Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 28-01-2017 01
Exécuté par Geik (administrateur) sur GEIK-PC (28-01-2017 13:39:11)
Exécuté depuis C:\Users\Geik\Downloads
Profils chargés: Geik (Profils disponibles: Geik)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322176 2012-04-06] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-24] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5256336 2012-07-11] (VIA)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-07] (Intel Corporation)
HKLM-x32\...\Run: [ROCCAT Savu Gaming Mouse] => C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe [872048 2012-09-10] (ROCCAT GmbH)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2016-02-03] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [47432 2013-08-15] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [31048 2013-08-15] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFHook] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [f.lux] => C:\Users\Geik\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [Discord] => C:\Users\Geik\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [IP0JT35QB1] => "C:\Program Files\HWMVKZVEWF\BB32C3LXR.exe"
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [46TRJWA0RF] => "C:\Program Files\SKV0J0Z9E2\SKV0J0Z9E.exe"
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [m3zwzCX&3p.exe] => C:\Users\Geik\AppData\Local\Temp\{b5f-4d-46-ac494-94676-b7f3-d4e09}\m3zwzCX&3p.exe -r1_1 -r2_1 <===== ATTENTION
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [TxIB-nn13+.exe] => C:\Users\Geik\AppData\Local\Temp\{b5f-4d-46-ac494-94676-b7f3-d4e09}\TxIB-nn13+.exe 1 0 <===== ATTENTION
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [YtmhPack] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Geik\AppData\Local\YkrPack\Boostobjdrw.dll
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [Eljltion] => regsvr32.exe C:\Users\Geik\AppData\Local\Eljltion\DiskUserUsb.dll <===== ATTENTION
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-16] (Microsoft Corporation)
ShellExecuteHooks: Pas de nom - {7FBEA058-DE40-11E6-83E9-64006A5CFC23} - C:\Users\Geik\AppData\Roaming\Kowelystzother\Shuquty.dll -> Pas de fichier
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{1BEB4CB9-1C4A-49D7-B0C4-6EF1F03819AB}: [DhcpNameServer] 10.11.255.254
Tcpip\..\Interfaces\{BECCB8C7-0AE3-427E-AF01-E5427B63C903}: [DhcpNameServer] 192.168.0.254
Internet Explorer:
==================
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-12-28] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-12-28] (Microsoft Corporation)
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-31] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-12-28] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-12-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-31] (Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Geik\AppData\Roaming\kompozer.net\KompoZer\Profiles\gwus02rq.default [2016-12-16]
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-12-28] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2014-09-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-31] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-31] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-12-28] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @raidcall.tw/RCplugin -> C:\Users\Geik\AppData\Roaming\RCTW\plugins\nprcplugin.dll [2013-06-25] (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2 [2017-01-28] <==== ATTENTION
CHR Extension: (Google Slides) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Recherche Google) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Sheets) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Google Docs hors connexion) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-14]
CHR Extension: (AdBlock) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-01-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-18]
CHR Extension: (Gmail) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
CHR Profile: C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-01-28]
CHR Extension: (Google Docs) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-28]
CHR Extension: (Google Drive) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-28]
CHR Extension: (YouTube) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-28]
CHR Extension: (Google Docs hors connexion) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-28]
CHR Extension: (Gmail) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-28]
