Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05-06-2017
Exécuté par Léonie (administrateur) sur LÉONIE-PC (06-06-2017 13:36:36)
Exécuté depuis C:\Users\Léonie\Desktop
Profils chargés: UpdatusUser & Léonie (Profils disponibles: UpdatusUser & Léonie)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHTE.EXE
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-21] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-18] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-08] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4058504500-1572124754-2708443317-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-06] (Acresso Corporation)
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd)
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [Google Update] => C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2017-02-04] (Google Inc.)
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2012-07-12] (SEIKO EPSON CORPORATION)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-10] (AVAST Software)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll [2010-09-02] (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll [2010-09-02] (eCareme Technologies, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2011-04-13]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk [2016-12-22]
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}\_77B5857C27147149171BE7.exe ()
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\Parameters: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{88F5315C-0EFB-4C18-B06F-2CA0035F2A85}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{88F5315C-0EFB-4C18-B06F-2CA0035F2A85}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A09FA8D9-9CEC-447A-82A1-8CB1B78FCA6C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A09FA8D9-9CEC-447A-82A1-8CB1B78FCA6C}: [DhcpNameServer] 8.8.8.8
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-4058504500-1572124754-2708443317-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fr-fr/?ocid=iehp
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-04-06] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-04-06] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
FireFox:
========
FF DefaultProfile: bx905c1k.default
FF ProfilePath: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default [2017-06-06]
FF NewTab: Mozilla\Firefox\Profiles\bx905c1k.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\bx905c1k.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\bx905c1k.default -> hxxps://www.google.com/search?bcutc=sp-006
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\bx905c1k.default -> Google
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\bx905c1k.default -> Google
FF Homepage: Mozilla\Firefox\Profiles\bx905c1k.default -> www.google.fr
FF Extension: (Avast SafePrice) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\Extensions\sp@avast.com.xpi [2017-05-31]
FF Extension: (Avast Online Security) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\Extensions\wrc@avast.com.xpi [2017-05-31]
FF Extension: (Disable TLS Certificate Transparency) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\features\{c557430b-1d05-49fe-9d00-2cf748cc5abe}\disable-cert-transparency@mozilla.org.xpi [2017-05-11]
FF Extension: (Disable Prefetch) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\features\{c557430b-1d05-49fe-9d00-2cf748cc5abe}\disable-prefetch@mozilla.org.xpi [2017-05-11]
FF SearchPlugin: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\searchplugins\google-avast.xml [2017-02-28]
FF SearchPlugin: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\searchplugins\yahoo-avast.xml [2017-02-24]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-05-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-05-27] (NVIDIA Corporation)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Léonie\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @talk.google.com/O1DPlugin -> C:\Users\Léonie\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-04] (Google Inc.)
FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-04] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Léonie\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Léonie\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.ourluckysites.com/?type=hp&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG
CHR StartupUrls: Default -> "hxxp://www.ourluckysites.com/?type=hp&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG"
CHR DefaultSearchURL: Default -> hxxp://www.ourluckysites.com/search/?type=ds&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG&q={searchTerms}
CHR DefaultSearchKeyword: Default -> ourluckysites
CHR Profile: C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default [2017-05-30]
CHR Extension: (Google Slides) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-23]
CHR Extension: (Google Docs) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-23]
