Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 04-10-2016
Exécuté par A.FROUIN (administrateur) sur PC-D4M8N72 (07-10-2016 18:26:49)
Exécuté depuis C:\Users\a.frouin\Desktop
Profils chargés: A.FROUIN (Profils disponibles: A.FROUIN & AdminPG & Administrateur)
Platform: Windows 7 Enterprise Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Dell\Sytem64Folder\DellRctlService.exe
(Endress+Hauser Process Solutions AG) C:\Program Files (x86)\Endress+Hauser\PAM_Service\EH.C4DC.WinService.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Fortinet Inc.) C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
() C:\Users\a.frouin\AppData\Roaming\HPReyos\HPReyosSrv3.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\Ntrtscan.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(OCS Inventory NG) C:\Program Files (x86)\OCS Inventory Agent\OcsService.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmListen.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\CNTAoSMgr.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\CCSF\TmCCSF.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmPfw.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Qualcomm Atheros) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Qualcomm Atheros Inc.) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\awic\AWiCMgr.exe
(Qualcomm Atheros, Inc.) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\AWiCDiag.exe
(Qualcomm Atheros Inc.) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Wcct.exe
(Qualcomm Atheros) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\BtTray.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
() C:\LiberKey\Apps\RocketDock\App\RocketDock\RocketDock.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(OCS Inventory NG) C:\Program Files (x86)\OCS Inventory Agent\OcsSystray.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\PccNTMon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\spectral\SocketServer.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Quacomm Atheros, Inc.) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Agent\AthNetAgent.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office16\OUTLOOK.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [736552 2016-02-10] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8712960 2016-02-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407232 2016-02-10] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7822312 2015-04-20] (Motorola Solutions, Inc.)
HKLM\...\Run: [AWiCMgr] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\AWiC\AWiCMgr.exe [185856 2015-11-20] (Qualcomm Atheros Inc.)
HKLM\...\Run: [AWiCDiag] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\AWiCDiag.exe [3067392 2015-11-20] (Qualcomm Atheros, Inc.)
HKLM\...\Run: [wcct] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\wcct.exe [1076224 2015-11-20] (Qualcomm Atheros Inc.)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\BtTray.exe [854776 2015-11-30] (Qualcomm Atheros)
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4879264 2015-07-09] (Intel(R) Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-06-15] (Intel Corporation)
HKLM-x32\...\Run: [OfficeScanNT Monitor] => C:\Program Files (x86)\Trend Micro\OfficeScan Client\pccntmon.exe [2503608 2016-06-02] (Trend Micro Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\BtvStack.exe [134904 2015-11-30] (Qualcomm Atheros)
HKLM\...\Policies\Explorer: [NoPublishingWizard] 1
HKLM\...\Policies\Explorer: [NoWebServices] 1
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23375200 2016-07-29] (Google)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-06-22] (Disc Soft Ltd)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [RocketDock] => C:\LiberKey\Apps\RocketDock\App\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\Control Panel\Desktop\\SCRNSAVE.EXE ->
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2016-08-23]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OCS Inventory NG Systray.lnk [2016-04-04]
ShortcutTarget: OCS Inventory NG Systray.lnk -> C:\Program Files (x86)\OCS Inventory Agent\OcsSystray.exe (OCS Inventory NG)
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5C1D2913-893A-43F4-BB3E-73BE72FA334A}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Trend Micro Osprey Plugin -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmopIEPlg.dll [2015-06-17] (Trend Micro Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-15] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2016-06-14] (Microsoft Corporation)
BHO-x32: Trend Micro Osprey Plugin -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmopIEPlg32.dll [2015-06-17] (Trend Micro Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmopIEPlg.dll [2015-06-17] (Trend Micro Inc.)
Handler-x32: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmopIEPlg32.dll [2015-06-17] (Trend Micro Inc.)
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - C:\Program Files (x86)\Trend Micro\OfficeScan Client\FirefoxExtensionOsprey
FF Extension: (Trend Micro Osprey Firefox Extension) - C:\Program Files (x86)\Trend Micro\OfficeScan Client\FirefoxExtensionOsprey [2016-04-04] [non signé]
FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll [2014-04-09] (Fortinet Inc.)
FF Plugin-x32: @FortinetCacheCleanEx -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccpluginex.dll [2014-04-09] (Fortinet Inc.)
FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll [2014-04-09] (Fortinet Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-02-26] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1962090106-778446277-1857948575-8339: @citrixonline.com/appdetectorplugin -> C:\Users\a.frouin\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2016-08-08] (Citrix Online)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default [2016-10-07]
CHR Extension: (Google Slides) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-05]
CHR Extension: (Google Docs) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-05]
CHR Extension: (Google Drive) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-05]
CHR Extension: (YouTube) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-05]
CHR Extension: (Google Sheets) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-05]
CHR Extension: (Google Docs Offline) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-05]
CHR Extension: (What's your name?) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-10-07]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-05-30]
CHR Extension: (Chrome Web Store Payments) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Gmail) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-05]
CHR Extension: (Chrome Media Router) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-26]
CHR HKU\S-1-5-21-1962090106-778446277-1857948575-8339\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [96000 2016-02-10] (Alps Electric Co., Ltd.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
S2 AtherosSvc; C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\adminservice.exe [324856 2015-11-30] (Windows (R) Win 7 DDK provider)
R3 AthNetAgent; C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Agent\AthNetAgent.exe [198656 2015-11-20] (Quacomm Atheros, Inc.) [Fichier non signé]
S3 DCDhcpService; C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\DirectConnect\DCDhcpService.exe [214528 2015-11-20] (Quacomm Atheros, Inc.) [Fichier non signé]
R2 DellRctlService; C:\Dell\Sytem64Folder\DellRctlService.exe [315392 2016-03-14] () [Fichier non signé]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-06-22] (Disc Soft Ltd)
R2 EH.C4DC.Service; C:\Program Files (x86)\Endress+Hauser\PAM_Service\EH.C4DC.WinService.exe [22016 2015-11-13] (Endress+Hauser Process Solutions AG) [Fichier non signé]
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1392792 2016-02-10] (Intel Corporation)
R2 FortiSslvpnDaemon; C:\windows\SysWOW64\FortiSSLVPNdaemon.exe [954080 2014-04-09] (Fortinet Inc.)
S2 gupdate1d21ee2ab4bdf44; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-10-05] (Google Inc.)
S3 gupdatem1d21ee2ab530364; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-10-05] (Google Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [353896 2016-02-10] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-07-09] ()
R2 ntrtscan; C:\Program Files (x86)\Trend Micro\OfficeScan Client\ntrtscan.exe [5684544 2016-06-02] (Trend Micro Inc.)
R2 OCS Inventory Service; C:\Program Files (x86)\OCS Inventory Agent\OcsService.exe [38912 2013-04-08] (OCS Inventory NG) [Fichier non signé]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [307456 2016-02-10] (Realtek Semiconductor)
R3 TMBMServer; C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe [592896 2016-05-31] (Trend Micro Inc.)
