Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017
Exécuté par emb (administrateur) sur EMB-PC (01-02-2017 18:16:45)
Exécuté depuis C:\Users\emb\Desktop
Profils chargés: emb & UpdatusUser (Profils disponibles: emb & UpdatusUser)
Platform: Windows 7 Ultimate N Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
() C:\Program Files (x86)\ThinkSky\iTools 3\iToolsDaemon.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Apple Inc.) D:\Program Files\iTunes\iTunesHelper.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Wargaming.net) D:\Games\World_of_Tanks\WargamingGameUpdater.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_24_0_0_194.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_24_0_0_194.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202008 2013-10-17] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => D:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-03-23] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4001848 2016-12-15] (Tonec Inc.)
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\Run: [World of Tanks] => d:\Games\World_of_Tanks\WargamingGameUpdater.exe [3135752 2016-11-18] (Wargaming.net)
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{26508994-D846-4A79-A784-F9EB9410F6E5}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{49A7CB15-C6D3-4707-8CCD-30521ED5D671}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5CDB9B5F-69F2-499E-9790-7C62E0233750}: [NameServer] 41.110.32.2 41.110.32.3
Tcpip\..\Interfaces\{9683047C-AC25-4B8E-A19E-E1041DEE399E}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{9F911545-7FF6-48DA-B74B-4676487DBD45}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{A4E197D8-C4CD-47DA-B241-48DCA692206E}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{FD992BC2-1F2F-4703-84FC-8E3C6FDB56DC}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-4221025677-4259256118-3238682257-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-26] (AO Kaspersky Lab)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-26] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll => Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-26] (Oracle Corporation)
BHO: BHOImpl Class -> {E1499FE7-129D-4B6E-B681-DDF21E14172C} -> C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\iToolsBHO64.dll [2016-10-25] (iTools.hk)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-26] (AO Kaspersky Lab)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2017-01-08] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-08] (Oracle Corporation)
BHO-x32: BHOImpl Class -> {E1499FE7-129D-4B6E-B681-DDF21E14172C} -> C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\iToolsBHO.dll [2016-10-25] (iTools.hk)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-26] (AO Kaspersky Lab)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\emb\AppData\Roaming\Mozilla\Firefox\Profiles\vbozo73n.default-1485124959363 [2017-02-01]
FF NetworkProxy: Mozilla\Firefox\Profiles\vbozo73n.default-1485124959363 -> type", 0
FF Extension: (Adblock Plus) - C:\Users\emb\AppData\Roaming\Mozilla\Firefox\Profiles\vbozo73n.default-1485124959363\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-01-23]
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-12-26]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\emb\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\emb\AppData\Roaming\IDM\idmmzcc5 [2017-02-01] [non signé]
FF HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-11] ()
FF Plugin: @itools.hk/npiTools, version=1.0.0 -> C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\npiTools.dll [2016-10-25] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-26] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-11] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @itools.hk/npiTools, version=1.0.0 -> C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\npiTools.dll [2016-10-25] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-08] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\PepperFlash\pepflashplayer.dll => Pas de fichier
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\ppGoogleNaClPluginChrome.dll => Pas de fichier
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\pdf.dll => Pas de fichier
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => Pas de fichier
CHR Profile: C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default [2017-02-01]
CHR Extension: (ShowPassword) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbiclfnbhommljbjcoelobnnnibemabl [2016-12-02]
CHR Extension: (Kaspersky Protection) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhoibnponjcgjgcnfacekaijdbbplhib [2017-01-22]
CHR Extension: (IDM Integration Module) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-12-13]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Chrome Media Router) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-18]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-01-26]
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-01-26]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 hasplms; C:\Windows\system32\hasplms.exe [4608320 2014-11-27] (SafeNet Inc.)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 MSSQLSERVER; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29263712 2008-11-24] (Microsoft Corporation)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
S2 WinDefend; %ProgramFiles(x86)%\Windows Defender\mpsvc.dll [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
R3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [60488 2014-11-27] (SafeNet Inc.)
R3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [63944 2014-11-27] (SafeNet Inc.)
R3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [303624 2014-11-27] (SafeNet Inc.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R3 exetools; C:\Windows\System32\DRIVERS\exetools.sys [92672 2015-01-15] (SafeNet Inc.) [Fichier non signé]
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-11-27] (SafeNet Inc.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-01-22] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31712 2016-08-29] (Intel Corporation)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-02-03] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [189264 2016-06-26] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [305496 2016-12-26] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1036512 2016-12-26] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [57936 2016-12-26] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [52144 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [75696 2016-05-17] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [134880 2016-12-26] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [194480 2016-06-14] (AO Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2017-02-01] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [199736 2016-09-06] (Intel Corporation)
S3 netr28ux; C:\Windows\System32\DRIVERS\Dnetr28ux.sys [1617472 2011-04-28] (Ralink Technology Corp.)
