cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 21-12-2016
Exécuté par David (administrateur) sur PC-DAVID (30-12-2016 14:34:59)
Exécuté depuis C:\Users\David\Desktop
Profils chargés: David (Profils disponibles: David)
Platform: Windows 10 Home Version 1511 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(Microsoft Corporation) C:\WINDOWS\System32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(Flexera Software, Inc.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
(Flexera Software, Inc.) C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Microsoft Corporation) C:\WINDOWS\SysWOW64\perfhost.exe
(Mentor Graphics Corporation) C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\remotesolverdispatcherservice.exe
(Mentor Graphics Corporation) C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\dispatcher.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnWMI.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(SolidWorks) C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe
(Microsoft Corporation) C:\WINDOWS\System32\TieringEngineService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(VIA Technologies, Inc.) C:\WINDOWS\System32\ViakaraokeSrv.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\ismagent.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Microsoft Corporation) C:\WINDOWS\System32\WpcMon.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
() C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\updateui.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Microsoft Corporation) C:\WINDOWS\System32\NetworkUXBroker.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE
(ASUSTeK) C:\WINDOWS\SysWOW64\ACEngSvr.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Intel Corporation) C:\WINDOWS\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Dassault Systèmes SolidWorks Corp.) C:\Program Files\SolidWorks Corp\SolidWorks\sldworks_fs.exe
() C:\WINDOWS\Temp\g24C2.tmp.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [366720 2012-07-02] (Alcor Micro Corp.)
HKLM\...\Run: [ACMON] => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [90832 2012-06-07] (ASUS)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3350760 2015-08-03] (ELAN Microelectronics Corp.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [91432 2012-03-28] (CyberLink Corp.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61640 2016-11-24] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [917576 2016-12-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup User Starter] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe [26832 2016-12-13] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira System Speedup Tray] => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.Systray.exe [159568 2016-12-13] (Avira Operations GmbH & Co. KG)
HKLM\...\RunOnce: [wd] => C:\WINDOWS\TEMP\g24C2.tmp.exe [249856 2016-12-29] () <===== ATTENTION
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2322743547-1758143646-929427702-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2322743547-1758143646-929427702-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27017856 2016-10-17] (Skype Technologies S.A.)
HKU\S-1-5-21-2322743547-1758143646-929427702-1002\...\Run: [HP Photosmart 6520 series (NET)] => C:\Program Files\HP\HP Photosmart 6520 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.9.120\ASUSWSShellExt64.dll [2012-03-13] (ASUS Cloud Corporation.)
Startup: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2015-05-27]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
Startup: C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2016-12-29]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)
Startup: C:\Users\Travail\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\zSpeedup.lnk [2016-12-29]
ShortcutTarget: zSpeedup.lnk -> C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.Core.Common.Starter.exe (Avira Operations GmbH & Co. KG)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{6e89d104-cab3-4f9b-90a2-c154e043174c}: [DhcpNameServer] 192.168.224.1
Tcpip\..\Interfaces\{c7549978-966b-4f71-8754-69e74c1f8ffc}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2322743547-1758143646-929427702-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-08-16] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-08-27] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-08-16] (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)

Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-2322743547-1758143646-929427702-1002 ->

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [{D19CA586-DD6C-4a0a-96F8-14644F340D60}] - C:\Program Files (x86)\Common Files\McAfee\SystemCore => non trouvé(e)
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK => non trouvé(e)
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_186.dll [2016-12-14] ()
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [Pas de fichier]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll [2016-12-14] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-12-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-12-03] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [Pas de fichier]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Pas de fichier]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-07-19] (Microsoft Corporation)