R3 tmccsf; C:\Program Files (x86)\Trend Micro\OfficeScan Client\CCSF\tmccsf.exe [851056 2016-06-02] (Trend Micro Inc.)
R2 tmlisten; C:\Program Files (x86)\Trend Micro\OfficeScan Client\tmlisten.exe [5298688 2016-06-02] (Trend Micro Inc.)
R3 TmPfw; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmPfw.exe [601360 2015-05-14] (Trend Micro Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831712 2015-07-09] (Intel® Corporation)
S4 HPReyos Service; [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [65248 2015-12-31] (Advanced Micro Devices, Inc.)
R3 BCMNFCSCR; C:\Windows\System32\DRIVERS\bcmnfcscr7.sys [50424 2015-08-26] (Broadcom Corporation.)
R3 bcmnfcusb; C:\Windows\System32\DRIVERS\bcmnfcusb7.sys [55544 2015-10-14] (Broadcom Corporation.)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [141800 2015-04-02] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1445688 2014-11-20] (Motorola Solutions, Inc.)
R3 DellRctl; C:\Windows\System32\DRIVERS\DellRctl.sys [29088 2016-03-12] ()
R3 dptf_acpi; C:\Windows\System32\DRIVERS\dptf_acpi.sys [55784 2016-02-10] (Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\DRIVERS\dptf_cpu.sys [52200 2016-02-10] (Intel Corporation)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-04-06] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-04-06] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [501216 2015-07-09] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 esif_lf; C:\Windows\System32\DRIVERS\esif_lf.sys [260072 2016-02-10] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [31144 2015-07-25] (Intel Corporation)
R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [233712 2015-08-13] (Intel Corporation)
R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [2595072 2016-02-10] (Realtek Semiconductor Corp.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [179456 2015-12-31] (Intel Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3964696 2015-12-31] (Intel Corporation)
R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [42528 2009-07-21] (Fortinet Inc.)
R2 PROFIbrd; C:\Windows\System32\Drivers\PROFIbrd.sys [203440 2015-03-09] (Softing Industrial Automation GmbH)
R2 PROFIprt; C:\Windows\System32\Drivers\PROFIprt.sys [50864 2015-03-09] (Softing Industrial Automation GmbH)
R2 PROFIstack; C:\Windows\System32\Drivers\PROFIstack.sys [152240 2015-03-09] (Softing Industrial Automation GmbH)
R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [758488 2016-02-10] (Realsil Semiconductor Corporation)
R3 ST_Accel; C:\Windows\System32\DRIVERS\ST_Accel.sys [103088 2015-12-31] (STMicroelectronics)
R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [120640 2016-04-21] (Trend Micro Inc.)
R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [324408 2015-12-09] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [72504 2015-11-19] (Trend Micro Inc.)
R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [116576 2015-06-08] (Trend Micro Inc.)
R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [79168 2016-04-21] (Trend Micro Inc.)
R2 TmFilter; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmXPFlt.sys [368392 2015-07-02] (Trend Micro Inc.)
R1 TmLwf; C:\Windows\System32\DRIVERS\tmlwf.sys [157432 2015-06-16] (Trend Micro Inc.)
R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [416608 2015-05-28] (Trend Micro Inc.)
R2 TmPreFilter; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmPreFlt.sys [44808 2015-07-02] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [109080 2013-06-18] (Trend Micro Inc.)
R1 tmumh; C:\Windows\System32\DRIVERS\TMUMH.sys [102176 2016-04-30] (Trend Micro Inc.)
S3 tmusa; C:\Windows\System32\DRIVERS\tmusa.sys [116536 2015-06-22] (Trend Micro Inc.)
R2 tmWfp; C:\Windows\System32\DRIVERS\tmwfp.sys [290296 2015-06-16] (Trend Micro Inc.)
R3 vmkbd2; C:\windows\system32\drivers\VMkbd.sys [33472 2014-11-20] (VMware, Inc.)
R2 VMparport; C:\windows\system32\drivers\VMparport.sys [31936 2014-11-20] (VMware, Inc.)
R2 VSApiNt; C:\Program Files (x86)\Trend Micro\OfficeScan Client\VSApiNt.sys [2384136 2015-07-02] (Trend Micro Inc.)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [76480 2014-11-17] (VMware, Inc.)
R3 wbfcvusbdrv; C:\Windows\System32\Drivers\wbfcvusbdrv.sys [17632 2015-08-26] ()
S3 xb1usb; C:\Windows\System32\DRIVERS\xb1usb.sys [42760 2016-02-21] (Microsoft Corporation)
S3 intaud_WaveExtensible; system32\drivers\intelaud.sys [X]
S3 iwdbus; system32\DRIVERS\iwdbus.sys [X]
S3 usb3Hub; system32\DRIVERS\usb3Hub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-10-07 18:26 - 2016-10-07 18:27 - 00026175 _____ C:\Users\a.frouin\Desktop\FRST.txt
2016-10-07 18:26 - 2016-10-07 18:27 - 00004528 _____ C:\windows\RegBootClean64.CFG
2016-10-07 18:26 - 2016-10-07 18:26 - 02405376 _____ (Farbar) C:\Users\a.frouin\Desktop\FRST64.exe
2016-10-07 18:26 - 2016-10-07 18:26 - 00000000 ____D C:\FRST
2016-10-07 15:37 - 2016-10-07 15:37 - 00000000 ___RD C:\Users\a.frouin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-10-07 07:47 - 2016-10-07 07:47 - 00000004 ____H C:\ProgramData\cm-lock
2016-10-07 06:57 - 2016-10-07 06:57 - 00005666 _____ C:\Users\a.frouin\Desktop\rapport MGADiag.txt
2016-10-07 06:56 - 2016-10-07 06:56 - 00000000 ____D C:\MGADiagToolOutput
2016-10-07 06:55 - 2016-10-07 06:55 - 01607032 _____ (Microsoft Corporation) C:\Users\a.frouin\Downloads\MGADiag.exe
2016-10-07 06:55 - 2016-10-07 06:55 - 00000000 ____D C:\ProgramData\Office Genuine Advantage
2016-10-06 05:47 - 2016-10-06 05:47 - 00201498 _____ C:\Users\a.frouin\Desktop\Documents-dembarquement 07_10 séoul - Ams.pdf
2016-10-06 00:34 - 2016-10-06 00:57 - 373312640 _____ C:\Users\a.frouin\Downloads\The.Flash.2014.S03E01.FASTSUB.VOSTFR.HDTV.XviD-ZT.www.Zone-Telechargement.com.avi
2016-10-06 00:02 - 2016-10-06 01:36 - 00000000 ____D C:\Users\a.frouin\Desktop\logiciel atimalware rapport PC à envoyer
2016-10-05 23:55 - 2016-10-05 23:55 - 00003164 _____ C:\windows\System32\Tasks\{6F2FD210-3111-45BB-A113-E2053C71FAFA}
2016-10-05 23:52 - 2016-10-05 23:54 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-10-05 14:15 - 2016-10-05 23:57 - 00000000 ____D C:\Users\a.frouin\AppData\Roaming\ZHP