CHR Extension: (Google Drive) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-23]
CHR Extension: (YouTube) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-23]
CHR Extension: (Avast SafePrice) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-04-09]
CHR Extension: (Google Sheets) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-23]
CHR Extension: (Google Docs hors connexion) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-03]
CHR Extension: (Avast Online Security) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-04-09]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-09]
CHR Extension: (Gmail) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-23]
CHR Extension: (Chrome Media Router) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-09]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-10] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703696 2016-08-08] (SEIKO EPSON CORPORATION)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-10] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-10] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-05-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-10] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [158880 2017-05-13] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-10] (AVAST Software)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [252832 2017-06-06] (Malwarebytes)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 catchme; \??\C:\Users\LONIE~1\AppData\Local\Temp\catchme.sys [X] <==== ATTENTION
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-06-06 13:36 - 2017-06-06 13:36 - 00022444 _____ C:\Users\Léonie\Desktop\FRST.txt
2017-06-06 13:36 - 2017-06-06 13:36 - 00000000 ____D C:\FRST
2017-06-06 13:35 - 2017-06-06 13:35 - 02433536 _____ (Farbar) C:\Users\Léonie\Desktop\FRST64.exe
2017-06-06 12:57 - 2017-06-06 12:57 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\EPSON
2017-06-06 10:15 - 2017-06-06 10:15 - 00120603 _____ C:\Users\Léonie\Desktop\ZHPDiag4.txt
2017-06-06 10:06 - 2017-06-06 10:06 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-06-06 10:03 - 2017-06-06 10:03 - 00003084 _____ C:\Users\Léonie\Desktop\ZHPFixReport.txt
2017-06-06 10:01 - 2017-06-06 10:01 - 00001855 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-06-06 10:01 - 2017-06-06 10:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-06-06 10:01 - 2017-06-06 10:01 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-06-06 09:59 - 2017-06-06 09:59 - 03521617 _____ (Nicolas Coolman ) C:\Users\Léonie\Desktop\zhpfix_2015.10.19.9.exe
2017-06-05 22:21 - 2017-06-05 22:21 - 00123657 _____ C:\Users\Léonie\Desktop\ZHPDiag2.txt
2017-06-05 22:16 - 2017-06-05 22:16 - 00000971 _____ C:\Users\Léonie\Desktop\AdwCleaner[C0] - Raccourci.lnk
2017-06-05 21:54 - 2017-06-05 22:16 - 00000000 ____D C:\AdwCleaner
2017-06-05 21:54 - 2017-06-05 21:54 - 04110280 _____ C:\adwcleaner_6.047.exe
2017-06-05 21:49 - 2017-06-05 21:51 - 00007877 _____ C:\Users\Léonie\Desktop\ZHPCleaner.txt
2017-06-05 21:42 - 2017-06-05 21:42 - 02513920 _____ C:\Users\Léonie\Desktop\ZHPCleaner-2017.exe
2017-06-05 21:42 - 2017-06-05 21:42 - 00000902 _____ C:\Users\Léonie\Desktop\ZHPCleaner.lnk
2017-06-05 19:59 - 2017-06-06 10:14 - 00120600 _____ C:\Users\Léonie\Desktop\ZHPDiag.txt
2017-06-05 15:09 - 2017-06-06 10:11 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\ZHP
2017-06-05 15:09 - 2017-06-06 10:10 - 00000000 ____D C:\Users\Léonie\AppData\Local\ZHP
2017-06-05 15:08 - 2017-06-05 15:08 - 02734592 _____ C:\Users\Léonie\Desktop\ZHPDiag3.exe
2017-06-01 21:18 - 2017-06-06 00:18 - 00443568 _____ C:\Windows\ntbtlog.txt
2017-05-30 21:50 - 2017-05-30 21:51 - 00004622 _____ C:\Users\Léonie\Documents\attestation mlle GUERRAND.odt
2017-05-30 21:50 - 2017-05-30 21:50 - 00097273 _____ C:\Users\Léonie\Documents\attestation mlle GUERRAND.pdf
2017-05-30 17:46 - 2017-05-30 17:47 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-05-30 17:46 - 2017-05-30 17:46 - 00001206 _____ C:\Users\Léonie\Desktop\CrystalDiskInfo.lnk
2017-05-30 17:46 - 2017-05-30 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-05-30 17:45 - 2017-05-30 17:45 - 03961080 _____ (Crystal Dew World ) C:\crystaldiskinfo_7-0-5_en_306038.exe
2017-05-26 15:01 - 2017-05-26 15:01 - 00081570 _____ C:\Users\Léonie\Desktop\annexes.pdf
2017-05-26 14:55 - 2017-05-26 14:55 - 00136947 _____ C:\Users\Léonie\Desktop\2377-PAJE-CDI-AMA.pdf
2017-05-26 14:32 - 2017-05-26 14:32 - 00089111 _____ C:\Users\Léonie\Desktop\acte_caution_solidaire.pdf
2017-05-14 20:55 - 2017-05-14 20:55 - 00001051 _____ C:\Users\Léonie\Desktop\MaxiCompte 3.lnk
2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaxiCompte 3
2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\Program Files (x86)\MaxiCompte 3
2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\Données EuroSoft Software Development
2017-05-14 20:52 - 2017-05-14 20:52 - 09535089 _____ (EuroSoft Software Development ) C:\maxicompte_3-24_fr_15616.exe
