Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 15-03-2017
Exécuté par MEDIATEC (administrateur) sur MEDIATEC-PC (30-03-2017 18:25:06)
Exécuté depuis C:\Users\MEDIATEC\Desktop
Profils chargés: MEDIATEC (Profils disponibles: MEDIATEC)
Platform: Microsoft Windows 7 Édition Intégrale Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
() C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(Piriform) C:\Program Files\CCleaner Cloud\CCleanerCloudTray.exe
(Piriform) C:\Program Files\CCleaner Cloud\CCleanerCloudAgent.exe
() C:\ProgramData\ZDSupport\ZDServ\CancelAutoPlay_Server.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brother Help\BrotherHelp.exe
(AntGROUP) C:\Program Files\Ant Download Manager\antMR.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.292\SSScheduler.exe
(Microsoft Corporation) D:\MEDIATEC\MEDIATEChost.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\osk.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6688472 2014-05-14] (Realtek Semiconductor)
HKLM\...\Run: [CCleanerCloudTray] => C:\Program Files\CCleaner Cloud\CCleanerCloudTray.exe [2772392 2017-01-19] (Piriform)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2013-05-14] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4522496 2012-12-27] (Brother Industries, Ltd.)
HKLM\...\Run: [BrHelp] => C:\Program Files\Brother\Brother Help\BrotherHelp.exe [2009088 2013-01-18] (Brother Industries, Ltd.)
HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7347928 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\Run: [antMR] => C:\Program Files\Ant Download Manager\antMR.exe [130048 2016-02-15] (AntGROUP)
HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\MountPoints2: {eefd71fe-0723-11e6-b7df-d8cb8ac4c1bb} - F:\AutoRun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-01-24]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.292\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\MEDIATEC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HelpMEDIATEC.lnk [2017-03-30]
ShortcutTarget: HelpMEDIATEC.lnk -> C:\MEDIATEC\MEDIATEChost.exe (Microsoft Corporation)
Startup: C:\Users\MEDIATEC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ManualMEDIATEC.lnk [2017-03-30]
ShortcutTarget: ManualMEDIATEC.lnk -> D:\MEDIATEC\MEDIATEChost.exe (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AD325E53-9BAD-4D73-BDA0-AC0462585B67}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{CB157FAA-3C2E-4357-B46C-CD19DCA007F8}: [DhcpNameServer] 192.168.0.1 192.168.0.1
Internet Explorer:
==================
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-27] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-27] (AO Kaspersky Lab)
FireFox:
========
FF DefaultProfile: kkyip6iz.default
FF ProfilePath: C:\Users\MEDIATEC\AppData\Roaming\Mozilla\Firefox\Profiles\kkyip6iz.default [2017-03-30]
FF Extension: (Adblock Plus) - C:\Users\MEDIATEC\AppData\Roaming\Mozilla\Firefox\Profiles\kkyip6iz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Extension: (Site Deployment Checker) - C:\Users\MEDIATEC\AppData\Roaming\Mozilla\Firefox\Profiles\kkyip6iz.default\features\{7955cd53-c47c-4029-8a8a-e5bdd5a07b92}\deployment-checker@mozilla.org.xpi [2017-03-28]
FF Extension: (Site Deployment Checker) - C:\Program Files\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-28] [non signé]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-12-27]
FF HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\Firefox\Extensions: [antgroup@antdownloadmanager.com] - C:\Program Files\Ant Download Manager\antFF\antFF.xpi
FF Extension: (AntFF) - C:\Program Files\Ant Download Manager\antFF\antFF.xpi [2016-01-12]
FF HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\SeaMonkey\Extensions: [antgroup@antdownloadmanager.com] - C:\Program Files\Ant Download Manager\antFF\antFF.xpi
FF HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi => non trouvé(e)
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-14] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
Chrome:
=======
CHR NewTab: Default -> Not-active:"chrome-extension://glinaglcjdnchhbdnggipbjnapchnfkg/html/newtab.html"
CHR DefaultSearchURL: Default -> hxxp://www.blpsearch.com/search?sid={SYSID}&aid={APPID}&itype=u&src=ds&p={searchTerms}&tm=0
CHR DefaultSearchKeyword: Default -> Default-Search
CHR Profile: C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default [2017-03-30]
CHR Extension: (Google Docs) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-23]
CHR Extension: (Google Drive) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-23]
CHR Extension: (YouTube) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-23]
CHR Extension: (Recherche Google) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-23]
CHR Extension: (AntDM Integration Extension) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdfkgijmihakgkpgfihkhoflogmiphp [2016-02-24]
CHR Extension: (Kaspersky Protection) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhoibnponjcgjgcnfacekaijdbbplhib [2017-01-26]
CHR Extension: (Google Docs hors connexion) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Movies Tab) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\glinaglcjdnchhbdnggipbjnapchnfkg [2017-01-24]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-23]
CHR Extension: (Chrome Media Router) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-17]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fgdfkgijmihakgkpgfihkhoflogmiphp] - C:\Program Files\Ant Download Manager\antCH\antCH.crx [2016-02-24]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AVP17.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Fichier non signé]
R2 CCleanerCloudAgentService; C:\Program Files\CCleaner Cloud\CCleanerCloudAgent.exe [18618280 2017-01-19] (Piriform)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279000 2014-05-21] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [277976 2014-05-21] (Intel Corporation)
R2 KSDE1.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R2 ZDServ; C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe [427264 2013-11-06] ()
