Publicité
Publicité
Format du document : text/plain
Prévisualisation
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-03-2017
Ran by Sleipnir (administrator) on SLEIPNIR-PC (22-03-2017 17:03:58)
Running from C:\Users\Sleipnir\Desktop
Loaded Profiles: Sleipnir (Available Profiles: Sleipnir)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Chip Digital GmbH) C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Spotify Ltd) C:\Users\Sleipnir\AppData\Roaming\Spotify\SpotifyWebHelper.exe
() C:\Program Files\YoloMouse\YoloMouse.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(GIGABYTE Technology Co.,Ltd.) C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
() C:\ProgramData\cdblc\cdblc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Razer, Inc.) C:\Users\Sleipnir\AppData\Local\Razer\InGameEngine\cache\RzSynapse\rzcefrenderprocess.exe
(Razer, Inc.) C:\Users\Sleipnir\AppData\Local\Razer\InGameEngine\cache\RzStats.Manager\rzcefrenderprocess.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hammer & Chisel, Inc.) C:\Users\Sleipnir\AppData\Local\Discord\app-0.0.297\Discord.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Hammer & Chisel, Inc.) C:\Users\Sleipnir\AppData\Local\Discord\app-0.0.297\Discord.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Hammer & Chisel, Inc.) C:\Users\Sleipnir\AppData\Local\Discord\app-0.0.297\Discord.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7541464 2014-02-18] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2016-11-04] (Razer Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [27308304 2017-03-06] (Dropbox, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-07-21] (Raptr, Inc)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [909744 2017-02-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61944 2017-02-22] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [Spotify Web Helper] => C:\Users\Sleipnir\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-02-09] (Spotify Ltd)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [YoloMouse] => C:\Program Files\YoloMouse\YoloMouse.exe [222208 2016-11-13] ()
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\MountPoints2: G - "G:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\MountPoints2: {5fb5fd47-b3d0-11e5-9b8b-806e6f6e6963} - D:\.\Bin\ASSETUP.exe
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\MountPoints2: {a0317d7a-b4a1-11e5-8a4b-1c872c57e8ba} - "G:\WD Drive Unlock.exe" autoplay=true
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2016-01-05]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\Users\Sleipnir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sleipnir.lnk [2016-03-25]
ShortcutTarget: Sleipnir.lnk -> C:\ProgramData\cdblc\cdblc.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7A5698D8-9E49-4E0B-A780-69E38290DF5C}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AD767538-86A2-4A27-8D30-BB466451FDBD}: [DhcpNameServer] 10.188.0.1
Tcpip\..\Interfaces\{B836A898-8614-4A20-B1E8-016E3E7BBE5D}: [DhcpNameServer] 10.188.0.1
Internet Explorer:
==================
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://yourtv.link
SearchScopes: HKU\S-1-5-21-792549663-3945398320-1686471432-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/cse?cx=partner-pub-8036109189802438%3A7790813904&ie=UTF-8&q={searchTerms}&sa=Search&siteurl=yourtv.link%2F
SearchScopes: HKU\S-1-5-21-792549663-3945398320-1686471432-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/cse?cx=partner-pub-8036109189802438%3A7790813904&ie=UTF-8&q={searchTerms}&sa=Search&siteurl=yourtv.link%2F
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-04-22] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-22] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
FireFox:
========
FF ProfilePath: C:\Users\Sleipnir\AppData\Roaming\Mozilla\Firefox\Profiles\q3muy2zs.default-1489924349610 [2017-03-22]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\q3muy2zs.default-1489924349610 -> Google
FF Homepage: Mozilla\Firefox\Profiles\q3muy2zs.default-1489924349610 -> hxxp://yourtv.link
FF SearchPlugin: C:\Users\Sleipnir\AppData\Roaming\Mozilla\Firefox\Profiles\q3muy2zs.default-1489924349610\searchplugins\Google .xml [2017-03-22]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2016-04-28] [not signed]
FF HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default [2017-03-20]
CHR Extension: (YouTube) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-06]
CHR Extension: (Adblock for Youtube™) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2016-06-28]
CHR Extension: (Google Search) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-06]
CHR Extension: (Auto Replay for YouTube™) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb [2016-06-28]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-06]
CHR Extension: (Gmail) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-06]
CHR Extension: (Chrome Media Router) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-06]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1115552 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [487424 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [487424 2017-02-17] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1519144 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-05-07] ()
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [349560 2017-03-09] (Avira Operations GmbH & Co. KG)
R2 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [File not signed]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-14] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-14] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [46408 2017-01-21] (Dropbox, Inc.)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1325384 2017-03-16] (Overwolf LTD)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [387376 2013-02-04] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [452912 2013-02-04] (Ralink Technology, Corp.)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-25] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [176968 2017-02-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [148104 2017-02-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-02-17] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [51248 2017-02-17] (Avira Operations GmbH & Co. KG)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [494864 2013-08-29] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2017-03-22] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [3664600 2014-12-16] (Realtek Semiconductor Corporation )
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [48840 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [44144 2016-09-17] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [130880 2015-12-14] (Razer, Inc.)
