Users\ANI\AppData\Roaming\uTorrent\updates\3.4.8_42449\utorrentie.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [14690712 2015-11-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1028352 2015-11-27] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [986872 2016-01-29] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5282584 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3928120 2016-04-28] (Tonec Inc.)
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Run: [Google Update] => C:\Users\ANI\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2016-01-01] (Google Inc.)
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Run: [uTorrent] => C:\Users\ANI\AppData\Roaming\uTorrent\uTorrent.exe [1972224 2016-08-18] (BitTorrent Inc.)
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {3a086c90-832f-11e5-a0f7-4cedde96a5e5} - F:\setup.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {4f0fe940-8385-11e5-9164-806e6f6e6963} - F:\Setup.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {5b4968ab-82ef-11e5-9d82-4cedde96a5e5} - F:\setup.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {d9f33628-3218-11e4-988f-1c75088af58f} - G:\Startme.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {e96d211f-82e6-11e5-b5cf-4cedde96a5e5} - F:\setup.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {f1346015-be15-11e5-833d-4cedde96a5e5} - F:\startme.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\yowindow.scr [859080 2016-07-10] (repkasoft)
HKU\S-1-5-18\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-18\...\Policies\Explorer: [TaskbarNoNotification] 0
ShellExecuteHooks: - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - Pas de fichier [ ]
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Pas de fichier
BootExecute: autocheck autochk * उ उउऀᄑ
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local: [ActivePolicy] SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{d77aeba7-0920-42a5-9ee1-ff2f9fd2b514} <======= ATTENTION (Restriction - IP)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2009EB46-E800-47FF-9E00-AD077895F3FC}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E3CC7A44-8ABD-4E4B-813E-F6E7F1D45521}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131160903155066672&GUID=81FB0048-7E0C-4CD3-84FF-2F19F4F4EAF0
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-925075865-419016048-2472581467-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://ar.yahoo.com/?fr=hp-avast&type=752
HKU\S-1-5-21-925075865-419016048-2472581467-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE07&ocid=UE07DHP
HKU\S-1-5-21-925075865-419016048-2472581467-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?pc=UE07&ocid=UE07DHP
SearchScopes: HKU\.DEFAULT -> {67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
FireFox:
========
FF ProfilePath: C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default
FF NewTab: hxxp://www.trotux.com/?z=3902f84b4246e614494e48fg4zbm8g2q4gbq4q2edb&from=clc&uid=TOSHIBAXMK3265GSXN_116GBENQBXX116GBENQB&type=hp
FF DefaultSearchEngine: trotux
FF DefaultSearchEngine.US: data:text/plain,browser.search.defaultenginename.US=trotux
FF SelectedSearchEngine: trotux
FF Homepage: hxxp://www.yahoo.fr/
FF Keyword.URL: hxxp://www.trotux.com/search/?z=3902f84b4246e614494e48fg4zbm8g2q4gbq4q2edb&from=clc&uid=TOSHIBAXMK3265GSXN_116GBENQBXX116GBENQB&type=sp&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-13] ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin HKU\.DEFAULT: hao123.com/VideoBox -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Baidu\VideoBox\plugin\browser\npVboxPlugin.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-925075865-419016048-2472581467-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\ANI\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-925075865-419016048-2472581467-1000: @talk.google.com/O1DPlugin -> C:\Users\ANI\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-925075865-419016048-2472581467-1000: @tools.google.com/Google Update;version=3 -> C:\Users\ANI\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-925075865-419016048-2472581467-1000: @tools.google.com/Google Update;version=9 -> C:\Users\ANI\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\ANI\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\ANI\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Extension: IDM integration - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2016-04-26]
FF Extension: WOT - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-08-19]
FF Extension: Xmarks - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\extensions\foxmarks@kei.com [2016-08-19]
FF Extension: Xmarks - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\foxmarks@kei.com [2016-08-13]
FF Extension: iMEGA - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{065ee92a-ad57-42a2-b6d5-466b6fd8e24d}.xpi [2016-08-13]
FF Extension: Flagfox - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-08-13]
FF Extension: WOT - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-08-13]
FF Extension: Video DownloadHelper - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-08-13]
FF Extension: Adblock Plus - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-08-13]
FF Extension: iMEGA - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\Extensions\{065ee92a-ad57-42a2-b6d5-466b6fd8e24d}.xpi [2016-08-13]
FF Extension: Flagfox - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-08-13]
FF Extension: Video DownloadHelper - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-08-13]
FF Extension: Adblock Plus - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-08-13]
FF HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\ANI\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\ANI\AppData\Roaming\IDM\idmmzcc5 [2016-08-20] [non signé]
FF HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR DefaultSearchURL: Default -> hxxp://www.yessearches.com/chrome.php?q={searchTerms}&ts=AHEpCHApC3AqCE..&v=20160329&uid=FFB3868465D48A8BD6FACE733E638397&ptid=wak&mode=nnnb
CHR DefaultSearchKeyword: Default -> yessearches
CHR Profile: C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-20]
CHR Extension: (Google Drive) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (Deezer illimite par MrHaL0SNiP3R ) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdhigoemokpdldaefikideieodmodida [2015-12-31]
CHR Extension: (YouTube) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-09]
CHR Extension: (Recherche Google) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (Google Docs hors connexion) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-31]
CHR Extension: (IDM Integration Module) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2015-08-09]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-04]
CHR Extension: (Gmail) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-20]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2016-04-15]
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [1678040 2013-12-22] (Broadcom Corporation.)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2016-01-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [292816 2016-01-29] (Microsoft Corporation)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [26112 2010-04-29] (Google Inc)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26080 2012-10-08] (Wondershare)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [174936 2013-12-22] (Broadcom Corporation.)