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [170840 2016-06-10] (AO Kaspersky Lab)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [37576 2014-02-03] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [165296 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [57264 2016-06-08] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [71504 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [69000 2016-06-01] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [155360 2017-03-13] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [128736 2017-03-13] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [805088 2017-03-13] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [49744 2016-12-27] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [46000 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [38072 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41392 2016-06-01] (AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\DRIVERS\kltap.sys [48056 2016-06-07] (The OpenVPN Project)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [71088 2016-05-18] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [116960 2017-03-13] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [165088 2017-03-13] (AO Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2017-03-30] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [17920 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [76288 2014-01-12] (Nuvoton Technology Corp.)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-03-30 18:25 - 2017-03-30 18:26 - 00014516 _____ C:\Users\MEDIATEC\Desktop\FRST.txt
2017-03-30 18:24 - 2017-03-30 18:25 - 00000000 ____D C:\FRST
2017-03-30 18:22 - 2017-03-30 18:23 - 01766912 _____ (Farbar) C:\Users\MEDIATEC\Desktop\FRST.exe
2017-03-30 17:34 - 2017-03-30 17:38 - 00004371 _____ C:\Users\MEDIATEC\Desktop\ZHPCleaner.txt
2017-03-30 17:20 - 2017-03-30 17:20 - 00000795 _____ C:\Users\MEDIATEC\Desktop\ZHPCleaner.lnk
2017-03-30 17:15 - 2017-03-30 17:18 - 02754048 _____ C:\Users\MEDIATEC\Desktop\ZHPCleaner.exe
2017-03-30 17:07 - 2017-03-30 17:07 - 00106441 _____ C:\Users\MEDIATEC\Desktop\ZHPDiag.txt
2017-03-30 17:00 - 2017-03-30 17:38 - 00000000 ____D C:\Users\MEDIATEC\AppData\Roaming\ZHP
2017-03-30 17:00 - 2017-03-30 17:00 - 00000785 _____ C:\Users\MEDIATEC\Desktop\ZHPDiag.lnk
2017-03-30 16:55 - 2017-03-30 16:59 - 02713088 _____ C:\Users\MEDIATEC\Desktop\ZHPDiag3.exe
2017-03-30 01:03 - 2017-03-30 01:03 - 00371330 _____ C:\Users\MEDIATEC\Downloads\kader.nabilo
2017-03-27 21:56 - 2017-03-27 21:59 - 00000000 ____D C:\Users\MEDIATEC\Desktop\english inspecto cahier de text
2017-03-27 19:46 - 2017-03-27 19:46 - 00361526 _____ C:\Users\MEDIATEC\Downloads\profile(4).php
2017-03-27 17:09 - 2017-03-29 01:01 - 00000000 ____D C:\Users\MEDIATEC\Desktop\aa n rayen pics
2017-03-25 01:29 - 2017-03-25 01:29 - 00000000 ____D C:\Users\MEDIATEC\AppData\Local\VideoCapture
2017-03-25 00:24 - 2017-03-25 00:24 - 00000000 ____D C:\Users\MEDIATEC\AppData\Local\VideoEditor
2017-03-24 23:42 - 2017-03-24 23:42 - 00001148 _____ C:\Users\Public\Desktop\Movavi Screen Capture Studio 8.lnk
2017-03-24 23:42 - 2017-03-24 23:42 - 00000000 ____D C:\Users\MEDIATEC\AppData\Local\ScreenCapture
2017-03-24 23:42 - 2017-03-24 23:42 - 00000000 ____D C:\Users\MEDIATEC\AppData\Local\Movavi
2017-03-24 23:42 - 2017-03-24 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Screen Capture Studio 8
2017-03-24 23:41 - 2017-03-24 23:42 - 00000000 ____D C:\Program Files\Movavi Screen Capture Studio 8
2017-03-24 23:40 - 2017-03-24 23:40 - 00004143 _____ C:\ProgramData\dfnpcrng.nwi
2017-03-24 23:40 - 2017-03-24 23:40 - 00000016 _____ C:\ProgramData\mntemp
2017-03-24 23:40 - 2017-03-24 23:40 - 00000000 ____D C:\ProgramData\Movavi Screen Capture Studio 8
2017-03-24 23:26 - 2017-03-24 23:40 - 71706520 _____ (Movavi) C:\Users\MEDIATEC\Downloads\MovaviScreenCaptureSetupF.exe
2017-03-24 13:19 - 2017-03-24 13:19 - 00000000 ____D C:\Users\MEDIATEC\Desktop\بيع بالمفتاح
2017-03-24 13:18 - 2017-03-24 13:18 - 00182555 _____ C:\Users\MEDIATEC\Downloads\Bureau.rar
2017-03-23 15:41 - 2017-03-23 15:41 - 00065362 _____ C:\Users\MEDIATEC\Downloads\https _chaturbate.com_vickydiego_.htm
2017-03-21 11:36 - 2017-03-21 23:07 - 00000000 ____D C:\Users\MEDIATEC\Desktop\ملك اليمين
2017-03-18 21:41 - 2017-03-18 21:42 - 00000000 ____D C:\Users\MEDIATEC\Desktop\د شحرور22 ردود اخرى على د شحرور
2017-03-17 13:21 - 2017-03-17 13:23 - 05732727 _____ C:\Users\MEDIATEC\Downloads\zip
2017-03-17 13:11 - 2017-03-17 13:11 - 00121021 _____ C:\Users\MEDIATEC\Downloads\________.html
2017-03-16 23:29 - 2017-03-16 23:30 - 06834069 _____ C:\Users\MEDIATEC\Downloads\CCleaner Technician 5.27.5976 by assirem43.rar
2017-03-16 20:28 - 2017-03-24 23:51 - 00000000 ____D C:\Users\MEDIATEC\Desktop\aaaa aa asma
2017-03-16 20:28 - 2017-03-19 16:38 - 00000000 ____D C:\Users\MEDIATEC\Desktop\Nouveau dossier
2017-03-15 22:44 - 2017-03-04 18:39 - 00346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-03-15 22:44 - 2017-03-04 06:18 - 20281856 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-03-15 22:44 - 2017-03-04 05:28 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-03-15 22:44 - 2017-03-02 20:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-03-15 22:44 - 2017-03-02 20:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-03-15 22:44 - 2017-03-02 20:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-03-15 22:44 - 2017-03-02 20:01 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-03-15 22:44 - 2017-03-02 20:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-03-15 22:44 - 2017-03-02 20:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-03-15 22:44 - 2017-03-02 20:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-03-15 22:44 - 2017-03-02 19:55 - 02287104 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-03-15 22:44 - 2017-03-02 19:54 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-03-15 22:44 - 2017-03-02 19:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-03-15 22:44 - 2017-03-02 19:51 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-03-15 22:44 - 2017-03-02 19:50 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-03-15 22:44 - 2017-03-02 19:49 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-03-15 22:44 - 2017-03-02 19:49 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-03-15 22:44 - 2017-03-02 19:44 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-03-15 22:44 - 2017-03-02 19:41 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-03-15 22:44 - 2017-03-02 19:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-03-15 22:44 - 2017-03-02 19:35 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-03-15 22:44 - 2017-03-02 19:32 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-03-15 22:44 - 2017-03-02 19:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-03-15 22:44 - 2017-03-02 19:29 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-03-15 22:44 - 2017-03-02 19:28 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-03-15 22:44 - 2017-03-02 19:22 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-03-15 22:44 - 2017-03-02 19:21 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-03-15 22:44 - 2017-03-02 19:19 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-03-15 22:44 - 2017-03-02 19:19 - 00689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-03-15 22:44 - 2017-03-02 19:17 