Chrome:
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://google.com/"
CHR Profile: C:\Users\David\AppData\Local\Google\Chrome\User Data\Default [2016-12-30]
CHR Extension: (Google Slides) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-29]
CHR Extension: (Google Docs) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-29]
CHR Extension: (Google Drive) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-29]
CHR Extension: (YouTube) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-29]
CHR Extension: (Adblock Plus) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-12-29]
CHR Extension: (Google Sheets) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-29]
CHR Extension: (Barre de Confiance CM-CIC) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffjkhaeogkeelkioellpgcebmekedpag [2016-12-29]
CHR Extension: (Protection Web Avira) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-12-29]
CHR Extension: (Google Docs hors connexion) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-29]
CHR Extension: (AdBlock) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-29]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2016-12-29]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-12-29]
CHR Extension: (Gmail) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-29]
CHR Extension: (Chrome Media Router) - C:\Users\David\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-29]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2322743547-1758143646-929427702-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\David\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-10-25]
CHR HKU\S-1-5-21-2322743547-1758143646-929427702-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1089592 2016-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [476736 2016-12-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [476736 2016-12-17] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1490296 2016-12-17] (Avira Operations GmbH & Co. KG)
R2 ASUS InstantOn; C:\Program Files (x86)\ASUS\ASUS InstantOn\InsOnSrv.exe [277120 2012-04-13] (ASUS)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [350528 2016-11-24] (Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [299440 2016-12-20] (Avira Operations GmbH & Co. KG)
S2 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [239904 2016-01-26] (EasyAntiCheat Ltd)
R2 ETDService; C:\Program Files\Elantech\ETDService.exe [147688 2015-08-03] (ELAN Microelectronics Corp.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4317648 2016-12-14] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R2 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
R2 RemoteSolverDispatcher; C:\Program Files\SolidWorks Corp\SolidWorks Flow Simulation\binCFW\remotesolverdispatcherservice.exe [52360 2012-11-22] (Mentor Graphics Corporation) [Fichier non signé]
R2 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2014-10-07] (SolidWorks) [Fichier non signé]
R2 SpeedupService; C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.SpeedupService.exe [35416 2016-12-13] (Avira Operations GmbH & Co. KG)
R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [36504 2015-06-22] (VIA Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364456 2016-09-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-09-07] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4325544 2015-06-26] (Qualcomm Atheros Communications, Inc.)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [151352 2016-12-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [153904 2016-12-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [35488 2016-10-17] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [78208 2016-10-17] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\WINDOWS\System32\Drivers\avusbflt.sys [28272 2016-12-17] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [283064 2014-07-30] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2016-12-14] ()
S3 hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [46136 2013-07-03] (LogMeIn Inc.)
S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [196440 2012-04-20] (McAfee, Inc.)
R3 kbfiltr; C:\WINDOWS\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176064 2016-12-25] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [102856 2016-12-29] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2016-12-29] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [250816 2016-12-29] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2016-12-30] (Malwarebytes)
S3 mferkdet; C:\WINDOWS\System32\drivers\mferkdet.sys [106112 2012-12-26] (McAfee, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
S3 ssudserd; C:\WINDOWS\system32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
S3 catchme; \??\C:\Users\David\AppData\Local\Temp\catchme.sys [X]
S3 EraserUtilDrv11521; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11521.sys [X]
S3 NAVENG; \??\C:\Program Files (x86)\Norton Security\NortonData\22.7.0.76\Definitions\SDSDefs\20160815.022\ENG64.SYS [X]
S3 NAVEX15; \??\C:\Program Files (x86)\Norton Security\NortonData\22.7.0.76\Definitions\SDSDefs\20160815.022\EX64.SYS [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-12-30 14:34 - 2016-12-30 14:37 - 00026491 _____ C:\Users\David\Desktop\FRST.txt
2016-12-30 14:34 - 2016-12-30 14:34 - 00000000 ____D C:\FRST
2016-12-30 14:33 - 2016-12-30 14:34 - 02420736 _____ (Farbar) C:\Users\David\Desktop\FRST64.exe
2016-12-29 23:13 - 2016-12-30 14:27 - 00000028 _____ C:\Users\David\AppData\Roaming\sp_data.sys