R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-12-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [194976 2015-12-18] (Oracle Corporation)
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52592 2016-10-06] (Cisco Systems, Inc.)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S1 ESProtectionDriver; \??\C:\Windows\system32\drivers\mbae64.sys [X]
S2 MBAMChameleon; \SystemRoot\system32\drivers\MBAMChameleon.sys [X]
S3 MBAMFarflt; \??\C:\Windows\system32\drivers\farflt.sys [X]
S3 MBAMProtection; \??\C:\Windows\system32\drivers\mbam.sys [X]
S3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [X]
S3 MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [X]
S3 MBAMWebProtection; \??\C:\Windows\system32\drivers\mwac.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-03-22 17:03 - 2017-03-22 17:04 - 00024177 _____ C:\Users\Sleipnir\Desktop\FRST.txt
2017-03-22 17:03 - 2017-03-22 17:03 - 00000000 ____D C:\FRST
2017-03-22 17:02 - 2017-03-22 17:02 - 02424832 _____ (Farbar) C:\Users\Sleipnir\Desktop\FRST64.exe
2017-03-21 00:34 - 2017-03-21 00:34 - 730778095 _____ C:\Windows\MEMORY.DMP
2017-03-21 00:34 - 2017-03-21 00:34 - 00276848 _____ C:\Windows\Minidump\032117-14898-01.dmp
2017-03-21 00:34 - 2017-03-21 00:34 - 00000000 ____D C:\Windows\Minidump
2017-03-20 18:49 - 2017-03-20 18:49 - 00144941 _____ C:\Users\Sleipnir\Desktop\ZHPDiag3.txt
2017-03-20 18:42 - 2017-03-20 18:42 - 00001633 _____ C:\Users\Sleipnir\Desktop\ZHPFix[R1].txt
2017-03-20 18:40 - 2017-03-20 18:40 - 00001633 _____ C:\Users\Sleipnir\Desktop\ZHPFixReport.txt
2017-03-20 18:39 - 2017-03-20 18:40 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-03-20 18:39 - 2017-03-20 18:39 - 00001849 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-03-20 18:39 - 2017-03-20 18:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-03-20 18:38 - 2017-03-20 18:38 - 03521617 _____ (Nicolas Coolman ) C:\Users\Sleipnir\Downloads\zhpfix_2015.10.19.9.exe
2017-03-19 12:52 - 2017-03-19 12:52 - 00000000 ____D C:\Users\Sleipnir\Desktop\Old Firefox Data
2017-03-19 12:44 - 2017-03-19 12:44 - 00144477 _____ C:\Users\Sleipnir\Desktop\ZHPDiag2.txt
2017-03-19 12:33 - 2017-03-19 12:33 - 04031440 _____ C:\Users\Sleipnir\Desktop\adwcleaner_6.044.exe
2017-03-19 12:18 - 2017-03-19 12:18 - 02658304 _____ C:\Users\Sleipnir\Desktop\zhpcleaner_2016.12.24.222(1).exe
2017-03-19 12:13 - 2017-03-19 12:13 - 00000085 _____ C:\Windows\wininit.ini
2017-03-18 13:21 - 2017-03-22 10:27 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-18 13:13 - 2017-03-19 12:26 - 00002123 _____ C:\Users\Sleipnir\Desktop\ZHPCleaner.txt
2017-03-18 13:08 - 2017-03-20 18:48 - 00144938 _____ C:\Users\Sleipnir\Desktop\ZHPDiag.txt
2017-03-18 13:01 - 2017-03-20 18:47 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\ZHP
2017-03-18 13:01 - 2017-03-20 18:46 - 00000826 _____ C:\Users\Sleipnir\Desktop\ZHPDiag.lnk
2017-03-18 13:01 - 2017-03-18 13:01 - 02105344 _____ C:\Users\Sleipnir\Downloads\ZHPDiag3.exe
2017-03-18 04:49 - 2017-03-18 04:49 - 00000282 _____ C:\Users\Sleipnir\Desktop\cheval de troie eset online scanner 18.03.txt
2017-03-18 01:00 - 2017-03-18 01:00 - 00000000 ____D C:\Program Files\Common Files\AV
2017-03-18 01:00 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2017-03-17 23:15 - 2017-03-17 23:15 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2017-03-17 23:14 - 2017-03-19 12:13 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-03-17 23:11 - 2017-03-17 23:12 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Sleipnir\Downloads\spybot-2.4.exe
2017-03-17 22:13 - 2017-03-17 22:13 - 00000000 ____D C:\ProgramData\TEMP
2017-03-17 22:09 - 2017-03-18 01:05 - 00000000 ____D C:\Program Files (x86)\Trojan Remover
2017-03-17 22:08 - 2017-03-17 22:08 - 07642792 _____ (Simply Super Software ) C:\Users\Sleipnir\Downloads\trsetup.exe
2017-03-17 21:57 - 2017-03-17 21:57 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\Avira
2017-03-17 21:56 - 2017-03-17 21:56 - 02870984 _____ (ESET) C:\Users\Sleipnir\Downloads\esetsmartinstaller_fra.exe
2017-03-17 21:56 - 2017-03-17 21:56 - 00000000 ____D C:\Program Files (x86)\ESET
2017-03-17 21:53 - 2017-03-17 21:53 - 00000530 _____ C:\Users\Sleipnir\Desktop\FakeAlert.txt
2017-03-17 21:53 - 2017-03-17 21:53 - 00000000 ____D C:\Users\Sleipnir\Desktop\FAR_Quarantaine
2017-03-17 21:52 - 2017-03-17 21:53 - 00115712 _____ C:\Users\Sleipnir\Downloads\FakeAlertRemover.exe
2017-03-17 21:48 - 2017-03-17 21:48 - 29536400 _____ (SUPERAntiSpyware) C:\Users\Sleipnir\Downloads\SUPERAntiSpyware.exe
2017-03-17 19:55 - 2017-03-20 18:56 - 00000258 __RSH C:\Users\Sleipnir\ntuser.pol
2017-03-17 19:23 - 2017-03-17 19:23 - 57131432 _____ (Malwarebytes ) C:\Users\Sleipnir\Downloads\mb3-setup-consumer-3.0.6.1469-1075(1).exe
2017-03-17 18:59 - 2017-03-17 18:59 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-03-17 18:59 - 2017-03-17 18:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-03-17 18:59 - 2017-03-17 18:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-03-17 18:58 - 2017-03-17 18:59 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Sleipnir\Downloads\mbam-setup.exe
