Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 21-12-2016
Exécuté par USER (administrateur) sur USER-PC (27-12-2016 21:23:18)
Exécuté depuis C:\Users\USER\AppData\Local\Temp\scoped_dir3000_16449
Profils chargés: USER (Profils disponibles: USER)
Platform: Microsoft Windows 7 Professionnel (X86) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(AOMEI Tech Co., Ltd.) C:\Program Files\AOMEI Backupper\ABService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(McAfee, Inc.) C:\Program Files\TrueKey\MCAFEE~2.EXE
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(AimerSoft) C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Internet Download Manager, Tonec Inc.) C:\Program Files\Internet Download Manager\idmBroker.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => "C:\Program Files\Java\jre1.8.0_45\bin\jusched.exe"
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [14696704 2016-01-14] (Realtek Semiconductor)
HKLM\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2131856 2016-07-14] (AimerSoft)
HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3985464 2016-11-24] (Tonec Inc.)
HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\MountPoints2: {4acc48ce-b267-11e6-b010-00e04c71452d} - H:\autorun.exe
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D3C65842-DD09-44FD-B838-1A57297E6A11}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startimes.com/f.aspx?f=17
HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?ocid=iehp
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2016-11-30] (Internet Download Manager, Tonec Inc.)
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-12-10] (Intel Security)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2016-01-20] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2016-01-20] (Oracle Corporation)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-12-10] (Intel Security)
Toolbar: HKU\S-1-5-21-3210476624-2063733315-3652697728-1000 -> True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-12-10] (Intel Security)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab
Handler: WSKVAllmytubechrome - {91AB862D-07B8-4A85 - Pas de fichier
FireFox:
========
FF DefaultProfile: w9opg4f3.default
FF ProfilePath: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\w9opg4f3.default [2016-12-27]
FF Extension: (Java Console) - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA} [2016-12-17] [non signé]
FF HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2016-11-16]
FF HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\USER\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\USER\AppData\Roaming\IDM\idmmzcc5 [2016-12-27] [non signé]
FF HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @adobe.com/AuthorwarePlayer -> C:\Windows\system32\Macromed\AUTHORWA\np32asw.dll [2004-07-02] (Macromedia, Inc.)
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-17] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1218158.dll [2015-04-17] (Adobe Systems, Inc.)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2016-01-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2016-01-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
Chrome:
=======
CHR Profile: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default [2016-12-27]
CHR Extension: (Change Font Family Style) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabledekpjmoghdjnpnhfkfpmjifklpb [2016-12-17]
CHR Extension: (Google Slides) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-23]
CHR Extension: (Google Docs) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-23]
CHR Extension: (Google Drive) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-23]
CHR Extension: (YouTube) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-23]
CHR Extension: (Google Sheets) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-23]
CHR Extension: (Google Docs hors connexion) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-28]
CHR Extension: (IDM Integration Module) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-12-21]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-23]
CHR Extension: (Gmail) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-23]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2016-11-30]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Backupper Service; C:\Program Files\AOMEI Backupper\ABService.exe [29912 2015-05-11] (AOMEI Tech Co., Ltd.) [Fichier non signé]
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2225368 2016-10-11] (ESET)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [996336 2016-11-30] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [17304 2016-11-30] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [73968 2016-11-30] (McAfee, Inc.)
S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1343400 2014-07-19] () [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe -originalversion 4.4.127.0 [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [26424 2015-02-26] () [Fichier non signé]
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [129720 2015-02-26] () [Fichier non signé]
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [14392 2015-02-26] () [Fichier non signé]
R3 athur; C:\Windows\System32\DRIVERS\athur.sys [1570304 2013-06-28] (Atheros Communications, Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [179336 2016-10-13] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [164480 2016-10-13] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [139392 2016-10-13] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [43144 2016-10-13] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [68232 2016-10-13] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [51848 2016-10-13] (ESET)
R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [78472 2016-10-13] (ESET)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-12-27] ()
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [165376 2009-08-16] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [55040 2009-08-16] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-08-16] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [293904 2009-08-16] (Microsoft Corporation)
R2 windrvNT; C:\Windows\system32\windrvNT.sys [35363 2016-12-12] () [Fichier non signé]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-12-27 21:23 - 2016-12-27 21:23 - 00000000 ____D C:\FRST
2016-12-27 20:49 - 2011-02-10 13:36 - 00096256 _____ (Forum 233) C:\Users\USER\Desktop\Ichraf.exe
2016-12-27 20:39 - 2008-12-29 15:22 - 00526336 _____ C:\Users\USER\Desktop\خدمات الإشراف.exe
2016-12-27 20:29 - 2016-12-27 20:30 - 00000000 ____D C:\Users\USER\AppData\Local\CrashDumps
2016-12-27 19:24 - 2016-12-27 19:24 - 00007474 _____ C:\Users\USER\Desktop\rk_BDC9.tmp.txt