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-03-15 22:44 - 2017-03-02 19:17 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-03-15 22:44 - 2017-03-02 19:11 - 13654528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-15 22:44 - 2017-03-02 18:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-15 22:44 - 2017-03-02 18:50 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-15 22:44 - 2017-03-02 18:50 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-03-15 22:44 - 2017-02-11 17:50 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-15 22:44 - 2017-02-11 17:50 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-15 22:44 - 2017-02-11 17:50 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-15 22:44 - 2017-02-10 18:17 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-03-15 22:44 - 2017-02-10 18:17 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-03-15 22:44 - 2017-02-10 16:33 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-15 22:44 - 2017-02-10 16:33 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-15 22:44 - 2017-02-09 18:19 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-03-15 22:44 - 2017-02-09 18:19 - 03945192 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-15 22:44 - 2017-02-09 18:19 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-03-15 22:44 - 2017-02-09 18:19 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-03-15 22:44 - 2017-02-09 18:16 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-03-15 22:44 - 2017-02-09 17:53 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-03-15 22:44 - 2017-02-09 17:53 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-03-15 22:44 - 2017-02-09 17:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-03-15 22:44 - 2017-02-09 17:53 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-03-15 22:44 - 2017-02-09 17:53 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-03-15 22:44 - 2017-02-09 17:52 - 02400256 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-15 22:44 - 2017-02-09 17:51 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-03-15 22:44 - 2017-02-09 17:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-03-15 22:44 - 2017-02-09 17:49 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-03-15 22:44 - 2017-02-09 17:49 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-03-15 22:44 - 2017-02-09 17:49 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-03-15 22:44 - 2017-02-09 17:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-03-15 22:44 - 2017-02-09 17:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-03-15 22:44 - 2017-02-09 17:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-03-15 22:44 - 2017-02-09 17:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-03-15 22:44 - 2017-02-06 18:03 - 00497152 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-03-15 22:44 - 2017-01-13 19:45 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-15 22:44 - 2017-01-13 19:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-03-15 22:44 - 2017-01-11 19:43 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-15 22:44 - 2017-01-11 19:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2017-03-15 22:44 - 2017-01-06 19:44 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-03-14 01:18 - 2017-03-14 02:35 - 00000000 ____D C:\Users\MEDIATEC\Desktop\مسؤول القسم فصل الثاني 1م
2017-03-13 08:45 - 2017-03-13 08:45 - 32037850 _____ C:\Users\MEDIATEC\Downloads\ms1sequence3-memydailyactivities-170204165214 (1) (1).pdf
2017-03-13 08:45 - 2017-03-13 08:45 - 32037850 _____ C:\Users\MEDIATEC\Desktop\ms1sequence3-memydailyactivities-170204165214 (1) (1) (1).pdf
2017-03-13 08:33 - 2017-03-13 08:41 - 32037850 _____ C:\Users\MEDIATEC\Downloads\ms1sequence3-memydailyactivities-170204165214.pdf
2017-03-13 08:33 - 2017-03-13 08:41 - 32037850 _____ C:\Users\MEDIATEC\Downloads\ms1sequence3-memydailyactivities-170204165214 (1).pdf
2017-03-10 22:14 - 2017-03-10 22:14 - 00000000 ____D C:\Users\MEDIATEC\Desktop\Qran
2017-03-10 17:44 - 2017-03-11 16:58 - 00000000 ____D C:\Users\MEDIATEC\Desktop\phots cahier de text
2017-03-10 15:59 - 2017-03-10 16:28 - 00000000 ____D C:\Users\MEDIATEC\Desktop\all very hoot nwer
2017-03-10 12:11 - 2017-03-10 23:05 - 00000000 ____D C:\Users\MEDIATEC\Desktop\inspector jamilaa english 2017 t&1erssam
2017-03-07 21:58 - 2017-03-12 21:32 - 00000000 ____D C:\Users\MEDIATEC\Desktop\الفصل الثاني نتائج
2017-03-07 20:35 - 2017-03-07 22:09 - 00000000 ____D C:\Users\MEDIATEC\Desktop\exel rserve original
2017-03-07 17:35 - 2017-03-07 17:35 - 00000000 ____D C:\Users\MEDIATEC\Desktop\camm prog
2017-03-07 16:35 - 2017-03-07 16:35 - 00183327 _____ C:\Users\MEDIATEC\Downloads\WebcamViewer V1.0.zip
2017-03-06 21:45 - 2017-03-14 01:02 - 00000000 ____D C:\Users\MEDIATEC\Desktop\exel pour exam programe 2017 benkhelouf
2017-03-06 15:38 - 2017-03-13 19:18 - 00000000 ____D C:\Users\MEDIATEC\Desktop\all new hoot
2017-03-04 22:32 - 2017-03-04 22:32 - 00001935 _____ C:\Users\Public\Desktop\Krita.lnk
2017-03-04 22:32 - 2017-03-04 22:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Krita
2017-03-04 22:31 - 2017-03-04 22:32 - 00000000 ____D C:\Program Files\Krita (x86)
2017-03-04 22:29 - 2017-03-04 22:40 - 00000000 ____D C:\Users\MEDIATEC\z مواضيع هامة جدااا و ردود و مشاركات
2017-03-04 22:19 - 2017-03-04 22:26 - 48947232 _____ (Krita Foundation) C:\Users\MEDIATEC\Downloads\krita-3.1.2.2-x86-setup.exe
2017-03-01 15:52 - 2017-03-01 15:52 - 00402982 _____ C:\Users\MEDIATEC\Downloads\likes.htm
2017-02-28 23:24 - 2017-02-28 23:26 - 03059583 _____ C:\Users\MEDIATEC\Downloads\Arrêté-363-Master-inscription.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-03-30 18:13 - 2016-11-18 12:54 - 00000000 ____D C:\Users\MEDIATEC\AppData\LocalLow\Mozilla
2017-03-30 17:51 - 2016-12-27 16:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-03-30 17:48 - 2016-12-18 21:00 - 00002192 _____ C:\Users\MEDIATEC\Desktop\Google Chrome.lnk
2017-03-30 17:48 - 2016-12-18 21:00 - 00002008 _____ C:\Users\MEDIATEC\Desktop\Internet Explorer.lnk
2017-03-30 17:48 - 2016-12-18 21:00 - 00001979 _____ C:\Users\MEDIATEC\Desktop\Mozilla Firefox.lnk
2017-03-30 17:48 - 2016-12-18 21:00 - 00001896 _____ C:\Users\MEDIATEC\Desktop\Opera.lnk
2017-03-30 17:48 - 2016-12-18 21:00 - 00001887 _____ C:\Users\MEDIATEC\Desktop\Safari.lnk
2017-03-30 17:48 - 2016-01-23 15:04 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-30 17:48 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-30 17:47 - 2009-07-14 06:34 - 00026112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-30 17:47 - 2009-07-14 06:34 - 00026112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-30 17:35 - 2016-12-02 18:48 - 00000000 ____D C:\Users\MEDIATEC\Desktop\0à bab wahren
