Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 06-11-2016
Exécuté par Alain (administrateur) sur ALAIN (10-11-2016 12:28:42)
Exécuté depuis C:\Documents and Settings\Alain\Bureau
Profils chargés: Alain (Profils disponibles: Alain & Administrateur)
Platform: Microsoft Windows XP Service Pack 3 (X86) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\PROGRA~1\MI6841~1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\PROGRA~1\MI6841~1\MSSQL\Binn\sqlagent.exe
(Microsoft Corporation) C:\WINDOWS\system32\imapi.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
Winlogon\Notify\uklognf: C:\WINDOWS\system32\uklognf.dll [2006-08-02] (Lenovo Co. LTD)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-11-07] (AVAST Software)
ShellIconOverlayIdentifiers: [Fichiers hors connexion] -> {750fdf0e-2a26-11d1-a3ea-080036587f03} => C:\WINDOWS\System32\cscui.dll [2008-04-14] (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\..\Interfaces\{12574E71-65E7-4582-BAD2-56232B333D82}: [NameServer] 208.67.222.222,208.67.220.200
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxps://www.google.com/
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = hxxps://www.google.com/
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxps://www.google.com/
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.google.com" <======= ATTENTION
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxps://www.google.com/" <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3944909103-4039349117-1437266250-1004 -> {AB49A9EC-D382-4C9A-B8E3-DC644AC7B90F} URL = hxxps://www.google.com/
SearchScopes: HKU\S-1-5-21-3944909103-4039349117-1437266250-1004 -> {B762BE20-E8CD-400F-86B0-5C10DAB98931} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-11-07] (AVAST Software)
Toolbar: HKU\S-1-5-21-3944909103-4039349117-1437266250-1004 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1222639173921
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} hxxp://192.168.1.110:1100/activex/AMC.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll [2013-09-25] (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
FireFox:
========
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-01-17] [non signé]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-11-07]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-11-07]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => non trouvé(e)
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1214154.dll [2014-11-26] (Adobe Systems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Profile: C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default [2016-11-08]
CHR Extension: (Google Docs) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-28]
CHR Extension: (Google Drive) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Recherche Google) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Docs hors connexion) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Gmail) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-11-07] (AVAST Software)
S4 MDM; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Fichier non signé]
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [Fichier non signé]
S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [Fichier non signé]
S4 odserv; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation)
S4 ose; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S4 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] ()
S4 sfcdpsrv; C:\Program Files\Fichiers communs\Seagate\CDP\afcdpsrv.exe [3246040 2013-12-18] (Acronis)
S4 SgtSch2Svc; C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe [805424 2012-10-31] ()
R2 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.exe [311872 2002-12-17] (Microsoft Corporation) [Fichier non signé]
S4 SUService; c:\program files\lenovo\system update\suservice.exe [28672 2011-07-25] (Lenovo Group Limited) [Fichier non signé]
S4 ThinkVantage Registry Monitor Service; C:\Program Files\Fichiers communs\Lenovo\tvt_reg_monitor_svc.exe [644408 2007-09-26] (Lenovo Group Limited)
S4 TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [520192 2008-05-14] () [Fichier non signé]
S2 TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [950272 2008-05-14] (Lenovo Group Limited) [Fichier non signé]
S4 TVT Scheduler; C:\Program Files\Fichiers communs\Lenovo\Scheduler\tvtsched.exe [1155072 2008-05-14] (Lenovo Group Limited) [Fichier non signé]
S4 TVT_UpdateMonitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [253952 2008-05-09] (Lenovo Group Limited) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 abp480n5; C:\WINDOWS\System32\DRIVERS\ABP480N5.SYS [23552 2001-08-18] (Microsoft Corporation)
S3 ac97intc; C:\WINDOWS\System32\drivers\ac97intc.sys [96256 2001-08-17] (Intel Corporation)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34008 2016-11-07] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [35096 2016-11-07] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [92256 2016-11-07] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [64272 2016-11-07] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [60424 2016-11-07] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [735488 2016-11-07] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [433768 2016-11-07] (AVAST Software)
S3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [184592 2016-11-07] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [66688 2016-11-07] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [224752 2016-11-07] (AVAST Software)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [271360 2009-04-20] () [Fichier non signé]
R1 bfdisk; C:\WINDOWS\system32\Drivers\bfdisk.sys [14880 2007-01-23] (Bo Brantén)
S3 G400; C:\WINDOWS\System32\DRIVERS\G400m.sys [322560 2001-08-23] (Matrox Graphics Inc.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [18048 2009-04-20] () [Fichier non signé]
R1 pelmouse; C:\WINDOWS\System32\DRIVERS\pelmouse.sys [16384 2003-01-10] (Primax Electronics Ltd.)
S3 pelps2m; C:\WINDOWS\System32\DRIVERS\pelps2m.sys [18048 2003-01-20] (Primax Electronics Ltd.)