R3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [39168 2014-10-08] (SteelSeries Corporation)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 SydexFDD; C:\Windows\SysWOW64\Drivers\sydexfdd.sys [13359 2012-10-16] (Windows (R) 2000 DDK provider) [Fichier non signé]
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2017-01-20] (Anchorfree Inc.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2017-02-01] ()
R1 ucdrv; C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [23652 ] (UC Web Inc.) <==== ATTENTION
S2 wntpport; C:\Windows\SysWow64\Drivers\wntpport.sys [28416 2011-01-24] (Vireo Software)
U0 aswVmm; pas de ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U2 ERSvc; pas de ImagePath
U2 IAStorDataMgrsvc; pas de ImagePath
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
U2 NIHardwareService; pas de ImagePath
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
U2 Parvdm; pas de ImagePath
U2 srService; pas de ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-02-01 18:16 - 2017-02-01 18:17 - 00021257 _____ C:\Users\emb\Desktop\FRST.txt
2017-02-01 18:16 - 2017-02-01 18:16 - 00000000 ____D C:\FRST
2017-02-01 18:14 - 2017-02-01 18:14 - 02420736 _____ (Farbar) C:\Users\emb\Desktop\FRST64.exe
2017-02-01 17:29 - 2017-02-01 17:29 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-02-01 17:27 - 2017-02-01 17:27 - 00001021 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-02-01 17:27 - 2017-02-01 17:27 - 00000000 ____D C:\ProgramData\RogueKiller
2017-02-01 17:27 - 2017-02-01 17:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-02-01 17:27 - 2017-02-01 17:27 - 00000000 ____D C:\Program Files\RogueKiller
2017-02-01 17:20 - 2017-02-01 17:48 - 00003476 _____ C:\Windows\System32\Tasks\UCBrowserSecureUpdater
2017-02-01 17:16 - 2017-02-01 17:22 - 00000000 ____D C:\AdwCleaner
2017-02-01 17:15 - 2017-02-01 17:15 - 04015056 _____ C:\Users\emb\Desktop\adwcleaner_6.043.exe
2017-02-01 17:09 - 2017-02-01 17:09 - 01663040 _____ (Malwarebytes) C:\Users\emb\Desktop\JRT.exe
2017-02-01 14:51 - 2017-02-01 16:30 - 00029598 _____ C:\Pre_Scan.txt
2017-02-01 14:50 - 2017-02-01 16:30 - 00000000 ____D C:\Pre_Scan
2017-02-01 14:43 - 2017-02-01 16:33 - 00428308 _____ C:\Windows\ntbtlog.txt
2017-02-01 14:01 - 2017-02-01 14:01 - 02659840 _____ C:\Users\emb\ZHPDiag3.exe
2017-02-01 00:48 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2017-02-01 00:48 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2017-02-01 00:48 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2017-02-01 00:47 - 2017-02-01 00:56 - 00000000 ____D C:\Qoobox
2017-02-01 00:47 - 2017-02-01 00:55 - 00000000 ____D C:\Windows\erdnt
2017-01-31 16:23 - 2017-01-31 16:23 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2017-01-31 16:08 - 2017-01-31 16:24 - 00000000 ____D C:\ProgramData\HitmanPro
2017-01-31 14:15 - 2017-02-01 14:01 - 00000671 _____ C:\Users\emb\Desktop\ZHPDiag.lnk
2017-01-31 14:07 - 2017-02-01 16:45 - 00000000 ____D C:\Users\emb\AppData\Roaming\ZHP
2017-01-31 14:07 - 2017-01-31 14:07 - 00001819 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-01-31 14:07 - 2017-01-31 14:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-01-31 14:07 - 2017-01-31 14:07 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-01-30 17:49 - 2017-01-30 17:49 - 00000000 ____D C:\Users\emb\Doctor Web
2017-01-28 23:17 - 2017-01-29 16:18 - 00000199 _____ C:\Users\emb\Desktop\cccam 1.cfg
2017-01-27 19:07 - 2017-01-27 19:07 - 00000000 ____D C:\Users\emb\Downloads\Rise.Of.The.Tomb.Raider-CONSPIR4CY
2017-01-24 16:40 - 2017-01-24 16:40 - 02179856 _____ C:\Users\emb\Downloads\winrar_64_bit.exe.EXE
2017-01-24 16:40 - 2017-01-24 16:40 - 00000000 ____D C:\Users\emb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-24 16:40 - 2017-01-24 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-24 14:50 - 2017-01-24 14:50 - 00000862 _____ C:\Windows\system32\termcap
2017-01-24 10:25 - 2017-01-29 10:09 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2F0332C9.sys
2017-01-22 21:51 - 2017-01-22 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2017-01-22 21:50 - 2017-02-01 18:06 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-01-22 21:50 - 2017-01-22 21:50 - 00000000 ____D C:\Windows\ELAMBKUP
2017-01-22 21:50 - 2017-01-22 21:50 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2017-01-22 21:50 - 2016-12-26 20:22 - 01036512 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2017-01-22 21:50 - 2016-12-26 20:22 - 00305496 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2017-01-22 21:50 - 2016-06-26 15:10 - 00189264 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2017-01-22 21:50 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2017-01-22 20:55 - 2017-02-01 17:50 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2017-01-22 20:55 - 2017-01-22 20:56 - 00000000 ____D C:\Users\emb\AppData\LocalLow\IObit