2016-12-27 18:52 - 2016-12-27 18:52 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-12-27 18:51 - 2016-12-27 18:51 - 00000000 ____D C:\ProgramData\RogueKiller
2016-12-27 18:29 - 2016-12-27 18:29 - 00097636 _____ C:\Users\USER\Desktop\ZHPDiag.txt
2016-12-26 23:30 - 2016-12-26 23:35 - 08067144 _____ C:\Users\USER\Downloads\cms_2Ffiles_2F10874_2F1447885522Free+Feasibility+Study+Templates+Entrprnrshp.zip
2016-12-26 02:13 - 2016-12-26 02:13 - 03417379 _____ C:\Users\USER\Documents\Sans titre.wma
2016-12-25 23:20 - 2016-12-25 23:20 - 00000000 ____D C:\Users\USER\Tracing
2016-12-24 13:28 - 2016-12-24 13:29 - 00147589 _____ C:\Users\USER\Downloads\All+Adobe+Cs5+Me+Patcher+3.0_2.htm
2016-12-24 13:25 - 2016-12-24 13:25 - 00147608 _____ C:\Users\USER\Downloads\All+Adobe+Cs5+Me+Patcher+3.0.htm
2016-12-24 12:55 - 2016-12-24 14:20 - 00000000 ____D C:\Users\USER\AppData\Roaming\SWiSH Max4
2016-12-24 12:55 - 2016-12-24 12:55 - 00000992 _____ C:\Users\Public\Desktop\SWiSH Max4.lnk
2016-12-24 12:55 - 2016-12-24 12:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SWiSH Max4
2016-12-24 12:54 - 2016-12-24 12:55 - 00000000 ____D C:\Program Files\SWiSH Max4
2016-12-24 12:54 - 2016-12-24 12:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LameACM
2016-12-24 12:54 - 2016-12-24 12:54 - 00000000 ____D C:\Program Files\LameACM
2016-12-24 12:54 - 2016-12-24 12:54 - 00000000 ____D C:\Program Files\Common Files\SWiSHzone.com
2016-12-23 11:39 - 2016-12-23 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia
2016-12-23 11:39 - 2016-12-23 11:39 - 00000000 ____D C:\Program Files\Common Files\Vbox
2016-12-23 11:37 - 2016-12-23 11:37 - 00000000 ____D C:\Program Files\Macromedia
2016-12-23 11:21 - 2016-12-23 11:21 - 00000000 ____D C:\Users\USER\AppData\Local\Macromedia
2016-12-17 19:52 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-12-17 19:50 - 2016-10-26 16:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-12-17 19:50 - 2016-06-25 16:43 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
2016-12-17 19:50 - 2015-03-19 03:57 - 03963320 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-12-17 19:50 - 2015-03-19 03:57 - 03908024 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-17 19:50 - 2014-09-15 01:42 - 02377216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-17 19:50 - 2013-03-19 05:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-12-17 19:50 - 2013-03-19 03:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-12-17 19:50 - 2010-12-18 06:29 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-12-17 19:43 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-17 19:43 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-17 19:43 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-17 19:43 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-12-17 19:42 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-12-17 19:42 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-12-17 17:50 - 2016-12-27 21:11 - 00000000 ____D C:\Users\USER\AppData\Roaming\DMCache
2016-12-17 17:50 - 2016-12-27 20:29 - 00000000 ____D C:\Users\USER\Downloads\Compressed
2016-12-17 17:50 - 2016-12-21 23:06 - 00000000 ____D C:\Users\USER\Downloads\Video
2016-12-17 17:50 - 2016-12-19 21:40 - 00000000 ____D C:\Users\USER\AppData\Roaming\IDM
2016-12-17 17:50 - 2016-12-17 17:52 - 00000000 ____D C:\Program Files\Internet Download Manager
2016-12-17 17:50 - 2016-12-17 17:50 - 00000987 _____ C:\Users\USER\Desktop\Internet Download Manager.lnk
2016-12-17 17:50 - 2016-12-17 17:50 - 00000000 ____D C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-12-17 17:50 - 2016-12-17 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-12-17 17:50 - 2016-12-17 17:50 - 00000000 ____D C:\ProgramData\IDM
2016-12-17 17:47 - 2016-12-17 17:49 - 06880392 _____ C:\Users\USER\Downloads\idman626build14.rar
2016-12-17 17:19 - 2016-12-17 17:19 - 01021427 _____ C:\Users\USER\Downloads\الأزمة المالية للنظام ال أ رسمالي.pdf
2016-12-17 12:12 - 2016-12-17 12:13 - 00000000 ____D C:\Users\USER\AppData\Local\tkdata
2016-12-17 12:12 - 2016-12-17 12:12 - 00000000 ____D C:\Users\USER\AppData\Local\CEF
2016-12-17 12:11 - 2016-12-25 16:59 - 00001275 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\True Key.lnk
2016-12-17 12:11 - 2016-12-17 12:11 - 00001261 _____ C:\Users\Public\Desktop\True Key.lnk
2016-12-17 12:11 - 2016-12-17 12:11 - 00000000 ____D C:\ProgramData\TrueKey
2016-12-17 12:10 - 2016-12-26 23:21 - 00000000 ____D C:\Program Files\McAfee
2016-12-17 12:10 - 2016-12-17 12:10 - 00000000 ____D C:\Program Files\Intel Security
2016-12-17 12:10 - 2016-12-17 12:10 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-12-17 12:10 - 2016-12-17 12:10 - 00000000 ____D C:\Program Files\Common Files\AV
2016-12-17 01:01 - 2016-12-17 01:01 - 00000000 ____D C:\Program Files\HotHotSoftware
2016-12-17 01:01 - 2000-07-15 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\VB6STKIT.DLL
2016-12-17 00:40 - 2016-12-17 00:40 - 49362033 _____ (Macromedia ) C:\Users\USER\Downloads\flashmx_trial_win_br.exe
2016-12-17 00:26 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-12-17 00:26 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-12-17 00:26 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-12-17 00:26 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-12-17 00:26 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-12-17 00:20 - 2016-12-23 11:52 - 00000000 ____D C:\ProgramData\TEMP
2016-12-17 00:18 - 2016-12-17 00:18 - 00000000 ____D C:\Users\USER\Documents\Flash Banner Creator
2016-12-17 00:18 - 2016-12-17 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flash Banner Creator
2016-12-17 00:17 - 2016-12-23 22:37 - 00000000 ____D C:\Program Files\Flash Banner Creator
2016-12-17 00:16 - 2016-12-17 00:17 - 06301624 _____ C:\Users\USER\Downloads\setup_flash_banner_creator.exe
2016-12-17 00:10 - 2016-12-17 00:07 - 00000030 _____ C:\AVScanner.ini
2016-12-17 00:07 - 2016-12-19 00:41 - 00000000 ____D C:\ProgramData\McAfee
2016-12-17 00:06 - 2016-12-27 20:56 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-17 00:06 - 2016-12-26 23:21 - 00000000 ____D C:\Program Files\TrueKey
2016-12-17 00:06 - 2016-12-17 00:06 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-12-17 00:06 - 2016-12-17 00:06 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-12-17 00:01 - 2016-01-20 15:53 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2016-12-17 00:01 - 2016-01-20 15:53 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2016-12-17 00:01 - 2016-01-20 15:53 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2016-12-17 00:01 - 2016-01-20 15:53 - 00146432 _____ (Oracle Corporation) C:\Windows\system32\javacpl.cpl