S3 btwampfl; C:\Windows\System32\DRIVERS\btwampfl.sys [144600 2013-12-22] (Broadcom Corporation.)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25016 2015-11-04] (Disc Soft Ltd)
S3 dtproscsibus; C:\Windows\System32\DRIVERS\dtproscsibus.sys [26168 2015-11-04] (Disc Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrv.sys [26248 2013-12-03] (EldoS Corporation)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [43368 2013-05-23] (ThreatTrack Security)
S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [24040 2013-09-04] (ThreatTrack Security)
R0 iaStorA; C:\Windows\System32\DRIVERS\iaStorA.sys [489832 2013-11-21] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [24424 2013-11-21] (Intel Corporation)
S3 libusb0; C:\Windows\System32\drivers\libusb0.sys [33792 2005-03-09] () [Fichier non signé]
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2016-08-20] (Malwarebytes)
S3 MDA_NTDRV; C:\Windows\system32\MDA_NTDRV.sys [18136 2013-02-25] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [253704 2015-11-13] (Microsoft Corporation)
R3 PGEffect; C:\Windows\System32\DRIVERS\pgeffect.sys [33616 2011-02-08] (TOSHIBA Corporation)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15688 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10320 2013-09-30] ()
R3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [273624 2000-01-01] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [26792 2015-09-08] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [329384 2015-11-05] (Duplex Secure Ltd.)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [23040 2014-11-05] (The OpenVPN Project)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-08-19] ()
R1 UCGuard; C:\Windows\System32\DRIVERS\ucguard.sys [72064 2016-08-02] (Huorong Borui (Beijing) Technology Co., Ltd.)
S1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [95368 2014-11-24] ()
S1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [20616 2014-11-24] ()
S1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [540808 2014-11-24] ()
S3 WsAudioDevice_383; C:\Windows\System32\drivers\WsAudioDevice_383.sys [16640 2011-11-17] (Wondershare)
S3 AQFileRestore; pas de ImagePath
U3 DfSdkS; pas de ImagePath
S3 dgderdrv; pas de ImagePath
S3 fcdabus; pas de ImagePath
S3 fsRamDsk; pas de ImagePath
S0 FVXSCSI; pas de ImagePath
S1 krdxmufb; \??\C:\Windows\system32\drivers\krdxmufb.sys [X]
S3 ProcObsrv; pas de ImagePath
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [658136 2000-01-01] (Realsil Semiconductor Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Fichier non signé]
U3 alw6o97d; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-08-20 11:08 - 2016-08-20 11:08 - 00019201 _____ C:\Users\ANI\Desktop\FRST.txt
2016-08-20 11:07 - 2016-08-20 11:08 - 00000000 ____D C:\FRST
2016-08-20 11:07 - 2016-08-20 11:06 - 01745408 _____ (Farbar) C:\Users\ANI\Desktop\FRST.exe
2016-08-20 10:36 - 2016-08-20 10:36 - 00617192 _____ C:\Users\ANI\Documents\_____ _____ ________ _______ ____ 2016_2017 Calendrier scolaire jours fériés ~ Massar 2016 ____ ________ ________ - ____.pdf
2016-08-20 10:20 - 2016-08-20 10:20 - 00106427 _____ C:\Users\ANI\Desktop\ZHPDiag.txt
2016-08-20 10:17 - 2016-08-20 10:17 - 00002623 _____ C:\Users\ANI\Desktop\ZHPFixReport.txt
2016-08-20 10:14 - 2016-08-20 10:15 - 00000000 ____D C:\Program Files\ZHPFix
2016-08-20 10:14 - 2016-08-20 10:14 - 00001755 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2016-08-20 10:14 - 2016-08-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-08-20 10:13 - 2016-08-20 10:13 - 00001659 _____ C:\Users\ANI\Desktop\ZHPCleaner.txt
2016-08-20 09:59 - 2016-08-20 10:07 - 00000828 _____ C:\Users\ANI\Desktop\ZHPCleaner.lnk
2016-08-20 09:13 - 2009-07-13 23:13 - 00015216 _____ (TOSHIBA Corporation) C:\Windows\system32\Drivers\tosrfec.sys
2016-08-20 09:12 - 2016-08-20 09:12 - 00000000 ____D C:\Windows\LastGood
2016-08-20 08:49 - 2016-08-20 10:18 - 00000816 _____ C:\Users\ANI\Desktop\ZHPDiag.lnk
2016-08-20 07:58 - 2016-08-20 08:38 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-08-20 07:58 - 2016-08-20 07:58 - 00001036 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-20 07:58 - 2016-08-20 07:58 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-08-20 07:58 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-08-20 07:58 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-08-20 07:58 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-08-19 21:46 - 2016-08-19 21:46 - 00000000 ____D C:\ProgramData\RogueKiller
2016-08-19 21:46 - 2016-08-19 21:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2016-08-19 21:46 - 2016-08-19 21:46 - 00000000 ____D C:\Program Files\RogueKiller
2016-08-19 18:20 - 2016-08-19 18:20 - 00100308 _____ C:\Users\ANI\Documents\cc_20160819_182016.reg
2016-08-19 18:20 - 2016-08-19 18:20 - 00013144 _____ C:\Users\ANI\Documents\cc_20160819_182034.reg
2016-08-19 15:27 - 2016-08-19 15:27 - 00000000 ____D C:\ProgramData\AVAST Software
2016-08-19 15:25 - 2016-08-19 15:25 - 00000000 ___HD C:\Program Files\5dm55CD
2016-08-19 10:58 - 2016-08-19 10:58 - 00000000 ____D C:\Users\ANI\AppData\Local\UCBrowser
2016-08-19 10:58 - 2016-08-02 07:54 - 00072064 _____ (Huorong Borui (Beijing) Technology Co., Ltd.) C:\Windows\system32\Drivers\ucguard.sys
2016-08-19 10:56 - 2016-08-19 10:58 - 00000000 ____D C:\Program Files\UCBrowser
2016-08-19 10:55 - 2016-08-19 22:04 - 00000000 ____D C:\Program Files\sbqh
2016-08-19 10:27 - 2016-08-19 10:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-08-18 20:03 - 2016-08-18 20:03 - 02058521 _____ C:\Users\ANI\Downloads\Hirschfeld_Hartwig_-_Literary_history_of_Hebrew_grammarians_and_lexicographers_2.pdf_page_103_109.pdf
2016-08-18 19:31 - 2016-08-18 19:31 - 00061009 _____ C:\Users\ANI\Documents\_____ _______.pdf
2016-08-18 16:59 - 2016-08-18 16:59 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160818_165912
2016-08-17 21:09 - 2016-08-17 21:09 - 00098102 _____ C:\Users\ANI\Documents\cc_20160817_210904.reg
2016-08-17 21:09 - 2016-08-17 21:09 - 00013144 _____ C:\Users\ANI\Documents\cc_20160817_210919.reg
2016-08-17 08:42 - 2016-07-08 16:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-08-16 10:19 - 2016-08-16 10:19 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160816_101951
