Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 14-01-2017
Exécuté par Michel (administrateur) sur MICHEL-PC (14-01-2017 22:44:04)
Exécuté depuis C:\Users\Michel\Downloads
Profils chargés: Michel (Profils disponibles: Michel & DefaultAppPool)
Platform: Microsoft Windows 10 Professionnel Version 1607 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(HP Inc.) C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.10221.0_x86__8wekyb3d8bbwe\Video.UI.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [483840 2016-07-16] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKU\S-1-5-21-2419216286-400175742-168657417-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [30208 2016-07-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{99126843-e61f-4bca-864f-241dbade4b81}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2419216286-400175742-168657417-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {31256715-1880-4E34-9380-9DC9DF0C30C5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2419216286-400175742-168657417-1000 -> {31256715-1880-4E34-9380-9DC9DF0C30C5} URL =
SearchScopes: HKU\S-1-5-21-2419216286-400175742-168657417-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKU\S-1-5-21-2419216286-400175742-168657417-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-2419216286-400175742-168657417-1000 -> Pas de nom - {D3028143-6145-4318-99D3-3EDCE54A95A9} - Pas de fichier
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3293887&SearchSource=48&CUI=UN24125317842667769&UM=2","about:newtab?source=home","hxxp://www.amazon.fr/gp/bit/amazonserp/ref=bit_bds-p07_serp_cr_fr_display?ie=UTF8&tagbase=bds-p07&tbrId=v1_abb-channel-7_bbc90b11a218483b801674dc4f04a499_30_46_20131109_FR_cr_sp_IS0"
CHR Profile: C:\Users\Michel\AppData\Local\Google\Chrome\User Data\Default [2017-01-14]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Michel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-11]
CHR Extension: (Chrome Media Router) - C:\Users\Michel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-11]
CHR Profile: C:\Users\Michel\AppData\Local\Google\Chrome\User Data\System Profile [2016-07-12]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [696320 2011-08-18] (Hewlett-Packard Co.) [Fichier non signé]
R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3381200 2016-12-14] (Malwarebytes)
S2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S4 Orange update Core Service; C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe [1055872 2011-05-20] (France Telecom SA)
S2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2016-07-16] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109184 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [137632 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [22432 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [59968 2016-12-14] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [153024 2017-01-09] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [87496 2017-01-10] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [39360 2017-01-10] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [219072 2017-01-10] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [73152 2017-01-14] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [494080 2016-07-16] (Realtek )
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [31848 2015-05-28] (Avira Operations GmbH & Co. KG)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147072 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [Fichier non signé]
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
S3 xusb22; C:\WINDOWS\System32\drivers\xusb22.sys [72704 2016-07-16] (Microsoft Corporation)
U0 aswVmm; pas de ImagePath
U3 idsvc; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-01-14 22:44 - 2017-01-14 22:44 - 00010045 _____ C:\Users\Michel\Downloads\FRST.txt
2017-01-14 22:43 - 2017-01-14 22:44 - 00000000 ____D C:\FRST
2017-01-14 22:38 - 2017-01-14 22:42 - 01761280 _____ (Farbar) C:\Users\Michel\Downloads\FRST.exe
2017-01-14 13:42 - 2017-01-14 13:42 - 00020195 _____ C:\Users\Michel\Downloads\order-slip-001004.pdf
2017-01-14 10:34 - 2017-01-14 10:38 - 572090601 _____ C:\Users\Michel\Downloads\1200---gameofthrone1----5----libertyland.tv.rar
2017-01-14 10:29 - 2017-01-14 10:34 - 572581836 _____ C:\Users\Michel\Downloads\zzz----gameofthrone1----4----libertyland.tv.rar
2017-01-14 10:14 - 2017-01-14 10:28 - 571993046 _____ C:\Users\Michel\Downloads\zzz----game of throne 1 ---- 3 ----libertyland.tv.rar
2017-01-13 22:06 - 2017-01-13 22:06 - 00095832 _____ C:\Users\Michel\Downloads\ZHPDiag.txt
2017-01-13 22:05 - 2017-01-13 22:05 - 00095829 _____ C:\Users\Michel\Desktop\ZHPDiag.txt
2017-01-13 21:58 - 2017-01-13 21:59 - 02642944 _____ C:\Users\Michel\Downloads\ZHPDiag3 (1).exe
2017-01-13 21:39 - 2017-01-13 21:33 - 00004334 _____ C:\Users\Michel\Documents\ZHPFixReport.txt
2017-01-13 21:27 - 2017-01-13 21:27 - 00001872 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-01-13 21:25 - 2017-01-13 21:26 - 03521617 _____ (Nicolas Coolman ) C:\Users\Michel\Downloads\ZHPFix.exe
2017-01-12 17:34 - 2017-01-12 17:34 - 00193592 _____ C:\Users\Michel\Downloads\2017 01 11 -CR du Comité des fêtes de MOYENNEVILLE.pdf
2017-01-11 17:06 - 2017-01-11 17:06 - 02678784 _____ C:\Users\Michel\Downloads\ZHPCleaner.exe
2017-01-11 17:06 - 2017-01-11 17:06 - 00000923 _____ C:\Users\Michel\Desktop\ZHPCleaner.lnk
2017-01-11 16:52 - 2017-01-13 22:01 - 00000913 _____ C:\Users\Michel\Desktop\ZHPDiag.lnk