2016-12-16 23:59 - 2016-12-16 23:59 - 00000000 ____D C:\Users\USER\AppData\Local\Sun
2016-12-16 23:59 - 2016-12-16 23:59 - 00000000 ____D C:\Program Files\SourceTec
2016-12-16 23:53 - 2016-12-17 00:11 - 00000000 ____D C:\Users\USER\AppData\Local\FMSoftwareStudio
2016-12-15 21:18 - 2016-12-15 21:18 - 00001110 _____ C:\Users\USER\Desktop\vlc - Raccourci.lnk
2016-12-14 02:07 - 2016-12-14 07:20 - 00413626 _____ C:\Users\USER\Documents\سعر الصرف والمؤسسات المالية الدولية.pdf
2016-12-14 00:06 - 2016-12-14 02:09 - 00102501 _____ C:\Users\USER\Documents\سعر الصرف.pptx
2016-12-12 22:06 - 2016-12-14 00:06 - 00000000 ____D C:\Users\USER\Documents\سعر الصرف
2016-12-12 12:41 - 2016-12-27 18:25 - 00000000 ____D C:\Users\USER\AppData\Roaming\ZHP
2016-12-12 12:41 - 2016-12-26 01:55 - 00000828 _____ C:\Users\USER\Desktop\ZHPCleaner.lnk
2016-12-12 12:40 - 2016-12-12 12:40 - 00053248 _____ C:\Windows\system32\suppdll.dll
2016-12-12 12:40 - 2016-12-12 12:40 - 00035363 _____ C:\Windows\system32\windrvNT.sys
2016-12-10 13:47 - 2016-12-10 13:47 - 00245800 _____ C:\Users\USER\Documents\__www.startimes.com_f.aspx_f=17.pdf
2016-12-10 01:41 - 2016-12-10 02:25 - 00000000 ____D C:\ProgramData\Wondershare AllMytube
2016-12-09 20:33 - 2016-12-12 22:14 - 00403107 _____ C:\Users\USER\Documents\Présentation1.pptx
2016-12-09 20:24 - 2016-12-09 20:25 - 00001522 _____ C:\Users\USER\Desktop\المكتبة الشاملة.lnk
2016-12-08 23:33 - 2016-12-08 23:33 - 00000000 ____D C:\ProgramData\xml_param
2016-12-08 23:26 - 2016-12-08 23:26 - 00000000 ____D C:\Users\USER\Documents\Praetorians
2016-12-08 23:26 - 2016-12-08 23:26 - 00000000 ____D C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-12-08 23:02 - 2016-12-08 23:02 - 00000991 _____ C:\Users\Public\Desktop\PhotoInstrument.lnk
2016-12-08 23:02 - 2016-12-08 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoInstrument
2016-12-08 23:02 - 2016-12-08 23:02 - 00000000 ____D C:\Program Files\PhotoInstrument
2016-12-08 23:01 - 2016-12-12 12:38 - 00000000 ___DC C:\Users\USER\AppData\Local\MigWiz
2016-12-08 22:49 - 2016-12-08 22:49 - 00000000 ____D C:\Users\USER\AppData\Local\WMTools Downloaded Files
2016-12-08 22:48 - 2016-12-08 22:48 - 00002495 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker 2.6.lnk
2016-12-08 22:48 - 2016-12-08 22:48 - 00000000 ____D C:\Program Files\Movie Maker 2.6
2016-12-08 19:02 - 2016-12-09 20:11 - 00000000 ____D C:\Users\USER\Desktop\هشام
2016-12-08 18:32 - 2016-12-08 18:32 - 00000000 ____D C:\Users\USER\AppData\LocalLow\Adobe
2016-12-08 18:27 - 2016-11-27 17:15 - 11897302 _____ C:\Users\USER\Documents\جدوى.pdf
2016-12-08 18:26 - 2016-12-01 19:36 - 03421788 _____ C:\Users\USER\Documents\memoir_ØØÙˆÙ1 (3) (1).pdf
2016-12-08 01:01 - 2016-12-08 01:01 - 00000000 ____D C:\Users\USER\AppData\Local\Aimersoft
2016-12-08 01:01 - 2016-12-08 01:01 - 00000000 ____D C:\ProgramData\Aimersoft
2016-12-08 01:01 - 2016-12-08 01:01 - 00000000 ____D C:\Program Files\Common Files\Aimersoft
2016-12-07 23:24 - 2016-12-07 23:24 - 00968492 _____ C:\Users\USER\Downloads\Le-respect-de-l’environnement-Camille.ppsx
2016-12-07 23:24 - 2016-12-07 23:24 - 00441612 _____ C:\Users\USER\Downloads\Le-respect-de-l’environnement.ppsx
2016-12-07 23:24 - 2016-12-07 23:24 - 00261129 _____ C:\Users\USER\Downloads\Pfeg-low-cost-3.ppsx
2016-12-07 23:23 - 2016-12-07 23:23 - 00458753 _____ C:\Users\USER\Downloads\Diapo-pfeg-final-.ppsx
2016-12-07 23:23 - 2016-12-07 23:23 - 00101168 _____ C:\Users\USER\Downloads\L’économie-numérique-diapo.ppsx
2016-12-07 22:54 - 2016-12-07 22:54 - 00530432 _____ C:\Users\USER\Downloads\ميثاق القسم.ppt
2016-12-07 22:48 - 2016-12-07 22:48 - 02930176 _____ C:\Users\USER\Downloads\قصر (205) مقدمة1.ppt
2016-12-07 22:48 - 2016-12-07 22:48 - 00580096 _____ C:\Users\USER\Downloads\الفصل-الأول-مقدمة-الاقتصاد.ppt
2016-12-07 22:48 - 2016-12-07 22:48 - 00535040 _____ C:\Users\USER\Downloads\صحة البيئة 6.ppt
2016-12-07 22:47 - 2016-12-07 22:47 - 00841728 _____ C:\Users\USER\Downloads\Macro1_Small_Open_Economy_lob.ppt
2016-12-07 22:46 - 2016-12-07 22:46 - 01330688 _____ C:\Users\USER\Downloads\13-Using_Powerpoint.ppt
2016-12-07 22:46 - 2016-12-07 22:46 - 00986112 _____ C:\Users\USER\Downloads\atomic-models.ppt
2016-12-07 22:46 - 2016-12-07 22:46 - 00160768 _____ C:\Users\USER\Downloads\-الثالث نموذج كينز البسيط.ppt
2016-12-07 22:46 - 2016-12-07 22:46 - 00101888 _____ C:\Users\USER\Downloads\-الثاني نماذج الاقتصاد الكلي.ppt
2016-12-07 22:44 - 2016-12-07 22:44 - 01124352 _____ C:\Users\USER\Downloads\atomos.ppt
2016-12-06 22:10 - 2016-12-06 22:10 - 05304437 _____ C:\Users\USER\Downloads\EDAAT_Feb_2013_Feasibility_Studies_405.pdf
2016-12-06 22:08 - 2016-12-06 22:08 - 00371075 _____ C:\Users\USER\Downloads\دراسة جدوى المشروع من المنظور التجاري.pdf
2016-12-06 22:08 - 2016-12-06 22:08 - 00191488 _____ C:\Users\USER\Downloads\مخاطر عدم التأكد.ppt
2016-12-06 19:12 - 2016-12-06 21:47 - 00000000 ____D C:\Program Files\iCare Data Recovery Pro
2016-12-06 00:40 - 2016-12-06 00:40 - 00000000 ____D C:\Users\USER\AppData\Roaming\ESET
2016-12-05 22:53 - 2016-12-27 20:58 - 00000000 ____D C:\Users\USER\AppData\LocalLow\Mozilla
2016-12-05 22:39 - 2016-12-05 22:39 - 00243648 _____ C:\Users\USER\Downloads\Firefox Setup Stub 50.0.2.exe
2016-12-05 21:42 - 2016-12-05 21:43 - 00072368 _____ C:\Users\USER\Downloads\تقييم تجربة القرض المصغر في الجزائر كآلية لمحاربة الفقر.zip
2016-12-03 23:25 - 2016-12-03 23:26 - 02171177 _____ C:\Users\USER\Downloads\الحداثة في ميزان الإسلام.pdf
2016-12-03 11:28 - 2016-12-03 11:28 - 00001024 ____H C:\SYSTAG.BIN
2016-12-02 23:19 - 2016-12-02 23:19 - 00371600 _____ C:\Users\USER\Downloads\استخدام أسلوب الحساسية في تقييم المشاريع.pdf
2016-12-02 11:47 - 2016-12-02 11:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2016-12-02 11:47 - 2013-06-28 14:49 - 01570304 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athur.sys
2016-12-02 11:47 - 2013-06-28 14:49 - 01570304 _____ (Atheros Communications, Inc.) C:\Windows\system32\athur.sys
2016-12-02 11:47 - 2013-06-28 14:49 - 00007514 _____ C:\Windows\system32\athurext.cat
2016-12-02 11:23 - 2016-12-02 11:23 - 01074630 _____ C:\Users\USER\Downloads\book1_6047.pdf
2016-12-02 11:19 - 2016-12-02 11:21 - 35508616 _____ C:\Users\USER\Downloads\ghmood.pdf
2016-12-01 00:48 - 2016-12-01 00:49 - 00144744 _____ C:\Users\USER\Documents\(ملخص).pdf
2016-11-30 16:21 - 2016-10-17 16:35 - 00147120 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2016-11-30 08:35 - 2016-11-30 08:35 - 00000000 ____D C:\Users\USER\Documents\EGDownloads
2016-11-30 08:35 - 2016-11-30 08:35 - 00000000 ____D C:\Users\USER\AppData\Roaming\EagleGet
2016-11-30 08:27 - 2016-12-17 00:08 - 00000000 ____D C:\Users\USER\AppData\Local\Adobe
2016-11-30 00:00 - 2016-11-30 00:00 - 00000800 _____ C:\Windows\unins000.dat