2016-12-29 20:19 - 2016-12-29 20:19 - 00002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-29 20:19 - 2016-12-29 20:19 - 00002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-29 20:05 - 2016-12-29 20:05 - 00000990 _____ C:\Users\David\Desktop\ResetBrowser - Raccourci.lnk
2016-12-29 20:03 - 2016-12-29 20:14 - 01622528 _____ C:\Users\David\Desktop\ResetBrowser.exe
2016-12-29 19:31 - 2016-12-29 19:31 - 00000000 ___HD C:\OneDriveTemp
2016-12-29 19:27 - 2016-12-29 19:27 - 00016810 _____ C:\WINDOWS\System32\Tasks\1014r678o4m373
2016-12-29 19:27 - 2016-12-29 19:27 - 00000000 ___HD C:\ProgramData\1014r678o4m373
2016-12-29 19:25 - 2016-12-29 19:25 - 00001520 _____ C:\WINDOWS\Tasks\834q775c945g986.job
2016-12-29 14:59 - 2016-12-29 14:59 - 00000000 ____D C:\Users\TEMP.PC-DAVID.000\AppData\Local\Avira
2016-12-29 14:53 - 2016-12-29 14:56 - 00000000 ____D C:\Users\TEMP.PC-DAVID.000
2016-12-29 14:01 - 2016-12-29 14:05 - 00000000 ____D C:\Users\TEMP.PC-DAVID
2016-12-29 12:30 - 2016-12-29 12:40 - 00000000 ____D C:\Users\TEMP
2016-12-27 14:09 - 2016-12-27 14:09 - 00003682 _____ C:\Users\David\Desktop\ZHPFixReport.txt
2016-12-27 13:59 - 2016-12-27 14:00 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2016-12-27 13:59 - 2016-12-27 13:59 - 00001920 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2016-12-27 13:57 - 2016-12-27 13:59 - 03521617 _____ (Nicolas Coolman ) C:\Users\David\Desktop\ZHPFix.exe
2016-12-26 22:56 - 2016-12-26 22:57 - 00829532 _____ C:\WINDOWS\Minidump\122616-39421-01.dmp
2016-12-26 12:19 - 2016-12-26 12:19 - 00167326 _____ C:\Users\David\Desktop\ZHPDiag.txt
2016-12-26 12:02 - 2016-12-26 12:02 - 00000907 _____ C:\Users\David\Desktop\ZHPDiag.lnk
2016-12-26 12:01 - 2016-12-26 12:01 - 02618368 _____ C:\Users\David\Desktop\ZHPDiag3.exe
2016-12-25 10:51 - 2016-12-29 19:25 - 00000000 ___HD C:\ProgramData\834q775c945g986
2016-12-25 10:51 - 2016-12-25 10:51 - 00016816 _____ C:\WINDOWS\System32\Tasks\834q775c945g986
2016-12-25 10:50 - 2016-12-25 10:50 - 00016810 _____ C:\WINDOWS\System32\Tasks\847q78c657g351
2016-12-25 10:50 - 2016-12-25 10:50 - 00000000 ___HD C:\ProgramData\847q78c657g351
2016-12-24 17:49 - 2016-12-25 11:17 - 00176064 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2016-12-24 17:48 - 2016-12-30 10:23 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2016-12-24 17:48 - 2016-12-29 20:30 - 00102856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2016-12-24 17:48 - 2016-12-29 19:27 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-12-24 17:48 - 2016-12-29 19:26 - 00250816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-12-24 17:48 - 2016-12-24 17:48 - 00001914 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2016-12-24 17:48 - 2016-12-24 17:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2016-12-24 17:48 - 2016-12-14 12:55 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2016-12-24 17:47 - 2016-12-24 17:47 - 00000000 ____D C:\Program Files\Malwarebytes
2016-12-24 17:34 - 2016-12-24 17:36 - 00039786 _____ C:\Users\David\Desktop\ZHPCleaner.txt
2016-12-24 17:13 - 2016-12-24 17:13 - 00000917 _____ C:\Users\David\Desktop\ZHPCleaner.lnk
2016-12-24 17:12 - 2016-12-24 17:13 - 02624000 _____ C:\Users\David\Desktop\ZHPCleaner.exe
2016-12-23 12:21 - 2016-12-23 12:22 - 03977168 _____ C:\Users\David\Desktop\adwcleaner_6.041.exe
2016-12-23 10:29 - 2016-12-23 10:29 - 00001107 _____ C:\Users\David\Desktop\matlab - Raccourci.lnk
2016-12-22 19:22 - 2016-12-22 19:22 - 00000000 ____D C:\Users\David\Documents\MATLAB
2016-12-22 19:21 - 2016-12-22 19:21 - 00000000 ____D C:\Users\David\AppData\Roaming\Subversion
2016-12-22 19:21 - 2016-12-22 19:21 - 00000000 ____D C:\Users\David\AppData\Local\MathWorks
2016-12-22 19:13 - 2016-12-22 19:13 - 00000000 ____D C:\Users\David\AppData\Roaming\MathWorks
2016-12-22 14:15 - 2016-12-29 19:29 - 00000000 ____D C:\Users\Public\Speedup Sessions
2016-12-22 14:15 - 2016-12-22 14:15 - 00001218 _____ C:\Users\Public\Desktop\Avira System Speedup.lnk
2016-12-22 13:55 - 2016-12-22 13:55 - 00000000 ____D C:\Users\David\AppData\Roaming\Avira
2016-12-22 13:45 - 2016-12-22 13:45 - 00000000 ____D C:\Users\David\AppData\Local\AviraSpeedup
2016-12-22 13:35 - 2016-12-22 13:35 - 00000000 _____ C:\TOSTACK
2016-12-22 11:17 - 2016-12-22 11:17 - 00000000 ____D C:\Users\David\AppData\Local\Chromium
2016-12-15 14:50 - 2016-12-15 14:50 - 00243194 _____ C:\Users\David\Downloads\cv ingénieur généraliste - centrale lyon.pdf
2016-12-13 21:08 - 2016-12-29 15:14 - 00003276 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2016-12-12 20:06 - 2016-12-12 20:06 - 00779160 _____ C:\Users\David\Downloads\THEBAUD-FLIPO-TCHOUANKAM.pdf
2016-12-11 14:34 - 2016-12-11 14:34 - 00278601 _____ C:\Users\David\Downloads\corrige_exam_QCM2006.pdf
2016-12-11 14:33 - 2016-12-11 14:33 - 00265972 _____ C:\Users\David\Downloads\exam_QCM2006.pdf
2016-12-10 18:58 - 2016-12-10 18:58 - 06880664 _____ (Tim Kosse) C:\Users\David\Downloads\FileZilla_3.23.0.2_win64-setup.exe
2016-12-10 14:08 - 2016-12-23 12:22 - 01065376 _____ (Google Inc.) C:\Users\David\Downloads\ChromeSetup.exe
2016-12-06 19:21 - 2016-12-06 19:21 - 00098175 _____ C:\Users\David\Downloads\Tut rentrée CCB (1).pdf
2016-12-06 19:19 - 2016-12-06 19:19 - 00098175 _____ C:\Users\David\Downloads\Tut rentrée CCB.pdf
2016-12-04 14:59 - 2016-12-04 14:59 - 00332321 _____ C:\Users\David\Downloads\ECE_ING2_Thermodynamique_TDs_Chap.6_Changements-détats.pdf
2016-11-30 22:38 - 2016-11-30 22:38 - 01207280 _____ C:\Users\David\Downloads\QCM-Rayan.pdf