R2 pmem; C:\WINDOWS\System32\drivers\pmemnt.sys [7012 2008-09-28] (Microsoft Corporation) [Fichier non signé]
R3 yukonwxp; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [267904 2007-09-18] (Marvell)
S3 catchme; \??\C:\DOCUME~1\Alain\LOCALS~1\Temp\catchme.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 XLHHardware_1_0; \??\C:\Program Files\DLL Tool\XLHHardware.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-11-10 11:58 - 2016-11-10 11:52 - 06454184 _____ (SosVirus) C:\Documents and Settings\Alain\Bureau\AdsFix.exe
2016-11-08 17:28 - 2016-11-10 12:28 - 00000000 ____D C:\Documents and Settings\Alain\Local Settings\temp
2016-11-08 17:28 - 2016-11-08 17:28 - 00022472 _____ C:\ComboFix.txt
2016-11-08 17:28 - 2016-11-08 17:28 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\temp
2016-11-08 17:28 - 2016-11-08 17:28 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\temp
2016-11-08 17:28 - 2016-11-08 17:28 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\temp
2016-11-08 17:10 - 2016-11-08 17:28 - 00000000 ____D C:\Qoobox
2016-11-08 17:10 - 2011-06-26 07:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2016-11-08 17:10 - 2010-11-07 18:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2016-11-08 17:10 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00098816 _____ C:\WINDOWS\sed.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00080412 _____ C:\WINDOWS\grep.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00068096 _____ C:\WINDOWS\zip.exe
2016-11-08 17:08 - 2016-11-08 17:27 - 00000000 ____D C:\WINDOWS\erdnt
2016-11-08 16:58 - 2016-11-08 16:58 - 05659834 ____R (Swearware) C:\Documents and Settings\Alain\Bureau\ComboFix.exe
2016-11-08 16:22 - 2016-11-10 12:24 - 00051564 _____ C:\Documents and Settings\Alain\Bureau\Addition.txt
2016-11-08 16:21 - 2016-11-10 12:28 - 00013770 _____ C:\Documents and Settings\Alain\Bureau\FRST.txt
2016-11-08 16:19 - 2016-11-10 12:28 - 00000000 ____D C:\FRST
2016-11-08 16:13 - 2016-11-08 16:13 - 01759744 _____ (Farbar) C:\Documents and Settings\Alain\Bureau\FRST.exe
2016-11-08 15:53 - 2016-11-08 15:53 - 00000000 ____D C:\WINDOWS\pss
2016-11-08 14:09 - 2016-11-08 14:10 - 00013030 _____ C:\PDOXUSRS.NET
2016-11-08 14:05 - 2016-11-08 14:05 - 00000719 _____ C:\Documents and Settings\All Users\Bureau\ZHP.lnk
2016-11-08 14:05 - 2016-11-08 14:05 - 00000000 ____D C:\Program Files\ZebHelpProcess
2016-11-08 14:05 - 2016-11-08 14:05 - 00000000 ____D C:\Program Files\Fichiers communs\Borland Shared
2016-11-08 14:05 - 1999-11-12 05:11 - 00183808 _____ C:\WINDOWS\system32\BDEADMIN.CPL
2016-11-08 14:05 - 1999-01-20 05:01 - 00210032 _____ C:\WINDOWS\system32\DBCLIENT.DLL
2016-11-08 14:02 - 2016-11-08 14:05 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP
2016-11-08 14:02 - 2016-11-08 14:04 - 00000000 ____D C:\Program Files\ZHPFix
2016-11-08 14:02 - 2016-11-08 14:02 - 00001519 _____ C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
2016-11-08 13:34 - 2016-11-08 17:57 - 00001614 _____ C:\Documents and Settings\Alain\Bureau\ZHPCleaner.txt
2016-11-08 13:27 - 2016-11-08 17:48 - 00000814 _____ C:\Documents and Settings\Alain\Bureau\ZHPCleaner.lnk
2016-11-08 13:08 - 2016-11-09 13:26 - 00000804 _____ C:\Documents and Settings\Alain\Bureau\ZHPDiag.lnk
2016-11-08 13:08 - 2016-11-09 13:26 - 00000000 ____D C:\Documents and Settings\Alain\Application Data\ZHP
2016-11-08 12:58 - 2016-11-08 13:13 - 00148132 _____ C:\TDSSKiller.3.1.0.12_08.11.2016_12.58.15_log.txt
2016-11-08 12:47 - 2016-11-08 12:47 - 00000000 ____D C:\Ad-Remover
2016-11-08 12:12 - 2016-11-08 12:27 - 00000000 ____D C:\Program Files\AdBlock Master
2016-11-08 11:50 - 2016-11-08 11:50 - 00098304 _____ C:\WINDOWS\Minidump\Mini110816-01.dmp
2016-11-08 09:03 - 2016-11-08 09:03 - 00289181 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\census.cache
2016-11-08 05:20 - 2016-11-08 05:20 - 00226368 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\ars.cache
2016-11-07 17:45 - 2016-11-07 17:45 - 00000036 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\housecall.guid.cache
2016-11-07 16:52 - 2016-11-08 11:31 - 00065536 _____ C:\WINDOWS\system32\config\SpybotSD.evt
2016-11-07 16:48 - 2016-11-07 16:48 - 00000000 ____D C:\Program Files\Fichiers communs\AV
2016-11-07 16:48 - 2016-11-07 16:48 - 00000000 ____D C:\Documents and Settings\LocalService\Menu Démarrer\Programmes
2016-11-07 16:48 - 2016-11-07 16:48 - 00000000 ____D C:\Documents and Settings\LocalService\Menu Démarrer
2016-11-07 16:48 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Documents and Settings\All Users\Bureau\Post Win10 Spybot-install.exe
2016-11-07 16:46 - 2016-11-07 16:50 - 00065536 _____ C:\WINDOWS\system32\config\Spybot -.evt
2016-11-07 16:45 - 2016-11-08 13:51 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2016-11-07 16:45 - 2016-11-08 12:39 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2016-11-07 15:42 - 2016-11-07 15:48 - 00001311 _____ C:\DelFix.txt
2016-11-07 15:22 - 2016-11-07 15:22 - 00000689 _____ C:\Documents and Settings\All Users\Bureau\CCleaner.lnk
2016-11-07 15:22 - 2016-11-07 15:22 - 00000000 ____D C:\Program Files\CCleaner
2016-11-07 15:22 - 2016-11-07 15:22 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\CCleaner
2016-11-07 13:35 - 2016-11-07 13:35 - 00000000 ____D C:\Documents and Settings\Alain\Local Settings\Application Data\CEF
2016-11-07 13:31 - 2016-11-09 18:36 - 00000486 _____ C:\WINDOWS\Tasks\SafeZone scheduled Autoupdate 1478521873.job