2017-05-13 00:46 - 2017-05-30 23:32 - 00002043 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-05-13 00:45 - 2017-05-13 00:46 - 00001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-05-13 00:43 - 2017-05-13 00:44 - 00246232 _____ (Mozilla) C:\Users\Léonie\Downloads\Firefox Setup Stub 53.0.2.exe
2017-05-13 00:43 - 2017-05-13 00:43 - 00246232 _____ (Mozilla) C:\Users\Léonie\Downloads\Firefox Setup Stub 53.0.2 (1).exe
2017-05-13 00:12 - 2017-05-13 00:12 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-13 00:12 - 2017-05-13 00:12 - 00000000 ____D C:\Users\Public\Documents\Google
2017-05-13 00:10 - 2017-05-13 00:10 - 00000000 ____D C:\Program Files (x86)\Default Company Name
2017-05-11 23:39 - 2017-05-13 00:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-11 22:13 - 2017-06-06 10:06 - 00252832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-05-11 22:13 - 2017-06-05 22:01 - 00077376 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-05-11 22:13 - 2017-05-11 22:13 - 00001869 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\Program Files\Malwarebytes
2017-05-11 20:36 - 2017-05-11 20:36 - 00000000 _____ C:\Windows\SysWOW64\3333333
2017-05-11 20:35 - 2017-05-11 20:35 - 00000000 _____ C:\Windows\SysWOW64\00
2017-05-10 13:25 - 2017-05-10 13:25 - 00400456 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\Users\Léonie\Documents\My Games
2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\ProgramData\Age of Empires 3
2017-05-09 21:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2017-05-09 21:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2017-05-09 21:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2017-05-09 21:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-05-09 15:00 - 2017-05-09 15:00 - 00000222 _____ C:\Users\Léonie\Desktop\Age of Empires III Complete Collection.url
2017-05-08 14:39 - 2017-05-08 14:40 - 00000000 ____D C:\Users\Public\Documents\temp
2017-05-08 14:39 - 2017-05-08 14:39 - 00000000 ____D C:\Users\Public\Documents\chrome
2017-05-07 22:21 - 2017-06-05 23:43 - 00000000 ____D C:\Users\Léonie\AppData\Local\FalloutShelter
2017-05-07 22:21 - 2017-05-07 22:21 - 00000000 ____D C:\Users\Léonie\AppData\LocalLow\Bethesda
2017-05-07 22:15 - 2017-05-07 22:15 - 00000222 _____ C:\Users\Léonie\Desktop\Fallout Shelter.url
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-06-06 11:01 - 2011-04-11 14:05 - 00482258 _____ C:\Windows\system32\perfh001.dat
2017-06-06 11:01 - 2011-04-11 14:05 - 00098162 _____ C:\Windows\system32\perfc001.dat
2017-06-06 11:01 - 2011-03-17 13:52 - 00727844 _____ C:\Windows\system32\perfh019.dat
2017-06-06 11:01 - 2011-03-17 13:52 - 00154232 _____ C:\Windows\system32\perfc019.dat
2017-06-06 11:01 - 2011-02-19 07:02 - 00395588 _____ C:\Windows\system32\perfh00D.dat
2017-06-06 11:01 - 2011-02-19 07:02 - 00088148 _____ C:\Windows\system32\perfc00D.dat
2017-06-06 11:01 - 2011-02-19 06:56 - 00610232 _____ C:\Windows\system32\perfh008.dat
2017-06-06 11:01 - 2011-02-19 06:56 - 00114518 _____ C:\Windows\system32\perfc008.dat
2017-06-06 11:01 - 2011-02-19 06:51 - 00409036 _____ C:\Windows\system32\prfh0404.dat
2017-06-06 11:01 - 2011-02-19 06:51 - 00125534 _____ C:\Windows\system32\prfc0404.dat
2017-06-06 11:01 - 2011-02-19 06:45 - 00732262 _____ C:\Windows\system32\prfh0816.dat
2017-06-06 11:01 - 2011-02-19 06:45 - 00156296 _____ C:\Windows\system32\prfc0816.dat
2017-06-06 11:01 - 2011-02-19 06:40 - 00746742 _____ C:\Windows\system32\perfh013.dat
2017-06-06 11:01 - 2011-02-19 06:40 - 00156492 _____ C:\Windows\system32\perfc013.dat
2017-06-06 11:01 - 2011-02-19 06:35 - 00743290 _____ C:\Windows\system32\perfh010.dat
2017-06-06 11:01 - 2011-02-19 06:35 - 00150236 _____ C:\Windows\system32\perfc010.dat
2017-06-06 11:01 - 2011-02-19 06:29 - 00759010 _____ C:\Windows\system32\perfh00C.dat
2017-06-06 11:01 - 2011-02-19 06:29 - 00153584 _____ C:\Windows\system32\perfc00C.dat
2017-06-06 11:01 - 2011-02-19 06:24 - 00700452 _____ C:\Windows\system32\perfh007.dat
2017-06-06 11:01 - 2011-02-19 06:24 - 00152506 _____ C:\Windows\system32\perfc007.dat
2017-06-06 11:01 - 2011-02-19 06:19 - 00748700 _____ C:\Windows\system32\perfh00A.dat
2017-06-06 11:01 - 2011-02-19 06:19 - 00161864 _____ C:\Windows\system32\perfc00A.dat
2017-06-06 11:01 - 2009-07-14 07:13 - 09348272 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-06 11:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-06 10:16 - 2017-01-27 23:18 - 00000000 ____D C:\Users\Léonie\AppData\LocalLow\Mozilla
2017-06-06 10:14 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-06 10:14 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-06 10:08 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-06-06 10:06 - 2016-12-21 17:41 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2017-06-06 10:06 - 2016-12-21 17:41 - 00000000 ___HD C:\ASUS.DAT
2017-06-06 10:05 - 2016-12-22 02:07 - 00000000 ____D C:\ProgramData\NVIDIA