2017-01-11 16:51 - 2017-01-11 16:52 - 02639872 _____ C:\Users\Michel\Downloads\ZHPDiag3.exe
2017-01-10 21:02 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-10 21:02 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-10 21:02 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-10 21:02 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-10 21:02 - 2016-12-14 06:04 - 00261984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-10 21:02 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-10 21:02 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-10 21:01 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-10 21:01 - 2016-12-21 06:59 - 00101728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-10 21:01 - 2016-12-21 06:20 - 06020448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-10 21:01 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-10 21:01 - 2016-12-21 06:05 - 00523784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-10 21:01 - 2016-12-21 06:03 - 00136544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqmigplugin.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 00080224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-10 21:01 - 2016-12-21 06:01 - 00198496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-10 21:01 - 2016-12-21 06:00 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-10 21:01 - 2016-12-21 05:47 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-10 21:01 - 2016-12-21 05:45 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-10 21:01 - 2016-12-21 05:44 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-10 21:01 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-10 21:01 - 2016-12-21 05:42 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-10 21:01 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-10 21:01 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-10 21:01 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-10 21:01 - 2016-12-21 05:40 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-10 21:01 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-01-10 21:01 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-10 21:01 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-10 21:01 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-10 21:01 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-10 21:01 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-10 21:01 - 2016-12-21 05:30 - 01406976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-01-10 21:01 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-10 21:01 - 2016-12-21 05:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-10 21:01 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-10 21:01 - 2016-12-21 05:26 - 03776000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-10 21:01 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-10 21:01 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-10 21:01 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-10 21:01 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-10 21:01 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-10 21:01 - 2016-12-21 05:23 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-10 21:01 - 2016-12-21 05:22 - 03596800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-10 21:01 - 2016-12-14 06:58 - 01026912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems32.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 01136992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 01127040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-10 21:01 - 2016-12-14 06:26 - 00911712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00812896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00615264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-01-10 21:01 - 2016-12-14 06:26 - 00558432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00550240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00492384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00401248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00372576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2017-01-10 21:01 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-10 21:01 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-10 21:01 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-10 21:01 - 2016-12-14 06:05 - 00544608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-10 21:01 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-10 21:01 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-10 21:01 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-10 21:01 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-10 21:01 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-10 21:01 - 2016-12-14 05:41 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-10 21:01 - 2016-12-14 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-10 21:01 - 2016-12-14 05:40 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-10 21:01 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-10 21:01 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-10 21:01 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-10 21:01 - 2016-12-14 05:38 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-10 21:01 - 2016-12-14 05:37 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-10 21:01 - 2016-12-14 05:37 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-10 21:01 - 2016-12-14 05:37 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-10 21:01 - 2016-12-14 05:36 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-10 21:01 - 2016-12-14 05:36 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-10 21:01 - 2016-12-14 05:36 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-10 21:01 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 01722368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-10 21:01 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-10 21:01 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-10 21:01 - 2016-12-14 05:24 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-10 21:01 - 2016-12-14 05:23 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-10 21:01 - 2016-12-14 05:23 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-10 21:01 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-10 21:01 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-10 21:01 - 2016-12-14 05:22 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-10 21:01 - 2016-12-14 05:22 - 01235456 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-10 21:01 - 2016-12-14 05:22 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-10 21:01 - 2016-12-14 05:21 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-10 21:01 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-10 21:01 - 2016-11-02 12:05 - 00313088 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-01-10 21:01 - 2016-11-02 11:32 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-10 21:01 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-01-10 17:52 - 2017-01-10 17:52 - 00002014 _____ C:\Users\Michel\Downloads\Feuille Quadrillee.pdf
2017-01-09 18:59 - 2017-01-09 18:59 - 00193631 _____ C:\Users\Michel\Downloads\Notice Mhouse TX3 - TX4 - GTX4 - MT4.pdf
2017-01-09 18:30 - 2017-01-10 22:13 - 00087496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-01-09 18:13 - 2017-01-14 22:31 - 00073152 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-01-09 18:13 - 2017-01-10 22:13 - 00219072 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-01-09 18:13 - 2017-01-10 22:13 - 00039360 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-01-09 18:13 - 2017-01-09 18:13 - 00153024 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-01-09 18:13 - 2017-01-09 18:13 - 00002101 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-09 18:13 - 2017-01-09 18:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-09 18:13 - 2017-01-09 18:13 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-09 18:13 - 2016-12-14 12:55 - 00059968 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-01-09 17:27 - 2017-01-09 17:27 - 00000816 _____ C:\Users\Michel\AppData\Local\ZHPFixReport.txt
2017-01-09 17:19 - 2017-01-13 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-01-07 21:33 - 2017-01-07 21:33 - 00000000 ____D C:\Users\Michel\AppData\Roaming\Malwarebytes
2017-01-07 21:32 - 2017-01-07 22:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2017-01-07 21:32 - 2017-01-07 21:32 - 00921280 _____ (Microsoft Corporation) C:\WINDOWS\ucrtbase.dll
2017-01-07 21:31 - 2017-01-07 21:31 - 00000000 ____D C:\Users\Michel\AppData\Local\Dropbox
2017-01-07 21:30 - 2017-01-07 21:30 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-07 21:30 - 2017-01-07 21:30 - 00000000 ____D C:\Program Files\AVAST Software
2016-12-26 19:11 - 2016-12-26 19:15 - 00097792 _____ C:\Users\Michel\Downloads\planning DOULLENS.xls
2016-12-26 15:20 - 2016-12-26 15:20 - 00135382 _____ C:\Users\Michel\Downloads\15672888_1715757962073311_6927117198370213889_n.jpg
2016-12-26 15:19 - 2016-12-26 15:19 - 00134137 _____ C:\Users\Michel\Downloads\15726791_1715758038739970_3809300812004717203_n.jpg
2016-12-18 13:26 - 2016-12-18 13:27 - 00000000 ____D C:\Users\Michel\Downloads\PHOTOS ENFANTS
2016-12-17 11:25 - 2016-12-17 11:25 - 00042841 _____ C:\Users\Michel\Downloads\629196678.pdf
2016-12-16 20:02 - 2016-12-16 20:04 - 00000000 ____D C:\Users\Michel\Downloads\Captain.America.Civil.War.2016.FRENCH.BDRip.XviD-wWw.LibertylanD.co
2016-12-16 17:08 - 2016-12-16 17:08 - 00655570 _____ C:\Users\Michel\Downloads\CGV_271016.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-01-14 22:32 - 2016-09-14 21:00 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-14 09:37 - 2016-07-16 09:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-14 09:37 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-13 22:03 - 2015-06-30 09:32 - 00000000 ____D C:\Users\Michel\AppData\Roaming\ZHP
2017-01-13 21:27 - 2015-07-01 07:51 - 00000000 ____D C:\Program Files\ZHPFix
2017-01-12 21:51 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\rescache
2017-01-12 17:47 - 2012-12-06 22:53 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-11 21:07 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-11 14:01 - 2016-07-16 09:28 - 00000000 ____D C:\WINDOWS\INF
2017-01-10 22:12 - 2016-09-14 21:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-10 22:12 - 2016-09-14 21:00 - 03785520 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-10 22:11 - 2016-07-16 03:22 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-01-10 21:17 - 2013-08-14 13:32 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-10 21:15 - 2016-07-16 09:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-10 21:15 - 2011-02-20 10:35 - 133456224 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-09 18:13 - 2015-06-30 22:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-08 10:40 - 2016-04-29 20:24 - 00000000 ____D C:\AdwCleaner