2017-01-22 20:55 - 2017-01-22 20:55 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2017-01-22 20:55 - 2017-01-22 20:55 - 00000000 ____D C:\Windows\IObit
2017-01-22 20:55 - 2017-01-22 20:55 - 00000000 ____D C:\Users\emb\AppData\Roaming\IObit
2017-01-22 20:55 - 2017-01-22 20:55 - 00000000 ____D C:\ProgramData\IObit
2017-01-22 20:44 - 2017-01-22 20:44 - 00000000 ____D C:\Program Files\AVAST Software
2017-01-22 12:19 - 2017-01-22 12:19 - 00442272 _____ C:\Users\emb\Desktop\jjjj.DST
2017-01-21 15:22 - 2017-01-23 14:58 - 00000000 ____D C:\Users\emb\AppData\Roaming\vlc
2017-01-21 15:22 - 2017-01-22 23:40 - 00001030 _____ C:\Users\Public\Desktop\VLC media player.lnk
2017-01-21 15:22 - 2017-01-21 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-01-21 15:21 - 2017-01-21 15:21 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2017-01-20 17:28 - 2017-01-20 17:28 - 00042064 _____ (Anchorfree Inc.) C:\Windows\system32\Drivers\taphss6.sys
2017-01-16 09:11 - 2017-01-16 09:11 - 00179769 _____ C:\Users\emb\Desktop\7777.DST
2017-01-14 19:21 - 2017-01-14 19:21 - 00000000 ____D C:\Program Files\PlayReady
2017-01-14 19:18 - 2017-01-14 19:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-01-14 19:17 - 2017-01-14 19:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-01-14 19:17 - 2017-01-14 19:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-01-10 22:17 - 2017-01-10 22:17 - 00016384 _____ C:\Users\emb\Downloads\rom-0
2017-01-09 16:38 - 2017-01-09 16:38 - 00252678 _____ C:\Users\emb\Desktop\hhhhh.DST
2017-01-06 18:20 - 2017-01-06 18:20 - 00009358 _____ C:\Users\emb\Downloads\copy-of-yttrdd.DGT
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-02-01 18:16 - 2016-08-15 01:33 - 00000000 ____D C:\Users\emb\AppData\Roaming\DMCache
2017-02-01 18:14 - 2016-08-15 01:33 - 00000000 ____D C:\Users\emb\AppData\Roaming\IDM
2017-02-01 18:04 - 2016-09-20 19:51 - 00000314 _____ C:\Windows\Tasks\iToolsDaemon.job
2017-02-01 17:58 - 2009-07-14 05:50 - 00030416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-01 17:58 - 2009-07-14 05:50 - 00030416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-01 17:52 - 2016-11-18 19:47 - 00000000 ____D C:\Users\emb\AppData\LocalLow\Mozilla
2017-02-01 17:52 - 2016-08-16 14:37 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-02-01 17:51 - 2016-09-20 19:51 - 00003280 _____ C:\Windows\System32\Tasks\iToolsDaemon
2017-02-01 17:51 - 2016-08-15 01:43 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-02-01 17:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-01 17:20 - 2016-11-09 20:00 - 00000000 ____D C:\Users\UpdatusUser
2017-02-01 14:43 - 2016-08-15 10:03 - 00000033 _____ C:\Windows\BriTonLeapx64.INI
2017-02-01 14:01 - 2016-08-15 00:30 - 00000000 ____D C:\Users\emb
2017-02-01 12:52 - 2016-11-18 19:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-01 11:35 - 2016-08-15 01:34 - 00000000 ____D C:\Users\emb\Downloads\Compressed
2017-02-01 00:54 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2017-01-31 20:18 - 2011-04-12 10:10 - 00783880 _____ C:\Windows\system32\perfh00C.dat
2017-01-31 20:18 - 2011-04-12 10:10 - 00166322 _____ C:\Windows\system32\perfc00C.dat
2017-01-31 20:18 - 2009-07-14 06:12 - 01798280 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-31 20:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-31 00:03 - 2016-12-10 21:09 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-30 23:59 - 2016-08-27 16:49 - 00000000 ____D C:\Windows\Minidump
2017-01-30 23:58 - 2016-08-27 16:49 - 702568840 _____ C:\Windows\MEMORY.DMP
2017-01-29 10:35 - 2016-08-16 13:01 - 00000000 ____D C:\Users\emb\Desktop\ايزار باسيبلا
2017-01-28 18:28 - 2016-11-05 19:00 - 00000000 ____D C:\Users\emb\Desktop\kits
2017-01-28 09:50 - 2016-08-15 11:36 - 00000000 ____D C:\desin
2017-01-28 09:42 - 2016-08-15 01:33 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-01-27 23:23 - 2016-09-17 10:45 - 00000000 ____D C:\Users\emb\AppData\LocalLow\uTorrent
2017-01-27 23:23 - 2016-09-17 10:43 - 00000000 ____D C:\Users\emb\AppData\Roaming\uTorrent
2017-01-27 18:56 - 2016-09-17 10:45 - 00000000 ___SD C:\Users\emb\AppData\LocalLow\Temp
2017-01-25 17:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-01-24 16:40 - 2016-08-15 01:02 - 00000000 ____D C:\Program Files\WinRAR
2017-01-24 15:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2017-01-24 14:42 - 2016-08-21 00:24 - 00000000 ____D C:\Users\emb\AppData\Local\ElevatedDiagnostics
2017-01-24 13:52 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2017-01-23 16:44 - 2016-08-28 00:35 - 00000000 ____D C:\Users\emb\Desktop\غ حساب
2017-01-22 23:40 - 2016-11-17 17:11 - 00000762 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2017-01-22 23:40 - 2016-10-25 15:08 - 00001130 _____ C:\Users\Public\Desktop\iTools 3.lnk