2016-08-16 10:19 - 2016-08-16 10:19 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160816_101943
2016-08-14 19:35 - 2016-08-14 19:35 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160814_193518
2016-08-14 08:39 - 2016-08-14 08:39 - 00108003 _____ C:\Users\ANI\Documents\Langues et sociétés en contact.pdf
2016-08-12 20:37 - 2016-08-12 20:37 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160812_203731
2016-08-12 20:37 - 2016-08-12 20:37 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160812_203718
2016-08-12 20:37 - 2016-08-12 20:37 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160812_203717
2016-08-12 20:37 - 2016-08-12 20:37 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160812_203716
2016-08-11 22:59 - 2016-08-02 15:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-11 22:59 - 2016-08-02 07:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-11 22:59 - 2016-08-02 07:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-11 22:59 - 2016-08-02 06:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-11 22:59 - 2016-08-02 06:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-11 22:59 - 2016-08-02 06:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-11 22:59 - 2016-08-02 06:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-11 22:59 - 2016-08-02 06:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-11 22:59 - 2016-08-02 06:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-11 22:59 - 2016-08-02 06:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-11 22:59 - 2016-08-02 06:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-11 22:59 - 2016-08-02 06:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-11 22:59 - 2016-08-02 06:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-11 22:59 - 2016-08-02 06:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-11 22:59 - 2016-08-02 06:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-11 22:59 - 2016-08-02 06:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-11 22:59 - 2016-08-02 06:41 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-11 22:59 - 2016-08-02 06:36 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-11 22:59 - 2016-08-02 06:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-11 22:59 - 2016-08-02 06:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-11 22:59 - 2016-08-02 06:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-11 22:59 - 2016-08-02 06:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-11 22:59 - 2016-08-02 06:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-11 22:59 - 2016-08-02 06:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-11 22:59 - 2016-08-02 06:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-11 22:59 - 2016-08-02 06:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-11 22:59 - 2016-08-02 06:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-11 22:59 - 2016-08-02 06:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-11 22:59 - 2016-08-02 06:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-11 22:59 - 2016-08-02 06:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-11 22:59 - 2016-08-02 06:14 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-11 22:59 - 2016-08-02 06:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-11 22:59 - 2016-08-02 05:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-11 22:59 - 2016-08-02 05:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-11 22:59 - 2016-08-02 05:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-11 21:45 - 2016-07-08 16:22 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-11 21:45 - 2016-07-08 16:22 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-11 21:45 - 2016-07-08 16:16 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-11 21:45 - 2016-07-08 15:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-11 21:45 - 2016-07-08 15:53 - 02399232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-11 21:45 - 2016-07-08 15:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-11 21:45 - 2016-07-08 15:51 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-11 21:45 - 2016-07-08 15:51 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-11 21:45 - 2016-07-08 15:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-11 21:45 - 2016-07-08 15:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-11 21:45 - 2016-07-08 15:50 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-07-29 19:14 - 2016-07-29 19:14 - 00531437 _____ C:\Users\ANI\Documents\JewPop _ « L’argot des anges », l’hébreu hier et aujourd’hui.pdf
2016-07-22 14:30 - 2016-07-22 14:30 - 01162240 _____ C:\Users\ANI\Downloads\LFNAIS-S2-Mod5_Session1النحو حيدا .xls
2016-07-22 14:30 - 2016-07-22 14:30 - 01090560 _____ C:\Users\ANI\Downloads\LFNAIS-S4-Mod4_Session1أديان بوفرة بن يحيى.xls
2016-07-21 07:59 - 2016-06-21 19:24 - 00626688 _____ C:\Users\ANI\Documents\LFNAAR-S6-LN-Mod5_Session1.xls
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-08-20 11:04 - 2015-03-03 17:24 - 00000000 ____D C:\Users\ANI\AppData\Roaming\uTorrent
2016-08-20 10:40 - 2015-11-25 12:28 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-08-20 10:34 - 2016-05-11 08:23 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-925075865-419016048-2472581467-1000UA.job
2016-08-20 10:20 - 2014-08-22 12:31 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ZHP
2016-08-20 10:15 - 2016-04-08 11:43 - 00001064 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-08-20 09:20 - 2009-07-14 05:34 - 00022464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-20 09:20 - 2009-07-14 05:34 - 00022464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-20 09:12 - 2016-06-22 19:21 - 00000000 ____D C:\Users\ANI\AppData\LocalLow\uTorrent
2016-08-20 09:11 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-20 08:42 - 2015-07-19 13:28 - 00000000 ____D C:\AdwCleaner
2016-08-20 08:17 - 2015-03-04 11:30 - 00000000 ____D C:\Users\ANI\AppData\Roaming\DMCache
2016-08-19 21:47 - 2014-08-22 12:13 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-08-19 21:34 - 2016-05-11 08:23 - 00001018 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-925075865-419016048-2472581467-1000Core.job