2017-03-30 13:07 - 2016-01-28 15:01 - 00000000 ____D C:\Program Files\CCleaner Cloud
2017-03-29 22:59 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2017-03-29 21:37 - 2016-01-14 18:49 - 00002139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-29 21:37 - 2016-01-14 18:49 - 00002127 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-03-29 10:17 - 2016-01-23 14:47 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-03-28 23:31 - 2016-12-12 01:10 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-03-28 18:42 - 2016-01-23 20:02 - 00000000 ____D C:\Users\MEDIATEC\all waw sxx gf
2017-03-28 04:38 - 2016-01-14 18:50 - 00000000 ____D C:\Users\MEDIATEC\AppData\Roaming\vlc
2017-03-27 09:47 - 2012-08-02 02:14 - 00704242 _____ C:\Windows\system32\perfh00C.dat
2017-03-27 09:47 - 2012-08-02 02:14 - 00434288 _____ C:\Windows\system32\perfh001.dat
2017-03-27 09:47 - 2012-08-02 02:14 - 00130548 _____ C:\Windows\system32\perfc00C.dat
2017-03-27 09:47 - 2012-08-02 02:14 - 00078786 _____ C:\Windows\system32\perfc001.dat
2017-03-27 09:47 - 2011-01-21 13:16 - 00675760 _____ C:\Windows\system32\perfh019.dat
2017-03-27 09:47 - 2011-01-21 13:16 - 00132318 _____ C:\Windows\system32\perfc019.dat
2017-03-27 09:47 - 2010-11-20 23:01 - 02867076 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-25 00:21 - 2016-08-07 18:30 - 00000058 _____ C:\Users\MEDIATEC\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2017-03-22 13:16 - 2016-01-23 14:30 - 00000000 ____D C:\Program Files\Opera
2017-03-16 23:31 - 2016-01-28 15:35 - 00000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-03-16 23:31 - 2016-01-28 15:35 - 00000000 ____D C:\Program Files\CCleaner
2017-03-16 21:40 - 2017-02-03 17:53 - 00000000 ____D C:\Users\MEDIATEC\Desktop\3 am
2017-03-16 16:15 - 2016-01-14 18:29 - 00000000 ____D C:\Users\MEDIATEC
2017-03-16 04:19 - 2009-07-14 06:33 - 00411992 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-16 04:17 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker
2017-03-14 23:12 - 2016-01-23 18:52 - 00007889 _____ C:\Windows\BRRBCOM.INI
2017-03-14 19:55 - 2016-01-28 14:04 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-03-14 19:55 - 2016-01-28 14:04 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-03-14 19:55 - 2016-01-28 14:04 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-13 18:12 - 2016-12-27 16:57 - 00805088 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2017-03-13 18:12 - 2016-12-27 16:57 - 00155360 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2017-03-13 18:12 - 2016-06-14 18:47 - 00165088 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\kneps.sys
2017-03-13 18:12 - 2016-06-02 23:39 - 00116960 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys
2017-03-13 18:11 - 2016-06-20 18:51 - 00128736 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2017-03-10 17:45 - 2016-12-30 16:02 - 00000000 ____D C:\Users\MEDIATEC\Desktop\phne lst my sumsung
2017-03-10 12:19 - 2016-01-23 19:19 - 00000000 ____D C:\Users\MEDIATEC\Desktop\VERRYY WAW IMPORTANT
2017-03-10 12:17 - 2016-08-31 15:48 - 00000000 ____D C:\Users\MEDIATEC\Desktop\english doc 2016-2017
2017-03-10 12:16 - 2016-10-11 16:23 - 00000000 ____D C:\Users\MEDIATEC\Desktop\MY Book of English
2017-03-10 12:15 - 2016-06-28 14:51 - 00000000 ____D C:\Users\MEDIATEC\english very
2017-03-10 12:15 - 2016-02-18 19:47 - 00000000 ____D C:\Users\MEDIATEC\new doc all engish
2017-03-10 12:11 - 2016-11-22 22:29 - 00000000 ____D C:\Users\MEDIATEC\Desktop\Mr Inpector Dahache
2017-03-08 16:40 - 2009-07-14 06:53 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-03-07 23:02 - 2016-12-13 14:40 - 00000000 ____D C:\Users\MEDIATEC\Desktop\قوائم التلاميذ
2017-03-04 22:52 - 2017-01-03 04:48 - 00000000 ____D C:\Users\MEDIATEC\Desktop\د شحرور رد عليه
2017-03-04 22:51 - 2016-11-16 00:56 - 00000000 ____D C:\Users\MEDIATEC\Desktop\test n 2 3 am
2017-03-04 22:43 - 2016-12-31 13:11 - 00000000 ____D C:\Users\MEDIATEC\Desktop\aaaaa sama samoura
2017-03-04 16:48 - 2017-02-09 23:45 - 00000000 ____D C:\Users\MEDIATEC\Desktop\samar samoura pic
2017-03-01 18:07 - 2017-02-24 15:49 - 00000000 ____D C:\Users\MEDIATEC\Desktop\sima sima piics kabyle so beautiful and so hot fb with karim ryad
==================== Fichiers à la racine de certains dossiers =======
2016-06-19 02:42 - 2016-06-19 02:43 - 0000600 _____ () C:\Users\MEDIATEC\AppData\Roaming\PUTTY.RND
2016-08-07 18:30 - 2017-03-25 00:21 - 0000058 _____ () C:\Users\MEDIATEC\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2016-06-19 02:41 - 2016-06-19 02:44 - 0000600 _____ () C:\Users\MEDIATEC\AppData\Local\PUTTY.RND
2017-03-24 23:40 - 2017-03-24 23:40 - 0004143 _____ () C:\ProgramData\dfnpcrng.nwi
2016-01-14 18:40 - 2016-01-14 18:40 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2017-03-24 23:40 - 2017-03-24 23:40 - 0000016 _____ () C:\ProgramData\mntemp
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-11-29 17:18
==================== Fin de FRST.txt ============================
Exécuté par MEDIATEC (administrateur) sur MEDIATEC-PC (30-03-2017 18:25:06)
Exécuté depuis C:\Users\MEDIATEC\Desktop
Profils chargés: MEDIATEC (Profils disponibles: MEDIATEC)
Platform: Microsoft Windows 7 Édition Intégrale Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
() C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
(Piriform) C:\Program Files\CCleaner Cloud\CCleanerCloudTray.exe
(Piriform) C:\Program Files\CCleaner Cloud\CCleanerCloudAgent.exe
() C:\ProgramData\ZDSupport\ZDServ\CancelAutoPlay_Server.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) C:\Program Files\Brother\Brother Help\BrotherHelp.exe
(AntGROUP) C:\Program Files\Ant Download Manager\antMR.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.292\SSScheduler.exe
(Microsoft Corporation) D:\MEDIATEC\MEDIATEChost.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) C:\Program Files\ControlCenter4\BrCcUxSys.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Brother Industries, Ltd.) C:\Program Files\Browny02\BrYNSvc.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avpui.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(AO Kaspersky Lab) C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksdeui.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\System32\osk.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe [6688472 2014-05-14] (Realtek Semiconductor)
HKLM\...\Run: [CCleanerCloudTray] => C:\Program Files\CCleaner Cloud\CCleanerCloudTray.exe [2772392 2017-01-19] (Piriform)
HKLM\...\Run: [ControlCenter4] => C:\Program Files\ControlCenter4\BrCcBoot.exe [139264 2013-05-14] (Brother Industries, Ltd.)
HKLM\...\Run: [BrStsMon00] => C:\Program Files\Browny02\Brother\BrStMonW.exe [4522496 2012-12-27] (Brother Industries, Ltd.)