2017-01-22 23:40 - 2016-10-22 20:28 - 00001559 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-01-22 23:40 - 2016-09-25 21:18 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-01-22 23:40 - 2016-09-25 21:18 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-01-22 23:40 - 2016-09-25 21:18 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-01-22 23:40 - 2016-08-15 09:54 - 00000934 _____ C:\Users\Public\Desktop\Wilcom EmbroideryStudio e2.0.lnk
2017-01-22 23:40 - 2016-08-15 00:52 - 00001169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-22 23:40 - 2016-08-15 00:45 - 00002203 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-22 23:40 - 2009-07-14 06:00 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2017-01-22 23:40 - 2009-07-14 06:00 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2017-01-22 23:40 - 2009-07-14 06:00 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2017-01-22 23:39 - 2016-10-08 11:48 - 00001010 _____ C:\Users\emb\Desktop\Delta4.LNK
2017-01-22 23:39 - 2016-09-17 10:44 - 00002557 _____ C:\Users\emb\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2017-01-22 23:39 - 2016-08-22 16:50 - 00001073 _____ C:\Users\emb\Desktop\ColorSchemer Studio.lnk
2017-01-22 23:39 - 2016-08-15 00:31 - 00001469 _____ C:\Users\emb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-22 23:39 - 2016-08-15 00:31 - 00001435 _____ C:\Users\emb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2017-01-22 23:39 - 2009-07-14 06:00 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2017-01-22 23:39 - 2009-07-14 05:54 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2017-01-22 21:58 - 2016-08-15 01:22 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-22 21:55 - 2016-08-16 14:40 - 00000000 ____D C:\Users\emb\AppData\Roaming\Adobe
2017-01-22 20:23 - 2016-08-15 01:21 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-16 09:20 - 2016-12-01 11:27 - 00000000 ____D C:\Users\emb\AppData\Local\SLAM
2017-01-11 00:53 - 2016-08-16 14:37 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-11 00:53 - 2016-08-16 14:37 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-11 00:53 - 2016-08-16 14:37 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-11 00:53 - 2016-08-16 14:37 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-11 00:53 - 2016-08-16 14:37 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-09 18:37 - 2016-11-17 17:11 - 00000000 ____D C:\Users\emb\AppData\Roaming\TS3Client
2017-01-08 18:18 - 2016-08-15 00:56 - 00000000 ____D C:\ProgramData\Oracle
2017-01-08 18:13 - 2016-08-27 17:23 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-08 18:13 - 2016-08-15 01:01 - 00000000 ____D C:\Program Files\Java
2017-01-08 18:13 - 2016-08-15 00:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-08 18:11 - 2016-08-27 17:23 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-01-02 14:36 - 2009-07-14 06:08 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT
==================== Fichiers à la racine de certains dossiers =======
2016-08-22 19:18 - 2016-08-22 19:18 - 0000017 _____ () C:\Users\emb\AppData\Local\resmon.resmoncfg
2016-08-15 00:45 - 2016-08-15 00:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Fichiers à déplacer ou supprimer:
====================
C:\Users\emb\ZHPDiag3.exe
Certains fichiers dans TEMP:
====================
2017-02-01 17:27 - 2010-11-21 04:24 - 1731936 _____ (Microsoft Corporation) C:\Users\emb\AppData\Local\Temp\dllnt_dump.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
testsigning: ==> 'testsigning' est activé. Rechercher un éventuel pilote non signé <===== ATTENTION
LastRegBack: 2017-01-23 12:33
==================== Fin de FRST.txt ============================
Exécuté par emb (administrateur) sur EMB-PC (01-02-2017 18:16:45)
Exécuté depuis C:\Users\emb\Desktop
Profils chargés: emb & UpdatusUser (Profils disponibles: emb & UpdatusUser)
Platform: Windows 7 Ultimate N Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
() C:\Program Files (x86)\ThinkSky\iTools 3\iToolsDaemon.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Apple Inc.) D:\Program Files\iTunes\iTunesHelper.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Wargaming.net) D:\Games\World_of_Tanks\WargamingGameUpdater.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_24_0_0_194.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_24_0_0_194.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202008 2013-10-17] (Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => D:\Program Files\iTunes\iTunesHelper.exe [176440 2016-09-09] (Apple Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-03-23] (Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4001848 2016-12-15] (Tonec Inc.)
