Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 19-02-2017
Exécuté par shagu (administrateur) sur DESKTOP-1S8FNS1 (20-02-2017 18:02:17)
Exécuté depuis C:\Users\shagu\Desktop\sécurity
Profils chargés: shagu (Profils disponibles: defaultuser0 & shagu)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Sage France) C:\Program Files (x86)\Sage\Declarations Sociales\Serveur\DeclarationsSociales.Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 3\Integrator.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7903.40527.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7903.40527.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16122.10291.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.25.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [317824 2016-01-18] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [HL4NcEOHkO] => "C:\Program Files\6DYKRFS7QP\6DYKRFS7Q.exe"
HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\MountPoints2: {07056a90-c299-11e6-8215-806e6f6e6963} - "D:\VTech_toy_Setup.exe"
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{28515481-706b-4d57-898b-529b75b50f2b}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{5e598de2-6db1-4d79-a9c6-d89f1c748cf7}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-02-20] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-20] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
Edge:
======
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2017-02-20]
Edge Extension: (Office Online) -> 2016_MicrosoftOfficeOnline_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.OfficeOnline_1.5.0.0_neutral__8wekyb3d8bbwe [2017-02-20]
Edge Extension: (Ghostery) -> EdgeExtension_GhosteryGhostery_kzkqe0pn505dg => C:\Program Files\WindowsApps\Ghostery.Ghostery_7.1.1.0_neutral__kzkqe0pn505dg [2017-02-20]
FireFox:
========
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-02-20] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] -
CHR HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] -
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] -
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699904 2016-12-28] (Microsoft Corporation)
R2 DeclarationsSociales; C:\Program Files (x86)\Sage\Declarations Sociales\Serveur\DeclarationsSociales.Service.exe [15416 2016-06-16] (Sage France)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269400 2017-01-17] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-02-03] (Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-02-03] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2017-01-20] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176584 2017-02-20] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [110536 2017-02-20] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-02-20] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-20] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-02-20] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2016-07-16] (Realtek Semiconductor Corporation )
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2017-02-20] ()
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-02-20 17:51 - 2017-02-20 17:51 - 00000000 ___HD C:\OneDriveTemp
2017-02-20 16:22 - 2017-02-20 16:22 - 00028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2017-02-20 16:22 - 2017-02-20 16:22 - 00000000 ____D C:\ProgramData\RogueKiller
2017-02-20 16:20 - 2017-02-20 16:20 - 25983048 _____ C:\Users\shagu\Desktop\RogueKillerX64.exe
2017-02-20 16:13 - 2017-02-20 18:02 - 00000000 ____D C:\Users\shagu\Desktop\sécurity
2017-02-20 15:31 - 2017-02-20 15:31 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\03F85B0D.sys
2017-02-20 15:27 - 2017-02-20 15:31 - 00176584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-02-20 15:26 - 2017-02-20 17:49 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-02-20 15:26 - 2017-02-20 17:49 - 00110536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-02-20 15:26 - 2017-02-20 17:49 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-02-20 15:26 - 2017-02-20 17:49 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-02-20 15:26 - 2017-02-20 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-02-20 15:26 - 2017-02-20 15:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-02-20 15:26 - 2017-02-20 15:26 - 00000000 ____D C:\Program Files\Malwarebytes
2017-02-20 15:26 - 2017-01-20 07:47 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-02-20 14:57 - 2017-02-20 15:07 - 00000000 ____D C:\Users\shagu\AppData\Roaming\ZHP
2017-02-20 14:23 - 2017-02-20 14:45 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-02-20 13:25 - 2017-02-20 13:25 - 00031848 _____ C:\Users\shagu\OneDrive\Documents\fixlist.txt
2017-02-20 13:16 - 2017-02-20 15:38 - 00000000 ____D C:\Program Files (x86)\Werroge
2017-02-20 13:16 - 2017-02-20 13:16 - 00006030 _____ C:\WINDOWS\System32\Tasks\Nimasy Engine
2017-02-20 13:16 - 2017-02-20 13:16 - 00000000 ____D C:\Users\shagu\AppData\Local\Naetion
2017-02-20 13:16 - 2017-02-20 13:16 - 00000000 ____D C:\Program Files (x86)\Nimasy Engine
2017-02-20 07:43 - 2017-02-20 14:25 - 00000000 ____D C:\FRST
2017-02-20 06:53 - 2017-02-20 15:38 - 00000000 ____D C:\Program Files (x86)\Reozerph
2017-02-20 06:32 - 2017-02-20 14:51 - 00000000 ____D C:\AdwCleaner
2017-02-20 06:31 - 2017-02-20 06:31 - 04015056 _____ C:\Users\shagu\Downloads\adwcleaner_6.043.exe
2017-02-20 05:57 - 2017-02-20 05:57 - 00000000 ____D C:\ProgramData\GlarySoft
2017-02-20 05:50 - 2017-02-20 17:50 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 3
2017-02-20 05:50 - 2017-02-20 06:50 - 00000364 _____ C:\WINDOWS\Tasks\GlaryInitialize 3.job
2017-02-20 05:50 - 2017-02-20 05:50 - 00002692 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 3
2017-02-20 05:50 - 2017-02-20 05:50 - 00001195 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3.lnk
2017-02-20 05:50 - 2017-02-20 05:50 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3
2017-02-20 05:50 - 2017-02-20 05:50 - 00000000 ____D C:\Users\shagu\AppData\Roaming\GlarySoft