2016-08-19 21:33 - 2016-05-02 19:42 - 00000000 ____D C:\Users\ANI\AppData\Roaming\IDM
2016-08-19 21:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-08-19 18:15 - 2015-04-02 20:51 - 00000000 ____D C:\Users\ANI\Downloads\DVD Decrypter, ImgBurn, Virtual Drive (Installer and Portable)
2016-08-19 17:56 - 2012-12-12 11:12 - 00006606 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-19 17:56 - 2009-07-14 09:39 - 01836460 _____ C:\Windows\system32\perfh00C.dat
2016-08-19 17:56 - 2009-07-14 09:39 - 00812312 _____ C:\Windows\system32\perfc00C.dat
2016-08-19 10:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\L2Schemas
2016-08-18 19:16 - 2016-04-16 12:36 - 00000000 ____D C:\Users\ANI\AppData\Roaming\.Ultimate
2016-08-18 19:15 - 2016-04-16 12:36 - 00000000 ____D C:\Users\ANI\Ultimate
2016-08-18 16:59 - 2016-04-16 12:36 - 00000000 ____D C:\Users\ANI\decrypt
2016-08-18 13:46 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2016-08-17 14:33 - 2014-12-16 11:46 - 00000000 ____D C:\ProgramData\VSO
2016-08-13 10:30 - 2012-12-13 16:20 - 00000000 ____D C:\Users\ANI\dwhelper
2016-08-12 07:52 - 2009-07-14 05:53 - 00032482 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-12 07:51 - 2013-12-17 09:29 - 00419152 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-11 23:10 - 2013-07-17 00:39 - 00000000 ____D C:\Windows\system32\MRT
2016-08-11 23:02 - 2012-12-15 20:54 - 144884648 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-11 20:39 - 2016-01-31 12:18 - 00000000 ____D C:\Program Files\Opera
2016-07-27 20:25 - 2012-12-12 19:52 - 00406184 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-07-24 23:44 - 2014-08-23 07:50 - 00000000 ____D C:\Users\ANI\AppData\Local\CrashDumps
==================== Fichiers à la racine de certains dossiers =======
2016-04-16 12:40 - 2016-04-16 12:33 - 0000482 _____ () C:\Users\ANI\AppData\Roaming\app_settings
2016-03-30 18:25 - 2016-03-30 18:25 - 0005120 _____ () C:\Users\ANI\AppData\Roaming\GiftBag.db
2012-12-18 09:34 - 2016-01-17 12:18 - 0007887 _____ () C:\Users\ANI\AppData\Roaming\pcouffin.cat
2012-12-18 09:34 - 2016-01-17 12:18 - 0001144 _____ () C:\Users\ANI\AppData\Roaming\pcouffin.inf
2012-12-18 09:34 - 2016-01-17 12:18 - 0000055 _____ () C:\Users\ANI\AppData\Roaming\pcouffin.log
2012-12-18 09:34 - 2016-01-17 12:18 - 0047360 _____ (VSO Software) C:\Users\ANI\AppData\Roaming\pcouffin.sys
2013-08-30 10:56 - 2013-08-30 10:56 - 0000024 ___SH () C:\Users\ANI\AppData\Roaming\System3192SettingsDB.dat
2014-12-15 20:36 - 2014-12-16 10:39 - 0001059 _____ () C:\Users\ANI\AppData\Roaming\vso_ts_preview.xml
2013-08-30 10:56 - 2013-08-30 10:56 - 0000024 ___SH () C:\Users\ANI\AppData\Roaming\Win4665 Config DB.dlx
2013-12-07 11:59 - 2015-08-15 18:39 - 0017472 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\1eaadjc.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0018724 ____T () C:\Users\ANI\AppData\Roaming\Microsoft\bass.dll
2014-08-26 19:17 - 2015-08-15 18:39 - 1758720 ____T () C:\Users\ANI\AppData\Roaming\Microsoft\engine_vx.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0016448 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\kfgresk.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0014456 ____T () C:\Users\ANI\AppData\Roaming\Microsoft\mjcriu.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0012352 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\peaadje.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0029784 ____T ((: JOBnik! :) [Arthur Aminov, ISRAEL]) C:\Users\ANI\AppData\Roaming\Microsoft\qwadjb.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0017472 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\rsaadjd.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0099896 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\~DFK3a1333.tmp
2015-07-19 23:32 - 2015-07-19 23:32 - 0145130 _____ () C:\Users\ANI\AppData\Local\ars.cache
2015-07-19 23:32 - 2015-07-19 23:32 - 0340540 _____ () C:\Users\ANI\AppData\Local\census.cache
2015-07-19 23:23 - 2015-07-19 23:23 - 0000036 _____ () C:\Users\ANI\AppData\Local\housecall.guid.cache
2016-01-18 20:25 - 2016-01-23 20:08 - 29511952 _____ (Sony Mobile Communications ) C:\Users\ANI\AppData\Local\pcc.exe
2015-07-19 23:32 - 2015-07-19 23:32 - 0000010 _____ () C:\Users\ANI\AppData\Local\sponge.last.runtime.cache
2013-10-23 15:05 - 2013-10-23 15:05 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-12-03 09:32 - 2013-12-03 09:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-08-17 14:26
==================== Fin de FRST.txt ============================
Exécuté par ANI (administrateur) sur ANI-PC (20-08-2016 11:08:04)
Exécuté depuis C:\Users\ANI\Desktop
Profils chargés: ANI (Profils disponibles: ANI)
Platform: Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: "C:\Program Files\UCBrowser\Application\UCBrowser.exe" -- "%1")
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Software 2000 Limited) C:\Windows\System32\spool\drivers\w32x86\3\HP1006MC.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(BitTorrent Inc.) C:\Users\ANI\AppData\Roaming\uTorrent\uTorrent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(BitTorrent Inc.) C:\Users\ANI\AppData\Roaming\uTorrent\updates\3.4.8_42449\utorrentie.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(BitTorrent Inc.) C:\Users\ANI\AppData\Roaming\uTorrent\updates\3.4.8_42449\utorrentie.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [14690712 2015-11-27] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1028352 2015-11-27] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [986872 2016-01-29] (Microsoft Corporation)
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5282584 2014-11-21] (Piriform Ltd)
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3928120 2016-04-28] (Tonec Inc.)
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Run: [Google Update] => C:\Users\ANI\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2016-01-01] (Google Inc.)
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Run: [uTorrent] => C:\Users\ANI\AppData\Roaming\uTorrent\uTorrent.exe [1972224 2016-08-18] (BitTorrent Inc.)