HKLM\...\Run: [BrHelp] => C:\Program Files\Brother\Brother Help\BrotherHelp.exe [2009088 2013-01-18] (Brother Industries, Ltd.)
HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7347928 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\Run: [antMR] => C:\Program Files\Ant Download Manager\antMR.exe [130048 2016-02-15] (AntGROUP)
HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\MountPoints2: {eefd71fe-0723-11e6-b7df-d8cb8ac4c1bb} - F:\AutoRun.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-01-24]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.292\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\MEDIATEC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HelpMEDIATEC.lnk [2017-03-30]
ShortcutTarget: HelpMEDIATEC.lnk -> C:\MEDIATEC\MEDIATEChost.exe (Microsoft Corporation)
Startup: C:\Users\MEDIATEC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ManualMEDIATEC.lnk [2017-03-30]
ShortcutTarget: ManualMEDIATEC.lnk -> D:\MEDIATEC\MEDIATEChost.exe (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AD325E53-9BAD-4D73-BDA0-AC0462585B67}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{CB157FAA-3C2E-4357-B46C-CD19DCA007F8}: [DhcpNameServer] 192.168.0.1 192.168.0.1
Internet Explorer:
==================
BHO: Kaspersky Protection -> {2E38825B-8815-42CF-9126-C58BC28D4591} -> C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-27] (AO Kaspersky Lab)
Toolbar: HKLM - Kaspersky Protection Toolbar - {093F479D-712E-46CD-9E06-62E734A05F68} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\IEExt\ie_plugin.dll [2016-12-27] (AO Kaspersky Lab)
FireFox:
========
FF DefaultProfile: kkyip6iz.default
FF ProfilePath: C:\Users\MEDIATEC\AppData\Roaming\Mozilla\Firefox\Profiles\kkyip6iz.default [2017-03-30]
FF Extension: (Adblock Plus) - C:\Users\MEDIATEC\AppData\Roaming\Mozilla\Firefox\Profiles\kkyip6iz.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23]
FF Extension: (Site Deployment Checker) - C:\Users\MEDIATEC\AppData\Roaming\Mozilla\Firefox\Profiles\kkyip6iz.default\features\{7955cd53-c47c-4029-8a8a-e5bdd5a07b92}\deployment-checker@mozilla.org.xpi [2017-03-28]
FF Extension: (Site Deployment Checker) - C:\Program Files\Mozilla Firefox\browser\features\deployment-checker@mozilla.org.xpi [2017-03-28] [non signé]
FF HKLM\...\Firefox\Extensions: [light_plugin_F6F079488B53499DB99380A7E11A93F6@kaspersky.com] - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\FFExt\light_plugin_firefox\addon.xpi [2016-12-27]
FF HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\Firefox\Extensions: [antgroup@antdownloadmanager.com] - C:\Program Files\Ant Download Manager\antFF\antFF.xpi
FF Extension: (AntFF) - C:\Program Files\Ant Download Manager\antFF\antFF.xpi [2016-01-12]
FF HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\SeaMonkey\Extensions: [antgroup@antdownloadmanager.com] - C:\Program Files\Ant Download Manager\antFF\antFF.xpi
FF HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files\Internet Download Manager\idmmzcc2.xpi => non trouvé(e)
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_25_0_0_127.dll [2017-03-14] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
Chrome:
=======
CHR NewTab: Default -> Not-active:"chrome-extension://glinaglcjdnchhbdnggipbjnapchnfkg/html/newtab.html"
CHR DefaultSearchURL: Default -> hxxp://www.blpsearch.com/search?sid={SYSID}&aid={APPID}&itype=u&src=ds&p={searchTerms}&tm=0
CHR DefaultSearchKeyword: Default -> Default-Search
CHR Profile: C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default [2017-03-30]
CHR Extension: (Google Docs) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-23]
CHR Extension: (Google Drive) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-23]
CHR Extension: (YouTube) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-23]
CHR Extension: (Recherche Google) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-23]
CHR Extension: (AntDM Integration Extension) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgdfkgijmihakgkpgfihkhoflogmiphp [2016-02-24]
CHR Extension: (Kaspersky Protection) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhoibnponjcgjgcnfacekaijdbbplhib [2017-01-26]
CHR Extension: (Google Docs hors connexion) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Movies Tab) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\glinaglcjdnchhbdnggipbjnapchnfkg [2017-01-24]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-23]
CHR Extension: (Chrome Media Router) - C:\Users\MEDIATEC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-17]
CHR HKLM\...\Chrome\Extension: [fhoibnponjcgjgcnfacekaijdbbplhib] - hxxps://chrome.google.com/webstore/detail/fhoibnponjcgjgcnfacekaijdbbplhib
CHR HKU\S-1-5-21-3590654476-3591578572-3430227536-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fgdfkgijmihakgkpgfihkhoflogmiphp] - C:\Program Files\Ant Download Manager\antCH\antCH.crx [2016-02-24]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AVP17.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 17.0.0\avp.exe [241544 2016-06-28] (AO Kaspersky Lab)
R3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [282112 2012-10-26] (Brother Industries, Ltd.) [Fichier non signé]
R2 CCleanerCloudAgentService; C:\Program Files\CCleaner Cloud\CCleanerCloudAgent.exe [18618280 2017-01-19] (Piriform)
S3 cphs; C:\Windows\system32\IntelCpHeciSvc.exe [279000 2014-05-21] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [277976 2014-05-21] (Intel Corporation)
R2 KSDE1.0.0; C:\Program Files\Kaspersky Lab\Kaspersky Secure Connection 1.0\ksde.exe [241544 2016-06-28] (AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R2 ZDServ; C:\ProgramData\ZDSupport\ZDServ\ZDServ.exe [427264 2013-11-06] ()
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [170840 2016-06-10] (AO Kaspersky Lab)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD.sys [37576 2014-02-03] ()
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [165296 2016-06-02] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [57264 2016-06-08] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [71504 2016-06-15] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [69000 2016-06-01] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [155360 2017-03-13] (AO Kaspersky Lab)
R1 klhk; C:\Windows\System32\DRIVERS\klhk.sys [128736 2017-03-13] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [805088 2017-03-13] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [49744 2016-12-27] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [46000 2016-05-19] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [38072 2015-06-07] (Kaspersky Lab ZAO)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [41392 2016-06-01] (AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\DRIVERS\kltap.sys [48056 2016-06-07] (The OpenVPN Project)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [71088 2016-05-18] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [116960 2017-03-13] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [165088 2017-03-13] (AO Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [24448 2016-03-10] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [170200 2017-03-30] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [53120 2016-03-10] (Malwarebytes Corporation)
R3 Serenum; C:\Windows\System32\DRIVERS\nuvserenum.sys [17920 2014-01-12] (Windows (R) Win 7 DDK provider)
R3 Serial; C:\Windows\System32\DRIVERS\nuvserial.sys [76288 2014-01-12] (Nuvoton Technology Corp.)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-03-30 18:25 - 2017-03-30 18:26 - 00014516 _____ C:\Users\MEDIATEC\Desktop\FRST.txt
2017-03-30 18:24 - 2017-03-30 18:25 - 00000000 ____D C:\FRST
2017-03-30 18:22 - 2017-03-30 18:23 - 01766912 _____ (Farbar) C:\Users\MEDIATEC\Desktop\FRST.exe
2017-03-30 17:34 - 2017-03-30 17:38 - 00004371 _____ C:\Users\MEDIATEC\Desktop\ZHPCleaner.txt
2017-03-30 17:20 - 2017-03-30 17:20 - 00000795 _____ C:\Users\MEDIATEC\Desktop\ZHPCleaner.lnk
2017-03-30 17:15 - 2017-03-30 17:18 - 02754048 _____ C:\Users\MEDIATEC\Desktop\ZHPCleaner.exe
2017-03-30 17:07 - 2017-03-30 17:07 - 00106441 _____ C:\Users\MEDIATEC\Desktop\ZHPDiag.txt
2017-03-30 17:00 - 2017-03-30 17:38 - 00000000 ____D C:\Users\MEDIATEC\AppData\Roaming\ZHP
2017-03-30 17:00 - 2017-03-30 17:00 - 00000785 _____ C:\Users\MEDIATEC\Desktop\ZHPDiag.lnk
2017-03-30 16:55 - 2017-03-30 16:59 - 02713088 _____ C:\Users\MEDIATEC\Desktop\ZHPDiag3.exe
2017-03-30 01:03 - 2017-03-30 01:03 - 00371330 _____ C:\Users\MEDIATEC\Downloads\kader.nabilo
2017-03-27 21:56 - 2017-03-27 21:59 - 00000000 ____D C:\Users\MEDIATEC\Desktop\english inspecto cahier de text
2017-03-27 19:46 - 2017-03-27 19:46 - 00361526 _____ C:\Users\MEDIATEC\Downloads\profile(4).php
2017-03-27 17:09 - 2017-03-29 01:01 - 00000000 ____D C:\Users\MEDIATEC\Desktop\aa n rayen pics
2017-03-25 01:29 - 2017-03-25 01:29 - 00000000 ____D C:\Users\MEDIATEC\AppData\Local\VideoCapture
2017-03-25 00:24 - 2017-03-25 00:24 - 00000000 ____D C:\Users\MEDIATEC\AppData\Local\VideoEditor
2017-03-24 23:42 - 2017-03-24 23:42 - 00001148 _____ C:\Users\Public\Desktop\Movavi Screen Capture Studio 8.lnk
2017-03-24 23:42 - 2017-03-24 23:42 - 00000000 ____D C:\Users\MEDIATEC\AppData\Local\ScreenCapture
2017-03-24 23:42 - 2017-03-24 23:42 - 00000000 ____D C:\Users\MEDIATEC\AppData\Local\Movavi
2017-03-24 23:42 - 2017-03-24 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movavi Screen Capture Studio 8
2017-03-24 23:41 - 2017-03-24 23:42 - 00000000 ____D C:\Program Files\Movavi Screen Capture Studio 8
2017-03-24 23:40 - 2017-03-24 23:40 - 00004143 _____ C:\ProgramData\dfnpcrng.nwi
2017-03-24 23:40 - 2017-03-24 23:40 - 00000016 _____ C:\ProgramData\mntemp
2017-03-24 23:40 - 2017-03-24 23:40 - 00000000 ____D C:\ProgramData\Movavi Screen Capture Studio 8
2017-03-24 23:26 - 2017-03-24 23:40 - 71706520 _____ (Movavi) C:\Users\MEDIATEC\Downloads\MovaviScreenCaptureSetupF.exe
2017-03-24 13:19 - 2017-03-24 13:19 - 00000000 ____D C:\Users\MEDIATEC\Desktop\بيع بالمفتاح
2017-03-24 13:18 - 2017-03-24 13:18 - 00182555 _____ C:\Users\MEDIATEC\Downloads\Bureau.rar
2017-03-23 15:41 - 2017-03-23 15:41 - 00065362 _____ C:\Users\MEDIATEC\Downloads\https _chaturbate.com_vickydiego_.htm
2017-03-21 11:36 - 2017-03-21 23:07 - 00000000 ____D C:\Users\MEDIATEC\Desktop\ملك اليمين
2017-03-18 21:41 - 2017-03-18 21:42 - 00000000 ____D C:\Users\MEDIATEC\Desktop\د شحرور22 ردود اخرى على د شحرور
2017-03-17 13:21 - 2017-03-17 13:23 - 05732727 _____ C:\Users\MEDIATEC\Downloads\zip
2017-03-17 13:11 - 2017-03-17 13:11 - 00121021 _____ C:\Users\MEDIATEC\Downloads\________.html
2017-03-16 23:29 - 2017-03-16 23:30 - 06834069 _____ C:\Users\MEDIATEC\Downloads\CCleaner Technician 5.27.5976 by assirem43.rar
2017-03-16 20:28 - 2017-03-24 23:51 - 00000000 ____D C:\Users\MEDIATEC\Desktop\aaaa aa asma
2017-03-16 20:28 - 2017-03-19 16:38 - 00000000 ____D C:\Users\MEDIATEC\Desktop\Nouveau dossier
2017-03-15 22:44 - 2017-03-04 18:39 - 00346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-03-15 22:44 - 2017-03-04 06:18 - 20281856 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-03-15 22:44 - 2017-03-04 05:28 - 00103936 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-03-15 22:44 - 2017-03-02 20:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-03-15 22:44 - 2017-03-02 20:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-03-15 22:44 - 2017-03-02 20:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-03-15 22:44 - 2017-03-02 20:01 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-03-15 22:44 - 2017-03-02 20:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-03-15 22:44 - 2017-03-02 20:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-03-15 22:44 - 2017-03-02 20:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-03-15 22:44 - 2017-03-02 19:55 - 02287104 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-03-15 22:44 - 2017-03-02 19:54 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-03-15 22:44 - 2017-03-02 19:53 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-03-15 22:44 - 2017-03-02 19:51 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-03-15 22:44 - 2017-03-02 19:50 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-03-15 22:44 - 2017-03-02 19:49 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-03-15 22:44 - 2017-03-02 19:49 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-03-15 22:44 - 2017-03-02 19:44 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-03-15 22:44 - 2017-03-02 19:41 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-03-15 22:44 - 2017-03-02 19:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-03-15 22:44 - 2017-03-02 19:35 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-03-15 22:44 - 2017-03-02 19:32 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-03-15 22:44 - 2017-03-02 19:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-03-15 22:44 - 2017-03-02 19:29 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-03-15 22:44 - 2017-03-02 19:28 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-03-15 22:44 - 2017-03-02 19:22 - 04604416 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-03-15 22:44 - 2017-03-02 19:21 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-03-15 22:44 - 2017-03-02 19:19 - 00693248 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-03-15 22:44 - 2017-03-02 19:19 - 00689664 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-03-15 22:44 - 2017-03-02 19:17 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-03-15 22:44 - 2017-03-02 19:17 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-03-15 22:44 - 2017-03-02 19:11 - 13654528 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-03-15 22:44 - 2017-03-02 18:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-03-15 22:44 - 2017-03-02 18:50 - 01312768 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-03-15 22:44 - 2017-03-02 18:50 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-03-15 22:44 - 2017-02-11 17:50 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-15 22:44 - 2017-02-11 17:50 - 00311808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-15 22:44 - 2017-02-11 17:50 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-15 22:44 - 2017-02-10 18:17 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-03-15 22:44 - 2017-02-10 18:17 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-03-15 22:44 - 2017-02-10 16:33 - 01251328 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-03-15 22:44 - 2017-02-10 16:33 - 00909824 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-03-15 22:44 - 2017-02-09 18:19 - 04000488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2017-03-15 22:44 - 2017-02-09 18:19 - 03945192 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-03-15 22:44 - 2017-02-09 18:19 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-03-15 22:44 - 2017-02-09 18:19 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-03-15 22:44 - 2017-02-09 18:16 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 01062912 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00481792 _____ (Microsoft Corporation) C:\Windows\system32\mscms.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00261120 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\icm32.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-03-15 22:44 - 2017-02-09 18:14 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-03-15 22:44 - 2017-02-09 17:53 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-03-15 22:44 - 2017-02-09 17:53 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-03-15 22:44 - 2017-02-09 17:53 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-03-15 22:44 - 2017-02-09 17:53 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-03-15 22:44 - 2017-02-09 17:53 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-03-15 22:44 - 2017-02-09 17:52 - 02400256 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-03-15 22:44 - 2017-02-09 17:51 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-03-15 22:44 - 2017-02-09 17:51 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\WcsPlugInService.dll
2017-03-15 22:44 - 2017-02-09 17:49 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-03-15 22:44 - 2017-02-09 17:49 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-03-15 22:44 - 2017-02-09 17:49 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-03-15 22:44 - 2017-02-09 17:49 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-03-15 22:44 - 2017-02-09 17:49 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-03-15 22:44 - 2017-02-09 17:49 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-03-15 22:44 - 2017-02-09 17:49 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-03-15 22:44 - 2017-02-06 18:03 - 00497152 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-03-15 22:44 - 2017-01-13 19:45 - 00741888 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-15 22:44 - 2017-01-13 19:45 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-03-15 22:44 - 2017-01-11 19:43 - 01241088 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-03-15 22:44 - 2017-01-11 19:43 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2017-03-15 22:44 - 2017-01-06 19:44 - 01329664 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2017-03-14 01:18 - 2017-03-14 02:35 - 00000000 ____D C:\Users\MEDIATEC\Desktop\مسؤول القسم فصل الثاني 1م
2017-03-13 08:45 - 2017-03-13 08:45 - 32037850 _____ C:\Users\MEDIATEC\Downloads\ms1sequence3-memydailyactivities-170204165214 (1) (1).pdf
2017-03-13 08:45 - 2017-03-13 08:45 - 32037850 _____ C:\Users\MEDIATEC\Desktop\ms1sequence3-memydailyactivities-170204165214 (1) (1) (1).pdf
2017-03-13 08:33 - 2017-03-13 08:41 - 32037850 _____ C:\Users\MEDIATEC\Downloads\ms1sequence3-memydailyactivities-170204165214.pdf
2017-03-13 08:33 - 2017-03-13 08:41 - 32037850 _____ C:\Users\MEDIATEC\Downloads\ms1sequence3-memydailyactivities-170204165214 (1).pdf
2017-03-10 22:14 - 2017-03-10 22:14 - 00000000 ____D C:\Users\MEDIATEC\Desktop\Qran
2017-03-10 17:44 - 2017-03-11 16:58 - 00000000 ____D C:\Users\MEDIATEC\Desktop\phots cahier de text
2017-03-10 15:59 - 2017-03-10 16:28 - 00000000 ____D C:\Users\MEDIATEC\Desktop\all very hoot nwer
2017-03-10 12:11 - 2017-03-10 23:05 - 00000000 ____D C:\Users\MEDIATEC\Desktop\inspector jamilaa english 2017 t&1erssam
2017-03-07 21:58 - 2017-03-12 21:32 - 00000000 ____D C:\Users\MEDIATEC\Desktop\الفصل الثاني نتائج
2017-03-07 20:35 - 2017-03-07 22:09 - 00000000 ____D C:\Users\MEDIATEC\Desktop\exel rserve original
2017-03-07 17:35 - 2017-03-07 17:35 - 00000000 ____D C:\Users\MEDIATEC\Desktop\camm prog
2017-03-07 16:35 - 2017-03-07 16:35 - 00183327 _____ C:\Users\MEDIATEC\Downloads\WebcamViewer V1.0.zip
2017-03-06 21:45 - 2017-03-14 01:02 - 00000000 ____D C:\Users\MEDIATEC\Desktop\exel pour exam programe 2017 benkhelouf
2017-03-06 15:38 - 2017-03-13 19:18 - 00000000 ____D C:\Users\MEDIATEC\Desktop\all new hoot
2017-03-04 22:32 - 2017-03-04 22:32 - 00001935 _____ C:\Users\Public\Desktop\Krita.lnk
2017-03-04 22:32 - 2017-03-04 22:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Krita
2017-03-04 22:31 - 2017-03-04 22:32 - 00000000 ____D C:\Program Files\Krita (x86)
2017-03-04 22:29 - 2017-03-04 22:40 - 00000000 ____D C:\Users\MEDIATEC\z مواضيع هامة جدااا و ردود و مشاركات
2017-03-04 22:19 - 2017-03-04 22:26 - 48947232 _____ (Krita Foundation) C:\Users\MEDIATEC\Downloads\krita-3.1.2.2-x86-setup.exe
2017-03-01 15:52 - 2017-03-01 15:52 - 00402982 _____ C:\Users\MEDIATEC\Downloads\likes.htm
2017-02-28 23:24 - 2017-02-28 23:26 - 03059583 _____ C:\Users\MEDIATEC\Downloads\Arrêté-363-Master-inscription.pdf
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-03-30 18:13 - 2016-11-18 12:54 - 00000000 ____D C:\Users\MEDIATEC\AppData\LocalLow\Mozilla
2017-03-30 17:51 - 2016-12-27 16:58 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2017-03-30 17:48 - 2016-12-18 21:00 - 00002192 _____ C:\Users\MEDIATEC\Desktop\Google Chrome.lnk
2017-03-30 17:48 - 2016-12-18 21:00 - 00002008 _____ C:\Users\MEDIATEC\Desktop\Internet Explorer.lnk
2017-03-30 17:48 - 2016-12-18 21:00 - 00001979 _____ C:\Users\MEDIATEC\Desktop\Mozilla Firefox.lnk
2017-03-30 17:48 - 2016-12-18 21:00 - 00001896 _____ C:\Users\MEDIATEC\Desktop\Opera.lnk
2017-03-30 17:48 - 2016-12-18 21:00 - 00001887 _____ C:\Users\MEDIATEC\Desktop\Safari.lnk
2017-03-30 17:48 - 2016-01-23 15:04 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-30 17:48 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-30 17:47 - 2009-07-14 06:34 - 00026112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-30 17:47 - 2009-07-14 06:34 - 00026112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-30 17:35 - 2016-12-02 18:48 - 00000000 ____D C:\Users\MEDIATEC\Desktop\0à bab wahren
2017-03-30 13:07 - 2016-01-28 15:01 - 00000000 ____D C:\Program Files\CCleaner Cloud
2017-03-29 22:59 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2017-03-29 21:37 - 2016-01-14 18:49 - 00002139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-29 21:37 - 2016-01-14 18:49 - 00002127 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-03-29 10:17 - 2016-01-23 14:47 - 00000000 ____D C:\Program Files\Mozilla Firefox
2017-03-28 23:31 - 2016-12-12 01:10 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2017-03-28 18:42 - 2016-01-23 20:02 - 00000000 ____D C:\Users\MEDIATEC\all waw sxx gf
2017-03-28 04:38 - 2016-01-14 18:50 - 00000000 ____D C:\Users\MEDIATEC\AppData\Roaming\vlc
2017-03-27 09:47 - 2012-08-02 02:14 - 00704242 _____ C:\Windows\system32\perfh00C.dat
2017-03-27 09:47 - 2012-08-02 02:14 - 00434288 _____ C:\Windows\system32\perfh001.dat
2017-03-27 09:47 - 2012-08-02 02:14 - 00130548 _____ C:\Windows\system32\perfc00C.dat
2017-03-27 09:47 - 2012-08-02 02:14 - 00078786 _____ C:\Windows\system32\perfc001.dat
2017-03-27 09:47 - 2011-01-21 13:16 - 00675760 _____ C:\Windows\system32\perfh019.dat
2017-03-27 09:47 - 2011-01-21 13:16 - 00132318 _____ C:\Windows\system32\perfc019.dat
2017-03-27 09:47 - 2010-11-20 23:01 - 02867076 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-25 00:21 - 2016-08-07 18:30 - 00000058 _____ C:\Users\MEDIATEC\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2017-03-22 13:16 - 2016-01-23 14:30 - 00000000 ____D C:\Program Files\Opera
2017-03-16 23:31 - 2016-01-28 15:35 - 00000969 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-03-16 23:31 - 2016-01-28 15:35 - 00000000 ____D C:\Program Files\CCleaner
2017-03-16 21:40 - 2017-02-03 17:53 - 00000000 ____D C:\Users\MEDIATEC\Desktop\3 am
2017-03-16 16:15 - 2016-01-14 18:29 - 00000000 ____D C:\Users\MEDIATEC
2017-03-16 04:19 - 2009-07-14 06:33 - 00411992 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-16 04:17 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\DVD Maker
2017-03-14 23:12 - 2016-01-23 18:52 - 00007889 _____ C:\Windows\BRRBCOM.INI
2017-03-14 19:55 - 2016-01-28 14:04 - 00802904 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2017-03-14 19:55 - 2016-01-28 14:04 - 00144472 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2017-03-14 19:55 - 2016-01-28 14:04 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-13 18:12 - 2016-12-27 16:57 - 00805088 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2017-03-13 18:12 - 2016-12-27 16:57 - 00155360 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2017-03-13 18:12 - 2016-06-14 18:47 - 00165088 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\kneps.sys
2017-03-13 18:12 - 2016-06-02 23:39 - 00116960 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys
2017-03-13 18:11 - 2016-06-20 18:51 - 00128736 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2017-03-10 17:45 - 2016-12-30 16:02 - 00000000 ____D C:\Users\MEDIATEC\Desktop\phne lst my sumsung
2017-03-10 12:19 - 2016-01-23 19:19 - 00000000 ____D C:\Users\MEDIATEC\Desktop\VERRYY WAW IMPORTANT
2017-03-10 12:17 - 2016-08-31 15:48 - 00000000 ____D C:\Users\MEDIATEC\Desktop\english doc 2016-2017
2017-03-10 12:16 - 2016-10-11 16:23 - 00000000 ____D C:\Users\MEDIATEC\Desktop\MY Book of English
2017-03-10 12:15 - 2016-06-28 14:51 - 00000000 ____D C:\Users\MEDIATEC\english very
2017-03-10 12:15 - 2016-02-18 19:47 - 00000000 ____D C:\Users\MEDIATEC\new doc all engish
2017-03-10 12:11 - 2016-11-22 22:29 - 00000000 ____D C:\Users\MEDIATEC\Desktop\Mr Inpector Dahache
2017-03-08 16:40 - 2009-07-14 06:53 - 00032496 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-03-07 23:02 - 2016-12-13 14:40 - 00000000 ____D C:\Users\MEDIATEC\Desktop\قوائم التلاميذ
2017-03-04 22:52 - 2017-01-03 04:48 - 00000000 ____D C:\Users\MEDIATEC\Desktop\د شحرور رد عليه
2017-03-04 22:51 - 2016-11-16 00:56 - 00000000 ____D C:\Users\MEDIATEC\Desktop\test n 2 3 am
2017-03-04 22:43 - 2016-12-31 13:11 - 00000000 ____D C:\Users\MEDIATEC\Desktop\aaaaa sama samoura
2017-03-04 16:48 - 2017-02-09 23:45 - 00000000 ____D C:\Users\MEDIATEC\Desktop\samar samoura pic
2017-03-01 18:07 - 2017-02-24 15:49 - 00000000 ____D C:\Users\MEDIATEC\Desktop\sima sima piics kabyle so beautiful and so hot fb with karim ryad
==================== Fichiers à la racine de certains dossiers =======
2016-06-19 02:42 - 2016-06-19 02:43 - 0000600 _____ () C:\Users\MEDIATEC\AppData\Roaming\PUTTY.RND
2016-08-07 18:30 - 2017-03-25 00:21 - 0000058 _____ () C:\Users\MEDIATEC\AppData\Local\DonationCoder_ScreenshotCaptor_InstallInfo.dat
2016-06-19 02:41 - 2016-06-19 02:44 - 0000600 _____ () C:\Users\MEDIATEC\AppData\Local\PUTTY.RND
2017-03-24 23:40 - 2017-03-24 23:40 - 0004143 _____ () C:\ProgramData\dfnpcrng.nwi
2016-01-14 18:40 - 2016-01-14 18:40 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2017-03-24 23:40 - 2017-03-24 23:40 - 0000016 _____ () C:\ProgramData\mntemp
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2016-11-29 17:18
==================== Fin de FRST.txt ============================