2017-02-20 05:48 - 2017-02-20 05:48 - 15796792 _____ C:\Users\shagu\Downloads\glary-utilities [1].exe
2017-02-20 05:39 - 2017-02-20 14:26 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-02-20 05:39 - 2017-02-20 05:53 - 00000000 ____D C:\Users\shagu\AppData\Local\{BAD08C8C-9E78-E034-F3E0-C5DCD7883944}
2017-02-20 05:39 - 2017-02-20 05:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\shagu\Downloads\malwarebytes-anti-malware [1].exe
2017-02-20 05:25 - 2017-02-20 05:29 - 00000000 ____D C:\rei
2017-02-20 03:24 - 2017-02-20 03:24 - 00000017 _____ C:\Users\shagu\AppData\Local\resmon.resmoncfg
2017-02-20 03:13 - 2017-02-20 03:13 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Sterferent
2017-02-20 03:04 - 2017-02-20 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sstmp
2017-02-20 03:04 - 2017-02-20 03:04 - 00000000 ____D C:\WINDOWS\system32\sstmp
2017-02-20 03:02 - 2017-02-20 03:02 - 00002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016
2017-02-20 02:53 - 2017-02-20 02:53 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-02-20 02:53 - 2017-02-20 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-20 02:53 - 2017-02-20 02:53 - 00000000 ____D C:\Program Files\CCleaner
2017-02-20 02:49 - 2017-02-20 06:08 - 00000000 ____D C:\WINDOWS\system32\SSL
2017-02-20 02:46 - 2017-02-20 15:06 - 00000000 ____D C:\Users\shagu\AppData\Local\app
2017-02-20 02:40 - 2017-02-20 15:18 - 00004178 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9D89B0CD-013E-4A3F-ACC2-932BA8279B44}
2017-02-20 02:40 - 2017-02-20 02:40 - 00000886 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\¿ìѹ.lnk
2017-02-20 02:40 - 2017-02-20 02:40 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Softlink
2017-02-20 02:39 - 2017-02-20 02:39 - 00000000 ____D C:\Program Files\¿ìѹ
2017-02-20 02:36 - 2017-02-20 02:36 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Mozilla
2017-02-20 02:35 - 2017-02-20 02:35 - 00187904 _____ C:\WINDOWS\rsrcs.dll
2017-02-20 02:35 - 2017-02-20 02:35 - 00002402 _____ C:\WINDOWS\SysWOW64\findit.xml
2017-02-20 02:34 - 2017-02-20 15:38 - 00000000 ____D C:\Program Files (x86)\Reozerph_
2017-02-20 02:34 - 2017-02-20 02:39 - 00070752 _____ C:\Users\shagu\AppData\Roaming\Config.xml
2017-02-20 02:34 - 2017-02-20 02:39 - 00018432 _____ C:\Users\shagu\AppData\Roaming\Main.dat
2017-02-20 02:34 - 2017-02-20 02:39 - 00005568 _____ C:\Users\shagu\AppData\Roaming\md.xml
2017-02-20 02:34 - 2017-02-20 02:34 - 00000000 ____H C:\WINDOWS\system32\BITC7A.tmp
2017-02-20 02:34 - 2017-02-20 02:34 - 00000000 ____H C:\WINDOWS\system32\BIT3560.tmp
2017-02-20 02:33 - 2017-02-20 03:04 - 00000000 ____D C:\Users\shagu\AppData\Local\Bertoward
2017-02-20 02:33 - 2017-02-20 02:33 - 00006144 _____ C:\WINDOWS\System32\Tasks\Qihesclzty Schedule
2017-02-20 02:33 - 2017-02-20 02:33 - 00000000 ____D C:\WINDOWS\SuperEx
2017-02-20 02:32 - 2017-02-20 02:34 - 00016224 _____ C:\Users\shagu\AppData\Roaming\InstallationConfiguration.xml
2017-02-20 02:32 - 2017-02-20 02:32 - 00140288 _____ C:\Users\shagu\AppData\Roaming\Installer.dat
2017-02-20 02:31 - 2017-02-20 15:38 - 00000000 ____D C:\Program Files (x86)\BeCleaner
2017-02-20 02:31 - 2017-02-20 05:31 - 00000000 ____D C:\Program Files (x86)\DiskP
2017-02-20 02:26 - 2017-02-20 02:26 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-02-20 02:23 - 2017-02-20 02:23 - 03771704 _____ (Microsoft Corporation) C:\Users\shagu\Downloads\office-2016_16-0-7167-2060_fr_431791_32.exe
2017-02-20 02:10 - 2017-02-20 06:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-20 02:09 - 2017-02-20 02:09 - 00000000 ____D C:\Program Files (x86)\MSECache
2017-02-20 00:27 - 2017-02-20 00:27 - 00068994 _____ C:\Users\shagu\Downloads\DC_09_02_04_Malo_e.pdf
2017-02-20 00:27 - 2017-02-20 00:27 - 00064771 _____ C:\Users\shagu\Downloads\DC_09_02_04_Malo_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00083321 _____ C:\Users\shagu\Downloads\DC_09_02_04_Roland_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00079913 _____ C:\Users\shagu\Downloads\DC_09_02_04_Roland_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00062799 _____ C:\Users\shagu\Downloads\DC_09_02_04_Piman_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00061981 _____ C:\Users\shagu\Downloads\DC_09_02_03_Gama_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00059125 _____ C:\Users\shagu\Downloads\DC_09_02_04_Benoit_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00055503 _____ C:\Users\shagu\Downloads\DC_09_02_03_X_Y_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00049568 _____ C:\Users\shagu\Downloads\DC_09_02_04_Piman_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00044683 _____ C:\Users\shagu\Downloads\DC_09_02_04_Benoit_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00041652 _____ C:\Users\shagu\Downloads\DC_09_02_04_Louis_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00036638 _____ C:\Users\shagu\Downloads\DC_09_02_03_X_Y_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00033797 _____ C:\Users\shagu\Downloads\DC_09_02_03_Gama_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00032843 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_c.pdf
2017-02-20 00:23 - 2017-02-20 00:23 - 00027808 _____ C:\Users\shagu\Downloads\DC_09_02_03_Louis_c.pdf
2017-02-20 00:12 - 2017-02-20 00:12 - 00047327 _____ C:\Users\shagu\Downloads\DC_09_02_03_Louis_e.pdf
2017-02-20 00:11 - 2017-02-20 00:11 - 00058876 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_e (1).pdf
2017-02-18 15:00 - 2017-02-18 15:00 - 00109916 _____ C:\Users\shagu\Downloads\DC_09_02_01_B (1).pdf
2017-02-17 23:18 - 2017-02-17 23:18 - 00096436 _____ C:\Users\shagu\Downloads\annabelle.eck.pdf
2017-02-17 23:07 - 2017-02-17 23:07 - 00058876 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_e.pdf
2017-02-17 23:02 - 2017-02-17 23:02 - 00399760 _____ C:\Users\shagu\Downloads\DC_09_02_08.pdf
2017-02-17 23:02 - 2017-02-17 23:02 - 00302979 _____ C:\Users\shagu\Downloads\DC_09_02_07.pdf
2017-02-17 23:02 - 2017-02-17 23:02 - 00259335 _____ C:\Users\shagu\Downloads\DC_09_02_06.pdf