2016-10-05 14:15 - 2016-10-05 14:15 - 02382848 ____N C:\Users\a.frouin\Downloads\ZHPDiag3.exe
2016-10-05 12:42 - 2016-10-06 02:00 - 00000516 _____ C:\windows\Tasks\Wise Registry Cleaner Schedule Task.job
2016-10-05 12:42 - 2016-10-05 12:42 - 00003392 _____ C:\windows\System32\Tasks\Wise Registry Cleaner Schedule Task
2016-10-05 11:55 - 2016-10-05 11:56 - 00000802 _____ C:\Users\a.frouin\Downloads\Rebuild_Icon_Cache.bat
2016-10-05 10:36 - 2016-10-05 10:36 - 00002096 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk
2016-10-05 06:00 - 2016-10-05 06:00 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2016-10-05 06:00 - 2016-10-05 06:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-10-05 05:59 - 2016-10-05 05:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-10-05 05:59 - 2016-10-05 05:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-10-05 05:59 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2016-10-05 05:59 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys
2016-10-05 05:59 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2016-10-05 05:58 - 2016-10-05 05:58 - 22851472 _____ (Malwarebytes ) C:\Users\a.frouin\Downloads\mbam-setup-cnet.35891-2.2.1.1043.exe
2016-10-05 05:14 - 2016-10-07 07:45 - 00001039 _____ C:\DelFix.txt
2016-10-05 04:53 - 2016-10-07 18:26 - 00000000 ____D C:\Users\a.frouin\AppData\Roaming\HPReyos
2016-10-05 04:53 - 2016-10-05 04:53 - 00002088 _____ C:\Users\AdminPG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-05 04:53 - 2016-10-05 04:53 - 00002088 _____ C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-05 04:53 - 2016-10-05 04:53 - 00002020 _____ C:\Users\a.frouin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-05 04:52 - 2016-10-05 04:52 - 00000000 ____D C:\Users\a.frouin\AppData\Local\VideoEditor
2016-10-05 04:52 - 2016-10-05 04:52 - 00000000 ____D C:\Users\a.frouin\AppData\Local\Movavi
2016-10-05 04:50 - 2016-10-05 04:50 - 00004989 _____ C:\ProgramData\mzemgkrx.fuc
2016-10-05 04:50 - 2016-10-05 04:50 - 00000000 ____D C:\ProgramData\Movavi Video Editor 11 SE
2016-10-05 04:48 - 2016-10-05 04:48 - 00004157 _____ C:\ProgramData\czchsjpj.srw
2016-10-05 04:48 - 2016-10-05 04:48 - 00000000 ____D C:\ProgramData\Movavi Video Editor 12
2016-10-05 02:53 - 2016-10-05 02:54 - 00000000 ____D C:\Users\a.frouin\AppData\Local\Axialis
2016-10-05 02:53 - 2016-10-05 02:53 - 00568081 _____ (Axialis Software) C:\windows\SysWOW64\Eclairs.scr
2016-10-05 02:28 - 2016-10-05 02:29 - 00000000 ____D C:\Users\a.frouin\Downloads\install logciel
2016-10-05 02:08 - 2016-10-05 14:56 - 00000000 ____D C:\Users\a.frouin\Downloads\à trier PIERRE GUERIN
2016-10-03 08:00 - 2016-03-11 15:32 - 00000000 ____D C:\Users\a.frouin\Downloads\moonhntrpc
2016-10-03 06:41 - 2016-10-03 06:42 - 00000000 ____D C:\Users\a.frouin\Desktop\Perso
2016-10-03 03:59 - 2016-10-03 03:59 - 00000000 ____D C:\ProgramData\KONICA MINOLTA
2016-10-03 03:59 - 2016-09-23 14:45 - 00152064 _____ (KONICA MINOLTA, INC.) C:\windows\KOBDrvAPIW64.EXE
2016-10-03 03:59 - 2016-09-23 14:45 - 00103424 _____ (KONICA MINOLTA, INC.) C:\windows\system32\KOBDrvAPIIF.DLL
2016-10-03 03:59 - 2016-09-23 14:45 - 00095744 _____ (KONICA MINOLTA, INC.) C:\windows\SysWOW64\KOBDrvAPIIF.DLL
2016-10-01 05:31 - 2016-10-01 05:34 - 00000000 ____D C:\Users\a.frouin\Downloads\idées maison
2016-09-27 05:40 - 2016-09-27 05:41 - 00000000 ____D C:\Program Files (x86)\Grow Up
2016-09-27 04:27 - 2016-09-27 04:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-09-27 04:26 - 2016-09-27 04:26 - 00000000 ____D C:\Program Files\iTunes
2016-09-27 04:26 - 2016-09-27 04:26 - 00000000 ____D C:\Program Files\iPod
2016-09-27 04:21 - 2016-09-27 06:25 - 00000000 ____D C:\Users\a.frouin\Desktop\dossier agitation
2016-09-19 11:12 - 2016-09-19 11:12 - 00000000 ____D C:\Users\a.frouin\AppData\LocalLow\Le Cartel Studio
2016-09-19 11:12 - 2016-09-19 11:12 - 00000000 ____D C:\GOG Games
2016-09-18 13:24 - 2016-09-18 13:24 - 02591312 _____ C:\Users\a.frouin\Downloads\la preuve2.mp4
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-10-07 18:27 - 2016-08-08 13:30 - 00000068 __RSH C:\windows\system32\Drivers\wacompen.winsecurity
2016-10-07 18:27 - 2016-07-19 15:08 - 00451584 _____ (Trend Micro Inc.) C:\windows\RegBootClean64.exe
2016-10-07 18:25 - 2016-04-04 11:52 - 00000000 ____D C:\Users\a.frouin\Documents\Fichiers Outlook
2016-10-07 18:24 - 2016-08-08 13:30 - 00000068 __RSH C:\windows\system32\Drivers\WUDFPf.winsecurity
2016-10-07 18:24 - 2016-04-05 07:43 - 00001072 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-07 18:24 - 2016-04-04 09:44 - 00001002 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-10-07 15:37 - 2010-11-21 08:25 - 00793718 _____ C:\windows\system32\perfh00C.dat
2016-10-07 15:37 - 2010-11-21 08:25 - 00166088 _____ C:\windows\system32\perfc00C.dat
2016-10-07 15:37 - 2009-07-14 07:13 - 01784790 _____ C:\windows\system32\PerfStringBackup.INI
2016-10-07 15:37 - 2009-07-14 05:20 - 00000000 ____D C:\windows\inf
2016-10-07 15:36 - 2016-04-04 10:47 - 00002686 __RSH C:\Users\a.frouin\ntuser.pol
2016-10-07 15:36 - 2016-04-04 10:47 - 00000000 ____D C:\Users\a.frouin
2016-10-07 15:36 - 2016-03-17 16:46 - 00025903 __RSH C:\ProgramData\ntuser.pol
2016-10-07 15:36 - 2016-03-17 16:25 - 00000144 _____ C:\windows\system32\config\netlogon.ftl
2016-10-07 15:27 - 2016-04-05 07:43 - 00001068 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-07 15:26 - 2016-04-09 21:52 - 00000000 ____D C:\Users\a.frouin\AppData\Roaming\vlc
2016-10-07 08:31 - 2009-07-14 06:45 - 00023824 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-07 08:31 - 2009-07-14 06:45 - 00023824 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-07 07:48 - 2016-05-30 16:41 - 00000000 ___RD C:\Users\a.frouin\Google Drive
2016-10-07 07:48 - 2016-04-04 10:47 - 00000000 __SHD C:\Users\a.frouin\IntelGraphicsProfiles
2016-10-07 07:47 - 2016-04-04 10:59 - 00000000 ____D C:\ProgramData\VMware
2016-10-07 07:46 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-10-07 06:52 - 2016-05-07 09:49 - 00003204 _____ C:\windows\System32\Tasks\HPCeeScheduleForA.FROUIN