2016-11-07 13:31 - 2016-11-07 13:31 - 00000763 _____ C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Avast SafeZone Browser.lnk
2016-11-07 13:31 - 2016-11-07 13:31 - 00000763 _____ C:\Documents and Settings\All Users\Bureau\Avast SafeZone Browser.lnk
2016-11-07 13:30 - 2016-11-07 13:30 - 00035096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2016-11-07 13:29 - 2016-11-07 13:29 - 00000000 ____D C:\Documents and Settings\Alain\Application Data\AVAST Software
2016-11-07 13:28 - 2016-11-07 13:28 - 00001696 _____ C:\Documents and Settings\All Users\Bureau\Avast Antivirus Gratuit.lnk
2016-11-07 13:28 - 2016-11-07 13:28 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AVAST Software
2016-11-07 13:26 - 2016-11-10 01:26 - 00000314 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2016-11-07 13:26 - 2016-11-07 13:27 - 00735488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2016-11-07 13:26 - 2016-11-07 13:27 - 00433768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-11-07 13:26 - 2016-11-07 13:27 - 00224752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00921280 _____ (Microsoft Corporation) C:\WINDOWS\ucrtbase.dll
2016-11-07 13:26 - 2016-11-07 13:26 - 00319760 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-11-07 13:26 - 2016-11-07 13:26 - 00184592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00092256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00066688 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00064272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00060424 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-11-07 13:26 - 2016-11-07 13:26 - 00034008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-11-07 13:25 - 2016-11-07 13:30 - 00000000 ____D C:\Program Files\AVAST Software
2016-11-07 12:29 - 2016-11-07 12:29 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\tfdzhewy.sys
2016-11-04 15:52 - 2016-11-07 15:34 - 00170200 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-11-04 15:46 - 2016-11-04 15:46 - 00000784 _____ C:\Documents and Settings\All Users\Bureau\Malwarebytes Anti-Malware.lnk
2016-11-04 15:46 - 2016-11-04 15:46 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-11-04 15:46 - 2016-11-04 15:46 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes Anti-Malware
2016-11-04 15:46 - 2016-11-04 15:46 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Malwarebytes
2016-11-04 15:46 - 2016-03-10 14:09 - 00123264 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-11-04 15:46 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-11-03 13:49 - 2016-11-03 15:13 - 00000000 ____D C:\Program Files\DLL Tool
2016-11-03 13:16 - 2005-10-26 17:57 - 00002155 _____ C:\hotfix.txt
2016-11-03 13:16 - 2005-10-18 10:35 - 01136832 _____ (Microsoft Corporation) C:\MSXML3SP7-KB909363-x86-FRA.exe
2016-10-13 15:35 - 2016-10-13 15:35 - 03173016 _____ C:\Documents and Settings\Alain\Bureau\Ida3eTri2016.pdf
2016-10-11 14:29 - 2016-10-11 14:29 - 00119995 _____ C:\Documents and Settings\Alain\Bureau\KGRUrssaf3T16.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-11-10 12:24 - 2013-10-18 17:12 - 00000432 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{62866D88-9D43-4723-96A7-A6E0FA94FDFF}.job
2016-11-10 12:11 - 2012-01-17 17:41 - 00001056 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-10 12:00 - 2012-10-16 09:09 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-11-10 11:58 - 2008-09-28 18:02 - 00000000 ____D C:\Documents and Settings\Alain\Bureau
2016-11-10 11:24 - 2006-01-26 23:01 - 00032566 _____ C:\WINDOWS\SchedLgU.Txt
2016-11-10 01:11 - 2012-01-17 17:41 - 00001052 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-09 18:40 - 2006-01-26 21:35 - 00597946 _____ C:\WINDOWS\system32\perfh00C.dat
2016-11-09 18:40 - 2006-01-26 21:35 - 00113600 _____ C:\WINDOWS\system32\perfc00C.dat
2016-11-09 18:40 - 2006-01-26 14:45 - 01352036 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-11-09 18:38 - 2006-01-26 21:35 - 00002278 _____ C:\WINDOWS\system32\wpa.dbl
2016-11-09 18:35 - 2014-03-25 19:21 - 00000222 _____ C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP - à la connexion.job
2016-11-09 18:35 - 2006-01-26 23:01 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-11-09 16:51 - 2014-04-09 15:33 - 686870842 _____ C:\Documents and Settings\Alain\Bureau\wq040414.zip
2016-11-09 16:22 - 2008-09-28 18:02 - 00000184 ___SH C:\Documents and Settings\Alain\ntuser.ini
2016-11-09 16:22 - 2008-09-28 18:02 - 00000000 ____D C:\Documents and Settings\Alain
2016-11-09 10:36 - 2006-01-25 19:01 - 00000000 __SHD C:\Documents and Settings\NetworkService
2016-11-08 17:23 - 2006-01-26 21:35 - 00000227 _____ C:\WINDOWS\system.ini
2016-11-08 17:21 - 2006-01-25 19:01 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Temp
2016-11-08 17:20 - 2008-09-28 18:02 - 00000000 ___RD C:\Documents and Settings\Alain\Mes documents
2016-11-08 17:17 - 2006-01-25 10:44 - 00000000 ____D C:\Program Files\Fichiers communs
2016-11-08 15:56 - 2008-09-28 22:48 - 00000212 ___SH C:\boot.ini
2016-11-08 15:56 - 2006-01-26 21:35 - 00000552 _____ C:\WINDOWS\win.ini
2016-11-08 15:56 - 2006-01-25 10:44 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
2016-11-08 15:00 - 2014-03-25 19:21 - 00000216 _____ C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job
2016-11-08 14:05 - 2006-01-25 10:44 - 00000000 ____D C:\Documents and Settings\All Users\Bureau