2017-06-06 10:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-05 23:09 - 2017-01-02 21:43 - 00000000 ____D C:\Program Files (x86)\Steam
2017-06-05 22:10 - 2017-01-13 15:18 - 00000000 ____D C:\Users\Léonie\AppData\Local\Microsoft Games
2017-06-05 22:09 - 2017-04-18 09:08 - 00000000 ____D C:\Windows\Update
2017-06-05 22:09 - 2017-04-07 09:28 - 00000000 ____D C:\Update
2017-06-05 21:51 - 2017-04-10 20:48 - 00000000 ____D C:\Windows\system32\log
2017-06-03 15:23 - 2017-02-23 22:18 - 00004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-06-01 21:45 - 2017-02-23 22:22 - 00003920 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1487881344
2017-05-30 21:47 - 2016-12-30 19:14 - 00000000 ___SD C:\Users\Léonie\AppData\LocalLow\Temp
2017-05-30 18:01 - 2017-03-03 15:29 - 00007601 _____ C:\Users\Léonie\AppData\Local\Resmon.ResmonCfg
2017-05-23 21:59 - 2016-12-30 19:10 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\SoftGrid Client
2017-05-20 00:26 - 2009-07-14 07:08 - 00024426 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-05-13 10:05 - 2017-01-27 23:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-13 00:43 - 2017-02-23 22:18 - 00158880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2017-05-11 23:38 - 2017-01-29 18:42 - 00000000 ____D C:\Users\Léonie\Documents\My Downloads
2017-05-11 22:36 - 2017-03-30 11:18 - 00002394 _____ C:\Users\UpdatusUser\Desktop\chambrerdc(62553776).lnk
2017-05-11 22:36 - 2017-03-30 11:18 - 00002394 _____ C:\Users\Léonie\Desktop\chambrerdc(62553776).lnk
2017-05-11 22:36 - 2017-03-30 11:14 - 00002394 _____ C:\Users\UpdatusUser\Desktop\chambrejuliette(62658996).lnk
2017-05-11 22:36 - 2017-03-30 11:14 - 00002394 _____ C:\Users\Léonie\Desktop\chambrejuliette(62658996).lnk
2017-05-11 22:36 - 2017-02-03 23:20 - 00001435 _____ C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-05-11 22:35 - 2017-04-07 09:28 - 00000000 ____D C:\Users\Léonie\AppData\Local\AMD
2017-05-11 22:30 - 2016-12-22 02:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-05-11 22:21 - 2016-12-22 02:24 - 00000000 ____D C:\ProgramData\CyberLink
2017-05-11 22:21 - 2016-12-22 02:24 - 00000000 ____D C:\Program Files (x86)\CyberLink
2017-05-11 20:35 - 2017-05-03 21:24 - 00000000 _____ C:\Windows\SysWOW64\1111111
2017-05-11 20:35 - 2017-04-20 09:12 - 00000000 _____ C:\Windows\SysWOW64\11
2017-05-11 20:35 - 2017-04-07 09:25 - 00000000 ____D C:\Program Files\MK
2017-05-10 22:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2017-05-10 13:25 - 2017-02-23 22:18 - 00569192 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-05-10 13:25 - 2017-02-23 22:18 - 00339696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-05-10 13:25 - 2017-02-23 22:18 - 00128648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-05-10 13:25 - 2017-02-23 22:18 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-05-10 13:25 - 2017-02-23 22:18 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-05-10 13:24 - 2017-02-23 22:19 - 00032600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 01007160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00334576 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00311808 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00190256 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00101152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00049016 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-05-09 21:04 - 2017-03-12 00:57 - 00004484 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-05-09 21:04 - 2017-01-02 21:16 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-05-09 21:04 - 2017-01-02 21:16 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-05-09 21:04 - 2017-01-02 21:16 - 00000000 ____D C:\Windows\system32\Macromed
2017-05-09 21:04 - 2011-04-13 04:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-05-09 15:00 - 2017-01-02 22:03 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
==================== Fichiers à la racine de certains dossiers =======
2017-03-03 15:29 - 2017-05-30 18:01 - 0007601 _____ () C:\Users\Léonie\AppData\Local\Resmon.ResmonCfg
2011-04-13 04:48 - 2010-07-07 01:10 - 0131472 _____ () C:\ProgramData\FullRemove.exe
2016-12-22 02:24 - 2016-12-22 02:25 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2016-12-22 02:24 - 2016-12-22 02:24 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2009-07-29 07:04
==================== Fin de FRST.txt ============================
Exécuté par Léonie (administrateur) sur LÉONIE-PC (06-06-2017 13:36:36)
Exécuté depuis C:\Users\Léonie\Desktop
Profils chargés: UpdatusUser & Léonie (Profils disponibles: UpdatusUser & Léonie)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnSrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_WT50RP.EXE
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(ASUS) C:\Program Files (x86)\Common Files\InstantOn\InsOnWMI.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