CHR Extension: (Chrome Media Router) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-28]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699904 2016-12-28] (Microsoft Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3460784 2015-01-05] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-25] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-10-25] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1317104 2017-01-04] (Overwolf LTD)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145736 2013-08-15] (Nuance Communications, Inc.)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-07-06] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Cluseywreph; C:\Program Files (x86)\Casution\Nptlog.dll [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2017-01-20] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176584 2017-01-28] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [110536 2017-01-28] (Malwarebytes)
S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-01-28] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251848 2017-01-28] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2017-01-28] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-10-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-10-25] (NVIDIA Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-15] (Apple, Inc.) [Fichier non signé]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-01-28 13:39 - 2017-01-28 13:39 - 00020937 _____ C:\Users\Geik\Downloads\FRST.txt
2017-01-28 13:38 - 2017-01-28 13:39 - 00000000 ____D C:\FRST
2017-01-28 13:38 - 2017-01-28 13:38 - 02420736 _____ (Farbar) C:\Users\Geik\Downloads\FRST64.exe
2017-01-28 13:38 - 2017-01-28 13:38 - 02420736 _____ (Farbar) C:\Users\Geik\Downloads\FRST64 (1).exe
2017-01-28 12:37 - 2017-01-28 13:37 - 00110536 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-28 12:37 - 2017-01-28 13:37 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-28 12:37 - 2017-01-28 12:54 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-28 12:37 - 2017-01-28 12:37 - 06253640 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online.exe
2017-01-28 12:37 - 2017-01-28 12:37 - 06253640 _____ (AVAST Software) C:\Users\Geik\Downloads\avast_free_antivirus_setup_online.exe
2017-01-28 12:37 - 2017-01-28 12:37 - 00176584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-28 12:28 - 2017-01-28 12:28 - 00000000 ____D C:\Users\Geik\AppData\Local\Eljltion
2017-01-28 12:18 - 2017-01-28 12:19 - 00000000 ____D C:\Users\Geik\Desktop\L3
2017-01-28 10:25 - 2017-01-28 13:37 - 00251848 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-28 10:25 - 2017-01-28 10:25 - 00001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-28 10:25 - 2017-01-28 10:25 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-28 10:25 - 2017-01-20 07:47 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-01-28 03:29 - 2017-01-28 03:29 - 00006064 _____ C:\Windows\System32\Tasks\Juqgehuwuk Cache
2017-01-28 03:27 - 2017-01-28 12:39 - 00000000 ____D C:\Users\Geik\AppData\Local\YkrPack
2017-01-27 22:45 - 2017-01-27 22:45 - 00250912 _____ C:\Windows\SysWOW64\kz.exe
2017-01-27 22:24 - 2017-01-28 11:55 - 00664124 _____ C:\Windows\ntbtlog.txt
2017-01-27 22:23 - 2017-01-28 12:52 - 00000454 _____ C:\Windows\Tasks\UCBrowserUpdater.job
2017-01-27 22:23 - 2017-01-27 22:23 - 00003426 _____ C:\Windows\System32\Tasks\UCBrowserUpdater
2017-01-27 22:22 - 2017-01-27 22:22 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Softlink
2017-01-27 22:22 - 2017-01-27 22:22 - 00000000 ____D C:\Users\Geik\AppData\Local\UCBrowser
2017-01-27 22:21 - 2017-01-27 22:21 - 00720033 _____ C:\Windows\unins000.exe
2017-01-27 22:21 - 2017-01-27 22:21 - 00140288 _____ C:\Users\Geik\AppData\Roaming\Installer.dat
2017-01-27 22:20 - 2017-01-28 12:37 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-27 22:20 - 2017-01-27 22:20 - 00000000 ____D C:\ProgramData\Avira
2017-01-27 22:20 - 2017-01-27 22:20 - 00000000 ____D C:\ProgramData\Avg
2017-01-27 22:19 - 2017-01-28 00:17 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Kowelystzother
2017-01-27 22:19 - 2017-01-27 22:21 - 00000000 ____D C:\Users\Geik\AppData\Local\Gofaentdrezient
2017-01-27 22:18 - 2017-01-28 12:05 - 00000000 ____D C:\Program Files (x86)\KMSPico 10.0.6
2017-01-27 21:32 - 2017-01-28 00:16 - 00000919 _____ C:\Users\Geik\Desktop\Acrylic Wi-Fi Home.lnk
2017-01-27 21:32 - 2017-01-27 21:38 - 00000000 ____D C:\Program Files\Acrylic Wi-Fi Home
2017-01-27 21:32 - 2017-01-27 21:32 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acrylic Wi-Fi Home
2017-01-27 21:32 - 2017-01-27 21:32 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Acrylic Wi-Fi Home
2017-01-26 14:51 - 2017-01-26 14:51 - 00285696 _____ C:\Windows\system32\bi3.exe
2017-01-25 10:01 - 2017-01-28 12:19 - 00000000 ____D C:\Users\Geik\Desktop\Dossier Crit
2017-01-19 20:45 - 2017-01-19 20:45 - 00315055 _____ C:\Users\Geik\Desktop\L3 AEI 2016 ok (1).pdf
2017-01-15 12:35 - 2017-01-15 12:35 - 00923029 _____ C:\Users\Geik\Desktop\fact bnp.pdf