2017-03-17 18:40 - 2017-03-17 18:40 - 00002149 _____ C:\Users\Sleipnir\Desktop\results malware.txt
2017-03-17 18:28 - 2017-03-17 18:28 - 00065536 _____ C:\Users\Sleipnir\AppData\Local\GDIPFONTCACHEV1.DAT
2017-03-17 18:27 - 2017-03-17 18:27 - 00299864 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-17 18:15 - 2017-03-17 18:15 - 00000000 ____D C:\Program Files\Malwarebytes
2017-03-17 18:05 - 2017-03-17 18:06 - 57131432 _____ (Malwarebytes ) C:\Users\Sleipnir\Downloads\mb3-setup-consumer-3.0.6.1469-1075.exe
2017-03-16 10:45 - 2017-03-16 10:45 - 02002429 _____ C:\Users\Sleipnir\Downloads\2016_Felten Maeva_M1.pdf
2017-03-16 10:45 - 2017-03-16 10:45 - 00973641 _____ C:\Users\Sleipnir\Downloads\Bardon et al 2014 New Phytol. (invasive plants - denitrification)(1).pdf
2017-03-16 10:45 - 2017-03-16 10:45 - 00629262 _____ C:\Users\Sleipnir\Downloads\Salles 2014.pdf
2017-03-16 10:45 - 2017-03-16 10:45 - 00427506 _____ C:\Users\Sleipnir\Downloads\Dassonville et al. Biol. Invasions 2011 (invasive plants - denitirification)-1.pdf
2017-03-15 20:33 - 2017-03-15 20:33 - 00044557 _____ C:\Users\Sleipnir\Downloads\convention_33436_ELODIE_CASCIOLA.pdf
2017-03-13 21:04 - 2017-03-13 21:04 - 00078305 _____ C:\Users\Sleipnir\Desktop\Motivation_Letter.pdf
2017-03-12 20:16 - 2017-03-12 20:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-03-06 21:50 - 2017-03-06 21:50 - 00046184 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-03-06 18:52 - 2017-03-06 18:52 - 00019015 _____ C:\Users\Sleipnir\Desktop\mat et methodes systeme fermé.odt
2017-03-06 18:38 - 2017-03-06 18:39 - 00091715 _____ C:\Users\Sleipnir\Desktop\Systeme fermé.odt
2017-03-06 14:18 - 2016-07-07 16:36 - 01896168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-03-06 14:18 - 2016-07-07 16:36 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-03-06 14:18 - 2016-07-07 16:36 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-03-06 14:18 - 2016-07-07 16:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2017-03-06 14:18 - 2016-07-01 16:31 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-06 14:18 - 2016-07-01 16:31 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-03-06 14:18 - 2016-07-01 16:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-06 14:18 - 2016-07-01 16:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2017-03-06 14:18 - 2016-07-01 15:56 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-06 14:18 - 2016-07-01 15:56 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-06 14:18 - 2016-07-01 15:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-03 19:25 - 2017-03-03 19:25 - 00508418 _____ C:\Users\Sleipnir\Downloads\rapport_carence.pdf
2017-03-03 19:25 - 2017-03-03 19:25 - 00508418 _____ C:\Users\Sleipnir\Desktop\rapport_carence.pdf
2017-03-03 18:48 - 2016-02-05 19:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2017-03-03 18:48 - 2016-02-05 19:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2017-03-03 18:48 - 2016-02-05 18:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
2017-03-03 18:48 - 2015-06-03 21:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-03-03 18:47 - 2016-04-09 08:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-03-03 18:47 - 2016-04-09 08:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-03-03 18:47 - 2016-04-09 07:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-03-03 12:05 - 2017-03-03 12:05 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2017-03-03 12:05 - 2017-02-17 09:44 - 00176968 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2017-03-03 12:05 - 2017-02-17 09:44 - 00148104 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2017-03-03 12:05 - 2017-02-17 09:44 - 00078600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2017-03-03 12:05 - 2017-02-17 09:44 - 00051248 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avusbflt.sys
2017-03-03 12:05 - 2017-02-17 09:44 - 00035328 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2017-02-22 16:47 - 2017-02-22 16:47 - 00142158 _____ C:\Users\Sleipnir\Downloads\AffichageResultats.pdf
2017-02-22 16:47 - 2017-02-22 16:47 - 00066053 _____ C:\Users\Sleipnir\Downloads\AffichageResultats(1).pdf
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-03-22 17:00 - 2016-01-14 02:08 - 00000000 ___RD C:\Users\Sleipnir\Dropbox
2017-03-22 16:59 - 2016-11-19 00:27 - 00000000 ____D C:\Users\Sleipnir\AppData\LocalLow\Mozilla
2017-03-22 16:58 - 2016-01-14 02:06 - 00001186 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2017-03-22 16:58 - 2016-01-05 22:31 - 00000000 ____D C:\Users\Sleipnir\Documents\temp
2017-03-22 16:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-22 10:51 - 2016-01-05 19:30 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2017-03-22 10:29 - 2016-01-14 02:06 - 00001190 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2017-03-22 10:14 - 2009-07-14 05:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-22 10:14 - 2009-07-14 05:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-21 01:14 - 2017-01-07 18:40 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\discord
2017-03-21 00:17 - 2016-01-05 20:01 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\TS3Client
2017-03-20 23:44 - 2016-06-03 16:07 - 00003204 _____ C:\Windows\System32\Tasks\HPCeeScheduleForSleipnir
2017-03-20 23:44 - 2016-06-03 16:07 - 00000344 _____ C:\Windows\Tasks\HPCeeScheduleForSleipnir.job
2017-03-20 20:02 - 2016-01-05 20:02 - 00000000 ____D C:\Program Files (x86)\Overwolf
2017-03-20 19:30 - 2016-01-05 20:01 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-03-20 18:56 - 2016-01-05 18:24 - 00000000 ____D C:\Users\Sleipnir
2017-03-19 12:36 - 2016-06-29 19:32 - 00000000 ____D C:\AdwCleaner
2017-03-19 01:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-03-18 13:19 - 2016-06-29 19:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-03-18 13:15 - 2011-04-12 09:28 - 00000000 ____D C:\Program Files\Windows Journal
2017-03-18 02:56 - 2016-11-18 20:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-18 02:56 - 2016-01-05 19:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-18 02:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\schemas
2017-03-17 21:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2017-03-17 19:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Cursors
2017-03-17 19:41 - 2017-01-19 14:33 - 00000000 ____D C:\Windows\pss
2017-03-16 17:59 - 2016-01-05 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-03-16 17:59 - 2016-01-05 19:23 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-16 11:32 - 2009-07-14 06:13 - 00783606 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-16 10:33 - 2009-07-14 06:08 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-03-12 20:17 - 2016-01-14 02:06 - 00000000 ____D C:\Users\Sleipnir\AppData\Local\Dropbox
2017-03-12 20:16 - 2016-01-14 02:06 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-03-07 14:19 - 2017-02-07 16:52 - 00000000 ____D C:\Users\Sleipnir\AppData\Local\YoloMouse
2017-03-06 18:39 - 2016-01-05 19:42 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\Skype
2017-03-06 14:35 - 2016-04-28 16:51 - 00000000 ____D C:\Users\Sleipnir\Documents\Mes numérisations
2017-03-03 12:05 - 2016-01-05 19:34 - 00000000 ____D C:\ProgramData\Avira
2017-03-03 12:05 - 2016-01-05 19:34 - 00000000 ____D C:\Program Files (x86)\Avira
2017-02-24 14:53 - 2016-01-16 22:54 - 00000000 ____D C:\Users\Sleipnir\AppData\Local\CrashDumps
2017-02-24 14:53 - 2016-01-07 13:31 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\uTorrent
2017-02-22 01:28 - 2016-01-07 13:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Files in the root of some directories =======
2016-03-25 01:17 - 2016-03-25 01:17 - 0003584 _____ () C:\Users\Sleipnir\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-11-14 21:35 - 2016-11-14 21:35 - 0000337 _____ () C:\Users\Sleipnir\AppData\Local\Perfmon.PerfmonCfg
2016-12-05 01:29 - 2016-12-05 01:29 - 0007590 _____ () C:\Users\Sleipnir\AppData\Local\recently-used.xbel
2016-01-21 15:41 - 2016-01-21 15:41 - 0000017 _____ () C:\Users\Sleipnir\AppData\Local\resmon.resmoncfg
2016-11-04 17:01 - 2017-01-14 16:29 - 0032768 _____ () C:\Users\Sleipnir\AppData\Local\WebpageIcons.db
2016-01-05 19:03 - 2016-01-05 19:03 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-04-27 19:45 - 2016-04-28 16:49 - 0012141 _____ () C:\ProgramData\hpzinstall.log
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-11-29 01:42
==================== End of FRST.txt ============================
Ran by Sleipnir (administrator) on SLEIPNIR-PC (22-03-2017 17:03:58)
Running from C:\Users\Sleipnir\Desktop
Loaded Profiles: Sleipnir (Available Profiles: Sleipnir)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Chip Digital GmbH) C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\nlssrv32.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Hama\Common\RaRegistry64.exe
() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Spotify Ltd) C:\Users\Sleipnir\AppData\Roaming\Spotify\SpotifyWebHelper.exe
() C:\Program Files\YoloMouse\YoloMouse.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(GIGABYTE Technology Co.,Ltd.) C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe
() C:\ProgramData\cdblc\cdblc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
() C:\ProgramData\Razer\Synapse\RzStats\RzStats.Manager.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\InGameEngine\32bit\RazerIngameEngine.exe
(Razer, Inc.) C:\Users\Sleipnir\AppData\Local\Razer\InGameEngine\cache\RzSynapse\rzcefrenderprocess.exe
(Razer, Inc.) C:\Users\Sleipnir\AppData\Local\Razer\InGameEngine\cache\RzStats.Manager\rzcefrenderprocess.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hammer & Chisel, Inc.) C:\Users\Sleipnir\AppData\Local\Discord\app-0.0.297\Discord.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(Hammer & Chisel, Inc.) C:\Users\Sleipnir\AppData\Local\Discord\app-0.0.297\Discord.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Hammer & Chisel, Inc.) C:\Users\Sleipnir\AppData\Local\Discord\app-0.0.297\Discord.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7541464 2014-02-18] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [596640 2016-11-04] (Razer Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [27308304 2017-03-06] (Dropbox, Inc.)
HKLM-x32\...\Run: [Raptr] => C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe [58640 2016-07-21] (Raptr, Inc)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [909744 2017-02-17] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [61944 2017-02-22] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [Spotify Web Helper] => C:\Users\Sleipnir\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-02-09] (Spotify Ltd)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [YoloMouse] => C:\Program Files\YoloMouse\YoloMouse.exe [222208 2016-11-13] ()
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\MountPoints2: G - "G:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\MountPoints2: {5fb5fd47-b3d0-11e5-9b8b-806e6f6e6963} - D:\.\Bin\ASSETUP.exe
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\MountPoints2: {a0317d7a-b4a1-11e5-8a4b-1c872c57e8ba} - "G:\WD Drive Unlock.exe" autoplay=true
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-03-06] (Dropbox, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2016-01-05]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\Users\Sleipnir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sleipnir.lnk [2016-03-25]
ShortcutTarget: Sleipnir.lnk -> C:\ProgramData\cdblc\cdblc.exe ()
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{7A5698D8-9E49-4E0B-A780-69E38290DF5C}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{AD767538-86A2-4A27-8D30-BB466451FDBD}: [DhcpNameServer] 10.188.0.1
Tcpip\..\Interfaces\{B836A898-8614-4A20-B1E8-016E3E7BBE5D}: [DhcpNameServer] 10.188.0.1
Internet Explorer:
==================
HKU\S-1-5-21-792549663-3945398320-1686471432-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://yourtv.link
SearchScopes: HKU\S-1-5-21-792549663-3945398320-1686471432-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/cse?cx=partner-pub-8036109189802438%3A7790813904&ie=UTF-8&q={searchTerms}&sa=Search&siteurl=yourtv.link%2F
SearchScopes: HKU\S-1-5-21-792549663-3945398320-1686471432-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.google.com/cse?cx=partner-pub-8036109189802438%3A7790813904&ie=UTF-8&q={searchTerms}&sa=Search&siteurl=yourtv.link%2F
BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-09-20] (Hewlett-Packard Co.)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\ssv.dll [2016-04-22] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-04-22] (Oracle Corporation)
BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-09-20] (Hewlett-Packard Co.)
FireFox:
========
FF ProfilePath: C:\Users\Sleipnir\AppData\Roaming\Mozilla\Firefox\Profiles\q3muy2zs.default-1489924349610 [2017-03-22]
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\q3muy2zs.default-1489924349610 -> Google
FF Homepage: Mozilla\Firefox\Profiles\q3muy2zs.default-1489924349610 -> hxxp://yourtv.link
FF SearchPlugin: C:\Users\Sleipnir\AppData\Roaming\Mozilla\Firefox\Profiles\q3muy2zs.default-1489924349610\searchplugins\Google .xml [2017-03-22]
FF HKLM-x32\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: (HP Smart Web Printing) - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2016-04-28] [not signed]
FF HKU\S-1-5-21-792549663-3945398320-1686471432-1000\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-04-22] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files (x86)\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-04-22] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default [2017-03-20]
CHR Extension: (YouTube) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-06]
CHR Extension: (Adblock for Youtube™) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2016-06-28]
CHR Extension: (Google Search) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-06]
CHR Extension: (Auto Replay for YouTube™) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb [2016-06-28]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-06]
CHR Extension: (Gmail) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-06]
CHR Extension: (Chrome Media Router) - C:\Users\Sleipnir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-06]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1115552 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [487424 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [487424 2017-02-17] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1519144 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe [936728 2013-05-07] ()
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [349560 2017-03-09] (Avira Operations GmbH & Co. KG)
R2 chip1click; C:\Program Files (x86)\Chip Digital GmbH\chip1click\chip 1-click installer.exe [91136 2016-10-27] (Chip Digital GmbH) [File not signed]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-14] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-14] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [46408 2017-01-21] (Dropbox, Inc.)
R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSLPSVC; C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL [1037824 2009-09-20] (Hewlett-Packard Co.) [File not signed]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2008-12-03] (Hewlett-Packard) [File not signed]
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1325384 2017-03-16] (Overwolf LTD)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2008-12-03] (Hewlett-Packard) [File not signed]
R2 RalinkRegistryWriter; C:\Program Files (x86)\Hama\Common\RaRegistry.exe [387376 2013-02-04] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Hama\Common\RaRegistry64.exe [452912 2013-02-04] (Ralink Technology, Corp.)
R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [189264 2016-09-25] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [176968 2017-02-17] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [148104 2017-02-17] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [35328 2017-02-17] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [78600 2017-02-17] (Avira Operations GmbH & Co. KG)
R0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [51248 2017-02-17] (Avira Operations GmbH & Co. KG)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [494864 2013-08-29] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [113880 2017-03-22] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [3664600 2014-12-16] (Realtek Semiconductor Corporation )
R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [50392 2015-08-13] (Razer Inc)
R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [48840 2015-08-13] (Razer Inc)
R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [44144 2016-09-17] (Razer, Inc.)
R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [130880 2015-12-14] (Razer, Inc.)
R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-12-18] (Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [194976 2015-12-18] (Oracle Corporation)
S3 vpnva; C:\Windows\System32\DRIVERS\vpnva64-6.sys [52592 2016-10-06] (Cisco Systems, Inc.)
S3 dbx; system32\DRIVERS\dbx.sys [X]
S1 ESProtectionDriver; \??\C:\Windows\system32\drivers\mbae64.sys [X]
S2 MBAMChameleon; \SystemRoot\system32\drivers\MBAMChameleon.sys [X]
S3 MBAMFarflt; \??\C:\Windows\system32\drivers\farflt.sys [X]
S3 MBAMProtection; \??\C:\Windows\system32\drivers\mbam.sys [X]
S3 MBAMProtector; \??\C:\Windows\system32\drivers\mbam.sys [X]
S3 MBAMWebAccessControl; \??\C:\Windows\system32\drivers\mwac.sys [X]
S3 MBAMWebProtection; \??\C:\Windows\system32\drivers\mwac.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-03-22 17:03 - 2017-03-22 17:04 - 00024177 _____ C:\Users\Sleipnir\Desktop\FRST.txt
2017-03-22 17:03 - 2017-03-22 17:03 - 00000000 ____D C:\FRST
2017-03-22 17:02 - 2017-03-22 17:02 - 02424832 _____ (Farbar) C:\Users\Sleipnir\Desktop\FRST64.exe
2017-03-21 00:34 - 2017-03-21 00:34 - 730778095 _____ C:\Windows\MEMORY.DMP
2017-03-21 00:34 - 2017-03-21 00:34 - 00276848 _____ C:\Windows\Minidump\032117-14898-01.dmp
2017-03-21 00:34 - 2017-03-21 00:34 - 00000000 ____D C:\Windows\Minidump
2017-03-20 18:49 - 2017-03-20 18:49 - 00144941 _____ C:\Users\Sleipnir\Desktop\ZHPDiag3.txt
2017-03-20 18:42 - 2017-03-20 18:42 - 00001633 _____ C:\Users\Sleipnir\Desktop\ZHPFix[R1].txt
2017-03-20 18:40 - 2017-03-20 18:40 - 00001633 _____ C:\Users\Sleipnir\Desktop\ZHPFixReport.txt
2017-03-20 18:39 - 2017-03-20 18:40 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-03-20 18:39 - 2017-03-20 18:39 - 00001849 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-03-20 18:39 - 2017-03-20 18:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-03-20 18:38 - 2017-03-20 18:38 - 03521617 _____ (Nicolas Coolman ) C:\Users\Sleipnir\Downloads\zhpfix_2015.10.19.9.exe
2017-03-19 12:52 - 2017-03-19 12:52 - 00000000 ____D C:\Users\Sleipnir\Desktop\Old Firefox Data
2017-03-19 12:44 - 2017-03-19 12:44 - 00144477 _____ C:\Users\Sleipnir\Desktop\ZHPDiag2.txt
2017-03-19 12:33 - 2017-03-19 12:33 - 04031440 _____ C:\Users\Sleipnir\Desktop\adwcleaner_6.044.exe
2017-03-19 12:18 - 2017-03-19 12:18 - 02658304 _____ C:\Users\Sleipnir\Desktop\zhpcleaner_2016.12.24.222(1).exe
2017-03-19 12:13 - 2017-03-19 12:13 - 00000085 _____ C:\Windows\wininit.ini
2017-03-18 13:21 - 2017-03-22 10:27 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-18 13:13 - 2017-03-19 12:26 - 00002123 _____ C:\Users\Sleipnir\Desktop\ZHPCleaner.txt
2017-03-18 13:08 - 2017-03-20 18:48 - 00144938 _____ C:\Users\Sleipnir\Desktop\ZHPDiag.txt
2017-03-18 13:01 - 2017-03-20 18:47 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\ZHP
2017-03-18 13:01 - 2017-03-20 18:46 - 00000826 _____ C:\Users\Sleipnir\Desktop\ZHPDiag.lnk
2017-03-18 13:01 - 2017-03-18 13:01 - 02105344 _____ C:\Users\Sleipnir\Downloads\ZHPDiag3.exe
2017-03-18 04:49 - 2017-03-18 04:49 - 00000282 _____ C:\Users\Sleipnir\Desktop\cheval de troie eset online scanner 18.03.txt
2017-03-18 01:00 - 2017-03-18 01:00 - 00000000 ____D C:\Program Files\Common Files\AV
2017-03-18 01:00 - 2015-07-28 17:52 - 00821920 _____ (Safer-Networking Ltd. ) C:\Users\Public\Desktop\Post Win10 Spybot-install.exe
2017-03-17 23:15 - 2017-03-17 23:15 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking
2017-03-17 23:14 - 2017-03-19 12:13 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2017-03-17 23:11 - 2017-03-17 23:12 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Sleipnir\Downloads\spybot-2.4.exe
2017-03-17 22:13 - 2017-03-17 22:13 - 00000000 ____D C:\ProgramData\TEMP
2017-03-17 22:09 - 2017-03-18 01:05 - 00000000 ____D C:\Program Files (x86)\Trojan Remover
2017-03-17 22:08 - 2017-03-17 22:08 - 07642792 _____ (Simply Super Software ) C:\Users\Sleipnir\Downloads\trsetup.exe
2017-03-17 21:57 - 2017-03-17 21:57 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\Avira
2017-03-17 21:56 - 2017-03-17 21:56 - 02870984 _____ (ESET) C:\Users\Sleipnir\Downloads\esetsmartinstaller_fra.exe
2017-03-17 21:56 - 2017-03-17 21:56 - 00000000 ____D C:\Program Files (x86)\ESET
2017-03-17 21:53 - 2017-03-17 21:53 - 00000530 _____ C:\Users\Sleipnir\Desktop\FakeAlert.txt
2017-03-17 21:53 - 2017-03-17 21:53 - 00000000 ____D C:\Users\Sleipnir\Desktop\FAR_Quarantaine
2017-03-17 21:52 - 2017-03-17 21:53 - 00115712 _____ C:\Users\Sleipnir\Downloads\FakeAlertRemover.exe
2017-03-17 21:48 - 2017-03-17 21:48 - 29536400 _____ (SUPERAntiSpyware) C:\Users\Sleipnir\Downloads\SUPERAntiSpyware.exe
2017-03-17 19:55 - 2017-03-20 18:56 - 00000258 __RSH C:\Users\Sleipnir\ntuser.pol
2017-03-17 19:23 - 2017-03-17 19:23 - 57131432 _____ (Malwarebytes ) C:\Users\Sleipnir\Downloads\mb3-setup-consumer-3.0.6.1469-1075(1).exe
2017-03-17 18:59 - 2017-03-17 18:59 - 00001102 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2017-03-17 18:59 - 2017-03-17 18:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2017-03-17 18:59 - 2017-03-17 18:59 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2017-03-17 18:58 - 2017-03-17 18:59 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\Sleipnir\Downloads\mbam-setup.exe
2017-03-17 18:40 - 2017-03-17 18:40 - 00002149 _____ C:\Users\Sleipnir\Desktop\results malware.txt
2017-03-17 18:28 - 2017-03-17 18:28 - 00065536 _____ C:\Users\Sleipnir\AppData\Local\GDIPFONTCACHEV1.DAT
2017-03-17 18:27 - 2017-03-17 18:27 - 00299864 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-17 18:15 - 2017-03-17 18:15 - 00000000 ____D C:\Program Files\Malwarebytes
2017-03-17 18:05 - 2017-03-17 18:06 - 57131432 _____ (Malwarebytes ) C:\Users\Sleipnir\Downloads\mb3-setup-consumer-3.0.6.1469-1075.exe
2017-03-16 10:45 - 2017-03-16 10:45 - 02002429 _____ C:\Users\Sleipnir\Downloads\2016_Felten Maeva_M1.pdf
2017-03-16 10:45 - 2017-03-16 10:45 - 00973641 _____ C:\Users\Sleipnir\Downloads\Bardon et al 2014 New Phytol. (invasive plants - denitrification)(1).pdf
2017-03-16 10:45 - 2017-03-16 10:45 - 00629262 _____ C:\Users\Sleipnir\Downloads\Salles 2014.pdf
2017-03-16 10:45 - 2017-03-16 10:45 - 00427506 _____ C:\Users\Sleipnir\Downloads\Dassonville et al. Biol. Invasions 2011 (invasive plants - denitirification)-1.pdf
2017-03-15 20:33 - 2017-03-15 20:33 - 00044557 _____ C:\Users\Sleipnir\Downloads\convention_33436_ELODIE_CASCIOLA.pdf
2017-03-13 21:04 - 2017-03-13 21:04 - 00078305 _____ C:\Users\Sleipnir\Desktop\Motivation_Letter.pdf
2017-03-12 20:16 - 2017-03-12 20:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2017-03-06 21:50 - 2017-03-06 21:50 - 00046184 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2017-03-06 18:52 - 2017-03-06 18:52 - 00019015 _____ C:\Users\Sleipnir\Desktop\mat et methodes systeme fermé.odt
2017-03-06 18:38 - 2017-03-06 18:39 - 00091715 _____ C:\Users\Sleipnir\Desktop\Systeme fermé.odt
2017-03-06 14:18 - 2016-07-07 16:36 - 01896168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-03-06 14:18 - 2016-07-07 16:36 - 00377576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2017-03-06 14:18 - 2016-07-07 16:36 - 00287976 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2017-03-06 14:18 - 2016-07-07 16:08 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpipreg.sys
2017-03-06 14:18 - 2016-07-01 16:31 - 00976896 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2017-03-06 14:18 - 2016-07-01 16:31 - 00084480 _____ (Microsoft Corporation) C:\Windows\system32\INETRES.dll
2017-03-06 14:18 - 2016-07-01 16:13 - 00741888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2017-03-06 14:18 - 2016-07-01 16:13 - 00084480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\INETRES.dll
2017-03-06 14:18 - 2016-07-01 15:56 - 00464896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2017-03-06 14:18 - 2016-07-01 15:56 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2017-03-06 14:18 - 2016-07-01 15:56 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2017-03-03 19:25 - 2017-03-03 19:25 - 00508418 _____ C:\Users\Sleipnir\Downloads\rapport_carence.pdf
2017-03-03 19:25 - 2017-03-03 19:25 - 00508418 _____ C:\Users\Sleipnir\Desktop\rapport_carence.pdf
2017-03-03 18:48 - 2016-02-05 19:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll
2017-03-03 18:48 - 2016-02-05 19:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2017-03-03 18:48 - 2016-02-05 18:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll
2017-03-03 18:48 - 2015-06-03 21:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll
2017-03-03 18:47 - 2016-04-09 08:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-03-03 18:47 - 2016-04-09 08:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-03-03 18:47 - 2016-04-09 07:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2017-03-03 12:05 - 2017-03-03 12:05 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2017-03-03 12:05 - 2017-02-17 09:44 - 00176968 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2017-03-03 12:05 - 2017-02-17 09:44 - 00148104 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2017-03-03 12:05 - 2017-02-17 09:44 - 00078600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2017-03-03 12:05 - 2017-02-17 09:44 - 00051248 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avusbflt.sys
2017-03-03 12:05 - 2017-02-17 09:44 - 00035328 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