2016-10-07 06:52 - 2016-05-07 09:49 - 00000344 _____ C:\windows\Tasks\HPCeeScheduleForA.FROUIN.job
2016-10-06 10:55 - 2016-04-04 11:47 - 00000000 ___RD C:\Users\a.frouin\Desktop\logiciel
2016-10-06 03:19 - 2016-04-04 11:47 - 00000000 ____D C:\Users\a.frouin\Desktop\Divers utilités PG
2016-10-06 02:53 - 2016-04-04 11:48 - 00000000 ____D C:\Users\a.frouin\Desktop\Note de frais
2016-10-06 02:52 - 2016-04-04 11:47 - 00000000 ____D C:\Users\a.frouin\Desktop\feuilles de primes
2016-10-05 10:30 - 2016-04-05 07:43 - 00004068 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-10-05 10:30 - 2016-04-05 07:43 - 00003816 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-10-05 10:30 - 2016-04-05 07:43 - 00000000 ____D C:\Program Files (x86)\Google
2016-10-05 10:29 - 2016-04-06 08:21 - 00000000 ____D C:\Users\a.frouin\AppData\Local\Deployment
2016-10-05 05:17 - 2016-04-26 08:23 - 00000000 ____D C:\Users\a.frouin\AppData\Local\CrashDumps
2016-10-05 04:55 - 2016-08-08 09:01 - 00000000 ____D C:\Users\a.frouin\Downloads\à trier
2016-10-05 04:53 - 2009-07-14 05:20 - 00000000 ___HD C:\windows\system32\GroupPolicy
2016-10-04 06:22 - 2016-08-03 14:27 - 00000000 ____D C:\Users\a.frouin\Downloads\photos
2016-10-03 06:03 - 2016-06-29 07:57 - 00000000 ____D C:\Users\a.frouin\Downloads\SFR
2016-10-03 03:59 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\spool
2016-09-30 04:49 - 2016-04-06 17:53 - 00000000 ____D C:\Users\a.frouin\AppData\Roaming\DAEMON Tools Lite
2016-09-29 07:09 - 2016-04-04 11:50 - 00033828 _____ C:\Users\a.frouin\Desktop\Calendrier2016.xlsm
2016-09-29 06:42 - 2016-04-04 11:47 - 00000000 ____D C:\Users\a.frouin\Desktop\archive calendrier déplacement
2016-09-27 05:10 - 2016-04-04 12:07 - 00000000 ____D C:\Users\a.frouin\AppData\Local\PDFCreator
2016-09-27 04:26 - 2016-04-06 07:48 - 00000000 ____D C:\Users\a.frouin\Desktop\PROJET en cours
2016-09-27 04:26 - 2016-04-05 15:38 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-09-26 17:11 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2016-09-19 11:14 - 2016-07-26 19:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-09-19 11:14 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-09-15 13:58 - 2016-04-04 11:47 - 00000000 ____D C:\Users\a.frouin\Desktop\demande de voyages
==================== Fichiers à la racine de certains dossiers =======
2016-05-07 09:49 - 2016-05-07 09:49 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-10-07 07:47 - 2016-10-07 07:47 - 0000004 ____H () C:\ProgramData\cm-lock
2016-10-05 04:48 - 2016-10-05 04:48 - 0004157 _____ () C:\ProgramData\czchsjpj.srw
2016-10-05 04:50 - 2016-10-05 04:50 - 0004989 _____ () C:\ProgramData\mzemgkrx.fuc
Certains fichiers dans TEMP:
====================
C:\Users\Administrateur\AppData\Local\Temp\AcDeltree.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\windows\system32\wininit.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\windows\explorer.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\windows\system32\svchost.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\windows\system32\services.exe => Le fichier est signé numériquement
C:\windows\system32\User32.dll => Le fichier est signé numériquement
C:\windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\windows\system32\userinit.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-07-27 14:04
==================== Fin de FRST.txt ============================
Exécuté par A.FROUIN (administrateur) sur PC-D4M8N72 (07-10-2016 18:26:49)
Exécuté depuis C:\Users\a.frouin\Desktop
Profils chargés: A.FROUIN (Profils disponibles: A.FROUIN & AdminPG & Administrateur)
Platform: Windows 7 Enterprise Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\HidMonitorSvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Dell\Sytem64Folder\DellRctlService.exe
(Endress+Hauser Process Solutions AG) C:\Program Files (x86)\Endress+Hauser\PAM_Service\EH.C4DC.WinService.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Fortinet Inc.) C:\Windows\SysWOW64\FortiSSLVPNdaemon.exe
() C:\Users\a.frouin\AppData\Roaming\HPReyos\HPReyosSrv3.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\Ntrtscan.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(OCS Inventory NG) C:\Program Files (x86)\OCS Inventory Agent\OcsService.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmListen.exe
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\CNTAoSMgr.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\CCSF\TmCCSF.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmPfw.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Qualcomm Atheros) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\BtvStack.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Qualcomm Atheros Inc.) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\awic\AWiCMgr.exe
(Qualcomm Atheros, Inc.) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\AWiCDiag.exe
(Qualcomm Atheros Inc.) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Wcct.exe
(Qualcomm Atheros) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\BtTray.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
() C:\LiberKey\Apps\RocketDock\App\RocketDock\RocketDock.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(OCS Inventory NG) C:\Program Files (x86)\OCS Inventory Agent\OcsSystray.exe
(Trend Micro Inc.) C:\Program Files (x86)\Trend Micro\OfficeScan Client\PccNTMon.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\spectral\SocketServer.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Quacomm Atheros, Inc.) C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Agent\AthNetAgent.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office16\OUTLOOK.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [736552 2016-02-10] (Alps Electric Co., Ltd.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8712960 2016-02-10] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_MAXX6] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407232 2016-02-10] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [7822312 2015-04-20] (Motorola Solutions, Inc.)