2017-02-17 23:01 - 2017-02-17 23:02 - 00268802 _____ C:\Users\shagu\Downloads\DC_09_02_03.pdf
2017-02-17 23:01 - 2017-02-17 23:02 - 00190388 _____ C:\Users\shagu\Downloads\DC_09_02_05.pdf
2017-02-17 23:01 - 2017-02-17 23:02 - 00102768 _____ C:\Users\shagu\Downloads\DC_09_02_04.pdf
2017-02-17 23:01 - 2017-02-17 23:01 - 00387459 _____ C:\Users\shagu\Downloads\DC_09_02_02.pdf
2017-02-17 23:01 - 2017-02-17 23:01 - 00109916 _____ C:\Users\shagu\Downloads\DC_09_02_01_B.pdf
2017-02-17 19:09 - 2017-02-17 19:09 - 00000000 ____D C:\Users\shagu\AppData\Local\Downloaded Installations
2017-02-17 19:06 - 2014-11-17 11:17 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capicom.dll
2017-02-17 19:06 - 2014-11-17 11:17 - 00159744 _____ (Inner Media, Inc.) C:\WINDOWS\SysWOW64\dzip32.dll
2017-02-17 19:06 - 2014-11-17 11:17 - 00139264 _____ (Inner Media, Inc.) C:\WINDOWS\SysWOW64\dunzip32.dll
2017-02-17 18:52 - 2016-09-28 15:46 - 00000000 ____D C:\Users\shagu\Desktop\SageI7L100v801
2017-02-17 18:46 - 2017-02-17 18:46 - 88093358 _____ (Acresso Software Inc.) C:\Users\shagu\Desktop\Sagedirect.exe
2017-02-17 18:29 - 2017-02-17 18:29 - 00001461 _____ C:\Users\shagu\Desktop\pmsw32 - Raccourci.lnk
2017-02-17 18:07 - 2017-02-17 19:29 - 00000000 ____D C:\Users\shagu\OneDrive\Documents\Sage
2017-02-17 18:05 - 2017-02-17 18:05 - 00001305 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\visiodasb.lnk
2017-02-17 18:03 - 2017-02-17 18:03 - 00001084 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SagePaie.lnk
2017-02-17 17:53 - 2016-12-06 13:35 - 01905728 _____ (Sage) C:\WINDOWS\SysWOW64\Snadosql.dll
2017-02-17 17:53 - 2016-04-27 15:21 - 01046528 _____ (Sage France) C:\WINDOWS\SysWOW64\SnadoOra.dll
2017-02-17 17:53 - 2014-11-17 11:17 - 06525440 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\WINDOWS\system32\cdintf450_64.dll
2017-02-17 17:53 - 2014-11-17 11:17 - 04809728 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\WINDOWS\SysWOW64\cdintf450.dll
2017-02-17 17:51 - 2017-02-17 17:54 - 00000000 ____D C:\Program Files (x86)\SagePaie
2017-02-17 17:40 - 2017-02-17 18:12 - 512812436 _____ C:\Users\shagu\Downloads\SageI7L100V801.rar
2017-02-17 16:56 - 2017-02-17 16:56 - 02956983 _____ C:\WINDOWS\5a75bb87c1d7158018bf5939ad268a0d.exe
2017-02-17 13:58 - 2017-02-17 13:58 - 02069664 _____ C:\Users\shagu\Downloads\winrar-32-bits_5-40_fr_9632.exe
2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Users\shagu\AppData\Roaming\WinRAR
2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Program Files (x86)\WinRAR
2017-02-17 13:48 - 2017-02-17 13:45 - 00002023 _____ C:\Users\shagu\Desktop\Sage direct.lnk
2017-02-17 13:37 - 2017-02-17 13:44 - 47171608 _____ (Acresso Software Inc.) C:\Users\shagu\Downloads\Sagedirect.exe
2017-02-17 13:34 - 2017-02-17 13:43 - 44241285 _____ C:\Users\shagu\Downloads\Sagedirect.zip
2017-02-17 13:33 - 2017-02-17 19:29 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Sage
2017-02-17 13:33 - 2017-02-17 13:33 - 00000106 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2017-02-17 13:25 - 2017-02-17 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sage
2017-02-17 13:22 - 2017-02-17 13:22 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-17 13:21 - 2015-12-08 14:15 - 01177584 _____ C:\WINDOWS\system32\sage.common.dll
2017-02-17 13:20 - 2017-02-17 19:10 - 00000000 ____D C:\Program Files (x86)\Sage
2017-02-17 13:20 - 2017-02-17 19:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-17 13:19 - 2017-02-17 19:07 - 00000000 ____D C:\ProgramData\Sage
2017-02-17 12:53 - 2017-02-19 22:14 - 00000000 ____D C:\Users\shagu\Desktop\Comptalia
2017-02-17 12:39 - 2017-02-17 12:39 - 00126841 _____ C:\Users\shagu\Downloads\annabelle.eck_planning.pdf
2017-02-17 12:39 - 2017-02-17 12:39 - 00126840 _____ C:\Users\shagu\Downloads\annabelle.eck_planning (1).pdf
2017-02-17 12:39 - 2017-02-17 12:39 - 00082227 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_février_2017.pdf
2017-02-17 12:38 - 2017-02-17 12:38 - 00089043 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Analyse_financière.pdf
2017-02-17 12:38 - 2017-02-17 12:38 - 00086046 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Pratique_Sage.pdf
2017-02-17 12:38 - 2017-02-17 12:38 - 00080792 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_DP.pdf
2017-02-17 12:37 - 2017-02-17 12:37 - 00094255 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Fiscalité.pdf
2017-02-17 12:37 - 2017-02-17 12:37 - 00089528 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Pratique_de_la_paie.pdf
2017-02-17 12:37 - 2017-02-17 12:37 - 00087474 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_ComptaAnaCo.pdf
2017-02-17 12:36 - 2017-02-17 12:36 - 00089018 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Compta_appro_15_(CO).pdf
2017-02-17 12:36 - 2017-02-17 12:36 - 00079367 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Réussir_mon_titre_pro.pdf
2017-02-17 12:25 - 2017-02-17 13:15 - 494419925 _____ C:\Users\shagu\Downloads\SagePaieI7V810.rar
2017-02-17 06:39 - 2017-02-17 06:39 - 00001860 _____ C:\Users\shagu\Downloads\lm-comptabilite-et-gestion-spontanee-stage.pdf
2017-02-17 06:37 - 2017-02-17 06:37 - 00001945 _____ C:\Users\shagu\Downloads\lm-comptable-stage-spontanee-stage.pdf
2017-02-16 17:11 - 2017-02-16 17:11 - 00096832 _____ C:\Users\shagu\Downloads\RIB AECK.pdf
2017-02-16 16:57 - 2017-02-16 16:58 - 05787195 _____ C:\Users\shagu\Downloads\IMG_9530.pdf
2017-02-16 16:57 - 2017-02-16 16:57 - 04306713 _____ C:\Users\shagu\Downloads\IMG_9527.pdf
2017-02-16 16:57 - 2017-02-16 16:57 - 02885579 _____ C:\Users\shagu\Downloads\IMG_9528.pdf
2017-02-16 16:57 - 2017-02-16 16:57 - 02789578 _____ C:\Users\shagu\Downloads\IMG_9529.pdf
2017-02-16 16:55 - 2017-02-16 16:56 - 04522306 _____ C:\Users\shagu\Downloads\IMG_9526.pdf
2017-02-16 16:51 - 2017-02-16 16:51 - 03137686 _____ C:\Users\shagu\Downloads\IMG_9525.pdf
2017-02-15 20:17 - 2017-02-16 00:36 - 734576954 _____ C:\Users\shagu\Downloads\__Madagascar__www.LibertyLand.tv.avi