2016-11-08 14:02 - 2006-01-25 10:44 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Démarrer\Programmes
2016-11-08 13:54 - 2008-09-28 21:41 - 13263004 _____ C:\sysiclog.txt
2016-11-08 13:37 - 2008-09-28 18:02 - 00000732 _____ C:\Documents and Settings\Alain\Menu Démarrer\Programmes\Internet Explorer.lnk
2016-11-08 13:37 - 2008-09-28 18:02 - 00000726 _____ C:\Documents and Settings\Alain\Bureau\Démarrer Internet Explorer.lnk
2016-11-08 13:37 - 2008-09-28 18:02 - 00000000 ___RD C:\Documents and Settings\Alain\Menu Démarrer\Programmes
2016-11-08 11:50 - 2014-03-07 10:47 - 00000000 ____D C:\WINDOWS\Minidump
2016-11-07 16:48 - 2006-01-25 19:01 - 00000000 __SHD C:\Documents and Settings\LocalService
2016-11-07 15:26 - 2015-05-11 11:56 - 00000000 ____D C:\Documents and Settings\Alain\Application Data\TeamViewer
2016-11-07 15:26 - 2014-04-09 15:45 - 00000000 ____D C:\Program Files\PDFCreator
2016-11-07 13:33 - 2006-01-25 10:38 - 00000000 ___HD C:\WINDOWS\inf
2016-11-07 13:30 - 2012-01-17 14:46 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\AVAST Software
2016-11-04 16:56 - 2012-01-11 03:10 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2624667$
2016-11-04 13:35 - 2012-01-24 13:32 - 00000928 _____ C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Google Chrome.lnk
2016-11-04 13:35 - 2012-01-24 13:32 - 00000922 _____ C:\Documents and Settings\All Users\Bureau\Google Chrome.lnk
2016-11-04 12:48 - 2015-09-24 14:18 - 00000794 _____ C:\WINDOWS\Tasks\SAUVE TINTIN.job
2016-11-04 12:48 - 2006-01-26 14:44 - 00286904 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-11-04 12:45 - 2013-10-14 23:54 - 00000000 ____D C:\MEMPAYEP
2016-11-03 20:17 - 2013-12-15 22:45 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2016-11-03 15:39 - 2012-06-12 11:44 - 00000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2016-11-03 15:20 - 2008-10-17 14:40 - 00000000 ____D C:\MEMCOMPT
2016-11-03 14:05 - 2008-09-28 18:02 - 00001606 _____ C:\Documents and Settings\Alain\Menu Démarrer\Programmes\Assistance à distance.lnk
2016-11-03 14:05 - 2006-01-26 22:53 - 00001570 _____ C:\Documents and Settings\All Users\Menu Démarrer\Configurer les programmes par défaut.lnk
2016-11-03 13:50 - 2008-09-28 18:31 - 00075584 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2016-11-03 13:24 - 2006-01-25 10:44 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Démarrer
2016-11-03 13:18 - 2016-03-29 17:07 - 00011776 ___SH C:\WINDOWS\Thumbs.db
2016-11-03 13:18 - 2008-12-16 11:00 - 00009728 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-11-03 13:18 - 2008-09-28 23:16 - 00000000 __HDC C:\WINDOWS\$NtServicePackUninstall$
2016-11-03 13:18 - 2008-09-28 18:34 - 00000000 ____D C:\WINDOWS\SHELLNEW
2016-11-03 13:18 - 2006-01-25 10:38 - 00000000 ___RD C:\WINDOWS\Web
2016-11-02 17:46 - 2010-12-14 17:57 - 00000000 ____D C:\Documents and Settings\Alain\Bureau\TINTIN
2016-11-02 17:44 - 2011-12-15 11:42 - 00000000 ____D C:\scan
2016-10-20 19:17 - 2006-01-25 18:50 - 00000000 ____D C:\WINDOWS\Registration
2016-10-20 16:33 - 2010-12-30 09:55 - 00002575 _____ C:\Documents and Settings\Alain\Bureau\Microsoft Office Word 2007.lnk
2016-10-19 11:01 - 2013-01-04 14:51 - 00001040 _____ C:\WINDOWS\system32\ICAutoUpdate.log.bak
2016-10-13 02:01 - 2008-09-28 18:34 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Microsoft Help
==================== Fichiers à la racine de certains dossiers =======
2016-11-03 14:04 - 2016-11-03 15:13 - 0000115 _____ () C:\Documents and Settings\Alain\Application Data\LogFile.txt
2016-11-08 05:20 - 2016-11-08 05:20 - 0226368 _____ () C:\Documents and Settings\Alain\Local Settings\Application Data\ars.cache
2016-11-08 09:03 - 2016-11-08 09:03 - 0289181 _____ () C:\Documents and Settings\Alain\Local Settings\Application Data\census.cache
2008-12-16 11:00 - 2016-11-03 13:18 - 0009728 _____ () C:\Documents and Settings\Alain\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2008-09-28 18:28 - 2008-09-28 18:28 - 0000128 ____N () C:\Documents and Settings\Alain\Local Settings\Application Data\fusioncache.dat
2016-11-07 17:45 - 2016-11-07 17:45 - 0000036 _____ () C:\Documents and Settings\Alain\Local Settings\Application Data\housecall.guid.cache
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
==================== Fin de FRST.txt ============================
Exécuté par Alain (administrateur) sur ALAIN (10-11-2016 12:28:42)
Exécuté depuis C:\Documents and Settings\Alain\Bureau
Profils chargés: Alain (Profils disponibles: Alain & Administrateur)
Platform: Microsoft Windows XP Service Pack 3 (X86) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\PROGRA~1\MI6841~1\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\PROGRA~1\MI6841~1\MSSQL\Binn\sqlagent.exe
(Microsoft Corporation) C:\WINDOWS\system32\imapi.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
Winlogon\Notify\uklognf: C:\WINDOWS\system32\uklognf.dll [2006-08-02] (Lenovo Co. LTD)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-11-07] (AVAST Software)
ShellIconOverlayIdentifiers: [Fichiers hors connexion] -> {750fdf0e-2a26-11d1-a3ea-080036587f03} => C:\WINDOWS\System32\cscui.dll [2008-04-14] (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\..\Interfaces\{12574E71-65E7-4582-BAD2-56232B333D82}: [NameServer] 208.67.222.222,208.67.220.200
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\Software\Microsoft\Internet Explorer\Main,Start Default_Page_URL = hxxps://www.google.com/