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2016-12-30 14:28 - 2016-01-06 16:06 - 00000000 ____D C:\Users\David\AppData\Local\CrashDumps
2016-12-30 10:14 - 2013-11-16 15:03 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{EF90CCB0-7999-421C-B363-E8D560E4896B}
2016-12-30 10:13 - 2015-10-30 20:00 - 00825500 _____ C:\WINDOWS\system32\perfh00C.dat
2016-12-30 10:13 - 2015-10-30 20:00 - 00155764 _____ C:\WINDOWS\system32\perfc00C.dat
2016-12-30 10:13 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-12-30 10:13 - 2015-07-31 19:15 - 01848398 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-30 10:11 - 2014-07-30 13:14 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-12-29 23:10 - 2015-06-12 19:35 - 00000000 ____D C:\Users\David\AppData\Local\Warframe
2016-12-29 20:55 - 2015-01-14 22:27 - 00000000 ____D C:\Program Files (x86)\Steam
2016-12-29 20:29 - 2013-08-02 20:11 - 00000000 ____D C:\Users\David\AppData\Roaming\Skype
2016-12-29 20:19 - 2013-07-02 15:24 - 00000000 ____D C:\Program Files (x86)\Google
2016-12-29 19:33 - 2015-01-30 15:13 - 00000000 ___RD C:\Users\David\Google Drive
2016-12-29 19:31 - 2013-11-08 11:55 - 00000000 __RDO C:\Users\David\SkyDrive
2016-12-29 19:27 - 2012-09-25 12:54 - 00000868 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job
2016-12-29 19:25 - 2015-12-17 09:12 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-12-29 19:25 - 2015-10-30 07:28 - 01310720 ___SH C:\WINDOWS\system32\config\BBI
2016-12-29 19:06 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-12-29 15:25 - 2012-09-25 12:54 - 00000870 _____ C:\WINDOWS\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job
2016-12-29 15:04 - 2012-12-25 16:17 - 00000000 __RHD C:\Users\Public\AccountPictures
2016-12-28 09:47 - 2016-11-17 22:28 - 00000000 ____D C:\AdwCleaner
2016-12-27 14:09 - 2013-10-25 11:23 - 00000000 ____D C:\Users\David\AppData\Roaming\ZHP
2016-12-27 13:59 - 2013-10-25 11:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2016-12-27 13:32 - 2016-04-03 17:43 - 00000000 ____D C:\Users\Travail
2016-12-27 13:32 - 2015-12-17 08:49 - 00000000 ____D C:\Users\David
2016-12-26 22:56 - 2016-03-04 21:47 - 00000000 ____D C:\WINDOWS\Minidump
2016-12-26 16:44 - 2012-12-26 19:43 - 00000000 ____D C:\Users\David\Documents\Travail
2016-12-26 13:01 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2016-12-26 11:48 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-24 23:40 - 2016-11-27 16:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-12-24 17:47 - 2016-10-09 18:53 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-12-24 16:00 - 2013-01-06 14:41 - 00000000 ____D C:\Users\David\AppData\Roaming\TS3Client
2016-12-23 12:23 - 2013-07-02 15:24 - 00000000 ____D C:\Users\David\AppData\Local\Google
2016-12-22 14:44 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-12-22 14:22 - 2013-07-21 11:53 - 00000000 ____D C:\Users\David\AppData\Roaming\uTorrent
2016-12-22 14:15 - 2016-11-27 16:02 - 00000000 ____D C:\Program Files (x86)\Avira
2016-12-22 11:18 - 2015-03-12 14:31 - 00000000 ____D C:\Users\David\AppData\Local\Steam
2016-12-17 12:23 - 2016-11-27 16:06 - 00028272 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avusbflt.sys
2016-12-17 12:23 - 2016-11-27 16:04 - 00153904 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2016-12-17 12:23 - 2016-11-27 16:04 - 00151352 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2016-12-17 08:44 - 2013-07-02 15:24 - 00003586 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-17 08:44 - 2013-07-02 15:24 - 00003462 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-14 09:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2016-12-14 09:11 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\Macromed
2016-12-13 21:08 - 2015-08-01 11:27 - 00002449 _____ C:\Users\David\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-13 20:47 - 2015-01-30 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2016-12-12 20:04 - 2016-10-24 18:01 - 00000600 _____ C:\Users\David\AppData\Local\PUTTY.RND
2016-12-12 20:04 - 2014-07-27 11:45 - 00000000 ____D C:\Users\David\AppData\Roaming\FileZilla
2016-12-12 19:36 - 2012-12-25 16:25 - 00000000 ____D C:\Users\David\AppData\Local\Packages
2016-12-10 16:37 - 2013-07-02 14:37 - 00000000 ____D C:\Program Files (x86)\Pando Networks
2016-12-09 23:18 - 2016-10-26 14:58 - 00000000 _____ C:\Users\Public\Documents\report.dat
2016-12-04 13:55 - 2014-01-03 17:31 - 00000000 ____D C:\Users\David\AppData\Local\Microsoft Help
2016-11-30 20:29 - 2016-05-24 12:29 - 00001130 _____ C:\Users\Public\Desktop\paint.net.lnk
2016-11-30 20:29 - 2015-06-15 15:54 - 00001142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2016-11-30 20:29 - 2015-06-15 15:54 - 00000000 ____D C:\Program Files\paint.net