2017-02-15 19:28 - 2017-02-15 20:03 - 730118490 _____ C:\Users\shagu\Downloads\Storks.2016.FRENCH.BDRip.XviD-NOTAG.avi
2017-02-15 16:23 - 2017-02-15 19:24 - 729318314 _____ C:\Users\shagu\Downloads\Trolls.2016.FRENCH.BDRip.XviD-EXTREME.avi
2017-02-15 10:46 - 2017-02-15 11:05 - 31872167 _____ C:\Users\shagu\Downloads\wetransfer-e0c4a6.zip.wr59pee.partial
2017-02-13 18:12 - 2017-02-13 18:18 - 00000000 ____D C:\Users\shagu\Desktop\Films enfants
2017-02-13 18:06 - 2017-02-13 21:51 - 634191872 _____ C:\Users\shagu\Downloads\Alpha.Omega--www.libertyland.tv.rar.9mo0h89.partial
2017-02-13 17:31 - 2017-02-13 18:17 - 688471135 _____ C:\Users\shagu\Downloads\Maya.the.Bee.Movie(-_1@1_-)2014.FRENCH.BDRIP.XVID-www.libertyland.tv.rar
2017-02-10 21:16 - 2017-02-10 21:27 - 00000000 ____D C:\Users\shagu\Desktop\Photos de famille
2017-02-01 09:13 - 2017-02-01 09:13 - 00059438 _____ C:\Users\shagu\Downloads\RECAPITULATIFANNUELDESFRAIS_20170117.pdf
2017-01-30 14:50 - 2017-01-30 14:50 - 00000000 ____D C:\Users\shagu\Desktop\Mud Dogs
2017-01-30 14:20 - 2017-01-30 14:21 - 00000000 ____D C:\Users\shagu\Desktop\MostovoÏ
2017-01-30 12:01 - 2017-01-30 12:18 - 126082401 _____ C:\Users\shagu\Downloads\wetransfer-33500a (7).zip.e1i0vi2.partial
2017-01-30 11:47 - 2017-01-30 11:58 - 202347433 _____ C:\Users\shagu\Downloads\wetransfer-33500a (6).zip.y6pjt1d.partial
2017-01-30 11:13 - 2017-01-30 11:20 - 166439865 _____ C:\Users\shagu\Downloads\wetransfer-33500a (5).zip.3377z61.partial
2017-01-30 09:59 - 2017-01-30 11:12 - 143750153 _____ C:\Users\shagu\Downloads\wetransfer-33500a (4).zip.p0yi8nv.partial
2017-01-30 09:05 - 2017-01-30 09:49 - 1333531033 _____ C:\Users\shagu\Downloads\wetransfer-33500a (3).zip.a5mocuh.partial
2017-01-30 08:16 - 2017-01-30 08:20 - 14460969 _____ C:\Users\shagu\Downloads\wetransfer-33500a (2).zip.yxzkfzf.partial
2017-01-30 07:46 - 2017-01-30 07:59 - 08969729 _____ C:\Users\shagu\Downloads\wetransfer-33500a (1).zip.b7ob66g.partial
2017-01-30 07:19 - 2017-01-30 07:44 - 67625553 _____ C:\Users\shagu\Downloads\wetransfer-33500a.zip.mvwwpjc.partial
2017-01-25 13:48 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-25 13:48 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-01-24 11:58 - 2017-02-20 02:54 - 00000000 ____D C:\WINDOWS\Minidump
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-02-20 17:51 - 2016-12-15 00:40 - 00000000 ___RD C:\Users\shagu\OneDrive
2017-02-20 17:49 - 2016-12-15 08:36 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-20 17:48 - 2016-12-14 22:45 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-02-20 17:44 - 2016-12-15 08:36 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-20 16:57 - 2016-12-14 23:10 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-02-20 15:26 - 2016-12-14 23:53 - 00000000 ____D C:\Users\defaultuser0
2017-02-20 14:40 - 2016-12-14 23:56 - 00000000 ____D C:\Users\shagu
2017-02-20 14:35 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-20 14:35 - 2016-12-14 23:08 - 00000000 ____D C:\WINDOWS\INF
2017-02-20 14:24 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-02-20 06:58 - 2016-12-14 23:57 - 02252768 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-20 06:58 - 2016-12-14 23:19 - 01042790 _____ C:\WINDOWS\system32\perfh00C.dat
2017-02-20 06:58 - 2016-12-14 23:19 - 00219150 _____ C:\WINDOWS\system32\perfc00C.dat
2017-02-20 05:33 - 2016-12-14 23:10 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-20 05:33 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-20 05:32 - 2016-12-14 23:58 - 00000000 ____D C:\Users\shagu\AppData\Local\Packages
2017-02-20 03:55 - 2016-12-15 08:36 - 00334688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-20 03:37 - 2016-12-14 23:10 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-20 03:08 - 2017-01-12 15:26 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-20 02:59 - 2016-12-14 23:24 - 00000000 ___DC C:\WINDOWS\Panther
2017-02-20 02:26 - 2016-12-14 23:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-02-17 19:09 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\Help
2017-02-17 09:03 - 2017-01-02 13:56 - 00000000 ____D C:\Users\shagu\Desktop\Nouveau dossier
2017-02-08 07:51 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-01-27 10:05 - 2017-01-13 00:07 - 00000000 ____D C:\Users\shagu\Desktop\ok coral
2017-01-25 15:52 - 2016-12-14 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-24 12:31 - 2016-12-17 10:28 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-24 12:31 - 2016-12-15 00:40 - 00002415 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-22 11:27 - 2017-01-12 15:25 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Fichiers à la racine de certains dossiers =======
2017-02-20 03:03 - 2017-02-20 03:04 - 0023622 _____ () C:\Users\shagu\AppData\Roaming\aliexpress.ico
2017-02-20 03:03 - 2017-02-20 03:03 - 0099678 _____ () C:\Users\shagu\AppData\Roaming\booking.ico
2017-02-20 02:34 - 2017-02-20 02:39 - 0070752 _____ () C:\Users\shagu\AppData\Roaming\Config.xml
2017-02-20 02:32 - 2017-02-20 02:34 - 0016224 _____ () C:\Users\shagu\AppData\Roaming\InstallationConfiguration.xml
2017-02-20 02:32 - 2017-02-20 02:32 - 0140288 _____ () C:\Users\shagu\AppData\Roaming\Installer.dat
2017-02-20 02:34 - 2017-02-20 02:39 - 0018432 _____ () C:\Users\shagu\AppData\Roaming\Main.dat
2017-02-20 02:34 - 2017-02-20 02:39 - 0005568 _____ () C:\Users\shagu\AppData\Roaming\md.xml
2017-02-20 03:24 - 2017-02-20 03:24 - 0000017 _____ () C:\Users\shagu\AppData\Local\resmon.resmoncfg
2017-02-17 13:33 - 2017-02-17 13:33 - 0000106 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Certains fichiers dans TEMP:
====================
2017-02-20 16:22 - 2016-11-11 11:13 - 1886344 _____ (Microsoft Corporation) C:\Users\shagu\AppData\Local\Temp\dllnt_dump.dll
2017-02-20 08:04 - 2017-02-20 08:04 - 0008192 _____ () C:\Users\shagu\AppData\Local\Temp\_4eudhww.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-02-11 20:39
==================== Fin de FRST.txt ============================
Exécuté par shagu (administrateur) sur DESKTOP-1S8FNS1 (20-02-2017 18:02:17)