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = hxxps://www.google.com/
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxps://www.google.com/
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxp://www.google.com" <======= ATTENTION
HKU\S-1-5-21-3944909103-4039349117-1437266250-1004\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "hxxps://www.google.com/" <======= ATTENTION
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3944909103-4039349117-1437266250-1004 -> {AB49A9EC-D382-4C9A-B8E3-DC644AC7B90F} URL = hxxps://www.google.com/
SearchScopes: HKU\S-1-5-21-3944909103-4039349117-1437266250-1004 -> {B762BE20-E8CD-400F-86B0-5C10DAB98931} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-11-07] (AVAST Software)
Toolbar: HKU\S-1-5-21-3944909103-4039349117-1437266250-1004 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1222639173921
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} hxxp://192.168.1.110:1100/activex/AMC.cab
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll [2013-09-25] (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files\Fichiers communs\System\Ole DB\MSDAIPP.DLL [2009-02-26] (Microsoft Corporation)
FireFox:
========
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-01-17] [non signé]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-11-07]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-11-07]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => non trouvé(e)
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1214154.dll [2014-11-26] (Adobe Systems, Inc.)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2014-08-03] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR Profile: C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default [2016-11-08]
CHR Extension: (Google Docs) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-28]
CHR Extension: (Google Drive) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Recherche Google) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Docs hors connexion) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Gmail) - C:\Documents and Settings\Alain\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-11-07] (AVAST Software)
S4 MDM; C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [Fichier non signé]
R2 MSSQLSERVER; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [Fichier non signé]
S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [Fichier non signé]
S4 odserv; C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\ODSERV.EXE [440696 2011-07-20] (Microsoft Corporation)
S4 ose; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
S4 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [272024 2006-12-19] ()
S4 sfcdpsrv; C:\Program Files\Fichiers communs\Seagate\CDP\afcdpsrv.exe [3246040 2013-12-18] (Acronis)
S4 SgtSch2Svc; C:\Program Files\Fichiers communs\Seagate\Schedule2\schedul2.exe [805424 2012-10-31] ()
R2 SQLSERVERAGENT; C:\Program Files\Microsoft SQL Server\MSSQL\Binn\sqlagent.exe [311872 2002-12-17] (Microsoft Corporation) [Fichier non signé]
S4 SUService; c:\program files\lenovo\system update\suservice.exe [28672 2011-07-25] (Lenovo Group Limited) [Fichier non signé]
S4 ThinkVantage Registry Monitor Service; C:\Program Files\Fichiers communs\Lenovo\tvt_reg_monitor_svc.exe [644408 2007-09-26] (Lenovo Group Limited)
S4 TVT Backup Protection Service; C:\Program Files\Lenovo\Rescue and Recovery\rrpservice.exe [520192 2008-05-14] () [Fichier non signé]
S2 TVT Backup Service; C:\Program Files\Lenovo\Rescue and Recovery\rrservice.exe [950272 2008-05-14] (Lenovo Group Limited) [Fichier non signé]
S4 TVT Scheduler; C:\Program Files\Fichiers communs\Lenovo\Scheduler\tvtsched.exe [1155072 2008-05-14] (Lenovo Group Limited) [Fichier non signé]
S4 TVT_UpdateMonitor; C:\Program Files\Lenovo\Rescue and Recovery\UpdateMonitor.exe [253952 2008-05-09] (Lenovo Group Limited) [Fichier non signé]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 abp480n5; C:\WINDOWS\System32\DRIVERS\ABP480N5.SYS [23552 2001-08-18] (Microsoft Corporation)
S3 ac97intc; C:\WINDOWS\System32\drivers\ac97intc.sys [96256 2001-08-17] (Intel Corporation)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34008 2016-11-07] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [35096 2016-11-07] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [92256 2016-11-07] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [64272 2016-11-07] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [60424 2016-11-07] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [735488 2016-11-07] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [433768 2016-11-07] (AVAST Software)
S3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [184592 2016-11-07] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [66688 2016-11-07] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [224752 2016-11-07] (AVAST Software)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [271360 2009-04-20] () [Fichier non signé]
R1 bfdisk; C:\WINDOWS\system32\Drivers\bfdisk.sys [14880 2007-01-23] (Bo Brantén)
S3 G400; C:\WINDOWS\System32\DRIVERS\G400m.sys [322560 2001-08-23] (Matrox Graphics Inc.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [18048 2009-04-20] () [Fichier non signé]
R1 pelmouse; C:\WINDOWS\System32\DRIVERS\pelmouse.sys [16384 2003-01-10] (Primax Electronics Ltd.)
S3 pelps2m; C:\WINDOWS\System32\DRIVERS\pelps2m.sys [18048 2003-01-20] (Primax Electronics Ltd.)