2017-01-07 21:50 - 2016-09-14 21:05 - 00000000 ____D C:\Users\Michel
2017-01-07 19:57 - 2016-07-26 16:10 - 00000000 ____D C:\Program Files\TeamViewer
2017-01-07 19:56 - 2011-04-09 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-01-07 19:54 - 2015-07-06 09:40 - 00000000 ____D C:\Program Files\Common Files\DivX Shared
2017-01-07 19:54 - 2011-02-04 14:54 - 00000000 ____D C:\Program Files\DivX
2017-01-07 19:54 - 2011-02-04 14:48 - 00000000 ____D C:\ProgramData\DivX
2016-12-28 17:49 - 2016-09-14 21:04 - 01934152 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-28 17:49 - 2016-07-16 18:15 - 00700066 _____ C:\WINDOWS\system32\perfh00C.dat
2016-12-28 17:49 - 2016-07-16 18:15 - 00151842 _____ C:\WINDOWS\system32\perfc00C.dat
2016-12-28 17:49 - 2016-07-16 09:31 - 00864358 _____ C:\WINDOWS\system32\perfh009.dat
2016-12-28 17:49 - 2016-07-16 09:31 - 00215154 _____ C:\WINDOWS\system32\perfc009.dat
2016-12-28 17:36 - 2016-06-01 20:18 - 00000000 ____D C:\Users\Michel\AppData\Local\Comms
2016-12-23 00:13 - 2016-07-16 09:31 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-12-23 00:13 - 2016-07-16 09:31 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-12-20 11:11 - 2011-01-18 14:51 - 00000000 ___RD C:\Users\Michel\Music
2016-12-16 11:00 - 2015-08-04 17:19 - 00002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-16 11:00 - 2015-08-04 17:19 - 00002212 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-15 14:26 - 2016-07-16 09:29 - 00000000 __RSD C:\WINDOWS\assembly
==================== Fichiers à la racine de certains dossiers =======
2015-02-25 14:13 - 2012-11-15 18:15 - 6527128 _____ (AVAST Software) C:\Program Files\Alw
2012-03-02 22:29 - 2012-03-02 22:29 - 0000006 _____ () C:\Program Files\Common Files\WPVersion.txt
2016-08-05 21:46 - 2016-08-05 21:46 - 0000288 _____ () C:\Users\Michel\AppData\Roaming\.backup.dm
2012-03-20 18:38 - 2012-03-21 20:04 - 0000041 _____ () C:\Users\Michel\AppData\Roaming\Offre.ini
2016-06-07 22:52 - 2016-06-07 22:52 - 0000036 _____ () C:\Users\Michel\AppData\Local\housecall.guid.cache
2016-07-26 20:17 - 2016-07-26 20:17 - 0007605 _____ () C:\Users\Michel\AppData\Local\Resmon.ResmonCfg
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivx0b3b
2016-08-26 12:22 - 2016-08-26 12:22 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivx1ff5
2016-04-16 22:01 - 2016-04-16 22:01 - 0041094 _____ () C:\Users\Michel\AppData\Local\Tempdivx2177
2015-07-08 01:08 - 2015-07-08 01:08 - 0253196 _____ () C:\Users\Michel\AppData\Local\Tempdivx32e8
2016-08-26 12:20 - 2016-08-26 12:20 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivx3344
2016-08-26 12:23 - 2016-08-26 12:23 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivx6402
2016-08-26 12:23 - 2016-08-26 12:23 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivx73f8
2016-10-14 19:49 - 2016-10-14 19:49 - 0037497 _____ () C:\Users\Michel\AppData\Local\Tempdivx8c2b
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivx8ced
2015-08-02 13:37 - 2015-08-02 13:37 - 0043494 _____ () C:\Users\Michel\AppData\Local\Tempdivxada0
2015-07-08 01:08 - 2015-07-08 01:08 - 0253196 _____ () C:\Users\Michel\AppData\Local\Tempdivxb716
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivxc38a
2016-03-29 03:03 - 2016-03-29 03:03 - 0261341 _____ () C:\Users\Michel\AppData\Local\Tempdivxc75f
2015-08-02 20:47 - 2015-08-02 20:47 - 0043494 _____ () C:\Users\Michel\AppData\Local\Tempdivxc8a6
2016-09-06 02:48 - 2016-09-06 02:48 - 0183292 _____ () C:\Users\Michel\AppData\Local\Tempdivxd01e
2016-10-20 19:50 - 2016-10-20 19:50 - 0041691 _____ () C:\Users\Michel\AppData\Local\Tempdivxd2d8
2016-09-03 13:09 - 2016-09-03 13:09 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivxe7ec
2016-10-13 03:26 - 2016-10-13 03:26 - 0191137 _____ () C:\Users\Michel\AppData\Local\Tempdivxf647
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivxfaf7
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivxfc35
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivxfc65
2016-08-26 12:23 - 2016-08-26 12:23 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivxfe35
2017-01-09 17:27 - 2017-01-09 17:27 - 0000816 _____ () C:\Users\Michel\AppData\Local\ZHPFixReport.txt
2011-04-09 20:41 - 2016-09-30 23:57 - 0009475 _____ () C:\ProgramData\hpzinstall.log
2011-02-20 11:58 - 2011-06-20 10:25 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt
Fichiers à déplacer ou supprimer:
====================
C:\Users\Public\AlexaNSISPlugin.5048.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-01-11 21:54
==================== Fin de FRST.txt ============================
Exécuté par Michel (administrateur) sur MICHEL-PC (14-01-2017 22:44:04)
Exécuté depuis C:\Users\Michel\Downloads
Profils chargés: Michel (Profils disponibles: Michel & DefaultAppPool)
Platform: Microsoft Windows 10 Professionnel Version 1607 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(HP Inc.) C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x86__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.10221.0_x86__8wekyb3d8bbwe\Video.UI.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [DivXMediaServer] => C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [159456 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [483840 2016-07-16] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2776528 2016-12-14] (Malwarebytes)