2016-11-29 22:29 - 2016-12-01 09:38 - 00248804 _____ C:\Users\USER\Documents\السياسة النقدية.pdf
2016-11-29 21:42 - 2016-11-29 21:42 - 00000997 _____ C:\Users\Public\Desktop\PDFCreator.lnk
2016-11-29 21:42 - 2016-11-29 21:42 - 00000000 ____D C:\Users\USER\AppData\Roaming\pdfforge
2016-11-29 21:42 - 2016-11-29 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2016-11-29 21:41 - 2016-12-12 12:38 - 00000000 ____D C:\Program Files\PDFCreator
2016-11-29 21:41 - 2001-10-28 17:42 - 00116224 _____ C:\Windows\system32\pdfcmnnt.dll
2016-11-29 21:41 - 1998-07-13 02:08 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\MSCMCFR.DLL
2016-11-29 21:41 - 1998-07-13 02:08 - 00119568 _____ (Microsoft Corporation) C:\Windows\system32\VB6FR.DLL
2016-11-29 21:41 - 1998-07-13 02:08 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSCC2FR.DLL
2016-11-29 21:41 - 1998-07-06 01:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\MSMPIDE.DLL
2016-11-29 21:41 - 1998-06-24 01:00 - 00137000 _____ (Microsoft Corporation) C:\Windows\system32\MSMAPI32.OCX
2016-11-29 17:21 - 2016-12-09 20:13 - 00000012 _____ C:\Users\USER\Documents\كود.txt
2016-11-28 22:12 - 2016-11-28 22:12 - 00001326 _____ C:\Users\USER\Desktop\chrome - Raccourci.lnk
2016-11-28 21:12 - 2016-11-28 21:12 - 00000697 _____ C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\ÇáãæÓæÚÉ ÇáÔÚÑíÉ.lnk
2016-11-28 21:12 - 2016-11-28 21:12 - 00000673 _____ C:\Users\USER\Desktop\الموسوعة الشعرية.lnk
2016-11-28 21:12 - 2016-11-28 21:12 - 00000000 ____D C:\Poetry Encyclopedia
2016-11-27 22:36 - 2016-11-27 22:37 - 01277665 _____ C:\Users\USER\Downloads\TL-WN721N_V1_Win7_Beta.zip
2016-11-27 22:35 - 2016-11-27 22:35 - 00660080 _____ C:\Users\USER\Downloads\TL-WN721N_datasheet.zip
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-12-27 21:12 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-27 21:11 - 2016-01-20 15:55 - 00000000 ____D C:\Users\USER\AppData\Roaming\AIMP3
2016-12-27 20:41 - 2016-11-26 01:56 - 00000000 ____D C:\Users\USER\AppData\Roaming\Skype
2016-12-27 16:34 - 2016-01-20 15:54 - 00000000 ____D C:\Program Files\Opera
2016-12-27 16:31 - 2016-11-21 22:14 - 00000000 ___SD C:\Users\USER\AppData\LocalLow\Temp
2016-12-24 14:22 - 2016-11-21 20:58 - 00000000 ____D C:\Users\USER\AppData\Roaming\vlc
2016-12-24 14:06 - 2016-11-22 12:25 - 00000000 ____D C:\Users\USER\AppData\Roaming\Media Player Classic
2016-12-23 21:48 - 2016-01-20 15:36 - 01667292 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-23 21:48 - 2009-07-14 09:39 - 00737444 _____ C:\Windows\system32\perfh00C.dat
2016-12-23 21:48 - 2009-07-14 09:39 - 00149372 _____ C:\Windows\system32\perfc00C.dat
2016-12-23 21:48 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-12-23 11:37 - 2014-12-28 15:46 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-12-23 11:37 - 2014-12-28 15:46 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2016-12-21 19:52 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2016-12-18 12:25 - 2009-07-14 05:33 - 00711968 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-18 00:06 - 2009-07-14 05:34 - 00009792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-18 00:06 - 2009-07-14 05:34 - 00009792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-17 00:06 - 2016-01-20 15:40 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-17 00:01 - 2016-11-26 14:07 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-12-17 00:01 - 2016-01-20 15:53 - 00000000 ____D C:\Program Files\Java
2016-12-16 23:59 - 2016-01-20 15:54 - 00000000 ____D C:\Program Files\Common Files\Java
2016-12-16 14:15 - 2016-11-26 17:29 - 00000000 ____D C:\Users\USER\AppData\Roaming\shamela
2016-12-16 14:15 - 2015-07-16 19:28 - 00000000 ____D C:\shamela
2016-12-15 21:23 - 2016-11-26 14:13 - 00000000 ____D C:\Users\USER\AppData\Roaming\FontCreator
2016-12-15 21:23 - 2016-11-26 14:13 - 00000000 ____D C:\Users\USER\AppData\Local\FontCreator
2016-12-15 20:58 - 2016-11-26 14:07 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-12-14 23:53 - 2016-01-20 15:32 - 00000000 ____D C:\Users\USER\AppData\Local\VirtualStore
2016-12-12 12:38 - 2014-12-08 10:21 - 00000000 ____D C:\Windows\Panther
2016-12-08 23:28 - 2014-07-19 08:44 - 00187432 _____ C:\Users\USER\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-06 20:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2016-12-05 22:47 - 2016-11-26 14:07 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-05 22:47 - 2016-11-26 14:07 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-03 16:01 - 2016-11-21 20:17 - 00000000 ____D C:\Users\USER\AppData\Local\Microsoft Help
2016-12-03 11:28 - 2016-01-20 15:47 - 00000082 _____ C:\Windows\system32\winsevr.dat
2016-12-03 11:28 - 2016-01-20 15:47 - 00000000 ____D C:\ProgramData\AomeiBR
2016-11-30 08:27 - 2016-01-20 15:44 - 00000000 ____D C:\Users\USER\AppData\Roaming\Adobe
2016-11-29 22:29 - 2016-11-21 18:47 - 00000000 ____D C:\Users\USER\AppData\Roaming\Foxit Software
==================== Fichiers à la racine de certains dossiers =======
2016-11-22 00:38 - 2016-11-22 00:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Certains fichiers dans TEMP:
====================
C:\Users\USER\AppData\Local\Temp\dllnt_dump.dll
C:\Users\USER\AppData\Local\Temp\Setup.exe
C:\Users\USER\AppData\Local\Temp\SkypeSetup.exe
C:\Users\USER\AppData\Local\Temp\UnSigner.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le MD5 est légitime
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-12-24 17:57
==================== Fin de FRST.txt ============================
Exécuté par USER (administrateur) sur USER-PC (27-12-2016 21:23:18)
Exécuté depuis C:\Users\USER\AppData\Local\Temp\scoped_dir3000_16449
Profils chargés: USER (Profils disponibles: USER)
Platform: Microsoft Windows 7 Professionnel (X86) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(AOMEI Tech Co., Ltd.) C:\Program Files\AOMEI Backupper\ABService.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(McAfee, Inc.) C:\Program Files\TrueKey\MCAFEE~2.EXE
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(AimerSoft) C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Internet Download Manager, Tonec Inc.) C:\Program Files\Internet Download Manager\idmBroker.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Opera Software) C:\Program Files\Opera\42.0.2393.94\opera.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => "C:\Program Files\Java\jre1.8.0_45\bin\jusched.exe"
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [14696704 2016-01-14] (Realtek Semiconductor)
HKLM\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2131856 2016-07-14] (AimerSoft)
HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3985464 2016-11-24] (Tonec Inc.)
HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\MountPoints2: {4acc48ce-b267-11e6-b010-00e04c71452d} - H:\autorun.exe
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll [2015-08-14] (Tonec Inc.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{D3C65842-DD09-44FD-B838-1A57297E6A11}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.startimes.com/f.aspx?f=17
HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/ar-eg/?ocid=iehp
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll [2016-11-30] (Internet Download Manager, Tonec Inc.)
BHO: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-12-10] (Intel Security)
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2016-01-20] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2016-01-20] (Oracle Corporation)
Toolbar: HKLM - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-12-10] (Intel Security)
Toolbar: HKU\S-1-5-21-3210476624-2063733315-3652697728-1000 -> True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-12-10] (Intel Security)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_45-windows-i586.cab
Handler: WSKVAllmytubechrome - {91AB862D-07B8-4A85 - Pas de fichier
FireFox:
========
FF DefaultProfile: w9opg4f3.default
FF ProfilePath: C:\Users\USER\AppData\Roaming\Mozilla\Firefox\Profiles\w9opg4f3.default [2016-12-27]
FF Extension: (Java Console) - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0015-0000-0021-ABCDEFFEDCBA} [2016-12-17] [non signé]
FF HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files\Internet Download Manager\idmmzcc2.xpi [2016-11-16]
FF HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\USER\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\USER\AppData\Roaming\IDM\idmmzcc5 [2016-12-27] [non signé]
FF HKU\S-1-5-21-3210476624-2063733315-3652697728-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @adobe.com/AuthorwarePlayer -> C:\Windows\system32\Macromed\AUTHORWA\np32asw.dll [2004-07-02] (Macromedia, Inc.)
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-17] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1218158.dll [2015-04-17] (Adobe Systems, Inc.)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2015-02-11] (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2016-01-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2016-01-20] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
Chrome:
=======
CHR Profile: C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default [2016-12-27]
CHR Extension: (Change Font Family Style) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabledekpjmoghdjnpnhfkfpmjifklpb [2016-12-17]
CHR Extension: (Google Slides) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-23]
CHR Extension: (Google Docs) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-23]
CHR Extension: (Google Drive) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-23]
CHR Extension: (YouTube) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-23]
CHR Extension: (Google Sheets) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-23]
CHR Extension: (Google Docs hors connexion) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-28]
CHR Extension: (IDM Integration Module) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-12-21]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-23]
CHR Extension: (Gmail) - C:\Users\USER\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-23]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2016-11-30]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Backupper Service; C:\Program Files\AOMEI Backupper\ABService.exe [29912 2015-05-11] (AOMEI Tech Co., Ltd.) [Fichier non signé]
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2225368 2016-10-11] (ESET)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [996336 2016-11-30] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [17304 2016-11-30] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [73968 2016-11-30] (McAfee, Inc.)
S3 WatAdminSvc; C:\Windows\system32\Wat\WatAdminSvc.exe [1343400 2014-07-19] () [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe -originalversion 4.4.127.0 [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [26424 2015-02-26] () [Fichier non signé]
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [129720 2015-02-26] () [Fichier non signé]
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [14392 2015-02-26] () [Fichier non signé]
R3 athur; C:\Windows\System32\DRIVERS\athur.sys [1570304 2013-06-28] (Atheros Communications, Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [179336 2016-10-13] (ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [164480 2016-10-13] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [139392 2016-10-13] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [43144 2016-10-13] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [68232 2016-10-13] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [51848 2016-10-13] (ESET)
R1 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [78472 2016-10-13] (ESET)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-12-27] ()
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [165376 2009-08-16] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [55040 2009-08-16] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2009-08-16] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [293904 2009-08-16] (Microsoft Corporation)
R2 windrvNT; C:\Windows\system32\windrvNT.sys [35363 2016-12-12] () [Fichier non signé]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-12-27 21:23 - 2016-12-27 21:23 - 00000000 ____D C:\FRST
2016-12-27 20:49 - 2011-02-10 13:36 - 00096256 _____ (Forum 233) C:\Users\USER\Desktop\Ichraf.exe
2016-12-27 20:39 - 2008-12-29 15:22 - 00526336 _____ C:\Users\USER\Desktop\خدمات الإشراف.exe
2016-12-27 20:29 - 2016-12-27 20:30 - 00000000 ____D C:\Users\USER\AppData\Local\CrashDumps
2016-12-27 19:24 - 2016-12-27 19:24 - 00007474 _____ C:\Users\USER\Desktop\rk_BDC9.tmp.txt
2016-12-27 18:52 - 2016-12-27 18:52 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2016-12-27 18:51 - 2016-12-27 18:51 - 00000000 ____D C:\ProgramData\RogueKiller
2016-12-27 18:29 - 2016-12-27 18:29 - 00097636 _____ C:\Users\USER\Desktop\ZHPDiag.txt
2016-12-26 23:30 - 2016-12-26 23:35 - 08067144 _____ C:\Users\USER\Downloads\cms_2Ffiles_2F10874_2F1447885522Free+Feasibility+Study+Templates+Entrprnrshp.zip