() C:\Program Files (x86)\ASUS\ASUS Live Update\ALU.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(Intel(R) Corporation) C:\Program Files\Intel\TurboBoost\TurboBoost.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHTE.EXE
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-06-03] (Realtek Semiconductor)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [361984 2011-03-21] (Alcor Micro Corp.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213824 2017-05-10] (AVAST Software)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\SonicMaster\SonicMasterTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-18] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-08] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4058504500-1572124754-2708443317-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-06] (Acresso Corporation)
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9292504 2016-12-21] (Piriform Ltd)
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [Google Update] => C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\GoogleUpdateCore.exe [601752 2017-02-04] (Google Inc.)
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2012-07-12] (SEIKO EPSON CORPORATION)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-05-10] (AVAST Software)
ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll [2010-09-02] (eCareme Technologies, Inc.)
ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\ASUSWSShellExt64.dll [2010-09-02] (eCareme Technologies, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2011-04-13]
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk [2016-12-22]
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{C944B4C5-1C4D-4D95-8AC0-7CEF13914131}\_77B5857C27147149171BE7.exe ()
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\Parameters: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{88F5315C-0EFB-4C18-B06F-2CA0035F2A85}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{88F5315C-0EFB-4C18-B06F-2CA0035F2A85}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A09FA8D9-9CEC-447A-82A1-8CB1B78FCA6C}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{A09FA8D9-9CEC-447A-82A1-8CB1B78FCA6C}: [DhcpNameServer] 8.8.8.8
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-4058504500-1572124754-2708443317-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/fr-fr/?ocid=iehp
HKU\S-1-5-21-4058504500-1572124754-2708443317-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-4058504500-1572124754-2708443317-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?bcutc=sp-006&q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-04-06] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-04-06] (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
FireFox:
========
FF DefaultProfile: bx905c1k.default
FF ProfilePath: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default [2017-06-06]
FF NewTab: Mozilla\Firefox\Profiles\bx905c1k.default -> about:newtab
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\bx905c1k.default -> Google
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\bx905c1k.default -> hxxps://www.google.com/search?bcutc=sp-006
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\bx905c1k.default -> Google
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\bx905c1k.default -> Google
FF Homepage: Mozilla\Firefox\Profiles\bx905c1k.default -> www.google.fr
FF Extension: (Avast SafePrice) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\Extensions\sp@avast.com.xpi [2017-05-31]
FF Extension: (Avast Online Security) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\Extensions\wrc@avast.com.xpi [2017-05-31]
FF Extension: (Disable TLS Certificate Transparency) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\features\{c557430b-1d05-49fe-9d00-2cf748cc5abe}\disable-cert-transparency@mozilla.org.xpi [2017-05-11]
FF Extension: (Disable Prefetch) - C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\features\{c557430b-1d05-49fe-9d00-2cf748cc5abe}\disable-prefetch@mozilla.org.xpi [2017-05-11]
FF SearchPlugin: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\searchplugins\google-avast.xml [2017-02-28]
FF SearchPlugin: C:\Users\Léonie\AppData\Roaming\Mozilla\Firefox\Profiles\bx905c1k.default\searchplugins\yahoo-avast.xml [2017-02-24]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-05-09] ()
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2011-05-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2011-05-27] (NVIDIA Corporation)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll [2010-01-23] (Zeon Corporation)
FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @talk.google.com/GoogleTalkPlugin -> C:\Users\Léonie\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @talk.google.com/O1DPlugin -> C:\Users\Léonie\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @tools.google.com/Google Update;version=3 -> C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-04] (Google Inc.)