2017-01-12 03:18 - 2017-01-12 03:18 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-01-12 03:00 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-12 03:00 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-12 03:00 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-01-12 03:00 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-01-12 03:00 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-12 03:00 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-12 03:00 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-12 03:00 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-12 03:00 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-12 03:00 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-01-12 03:00 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-01-12 00:25 - 2017-01-12 00:25 - 00015736 _____ C:\Users\Geik\Documents\cc_20170112_002525.reg
2017-01-11 00:38 - 2017-01-14 00:16 - 00000367 _____ C:\Users\Geik\Desktop\Nouveau document texte.txt
2017-01-08 12:31 - 2017-01-08 12:31 - 00000000 ____D C:\Users\Geik\AppData\LocalLow\Temp
2017-01-02 23:52 - 2017-01-02 23:52 - 00000000 ____D C:\Users\Geik\AppData\Local\Tempzxpsigne890a0344b3871ce
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-01-28 13:37 - 2016-11-03 11:46 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-28 13:37 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-28 13:36 - 2009-07-14 05:45 - 00009904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-28 13:36 - 2009-07-14 05:45 - 00009904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-28 12:59 - 2009-07-14 16:24 - 00747894 _____ C:\Windows\system32\perfh00C.dat
2017-01-28 12:59 - 2009-07-14 16:24 - 00150386 _____ C:\Windows\system32\perfc00C.dat
2017-01-28 12:59 - 2009-07-14 06:13 - 01669584 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-28 12:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-28 12:26 - 2016-03-09 10:43 - 00000000 ____D C:\Users\Geik\Desktop\mrkong
2017-01-28 12:22 - 2015-10-10 13:14 - 00000000 ____D C:\Users\Geik\Desktop\Games
2017-01-28 12:21 - 2015-01-05 18:08 - 00000000 ____D C:\Program Files (x86)\Steam
2017-01-28 12:16 - 2014-10-03 13:38 - 00000000 ____D C:\Users\Geik\AppData\Roaming\vlc
2017-01-28 12:16 - 2014-09-15 19:23 - 00000000 ____D C:\Users\Geik\AppData\Roaming\TS3Client
2017-01-28 12:08 - 2016-11-03 23:32 - 00000000 ____D C:\Users\Geik\AppData\Local\CrashDumps
2017-01-28 12:07 - 2016-12-02 00:22 - 00029184 ___SH C:\Users\Geik\Thumbs.db
2017-01-28 10:25 - 2015-03-30 11:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-28 00:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2017-01-28 00:16 - 2016-12-04 02:06 - 00001368 _____ C:\Users\Geik\Desktop\Hearthstone Deck Tracker - Raccourci.lnk
2017-01-28 00:16 - 2016-10-20 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016
2017-01-28 00:16 - 2016-08-08 22:21 - 00001866 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk
2017-01-28 00:16 - 2016-06-23 13:02 - 00002154 _____ C:\Users\Geik\Desktop\Discord.lnk
2017-01-28 00:16 - 2016-06-01 19:52 - 00002196 _____ C:\Users\Geik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002380 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002368 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002368 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-01-28 00:16 - 2015-04-22 14:45 - 00001720 _____ C:\Users\Geik\Desktop\lol.launcher - Raccourci.lnk
2017-01-28 00:16 - 2015-01-05 18:08 - 00000963 _____ C:\Users\Geik\Desktop\Steam.lnk
2017-01-28 00:16 - 2014-10-19 23:08 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-28 00:16 - 2014-09-17 19:01 - 00001187 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2017-01-28 00:16 - 2014-09-15 19:52 - 00001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD VDeck.lnk
2017-01-28 00:16 - 2014-09-15 19:22 - 00001011 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2017-01-28 00:16 - 2014-09-14 17:59 - 00002197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-28 00:16 - 2014-09-14 17:59 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-28 00:16 - 2014-09-14 16:21 - 00001429 _____ C:\Users\Geik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-28 00:16 - 2014-09-14 16:18 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-01-28 00:16 - 2014-09-14 16:18 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-01-28 00:16 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2017-01-28 00:16 - 2009-07-14 05:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-01-28 00:16 - 2009-07-14 05:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2017-01-28 00:16 - 2009-07-14 05:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2017-01-28 00:16 - 2009-07-14 05:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2017-01-28 00:16 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2017-01-27 22:25 - 2015-03-11 21:26 - 00000000 ____D C:\Users\Geik\AppData\Local\ElevatedDiagnostics
2017-01-27 22:22 - 2016-06-28 16:39 - 00000002 _____ C:\END