R2 pmem; C:\WINDOWS\System32\drivers\pmemnt.sys [7012 2008-09-28] (Microsoft Corporation) [Fichier non signé]
R3 yukonwxp; C:\WINDOWS\System32\DRIVERS\yk51x86.sys [267904 2007-09-18] (Marvell)
S3 catchme; \??\C:\DOCUME~1\Alain\LOCALS~1\Temp\catchme.sys [X]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 XLHHardware_1_0; \??\C:\Program Files\DLL Tool\XLHHardware.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-11-10 11:58 - 2016-11-10 11:52 - 06454184 _____ (SosVirus) C:\Documents and Settings\Alain\Bureau\AdsFix.exe
2016-11-08 17:28 - 2016-11-10 12:28 - 00000000 ____D C:\Documents and Settings\Alain\Local Settings\temp
2016-11-08 17:28 - 2016-11-08 17:28 - 00022472 _____ C:\ComboFix.txt
2016-11-08 17:28 - 2016-11-08 17:28 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\temp
2016-11-08 17:28 - 2016-11-08 17:28 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\temp
2016-11-08 17:28 - 2016-11-08 17:28 - 00000000 ____D C:\Documents and Settings\Administrateur\Local Settings\temp
2016-11-08 17:10 - 2016-11-08 17:28 - 00000000 ____D C:\Qoobox
2016-11-08 17:10 - 2011-06-26 07:45 - 00256000 _____ C:\WINDOWS\PEV.exe
2016-11-08 17:10 - 2010-11-07 18:20 - 00208896 _____ C:\WINDOWS\MBR.exe
2016-11-08 17:10 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00098816 _____ C:\WINDOWS\sed.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00080412 _____ C:\WINDOWS\grep.exe
2016-11-08 17:10 - 2000-08-31 01:00 - 00068096 _____ C:\WINDOWS\zip.exe
2016-11-08 17:08 - 2016-11-08 17:27 - 00000000 ____D C:\WINDOWS\erdnt
2016-11-08 16:58 - 2016-11-08 16:58 - 05659834 ____R (Swearware) C:\Documents and Settings\Alain\Bureau\ComboFix.exe
2016-11-08 16:22 - 2016-11-10 12:24 - 00051564 _____ C:\Documents and Settings\Alain\Bureau\Addition.txt
2016-11-08 16:21 - 2016-11-10 12:28 - 00013770 _____ C:\Documents and Settings\Alain\Bureau\FRST.txt
2016-11-08 16:19 - 2016-11-10 12:28 - 00000000 ____D C:\FRST
2016-11-08 16:13 - 2016-11-08 16:13 - 01759744 _____ (Farbar) C:\Documents and Settings\Alain\Bureau\FRST.exe
2016-11-08 15:53 - 2016-11-08 15:53 - 00000000 ____D C:\WINDOWS\pss
2016-11-08 14:09 - 2016-11-08 14:10 - 00013030 _____ C:\PDOXUSRS.NET
2016-11-08 14:05 - 2016-11-08 14:05 - 00000719 _____ C:\Documents and Settings\All Users\Bureau\ZHP.lnk
2016-11-08 14:05 - 2016-11-08 14:05 - 00000000 ____D C:\Program Files\ZebHelpProcess
2016-11-08 14:05 - 2016-11-08 14:05 - 00000000 ____D C:\Program Files\Fichiers communs\Borland Shared
2016-11-08 14:05 - 1999-11-12 05:11 - 00183808 _____ C:\WINDOWS\system32\BDEADMIN.CPL
2016-11-08 14:05 - 1999-01-20 05:01 - 00210032 _____ C:\WINDOWS\system32\DBCLIENT.DLL
2016-11-08 14:02 - 2016-11-08 14:05 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\ZHP
2016-11-08 14:02 - 2016-11-08 14:04 - 00000000 ____D C:\Program Files\ZHPFix
2016-11-08 14:02 - 2016-11-08 14:02 - 00001519 _____ C:\Documents and Settings\All Users\Bureau\ZHPFix.lnk
2016-11-08 13:34 - 2016-11-08 17:57 - 00001614 _____ C:\Documents and Settings\Alain\Bureau\ZHPCleaner.txt
2016-11-08 13:27 - 2016-11-08 17:48 - 00000814 _____ C:\Documents and Settings\Alain\Bureau\ZHPCleaner.lnk
2016-11-08 13:08 - 2016-11-09 13:26 - 00000804 _____ C:\Documents and Settings\Alain\Bureau\ZHPDiag.lnk
2016-11-08 13:08 - 2016-11-09 13:26 - 00000000 ____D C:\Documents and Settings\Alain\Application Data\ZHP
2016-11-08 12:58 - 2016-11-08 13:13 - 00148132 _____ C:\TDSSKiller.3.1.0.12_08.11.2016_12.58.15_log.txt
2016-11-08 12:47 - 2016-11-08 12:47 - 00000000 ____D C:\Ad-Remover
2016-11-08 12:12 - 2016-11-08 12:27 - 00000000 ____D C:\Program Files\AdBlock Master
2016-11-08 11:50 - 2016-11-08 11:50 - 00098304 _____ C:\WINDOWS\Minidump\Mini110816-01.dmp
2016-11-08 09:03 - 2016-11-08 09:03 - 00289181 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\census.cache
2016-11-08 05:20 - 2016-11-08 05:20 - 00226368 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\ars.cache
2016-11-07 17:45 - 2016-11-07 17:45 - 00000036 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\housecall.guid.cache
2016-11-07 16:52 - 2016-11-08 11:31 - 00065536 _____ C:\WINDOWS\system32\config\SpybotSD.evt
2016-11-07 16:48 - 2016-11-07 16:48 - 00000000 ____D C:\Program Files\Fichiers communs\AV
2016-11-07 16:48 - 2016-11-07 16:48 - 00000000 ____D C:\Documents and Settings\LocalService\Menu Démarrer\Programmes
2016-11-07 16:48 - 2016-11-07 16:48 - 00000000 ____D C:\Documents and Settings\LocalService\Menu Démarrer
2016-11-07 16:48 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Documents and Settings\All Users\Bureau\Post Win10 Spybot-install.exe
2016-11-07 16:46 - 2016-11-07 16:50 - 00065536 _____ C:\WINDOWS\system32\config\Spybot -.evt
2016-11-07 16:45 - 2016-11-08 13:51 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2016-11-07 16:45 - 2016-11-08 12:39 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2016-11-07 15:42 - 2016-11-07 15:48 - 00001311 _____ C:\DelFix.txt
2016-11-07 15:22 - 2016-11-07 15:22 - 00000689 _____ C:\Documents and Settings\All Users\Bureau\CCleaner.lnk
2016-11-07 15:22 - 2016-11-07 15:22 - 00000000 ____D C:\Program Files\CCleaner