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {3a086c90-832f-11e5-a0f7-4cedde96a5e5} - F:\setup.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {4f0fe940-8385-11e5-9164-806e6f6e6963} - F:\Setup.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {5b4968ab-82ef-11e5-9d82-4cedde96a5e5} - F:\setup.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {d9f33628-3218-11e4-988f-1c75088af58f} - G:\Startme.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {e96d211f-82e6-11e5-b5cf-4cedde96a5e5} - F:\setup.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\MountPoints2: {f1346015-be15-11e5-833d-4cedde96a5e5} - F:\startme.exe
HKU\S-1-5-21-925075865-419016048-2472581467-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\yowindow.scr [859080 2016-07-10] (repkasoft)
HKU\S-1-5-18\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-18\...\Policies\Explorer: [TaskbarNoNotification] 0
ShellExecuteHooks: - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - Pas de fichier [ ]
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => Pas de fichier
BootExecute: autocheck autochk * उ उउऀᄑ
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local: [ActivePolicy] SOFTWARE\Policies\Microsoft\Windows\IPSEC\Policy\Local\ipsecPolicy{d77aeba7-0920-42a5-9ee1-ff2f9fd2b514} <======= ATTENTION (Restriction - IP)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2009EB46-E800-47FF-9E00-AD077895F3FC}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{E3CC7A44-8ABD-4E4B-813E-F6E7F1D45521}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131160903155066672&GUID=81FB0048-7E0C-4CD3-84FF-2F19F4F4EAF0
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-925075865-419016048-2472581467-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://ar.yahoo.com/?fr=hp-avast&type=752
HKU\S-1-5-21-925075865-419016048-2472581467-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE07&ocid=UE07DHP
HKU\S-1-5-21-925075865-419016048-2472581467-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?pc=UE07&ocid=UE07DHP
SearchScopes: HKU\.DEFAULT -> {67C334C0-408D-4E6D-B5A7-0ADD6AFFA252} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
FireFox:
========
FF ProfilePath: C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default
FF NewTab: hxxp://www.trotux.com/?z=3902f84b4246e614494e48fg4zbm8g2q4gbq4q2edb&from=clc&uid=TOSHIBAXMK3265GSXN_116GBENQBXX116GBENQB&type=hp
FF DefaultSearchEngine: trotux
FF DefaultSearchEngine.US: data:text/plain,browser.search.defaultenginename.US=trotux
FF SelectedSearchEngine: trotux
FF Homepage: hxxp://www.yahoo.fr/
FF Keyword.URL: hxxp://www.trotux.com/search/?z=3902f84b4246e614494e48fg4zbm8g2q4gbq4q2edb&from=clc&uid=TOSHIBAXMK3265GSXN_116GBENQBXX116GBENQB&type=sp&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-13] ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-12-29] (Foxit Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin HKU\.DEFAULT: hao123.com/VideoBox -> C:\Windows\system32\config\systemprofile\AppData\Roaming\Baidu\VideoBox\plugin\browser\npVboxPlugin.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-925075865-419016048-2472581467-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\ANI\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-925075865-419016048-2472581467-1000: @talk.google.com/O1DPlugin -> C:\Users\ANI\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-925075865-419016048-2472581467-1000: @tools.google.com/Google Update;version=3 -> C:\Users\ANI\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-925075865-419016048-2472581467-1000: @tools.google.com/Google Update;version=9 -> C:\Users\ANI\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\ANI\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\ANI\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Extension: IDM integration - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2016-04-26]
FF Extension: WOT - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-08-19]
FF Extension: Xmarks - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\extensions\foxmarks@kei.com [2016-08-19]
FF Extension: Xmarks - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\foxmarks@kei.com [2016-08-13]
FF Extension: iMEGA - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{065ee92a-ad57-42a2-b6d5-466b6fd8e24d}.xpi [2016-08-13]
FF Extension: Flagfox - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-08-13]
FF Extension: WOT - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2016-08-13]
FF Extension: Video DownloadHelper - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-08-13]
FF Extension: Adblock Plus - C:\Users\ANI\AppData\Roaming\Mozilla\Firefox\Profiles\snx02y6x.default-1471075033614\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-08-13]
FF Extension: iMEGA - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\Extensions\{065ee92a-ad57-42a2-b6d5-466b6fd8e24d}.xpi [2016-08-13]
FF Extension: Flagfox - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2016-08-13]
FF Extension: Video DownloadHelper - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2016-08-13]
FF Extension: Adblock Plus - C:\Users\ANI\AppData\Roaming\Profiles\ipadenb3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-08-13]
FF HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\ANI\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\ANI\AppData\Roaming\IDM\idmmzcc5 [2016-08-20] [non signé]
FF HKU\S-1-5-21-925075865-419016048-2472581467-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR DefaultSearchURL: Default -> hxxp://www.yessearches.com/chrome.php?q={searchTerms}&ts=AHEpCHApC3AqCE..&v=20160329&uid=FFB3868465D48A8BD6FACE733E638397&ptid=wak&mode=nnnb
CHR DefaultSearchKeyword: Default -> yessearches
CHR Profile: C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-07-20]
CHR Extension: (Google Drive) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (Deezer illimite par MrHaL0SNiP3R ) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdhigoemokpdldaefikideieodmodida [2015-12-31]
CHR Extension: (YouTube) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-09]
CHR Extension: (Recherche Google) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (Google Docs hors connexion) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-31]
CHR Extension: (IDM Integration Module) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2015-08-09]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-10-04]
CHR Extension: (Gmail) - C:\Users\ANI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-07-20]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2016-04-15]
==================== Services (Avec liste blanche) ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [1678040 2013-12-22] (Broadcom Corporation.)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2016-01-29] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [292816 2016-01-29] (Microsoft Corporation)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 androidusb; C:\Windows\System32\Drivers\androidusb.sys [26112 2010-04-29] (Google Inc)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [26080 2012-10-08] (Wondershare)
S3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [174936 2013-12-22] (Broadcom Corporation.)
S3 btwampfl; C:\Windows\System32\DRIVERS\btwampfl.sys [144600 2013-12-22] (Broadcom Corporation.)