Exécuté depuis C:\Users\shagu\Desktop\sécurity
Profils chargés: shagu (Profils disponibles: defaultuser0 & shagu)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Sage France) C:\Program Files (x86)\Sage\Declarations Sociales\Serveur\DeclarationsSociales.Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 3\Integrator.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
() C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7903.40527.0_x64__8wekyb3d8bbwe\HxMail.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.7903.40527.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16122.10291.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11610.1001.25.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [317824 2016-01-18] ()
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [HL4NcEOHkO] => "C:\Program Files\6DYKRFS7QP\6DYKRFS7Q.exe"
HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\MountPoints2: {07056a90-c299-11e6-8215-806e6f6e6963} - "D:\VTech_toy_Setup.exe"
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{28515481-706b-4d57-898b-529b75b50f2b}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{5e598de2-6db1-4d79-a9c6-d89f1c748cf7}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-02-20] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-20] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
Edge:
======
Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2017-02-20]
Edge Extension: (Office Online) -> 2016_MicrosoftOfficeOnline_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.OfficeOnline_1.5.0.0_neutral__8wekyb3d8bbwe [2017-02-20]
Edge Extension: (Ghostery) -> EdgeExtension_GhosteryGhostery_kzkqe0pn505dg => C:\Program Files\WindowsApps\Ghostery.Ghostery_7.1.1.0_neutral__kzkqe0pn505dg [2017-02-20]
FireFox:
========
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-02-20] (Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] -
CHR HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] -
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] -
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699904 2016-12-28] (Microsoft Corporation)
R2 DeclarationsSociales; C:\Program Files (x86)\Sage\Declarations Sociales\Serveur\DeclarationsSociales.Service.exe [15416 2016-06-16] (Sage France)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269400 2017-01-17] (Synaptics Incorporated)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-02-03] (Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-02-03] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2017-01-20] ()
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176584 2017-02-20] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [110536 2017-02-20] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-02-20] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-20] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-02-20] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2016-07-16] (Realtek Semiconductor Corporation )
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2017-02-20] ()
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-02-20 17:51 - 2017-02-20 17:51 - 00000000 ___HD C:\OneDriveTemp
2017-02-20 16:22 - 2017-02-20 16:22 - 00028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2017-02-20 16:22 - 2017-02-20 16:22 - 00000000 ____D C:\ProgramData\RogueKiller
2017-02-20 16:20 - 2017-02-20 16:20 - 25983048 _____ C:\Users\shagu\Desktop\RogueKillerX64.exe
2017-02-20 16:13 - 2017-02-20 18:02 - 00000000 ____D C:\Users\shagu\Desktop\sécurity
2017-02-20 15:31 - 2017-02-20 15:31 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\03F85B0D.sys
2017-02-20 15:27 - 2017-02-20 15:31 - 00176584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-02-20 15:26 - 2017-02-20 17:49 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-02-20 15:26 - 2017-02-20 17:49 - 00110536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-02-20 15:26 - 2017-02-20 17:49 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-02-20 15:26 - 2017-02-20 17:49 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-02-20 15:26 - 2017-02-20 15:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-02-20 15:26 - 2017-02-20 15:26 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-02-20 15:26 - 2017-02-20 15:26 - 00000000 ____D C:\Program Files\Malwarebytes
2017-02-20 15:26 - 2017-01-20 07:47 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-02-20 14:57 - 2017-02-20 15:07 - 00000000 ____D C:\Users\shagu\AppData\Roaming\ZHP
2017-02-20 14:23 - 2017-02-20 14:45 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-02-20 13:25 - 2017-02-20 13:25 - 00031848 _____ C:\Users\shagu\OneDrive\Documents\fixlist.txt
2017-02-20 13:16 - 2017-02-20 15:38 - 00000000 ____D C:\Program Files (x86)\Werroge
2017-02-20 13:16 - 2017-02-20 13:16 - 00006030 _____ C:\WINDOWS\System32\Tasks\Nimasy Engine
2017-02-20 13:16 - 2017-02-20 13:16 - 00000000 ____D C:\Users\shagu\AppData\Local\Naetion
2017-02-20 13:16 - 2017-02-20 13:16 - 00000000 ____D C:\Program Files (x86)\Nimasy Engine
2017-02-20 07:43 - 2017-02-20 14:25 - 00000000 ____D C:\FRST
2017-02-20 06:53 - 2017-02-20 15:38 - 00000000 ____D C:\Program Files (x86)\Reozerph
2017-02-20 06:32 - 2017-02-20 14:51 - 00000000 ____D C:\AdwCleaner
2017-02-20 06:31 - 2017-02-20 06:31 - 04015056 _____ C:\Users\shagu\Downloads\adwcleaner_6.043.exe
2017-02-20 05:57 - 2017-02-20 05:57 - 00000000 ____D C:\ProgramData\GlarySoft
2017-02-20 05:50 - 2017-02-20 17:50 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 3
2017-02-20 05:50 - 2017-02-20 06:50 - 00000364 _____ C:\WINDOWS\Tasks\GlaryInitialize 3.job
2017-02-20 05:50 - 2017-02-20 05:50 - 00002692 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 3
2017-02-20 05:50 - 2017-02-20 05:50 - 00001195 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3.lnk
2017-02-20 05:50 - 2017-02-20 05:50 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3
2017-02-20 05:50 - 2017-02-20 05:50 - 00000000 ____D C:\Users\shagu\AppData\Roaming\GlarySoft