2016-11-07 15:22 - 2016-11-07 15:22 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\CCleaner
2016-11-07 13:35 - 2016-11-07 13:35 - 00000000 ____D C:\Documents and Settings\Alain\Local Settings\Application Data\CEF
2016-11-07 13:31 - 2016-11-09 18:36 - 00000486 _____ C:\WINDOWS\Tasks\SafeZone scheduled Autoupdate 1478521873.job
2016-11-07 13:31 - 2016-11-07 13:31 - 00000763 _____ C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Avast SafeZone Browser.lnk
2016-11-07 13:31 - 2016-11-07 13:31 - 00000763 _____ C:\Documents and Settings\All Users\Bureau\Avast SafeZone Browser.lnk
2016-11-07 13:30 - 2016-11-07 13:30 - 00035096 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2016-11-07 13:29 - 2016-11-07 13:29 - 00000000 ____D C:\Documents and Settings\Alain\Application Data\AVAST Software
2016-11-07 13:28 - 2016-11-07 13:28 - 00001696 _____ C:\Documents and Settings\All Users\Bureau\Avast Antivirus Gratuit.lnk
2016-11-07 13:28 - 2016-11-07 13:28 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\AVAST Software
2016-11-07 13:26 - 2016-11-10 01:26 - 00000314 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2016-11-07 13:26 - 2016-11-07 13:27 - 00735488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2016-11-07 13:26 - 2016-11-07 13:27 - 00433768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-11-07 13:26 - 2016-11-07 13:27 - 00224752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00921280 _____ (Microsoft Corporation) C:\WINDOWS\ucrtbase.dll
2016-11-07 13:26 - 2016-11-07 13:26 - 00319760 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-11-07 13:26 - 2016-11-07 13:26 - 00184592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00092256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00066688 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00064272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00060424 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-11-07 13:26 - 2016-11-07 13:26 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-11-07 13:26 - 2016-11-07 13:26 - 00034008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-11-07 13:25 - 2016-11-07 13:30 - 00000000 ____D C:\Program Files\AVAST Software
2016-11-07 12:29 - 2016-11-07 12:29 - 00411552 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\tfdzhewy.sys
2016-11-04 15:52 - 2016-11-07 15:34 - 00170200 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-11-04 15:46 - 2016-11-04 15:46 - 00000784 _____ C:\Documents and Settings\All Users\Bureau\Malwarebytes Anti-Malware.lnk
2016-11-04 15:46 - 2016-11-04 15:46 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware
2016-11-04 15:46 - 2016-11-04 15:46 - 00000000 ____D C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Malwarebytes Anti-Malware
2016-11-04 15:46 - 2016-11-04 15:46 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Malwarebytes
2016-11-04 15:46 - 2016-03-10 14:09 - 00123264 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-11-04 15:46 - 2016-03-10 14:08 - 00024448 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-11-03 13:49 - 2016-11-03 15:13 - 00000000 ____D C:\Program Files\DLL Tool
2016-11-03 13:16 - 2005-10-26 17:57 - 00002155 _____ C:\hotfix.txt
2016-11-03 13:16 - 2005-10-18 10:35 - 01136832 _____ (Microsoft Corporation) C:\MSXML3SP7-KB909363-x86-FRA.exe
2016-10-13 15:35 - 2016-10-13 15:35 - 03173016 _____ C:\Documents and Settings\Alain\Bureau\Ida3eTri2016.pdf
2016-10-11 14:29 - 2016-10-11 14:29 - 00119995 _____ C:\Documents and Settings\Alain\Bureau\KGRUrssaf3T16.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-11-10 12:24 - 2013-10-18 17:12 - 00000432 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{62866D88-9D43-4723-96A7-A6E0FA94FDFF}.job
2016-11-10 12:11 - 2012-01-17 17:41 - 00001056 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-10 12:00 - 2012-10-16 09:09 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-11-10 11:58 - 2008-09-28 18:02 - 00000000 ____D C:\Documents and Settings\Alain\Bureau
2016-11-10 11:24 - 2006-01-26 23:01 - 00032566 _____ C:\WINDOWS\SchedLgU.Txt
2016-11-10 01:11 - 2012-01-17 17:41 - 00001052 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-09 18:40 - 2006-01-26 21:35 - 00597946 _____ C:\WINDOWS\system32\perfh00C.dat
2016-11-09 18:40 - 2006-01-26 21:35 - 00113600 _____ C:\WINDOWS\system32\perfc00C.dat
2016-11-09 18:40 - 2006-01-26 14:45 - 01352036 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-11-09 18:38 - 2006-01-26 21:35 - 00002278 _____ C:\WINDOWS\system32\wpa.dbl
2016-11-09 18:35 - 2014-03-25 19:21 - 00000222 _____ C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP - à la connexion.job
2016-11-09 18:35 - 2006-01-26 23:01 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-11-09 16:51 - 2014-04-09 15:33 - 686870842 _____ C:\Documents and Settings\Alain\Bureau\wq040414.zip
2016-11-09 16:22 - 2008-09-28 18:02 - 00000184 ___SH C:\Documents and Settings\Alain\ntuser.ini
2016-11-09 16:22 - 2008-09-28 18:02 - 00000000 ____D C:\Documents and Settings\Alain
2016-11-09 10:36 - 2006-01-25 19:01 - 00000000 __SHD C:\Documents and Settings\NetworkService
2016-11-08 17:23 - 2006-01-26 21:35 - 00000227 _____ C:\WINDOWS\system.ini