2017-01-27 22:21 - 2016-07-08 15:22 - 00000000 ____D C:\Program Files (x86)\Brother
2017-01-27 22:21 - 2016-03-11 17:05 - 00000000 ____D C:\Données Ciel
2017-01-27 22:21 - 2015-12-30 22:57 - 00000000 ____D C:\Nexon
2017-01-27 22:21 - 2014-09-14 18:32 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-27 22:21 - 2009-07-14 04:20 - 00000000 ____D C:\PerfLogs
2017-01-27 22:20 - 2016-12-20 17:35 - 00000000 ____D C:\Users\Geik\AppData\Roaming\NVIDIA
2017-01-27 22:20 - 2014-10-19 23:08 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-01-27 22:20 - 2014-09-14 18:26 - 00000000 ____D C:\Program Files (x86)\ASUS
2017-01-27 22:07 - 2015-12-04 21:16 - 00000000 ____D C:\Users\Geik\AppData\LocalLow\RCTW
2017-01-27 22:06 - 2014-09-14 20:27 - 00000000 ____D C:\ProgramData\Hi-Rez Studios
2017-01-27 22:06 - 2014-09-14 17:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-01-27 02:18 - 2014-09-17 19:01 - 00000000 ____D C:\Users\Geik\AppData\Local\Battle.net
2017-01-26 23:56 - 2014-09-17 19:01 - 00000000 ____D C:\Program Files (x86)\Battle.net
2017-01-13 11:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-01-12 22:38 - 2016-03-13 22:38 - 00000000 ____D C:\Program Files (x86)\Overwolf
2017-01-12 06:39 - 2014-12-24 13:05 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-12 03:19 - 2016-06-01 19:39 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-01-12 03:18 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-01-12 03:17 - 2016-06-01 19:36 - 00000000 ____D C:\Program Files\Microsoft Office
2017-01-12 03:03 - 2014-09-16 18:41 - 00000000 ____D C:\Windows\system32\MRT
2017-01-12 03:00 - 2014-09-16 18:41 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-12 00:24 - 2016-06-23 13:02 - 00000000 ____D C:\Users\Geik\AppData\Roaming\discord
2017-01-11 21:57 - 2016-06-23 13:02 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-01-11 21:57 - 2016-06-23 13:02 - 00000000 ____D C:\Users\Geik\AppData\Local\Discord
2017-01-11 01:16 - 2014-09-14 18:38 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Skype
2017-01-03 17:24 - 2014-09-14 18:38 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-01-03 17:24 - 2014-09-14 18:38 - 00000000 ____D C:\ProgramData\Skype
2017-01-02 23:52 - 2016-12-20 17:30 - 00000033 _____ C:\Users\Geik\AppData\Roaming\AdobeWLCMCache.dat
2016-12-29 17:17 - 2014-09-14 16:31 - 00000000 ____D C:\Users\Geik\AppData\Local\Diagnostics
==================== Fichiers à la racine de certains dossiers =======
2016-12-20 17:30 - 2017-01-02 23:52 - 0000033 _____ () C:\Users\Geik\AppData\Roaming\AdobeWLCMCache.dat
2017-01-27 22:21 - 2017-01-27 22:21 - 0140288 _____ () C:\Users\Geik\AppData\Roaming\Installer.dat
2015-04-02 20:01 - 2016-09-09 12:30 - 0002522 _____ () C:\Users\Geik\AppData\Roaming\SpeedRunnersLog.txt
2015-04-30 00:11 - 2015-04-30 00:12 - 0003219 _____ () C:\Users\Geik\AppData\Roaming\TargetInvocationLog.txt
2014-09-14 17:06 - 2016-03-17 22:43 - 0007604 _____ () C:\Users\Geik\AppData\Local\resmon.resmoncfg
2016-06-12 09:05 - 2016-06-12 09:05 - 0000016 _____ () C:\ProgramData\mntemp
Certains fichiers dans TEMP:
====================
2017-01-27 22:18 - 2017-01-27 22:18 - 0061440 _____ (The Gentee Group) C:\Users\Geik\AppData\Local\Temp\genteert.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-01-23 15:57
==================== Fin de FRST.txt ============================
Exécuté par Geik (administrateur) sur GEIK-PC (28-01-2017 13:39:11)
Exécuté depuis C:\Users\Geik\Downloads
Profils chargés: Geik (Profils disponibles: Geik)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Microsoft Corporation) C:\Windows\System32\regsvr32.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfPro5Hook.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Browny02\BrYNSvc.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [322176 2012-04-06] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-24] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5256336 2012-07-11] (VIA)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-02-07] (Intel Corporation)
HKLM-x32\...\Run: [ROCCAT Savu Gaming Mouse] => C:\Program Files (x86)\ROCCAT\Savu Mouse\Savu Monitor.exe [872048 2012-09-10] (ROCCAT GmbH)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [139776 2016-02-03] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4513792 2014-05-22] (Brother Industries, Ltd.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [47432 2013-08-15] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [31048 2013-08-15] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFHook] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\pdfpro5hook.exe [636192 2010-03-05] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDF5 Registry Controller] => C:\Program Files (x86)\Nuance\PDF Viewer Plus\RegistryController.exe [62752 2010-03-05] (Nuance Communications, Inc.)