2017-02-20 05:48 - 2017-02-20 05:48 - 15796792 _____ C:\Users\shagu\Downloads\glary-utilities [1].exe
2017-02-20 05:39 - 2017-02-20 14:26 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-02-20 05:39 - 2017-02-20 05:53 - 00000000 ____D C:\Users\shagu\AppData\Local\{BAD08C8C-9E78-E034-F3E0-C5DCD7883944}
2017-02-20 05:39 - 2017-02-20 05:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\shagu\Downloads\malwarebytes-anti-malware [1].exe
2017-02-20 05:25 - 2017-02-20 05:29 - 00000000 ____D C:\rei
2017-02-20 03:24 - 2017-02-20 03:24 - 00000017 _____ C:\Users\shagu\AppData\Local\resmon.resmoncfg
2017-02-20 03:13 - 2017-02-20 03:13 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Sterferent
2017-02-20 03:04 - 2017-02-20 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sstmp
2017-02-20 03:04 - 2017-02-20 03:04 - 00000000 ____D C:\WINDOWS\system32\sstmp
2017-02-20 03:02 - 2017-02-20 03:02 - 00002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-02-20 03:02 - 2017-02-20 03:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016
2017-02-20 02:53 - 2017-02-20 02:53 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-02-20 02:53 - 2017-02-20 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-20 02:53 - 2017-02-20 02:53 - 00000000 ____D C:\Program Files\CCleaner
2017-02-20 02:49 - 2017-02-20 06:08 - 00000000 ____D C:\WINDOWS\system32\SSL
2017-02-20 02:46 - 2017-02-20 15:06 - 00000000 ____D C:\Users\shagu\AppData\Local\app
2017-02-20 02:40 - 2017-02-20 15:18 - 00004178 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9D89B0CD-013E-4A3F-ACC2-932BA8279B44}
2017-02-20 02:40 - 2017-02-20 02:40 - 00000886 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\¿ìѹ.lnk
2017-02-20 02:40 - 2017-02-20 02:40 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Softlink
2017-02-20 02:39 - 2017-02-20 02:39 - 00000000 ____D C:\Program Files\¿ìѹ
2017-02-20 02:36 - 2017-02-20 02:36 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Mozilla
2017-02-20 02:35 - 2017-02-20 02:35 - 00187904 _____ C:\WINDOWS\rsrcs.dll
2017-02-20 02:35 - 2017-02-20 02:35 - 00002402 _____ C:\WINDOWS\SysWOW64\findit.xml
2017-02-20 02:34 - 2017-02-20 15:38 - 00000000 ____D C:\Program Files (x86)\Reozerph_
2017-02-20 02:34 - 2017-02-20 02:39 - 00070752 _____ C:\Users\shagu\AppData\Roaming\Config.xml
2017-02-20 02:34 - 2017-02-20 02:39 - 00018432 _____ C:\Users\shagu\AppData\Roaming\Main.dat
2017-02-20 02:34 - 2017-02-20 02:39 - 00005568 _____ C:\Users\shagu\AppData\Roaming\md.xml
2017-02-20 02:34 - 2017-02-20 02:34 - 00000000 ____H C:\WINDOWS\system32\BITC7A.tmp
2017-02-20 02:34 - 2017-02-20 02:34 - 00000000 ____H C:\WINDOWS\system32\BIT3560.tmp
2017-02-20 02:33 - 2017-02-20 03:04 - 00000000 ____D C:\Users\shagu\AppData\Local\Bertoward
2017-02-20 02:33 - 2017-02-20 02:33 - 00006144 _____ C:\WINDOWS\System32\Tasks\Qihesclzty Schedule
2017-02-20 02:33 - 2017-02-20 02:33 - 00000000 ____D C:\WINDOWS\SuperEx
2017-02-20 02:32 - 2017-02-20 02:34 - 00016224 _____ C:\Users\shagu\AppData\Roaming\InstallationConfiguration.xml
2017-02-20 02:32 - 2017-02-20 02:32 - 00140288 _____ C:\Users\shagu\AppData\Roaming\Installer.dat
2017-02-20 02:31 - 2017-02-20 15:38 - 00000000 ____D C:\Program Files (x86)\BeCleaner
2017-02-20 02:31 - 2017-02-20 05:31 - 00000000 ____D C:\Program Files (x86)\DiskP
2017-02-20 02:26 - 2017-02-20 02:26 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-02-20 02:23 - 2017-02-20 02:23 - 03771704 _____ (Microsoft Corporation) C:\Users\shagu\Downloads\office-2016_16-0-7167-2060_fr_431791_32.exe
2017-02-20 02:10 - 2017-02-20 06:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-20 02:09 - 2017-02-20 02:09 - 00000000 ____D C:\Program Files (x86)\MSECache
2017-02-20 00:27 - 2017-02-20 00:27 - 00068994 _____ C:\Users\shagu\Downloads\DC_09_02_04_Malo_e.pdf
2017-02-20 00:27 - 2017-02-20 00:27 - 00064771 _____ C:\Users\shagu\Downloads\DC_09_02_04_Malo_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00083321 _____ C:\Users\shagu\Downloads\DC_09_02_04_Roland_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00079913 _____ C:\Users\shagu\Downloads\DC_09_02_04_Roland_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00062799 _____ C:\Users\shagu\Downloads\DC_09_02_04_Piman_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00061981 _____ C:\Users\shagu\Downloads\DC_09_02_03_Gama_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00059125 _____ C:\Users\shagu\Downloads\DC_09_02_04_Benoit_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00055503 _____ C:\Users\shagu\Downloads\DC_09_02_03_X_Y_e.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00049568 _____ C:\Users\shagu\Downloads\DC_09_02_04_Piman_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00044683 _____ C:\Users\shagu\Downloads\DC_09_02_04_Benoit_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00041652 _____ C:\Users\shagu\Downloads\DC_09_02_04_Louis_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00036638 _____ C:\Users\shagu\Downloads\DC_09_02_03_X_Y_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00033797 _____ C:\Users\shagu\Downloads\DC_09_02_03_Gama_c.pdf
2017-02-20 00:26 - 2017-02-20 00:26 - 00032843 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_c.pdf
2017-02-20 00:23 - 2017-02-20 00:23 - 00027808 _____ C:\Users\shagu\Downloads\DC_09_02_03_Louis_c.pdf
2017-02-20 00:12 - 2017-02-20 00:12 - 00047327 _____ C:\Users\shagu\Downloads\DC_09_02_03_Louis_e.pdf
2017-02-20 00:11 - 2017-02-20 00:11 - 00058876 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_e (1).pdf
2017-02-18 15:00 - 2017-02-18 15:00 - 00109916 _____ C:\Users\shagu\Downloads\DC_09_02_01_B (1).pdf
2017-02-17 23:18 - 2017-02-17 23:18 - 00096436 _____ C:\Users\shagu\Downloads\annabelle.eck.pdf
2017-02-17 23:07 - 2017-02-17 23:07 - 00058876 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_e.pdf
2017-02-17 23:02 - 2017-02-17 23:02 - 00399760 _____ C:\Users\shagu\Downloads\DC_09_02_08.pdf
2017-02-17 23:02 - 2017-02-17 23:02 - 00302979 _____ C:\Users\shagu\Downloads\DC_09_02_07.pdf