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\Run: [Codec Pack Update Checker] => "C:\Windows\system32\Codecs\UpdateChecker.exe"
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\Run: [World of Tanks] => d:\Games\World_of_Tanks\WargamingGameUpdater.exe [3135752 2016-11-18] (Wargaming.net)
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [11264 2009-07-14] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{26508994-D846-4A79-A784-F9EB9410F6E5}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{49A7CB15-C6D3-4707-8CCD-30521ED5D671}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5CDB9B5F-69F2-499E-9790-7C62E0233750}: [NameServer] 41.110.32.2 41.110.32.3
Tcpip\..\Interfaces\{9683047C-AC25-4B8E-A19E-E1041DEE399E}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{9F911545-7FF6-48DA-B74B-4676487DBD45}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{A4E197D8-C4CD-47DA-B241-48DCA692206E}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{FD992BC2-1F2F-4703-84FC-8E3C6FDB56DC}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\S-1-5-21-4221025677-4259256118-3238682257-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-26] (AO Kaspersky Lab)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-10-26] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll => Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-26] (Oracle Corporation)
BHO: BHOImpl Class -> {E1499FE7-129D-4B6E-B681-DDF21E14172C} -> C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\iToolsBHO64.dll [2016-10-25] (iTools.hk)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO-x32: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-26] (AO Kaspersky Lab)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2017-01-08] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-08] (Oracle Corporation)
BHO-x32: BHOImpl Class -> {E1499FE7-129D-4B6E-B681-DDF21E14172C} -> C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\iToolsBHO.dll [2016-10-25] (iTools.hk)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\IEExt\ie_plugin.dll [2016-12-26] (AO Kaspersky Lab)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\emb\AppData\Roaming\Mozilla\Firefox\Profiles\vbozo73n.default-1485124959363 [2017-02-01]
FF NetworkProxy: Mozilla\Firefox\Profiles\vbozo73n.default-1485124959363 -> type", 0
FF Extension: (Adblock Plus) - C:\Users\emb\AppData\Roaming\Mozilla\Firefox\Profiles\vbozo73n.default-1485124959363\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-01-23]
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-12-26]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\emb\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\emb\AppData\Roaming\IDM\idmmzcc5 [2017-02-01] [non signé]
FF HKU\S-1-5-21-4221025677-4259256118-3238682257-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-11] ()
FF Plugin: @itools.hk/npiTools, version=1.0.0 -> C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\npiTools.dll [2016-10-25] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-26] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-26] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-11] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.)
FF Plugin-x32: @itools.hk/npiTools, version=1.0.0 -> C:\Program Files (x86)\ThinkSky\iTools 3\Extensions\npiTools.dll [2016-10-25] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-08] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
Chrome:
=======
CHR DefaultProfile: Default
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\PepperFlash\pepflashplayer.dll => Pas de fichier
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\ppGoogleNaClPluginChrome.dll => Pas de fichier
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\pdf.dll => Pas de fichier
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll => Pas de fichier
CHR Profile: C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default [2017-02-01]
CHR Extension: (ShowPassword) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbiclfnbhommljbjcoelobnnnibemabl [2016-12-02]
CHR Extension: (Kaspersky Protection) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhoibnponjcgjgcnfacekaijdbbplhib [2017-01-22]
CHR Extension: (IDM Integration Module) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-12-13]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Chrome Media Router) - C:\Users\emb\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-18]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-01-26]
CHR HKLM-x32\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-01-26]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-08-05] (Apple Inc.)
R2 AVP17.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 hasplms; C:\Windows\system32\hasplms.exe [4608320 2014-11-27] (SafeNet Inc.)
S3 klvssbrigde64; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 17.0.0\x64\vssbridge64.exe [77328 2016-06-28] (AO Kaspersky Lab)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-03-17] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-03-17] (Malwarebytes Corporation)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 MSSQLSERVER; C:\Program Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29263712 2008-11-24] (Microsoft Corporation)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
S2 WinDefend; %ProgramFiles(x86)%\Windows Defender\mpsvc.dll [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AcpiCtlDrv; C:\Windows\System32\DRIVERS\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
R3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [60488 2014-11-27] (SafeNet Inc.)
R3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [63944 2014-11-27] (SafeNet Inc.)
R3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [303624 2014-11-27] (SafeNet Inc.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [238936 2016-06-10] (AO Kaspersky Lab)
S3 dg_ssudbus; C:\Windows\System32\DRIVERS\ssudbus.sys [130688 2016-07-22] (Samsung Electronics Co., Ltd.)
R3 exetools; C:\Windows\System32\DRIVERS\exetools.sys [92672 2015-01-15] (SafeNet Inc.) [Fichier non signé]
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-11-27] (SafeNet Inc.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-01-22] (REALiX(tm))
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31712 2016-08-29] (Intel Corporation)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [44744 2014-02-03] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554416 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [63920 2016-06-07] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [86352 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [189264 2016-06-26] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [305496 2016-12-26] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1036512 2016-12-26] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [57936 2016-12-26] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [52144 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [41648 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [45488 2016-05-31] (AO Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [75696 2016-05-17] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [134880 2016-12-26] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [194480 2016-06-14] (AO Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [136408 2017-02-01] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [199736 2016-09-06] (Intel Corporation)
S3 netr28ux; C:\Windows\System32\DRIVERS\Dnetr28ux.sys [1617472 2011-04-28] (Ralink Technology Corp.)