2016-12-26 02:13 - 2016-12-26 02:13 - 03417379 _____ C:\Users\USER\Documents\Sans titre.wma
2016-12-25 23:20 - 2016-12-25 23:20 - 00000000 ____D C:\Users\USER\Tracing
2016-12-24 13:28 - 2016-12-24 13:29 - 00147589 _____ C:\Users\USER\Downloads\All+Adobe+Cs5+Me+Patcher+3.0_2.htm
2016-12-24 13:25 - 2016-12-24 13:25 - 00147608 _____ C:\Users\USER\Downloads\All+Adobe+Cs5+Me+Patcher+3.0.htm
2016-12-24 12:55 - 2016-12-24 14:20 - 00000000 ____D C:\Users\USER\AppData\Roaming\SWiSH Max4
2016-12-24 12:55 - 2016-12-24 12:55 - 00000992 _____ C:\Users\Public\Desktop\SWiSH Max4.lnk
2016-12-24 12:55 - 2016-12-24 12:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SWiSH Max4
2016-12-24 12:54 - 2016-12-24 12:55 - 00000000 ____D C:\Program Files\SWiSH Max4
2016-12-24 12:54 - 2016-12-24 12:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LameACM
2016-12-24 12:54 - 2016-12-24 12:54 - 00000000 ____D C:\Program Files\LameACM
2016-12-24 12:54 - 2016-12-24 12:54 - 00000000 ____D C:\Program Files\Common Files\SWiSHzone.com
2016-12-23 11:39 - 2016-12-23 11:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia
2016-12-23 11:39 - 2016-12-23 11:39 - 00000000 ____D C:\Program Files\Common Files\Vbox
2016-12-23 11:37 - 2016-12-23 11:37 - 00000000 ____D C:\Program Files\Macromedia
2016-12-23 11:21 - 2016-12-23 11:21 - 00000000 ____D C:\Users\USER\AppData\Local\Macromedia
2016-12-17 19:52 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2016-12-17 19:50 - 2016-10-26 16:29 - 00407720 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-12-17 19:50 - 2016-06-25 16:43 - 00301056 _____ (Microsoft Corporation) C:\Windows\system32\EOSNotify.exe
2016-12-17 19:50 - 2015-03-19 03:57 - 03963320 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-12-17 19:50 - 2015-03-19 03:57 - 03908024 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-12-17 19:50 - 2014-09-15 01:42 - 02377216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-12-17 19:50 - 2013-03-19 05:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-12-17 19:50 - 2013-03-19 03:50 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-12-17 19:50 - 2010-12-18 06:29 - 00541184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-12-17 19:43 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2016-12-17 19:43 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2016-12-17 19:43 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2016-12-17 19:43 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2016-12-17 19:42 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2016-12-17 19:42 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2016-12-17 17:50 - 2016-12-27 21:11 - 00000000 ____D C:\Users\USER\AppData\Roaming\DMCache
2016-12-17 17:50 - 2016-12-27 20:29 - 00000000 ____D C:\Users\USER\Downloads\Compressed
2016-12-17 17:50 - 2016-12-21 23:06 - 00000000 ____D C:\Users\USER\Downloads\Video
2016-12-17 17:50 - 2016-12-19 21:40 - 00000000 ____D C:\Users\USER\AppData\Roaming\IDM
2016-12-17 17:50 - 2016-12-17 17:52 - 00000000 ____D C:\Program Files\Internet Download Manager
2016-12-17 17:50 - 2016-12-17 17:50 - 00000987 _____ C:\Users\USER\Desktop\Internet Download Manager.lnk
2016-12-17 17:50 - 2016-12-17 17:50 - 00000000 ____D C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-12-17 17:50 - 2016-12-17 17:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2016-12-17 17:50 - 2016-12-17 17:50 - 00000000 ____D C:\ProgramData\IDM
2016-12-17 17:47 - 2016-12-17 17:49 - 06880392 _____ C:\Users\USER\Downloads\idman626build14.rar
2016-12-17 17:19 - 2016-12-17 17:19 - 01021427 _____ C:\Users\USER\Downloads\الأزمة المالية للنظام ال أ رسمالي.pdf
2016-12-17 12:12 - 2016-12-17 12:13 - 00000000 ____D C:\Users\USER\AppData\Local\tkdata
2016-12-17 12:12 - 2016-12-17 12:12 - 00000000 ____D C:\Users\USER\AppData\Local\CEF
2016-12-17 12:11 - 2016-12-25 16:59 - 00001275 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\True Key.lnk
2016-12-17 12:11 - 2016-12-17 12:11 - 00001261 _____ C:\Users\Public\Desktop\True Key.lnk
2016-12-17 12:11 - 2016-12-17 12:11 - 00000000 ____D C:\ProgramData\TrueKey
2016-12-17 12:10 - 2016-12-26 23:21 - 00000000 ____D C:\Program Files\McAfee
2016-12-17 12:10 - 2016-12-17 12:10 - 00000000 ____D C:\Program Files\Intel Security
2016-12-17 12:10 - 2016-12-17 12:10 - 00000000 ____D C:\Program Files\Common Files\McAfee
2016-12-17 12:10 - 2016-12-17 12:10 - 00000000 ____D C:\Program Files\Common Files\AV
2016-12-17 01:01 - 2016-12-17 01:01 - 00000000 ____D C:\Program Files\HotHotSoftware
2016-12-17 01:01 - 2000-07-15 00:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\system32\VB6STKIT.DLL
2016-12-17 00:40 - 2016-12-17 00:40 - 49362033 _____ (Macromedia ) C:\Users\USER\Downloads\flashmx_trial_win_br.exe
2016-12-17 00:26 - 2009-11-25 11:47 - 01130824 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2016-12-17 00:26 - 2009-11-25 11:47 - 00297808 _____ (Microsoft Corporation) C:\Windows\system32\mscoree.dll
2016-12-17 00:26 - 2009-11-25 11:47 - 00295264 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHost.exe
2016-12-17 00:26 - 2009-11-25 11:47 - 00099176 _____ (Microsoft Corporation) C:\Windows\system32\PresentationHostProxy.dll
2016-12-17 00:26 - 2009-11-25 11:47 - 00049472 _____ (Microsoft Corporation) C:\Windows\system32\netfxperf.dll
2016-12-17 00:20 - 2016-12-23 11:52 - 00000000 ____D C:\ProgramData\TEMP
2016-12-17 00:18 - 2016-12-17 00:18 - 00000000 ____D C:\Users\USER\Documents\Flash Banner Creator
2016-12-17 00:18 - 2016-12-17 00:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flash Banner Creator
2016-12-17 00:17 - 2016-12-23 22:37 - 00000000 ____D C:\Program Files\Flash Banner Creator
2016-12-17 00:16 - 2016-12-17 00:17 - 06301624 _____ C:\Users\USER\Downloads\setup_flash_banner_creator.exe
2016-12-17 00:10 - 2016-12-17 00:07 - 00000030 _____ C:\AVScanner.ini
2016-12-17 00:07 - 2016-12-19 00:41 - 00000000 ____D C:\ProgramData\McAfee
2016-12-17 00:06 - 2016-12-27 20:56 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-17 00:06 - 2016-12-26 23:21 - 00000000 ____D C:\Program Files\TrueKey