HKLM\...\Run: [AWiCMgr] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\AWiC\AWiCMgr.exe [185856 2015-11-20] (Qualcomm Atheros Inc.)
HKLM\...\Run: [AWiCDiag] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\ihvs\AWiCDiag.exe [3067392 2015-11-20] (Qualcomm Atheros, Inc.)
HKLM\...\Run: [wcct] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\wcct.exe [1076224 2015-11-20] (Qualcomm Atheros Inc.)
HKLM\...\Run: [BtTray] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\BtTray.exe [854776 2015-11-30] (Qualcomm Atheros)
HKLM\...\Run: [IntelPROSet] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4879264 2015-07-09] (Intel(R) Corporation)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-06-15] (Intel Corporation)
HKLM-x32\...\Run: [OfficeScanNT Monitor] => C:\Program Files (x86)\Trend Micro\OfficeScan Client\pccntmon.exe [2503608 2016-06-02] (Trend Micro Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\BtvStack.exe [134904 2015-11-30] (Qualcomm Atheros)
HKLM\...\Policies\Explorer: [NoPublishingWizard] 1
HKLM\...\Policies\Explorer: [NoWebServices] 1
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8686296 2016-03-11] (Piriform Ltd)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [HP ENVY 4500 series (NET)] => C:\Program Files\HP\HP ENVY 4500 series\Bin\ScanToPCActivationApp.exe [3487240 2014-07-21] (Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23375200 2016-07-29] (Google)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4299968 2016-06-22] (Disc Soft Ltd)
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\...\Run: [RocketDock] => C:\LiberKey\Apps\RocketDock\App\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1962090106-778446277-1857948575-8339\Control Panel\Desktop\\SCRNSAVE.EXE ->
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-07-29] (Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\windows\system32\AcSignIcon.dll [2015-02-06] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2016-08-23]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OCS Inventory NG Systray.lnk [2016-04-04]
ShortcutTarget: OCS Inventory NG Systray.lnk -> C:\Program Files (x86)\OCS Inventory Agent\OcsSystray.exe (OCS Inventory NG)
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5C1D2913-893A-43F4-BB3E-73BE72FA334A}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.fr
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Trend Micro Osprey Plugin -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmopIEPlg.dll [2015-06-17] (Trend Micro Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-15] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2016-06-14] (Microsoft Corporation)
BHO-x32: Trend Micro Osprey Plugin -> {959A5673-7971-48e6-AF54-58F745AC4ABC} -> C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmopIEPlg32.dll [2015-06-17] (Trend Micro Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-06-15] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-05-20] (Microsoft Corporation)
Handler: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmopIEPlg.dll [2015-06-17] (Trend Micro Inc.)
Handler-x32: tmop - {69FD7CE3-4604-4fe6-967C-49B9735CEE70} - C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmopIEPlg32.dll [2015-06-17] (Trend Micro Inc.)
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [{BBB77B49-9FF4-4d5c-8FE2-92B1D6CD696C}] - C:\Program Files (x86)\Trend Micro\OfficeScan Client\FirefoxExtensionOsprey
FF Extension: (Trend Micro Osprey Firefox Extension) - C:\Program Files (x86)\Trend Micro\OfficeScan Client\FirefoxExtensionOsprey [2016-04-04] [non signé]
FF Plugin-x32: @FortinetCacheClean -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccplugin.dll [2014-04-09] (Fortinet Inc.)
FF Plugin-x32: @FortinetCacheCleanEx -> C:\Program Files (x86)\Fortinet\SslvpnClient\npccpluginex.dll [2014-04-09] (Fortinet Inc.)
FF Plugin-x32: @FortinetTunnelControl -> C:\Program Files (x86)\Fortinet\SslvpnClient\nptcplugin.dll [2014-04-09] (Fortinet Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-10-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-02-26] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1962090106-778446277-1857948575-8339: @citrixonline.com/appdetectorplugin -> C:\Users\a.frouin\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2016-08-08] (Citrix Online)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default [2016-10-07]
CHR Extension: (Google Slides) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-04-05]
CHR Extension: (Google Docs) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-04-05]
CHR Extension: (Google Drive) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-04-05]
CHR Extension: (YouTube) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-04-05]
CHR Extension: (Google Sheets) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-04-05]
CHR Extension: (Google Docs Offline) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-05]
CHR Extension: (What's your name?) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-10-07]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-05-30]
CHR Extension: (Chrome Web Store Payments) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-05]
CHR Extension: (Gmail) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-04-05]
CHR Extension: (Chrome Media Router) - C:\Users\a.frouin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-09-26]
CHR HKU\S-1-5-21-1962090106-778446277-1857948575-8339\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ApHidMonitorService; C:\Program Files\DellTPad\HidMonitorSvc.exe [96000 2016-02-10] (Alps Electric Co., Ltd.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
S2 AtherosSvc; C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Bluetooth Suite\adminservice.exe [324856 2015-11-30] (Windows (R) Win 7 DDK provider)
R3 AthNetAgent; C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\Agent\AthNetAgent.exe [198656 2015-11-20] (Quacomm Atheros, Inc.) [Fichier non signé]
S3 DCDhcpService; C:\Program Files (x86)\Dell\Dell Unified Wireless Suite\DirectConnect\DCDhcpService.exe [214528 2015-11-20] (Quacomm Atheros, Inc.) [Fichier non signé]
R2 DellRctlService; C:\Dell\Sytem64Folder\DellRctlService.exe [315392 2016-03-14] () [Fichier non signé]
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-06-22] (Disc Soft Ltd)
R2 EH.C4DC.Service; C:\Program Files (x86)\Endress+Hauser\PAM_Service\EH.C4DC.WinService.exe [22016 2015-11-13] (Endress+Hauser Process Solutions AG) [Fichier non signé]
R2 esifsvc; C:\Windows\SysWOW64\esif_uf.exe [1392792 2016-02-10] (Intel Corporation)
R2 FortiSslvpnDaemon; C:\windows\SysWOW64\FortiSSLVPNdaemon.exe [954080 2014-04-09] (Fortinet Inc.)
S2 gupdate1d21ee2ab4bdf44; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-10-05] (Google Inc.)
S3 gupdatem1d21ee2ab530364; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2016-10-05] (Google Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [29728 2016-08-15] (HP Inc.)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [353896 2016-02-10] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-07-09] ()
R2 ntrtscan; C:\Program Files (x86)\Trend Micro\OfficeScan Client\ntrtscan.exe [5684544 2016-06-02] (Trend Micro Inc.)