R3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham64.sys [39168 2014-10-08] (SteelSeries Corporation)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics Co., Ltd.)
S3 SydexFDD; C:\Windows\SysWOW64\Drivers\sydexfdd.sys [13359 2012-10-16] (Windows (R) 2000 DDK provider) [Fichier non signé]
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2017-01-20] (Anchorfree Inc.)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2017-02-01] ()
R1 ucdrv; C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [23652 ] (UC Web Inc.) <==== ATTENTION
S2 wntpport; C:\Windows\SysWow64\Drivers\wntpport.sys [28416 2011-01-24] (Vireo Software)
U0 aswVmm; pas de ImagePath
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
U2 ERSvc; pas de ImagePath
U2 IAStorDataMgrsvc; pas de ImagePath
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
U2 NIHardwareService; pas de ImagePath
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
U2 Parvdm; pas de ImagePath
U2 srService; pas de ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-02-01 18:16 - 2017-02-01 18:17 - 00021257 _____ C:\Users\emb\Desktop\FRST.txt
2017-02-01 18:16 - 2017-02-01 18:16 - 00000000 ____D C:\FRST
2017-02-01 18:14 - 2017-02-01 18:14 - 02420736 _____ (Farbar) C:\Users\emb\Desktop\FRST64.exe
2017-02-01 17:29 - 2017-02-01 17:29 - 00028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-02-01 17:27 - 2017-02-01 17:27 - 00001021 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-02-01 17:27 - 2017-02-01 17:27 - 00000000 ____D C:\ProgramData\RogueKiller
2017-02-01 17:27 - 2017-02-01 17:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-02-01 17:27 - 2017-02-01 17:27 - 00000000 ____D C:\Program Files\RogueKiller
2017-02-01 17:20 - 2017-02-01 17:48 - 00003476 _____ C:\Windows\System32\Tasks\UCBrowserSecureUpdater
2017-02-01 17:16 - 2017-02-01 17:22 - 00000000 ____D C:\AdwCleaner
2017-02-01 17:15 - 2017-02-01 17:15 - 04015056 _____ C:\Users\emb\Desktop\adwcleaner_6.043.exe
2017-02-01 17:09 - 2017-02-01 17:09 - 01663040 _____ (Malwarebytes) C:\Users\emb\Desktop\JRT.exe
2017-02-01 14:51 - 2017-02-01 16:30 - 00029598 _____ C:\Pre_Scan.txt
2017-02-01 14:50 - 2017-02-01 16:30 - 00000000 ____D C:\Pre_Scan
2017-02-01 14:43 - 2017-02-01 16:33 - 00428308 _____ C:\Windows\ntbtlog.txt
2017-02-01 14:01 - 2017-02-01 14:01 - 02659840 _____ C:\Users\emb\ZHPDiag3.exe
2017-02-01 00:48 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2017-02-01 00:48 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2017-02-01 00:48 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2017-02-01 00:48 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2017-02-01 00:47 - 2017-02-01 00:56 - 00000000 ____D C:\Qoobox
2017-02-01 00:47 - 2017-02-01 00:55 - 00000000 ____D C:\Windows\erdnt
2017-01-31 16:23 - 2017-01-31 16:23 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2017-01-31 16:08 - 2017-01-31 16:24 - 00000000 ____D C:\ProgramData\HitmanPro
2017-01-31 14:15 - 2017-02-01 14:01 - 00000671 _____ C:\Users\emb\Desktop\ZHPDiag.lnk
2017-01-31 14:07 - 2017-02-01 16:45 - 00000000 ____D C:\Users\emb\AppData\Roaming\ZHP
2017-01-31 14:07 - 2017-01-31 14:07 - 00001819 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-01-31 14:07 - 2017-01-31 14:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-01-31 14:07 - 2017-01-31 14:07 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-01-30 17:49 - 2017-01-30 17:49 - 00000000 ____D C:\Users\emb\Doctor Web
2017-01-28 23:17 - 2017-01-29 16:18 - 00000199 _____ C:\Users\emb\Desktop\cccam 1.cfg
2017-01-27 19:07 - 2017-01-27 19:07 - 00000000 ____D C:\Users\emb\Downloads\Rise.Of.The.Tomb.Raider-CONSPIR4CY
2017-01-24 16:40 - 2017-01-24 16:40 - 02179856 _____ C:\Users\emb\Downloads\winrar_64_bit.exe.EXE
2017-01-24 16:40 - 2017-01-24 16:40 - 00000000 ____D C:\Users\emb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-24 16:40 - 2017-01-24 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-01-24 14:50 - 2017-01-24 14:50 - 00000862 _____ C:\Windows\system32\termcap
2017-01-24 10:25 - 2017-01-29 10:09 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\2F0332C9.sys
2017-01-22 21:51 - 2017-01-22 21:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security
2017-01-22 21:50 - 2017-02-01 18:06 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-01-22 21:50 - 2017-01-22 21:50 - 00000000 ____D C:\Windows\ELAMBKUP