FF Plugin HKU\S-1-5-21-4058504500-1572124754-2708443317-1001: @tools.google.com/Google Update;version=9 -> C:\Users\Léonie\AppData\Local\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-04] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Léonie\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Léonie\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.ourluckysites.com/?type=hp&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG
CHR StartupUrls: Default -> "hxxp://www.ourluckysites.com/?type=hp&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG"
CHR DefaultSearchURL: Default -> hxxp://www.ourluckysites.com/search/?type=ds&ts=1491916297&z=0076ac141dd89760ee4b737g8z0tdgbtbgeq2c3gee&from=che0812&uid=ST9750423AS_6WS0ANZGXXXX6WS0ANZG&q={searchTerms}
CHR DefaultSearchKeyword: Default -> ourluckysites
CHR Profile: C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default [2017-05-30]
CHR Extension: (Google Slides) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-23]
CHR Extension: (Google Docs) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-23]
CHR Extension: (Google Drive) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-23]
CHR Extension: (YouTube) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-23]
CHR Extension: (Avast SafePrice) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-04-09]
CHR Extension: (Google Sheets) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-23]
CHR Extension: (Google Docs hors connexion) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-03]
CHR Extension: (Avast Online Security) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-04-09]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-09]
CHR Extension: (Gmail) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-23]
CHR Extension: (Chrome Media Router) - C:\Users\Léonie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-04-09]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7346208 2017-05-10] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263304 2017-05-10] (AVAST Software)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (Seiko Epson Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [703696 2016-08-08] (SEIKO EPSON CORPORATION)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [311808 2017-05-10] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [190256 2017-05-10] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [334576 2017-05-10] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [49016 2017-05-10] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [38296 2017-05-10] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [32600 2017-05-10] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [128648 2017-05-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [101152 2017-05-10] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [75704 2017-05-10] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1007160 2017-05-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [569192 2017-05-10] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [158880 2017-05-13] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [339696 2017-05-10] (AVAST Software)
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [252832 2017-06-06] (Malwarebytes)
R2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13832 2010-04-17] ()
S3 catchme; \??\C:\Users\LONIE~1\AppData\Local\Temp\catchme.sys [X] <==== ATTENTION
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-06-06 13:36 - 2017-06-06 13:36 - 00022444 _____ C:\Users\Léonie\Desktop\FRST.txt
2017-06-06 13:36 - 2017-06-06 13:36 - 00000000 ____D C:\FRST
2017-06-06 13:35 - 2017-06-06 13:35 - 02433536 _____ (Farbar) C:\Users\Léonie\Desktop\FRST64.exe