HKU\S-1-5-21-2419216286-400175742-168657417-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [30208 2016-07-16] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{99126843-e61f-4bca-864f-241dbade4b81}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-2419216286-400175742-168657417-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {31256715-1880-4E34-9380-9DC9DF0C30C5} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2419216286-400175742-168657417-1000 -> {31256715-1880-4E34-9380-9DC9DF0C30C5} URL =
SearchScopes: HKU\S-1-5-21-2419216286-400175742-168657417-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
Toolbar: HKU\S-1-5-21-2419216286-400175742-168657417-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
Toolbar: HKU\S-1-5-21-2419216286-400175742-168657417-1000 -> Pas de nom - {D3028143-6145-4318-99D3-3EDCE54A95A9} - Pas de fichier
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://search.conduit.com/?ctid=CT3293887&SearchSource=48&CUI=UN24125317842667769&UM=2","about:newtab?source=home","hxxp://www.amazon.fr/gp/bit/amazonserp/ref=bit_bds-p07_serp_cr_fr_display?ie=UTF8&tagbase=bds-p07&tbrId=v1_abb-channel-7_bbc90b11a218483b801674dc4f04a499_30_46_20131109_FR_cr_sp_IS0"
CHR Profile: C:\Users\Michel\AppData\Local\Google\Chrome\User Data\Default [2017-01-14]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Michel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-11]
CHR Extension: (Chrome Media Router) - C:\Users\Michel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-11]
CHR Profile: C:\Users\Michel\AppData\Local\Google\Chrome\User Data\System Profile [2016-07-12]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 HPSLPSVC; C:\Program Files\HP\Digital Imaging\bin\HPSLPSVC32.DLL [696320 2011-08-18] (Hewlett-Packard Co.) [Fichier non signé]
R2 HPSupportSolutionsFrameworkService; C:\Program Files\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [3381200 2016-12-14] (Malwarebytes)
S2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [44032 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S4 Orange update Core Service; C:\Program Files\Orange\OrangeUpdate\Service\OUCore.exe [1055872 2011-05-20] (France Telecom SA)
S2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [53760 2010-08-06] (Hewlett-Packard) [Fichier non signé]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [1887272 2016-09-15] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [271496 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [84928 2016-07-16] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109184 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\WINDOWS\system32\DRIVERS\Dot4.sys [137632 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\WINDOWS\System32\drivers\Dot4Prt.sys [22432 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [59968 2016-12-14] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [153024 2017-01-09] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [87496 2017-01-10] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [39360 2017-01-10] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [219072 2017-01-10] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [73152 2017-01-14] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [62976 2016-07-16] ()
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [494080 2016-07-16] (Realtek )
R1 ssmdrv; C:\WINDOWS\System32\DRIVERS\ssmdrv.sys [31848 2015-05-28] (Avira Operations GmbH & Co. KG)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147072 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [5632 2006-07-24] () [Fichier non signé]
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [37912 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [244576 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [100192 2016-07-16] (Microsoft Corporation)
S3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [161280 2016-07-16] (Microsoft Corporation)
S3 xusb22; C:\WINDOWS\System32\drivers\xusb22.sys [72704 2016-07-16] (Microsoft Corporation)
U0 aswVmm; pas de ImagePath
U3 idsvc; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-01-14 22:44 - 2017-01-14 22:44 - 00010045 _____ C:\Users\Michel\Downloads\FRST.txt
2017-01-14 22:43 - 2017-01-14 22:44 - 00000000 ____D C:\FRST
2017-01-14 22:38 - 2017-01-14 22:42 - 01761280 _____ (Farbar) C:\Users\Michel\Downloads\FRST.exe
2017-01-14 13:42 - 2017-01-14 13:42 - 00020195 _____ C:\Users\Michel\Downloads\order-slip-001004.pdf
2017-01-14 10:34 - 2017-01-14 10:38 - 572090601 _____ C:\Users\Michel\Downloads\1200---gameofthrone1----5----libertyland.tv.rar
2017-01-14 10:29 - 2017-01-14 10:34 - 572581836 _____ C:\Users\Michel\Downloads\zzz----gameofthrone1----4----libertyland.tv.rar
2017-01-14 10:14 - 2017-01-14 10:28 - 571993046 _____ C:\Users\Michel\Downloads\zzz----game of throne 1 ---- 3 ----libertyland.tv.rar
2017-01-13 22:06 - 2017-01-13 22:06 - 00095832 _____ C:\Users\Michel\Downloads\ZHPDiag.txt
2017-01-13 22:05 - 2017-01-13 22:05 - 00095829 _____ C:\Users\Michel\Desktop\ZHPDiag.txt
2017-01-13 21:58 - 2017-01-13 21:59 - 02642944 _____ C:\Users\Michel\Downloads\ZHPDiag3 (1).exe
2017-01-13 21:39 - 2017-01-13 21:33 - 00004334 _____ C:\Users\Michel\Documents\ZHPFixReport.txt
2017-01-13 21:27 - 2017-01-13 21:27 - 00001872 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-01-13 21:25 - 2017-01-13 21:26 - 03521617 _____ (Nicolas Coolman ) C:\Users\Michel\Downloads\ZHPFix.exe
2017-01-12 17:34 - 2017-01-12 17:34 - 00193592 _____ C:\Users\Michel\Downloads\2017 01 11 -CR du Comité des fêtes de MOYENNEVILLE.pdf
2017-01-11 17:06 - 2017-01-11 17:06 - 02678784 _____ C:\Users\Michel\Downloads\ZHPCleaner.exe