2016-12-17 00:06 - 2016-12-17 00:06 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-12-17 00:06 - 2016-12-17 00:06 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-12-17 00:01 - 2016-01-20 15:53 - 00272296 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2016-12-17 00:01 - 2016-01-20 15:53 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2016-12-17 00:01 - 2016-01-20 15:53 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2016-12-17 00:01 - 2016-01-20 15:53 - 00146432 _____ (Oracle Corporation) C:\Windows\system32\javacpl.cpl
2016-12-16 23:59 - 2016-12-16 23:59 - 00000000 ____D C:\Users\USER\AppData\Local\Sun
2016-12-16 23:59 - 2016-12-16 23:59 - 00000000 ____D C:\Program Files\SourceTec
2016-12-16 23:53 - 2016-12-17 00:11 - 00000000 ____D C:\Users\USER\AppData\Local\FMSoftwareStudio
2016-12-15 21:18 - 2016-12-15 21:18 - 00001110 _____ C:\Users\USER\Desktop\vlc - Raccourci.lnk
2016-12-14 02:07 - 2016-12-14 07:20 - 00413626 _____ C:\Users\USER\Documents\سعر الصرف والمؤسسات المالية الدولية.pdf
2016-12-14 00:06 - 2016-12-14 02:09 - 00102501 _____ C:\Users\USER\Documents\سعر الصرف.pptx
2016-12-12 22:06 - 2016-12-14 00:06 - 00000000 ____D C:\Users\USER\Documents\سعر الصرف
2016-12-12 12:41 - 2016-12-27 18:25 - 00000000 ____D C:\Users\USER\AppData\Roaming\ZHP
2016-12-12 12:41 - 2016-12-26 01:55 - 00000828 _____ C:\Users\USER\Desktop\ZHPCleaner.lnk
2016-12-12 12:40 - 2016-12-12 12:40 - 00053248 _____ C:\Windows\system32\suppdll.dll
2016-12-12 12:40 - 2016-12-12 12:40 - 00035363 _____ C:\Windows\system32\windrvNT.sys
2016-12-10 13:47 - 2016-12-10 13:47 - 00245800 _____ C:\Users\USER\Documents\__www.startimes.com_f.aspx_f=17.pdf
2016-12-10 01:41 - 2016-12-10 02:25 - 00000000 ____D C:\ProgramData\Wondershare AllMytube
2016-12-09 20:33 - 2016-12-12 22:14 - 00403107 _____ C:\Users\USER\Documents\Présentation1.pptx
2016-12-09 20:24 - 2016-12-09 20:25 - 00001522 _____ C:\Users\USER\Desktop\المكتبة الشاملة.lnk
2016-12-08 23:33 - 2016-12-08 23:33 - 00000000 ____D C:\ProgramData\xml_param
2016-12-08 23:26 - 2016-12-08 23:26 - 00000000 ____D C:\Users\USER\Documents\Praetorians
2016-12-08 23:26 - 2016-12-08 23:26 - 00000000 ____D C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-12-08 23:02 - 2016-12-08 23:02 - 00000991 _____ C:\Users\Public\Desktop\PhotoInstrument.lnk
2016-12-08 23:02 - 2016-12-08 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoInstrument
2016-12-08 23:02 - 2016-12-08 23:02 - 00000000 ____D C:\Program Files\PhotoInstrument
2016-12-08 23:01 - 2016-12-12 12:38 - 00000000 ___DC C:\Users\USER\AppData\Local\MigWiz
2016-12-08 22:49 - 2016-12-08 22:49 - 00000000 ____D C:\Users\USER\AppData\Local\WMTools Downloaded Files
2016-12-08 22:48 - 2016-12-08 22:48 - 00002495 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker 2.6.lnk
2016-12-08 22:48 - 2016-12-08 22:48 - 00000000 ____D C:\Program Files\Movie Maker 2.6
2016-12-08 19:02 - 2016-12-09 20:11 - 00000000 ____D C:\Users\USER\Desktop\هشام
2016-12-08 18:32 - 2016-12-08 18:32 - 00000000 ____D C:\Users\USER\AppData\LocalLow\Adobe
2016-12-08 18:27 - 2016-11-27 17:15 - 11897302 _____ C:\Users\USER\Documents\جدوى.pdf
2016-12-08 18:26 - 2016-12-01 19:36 - 03421788 _____ C:\Users\USER\Documents\memoir_ØØÙˆÙ1 (3) (1).pdf
2016-12-08 01:01 - 2016-12-08 01:01 - 00000000 ____D C:\Users\USER\AppData\Local\Aimersoft
2016-12-08 01:01 - 2016-12-08 01:01 - 00000000 ____D C:\ProgramData\Aimersoft
2016-12-08 01:01 - 2016-12-08 01:01 - 00000000 ____D C:\Program Files\Common Files\Aimersoft
2016-12-07 23:24 - 2016-12-07 23:24 - 00968492 _____ C:\Users\USER\Downloads\Le-respect-de-l’environnement-Camille.ppsx
2016-12-07 23:24 - 2016-12-07 23:24 - 00441612 _____ C:\Users\USER\Downloads\Le-respect-de-l’environnement.ppsx
2016-12-07 23:24 - 2016-12-07 23:24 - 00261129 _____ C:\Users\USER\Downloads\Pfeg-low-cost-3.ppsx
2016-12-07 23:23 - 2016-12-07 23:23 - 00458753 _____ C:\Users\USER\Downloads\Diapo-pfeg-final-.ppsx
2016-12-07 23:23 - 2016-12-07 23:23 - 00101168 _____ C:\Users\USER\Downloads\L’économie-numérique-diapo.ppsx
2016-12-07 22:54 - 2016-12-07 22:54 - 00530432 _____ C:\Users\USER\Downloads\ميثاق القسم.ppt
2016-12-07 22:48 - 2016-12-07 22:48 - 02930176 _____ C:\Users\USER\Downloads\قصر (205) مقدمة1.ppt
2016-12-07 22:48 - 2016-12-07 22:48 - 00580096 _____ C:\Users\USER\Downloads\الفصل-الأول-مقدمة-الاقتصاد.ppt
2016-12-07 22:48 - 2016-12-07 22:48 - 00535040 _____ C:\Users\USER\Downloads\صحة البيئة 6.ppt
2016-12-07 22:47 - 2016-12-07 22:47 - 00841728 _____ C:\Users\USER\Downloads\Macro1_Small_Open_Economy_lob.ppt
2016-12-07 22:46 - 2016-12-07 22:46 - 01330688 _____ C:\Users\USER\Downloads\13-Using_Powerpoint.ppt
2016-12-07 22:46 - 2016-12-07 22:46 - 00986112 _____ C:\Users\USER\Downloads\atomic-models.ppt
2016-12-07 22:46 - 2016-12-07 22:46 - 00160768 _____ C:\Users\USER\Downloads\-الثالث نموذج كينز البسيط.ppt
2016-12-07 22:46 - 2016-12-07 22:46 - 00101888 _____ C:\Users\USER\Downloads\-الثاني نماذج الاقتصاد الكلي.ppt
2016-12-07 22:44 - 2016-12-07 22:44 - 01124352 _____ C:\Users\USER\Downloads\atomos.ppt
2016-12-06 22:10 - 2016-12-06 22:10 - 05304437 _____ C:\Users\USER\Downloads\EDAAT_Feb_2013_Feasibility_Studies_405.pdf
2016-12-06 22:08 - 2016-12-06 22:08 - 00371075 _____ C:\Users\USER\Downloads\دراسة جدوى المشروع من المنظور التجاري.pdf
2016-12-06 22:08 - 2016-12-06 22:08 - 00191488 _____ C:\Users\USER\Downloads\مخاطر عدم التأكد.ppt
2016-12-06 19:12 - 2016-12-06 21:47 - 00000000 ____D C:\Program Files\iCare Data Recovery Pro
2016-12-06 00:40 - 2016-12-06 00:40 - 00000000 ____D C:\Users\USER\AppData\Roaming\ESET
2016-12-05 22:53 - 2016-12-27 20:58 - 00000000 ____D C:\Users\USER\AppData\LocalLow\Mozilla
2016-12-05 22:39 - 2016-12-05 22:39 - 00243648 _____ C:\Users\USER\Downloads\Firefox Setup Stub 50.0.2.exe
2016-12-05 21:42 - 2016-12-05 21:43 - 00072368 _____ C:\Users\USER\Downloads\تقييم تجربة القرض المصغر في الجزائر كآلية لمحاربة الفقر.zip
2016-12-03 23:25 - 2016-12-03 23:26 - 02171177 _____ C:\Users\USER\Downloads\الحداثة في ميزان الإسلام.pdf
2016-12-03 11:28 - 2016-12-03 11:28 - 00001024 ____H C:\SYSTAG.BIN
2016-12-02 23:19 - 2016-12-02 23:19 - 00371600 _____ C:\Users\USER\Downloads\استخدام أسلوب الحساسية في تقييم المشاريع.pdf
2016-12-02 11:47 - 2016-12-02 11:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
2016-12-02 11:47 - 2013-06-28 14:49 - 01570304 _____ (Atheros Communications, Inc.) C:\Windows\system32\Drivers\athur.sys
2016-12-02 11:47 - 2013-06-28 14:49 - 01570304 _____ (Atheros Communications, Inc.) C:\Windows\system32\athur.sys
2016-12-02 11:47 - 2013-06-28 14:49 - 00007514 _____ C:\Windows\system32\athurext.cat