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [f.lux] => C:\Users\Geik\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [Discord] => C:\Users\Geik\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [IP0JT35QB1] => "C:\Program Files\HWMVKZVEWF\BB32C3LXR.exe"
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [46TRJWA0RF] => "C:\Program Files\SKV0J0Z9E2\SKV0J0Z9E.exe"
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [m3zwzCX&3p.exe] => C:\Users\Geik\AppData\Local\Temp\{b5f-4d-46-ac494-94676-b7f3-d4e09}\m3zwzCX&3p.exe -r1_1 -r2_1 <===== ATTENTION
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [TxIB-nn13+.exe] => C:\Users\Geik\AppData\Local\Temp\{b5f-4d-46-ac494-94676-b7f3-d4e09}\TxIB-nn13+.exe 1 0 <===== ATTENTION
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [YtmhPack] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Geik\AppData\Local\YkrPack\Boostobjdrw.dll
HKU\S-1-5-21-697963783-1484184641-981785778-1000\...\Run: [Eljltion] => regsvr32.exe C:\Users\Geik\AppData\Local\Eljltion\DiskUserUsb.dll <===== ATTENTION
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-09-16] (Microsoft Corporation)
ShellExecuteHooks: Pas de nom - {7FBEA058-DE40-11E6-83E9-64006A5CFC23} - C:\Users\Geik\AppData\Roaming\Kowelystzother\Shuquty.dll -> Pas de fichier
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{1BEB4CB9-1C4A-49D7-B0C4-6EF1F03819AB}: [DhcpNameServer] 10.11.255.254
Tcpip\..\Interfaces\{BECCB8C7-0AE3-427E-AF01-E5427B63C903}: [DhcpNameServer] 192.168.0.254
Internet Explorer:
==================
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2016-12-28] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-12-28] (Microsoft Corporation)
BHO-x32: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll [2009-02-06] (Zeon Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-31] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2016-12-28] (Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-12-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-31] (Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Geik\AppData\Roaming\kompozer.net\KompoZer\Profiles\gwus02rq.default [2016-12-16]
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-12-28] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll [2014-09-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-31] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-31] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-12-28] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-25] (NVIDIA Corporation)
FF Plugin-x32: @raidcall.tw/RCplugin -> C:\Users\Geik\AppData\Roaming\RCTW\plugins\nprcplugin.dll [2013-06-25] (Raidcall)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2 [2017-01-28] <==== ATTENTION
CHR Extension: (Google Slides) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Recherche Google) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Sheets) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Google Docs hors connexion) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-14]
CHR Extension: (AdBlock) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-01-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-18]
CHR Extension: (Gmail) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\ChromeDefaultData2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
CHR Profile: C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-01-28]
CHR Extension: (Google Docs) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-28]
CHR Extension: (Google Drive) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-28]
CHR Extension: (YouTube) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-28]
CHR Extension: (Google Docs hors connexion) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-28]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-28]
CHR Extension: (Gmail) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-28]
CHR Extension: (Chrome Media Router) - C:\Users\Geik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-28]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [282112 2013-09-25] (Brother Industries, Ltd.) [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699904 2016-12-28] (Microsoft Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3460784 2015-01-05] (INCA Internet Co., Ltd.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [456640 2016-10-25] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-10-25] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-10-25] (NVIDIA Corporation)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1317104 2017-01-04] (Overwolf LTD)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [145736 2013-08-15] (Nuance Communications, Inc.)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-07-06] (VIA Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Cluseywreph; C:\Program Files (x86)\Casution\Nptlog.dll [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77416 2017-01-20] ()