2017-02-17 23:02 - 2017-02-17 23:02 - 00259335 _____ C:\Users\shagu\Downloads\DC_09_02_06.pdf
2017-02-17 23:01 - 2017-02-17 23:02 - 00268802 _____ C:\Users\shagu\Downloads\DC_09_02_03.pdf
2017-02-17 23:01 - 2017-02-17 23:02 - 00190388 _____ C:\Users\shagu\Downloads\DC_09_02_05.pdf
2017-02-17 23:01 - 2017-02-17 23:02 - 00102768 _____ C:\Users\shagu\Downloads\DC_09_02_04.pdf
2017-02-17 23:01 - 2017-02-17 23:01 - 00387459 _____ C:\Users\shagu\Downloads\DC_09_02_02.pdf
2017-02-17 23:01 - 2017-02-17 23:01 - 00109916 _____ C:\Users\shagu\Downloads\DC_09_02_01_B.pdf
2017-02-17 19:09 - 2017-02-17 19:09 - 00000000 ____D C:\Users\shagu\AppData\Local\Downloaded Installations
2017-02-17 19:06 - 2014-11-17 11:17 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capicom.dll
2017-02-17 19:06 - 2014-11-17 11:17 - 00159744 _____ (Inner Media, Inc.) C:\WINDOWS\SysWOW64\dzip32.dll
2017-02-17 19:06 - 2014-11-17 11:17 - 00139264 _____ (Inner Media, Inc.) C:\WINDOWS\SysWOW64\dunzip32.dll
2017-02-17 18:52 - 2016-09-28 15:46 - 00000000 ____D C:\Users\shagu\Desktop\SageI7L100v801
2017-02-17 18:46 - 2017-02-17 18:46 - 88093358 _____ (Acresso Software Inc.) C:\Users\shagu\Desktop\Sagedirect.exe
2017-02-17 18:29 - 2017-02-17 18:29 - 00001461 _____ C:\Users\shagu\Desktop\pmsw32 - Raccourci.lnk
2017-02-17 18:07 - 2017-02-17 19:29 - 00000000 ____D C:\Users\shagu\OneDrive\Documents\Sage
2017-02-17 18:05 - 2017-02-17 18:05 - 00001305 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\visiodasb.lnk
2017-02-17 18:03 - 2017-02-17 18:03 - 00001084 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SagePaie.lnk
2017-02-17 17:53 - 2016-12-06 13:35 - 01905728 _____ (Sage) C:\WINDOWS\SysWOW64\Snadosql.dll
2017-02-17 17:53 - 2016-04-27 15:21 - 01046528 _____ (Sage France) C:\WINDOWS\SysWOW64\SnadoOra.dll
2017-02-17 17:53 - 2014-11-17 11:17 - 06525440 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\WINDOWS\system32\cdintf450_64.dll
2017-02-17 17:53 - 2014-11-17 11:17 - 04809728 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\WINDOWS\SysWOW64\cdintf450.dll
2017-02-17 17:51 - 2017-02-17 17:54 - 00000000 ____D C:\Program Files (x86)\SagePaie
2017-02-17 17:40 - 2017-02-17 18:12 - 512812436 _____ C:\Users\shagu\Downloads\SageI7L100V801.rar
2017-02-17 16:56 - 2017-02-17 16:56 - 02956983 _____ C:\WINDOWS\5a75bb87c1d7158018bf5939ad268a0d.exe
2017-02-17 13:58 - 2017-02-17 13:58 - 02069664 _____ C:\Users\shagu\Downloads\winrar-32-bits_5-40_fr_9632.exe
2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Users\shagu\AppData\Roaming\WinRAR
2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Program Files (x86)\WinRAR
2017-02-17 13:48 - 2017-02-17 13:45 - 00002023 _____ C:\Users\shagu\Desktop\Sage direct.lnk
2017-02-17 13:37 - 2017-02-17 13:44 - 47171608 _____ (Acresso Software Inc.) C:\Users\shagu\Downloads\Sagedirect.exe
2017-02-17 13:34 - 2017-02-17 13:43 - 44241285 _____ C:\Users\shagu\Downloads\Sagedirect.zip
2017-02-17 13:33 - 2017-02-17 19:29 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Sage
2017-02-17 13:33 - 2017-02-17 13:33 - 00000106 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2017-02-17 13:25 - 2017-02-17 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sage
2017-02-17 13:22 - 2017-02-17 13:22 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-17 13:21 - 2015-12-08 14:15 - 01177584 _____ C:\WINDOWS\system32\sage.common.dll
2017-02-17 13:20 - 2017-02-17 19:10 - 00000000 ____D C:\Program Files (x86)\Sage
2017-02-17 13:20 - 2017-02-17 19:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-02-17 13:19 - 2017-02-17 19:07 - 00000000 ____D C:\ProgramData\Sage
2017-02-17 12:53 - 2017-02-19 22:14 - 00000000 ____D C:\Users\shagu\Desktop\Comptalia
2017-02-17 12:39 - 2017-02-17 12:39 - 00126841 _____ C:\Users\shagu\Downloads\annabelle.eck_planning.pdf
2017-02-17 12:39 - 2017-02-17 12:39 - 00126840 _____ C:\Users\shagu\Downloads\annabelle.eck_planning (1).pdf
2017-02-17 12:39 - 2017-02-17 12:39 - 00082227 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_février_2017.pdf
2017-02-17 12:38 - 2017-02-17 12:38 - 00089043 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Analyse_financière.pdf
2017-02-17 12:38 - 2017-02-17 12:38 - 00086046 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Pratique_Sage.pdf
2017-02-17 12:38 - 2017-02-17 12:38 - 00080792 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_DP.pdf
2017-02-17 12:37 - 2017-02-17 12:37 - 00094255 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Fiscalité.pdf
2017-02-17 12:37 - 2017-02-17 12:37 - 00089528 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Pratique_de_la_paie.pdf
2017-02-17 12:37 - 2017-02-17 12:37 - 00087474 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_ComptaAnaCo.pdf
2017-02-17 12:36 - 2017-02-17 12:36 - 00089018 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Compta_appro_15_(CO).pdf
2017-02-17 12:36 - 2017-02-17 12:36 - 00079367 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Réussir_mon_titre_pro.pdf
2017-02-17 12:25 - 2017-02-17 13:15 - 494419925 _____ C:\Users\shagu\Downloads\SagePaieI7V810.rar
2017-02-17 06:39 - 2017-02-17 06:39 - 00001860 _____ C:\Users\shagu\Downloads\lm-comptabilite-et-gestion-spontanee-stage.pdf
2017-02-17 06:37 - 2017-02-17 06:37 - 00001945 _____ C:\Users\shagu\Downloads\lm-comptable-stage-spontanee-stage.pdf
2017-02-16 17:11 - 2017-02-16 17:11 - 00096832 _____ C:\Users\shagu\Downloads\RIB AECK.pdf
2017-02-16 16:57 - 2017-02-16 16:58 - 05787195 _____ C:\Users\shagu\Downloads\IMG_9530.pdf
2017-02-16 16:57 - 2017-02-16 16:57 - 04306713 _____ C:\Users\shagu\Downloads\IMG_9527.pdf
2017-02-16 16:57 - 2017-02-16 16:57 - 02885579 _____ C:\Users\shagu\Downloads\IMG_9528.pdf
2017-02-16 16:57 - 2017-02-16 16:57 - 02789578 _____ C:\Users\shagu\Downloads\IMG_9529.pdf
2017-02-16 16:55 - 2017-02-16 16:56 - 04522306 _____ C:\Users\shagu\Downloads\IMG_9526.pdf
2017-02-16 16:51 - 2017-02-16 16:51 - 03137686 _____ C:\Users\shagu\Downloads\IMG_9525.pdf
2017-02-15 20:17 - 2017-02-16 00:36 - 734576954 _____ C:\Users\shagu\Downloads\__Madagascar__www.LibertyLand.tv.avi