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [25016 2015-11-04] (Disc Soft Ltd)
S3 dtproscsibus; C:\Windows\System32\DRIVERS\dtproscsibus.sys [26168 2015-11-04] (Disc Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\rsdrv.sys [26248 2013-12-03] (EldoS Corporation)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [43368 2013-05-23] (ThreatTrack Security)
S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [24040 2013-09-04] (ThreatTrack Security)
R0 iaStorA; C:\Windows\System32\DRIVERS\iaStorA.sys [489832 2013-11-21] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [24424 2013-11-21] (Intel Corporation)
S3 libusb0; C:\Windows\System32\drivers\libusb0.sys [33792 2005-03-09] () [Fichier non signé]
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2016-08-20] (Malwarebytes)
S3 MDA_NTDRV; C:\Windows\system32\MDA_NTDRV.sys [18136 2013-02-25] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [253704 2015-11-13] (Microsoft Corporation)
R3 PGEffect; C:\Windows\System32\DRIVERS\pgeffect.sys [33616 2011-02-08] (TOSHIBA Corporation)
S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [47632 2013-04-29] (Panda Security, S.L.)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [15688 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [10320 2013-09-30] ()
R3 RTSUER; C:\Windows\System32\Drivers\RtsUer.sys [273624 2000-01-01] (Realsil Semiconductor Corporation)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [26792 2015-09-08] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [329384 2015-11-05] (Duplex Secure Ltd.)
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [23040 2014-11-05] (The OpenVPN Project)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-08-19] ()
R1 UCGuard; C:\Windows\System32\DRIVERS\ucguard.sys [72064 2016-08-02] (Huorong Borui (Beijing) Technology Co., Ltd.)
S1 UimBus; C:\Windows\System32\DRIVERS\UimBus.sys [95368 2014-11-24] ()
S1 Uim_DEVIM; C:\Windows\System32\DRIVERS\uim_devim.sys [20616 2014-11-24] ()
S1 Uim_IM; C:\Windows\System32\DRIVERS\uim_im.sys [540808 2014-11-24] ()
S3 WsAudioDevice_383; C:\Windows\System32\drivers\WsAudioDevice_383.sys [16640 2011-11-17] (Wondershare)
S3 AQFileRestore; pas de ImagePath
U3 DfSdkS; pas de ImagePath
S3 dgderdrv; pas de ImagePath
S3 fcdabus; pas de ImagePath
S3 fsRamDsk; pas de ImagePath
S0 FVXSCSI; pas de ImagePath
S1 krdxmufb; \??\C:\Windows\system32\drivers\krdxmufb.sys [X]
S3 ProcObsrv; pas de ImagePath
S3 RSUSBSTOR; System32\Drivers\RtsUStor.sys [X]
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [658136 2000-01-01] (Realsil Semiconductor Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Fichier non signé]
U3 alw6o97d; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-08-20 11:08 - 2016-08-20 11:08 - 00019201 _____ C:\Users\ANI\Desktop\FRST.txt
2016-08-20 11:07 - 2016-08-20 11:08 - 00000000 ____D C:\FRST
2016-08-20 11:07 - 2016-08-20 11:06 - 01745408 _____ (Farbar) C:\Users\ANI\Desktop\FRST.exe
2016-08-20 10:36 - 2016-08-20 10:36 - 00617192 _____ C:\Users\ANI\Documents\_____ _____ ________ _______ ____ 2016_2017 Calendrier scolaire jours fériés ~ Massar 2016 ____ ________ ________ - ____.pdf
2016-08-20 10:20 - 2016-08-20 10:20 - 00106427 _____ C:\Users\ANI\Desktop\ZHPDiag.txt
2016-08-20 10:17 - 2016-08-20 10:17 - 00002623 _____ C:\Users\ANI\Desktop\ZHPFixReport.txt
2016-08-20 10:14 - 2016-08-20 10:15 - 00000000 ____D C:\Program Files\ZHPFix
2016-08-20 10:14 - 2016-08-20 10:14 - 00001755 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2016-08-20 10:14 - 2016-08-20 10:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-08-20 10:13 - 2016-08-20 10:13 - 00001659 _____ C:\Users\ANI\Desktop\ZHPCleaner.txt
2016-08-20 09:59 - 2016-08-20 10:07 - 00000828 _____ C:\Users\ANI\Desktop\ZHPCleaner.lnk
2016-08-20 09:13 - 2009-07-13 23:13 - 00015216 _____ (TOSHIBA Corporation) C:\Windows\system32\Drivers\tosrfec.sys
2016-08-20 09:12 - 2016-08-20 09:12 - 00000000 ____D C:\Windows\LastGood
2016-08-20 08:49 - 2016-08-20 10:18 - 00000816 _____ C:\Users\ANI\Desktop\ZHPDiag.lnk
2016-08-20 07:58 - 2016-08-20 08:38 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-08-20 07:58 - 2016-08-20 07:58 - 00001036 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2016-08-20 07:58 - 2016-08-20 07:58 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-08-20 07:58 - 2016-03-10 14:09 - 00053120 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-08-20 07:58 - 2016-03-10 14:08 - 00126336 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-08-20 07:58 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-08-19 21:46 - 2016-08-19 21:46 - 00000000 ____D C:\ProgramData\RogueKiller
2016-08-19 21:46 - 2016-08-19 21:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2016-08-19 21:46 - 2016-08-19 21:46 - 00000000 ____D C:\Program Files\RogueKiller
2016-08-19 18:20 - 2016-08-19 18:20 - 00100308 _____ C:\Users\ANI\Documents\cc_20160819_182016.reg
2016-08-19 18:20 - 2016-08-19 18:20 - 00013144 _____ C:\Users\ANI\Documents\cc_20160819_182034.reg
2016-08-19 15:27 - 2016-08-19 15:27 - 00000000 ____D C:\ProgramData\AVAST Software
2016-08-19 15:25 - 2016-08-19 15:25 - 00000000 ___HD C:\Program Files\5dm55CD
2016-08-19 10:58 - 2016-08-19 10:58 - 00000000 ____D C:\Users\ANI\AppData\Local\UCBrowser
2016-08-19 10:58 - 2016-08-02 07:54 - 00072064 _____ (Huorong Borui (Beijing) Technology Co., Ltd.) C:\Windows\system32\Drivers\ucguard.sys
2016-08-19 10:56 - 2016-08-19 10:58 - 00000000 ____D C:\Program Files\UCBrowser
2016-08-19 10:55 - 2016-08-19 22:04 - 00000000 ____D C:\Program Files\sbqh
2016-08-19 10:27 - 2016-08-19 10:27 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-08-18 20:03 - 2016-08-18 20:03 - 02058521 _____ C:\Users\ANI\Downloads\Hirschfeld_Hartwig_-_Literary_history_of_Hebrew_grammarians_and_lexicographers_2.pdf_page_103_109.pdf
2016-08-18 19:31 - 2016-08-18 19:31 - 00061009 _____ C:\Users\ANI\Documents\_____ _______.pdf