R2 OCS Inventory Service; C:\Program Files (x86)\OCS Inventory Agent\OcsService.exe [38912 2013-04-08] (OCS Inventory NG) [Fichier non signé]
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [307456 2016-02-10] (Realtek Semiconductor)
R3 TMBMServer; C:\Program Files (x86)\Trend Micro\BM\TMBMSRV.exe [592896 2016-05-31] (Trend Micro Inc.)
R3 tmccsf; C:\Program Files (x86)\Trend Micro\OfficeScan Client\CCSF\tmccsf.exe [851056 2016-06-02] (Trend Micro Inc.)
R2 tmlisten; C:\Program Files (x86)\Trend Micro\OfficeScan Client\tmlisten.exe [5298688 2016-06-02] (Trend Micro Inc.)
R3 TmPfw; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmPfw.exe [601360 2015-05-14] (Trend Micro Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831712 2015-07-09] (Intel® Corporation)
S4 HPReyos Service; [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [65248 2015-12-31] (Advanced Micro Devices, Inc.)
R3 BCMNFCSCR; C:\Windows\System32\DRIVERS\bcmnfcscr7.sys [50424 2015-08-26] (Broadcom Corporation.)
R3 bcmnfcusb; C:\Windows\System32\DRIVERS\bcmnfcusb7.sys [55544 2015-10-14] (Broadcom Corporation.)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [141800 2015-04-02] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1445688 2014-11-20] (Motorola Solutions, Inc.)
R3 DellRctl; C:\Windows\System32\DRIVERS\DellRctl.sys [29088 2016-03-12] ()
R3 dptf_acpi; C:\Windows\System32\DRIVERS\dptf_acpi.sys [55784 2016-02-10] (Intel Corporation)
R3 dptf_cpu; C:\Windows\System32\DRIVERS\dptf_cpu.sys [52200 2016-02-10] (Intel Corporation)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-04-06] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-04-06] (Disc Soft Ltd)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [501216 2015-07-09] (Intel Corporation)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 esif_lf; C:\Windows\System32\DRIVERS\esif_lf.sys [260072 2016-02-10] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [31144 2015-07-25] (Intel Corporation)
R3 ibtusb; C:\Windows\System32\DRIVERS\ibtusb.sys [233712 2015-08-13] (Intel Corporation)
R3 IntcAzAudAddService; C:\Windows\System32\drivers\RTDVHD64.sys [2595072 2016-02-10] (Realtek Semiconductor Corp.)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [179456 2015-12-31] (Intel Corporation)
R3 NETwNs64; C:\Windows\System32\DRIVERS\Netwsw02.sys [3964696 2015-12-31] (Intel Corporation)
R3 pppop; C:\Windows\System32\DRIVERS\pppop64.sys [42528 2009-07-21] (Fortinet Inc.)
R2 PROFIbrd; C:\Windows\System32\Drivers\PROFIbrd.sys [203440 2015-03-09] (Softing Industrial Automation GmbH)
R2 PROFIprt; C:\Windows\System32\Drivers\PROFIprt.sys [50864 2015-03-09] (Softing Industrial Automation GmbH)
R2 PROFIstack; C:\Windows\System32\Drivers\PROFIstack.sys [152240 2015-03-09] (Softing Industrial Automation GmbH)
R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [758488 2016-02-10] (Realsil Semiconductor Corporation)
R3 ST_Accel; C:\Windows\System32\DRIVERS\ST_Accel.sys [103088 2015-12-31] (STMicroelectronics)
R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [120640 2016-04-21] (Trend Micro Inc.)
R1 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [324408 2015-12-09] (Trend Micro Inc.)
R0 TMEBC; C:\Windows\System32\DRIVERS\TMEBC64.sys [72504 2015-11-19] (Trend Micro Inc.)
R3 tmeevw; C:\Windows\System32\DRIVERS\tmeevw.sys [116576 2015-06-08] (Trend Micro Inc.)
R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [79168 2016-04-21] (Trend Micro Inc.)
R2 TmFilter; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmXPFlt.sys [368392 2015-07-02] (Trend Micro Inc.)
R1 TmLwf; C:\Windows\System32\DRIVERS\tmlwf.sys [157432 2015-06-16] (Trend Micro Inc.)
R3 tmnciesc; C:\Windows\System32\DRIVERS\tmnciesc.sys [416608 2015-05-28] (Trend Micro Inc.)
R2 TmPreFilter; C:\Program Files (x86)\Trend Micro\OfficeScan Client\TmPreFlt.sys [44808 2015-07-02] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [109080 2013-06-18] (Trend Micro Inc.)
R1 tmumh; C:\Windows\System32\DRIVERS\TMUMH.sys [102176 2016-04-30] (Trend Micro Inc.)
S3 tmusa; C:\Windows\System32\DRIVERS\tmusa.sys [116536 2015-06-22] (Trend Micro Inc.)
R2 tmWfp; C:\Windows\System32\DRIVERS\tmwfp.sys [290296 2015-06-16] (Trend Micro Inc.)
R3 vmkbd2; C:\windows\system32\drivers\VMkbd.sys [33472 2014-11-20] (VMware, Inc.)
R2 VMparport; C:\windows\system32\drivers\VMparport.sys [31936 2014-11-20] (VMware, Inc.)
R2 VSApiNt; C:\Program Files (x86)\Trend Micro\OfficeScan Client\VSApiNt.sys [2384136 2015-07-02] (Trend Micro Inc.)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [76480 2014-11-17] (VMware, Inc.)