2017-01-22 21:50 - 2017-01-22 21:50 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2017-01-22 21:50 - 2016-12-26 20:22 - 01036512 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2017-01-22 21:50 - 2016-12-26 20:22 - 00305496 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2017-01-22 21:50 - 2016-06-26 15:10 - 00189264 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2017-01-22 21:50 - 2013-05-06 08:13 - 00110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2017-01-22 20:55 - 2017-02-01 17:50 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2017-01-22 20:55 - 2017-01-22 20:56 - 00000000 ____D C:\Users\emb\AppData\LocalLow\IObit
2017-01-22 20:55 - 2017-01-22 20:55 - 00027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2017-01-22 20:55 - 2017-01-22 20:55 - 00000000 ____D C:\Windows\IObit
2017-01-22 20:55 - 2017-01-22 20:55 - 00000000 ____D C:\Users\emb\AppData\Roaming\IObit
2017-01-22 20:55 - 2017-01-22 20:55 - 00000000 ____D C:\ProgramData\IObit
2017-01-22 20:44 - 2017-01-22 20:44 - 00000000 ____D C:\Program Files\AVAST Software
2017-01-22 12:19 - 2017-01-22 12:19 - 00442272 _____ C:\Users\emb\Desktop\jjjj.DST
2017-01-21 15:22 - 2017-01-23 14:58 - 00000000 ____D C:\Users\emb\AppData\Roaming\vlc
2017-01-21 15:22 - 2017-01-22 23:40 - 00001030 _____ C:\Users\Public\Desktop\VLC media player.lnk
2017-01-21 15:22 - 2017-01-21 15:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-01-21 15:21 - 2017-01-21 15:21 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2017-01-20 17:28 - 2017-01-20 17:28 - 00042064 _____ (Anchorfree Inc.) C:\Windows\system32\Drivers\taphss6.sys
2017-01-16 09:11 - 2017-01-16 09:11 - 00179769 _____ C:\Users\emb\Desktop\7777.DST
2017-01-14 19:21 - 2017-01-14 19:21 - 00000000 ____D C:\Program Files\PlayReady
2017-01-14 19:18 - 2017-01-14 19:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-01-14 19:17 - 2017-01-14 19:17 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-01-14 19:17 - 2017-01-14 19:17 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-01-10 22:17 - 2017-01-10 22:17 - 00016384 _____ C:\Users\emb\Downloads\rom-0
2017-01-09 16:38 - 2017-01-09 16:38 - 00252678 _____ C:\Users\emb\Desktop\hhhhh.DST
2017-01-06 18:20 - 2017-01-06 18:20 - 00009358 _____ C:\Users\emb\Downloads\copy-of-yttrdd.DGT
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-02-01 18:16 - 2016-08-15 01:33 - 00000000 ____D C:\Users\emb\AppData\Roaming\DMCache
2017-02-01 18:14 - 2016-08-15 01:33 - 00000000 ____D C:\Users\emb\AppData\Roaming\IDM
2017-02-01 18:04 - 2016-09-20 19:51 - 00000314 _____ C:\Windows\Tasks\iToolsDaemon.job
2017-02-01 17:58 - 2009-07-14 05:50 - 00030416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-01 17:58 - 2009-07-14 05:50 - 00030416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-01 17:52 - 2016-11-18 19:47 - 00000000 ____D C:\Users\emb\AppData\LocalLow\Mozilla
2017-02-01 17:52 - 2016-08-16 14:37 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-02-01 17:51 - 2016-09-20 19:51 - 00003280 _____ C:\Windows\System32\Tasks\iToolsDaemon
2017-02-01 17:51 - 2016-08-15 01:43 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-02-01 17:50 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-01 17:20 - 2016-11-09 20:00 - 00000000 ____D C:\Users\UpdatusUser
2017-02-01 14:43 - 2016-08-15 10:03 - 00000033 _____ C:\Windows\BriTonLeapx64.INI
2017-02-01 14:01 - 2016-08-15 00:30 - 00000000 ____D C:\Users\emb
2017-02-01 12:52 - 2016-11-18 19:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-02-01 11:35 - 2016-08-15 01:34 - 00000000 ____D C:\Users\emb\Downloads\Compressed
2017-02-01 00:54 - 2009-07-14 03:34 - 00000215 _____ C:\Windows\system.ini
2017-01-31 20:18 - 2011-04-12 10:10 - 00783880 _____ C:\Windows\system32\perfh00C.dat
2017-01-31 20:18 - 2011-04-12 10:10 - 00166322 _____ C:\Windows\system32\perfc00C.dat
2017-01-31 20:18 - 2009-07-14 06:12 - 01798280 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-31 20:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-31 00:03 - 2016-12-10 21:09 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-30 23:59 - 2016-08-27 16:49 - 00000000 ____D C:\Windows\Minidump
2017-01-30 23:58 - 2016-08-27 16:49 - 702568840 _____ C:\Windows\MEMORY.DMP
2017-01-29 10:35 - 2016-08-16 13:01 - 00000000 ____D C:\Users\emb\Desktop\ايزار باسيبلا
2017-01-28 18:28 - 2016-11-05 19:00 - 00000000 ____D C:\Users\emb\Desktop\kits
2017-01-28 09:50 - 2016-08-15 11:36 - 00000000 ____D C:\desin
2017-01-28 09:42 - 2016-08-15 01:33 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-01-27 23:23 - 2016-09-17 10:45 - 00000000 ____D C:\Users\emb\AppData\LocalLow\uTorrent
2017-01-27 23:23 - 2016-09-17 10:43 - 00000000 ____D C:\Users\emb\AppData\Roaming\uTorrent