2017-02-22 16:47 - 2017-02-22 16:47 - 00142158 _____ C:\Users\Sleipnir\Downloads\AffichageResultats.pdf
2017-02-22 16:47 - 2017-02-22 16:47 - 00066053 _____ C:\Users\Sleipnir\Downloads\AffichageResultats(1).pdf
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-03-22 17:00 - 2016-01-14 02:08 - 00000000 ___RD C:\Users\Sleipnir\Dropbox
2017-03-22 16:59 - 2016-11-19 00:27 - 00000000 ____D C:\Users\Sleipnir\AppData\LocalLow\Mozilla
2017-03-22 16:58 - 2016-01-14 02:06 - 00001186 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2017-03-22 16:58 - 2016-01-05 22:31 - 00000000 ____D C:\Users\Sleipnir\Documents\temp
2017-03-22 16:57 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-22 10:51 - 2016-01-05 19:30 - 00065536 _____ C:\Windows\system32\spu_storage.bin
2017-03-22 10:29 - 2016-01-14 02:06 - 00001190 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2017-03-22 10:14 - 2009-07-14 05:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-22 10:14 - 2009-07-14 05:45 - 00029120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-21 01:14 - 2017-01-07 18:40 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\discord
2017-03-21 00:17 - 2016-01-05 20:01 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\TS3Client
2017-03-20 23:44 - 2016-06-03 16:07 - 00003204 _____ C:\Windows\System32\Tasks\HPCeeScheduleForSleipnir
2017-03-20 23:44 - 2016-06-03 16:07 - 00000344 _____ C:\Windows\Tasks\HPCeeScheduleForSleipnir.job
2017-03-20 20:02 - 2016-01-05 20:02 - 00000000 ____D C:\Program Files (x86)\Overwolf
2017-03-20 19:30 - 2016-01-05 20:01 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-03-20 18:56 - 2016-01-05 18:24 - 00000000 ____D C:\Users\Sleipnir
2017-03-19 12:36 - 2016-06-29 19:32 - 00000000 ____D C:\AdwCleaner
2017-03-19 01:00 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-03-18 13:19 - 2016-06-29 19:40 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-03-18 13:15 - 2011-04-12 09:28 - 00000000 ____D C:\Program Files\Windows Journal
2017-03-18 02:56 - 2016-11-18 20:09 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-18 02:56 - 2016-01-05 19:37 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-03-18 02:56 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\schemas
2017-03-17 21:43 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\AppCompat
2017-03-17 19:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\Cursors
2017-03-17 19:41 - 2017-01-19 14:33 - 00000000 ____D C:\Windows\pss
2017-03-16 17:59 - 2016-01-05 19:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-03-16 17:59 - 2016-01-05 19:23 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-16 11:32 - 2009-07-14 06:13 - 00783606 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-16 10:33 - 2009-07-14 06:08 - 00032620 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-03-12 20:17 - 2016-01-14 02:06 - 00000000 ____D C:\Users\Sleipnir\AppData\Local\Dropbox
2017-03-12 20:16 - 2016-01-14 02:06 - 00000000 ____D C:\Program Files (x86)\Dropbox
2017-03-07 14:19 - 2017-02-07 16:52 - 00000000 ____D C:\Users\Sleipnir\AppData\Local\YoloMouse
2017-03-06 18:39 - 2016-01-05 19:42 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\Skype
2017-03-06 14:35 - 2016-04-28 16:51 - 00000000 ____D C:\Users\Sleipnir\Documents\Mes numérisations
2017-03-03 12:05 - 2016-01-05 19:34 - 00000000 ____D C:\ProgramData\Avira
2017-03-03 12:05 - 2016-01-05 19:34 - 00000000 ____D C:\Program Files (x86)\Avira
2017-02-24 14:53 - 2016-01-16 22:54 - 00000000 ____D C:\Users\Sleipnir\AppData\Local\CrashDumps
2017-02-24 14:53 - 2016-01-07 13:31 - 00000000 ____D C:\Users\Sleipnir\AppData\Roaming\uTorrent
2017-02-22 01:28 - 2016-01-07 13:17 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Files in the root of some directories =======
2016-03-25 01:17 - 2016-03-25 01:17 - 0003584 _____ () C:\Users\Sleipnir\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-11-14 21:35 - 2016-11-14 21:35 - 0000337 _____ () C:\Users\Sleipnir\AppData\Local\Perfmon.PerfmonCfg
2016-12-05 01:29 - 2016-12-05 01:29 - 0007590 _____ () C:\Users\Sleipnir\AppData\Local\recently-used.xbel
2016-01-21 15:41 - 2016-01-21 15:41 - 0000017 _____ () C:\Users\Sleipnir\AppData\Local\resmon.resmoncfg
2016-11-04 17:01 - 2017-01-14 16:29 - 0032768 _____ () C:\Users\Sleipnir\AppData\Local\WebpageIcons.db
2016-01-05 19:03 - 2016-01-05 19:03 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-04-27 19:45 - 2016-04-28 16:49 - 0012141 _____ () C:\ProgramData\hpzinstall.log
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-11-29 01:42
==================== End of FRST.txt ============================