2017-06-06 12:57 - 2017-06-06 12:57 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\EPSON
2017-06-06 10:15 - 2017-06-06 10:15 - 00120603 _____ C:\Users\Léonie\Desktop\ZHPDiag4.txt
2017-06-06 10:06 - 2017-06-06 10:06 - 00000000 ____D C:\ProgramData\SWCUTemp
2017-06-06 10:03 - 2017-06-06 10:03 - 00003084 _____ C:\Users\Léonie\Desktop\ZHPFixReport.txt
2017-06-06 10:01 - 2017-06-06 10:01 - 00001855 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-06-06 10:01 - 2017-06-06 10:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-06-06 10:01 - 2017-06-06 10:01 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-06-06 09:59 - 2017-06-06 09:59 - 03521617 _____ (Nicolas Coolman ) C:\Users\Léonie\Desktop\zhpfix_2015.10.19.9.exe
2017-06-05 22:21 - 2017-06-05 22:21 - 00123657 _____ C:\Users\Léonie\Desktop\ZHPDiag2.txt
2017-06-05 22:16 - 2017-06-05 22:16 - 00000971 _____ C:\Users\Léonie\Desktop\AdwCleaner[C0] - Raccourci.lnk
2017-06-05 21:54 - 2017-06-05 22:16 - 00000000 ____D C:\AdwCleaner
2017-06-05 21:54 - 2017-06-05 21:54 - 04110280 _____ C:\adwcleaner_6.047.exe
2017-06-05 21:49 - 2017-06-05 21:51 - 00007877 _____ C:\Users\Léonie\Desktop\ZHPCleaner.txt
2017-06-05 21:42 - 2017-06-05 21:42 - 02513920 _____ C:\Users\Léonie\Desktop\ZHPCleaner-2017.exe
2017-06-05 21:42 - 2017-06-05 21:42 - 00000902 _____ C:\Users\Léonie\Desktop\ZHPCleaner.lnk
2017-06-05 19:59 - 2017-06-06 10:14 - 00120600 _____ C:\Users\Léonie\Desktop\ZHPDiag.txt
2017-06-05 15:09 - 2017-06-06 10:11 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\ZHP
2017-06-05 15:09 - 2017-06-06 10:10 - 00000000 ____D C:\Users\Léonie\AppData\Local\ZHP
2017-06-05 15:08 - 2017-06-05 15:08 - 02734592 _____ C:\Users\Léonie\Desktop\ZHPDiag3.exe
2017-06-01 21:18 - 2017-06-06 00:18 - 00443568 _____ C:\Windows\ntbtlog.txt
2017-05-30 21:50 - 2017-05-30 21:51 - 00004622 _____ C:\Users\Léonie\Documents\attestation mlle GUERRAND.odt
2017-05-30 21:50 - 2017-05-30 21:50 - 00097273 _____ C:\Users\Léonie\Documents\attestation mlle GUERRAND.pdf
2017-05-30 17:46 - 2017-05-30 17:47 - 00000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2017-05-30 17:46 - 2017-05-30 17:46 - 00001206 _____ C:\Users\Léonie\Desktop\CrystalDiskInfo.lnk
2017-05-30 17:46 - 2017-05-30 17:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2017-05-30 17:45 - 2017-05-30 17:45 - 03961080 _____ (Crystal Dew World ) C:\crystaldiskinfo_7-0-5_en_306038.exe
2017-05-26 15:01 - 2017-05-26 15:01 - 00081570 _____ C:\Users\Léonie\Desktop\annexes.pdf
2017-05-26 14:55 - 2017-05-26 14:55 - 00136947 _____ C:\Users\Léonie\Desktop\2377-PAJE-CDI-AMA.pdf
2017-05-26 14:32 - 2017-05-26 14:32 - 00089111 _____ C:\Users\Léonie\Desktop\acte_caution_solidaire.pdf
2017-05-14 20:55 - 2017-05-14 20:55 - 00001051 _____ C:\Users\Léonie\Desktop\MaxiCompte 3.lnk
2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MaxiCompte 3
2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\Program Files (x86)\MaxiCompte 3
2017-05-14 20:55 - 2017-05-14 20:55 - 00000000 ____D C:\Données EuroSoft Software Development
2017-05-14 20:52 - 2017-05-14 20:52 - 09535089 _____ (EuroSoft Software Development ) C:\maxicompte_3-24_fr_15616.exe
2017-05-13 00:46 - 2017-05-30 23:32 - 00002043 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-05-13 00:45 - 2017-05-13 00:46 - 00001165 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-05-13 00:43 - 2017-05-13 00:44 - 00246232 _____ (Mozilla) C:\Users\Léonie\Downloads\Firefox Setup Stub 53.0.2.exe
2017-05-13 00:43 - 2017-05-13 00:43 - 00246232 _____ (Mozilla) C:\Users\Léonie\Downloads\Firefox Setup Stub 53.0.2 (1).exe
2017-05-13 00:12 - 2017-05-13 00:12 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-05-13 00:12 - 2017-05-13 00:12 - 00000000 ____D C:\Users\Public\Documents\Google