2017-01-27 18:56 - 2016-09-17 10:45 - 00000000 ___SD C:\Users\emb\AppData\LocalLow\Temp
2017-01-25 17:59 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2017-01-24 16:40 - 2016-08-15 01:02 - 00000000 ____D C:\Program Files\WinRAR
2017-01-24 15:24 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2017-01-24 14:42 - 2016-08-21 00:24 - 00000000 ____D C:\Users\emb\AppData\Local\ElevatedDiagnostics
2017-01-24 13:52 - 2009-07-14 04:20 - 00000000 __RHD C:\Users\Public\Libraries
2017-01-23 16:44 - 2016-08-28 00:35 - 00000000 ____D C:\Users\emb\Desktop\غ حساب
2017-01-22 23:40 - 2016-11-17 17:11 - 00000762 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2017-01-22 23:40 - 2016-10-25 15:08 - 00001130 _____ C:\Users\Public\Desktop\iTools 3.lnk
2017-01-22 23:40 - 2016-10-22 20:28 - 00001559 _____ C:\Users\Public\Desktop\iTunes.lnk
2017-01-22 23:40 - 2016-09-25 21:18 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-01-22 23:40 - 2016-09-25 21:18 - 00001345 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2017-01-22 23:40 - 2016-09-25 21:18 - 00001326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2017-01-22 23:40 - 2016-08-15 09:54 - 00000934 _____ C:\Users\Public\Desktop\Wilcom EmbroideryStudio e2.0.lnk
2017-01-22 23:40 - 2016-08-15 00:52 - 00001169 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-01-22 23:40 - 2016-08-15 00:45 - 00002203 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-22 23:40 - 2009-07-14 06:00 - 00001330 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2017-01-22 23:40 - 2009-07-14 06:00 - 00001246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2017-01-22 23:40 - 2009-07-14 06:00 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2017-01-22 23:39 - 2016-10-08 11:48 - 00001010 _____ C:\Users\emb\Desktop\Delta4.LNK
2017-01-22 23:39 - 2016-09-17 10:44 - 00002557 _____ C:\Users\emb\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2017-01-22 23:39 - 2016-08-22 16:50 - 00001073 _____ C:\Users\emb\Desktop\ColorSchemer Studio.lnk
2017-01-22 23:39 - 2016-08-15 00:31 - 00001469 _____ C:\Users\emb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-01-22 23:39 - 2016-08-15 00:31 - 00001435 _____ C:\Users\emb\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2017-01-22 23:39 - 2009-07-14 06:00 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2017-01-22 23:39 - 2009-07-14 05:54 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2017-01-22 21:58 - 2016-08-15 01:22 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-22 21:55 - 2016-08-16 14:40 - 00000000 ____D C:\Users\emb\AppData\Roaming\Adobe
2017-01-22 20:23 - 2016-08-15 01:21 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-16 09:20 - 2016-12-01 11:27 - 00000000 ____D C:\Users\emb\AppData\Local\SLAM
2017-01-11 00:53 - 2016-08-16 14:37 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-01-11 00:53 - 2016-08-16 14:37 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-01-11 00:53 - 2016-08-16 14:37 - 00003940 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-01-11 00:53 - 2016-08-16 14:37 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-01-11 00:53 - 2016-08-16 14:37 - 00000000 ____D C:\Windows\system32\Macromed
2017-01-09 18:37 - 2016-11-17 17:11 - 00000000 ____D C:\Users\emb\AppData\Roaming\TS3Client
2017-01-08 18:18 - 2016-08-15 00:56 - 00000000 ____D C:\ProgramData\Oracle
2017-01-08 18:13 - 2016-08-27 17:23 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-08 18:13 - 2016-08-15 01:01 - 00000000 ____D C:\Program Files\Java
2017-01-08 18:13 - 2016-08-15 00:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-08 18:11 - 2016-08-27 17:23 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-01-02 14:36 - 2009-07-14 06:08 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT
==================== Fichiers à la racine de certains dossiers =======
2016-08-22 19:18 - 2016-08-22 19:18 - 0000017 _____ () C:\Users\emb\AppData\Local\resmon.resmoncfg
2016-08-15 00:45 - 2016-08-15 00:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
Fichiers à déplacer ou supprimer:
====================
C:\Users\emb\ZHPDiag3.exe
Certains fichiers dans TEMP:
====================
2017-02-01 17:27 - 2010-11-21 04:24 - 1731936 _____ (Microsoft Corporation) C:\Users\emb\AppData\Local\Temp\dllnt_dump.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
testsigning: ==> 'testsigning' est activé. Rechercher un éventuel pilote non signé <===== ATTENTION
LastRegBack: 2017-01-23 12:33
==================== Fin de FRST.txt ============================