2016-12-02 11:23 - 2016-12-02 11:23 - 01074630 _____ C:\Users\USER\Downloads\book1_6047.pdf
2016-12-02 11:19 - 2016-12-02 11:21 - 35508616 _____ C:\Users\USER\Downloads\ghmood.pdf
2016-12-01 00:48 - 2016-12-01 00:49 - 00144744 _____ C:\Users\USER\Documents\(ملخص).pdf
2016-11-30 16:21 - 2016-10-17 16:35 - 00147120 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2016-11-30 08:35 - 2016-11-30 08:35 - 00000000 ____D C:\Users\USER\Documents\EGDownloads
2016-11-30 08:35 - 2016-11-30 08:35 - 00000000 ____D C:\Users\USER\AppData\Roaming\EagleGet
2016-11-30 08:27 - 2016-12-17 00:08 - 00000000 ____D C:\Users\USER\AppData\Local\Adobe
2016-11-30 00:00 - 2016-11-30 00:00 - 00000800 _____ C:\Windows\unins000.dat
2016-11-29 22:29 - 2016-12-01 09:38 - 00248804 _____ C:\Users\USER\Documents\السياسة النقدية.pdf
2016-11-29 21:42 - 2016-11-29 21:42 - 00000997 _____ C:\Users\Public\Desktop\PDFCreator.lnk
2016-11-29 21:42 - 2016-11-29 21:42 - 00000000 ____D C:\Users\USER\AppData\Roaming\pdfforge
2016-11-29 21:42 - 2016-11-29 21:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2016-11-29 21:41 - 2016-12-12 12:38 - 00000000 ____D C:\Program Files\PDFCreator
2016-11-29 21:41 - 2001-10-28 17:42 - 00116224 _____ C:\Windows\system32\pdfcmnnt.dll
2016-11-29 21:41 - 1998-07-13 02:08 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\MSCMCFR.DLL
2016-11-29 21:41 - 1998-07-13 02:08 - 00119568 _____ (Microsoft Corporation) C:\Windows\system32\VB6FR.DLL
2016-11-29 21:41 - 1998-07-13 02:08 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\MSCC2FR.DLL
2016-11-29 21:41 - 1998-07-06 01:00 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\MSMPIDE.DLL
2016-11-29 21:41 - 1998-06-24 01:00 - 00137000 _____ (Microsoft Corporation) C:\Windows\system32\MSMAPI32.OCX
2016-11-29 17:21 - 2016-12-09 20:13 - 00000012 _____ C:\Users\USER\Documents\كود.txt
2016-11-28 22:12 - 2016-11-28 22:12 - 00001326 _____ C:\Users\USER\Desktop\chrome - Raccourci.lnk
2016-11-28 21:12 - 2016-11-28 21:12 - 00000697 _____ C:\Users\USER\AppData\Roaming\Microsoft\Windows\Start Menu\ÇáãæÓæÚÉ ÇáÔÚÑíÉ.lnk
2016-11-28 21:12 - 2016-11-28 21:12 - 00000673 _____ C:\Users\USER\Desktop\الموسوعة الشعرية.lnk
2016-11-28 21:12 - 2016-11-28 21:12 - 00000000 ____D C:\Poetry Encyclopedia
2016-11-27 22:36 - 2016-11-27 22:37 - 01277665 _____ C:\Users\USER\Downloads\TL-WN721N_V1_Win7_Beta.zip
2016-11-27 22:35 - 2016-11-27 22:35 - 00660080 _____ C:\Users\USER\Downloads\TL-WN721N_datasheet.zip
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2016-12-27 21:12 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-27 21:11 - 2016-01-20 15:55 - 00000000 ____D C:\Users\USER\AppData\Roaming\AIMP3
2016-12-27 20:41 - 2016-11-26 01:56 - 00000000 ____D C:\Users\USER\AppData\Roaming\Skype
2016-12-27 16:34 - 2016-01-20 15:54 - 00000000 ____D C:\Program Files\Opera
2016-12-27 16:31 - 2016-11-21 22:14 - 00000000 ___SD C:\Users\USER\AppData\LocalLow\Temp
2016-12-24 14:22 - 2016-11-21 20:58 - 00000000 ____D C:\Users\USER\AppData\Roaming\vlc
2016-12-24 14:06 - 2016-11-22 12:25 - 00000000 ____D C:\Users\USER\AppData\Roaming\Media Player Classic
2016-12-23 21:48 - 2016-01-20 15:36 - 01667292 _____ C:\Windows\system32\PerfStringBackup.INI
2016-12-23 21:48 - 2009-07-14 09:39 - 00737444 _____ C:\Windows\system32\perfh00C.dat
2016-12-23 21:48 - 2009-07-14 09:39 - 00149372 _____ C:\Windows\system32\perfc00C.dat
2016-12-23 21:48 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-12-23 11:37 - 2014-12-28 15:46 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2016-12-23 11:37 - 2014-12-28 15:46 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2016-12-21 19:52 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2016-12-18 12:25 - 2009-07-14 05:33 - 00711968 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-18 00:06 - 2009-07-14 05:34 - 00009792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-12-18 00:06 - 2009-07-14 05:34 - 00009792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-12-17 00:06 - 2016-01-20 15:40 - 00000000 ____D C:\Windows\system32\Macromed
2016-12-17 00:01 - 2016-11-26 14:07 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-12-17 00:01 - 2016-01-20 15:53 - 00000000 ____D C:\Program Files\Java
2016-12-16 23:59 - 2016-01-20 15:54 - 00000000 ____D C:\Program Files\Common Files\Java
2016-12-16 14:15 - 2016-11-26 17:29 - 00000000 ____D C:\Users\USER\AppData\Roaming\shamela
2016-12-16 14:15 - 2015-07-16 19:28 - 00000000 ____D C:\shamela
2016-12-15 21:23 - 2016-11-26 14:13 - 00000000 ____D C:\Users\USER\AppData\Roaming\FontCreator
2016-12-15 21:23 - 2016-11-26 14:13 - 00000000 ____D C:\Users\USER\AppData\Local\FontCreator
2016-12-15 20:58 - 2016-11-26 14:07 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-12-14 23:53 - 2016-01-20 15:32 - 00000000 ____D C:\Users\USER\AppData\Local\VirtualStore
2016-12-12 12:38 - 2014-12-08 10:21 - 00000000 ____D C:\Windows\Panther
2016-12-08 23:28 - 2014-07-19 08:44 - 00187432 _____ C:\Users\USER\AppData\Local\GDIPFONTCACHEV1.DAT
2016-12-06 20:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2016-12-05 22:47 - 2016-11-26 14:07 - 00001125 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-12-05 22:47 - 2016-11-26 14:07 - 00001113 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-12-03 16:01 - 2016-11-21 20:17 - 00000000 ____D C:\Users\USER\AppData\Local\Microsoft Help
2016-12-03 11:28 - 2016-01-20 15:47 - 00000082 _____ C:\Windows\system32\winsevr.dat
2016-12-03 11:28 - 2016-01-20 15:47 - 00000000 ____D C:\ProgramData\AomeiBR
2016-11-30 08:27 - 2016-01-20 15:44 - 00000000 ____D C:\Users\USER\AppData\Roaming\Adobe
2016-11-29 22:29 - 2016-11-21 18:47 - 00000000 ____D C:\Users\USER\AppData\Roaming\Foxit Software
==================== Fichiers à la racine de certains dossiers =======
2016-11-22 00:38 - 2016-11-22 00:38 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Certains fichiers dans TEMP:
====================
C:\Users\USER\AppData\Local\Temp\dllnt_dump.dll
C:\Users\USER\AppData\Local\Temp\Setup.exe
C:\Users\USER\AppData\Local\Temp\SkypeSetup.exe
C:\Users\USER\AppData\Local\Temp\UnSigner.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le MD5 est légitime
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-12-24 17:57
==================== Fin de FRST.txt ============================