2016-11-08 17:21 - 2006-01-25 19:01 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Temp
2016-11-08 17:20 - 2008-09-28 18:02 - 00000000 ___RD C:\Documents and Settings\Alain\Mes documents
2016-11-08 17:17 - 2006-01-25 10:44 - 00000000 ____D C:\Program Files\Fichiers communs
2016-11-08 15:56 - 2008-09-28 22:48 - 00000212 ___SH C:\boot.ini
2016-11-08 15:56 - 2006-01-26 21:35 - 00000552 _____ C:\WINDOWS\win.ini
2016-11-08 15:56 - 2006-01-25 10:44 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage
2016-11-08 15:00 - 2014-03-25 19:21 - 00000216 _____ C:\WINDOWS\Tasks\Notification de fin de service de Microsoft Windows XP -mensuellement.job
2016-11-08 14:05 - 2006-01-25 10:44 - 00000000 ____D C:\Documents and Settings\All Users\Bureau
2016-11-08 14:02 - 2006-01-25 10:44 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Démarrer\Programmes
2016-11-08 13:54 - 2008-09-28 21:41 - 13263004 _____ C:\sysiclog.txt
2016-11-08 13:37 - 2008-09-28 18:02 - 00000732 _____ C:\Documents and Settings\Alain\Menu Démarrer\Programmes\Internet Explorer.lnk
2016-11-08 13:37 - 2008-09-28 18:02 - 00000726 _____ C:\Documents and Settings\Alain\Bureau\Démarrer Internet Explorer.lnk
2016-11-08 13:37 - 2008-09-28 18:02 - 00000000 ___RD C:\Documents and Settings\Alain\Menu Démarrer\Programmes
2016-11-08 11:50 - 2014-03-07 10:47 - 00000000 ____D C:\WINDOWS\Minidump
2016-11-07 16:48 - 2006-01-25 19:01 - 00000000 __SHD C:\Documents and Settings\LocalService
2016-11-07 15:26 - 2015-05-11 11:56 - 00000000 ____D C:\Documents and Settings\Alain\Application Data\TeamViewer
2016-11-07 15:26 - 2014-04-09 15:45 - 00000000 ____D C:\Program Files\PDFCreator
2016-11-07 13:33 - 2006-01-25 10:38 - 00000000 ___HD C:\WINDOWS\inf
2016-11-07 13:30 - 2012-01-17 14:46 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\AVAST Software
2016-11-04 16:56 - 2012-01-11 03:10 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2624667$
2016-11-04 13:35 - 2012-01-24 13:32 - 00000928 _____ C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Google Chrome.lnk
2016-11-04 13:35 - 2012-01-24 13:32 - 00000922 _____ C:\Documents and Settings\All Users\Bureau\Google Chrome.lnk
2016-11-04 12:48 - 2015-09-24 14:18 - 00000794 _____ C:\WINDOWS\Tasks\SAUVE TINTIN.job
2016-11-04 12:48 - 2006-01-26 14:44 - 00286904 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-11-04 12:45 - 2013-10-14 23:54 - 00000000 ____D C:\MEMPAYEP
2016-11-03 20:17 - 2013-12-15 22:45 - 00000000 ____D C:\WINDOWS\system32\NtmsData
2016-11-03 15:39 - 2012-06-12 11:44 - 00000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2016-11-03 15:20 - 2008-10-17 14:40 - 00000000 ____D C:\MEMCOMPT
2016-11-03 14:05 - 2008-09-28 18:02 - 00001606 _____ C:\Documents and Settings\Alain\Menu Démarrer\Programmes\Assistance à distance.lnk
2016-11-03 14:05 - 2006-01-26 22:53 - 00001570 _____ C:\Documents and Settings\All Users\Menu Démarrer\Configurer les programmes par défaut.lnk
2016-11-03 13:50 - 2008-09-28 18:31 - 00075584 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2016-11-03 13:24 - 2006-01-25 10:44 - 00000000 ___RD C:\Documents and Settings\All Users\Menu Démarrer
2016-11-03 13:18 - 2016-03-29 17:07 - 00011776 ___SH C:\WINDOWS\Thumbs.db
2016-11-03 13:18 - 2008-12-16 11:00 - 00009728 _____ C:\Documents and Settings\Alain\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-11-03 13:18 - 2008-09-28 23:16 - 00000000 __HDC C:\WINDOWS\$NtServicePackUninstall$
2016-11-03 13:18 - 2008-09-28 18:34 - 00000000 ____D C:\WINDOWS\SHELLNEW
2016-11-03 13:18 - 2006-01-25 10:38 - 00000000 ___RD C:\WINDOWS\Web
2016-11-02 17:46 - 2010-12-14 17:57 - 00000000 ____D C:\Documents and Settings\Alain\Bureau\TINTIN
2016-11-02 17:44 - 2011-12-15 11:42 - 00000000 ____D C:\scan
2016-10-20 19:17 - 2006-01-25 18:50 - 00000000 ____D C:\WINDOWS\Registration
2016-10-20 16:33 - 2010-12-30 09:55 - 00002575 _____ C:\Documents and Settings\Alain\Bureau\Microsoft Office Word 2007.lnk
2016-10-19 11:01 - 2013-01-04 14:51 - 00001040 _____ C:\WINDOWS\system32\ICAutoUpdate.log.bak
2016-10-13 02:01 - 2008-09-28 18:34 - 00000000 ____D C:\Documents and Settings\All Users\Application Data\Microsoft Help
==================== Fichiers à la racine de certains dossiers =======
2016-11-03 14:04 - 2016-11-03 15:13 - 0000115 _____ () C:\Documents and Settings\Alain\Application Data\LogFile.txt
2016-11-08 05:20 - 2016-11-08 05:20 - 0226368 _____ () C:\Documents and Settings\Alain\Local Settings\Application Data\ars.cache
2016-11-08 09:03 - 2016-11-08 09:03 - 0289181 _____ () C:\Documents and Settings\Alain\Local Settings\Application Data\census.cache
2008-12-16 11:00 - 2016-11-03 13:18 - 0009728 _____ () C:\Documents and Settings\Alain\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2008-09-28 18:28 - 2008-09-28 18:28 - 0000128 ____N () C:\Documents and Settings\Alain\Local Settings\Application Data\fusioncache.dat
2016-11-07 17:45 - 2016-11-07 17:45 - 0000036 _____ () C:\Documents and Settings\Alain\Local Settings\Application Data\housecall.guid.cache
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
==================== Fin de FRST.txt ============================