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [176584 2017-01-28] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [110536 2017-01-28] (Malwarebytes)
S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [43968 2017-01-28] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251848 2017-01-28] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [81696 2017-01-28] (Malwarebytes)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-10-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-10-25] (NVIDIA Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-08-15] (Apple, Inc.) [Fichier non signé]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-01-28 13:39 - 2017-01-28 13:39 - 00020937 _____ C:\Users\Geik\Downloads\FRST.txt
2017-01-28 13:38 - 2017-01-28 13:39 - 00000000 ____D C:\FRST
2017-01-28 13:38 - 2017-01-28 13:38 - 02420736 _____ (Farbar) C:\Users\Geik\Downloads\FRST64.exe
2017-01-28 13:38 - 2017-01-28 13:38 - 02420736 _____ (Farbar) C:\Users\Geik\Downloads\FRST64 (1).exe
2017-01-28 12:37 - 2017-01-28 13:37 - 00110536 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-01-28 12:37 - 2017-01-28 13:37 - 00081696 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-01-28 12:37 - 2017-01-28 12:54 - 00043968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-01-28 12:37 - 2017-01-28 12:37 - 06253640 _____ (AVAST Software) C:\Users\Public\Desktop\avast_free_antivirus_setup_online.exe
2017-01-28 12:37 - 2017-01-28 12:37 - 06253640 _____ (AVAST Software) C:\Users\Geik\Downloads\avast_free_antivirus_setup_online.exe
2017-01-28 12:37 - 2017-01-28 12:37 - 00176584 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-01-28 12:28 - 2017-01-28 12:28 - 00000000 ____D C:\Users\Geik\AppData\Local\Eljltion
2017-01-28 12:18 - 2017-01-28 12:19 - 00000000 ____D C:\Users\Geik\Desktop\L3
2017-01-28 10:25 - 2017-01-28 13:37 - 00251848 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-01-28 10:25 - 2017-01-28 10:25 - 00001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-28 10:25 - 2017-01-28 10:25 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-28 10:25 - 2017-01-20 07:47 - 00077416 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-01-28 03:29 - 2017-01-28 03:29 - 00006064 _____ C:\Windows\System32\Tasks\Juqgehuwuk Cache
2017-01-28 03:27 - 2017-01-28 12:39 - 00000000 ____D C:\Users\Geik\AppData\Local\YkrPack
2017-01-27 22:45 - 2017-01-27 22:45 - 00250912 _____ C:\Windows\SysWOW64\kz.exe
2017-01-27 22:24 - 2017-01-28 11:55 - 00664124 _____ C:\Windows\ntbtlog.txt
2017-01-27 22:23 - 2017-01-28 12:52 - 00000454 _____ C:\Windows\Tasks\UCBrowserUpdater.job
2017-01-27 22:23 - 2017-01-27 22:23 - 00003426 _____ C:\Windows\System32\Tasks\UCBrowserUpdater
2017-01-27 22:22 - 2017-01-27 22:22 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Softlink
2017-01-27 22:22 - 2017-01-27 22:22 - 00000000 ____D C:\Users\Geik\AppData\Local\UCBrowser
2017-01-27 22:21 - 2017-01-27 22:21 - 00720033 _____ C:\Windows\unins000.exe
2017-01-27 22:21 - 2017-01-27 22:21 - 00140288 _____ C:\Users\Geik\AppData\Roaming\Installer.dat
2017-01-27 22:20 - 2017-01-28 12:37 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-27 22:20 - 2017-01-27 22:20 - 00000000 ____D C:\ProgramData\Avira
2017-01-27 22:20 - 2017-01-27 22:20 - 00000000 ____D C:\ProgramData\Avg
2017-01-27 22:19 - 2017-01-28 00:17 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Kowelystzother
2017-01-27 22:19 - 2017-01-27 22:21 - 00000000 ____D C:\Users\Geik\AppData\Local\Gofaentdrezient
2017-01-27 22:18 - 2017-01-28 12:05 - 00000000 ____D C:\Program Files (x86)\KMSPico 10.0.6
2017-01-27 21:32 - 2017-01-28 00:16 - 00000919 _____ C:\Users\Geik\Desktop\Acrylic Wi-Fi Home.lnk
2017-01-27 21:32 - 2017-01-27 21:38 - 00000000 ____D C:\Program Files\Acrylic Wi-Fi Home
2017-01-27 21:32 - 2017-01-27 21:32 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acrylic Wi-Fi Home
2017-01-27 21:32 - 2017-01-27 21:32 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Acrylic Wi-Fi Home
2017-01-26 14:51 - 2017-01-26 14:51 - 00285696 _____ C:\Windows\system32\bi3.exe
2017-01-25 10:01 - 2017-01-28 12:19 - 00000000 ____D C:\Users\Geik\Desktop\Dossier Crit