==================== Fichiers à la racine de certains dossiers =======

2015-08-25 17:06 - 2015-08-25 17:06 - 0000000 _____ () C:\Program Files\FileViewPro
2015-08-25 17:06 - 2015-08-25 17:06 - 0000000 _____ () C:\Program Files (x86)\VstPlugins
2016-01-06 15:18 - 2016-01-06 15:18 - 0000046 _____ () C:\Users\David\AppData\Roaming\Camdata.ini
2016-01-06 15:18 - 2016-01-06 15:18 - 0000408 _____ () C:\Users\David\AppData\Roaming\CamLayout.ini
2016-01-06 15:18 - 2016-01-06 15:18 - 0000408 _____ () C:\Users\David\AppData\Roaming\CamShapes.ini
2016-01-06 10:21 - 2016-01-06 15:18 - 0004522 _____ () C:\Users\David\AppData\Roaming\CamStudio.cfg
2016-07-08 14:27 - 2016-07-08 14:28 - 0000024 _____ () C:\Users\David\AppData\Roaming\SoundCloudDownloaderSettings.ini
2016-12-29 23:13 - 2016-12-30 14:27 - 0000028 _____ () C:\Users\David\AppData\Roaming\sp_data.sys
2016-10-24 18:01 - 2016-12-12 20:04 - 0000600 _____ () C:\Users\David\AppData\Local\PUTTY.RND
2014-07-30 13:06 - 2015-12-12 20:54 - 0007600 _____ () C:\Users\David\AppData\Local\Resmon.ResmonCfg
2013-12-31 16:11 - 2013-12-31 16:11 - 0000057 _____ () C:\ProgramData\Ament.ini
2012-08-17 01:52 - 2012-07-30 07:03 - 0000217 _____ () C:\ProgramData\SetStretch.cmd
2012-08-17 01:52 - 2009-07-22 11:04 - 0024576 _____ () C:\ProgramData\SetStretch.exe

Fichiers à déplacer ou supprimer:
====================
C:\WINDOWS\TEMP\g24C2.tmp.exe


==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2016-12-28 10:00

==================== Fin de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité