Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 10-02-2017
Exécuté par jean-christophe (administrateur) sur PC-FIXE (11-02-2017 15:03:17)
Exécuté depuis C:\Users\jean-christophe\Desktop
Profils chargés: jean-christophe (Profils disponibles: jean-christophe)
Platform: Windows 7 Professional Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(CobianSoft, Luis Cobian) C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe
(Luis Cobian, CobianSoft) C:\Program Files (x86)\Cobian Backup 11\cbService.exe
(Cybereason) C:\Program Files (x86)\Cybereason\RansomFree\CybereasonRansomFreeServiceHost.exe
(Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(PLJ Soft) C:\Program Files (x86)\MainSoft\PC TimeWatch\PTWsvc.exe
(Dell) C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEService64.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
() C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Cybereason) C:\Program Files (x86)\Cybereason\RansomFree\CybereasonRansomFree.exe
(Sonix) C:\Windows\vsnp2uvc.exe
(OVH) C:\Program Files\OVH\hubiC\hubiC.exe
(Hewlett-Packard Co.) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
(PLJ Soft) C:\Program Files (x86)\MainSoft\PC TimeWatch\PctwTI.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(IVT Corporation) C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\regedit.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [snp2uvc] => C:\Windows\vsnp2uvc.exe [662016 2009-06-22] (Sonix)
HKLM-x32\...\Run: [hpqSRMon] => C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe [150528 2008-07-22] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2867712 2017-01-09] (Dominik Reichl)
HKLM-x32\...\Run: [AdobeCS4ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\IVT Corporation\BlueSoleil\BtTray.exe [319574 2010-10-25] (IVT Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565960 2016-11-11] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-12-12] (Oracle Corporation)
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\Run: [KeePass Password Safe 2] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [2867712 2017-01-09] (Dominik Reichl)
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd)
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\Run: [hubiC] => C:\Program Files\OVH\hubiC\hubiC.exe [3527168 2015-03-03] (OVH)
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\Run: [Prolific_OneButton] => C:\Program Files (x86)\Prolific Technology Inc.\Prolific Backup\OneBtn.exe [139264 2011-05-10] (Prolific Technology Inc.)
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\Policies\Explorer: [NoDrives] 2
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\MountPoints2: {45e22f43-651d-11e5-b92e-00241dd14502} - G:\Startme.exe
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\MountPoints2: {bb11f566-a5d5-11e6-a705-005056c00008} - G:\LG_PC_Programs.exe
HKU\S-1-5-18\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [1407912 2017-01-16] (Garmin Ltd. or its subsidiaries)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-03-27] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-09-26] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-09-26] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2014-09-26] ()
ShellIconOverlayIdentifiers: [01UnsuppModule] -> {AEB16659-2125-4ADA-A4AB-45EE21E86469} => C:\Users\jean-christophe\AppData\Local\CloudStation\app\icon-overlay\10\x64\iconOverlay.dll [2014-12-18] (TODO: )
ShellIconOverlayIdentifiers: [02SyncingModule] -> {48AB5ADA-36B1-4137-99C9-2BD97F8788AB} => C:\Users\jean-christophe\AppData\Local\CloudStation\app\icon-overlay\10\x64\iconOverlay.dll [2014-12-18] (TODO: )
ShellIconOverlayIdentifiers: [03SyncedModule] -> {472CE1AD-5D53-4BCF-A1FB-3982A5F55138} => C:\Users\jean-christophe\AppData\Local\CloudStation\app\icon-overlay\10\x64\iconOverlay.dll [2014-12-18] (TODO: )
ShellIconOverlayIdentifiers: [04ReadOnlyModule] -> {A433C3E0-8B24-40EB-93C3-4B10D9959F58} => C:\Users\jean-christophe\AppData\Local\CloudStation\app\icon-overlay\10\x64\iconOverlay.dll [2014-12-18] (TODO: )
ShellIconOverlayIdentifiers: [05NoPermModule] -> {C701AD67-3DF0-47C9-89CB-DFA6207BE229} => C:\Users\jean-christophe\AppData\Local\CloudStation\app\icon-overlay\10\x64\iconOverlay.dll [2014-12-18] (TODO: )
ShellIconOverlayIdentifiers: [HubicBackupRootOverlayHandler] -> {2DF0C6DB-1E85-4894-9D4F-63CB0EAB17EA} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicPublishedItemOverlayHandler] -> {7C76B697-27DF-4CFF-9909-863905561298} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicSyncItemOverlayHandler] -> {9B497753-D273-4A80-9DE8-72248D7FA595} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicUnsyncItemOverlayHandler] -> {D5454A6E-0904-4BA3-9E4A-240A5080259D} => C:\Windows\system32\mscoree.dll [2010-11-05] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2014-04-02]
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PC TimeWatch Tray Icon.lnk [2015-03-12]
ShortcutTarget: PC TimeWatch Tray Icon.lnk -> C:\Program Files (x86)\MainSoft\PC TimeWatch\PctwTI.exe (PLJ Soft)
GroupPolicy\User: Restriction <======= ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\..\Interfaces\{30F6575C-B716-4722-8DDD-82C0D2B481D2}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{30F6575C-B716-4722-8DDD-82C0D2B481D2}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fr-fr/?ocid=iehp
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-11-11] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-11] (Oracle Corporation)
BHO-x32: Pas de nom -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> Pas de fichier
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\ssv.dll [2017-01-18] (Oracle Corporation)
BHO-x32: Programme d’aide de l’Assistant de connexion au compte Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-18] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
Toolbar: HKU\S-1-5-21-1968361692-1069487814-2825299106-1001 -> Pas de nom - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Pas de fichier
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\jean-christophe\AppData\Roaming\Nightingale\Profiles\ql5p2xes.default [2017-01-24]
FF Extension: (Last.fm) - C:\Users\jean-christophe\AppData\Roaming\Nightingale\Profiles\ql5p2xes.default\Extensions\audioscrobbler@getnightingale.com [2017-01-24] [non signé]
FF Extension: (SHOUTcast Radio) - C:\Users\jean-christophe\AppData\Roaming\Nightingale\Profiles\ql5p2xes.default\Extensions\shoutcast-radio@getnightingale.com [2017-01-24] [non signé]
FF Extension: (MLyrics) - C:\Users\jean-christophe\AppData\Roaming\Nightingale\Profiles\ql5p2xes.default\Extensions\{6039188e-d135-11df-bcc9-c7e1ded72085} [2017-01-24] [non signé]
FF Extension: (Artwork Extras) - C:\Program Files (x86)\Nightingale\extensions\albumart@songbirdnest.com [2017-01-24] [non signé]
FF Extension: (Blue Monday Feather) - C:\Program Files (x86)\Nightingale\extensions\bluemonday@getnightingale.com [2017-01-24] [non signé]
FF Extension: (FolderSync Branding) - C:\Program Files (x86)\Nightingale\extensions\foldersync-ng@getnightingale.com [2017-01-24] [non signé]
FF Extension: (FolderSync) - C:\Program Files (x86)\Nightingale\extensions\foldersync@rsjtdrjgfuzkfg.com [2017-01-24] [non signé]
FF Extension: (gonzo) - C:\Program Files (x86)\Nightingale\extensions\gonzo@songbirdnest.com [2017-01-24] [non signé]
FF Extension: (Pink Martini) - C:\Program Files (x86)\Nightingale\extensions\pinkmartini@songbirdnest.com [2017-01-24] [non signé]
FF Extension: (Playlist Folders) - C:\Program Files (x86)\Nightingale\extensions\playlistfolders@getnightingale.com [2017-01-24] [non signé]
FF Extension: (Purple Rain) - C:\Program Files (x86)\Nightingale\extensions\purplerain@songbirdnest.com [2017-01-24] [non signé]
FF ProfilePath: C:\Users\jean-christophe\AppData\Roaming\Mozilla\Firefox\Profiles\v2o06zuw.default-1477322881142 [2017-02-11]
FF Extension: (KeeFox) - C:\Users\jean-christophe\AppData\Roaming\Mozilla\Firefox\Profiles\v2o06zuw.default-1477322881142\Extensions\keefox@chris.tomlinson [2016-11-22]
FF Extension: (Adblock Plus) - C:\Users\jean-christophe\AppData\Roaming\Mozilla\Firefox\Profiles\v2o06zuw.default-1477322881142\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2014-04-02] [non signé]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => non trouvé(e)
FF HKU\S-1-5-21-1968361692-1069487814-2825299106-1001\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-11] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2014-10-01] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2014-10-01] (Adobe Systems)

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default [2017-02-11]
CHR Extension: (Google Docs) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-04]
CHR Extension: (YouTube) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-01]
CHR Extension: (Adblock Plus) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-11-05]
CHR Extension: (NetExtender Launcher) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\comamnkieeagpjjdfonbapjefalbbgoj [2014-06-21]
CHR Extension: (Recherche Google) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-04]
CHR Extension: (Adobe Acrobat) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-01-29]
CHR Extension: (Bookmarks Menu) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffmdedmghpoipeldijkdlcckdpempkdi [2014-03-26]
CHR Extension: (Google Docs hors connexion) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-29]
CHR Extension: (Gmail) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-11]
CHR Extension: (Chrome Media Router) - C:\Users\jean-christophe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-11]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-03] (Advanced Micro Devices, Inc.) [Fichier non signé]
R2 BlueSoleilCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BlueSoleilCS.exe [1765484 2010-10-26] (IVT Corporation) [Fichier non signé]
R2 BRA_Scheduler; C:\Program Files (x86)\Brother\BRAdmin Professional 3\bratimer.exe [99328 2013-05-31] () [Fichier non signé]
R3 BsHelpCS; C:\Program Files (x86)\IVT Corporation\BlueSoleil\BsHelpCS.exe [192000 2010-10-25] (IVT Corporation) [Fichier non signé]
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437784 2016-04-12] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417304 2016-04-12] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe [433688 2016-04-12] (BlueStack Systems, Inc.)
S3 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [921112 2016-04-12] (BlueStack Systems, Inc.)
R2 cbVSCService11; C:\Program Files (x86)\Cobian Backup 11\cbVSCService11.exe [67584 2012-12-05] (CobianSoft, Luis Cobian) [Fichier non signé]
R2 CobianBackup11; C:\Program Files (x86)\Cobian Backup 11\cbService.exe [1131008 2012-12-05] (Luis Cobian, CobianSoft) [Fichier non signé]
R2 CybereasonRansomFree; C:\Program Files (x86)\Cybereason\RansomFree\CybereasonRansomFreeServiceHost.exe [18368 2017-01-24] (Cybereason)
R2 Garmin Device Interaction Service; C:\Program Files (x86)\Garmin\Device Interaction Service\GarminService.exe [1039376 2017-01-16] (Garmin Ltd. or its subsidiaries)
R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2627080 2016-11-11] (LogMeIn Inc.)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [Fichier non signé]
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [Fichier non signé]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [Fichier non signé]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1039360 2010-10-22] (Hewlett-Packard Co.) [Fichier non signé]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-11-11] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Fichier non signé]
R2 PTWsvc; C:\Program Files (x86)\MainSoft\PC TimeWatch\PTWsvc.exe [1036800 2013-12-13] (PLJ Soft) [Fichier non signé]
R2 SONICWALL_NetExtender; C:\Program Files (x86)\SonicWALL\SSL-VPN\NetExtender\NEService64.exe [589312 2013-10-24] (Dell)
R2 SynoDrService; C:\Program Files (x86)\Synology Data Replicator 3\SynoDrServicex64.exe [384072 2013-10-09] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 ProductAgentService; "C:\Program Files\Bitdefender Agent\ProductAgentService.exe" [X]

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
U5 BlueletAudio; C:\Windows\System32\Drivers\BlueletAudio.sys [36360 2009-06-17] (IVT Corporation.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [154680 2016-04-12] (BlueStack Systems)
R2 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [270904 2016-04-06] (Bluestack System Inc. )
S3 BT; C:\Windows\System32\DRIVERS\btnetdrv.sys [20488 2010-08-18] (IVT Corporation.)
S3 BTCOM; C:\Windows\System32\DRIVERS\btcomport.sys [29448 2010-08-26] (IVT Corporation.)
R3 BTCOMBUS; C:\Windows\System32\Drivers\btcombus.sys [25352 2010-08-26] (IVT Corporation.)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [42888 2010-06-24] (IVT Corporation.)
R0 BtHidBus; C:\Windows\System32\Drivers\BtHidBus.sys [23944 2010-04-06] (IVT Corporation.)
R3 btnetBUs; C:\Windows\System32\Drivers\btnetBus.sys [30088 2010-04-06] ()
S3 ggsomc; C:\Windows\System32\DRIVERS\ggsomc.sys [30424 2015-09-16] (Sony Mobile Communications)
R3 IvtBtBUs; C:\Windows\System32\Drivers\IvtBtBus.sys [27016 2010-04-06] (IVT Corporation.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 NADUSBAudio; C:\Windows\System32\DRIVERS\NADUSBAudio_x64.sys [248592 2012-12-05] ()
S3 NADUSBAudioks; C:\Windows\System32\DRIVERS\NADUSBAudioks_x64.sys [52496 2012-12-05] ()
R3 NxDrv; C:\Windows\System32\DRIVERS\NxDrv.sys [24264 2013-10-24] (SonicWALL Inc.)
R3 PTWDrv; C:\Program Files (x86)\MainSoft\PC TimeWatch\PTWatch64.sys [13264 2013-12-05] (Windows (R) Codename Longhorn DDK provider)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [3531136 2009-06-23] ()
S3 usbUDisc; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [18392 2013-01-25] (Scott)
R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [131144 2016-12-20] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [205440 2016-12-20] (Oracle Corporation)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [106256 2013-07-04] (Oracle Corporation)
R0 vsock; C:\Windows\System32\drivers\vsock.sys [75512 2015-11-05] (VMware, Inc.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
U5 BlueletAudio; C:\Windows\SysWOW64\Drivers\BlueletAudio.sys [36360 2009-06-17] (IVT Corporation.)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-02-11 15:03 - 2017-02-11 15:03 - 00027503 _____ C:\Users\jean-christophe\Desktop\FRST.txt
2017-02-11 15:03 - 2017-02-11 15:03 - 00000000 ____D C:\FRST
2017-02-11 15:02 - 2017-02-11 15:02 - 02421248 _____ (Farbar) C:\Users\jean-christophe\Desktop\FRST64.exe
2017-02-11 14:14 - 2017-02-11 14:14 - 02661376 _____ C:\Users\jean-christophe\Downloads\ZHPDiag3(1).exe
2017-02-11 14:12 - 2017-02-11 14:12 - 00507547 _____ C:\Users\QNp9\master_life.xlsx
2017-02-11 14:12 - 2017-02-11 14:12 - 00503491 _____ C:\Users\Akyghkyz\absorb.cutting.xlsx
2017-02-11 14:12 - 2017-02-11 14:12 - 00218346 _____ C:\Users\Akyghkyz\employment_elect_sherman.mdb
2017-02-11 14:12 - 2017-02-11 14:12 - 00216560 _____ C:\Users\QNp9\viewed.cumbersome.dartmouth.mdb
2017-02-11 14:12 - 2017-02-11 14:12 - 00073821 _____ C:\Users\QNp9\deafenliberty.xls
2017-02-11 14:12 - 2017-02-11 14:12 - 00062587 _____ C:\Users\Akyghkyz\think fuse sixties security.xls
2017-02-11 14:12 - 2017-02-11 14:12 - 00058358 _____ C:\Users\QNp9\acceptable minimum.pem
2017-02-11 14:12 - 2017-02-11 14:12 - 00056089 _____ C:\Users\Akyghkyz\invariably-anne.pem
2017-02-11 14:12 - 2017-02-11 14:12 - 00037112 _____ C:\Users\Akyghkyz\A1POW4zqnD3.txt
2017-02-11 14:12 - 2017-02-11 14:12 - 00033077 _____ C:\Users\QNp9\smithcounties.txt
2017-02-11 14:12 - 2017-02-11 14:12 - 00020455 _____ C:\Users\Akyghkyz\c2ymu.sql
2017-02-11 14:12 - 2017-02-11 14:12 - 00013061 _____ C:\Users\QNp9\why-possessed-monthly.sql
2017-02-11 14:12 - 2017-02-11 14:12 - 00000000 __SHD C:\Users\jean-christophe\Desktop\ This folder protects against ransomware. Modifying it will reduce protection
2017-02-11 14:12 - 2017-02-11 14:12 - 00000000 ___HD C:\Users\QNp9
2017-02-11 14:12 - 2017-02-11 14:12 - 00000000 ___HD C:\Users\jean-christophe\Documents\Xlog134
2017-02-11 14:12 - 2017-02-11 14:12 - 00000000 ___HD C:\Users\jean-christophe\Documents\Amconfiguration166
2017-02-11 14:12 - 2017-02-11 14:12 - 00000000 ___HD C:\Users\Akyghkyz
2017-02-11 14:12 - 2017-02-11 14:12 - 00000000 ____D C:\ALimages246
2017-02-11 14:12 - 2017-02-11 14:12 - 00000000 ____D C:\_hversions251
2017-02-11 14:09 - 2017-02-11 14:09 - 00002079 _____ C:\Users\jean-christophe\Desktop\ZHPFixReport.txt
2017-02-11 14:06 - 2017-02-11 14:06 - 00001853 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-02-11 14:06 - 2017-02-11 14:06 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-02-11 14:05 - 2017-02-11 14:06 - 03521617 _____ (Nicolas Coolman ) C:\Users\jean-christophe\Downloads\zhpfix_2015.10.19.9.exe
2017-02-11 12:36 - 2017-02-11 14:17 - 00191707 _____ C:\Users\jean-christophe\Desktop\ZHPDiag.txt
2017-02-11 12:25 - 2017-02-11 12:25 - 00213691 _____ C:\ProgramData\cl.uninstall.1486812229.bdinstall.bin
2017-02-11 12:23 - 2017-02-11 12:23 - 02661376 _____ C:\Users\jean-christophe\Downloads\ZHPDiag3.exe
2017-02-11 12:19 - 2017-02-11 12:19 - 00020423 _____ C:\ProgramData\agent.1486811936.bdinstall.bin
2017-02-11 11:49 - 2017-02-11 11:49 - 05282312 _____ C:\Windows\system32\FNTCACHE.DAT
2017-02-10 22:30 - 2017-02-10 22:30 - 03812134 _____ (SOSVirus) C:\Users\jean-christophe\Downloads\UsbFix_9.025.exe
2017-02-10 22:30 - 2017-02-10 22:30 - 00000000 ____D C:\UsbFix
2017-02-10 21:50 - 2017-02-10 21:50 - 00645729 _____ (WDS Team) C:\Users\jean-christophe\Downloads\windirstat1_1_2_setup.exe
2017-02-10 21:50 - 2017-02-10 21:50 - 00001035 _____ C:\Users\jean-christophe\Desktop\WinDirStat.lnk
2017-02-10 21:50 - 2017-02-10 21:50 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinDirStat
2017-02-10 21:50 - 2017-02-10 21:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinDirStat
2017-02-10 21:50 - 2017-02-10 21:50 - 00000000 ____D C:\Program Files (x86)\WinDirStat
2017-02-09 22:03 - 2017-02-09 22:03 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Drakensang Online
2017-02-09 19:05 - 2017-02-09 19:05 - 00293012 _____ C:\Users\jean-christophe\Downloads\April mon assurance.zip
2017-02-08 18:29 - 2017-02-08 18:33 - 00000000 ____D C:\VueScan
2017-01-30 21:08 - 2017-01-30 21:08 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2017-01-30 21:07 - 2017-01-30 21:07 - 00087686 _____ C:\Users\jean-christophe\Downloads\ReleveIdentiteBancaire(1).pdf
2017-01-30 20:03 - 2017-01-30 20:03 - 05786622 _____ (DoYourData ) C:\Users\jean-christophe\Downloads\DoYourDataRecoveryTrial.exe
2017-01-30 20:03 - 2017-01-30 20:03 - 00000029 _____ C:\Users\jean-christophe\Downloads\datarecovery licence.txt
2017-01-28 21:09 - 2017-01-28 21:09 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-01-28 17:12 - 2017-02-10 21:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2017-01-24 22:53 - 2017-01-24 22:53 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Nightingale
2017-01-24 22:52 - 2017-01-24 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nightingale
2017-01-24 22:52 - 2017-01-24 22:52 - 00000000 ____D C:\Program Files (x86)\Nightingale
2017-01-24 22:49 - 2017-01-24 22:49 - 15257816 _____ (Nightingale Community ) C:\Users\jean-christophe\Downloads\Nightingale_1.12.1-2454_windows-i686.exe
2017-01-24 22:45 - 2017-01-24 22:45 - 03958405 _____ (foobar2000.org) C:\Users\jean-christophe\Downloads\foobar2000_v1.3.14.exe
2017-01-24 21:02 - 2017-01-24 21:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cybereason RansomFree
2017-01-22 21:56 - 2017-01-22 21:56 - 00000000 ____D C:\Windows\twain_64
2017-01-19 21:45 - 2017-01-19 21:45 - 00055889 _____ C:\Users\jean-christophe\Downloads\TH-Avis-PrimTIP-2016-16630448845376.pdf
2017-01-19 21:44 - 2017-01-19 21:44 - 00118528 _____ C:\Users\jean-christophe\Downloads\TF-Avis-PrimTIP-2016-1663417386746.pdf
2017-01-18 18:41 - 2017-02-11 12:24 - 00028053 _____ C:\bdlog.txt
2017-01-18 18:34 - 2017-01-18 18:34 - 00368633 _____ C:\ProgramData\cl.1484750045.bdinstall.bin
2017-01-18 15:37 - 2017-01-18 15:37 - 00000385 _____ C:\Windows\system32\user_gensett.xml
2017-01-18 15:36 - 2017-01-18 15:36 - 00000000 ____D C:\ProgramData\BDLogging
2017-01-18 15:36 - 2007-04-11 11:11 - 00511328 _____ (Microsoft Corporation) C:\Windows\capicom.dll
2017-01-18 15:34 - 2017-01-18 15:34 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\QuickScan
2017-01-18 15:29 - 2017-01-18 15:29 - 00003640 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2017-01-18 15:27 - 2017-02-11 12:19 - 00000000 ____D C:\Program Files\Bitdefender Agent
2017-01-18 15:27 - 2017-01-18 15:27 - 00047005 _____ C:\ProgramData\agent.1484749663.bdinstall.bin
2017-01-18 15:27 - 2017-01-18 15:27 - 00000000 ____D C:\ProgramData\Bitdefender Agent
2017-01-18 15:25 - 2017-01-18 15:25 - 11842680 _____ C:\Users\jean-christophe\Downloads\bitdefender_isecurity.exe
2017-01-18 15:24 - 2017-01-18 15:24 - 11842712 _____ C:\Users\jean-christophe\Downloads\bitdefender_antivirus.exe
2017-01-18 15:12 - 2017-01-18 15:12 - 00001034 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-01-18 15:12 - 2017-01-18 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-01-18 15:12 - 2017-01-18 15:12 - 00000000 ____D C:\Program Files\VS Revo Group
2017-01-18 03:54 - 2017-01-18 03:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2017-01-14 13:27 - 2017-01-14 13:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prolific Storage
2017-01-14 13:27 - 2017-01-14 13:27 - 00000000 ____D C:\Program Files (x86)\Prolific Technology Inc

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-02-11 14:54 - 2009-07-14 05:45 - 00025216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-02-11 14:54 - 2009-07-14 05:45 - 00025216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-02-11 14:29 - 2013-12-30 12:42 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-02-11 14:20 - 2015-08-31 10:03 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0e3cbe95795a8.job
2017-02-11 14:15 - 2016-05-11 00:09 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d1ab10f44ea73a.job
2017-02-11 14:15 - 2015-02-04 23:04 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d040c689d2a29f.job
2017-02-11 14:15 - 2014-11-04 22:06 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\ZHP
2017-02-11 14:15 - 2009-07-14 16:24 - 00750042 _____ C:\Windows\system32\perfh00C.dat
2017-02-11 14:15 - 2009-07-14 16:24 - 00151092 _____ C:\Windows\system32\perfc00C.dat
2017-02-11 14:15 - 2009-07-14 06:13 - 01676534 _____ C:\Windows\system32\PerfStringBackup.INI
2017-02-11 14:15 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-02-11 14:14 - 2016-11-15 22:30 - 00000000 ____D C:\Users\jean-christophe\AppData\LocalLow\Mozilla
2017-02-11 14:14 - 2016-02-02 18:09 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d15ddc6bf37e28.job
2017-02-11 14:14 - 2015-12-04 18:09 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d12eb69a827a82.job
2017-02-11 14:14 - 2015-09-16 15:15 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0f08a147d67ed.job
2017-02-11 14:14 - 2015-05-19 18:10 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d09256b64ac2b6.job
2017-02-11 14:13 - 2014-11-04 22:06 - 00000829 _____ C:\Users\jean-christophe\Desktop\ZHPDiag.lnk
2017-02-11 14:11 - 2016-05-11 00:09 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1ab10f4289136.job
2017-02-11 14:11 - 2016-04-11 20:35 - 00000000 ____D C:\ProgramData\VMware
2017-02-11 14:11 - 2016-02-02 18:09 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d15ddc6bc8eb19.job
2017-02-11 14:11 - 2015-12-04 18:09 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d12eb69a61273e.job
2017-02-11 14:11 - 2015-08-31 10:03 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0e3cbe93985e7.job
2017-02-11 14:11 - 2015-07-16 18:09 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0bfea362e69e9.job
2017-02-11 14:11 - 2015-06-03 19:47 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\hubiC
2017-02-11 14:11 - 2015-05-19 18:10 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d09256b629ccba.job
2017-02-11 14:11 - 2015-03-17 22:03 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\KeePass
2017-02-11 14:11 - 2015-02-04 23:04 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d040c689b0e950.job
2017-02-11 14:11 - 2013-12-30 12:30 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2017-02-11 14:10 - 2016-12-07 17:46 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-02-11 14:10 - 2010-10-26 10:04 - 00001089 _____ C:\Windows\SysWOW64\bscs.ini
2017-02-11 14:10 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-02-11 14:09 - 2014-06-19 17:47 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8bde3a63df4f.job
2017-02-11 14:08 - 2015-07-16 18:09 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0bfea364d640d.job
2017-02-11 14:06 - 2014-11-04 22:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-02-11 12:14 - 2013-12-30 11:40 - 00000000 ____D C:\Users\jean-christophe
2017-02-10 22:21 - 2014-10-05 16:14 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Notepad++
2017-02-10 21:34 - 2014-03-26 12:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-10 21:34 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\schemas
2017-02-10 21:31 - 2015-03-22 15:21 - 00000000 ____D C:\Users\jean-christophe\.VirtualBox
2017-02-10 21:30 - 2015-06-27 16:38 - 00000000 ____D C:\Program Files\VueScan
2017-02-10 21:20 - 2014-11-12 14:34 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2017-02-10 21:11 - 2014-04-23 13:38 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-02-10 21:00 - 2016-07-23 21:58 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AeriaGames
2017-02-10 21:00 - 2015-10-10 16:29 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2017-02-10 20:56 - 2016-02-27 19:09 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-02-10 20:56 - 2016-02-09 19:45 - 00000000 ____D C:\Program Files (x86)\Steam
2017-02-10 20:07 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicyUsers
2017-02-09 22:03 - 2016-05-24 21:21 - 00001972 _____ C:\Users\jean-christophe\Desktop\Drakensang Online.lnk
2017-02-09 22:03 - 2016-05-24 21:21 - 00000000 ____D C:\Program Files (x86)\Drakensang Online
2017-02-09 21:55 - 2016-11-22 19:27 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Audacity
2017-02-08 19:57 - 2014-03-22 18:41 - 00000000 ____D C:\Users\jean-christophe\Desktop\fabienne
2017-02-07 19:17 - 2013-12-30 12:31 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-05 21:23 - 2015-07-25 18:32 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Skype
2017-01-29 21:46 - 2016-07-24 09:45 - 00005050 _____ C:\Windows\SysWOW64\LOCALSERVICE.INI
2017-01-29 21:19 - 2014-03-29 21:50 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\vlc
2017-01-29 17:38 - 2016-07-24 09:45 - 00000099 _____ C:\Windows\SysWOW64\LOCALDEVICE.INI
2017-01-29 11:22 - 2016-12-15 19:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-24 22:55 - 2014-09-24 14:27 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\foobar2000
2017-01-24 22:52 - 2014-09-24 14:26 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\foobar2000.lnk
2017-01-24 22:52 - 2014-09-24 14:26 - 00000000 ____D C:\Program Files (x86)\foobar2000
2017-01-24 22:22 - 2016-05-01 16:41 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\MuseScore
2017-01-24 21:02 - 2017-01-05 21:50 - 00003992 _____ C:\Windows\System32\Tasks\Cybereason RansomFree Keepalive
2017-01-24 21:02 - 2017-01-05 21:50 - 00003098 _____ C:\Windows\System32\Tasks\Cybereason RansomFree Autostart
2017-01-22 21:56 - 2015-06-27 16:38 - 00001001 _____ C:\ProgramData\Microsoft\Windows\Start Menu\VueScan x64.lnk
2017-01-22 21:56 - 2015-06-27 16:38 - 00000995 _____ C:\Users\Public\Desktop\VueScan x64.lnk
2017-01-22 21:37 - 2014-08-29 13:15 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\HpUpdate
2017-01-19 21:42 - 2016-01-04 21:22 - 00000000 ____D C:\Users\jean-christophe\Desktop\travaux montmeyan
2017-01-19 18:15 - 2015-06-03 19:48 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-01-19 18:13 - 2014-12-23 18:16 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-18 19:04 - 2014-04-02 17:51 - 00000000 ____D C:\ProgramData\Oracle
2017-01-18 19:01 - 2014-10-15 18:37 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-01-18 19:01 - 2014-10-15 18:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-18 19:01 - 2014-10-15 18:36 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-18 18:59 - 2015-07-25 18:32 - 00000000 ____D C:\ProgramData\Skype
2017-01-18 03:55 - 2014-12-18 19:10 - 00000000 ____D C:\Program Files (x86)\Garmin
2017-01-18 03:55 - 2013-12-30 11:44 - 00000000 ____D C:\ProgramData\Package Cache
2017-01-18 03:54 - 2014-12-18 19:10 - 00003556 _____ C:\Windows\System32\Tasks\GarminUpdaterTask
2017-01-15 15:31 - 2014-04-05 17:01 - 00000000 ____D C:\Users\jean-christophe\AppData\Roaming\Gestionnaire de Téléchargements Qobuz
2017-01-14 13:27 - 2014-03-26 18:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-01-12 19:51 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache

==================== Fichiers à la racine de certains dossiers =======

2014-04-02 20:17 - 2017-01-22 22:10 - 0001456 _____ () C:\Users\jean-christophe\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2017-02-10 22:09 - 2017-02-10 22:09 - 0136638 _____ () C:\Users\jean-christophe\AppData\Local\ars.cache
2017-02-10 22:09 - 2017-02-10 22:09 - 0396219 _____ () C:\Users\jean-christophe\AppData\Local\census.cache
2017-02-10 21:41 - 2017-02-10 21:41 - 0000036 _____ () C:\Users\jean-christophe\AppData\Local\housecall.guid.cache
2014-04-02 16:47 - 2017-02-05 12:39 - 0000600 _____ () C:\Users\jean-christophe\AppData\Local\PUTTY.RND
2017-01-14 11:27 - 2017-01-14 11:27 - 0000017 _____ () C:\Users\jean-christophe\AppData\Local\resmon.resmoncfg
2016-06-22 21:23 - 2016-06-22 21:23 - 0005770 _____ () C:\Users\jean-christophe\AppData\Local\transitiontransition_27b5436a0707603a4af4014bbc4f2c92.ini
2017-01-18 15:27 - 2017-01-18 15:27 - 0047005 _____ () C:\ProgramData\agent.1484749663.bdinstall.bin
2017-02-11 12:19 - 2017-02-11 12:19 - 0020423 _____ () C:\ProgramData\agent.1486811936.bdinstall.bin
2017-01-18 18:34 - 2017-01-18 18:34 - 0368633 _____ () C:\ProgramData\cl.1484750045.bdinstall.bin
2017-02-11 12:25 - 2017-02-11 12:25 - 0213691 _____ () C:\ProgramData\cl.uninstall.1486812229.bdinstall.bin
2014-04-02 20:25 - 2014-04-02 20:30 - 0001212 _____ () C:\ProgramData\hpzinstall.log

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-02-03 19:30

==================== Fin de FRST.txt ============================