2017-01-19 20:45 - 2017-01-19 20:45 - 00315055 _____ C:\Users\Geik\Desktop\L3 AEI 2016 ok (1).pdf
2017-01-15 12:35 - 2017-01-15 12:35 - 00923029 _____ C:\Users\Geik\Desktop\fact bnp.pdf
2017-01-12 03:18 - 2017-01-12 03:18 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
2017-01-12 03:00 - 2017-01-05 19:55 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-01-12 03:00 - 2017-01-05 19:55 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-01-12 03:00 - 2017-01-05 19:52 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-01-12 03:00 - 2017-01-05 19:52 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-01-12 03:00 - 2017-01-05 18:43 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-01-12 03:00 - 2017-01-05 18:42 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-01-12 03:00 - 2017-01-05 18:32 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-01-12 03:00 - 2017-01-05 18:25 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-01-12 03:00 - 2017-01-05 18:24 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-01-12 03:00 - 2017-01-05 18:24 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-01-12 03:00 - 2017-01-05 18:24 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-01-12 03:00 - 2017-01-05 18:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-01-12 03:00 - 2017-01-05 18:19 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-01-12 00:25 - 2017-01-12 00:25 - 00015736 _____ C:\Users\Geik\Documents\cc_20170112_002525.reg
2017-01-11 00:38 - 2017-01-14 00:16 - 00000367 _____ C:\Users\Geik\Desktop\Nouveau document texte.txt
2017-01-08 12:31 - 2017-01-08 12:31 - 00000000 ____D C:\Users\Geik\AppData\LocalLow\Temp
2017-01-02 23:52 - 2017-01-02 23:52 - 00000000 ____D C:\Users\Geik\AppData\Local\Tempzxpsigne890a0344b3871ce
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-01-28 13:37 - 2016-11-03 11:46 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-28 13:37 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-28 13:36 - 2009-07-14 05:45 - 00009904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-28 13:36 - 2009-07-14 05:45 - 00009904 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-28 12:59 - 2009-07-14 16:24 - 00747894 _____ C:\Windows\system32\perfh00C.dat
2017-01-28 12:59 - 2009-07-14 16:24 - 00150386 _____ C:\Windows\system32\perfc00C.dat
2017-01-28 12:59 - 2009-07-14 06:13 - 01669584 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-28 12:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-28 12:26 - 2016-03-09 10:43 - 00000000 ____D C:\Users\Geik\Desktop\mrkong
2017-01-28 12:22 - 2015-10-10 13:14 - 00000000 ____D C:\Users\Geik\Desktop\Games
2017-01-28 12:21 - 2015-01-05 18:08 - 00000000 ____D C:\Program Files (x86)\Steam
2017-01-28 12:16 - 2014-10-03 13:38 - 00000000 ____D C:\Users\Geik\AppData\Roaming\vlc
2017-01-28 12:16 - 2014-09-15 19:23 - 00000000 ____D C:\Users\Geik\AppData\Roaming\TS3Client
2017-01-28 12:08 - 2016-11-03 23:32 - 00000000 ____D C:\Users\Geik\AppData\Local\CrashDumps
2017-01-28 12:07 - 2016-12-02 00:22 - 00029184 ___SH C:\Users\Geik\Thumbs.db
2017-01-28 10:25 - 2015-03-30 11:58 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-28 00:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2017-01-28 00:16 - 2016-12-04 02:06 - 00001368 _____ C:\Users\Geik\Desktop\Hearthstone Deck Tracker - Raccourci.lnk
2017-01-28 00:16 - 2016-10-20 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016
2017-01-28 00:16 - 2016-08-08 22:21 - 00001866 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Software Updates.lnk
2017-01-28 00:16 - 2016-06-23 13:02 - 00002154 _____ C:\Users\Geik\Desktop\Discord.lnk
2017-01-28 00:16 - 2016-06-01 19:52 - 00002196 _____ C:\Users\Geik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002380 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002368 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002368 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-01-28 00:16 - 2016-06-01 19:41 - 00002318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-01-28 00:16 - 2015-04-22 14:45 - 00001720 _____ C:\Users\Geik\Desktop\lol.launcher - Raccourci.lnk
2017-01-28 00:16 - 2015-01-05 18:08 - 00000963 _____ C:\Users\Geik\Desktop\Steam.lnk
2017-01-28 00:16 - 2014-10-19 23:08 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-28 00:16 - 2014-09-17 19:01 - 00001187 _____ C:\Users\Public\Desktop\Hearthstone.lnk
2017-01-28 00:16 - 2014-09-15 19:52 - 00001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD VDeck.lnk