2016-08-18 16:59 - 2016-08-18 16:59 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160818_165912
2016-08-17 21:09 - 2016-08-17 21:09 - 00098102 _____ C:\Users\ANI\Documents\cc_20160817_210904.reg
2016-08-17 21:09 - 2016-08-17 21:09 - 00013144 _____ C:\Users\ANI\Documents\cc_20160817_210919.reg
2016-08-17 08:42 - 2016-07-08 16:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-08-16 10:19 - 2016-08-16 10:19 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160816_101951
2016-08-16 10:19 - 2016-08-16 10:19 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160816_101943
2016-08-14 19:35 - 2016-08-14 19:35 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160814_193518
2016-08-14 08:39 - 2016-08-14 08:39 - 00108003 _____ C:\Users\ANI\Documents\Langues et sociétés en contact.pdf
2016-08-12 20:37 - 2016-08-12 20:37 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160812_203731
2016-08-12 20:37 - 2016-08-12 20:37 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160812_203718
2016-08-12 20:37 - 2016-08-12 20:37 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160812_203717
2016-08-12 20:37 - 2016-08-12 20:37 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ebook_convert_20160812_203716
2016-08-11 22:59 - 2016-08-02 15:08 - 00346312 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-08-11 22:59 - 2016-08-02 07:03 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-08-11 22:59 - 2016-08-02 07:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-08-11 22:59 - 2016-08-02 06:54 - 20343808 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-08-11 22:59 - 2016-08-02 06:51 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-08-11 22:59 - 2016-08-02 06:51 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-08-11 22:59 - 2016-08-02 06:51 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-08-11 22:59 - 2016-08-02 06:51 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-08-11 22:59 - 2016-08-02 06:50 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-08-11 22:59 - 2016-08-02 06:47 - 02286592 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-08-11 22:59 - 2016-08-02 06:45 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-08-11 22:59 - 2016-08-02 06:44 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-08-11 22:59 - 2016-08-02 06:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-08-11 22:59 - 2016-08-02 06:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-08-11 22:59 - 2016-08-02 06:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-08-11 22:59 - 2016-08-02 06:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-08-11 22:59 - 2016-08-02 06:41 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-08-11 22:59 - 2016-08-02 06:36 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-08-11 22:59 - 2016-08-02 06:33 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-08-11 22:59 - 2016-08-02 06:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-08-11 22:59 - 2016-08-02 06:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-08-11 22:59 - 2016-08-02 06:26 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-08-11 22:59 - 2016-08-02 06:25 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-08-11 22:59 - 2016-08-02 06:24 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-08-11 22:59 - 2016-08-02 06:22 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-08-11 22:59 - 2016-08-02 06:21 - 04608000 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-08-11 22:59 - 2016-08-02 06:16 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-08-11 22:59 - 2016-08-02 06:15 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-08-11 22:59 - 2016-08-02 06:14 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-08-11 22:59 - 2016-08-02 06:14 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-08-11 22:59 - 2016-08-02 06:14 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-08-11 22:59 - 2016-08-02 06:11 - 13808128 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-08-11 22:59 - 2016-08-02 05:56 - 02393088 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-08-11 22:59 - 2016-08-02 05:53 - 01316352 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-08-11 22:59 - 2016-08-02 05:51 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-08-11 21:45 - 2016-07-08 16:22 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-08-11 21:45 - 2016-07-08 16:22 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-08-11 21:45 - 2016-07-08 16:16 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-08-11 21:45 - 2016-07-08 16:16 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-08-11 21:45 - 2016-07-08 15:55 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-08-11 21:45 - 2016-07-08 15:53 - 02399232 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-08-11 21:45 - 2016-07-08 15:51 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-08-11 21:45 - 2016-07-08 15:51 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-08-11 21:45 - 2016-07-08 15:51 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-08-11 21:45 - 2016-07-08 15:50 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-08-11 21:45 - 2016-07-08 15:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-08-11 21:45 - 2016-07-08 15:50 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-07-29 19:14 - 2016-07-29 19:14 - 00531437 _____ C:\Users\ANI\Documents\JewPop _ « L’argot des anges », l’hébreu hier et aujourd’hui.pdf
2016-07-22 14:30 - 2016-07-22 14:30 - 01162240 _____ C:\Users\ANI\Downloads\LFNAIS-S2-Mod5_Session1النحو حيدا .xls
2016-07-22 14:30 - 2016-07-22 14:30 - 01090560 _____ C:\Users\ANI\Downloads\LFNAIS-S4-Mod4_Session1أديان بوفرة بن يحيى.xls
2016-07-21 07:59 - 2016-06-21 19:24 - 00626688 _____ C:\Users\ANI\Documents\LFNAAR-S6-LN-Mod5_Session1.xls