R3 wbfcvusbdrv; C:\Windows\System32\Drivers\wbfcvusbdrv.sys [17632 2015-08-26] ()
S3 xb1usb; C:\Windows\System32\DRIVERS\xb1usb.sys [42760 2016-02-21] (Microsoft Corporation)
S3 intaud_WaveExtensible; system32\drivers\intelaud.sys [X]
S3 iwdbus; system32\DRIVERS\iwdbus.sys [X]
S3 usb3Hub; system32\DRIVERS\usb3Hub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-10-07 18:26 - 2016-10-07 18:27 - 00026175 _____ C:\Users\a.frouin\Desktop\FRST.txt
2016-10-07 18:26 - 2016-10-07 18:27 - 00004528 _____ C:\windows\RegBootClean64.CFG
2016-10-07 18:26 - 2016-10-07 18:26 - 02405376 _____ (Farbar) C:\Users\a.frouin\Desktop\FRST64.exe
2016-10-07 18:26 - 2016-10-07 18:26 - 00000000 ____D C:\FRST
2016-10-07 15:37 - 2016-10-07 15:37 - 00000000 ___RD C:\Users\a.frouin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-10-07 07:47 - 2016-10-07 07:47 - 00000004 ____H C:\ProgramData\cm-lock
2016-10-07 06:57 - 2016-10-07 06:57 - 00005666 _____ C:\Users\a.frouin\Desktop\rapport MGADiag.txt
2016-10-07 06:56 - 2016-10-07 06:56 - 00000000 ____D C:\MGADiagToolOutput
2016-10-07 06:55 - 2016-10-07 06:55 - 01607032 _____ (Microsoft Corporation) C:\Users\a.frouin\Downloads\MGADiag.exe
2016-10-07 06:55 - 2016-10-07 06:55 - 00000000 ____D C:\ProgramData\Office Genuine Advantage
2016-10-06 05:47 - 2016-10-06 05:47 - 00201498 _____ C:\Users\a.frouin\Desktop\Documents-dembarquement 07_10 séoul - Ams.pdf
2016-10-06 00:34 - 2016-10-06 00:57 - 373312640 _____ C:\Users\a.frouin\Downloads\The.Flash.2014.S03E01.FASTSUB.VOSTFR.HDTV.XviD-ZT.www.Zone-Telechargement.com.avi
2016-10-06 00:02 - 2016-10-06 01:36 - 00000000 ____D C:\Users\a.frouin\Desktop\logiciel atimalware rapport PC à envoyer
2016-10-05 23:55 - 2016-10-05 23:55 - 00003164 _____ C:\windows\System32\Tasks\{6F2FD210-3111-45BB-A113-E2053C71FAFA}
2016-10-05 23:52 - 2016-10-05 23:54 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-10-05 14:15 - 2016-10-05 23:57 - 00000000 ____D C:\Users\a.frouin\AppData\Roaming\ZHP
2016-10-05 14:15 - 2016-10-05 14:15 - 02382848 ____N C:\Users\a.frouin\Downloads\ZHPDiag3.exe
2016-10-05 12:42 - 2016-10-06 02:00 - 00000516 _____ C:\windows\Tasks\Wise Registry Cleaner Schedule Task.job
2016-10-05 12:42 - 2016-10-05 12:42 - 00003392 _____ C:\windows\System32\Tasks\Wise Registry Cleaner Schedule Task
2016-10-05 11:55 - 2016-10-05 11:56 - 00000802 _____ C:\Users\a.frouin\Downloads\Rebuild_Icon_Cache.bat
2016-10-05 10:36 - 2016-10-05 10:36 - 00002096 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооglе Сhrоmе.lnk
2016-10-05 06:00 - 2016-10-05 06:00 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2016-10-05 06:00 - 2016-10-05 06:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-10-05 05:59 - 2016-10-05 05:59 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-10-05 05:59 - 2016-10-05 05:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-10-05 05:59 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys
2016-10-05 05:59 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys
2016-10-05 05:59 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys
2016-10-05 05:58 - 2016-10-05 05:58 - 22851472 _____ (Malwarebytes ) C:\Users\a.frouin\Downloads\mbam-setup-cnet.35891-2.2.1.1043.exe
2016-10-05 05:14 - 2016-10-07 07:45 - 00001039 _____ C:\DelFix.txt
2016-10-05 04:53 - 2016-10-07 18:26 - 00000000 ____D C:\Users\a.frouin\AppData\Roaming\HPReyos
2016-10-05 04:53 - 2016-10-05 04:53 - 00002088 _____ C:\Users\AdminPG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-05 04:53 - 2016-10-05 04:53 - 00002088 _____ C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-05 04:53 - 2016-10-05 04:53 - 00002020 _____ C:\Users\a.frouin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Ехрlоrеr.lnk
2016-10-05 04:52 - 2016-10-05 04:52 - 00000000 ____D C:\Users\a.frouin\AppData\Local\VideoEditor
2016-10-05 04:52 - 2016-10-05 04:52 - 00000000 ____D C:\Users\a.frouin\AppData\Local\Movavi
2016-10-05 04:50 - 2016-10-05 04:50 - 00004989 _____ C:\ProgramData\mzemgkrx.fuc
2016-10-05 04:50 - 2016-10-05 04:50 - 00000000 ____D C:\ProgramData\Movavi Video Editor 11 SE
2016-10-05 04:48 - 2016-10-05 04:48 - 00004157 _____ C:\ProgramData\czchsjpj.srw
2016-10-05 04:48 - 2016-10-05 04:48 - 00000000 ____D C:\ProgramData\Movavi Video Editor 12
2016-10-05 02:53 - 2016-10-05 02:54 - 00000000 ____D C:\Users\a.frouin\AppData\Local\Axialis
2016-10-05 02:53 - 2016-10-05 02:53 - 00568081 _____ (Axialis Software) C:\windows\SysWOW64\Eclairs.scr
2016-10-05 02:28 - 2016-10-05 02:29 - 00000000 ____D C:\Users\a.frouin\Downloads\install logciel
2016-10-05 02:08 - 2016-10-05 14:56 - 00000000 ____D C:\Users\a.frouin\Downloads\à trier PIERRE GUERIN
2016-10-03 08:00 - 2016-03-11 15:32 - 00000000 ____D C:\Users\a.frouin\Downloads\moonhntrpc
2016-10-03 06:41 - 2016-10-03 06:42 - 00000000 ____D C:\Users\a.frouin\Desktop\Perso
2016-10-03 03:59 - 2016-10-03 03:59 - 00000000 ____D C:\ProgramData\KONICA MINOLTA
2016-10-03 03:59 - 2016-09-23 14:45 - 00152064 _____ (KONICA MINOLTA, INC.) C:\windows\KOBDrvAPIW64.EXE
2016-10-03 03:59 - 2016-09-23 14:45 - 00103424 _____ (KONICA MINOLTA, INC.) C:\windows\system32\KOBDrvAPIIF.DLL
2016-10-03 03:59 - 2016-09-23 14:45 - 00095744 _____ (KONICA MINOLTA, INC.) C:\windows\SysWOW64\KOBDrvAPIIF.DLL
2016-10-01 05:31 - 2016-10-01 05:34 - 00000000 ____D C:\Users\a.frouin\Downloads\idées maison
2016-09-27 05:40 - 2016-09-27 05:41 - 00000000 ____D C:\Program Files (x86)\Grow Up
2016-09-27 04:27 - 2016-09-27 04:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2016-09-27 04:26 - 2016-09-27 04:26 - 00000000 ____D C:\Program Files\iTunes
2016-09-27 04:26 - 2016-09-27 04:26 - 00000000 ____D C:\Program Files\iPod
2016-09-27 04:21 - 2016-09-27 06:25 - 00000000 ____D C:\Users\a.frouin\Desktop\dossier agitation
2016-09-19 11:12 - 2016-09-19 11:12 - 00000000 ____D C:\Users\a.frouin\AppData\LocalLow\Le Cartel Studio