2017-01-11 17:06 - 2017-01-11 17:06 - 00000923 _____ C:\Users\Michel\Desktop\ZHPCleaner.lnk
2017-01-11 16:52 - 2017-01-13 22:01 - 00000913 _____ C:\Users\Michel\Desktop\ZHPDiag.lnk
2017-01-11 16:51 - 2017-01-11 16:52 - 02639872 _____ C:\Users\Michel\Downloads\ZHPDiag3.exe
2017-01-10 21:02 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-10 21:02 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-10 21:02 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-10 21:02 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-10 21:02 - 2016-12-14 06:04 - 00261984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-10 21:02 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-10 21:02 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-10 21:01 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-10 21:01 - 2016-12-21 06:59 - 00101728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-10 21:01 - 2016-12-21 06:20 - 06020448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-10 21:01 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-10 21:01 - 2016-12-21 06:05 - 00523784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-10 21:01 - 2016-12-21 06:03 - 00136544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqmigplugin.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-10 21:01 - 2016-12-21 06:02 - 00080224 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-10 21:01 - 2016-12-21 06:01 - 00198496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-10 21:01 - 2016-12-21 06:00 - 01384704 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-10 21:01 - 2016-12-21 05:47 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-10 21:01 - 2016-12-21 05:45 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-10 21:01 - 2016-12-21 05:44 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-10 21:01 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-10 21:01 - 2016-12-21 05:42 - 00330752 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-10 21:01 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-10 21:01 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-10 21:01 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-10 21:01 - 2016-12-21 05:40 - 00216576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-10 21:01 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2017-01-10 21:01 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-10 21:01 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-10 21:01 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-10 21:01 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-10 21:01 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-10 21:01 - 2016-12-21 05:30 - 01406976 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2017-01-10 21:01 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-10 21:01 - 2016-12-21 05:30 - 00734208 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-10 21:01 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-10 21:01 - 2016-12-21 05:26 - 03776000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-10 21:01 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-10 21:01 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-10 21:01 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-10 21:01 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-10 21:01 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-10 21:01 - 2016-12-21 05:23 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-10 21:01 - 2016-12-21 05:22 - 03596800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-10 21:01 - 2016-12-14 06:58 - 01026912 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 01469792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems32.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 01136992 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 01127040 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-10 21:01 - 2016-12-14 06:26 - 00911712 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00812896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00615264 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClient.exe
2017-01-10 21:01 - 2016-12-14 06:26 - 00558432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00550240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00541024 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00498016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00492384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00401248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00372576 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00290656 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll
2017-01-10 21:01 - 2016-12-14 06:26 - 00141664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe
2017-01-10 21:01 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-10 21:01 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-10 21:01 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-10 21:01 - 2016-12-14 06:05 - 00544608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-10 21:01 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-10 21:01 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-10 21:01 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-10 21:01 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-10 21:01 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-10 21:01 - 2016-12-14 05:41 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-10 21:01 - 2016-12-14 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-10 21:01 - 2016-12-14 05:40 - 00267776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-10 21:01 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-10 21:01 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-10 21:01 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-10 21:01 - 2016-12-14 05:38 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-10 21:01 - 2016-12-14 05:37 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-10 21:01 - 2016-12-14 05:37 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-10 21:01 - 2016-12-14 05:37 - 00188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-10 21:01 - 2016-12-14 05:36 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-10 21:01 - 2016-12-14 05:36 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-10 21:01 - 2016-12-14 05:36 - 00416256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-10 21:01 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 01722368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-10 21:01 - 2016-12-14 05:35 - 00254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-10 21:01 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-10 21:01 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-10 21:01 - 2016-12-14 05:24 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-10 21:01 - 2016-12-14 05:23 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-10 21:01 - 2016-12-14 05:23 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-10 21:01 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-10 21:01 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-10 21:01 - 2016-12-14 05:22 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-10 21:01 - 2016-12-14 05:22 - 01235456 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-10 21:01 - 2016-12-14 05:22 - 00920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-10 21:01 - 2016-12-14 05:21 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-10 21:01 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-10 21:01 - 2016-11-02 12:05 - 00313088 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2017-01-10 21:01 - 2016-11-02 11:32 - 00786432 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-10 21:01 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2017-01-10 17:52 - 2017-01-10 17:52 - 00002014 _____ C:\Users\Michel\Downloads\Feuille Quadrillee.pdf
2017-01-09 18:59 - 2017-01-09 18:59 - 00193631 _____ C:\Users\Michel\Downloads\Notice Mhouse TX3 - TX4 - GTX4 - MT4.pdf
2017-01-09 18:30 - 2017-01-10 22:13 - 00087496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-01-09 18:13 - 2017-01-14 22:31 - 00073152 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-01-09 18:13 - 2017-01-10 22:13 - 00219072 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-01-09 18:13 - 2017-01-10 22:13 - 00039360 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-01-09 18:13 - 2017-01-09 18:13 - 00153024 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-01-09 18:13 - 2017-01-09 18:13 - 00002101 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-01-09 18:13 - 2017-01-09 18:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-01-09 18:13 - 2017-01-09 18:13 - 00000000 ____D C:\Program Files\Malwarebytes
2017-01-09 18:13 - 2016-12-14 12:55 - 00059968 _____ C:\WINDOWS\system32\Drivers\mbae.sys
2017-01-09 17:27 - 2017-01-09 17:27 - 00000816 _____ C:\Users\Michel\AppData\Local\ZHPFixReport.txt
2017-01-09 17:19 - 2017-01-13 21:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-01-07 21:33 - 2017-01-07 21:33 - 00000000 ____D C:\Users\Michel\AppData\Roaming\Malwarebytes
2017-01-07 21:32 - 2017-01-07 22:00 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2017-01-07 21:32 - 2017-01-07 21:32 - 00921280 _____ (Microsoft Corporation) C:\WINDOWS\ucrtbase.dll
2017-01-07 21:31 - 2017-01-07 21:31 - 00000000 ____D C:\Users\Michel\AppData\Local\Dropbox
2017-01-07 21:30 - 2017-01-07 21:30 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-07 21:30 - 2017-01-07 21:30 - 00000000 ____D C:\Program Files\AVAST Software
2016-12-26 19:11 - 2016-12-26 19:15 - 00097792 _____ C:\Users\Michel\Downloads\planning DOULLENS.xls
2016-12-26 15:20 - 2016-12-26 15:20 - 00135382 _____ C:\Users\Michel\Downloads\15672888_1715757962073311_6927117198370213889_n.jpg
2016-12-26 15:19 - 2016-12-26 15:19 - 00134137 _____ C:\Users\Michel\Downloads\15726791_1715758038739970_3809300812004717203_n.jpg
2016-12-18 13:26 - 2016-12-18 13:27 - 00000000 ____D C:\Users\Michel\Downloads\PHOTOS ENFANTS
2016-12-17 11:25 - 2016-12-17 11:25 - 00042841 _____ C:\Users\Michel\Downloads\629196678.pdf
2016-12-16 20:02 - 2016-12-16 20:04 - 00000000 ____D C:\Users\Michel\Downloads\Captain.America.Civil.War.2016.FRENCH.BDRip.XviD-wWw.LibertylanD.co
2016-12-16 17:08 - 2016-12-16 17:08 - 00655570 _____ C:\Users\Michel\Downloads\CGV_271016.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-01-14 22:32 - 2016-09-14 21:00 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-14 09:37 - 2016-07-16 09:29 - 00000000 ___HD C:\Program Files\WindowsApps
2017-01-14 09:37 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-13 22:03 - 2015-06-30 09:32 - 00000000 ____D C:\Users\Michel\AppData\Roaming\ZHP
2017-01-13 21:27 - 2015-07-01 07:51 - 00000000 ____D C:\Program Files\ZHPFix
2017-01-12 21:51 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\rescache
2017-01-12 17:47 - 2012-12-06 22:53 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-11 21:07 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-11 14:01 - 2016-07-16 09:28 - 00000000 ____D C:\WINDOWS\INF