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-08-20 11:04 - 2015-03-03 17:24 - 00000000 ____D C:\Users\ANI\AppData\Roaming\uTorrent
2016-08-20 10:40 - 2015-11-25 12:28 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-08-20 10:34 - 2016-05-11 08:23 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-925075865-419016048-2472581467-1000UA.job
2016-08-20 10:20 - 2014-08-22 12:31 - 00000000 ____D C:\Users\ANI\AppData\Roaming\ZHP
2016-08-20 10:15 - 2016-04-08 11:43 - 00001064 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2016-08-20 09:20 - 2009-07-14 05:34 - 00022464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-08-20 09:20 - 2009-07-14 05:34 - 00022464 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-08-20 09:12 - 2016-06-22 19:21 - 00000000 ____D C:\Users\ANI\AppData\LocalLow\uTorrent
2016-08-20 09:11 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-08-20 08:42 - 2015-07-19 13:28 - 00000000 ____D C:\AdwCleaner
2016-08-20 08:17 - 2015-03-04 11:30 - 00000000 ____D C:\Users\ANI\AppData\Roaming\DMCache
2016-08-19 21:47 - 2014-08-22 12:13 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-08-19 21:34 - 2016-05-11 08:23 - 00001018 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-925075865-419016048-2472581467-1000Core.job
2016-08-19 21:33 - 2016-05-02 19:42 - 00000000 ____D C:\Users\ANI\AppData\Roaming\IDM
2016-08-19 21:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-08-19 18:15 - 2015-04-02 20:51 - 00000000 ____D C:\Users\ANI\Downloads\DVD Decrypter, ImgBurn, Virtual Drive (Installer and Portable)
2016-08-19 17:56 - 2012-12-12 11:12 - 00006606 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-19 17:56 - 2009-07-14 09:39 - 01836460 _____ C:\Windows\system32\perfh00C.dat
2016-08-19 17:56 - 2009-07-14 09:39 - 00812312 _____ C:\Windows\system32\perfc00C.dat
2016-08-19 10:47 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\L2Schemas
2016-08-18 19:16 - 2016-04-16 12:36 - 00000000 ____D C:\Users\ANI\AppData\Roaming\.Ultimate
2016-08-18 19:15 - 2016-04-16 12:36 - 00000000 ____D C:\Users\ANI\Ultimate
2016-08-18 16:59 - 2016-04-16 12:36 - 00000000 ____D C:\Users\ANI\decrypt
2016-08-18 13:46 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2016-08-17 14:33 - 2014-12-16 11:46 - 00000000 ____D C:\ProgramData\VSO
2016-08-13 10:30 - 2012-12-13 16:20 - 00000000 ____D C:\Users\ANI\dwhelper
2016-08-12 07:52 - 2009-07-14 05:53 - 00032482 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-12 07:51 - 2013-12-17 09:29 - 00419152 _____ C:\Windows\system32\FNTCACHE.DAT
2016-08-11 23:10 - 2013-07-17 00:39 - 00000000 ____D C:\Windows\system32\MRT
2016-08-11 23:02 - 2012-12-15 20:54 - 144884648 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-08-11 20:39 - 2016-01-31 12:18 - 00000000 ____D C:\Program Files\Opera
2016-07-27 20:25 - 2012-12-12 19:52 - 00406184 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-07-24 23:44 - 2014-08-23 07:50 - 00000000 ____D C:\Users\ANI\AppData\Local\CrashDumps
==================== Fichiers à la racine de certains dossiers =======
2016-04-16 12:40 - 2016-04-16 12:33 - 0000482 _____ () C:\Users\ANI\AppData\Roaming\app_settings
2016-03-30 18:25 - 2016-03-30 18:25 - 0005120 _____ () C:\Users\ANI\AppData\Roaming\GiftBag.db
2012-12-18 09:34 - 2016-01-17 12:18 - 0007887 _____ () C:\Users\ANI\AppData\Roaming\pcouffin.cat
2012-12-18 09:34 - 2016-01-17 12:18 - 0001144 _____ () C:\Users\ANI\AppData\Roaming\pcouffin.inf
2012-12-18 09:34 - 2016-01-17 12:18 - 0000055 _____ () C:\Users\ANI\AppData\Roaming\pcouffin.log
2012-12-18 09:34 - 2016-01-17 12:18 - 0047360 _____ (VSO Software) C:\Users\ANI\AppData\Roaming\pcouffin.sys
2013-08-30 10:56 - 2013-08-30 10:56 - 0000024 ___SH () C:\Users\ANI\AppData\Roaming\System3192SettingsDB.dat
2014-12-15 20:36 - 2014-12-16 10:39 - 0001059 _____ () C:\Users\ANI\AppData\Roaming\vso_ts_preview.xml
2013-08-30 10:56 - 2013-08-30 10:56 - 0000024 ___SH () C:\Users\ANI\AppData\Roaming\Win4665 Config DB.dlx
2013-12-07 11:59 - 2015-08-15 18:39 - 0017472 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\1eaadjc.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0018724 ____T () C:\Users\ANI\AppData\Roaming\Microsoft\bass.dll
2014-08-26 19:17 - 2015-08-15 18:39 - 1758720 ____T () C:\Users\ANI\AppData\Roaming\Microsoft\engine_vx.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0016448 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\kfgresk.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0014456 ____T () C:\Users\ANI\AppData\Roaming\Microsoft\mjcriu.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0012352 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\peaadje.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0029784 ____T ((: JOBnik! :) [Arthur Aminov, ISRAEL]) C:\Users\ANI\AppData\Roaming\Microsoft\qwadjb.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0017472 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\rsaadjd.dll
2013-12-07 11:59 - 2015-08-15 18:39 - 0099896 ____T (Un4seen Developments) C:\Users\ANI\AppData\Roaming\Microsoft\~DFK3a1333.tmp
2015-07-19 23:32 - 2015-07-19 23:32 - 0145130 _____ () C:\Users\ANI\AppData\Local\ars.cache
2015-07-19 23:32 - 2015-07-19 23:32 - 0340540 _____ () C:\Users\ANI\AppData\Local\census.cache
2015-07-19 23:23 - 2015-07-19 23:23 - 0000036 _____ () C:\Users\ANI\AppData\Local\housecall.guid.cache
2016-01-18 20:25 - 2016-01-23 20:08 - 29511952 _____ (Sony Mobile Communications ) C:\Users\ANI\AppData\Local\pcc.exe
2015-07-19 23:32 - 2015-07-19 23:32 - 0000010 _____ () C:\Users\ANI\AppData\Local\sponge.last.runtime.cache
2013-10-23 15:05 - 2013-10-23 15:05 - 0000057 _____ () C:\ProgramData\Ament.ini
2013-12-03 09:32 - 2013-12-03 09:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
==================== Bamital & volsnap =================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-08-17 14:26
==================== Fin de FRST.txt ============================