2016-09-19 11:12 - 2016-09-19 11:12 - 00000000 ____D C:\GOG Games
2016-09-18 13:24 - 2016-09-18 13:24 - 02591312 _____ C:\Users\a.frouin\Downloads\la preuve2.mp4
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-10-07 18:27 - 2016-08-08 13:30 - 00000068 __RSH C:\windows\system32\Drivers\wacompen.winsecurity
2016-10-07 18:27 - 2016-07-19 15:08 - 00451584 _____ (Trend Micro Inc.) C:\windows\RegBootClean64.exe
2016-10-07 18:25 - 2016-04-04 11:52 - 00000000 ____D C:\Users\a.frouin\Documents\Fichiers Outlook
2016-10-07 18:24 - 2016-08-08 13:30 - 00000068 __RSH C:\windows\system32\Drivers\WUDFPf.winsecurity
2016-10-07 18:24 - 2016-04-05 07:43 - 00001072 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-10-07 18:24 - 2016-04-04 09:44 - 00001002 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2016-10-07 15:37 - 2010-11-21 08:25 - 00793718 _____ C:\windows\system32\perfh00C.dat
2016-10-07 15:37 - 2010-11-21 08:25 - 00166088 _____ C:\windows\system32\perfc00C.dat
2016-10-07 15:37 - 2009-07-14 07:13 - 01784790 _____ C:\windows\system32\PerfStringBackup.INI
2016-10-07 15:37 - 2009-07-14 05:20 - 00000000 ____D C:\windows\inf
2016-10-07 15:36 - 2016-04-04 10:47 - 00002686 __RSH C:\Users\a.frouin\ntuser.pol
2016-10-07 15:36 - 2016-04-04 10:47 - 00000000 ____D C:\Users\a.frouin
2016-10-07 15:36 - 2016-03-17 16:46 - 00025903 __RSH C:\ProgramData\ntuser.pol
2016-10-07 15:36 - 2016-03-17 16:25 - 00000144 _____ C:\windows\system32\config\netlogon.ftl
2016-10-07 15:27 - 2016-04-05 07:43 - 00001068 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-10-07 15:26 - 2016-04-09 21:52 - 00000000 ____D C:\Users\a.frouin\AppData\Roaming\vlc
2016-10-07 08:31 - 2009-07-14 06:45 - 00023824 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-10-07 08:31 - 2009-07-14 06:45 - 00023824 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-10-07 07:48 - 2016-05-30 16:41 - 00000000 ___RD C:\Users\a.frouin\Google Drive
2016-10-07 07:48 - 2016-04-04 10:47 - 00000000 __SHD C:\Users\a.frouin\IntelGraphicsProfiles
2016-10-07 07:47 - 2016-04-04 10:59 - 00000000 ____D C:\ProgramData\VMware
2016-10-07 07:46 - 2009-07-14 07:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2016-10-07 06:52 - 2016-05-07 09:49 - 00003204 _____ C:\windows\System32\Tasks\HPCeeScheduleForA.FROUIN
2016-10-07 06:52 - 2016-05-07 09:49 - 00000344 _____ C:\windows\Tasks\HPCeeScheduleForA.FROUIN.job
2016-10-06 10:55 - 2016-04-04 11:47 - 00000000 ___RD C:\Users\a.frouin\Desktop\logiciel
2016-10-06 03:19 - 2016-04-04 11:47 - 00000000 ____D C:\Users\a.frouin\Desktop\Divers utilités PG
2016-10-06 02:53 - 2016-04-04 11:48 - 00000000 ____D C:\Users\a.frouin\Desktop\Note de frais
2016-10-06 02:52 - 2016-04-04 11:47 - 00000000 ____D C:\Users\a.frouin\Desktop\feuilles de primes
2016-10-05 10:30 - 2016-04-05 07:43 - 00004068 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-10-05 10:30 - 2016-04-05 07:43 - 00003816 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-10-05 10:30 - 2016-04-05 07:43 - 00000000 ____D C:\Program Files (x86)\Google
2016-10-05 10:29 - 2016-04-06 08:21 - 00000000 ____D C:\Users\a.frouin\AppData\Local\Deployment
2016-10-05 05:17 - 2016-04-26 08:23 - 00000000 ____D C:\Users\a.frouin\AppData\Local\CrashDumps
2016-10-05 04:55 - 2016-08-08 09:01 - 00000000 ____D C:\Users\a.frouin\Downloads\à trier
2016-10-05 04:53 - 2009-07-14 05:20 - 00000000 ___HD C:\windows\system32\GroupPolicy
2016-10-04 06:22 - 2016-08-03 14:27 - 00000000 ____D C:\Users\a.frouin\Downloads\photos
2016-10-03 06:03 - 2016-06-29 07:57 - 00000000 ____D C:\Users\a.frouin\Downloads\SFR
2016-10-03 03:59 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\spool
2016-09-30 04:49 - 2016-04-06 17:53 - 00000000 ____D C:\Users\a.frouin\AppData\Roaming\DAEMON Tools Lite
2016-09-29 07:09 - 2016-04-04 11:50 - 00033828 _____ C:\Users\a.frouin\Desktop\Calendrier2016.xlsm
2016-09-29 06:42 - 2016-04-04 11:47 - 00000000 ____D C:\Users\a.frouin\Desktop\archive calendrier déplacement
2016-09-27 05:10 - 2016-04-04 12:07 - 00000000 ____D C:\Users\a.frouin\AppData\Local\PDFCreator
2016-09-27 04:26 - 2016-04-06 07:48 - 00000000 ____D C:\Users\a.frouin\Desktop\PROJET en cours
2016-09-27 04:26 - 2016-04-05 15:38 - 00000000 ____D C:\Program Files\Common Files\Apple
2016-09-26 17:11 - 2009-07-14 05:20 - 00000000 ____D C:\windows\system32\NDF
2016-09-19 11:14 - 2016-07-26 19:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2016-09-19 11:14 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-09-15 13:58 - 2016-04-04 11:47 - 00000000 ____D C:\Users\a.frouin\Desktop\demande de voyages
==================== Fichiers à la racine de certains dossiers =======
2016-05-07 09:49 - 2016-05-07 09:49 - 0000057 _____ () C:\ProgramData\Ament.ini
2016-10-07 07:47 - 2016-10-07 07:47 - 0000004 ____H () C:\ProgramData\cm-lock
2016-10-05 04:48 - 2016-10-05 04:48 - 0004157 _____ () C:\ProgramData\czchsjpj.srw
2016-10-05 04:50 - 2016-10-05 04:50 - 0004989 _____ () C:\ProgramData\mzemgkrx.fuc
Certains fichiers dans TEMP:
====================
C:\Users\Administrateur\AppData\Local\Temp\AcDeltree.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\windows\system32\wininit.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\windows\explorer.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\windows\system32\svchost.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\windows\system32\services.exe => Le fichier est signé numériquement
C:\windows\system32\User32.dll => Le fichier est signé numériquement
C:\windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\windows\system32\userinit.exe => Le fichier est signé numériquement
C:\windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-07-27 14:04
==================== Fin de FRST.txt ============================