2017-02-15 19:28 - 2017-02-15 20:03 - 730118490 _____ C:\Users\shagu\Downloads\Storks.2016.FRENCH.BDRip.XviD-NOTAG.avi
2017-02-15 16:23 - 2017-02-15 19:24 - 729318314 _____ C:\Users\shagu\Downloads\Trolls.2016.FRENCH.BDRip.XviD-EXTREME.avi
2017-02-15 10:46 - 2017-02-15 11:05 - 31872167 _____ C:\Users\shagu\Downloads\wetransfer-e0c4a6.zip.wr59pee.partial
2017-02-13 18:12 - 2017-02-13 18:18 - 00000000 ____D C:\Users\shagu\Desktop\Films enfants
2017-02-13 18:06 - 2017-02-13 21:51 - 634191872 _____ C:\Users\shagu\Downloads\Alpha.Omega--www.libertyland.tv.rar.9mo0h89.partial
2017-02-13 17:31 - 2017-02-13 18:17 - 688471135 _____ C:\Users\shagu\Downloads\Maya.the.Bee.Movie(-_1@1_-)2014.FRENCH.BDRIP.XVID-www.libertyland.tv.rar
2017-02-10 21:16 - 2017-02-10 21:27 - 00000000 ____D C:\Users\shagu\Desktop\Photos de famille
2017-02-01 09:13 - 2017-02-01 09:13 - 00059438 _____ C:\Users\shagu\Downloads\RECAPITULATIFANNUELDESFRAIS_20170117.pdf
2017-01-30 14:50 - 2017-01-30 14:50 - 00000000 ____D C:\Users\shagu\Desktop\Mud Dogs
2017-01-30 14:20 - 2017-01-30 14:21 - 00000000 ____D C:\Users\shagu\Desktop\MostovoÏ
2017-01-30 12:01 - 2017-01-30 12:18 - 126082401 _____ C:\Users\shagu\Downloads\wetransfer-33500a (7).zip.e1i0vi2.partial
2017-01-30 11:47 - 2017-01-30 11:58 - 202347433 _____ C:\Users\shagu\Downloads\wetransfer-33500a (6).zip.y6pjt1d.partial
2017-01-30 11:13 - 2017-01-30 11:20 - 166439865 _____ C:\Users\shagu\Downloads\wetransfer-33500a (5).zip.3377z61.partial
2017-01-30 09:59 - 2017-01-30 11:12 - 143750153 _____ C:\Users\shagu\Downloads\wetransfer-33500a (4).zip.p0yi8nv.partial
2017-01-30 09:05 - 2017-01-30 09:49 - 1333531033 _____ C:\Users\shagu\Downloads\wetransfer-33500a (3).zip.a5mocuh.partial
2017-01-30 08:16 - 2017-01-30 08:20 - 14460969 _____ C:\Users\shagu\Downloads\wetransfer-33500a (2).zip.yxzkfzf.partial
2017-01-30 07:46 - 2017-01-30 07:59 - 08969729 _____ C:\Users\shagu\Downloads\wetransfer-33500a (1).zip.b7ob66g.partial
2017-01-30 07:19 - 2017-01-30 07:44 - 67625553 _____ C:\Users\shagu\Downloads\wetransfer-33500a.zip.mvwwpjc.partial
2017-01-25 13:48 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-25 13:48 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-01-24 11:58 - 2017-02-20 02:54 - 00000000 ____D C:\WINDOWS\Minidump
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-02-20 17:51 - 2016-12-15 00:40 - 00000000 ___RD C:\Users\shagu\OneDrive
2017-02-20 17:49 - 2016-12-15 08:36 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-20 17:48 - 2016-12-14 22:45 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-02-20 17:44 - 2016-12-15 08:36 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-20 16:57 - 2016-12-14 23:10 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-02-20 15:26 - 2016-12-14 23:53 - 00000000 ____D C:\Users\defaultuser0
2017-02-20 14:40 - 2016-12-14 23:56 - 00000000 ____D C:\Users\shagu
2017-02-20 14:35 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-20 14:35 - 2016-12-14 23:08 - 00000000 ____D C:\WINDOWS\INF
2017-02-20 14:24 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-02-20 06:58 - 2016-12-14 23:57 - 02252768 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-20 06:58 - 2016-12-14 23:19 - 01042790 _____ C:\WINDOWS\system32\perfh00C.dat
2017-02-20 06:58 - 2016-12-14 23:19 - 00219150 _____ C:\WINDOWS\system32\perfc00C.dat
2017-02-20 05:33 - 2016-12-14 23:10 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-20 05:33 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-20 05:32 - 2016-12-14 23:58 - 00000000 ____D C:\Users\shagu\AppData\Local\Packages
2017-02-20 03:55 - 2016-12-15 08:36 - 00334688 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-20 03:37 - 2016-12-14 23:10 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-20 03:08 - 2017-01-12 15:26 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-20 02:59 - 2016-12-14 23:24 - 00000000 ___DC C:\WINDOWS\Panther
2017-02-20 02:26 - 2016-12-14 23:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-02-17 19:09 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\Help
2017-02-17 09:03 - 2017-01-02 13:56 - 00000000 ____D C:\Users\shagu\Desktop\Nouveau dossier
2017-02-08 07:51 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-01-27 10:05 - 2017-01-13 00:07 - 00000000 ____D C:\Users\shagu\Desktop\ok coral
2017-01-25 15:52 - 2016-12-14 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-24 12:31 - 2016-12-17 10:28 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-24 12:31 - 2016-12-15 00:40 - 00002415 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-22 11:27 - 2017-01-12 15:25 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Fichiers à la racine de certains dossiers =======
2017-02-20 03:03 - 2017-02-20 03:04 - 0023622 _____ () C:\Users\shagu\AppData\Roaming\aliexpress.ico
2017-02-20 03:03 - 2017-02-20 03:03 - 0099678 _____ () C:\Users\shagu\AppData\Roaming\booking.ico
2017-02-20 02:34 - 2017-02-20 02:39 - 0070752 _____ () C:\Users\shagu\AppData\Roaming\Config.xml
2017-02-20 02:32 - 2017-02-20 02:34 - 0016224 _____ () C:\Users\shagu\AppData\Roaming\InstallationConfiguration.xml
2017-02-20 02:32 - 2017-02-20 02:32 - 0140288 _____ () C:\Users\shagu\AppData\Roaming\Installer.dat
2017-02-20 02:34 - 2017-02-20 02:39 - 0018432 _____ () C:\Users\shagu\AppData\Roaming\Main.dat
2017-02-20 02:34 - 2017-02-20 02:39 - 0005568 _____ () C:\Users\shagu\AppData\Roaming\md.xml
2017-02-20 03:24 - 2017-02-20 03:24 - 0000017 _____ () C:\Users\shagu\AppData\Local\resmon.resmoncfg
2017-02-17 13:33 - 2017-02-17 13:33 - 0000106 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
Certains fichiers dans TEMP:
====================
2017-02-20 16:22 - 2016-11-11 11:13 - 1886344 _____ (Microsoft Corporation) C:\Users\shagu\AppData\Local\Temp\dllnt_dump.dll
2017-02-20 08:04 - 2017-02-20 08:04 - 0008192 _____ () C:\Users\shagu\AppData\Local\Temp\_4eudhww.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-02-11 20:39
==================== Fin de FRST.txt ============================