2017-01-10 22:12 - 2016-09-14 21:18 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-10 22:12 - 2016-09-14 21:00 - 03785520 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-10 22:11 - 2016-07-16 03:22 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-10 22:10 - 2016-07-16 09:29 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2017-01-10 21:17 - 2013-08-14 13:32 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-10 21:15 - 2016-07-16 09:19 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-10 21:15 - 2011-02-20 10:35 - 133456224 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-09 18:13 - 2015-06-30 22:41 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-01-08 10:40 - 2016-04-29 20:24 - 00000000 ____D C:\AdwCleaner
2017-01-07 21:50 - 2016-09-14 21:05 - 00000000 ____D C:\Users\Michel
2017-01-07 19:57 - 2016-07-26 16:10 - 00000000 ____D C:\Program Files\TeamViewer
2017-01-07 19:56 - 2011-04-09 20:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2017-01-07 19:54 - 2015-07-06 09:40 - 00000000 ____D C:\Program Files\Common Files\DivX Shared
2017-01-07 19:54 - 2011-02-04 14:54 - 00000000 ____D C:\Program Files\DivX
2017-01-07 19:54 - 2011-02-04 14:48 - 00000000 ____D C:\ProgramData\DivX
2016-12-28 17:49 - 2016-09-14 21:04 - 01934152 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-12-28 17:49 - 2016-07-16 18:15 - 00700066 _____ C:\WINDOWS\system32\perfh00C.dat
2016-12-28 17:49 - 2016-07-16 18:15 - 00151842 _____ C:\WINDOWS\system32\perfc00C.dat
2016-12-28 17:49 - 2016-07-16 09:31 - 00864358 _____ C:\WINDOWS\system32\perfh009.dat
2016-12-28 17:49 - 2016-07-16 09:31 - 00215154 _____ C:\WINDOWS\system32\perfc009.dat
2016-12-28 17:36 - 2016-06-01 20:18 - 00000000 ____D C:\Users\Michel\AppData\Local\Comms
2016-12-23 00:13 - 2016-07-16 09:31 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-12-23 00:13 - 2016-07-16 09:31 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-12-20 11:11 - 2011-01-18 14:51 - 00000000 ___RD C:\Users\Michel\Music
2016-12-16 11:00 - 2015-08-04 17:19 - 00002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-12-16 11:00 - 2015-08-04 17:19 - 00002212 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-12-15 14:26 - 2016-07-16 09:29 - 00000000 __RSD C:\WINDOWS\assembly
==================== Fichiers à la racine de certains dossiers =======
2015-02-25 14:13 - 2012-11-15 18:15 - 6527128 _____ (AVAST Software) C:\Program Files\Alw
2012-03-02 22:29 - 2012-03-02 22:29 - 0000006 _____ () C:\Program Files\Common Files\WPVersion.txt
2016-08-05 21:46 - 2016-08-05 21:46 - 0000288 _____ () C:\Users\Michel\AppData\Roaming\.backup.dm
2012-03-20 18:38 - 2012-03-21 20:04 - 0000041 _____ () C:\Users\Michel\AppData\Roaming\Offre.ini
2016-06-07 22:52 - 2016-06-07 22:52 - 0000036 _____ () C:\Users\Michel\AppData\Local\housecall.guid.cache
2016-07-26 20:17 - 2016-07-26 20:17 - 0007605 _____ () C:\Users\Michel\AppData\Local\Resmon.ResmonCfg
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivx0b3b
2016-08-26 12:22 - 2016-08-26 12:22 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivx1ff5
2016-04-16 22:01 - 2016-04-16 22:01 - 0041094 _____ () C:\Users\Michel\AppData\Local\Tempdivx2177
2015-07-08 01:08 - 2015-07-08 01:08 - 0253196 _____ () C:\Users\Michel\AppData\Local\Tempdivx32e8
2016-08-26 12:20 - 2016-08-26 12:20 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivx3344
2016-08-26 12:23 - 2016-08-26 12:23 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivx6402
2016-08-26 12:23 - 2016-08-26 12:23 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivx73f8
2016-10-14 19:49 - 2016-10-14 19:49 - 0037497 _____ () C:\Users\Michel\AppData\Local\Tempdivx8c2b
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivx8ced
2015-08-02 13:37 - 2015-08-02 13:37 - 0043494 _____ () C:\Users\Michel\AppData\Local\Tempdivxada0
2015-07-08 01:08 - 2015-07-08 01:08 - 0253196 _____ () C:\Users\Michel\AppData\Local\Tempdivxb716
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivxc38a
2016-03-29 03:03 - 2016-03-29 03:03 - 0261341 _____ () C:\Users\Michel\AppData\Local\Tempdivxc75f
2015-08-02 20:47 - 2015-08-02 20:47 - 0043494 _____ () C:\Users\Michel\AppData\Local\Tempdivxc8a6
2016-09-06 02:48 - 2016-09-06 02:48 - 0183292 _____ () C:\Users\Michel\AppData\Local\Tempdivxd01e
2016-10-20 19:50 - 2016-10-20 19:50 - 0041691 _____ () C:\Users\Michel\AppData\Local\Tempdivxd2d8
2016-09-03 13:09 - 2016-09-03 13:09 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivxe7ec
2016-10-13 03:26 - 2016-10-13 03:26 - 0191137 _____ () C:\Users\Michel\AppData\Local\Tempdivxf647
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivxfaf7
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivxfc35
2016-08-12 00:40 - 2016-08-12 00:40 - 0192881 _____ () C:\Users\Michel\AppData\Local\Tempdivxfc65
2016-08-26 12:23 - 2016-08-26 12:23 - 0037910 _____ () C:\Users\Michel\AppData\Local\Tempdivxfe35
2017-01-09 17:27 - 2017-01-09 17:27 - 0000816 _____ () C:\Users\Michel\AppData\Local\ZHPFixReport.txt
2011-04-09 20:41 - 2016-09-30 23:57 - 0009475 _____ () C:\ProgramData\hpzinstall.log
2011-02-20 11:58 - 2011-06-20 10:25 - 0000000 _____ () C:\ProgramData\LauncherAccess.dt
Fichiers à déplacer ou supprimer:
====================
C:\Users\Public\AlexaNSISPlugin.5048.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-01-11 21:54
==================== Fin de FRST.txt ============================