2017-01-28 00:16 - 2014-09-15 19:22 - 00001011 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2017-01-28 00:16 - 2014-09-14 17:59 - 00002197 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-28 00:16 - 2014-09-14 17:59 - 00002179 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-28 00:16 - 2014-09-14 16:21 - 00001429 _____ C:\Users\Geik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-28 00:16 - 2014-09-14 16:18 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-01-28 00:16 - 2014-09-14 16:18 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-01-28 00:16 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2017-01-28 00:16 - 2009-07-14 05:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-01-28 00:16 - 2009-07-14 05:57 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2017-01-28 00:16 - 2009-07-14 05:57 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2017-01-28 00:16 - 2009-07-14 05:54 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2017-01-28 00:16 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2017-01-27 22:25 - 2015-03-11 21:26 - 00000000 ____D C:\Users\Geik\AppData\Local\ElevatedDiagnostics
2017-01-27 22:22 - 2016-06-28 16:39 - 00000002 _____ C:\END
2017-01-27 22:21 - 2016-07-08 15:22 - 00000000 ____D C:\Program Files (x86)\Brother
2017-01-27 22:21 - 2016-03-11 17:05 - 00000000 ____D C:\Données Ciel
2017-01-27 22:21 - 2015-12-30 22:57 - 00000000 ____D C:\Nexon
2017-01-27 22:21 - 2014-09-14 18:32 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-01-27 22:21 - 2009-07-14 04:20 - 00000000 ____D C:\PerfLogs
2017-01-27 22:20 - 2016-12-20 17:35 - 00000000 ____D C:\Users\Geik\AppData\Roaming\NVIDIA
2017-01-27 22:20 - 2014-10-19 23:08 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-01-27 22:20 - 2014-09-14 18:26 - 00000000 ____D C:\Program Files (x86)\ASUS
2017-01-27 22:07 - 2015-12-04 21:16 - 00000000 ____D C:\Users\Geik\AppData\LocalLow\RCTW
2017-01-27 22:06 - 2014-09-14 20:27 - 00000000 ____D C:\ProgramData\Hi-Rez Studios
2017-01-27 22:06 - 2014-09-14 17:51 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-01-27 02:18 - 2014-09-17 19:01 - 00000000 ____D C:\Users\Geik\AppData\Local\Battle.net
2017-01-26 23:56 - 2014-09-17 19:01 - 00000000 ____D C:\Program Files (x86)\Battle.net
2017-01-13 11:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-01-12 22:38 - 2016-03-13 22:38 - 00000000 ____D C:\Program Files (x86)\Overwolf
2017-01-12 06:39 - 2014-12-24 13:05 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-12 03:19 - 2016-06-01 19:39 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-01-12 03:18 - 2009-07-14 04:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-01-12 03:17 - 2016-06-01 19:36 - 00000000 ____D C:\Program Files\Microsoft Office
2017-01-12 03:03 - 2014-09-16 18:41 - 00000000 ____D C:\Windows\system32\MRT
2017-01-12 03:00 - 2014-09-16 18:41 - 135657872 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-01-12 00:24 - 2016-06-23 13:02 - 00000000 ____D C:\Users\Geik\AppData\Roaming\discord
2017-01-11 21:57 - 2016-06-23 13:02 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc
2017-01-11 21:57 - 2016-06-23 13:02 - 00000000 ____D C:\Users\Geik\AppData\Local\Discord
2017-01-11 01:16 - 2014-09-14 18:38 - 00000000 ____D C:\Users\Geik\AppData\Roaming\Skype
2017-01-03 17:24 - 2014-09-14 18:38 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-01-03 17:24 - 2014-09-14 18:38 - 00000000 ____D C:\ProgramData\Skype
2017-01-02 23:52 - 2016-12-20 17:30 - 00000033 _____ C:\Users\Geik\AppData\Roaming\AdobeWLCMCache.dat
2016-12-29 17:17 - 2014-09-14 16:31 - 00000000 ____D C:\Users\Geik\AppData\Local\Diagnostics
==================== Fichiers à la racine de certains dossiers =======
2016-12-20 17:30 - 2017-01-02 23:52 - 0000033 _____ () C:\Users\Geik\AppData\Roaming\AdobeWLCMCache.dat
2017-01-27 22:21 - 2017-01-27 22:21 - 0140288 _____ () C:\Users\Geik\AppData\Roaming\Installer.dat
2015-04-02 20:01 - 2016-09-09 12:30 - 0002522 _____ () C:\Users\Geik\AppData\Roaming\SpeedRunnersLog.txt
2015-04-30 00:11 - 2015-04-30 00:12 - 0003219 _____ () C:\Users\Geik\AppData\Roaming\TargetInvocationLog.txt
2014-09-14 17:06 - 2016-03-17 22:43 - 0007604 _____ () C:\Users\Geik\AppData\Local\resmon.resmoncfg
2016-06-12 09:05 - 2016-06-12 09:05 - 0000016 _____ () C:\ProgramData\mntemp
Certains fichiers dans TEMP:
====================
2017-01-27 22:18 - 2017-01-27 22:18 - 0061440 _____ (The Gentee Group) C:\Users\Geik\AppData\Local\Temp\genteert.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-01-23 15:57
==================== Fin de FRST.txt ============================