2017-05-13 00:10 - 2017-05-13 00:10 - 00000000 ____D C:\Program Files (x86)\Default Company Name
2017-05-11 23:39 - 2017-05-13 00:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-05-11 22:13 - 2017-06-06 10:06 - 00252832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-05-11 22:13 - 2017-06-05 22:01 - 00077376 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-05-11 22:13 - 2017-05-11 22:13 - 00001869 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-05-11 22:13 - 2017-05-11 22:13 - 00000000 ____D C:\Program Files\Malwarebytes
2017-05-11 20:36 - 2017-05-11 20:36 - 00000000 _____ C:\Windows\SysWOW64\3333333
2017-05-11 20:35 - 2017-05-11 20:35 - 00000000 _____ C:\Windows\SysWOW64\00
2017-05-10 13:25 - 2017-05-10 13:25 - 00400456 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\Users\Léonie\Documents\My Games
2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2017-05-09 21:06 - 2017-05-09 21:06 - 00000000 ____D C:\ProgramData\Age of Empires 3
2017-05-09 21:06 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2017-05-09 21:06 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2017-05-09 21:06 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2017-05-09 21:06 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2017-05-09 15:00 - 2017-05-09 15:00 - 00000222 _____ C:\Users\Léonie\Desktop\Age of Empires III Complete Collection.url
2017-05-08 14:39 - 2017-05-08 14:40 - 00000000 ____D C:\Users\Public\Documents\temp
2017-05-08 14:39 - 2017-05-08 14:39 - 00000000 ____D C:\Users\Public\Documents\chrome
2017-05-07 22:21 - 2017-06-05 23:43 - 00000000 ____D C:\Users\Léonie\AppData\Local\FalloutShelter
2017-05-07 22:21 - 2017-05-07 22:21 - 00000000 ____D C:\Users\Léonie\AppData\LocalLow\Bethesda
2017-05-07 22:15 - 2017-05-07 22:15 - 00000222 _____ C:\Users\Léonie\Desktop\Fallout Shelter.url
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-06-06 11:01 - 2011-04-11 14:05 - 00482258 _____ C:\Windows\system32\perfh001.dat
2017-06-06 11:01 - 2011-04-11 14:05 - 00098162 _____ C:\Windows\system32\perfc001.dat
2017-06-06 11:01 - 2011-03-17 13:52 - 00727844 _____ C:\Windows\system32\perfh019.dat
2017-06-06 11:01 - 2011-03-17 13:52 - 00154232 _____ C:\Windows\system32\perfc019.dat
2017-06-06 11:01 - 2011-02-19 07:02 - 00395588 _____ C:\Windows\system32\perfh00D.dat
2017-06-06 11:01 - 2011-02-19 07:02 - 00088148 _____ C:\Windows\system32\perfc00D.dat
2017-06-06 11:01 - 2011-02-19 06:56 - 00610232 _____ C:\Windows\system32\perfh008.dat
2017-06-06 11:01 - 2011-02-19 06:56 - 00114518 _____ C:\Windows\system32\perfc008.dat
2017-06-06 11:01 - 2011-02-19 06:51 - 00409036 _____ C:\Windows\system32\prfh0404.dat
2017-06-06 11:01 - 2011-02-19 06:51 - 00125534 _____ C:\Windows\system32\prfc0404.dat
2017-06-06 11:01 - 2011-02-19 06:45 - 00732262 _____ C:\Windows\system32\prfh0816.dat
2017-06-06 11:01 - 2011-02-19 06:45 - 00156296 _____ C:\Windows\system32\prfc0816.dat
2017-06-06 11:01 - 2011-02-19 06:40 - 00746742 _____ C:\Windows\system32\perfh013.dat
2017-06-06 11:01 - 2011-02-19 06:40 - 00156492 _____ C:\Windows\system32\perfc013.dat
2017-06-06 11:01 - 2011-02-19 06:35 - 00743290 _____ C:\Windows\system32\perfh010.dat
2017-06-06 11:01 - 2011-02-19 06:35 - 00150236 _____ C:\Windows\system32\perfc010.dat
2017-06-06 11:01 - 2011-02-19 06:29 - 00759010 _____ C:\Windows\system32\perfh00C.dat
2017-06-06 11:01 - 2011-02-19 06:29 - 00153584 _____ C:\Windows\system32\perfc00C.dat
2017-06-06 11:01 - 2011-02-19 06:24 - 00700452 _____ C:\Windows\system32\perfh007.dat
2017-06-06 11:01 - 2011-02-19 06:24 - 00152506 _____ C:\Windows\system32\perfc007.dat
2017-06-06 11:01 - 2011-02-19 06:19 - 00748700 _____ C:\Windows\system32\perfh00A.dat
2017-06-06 11:01 - 2011-02-19 06:19 - 00161864 _____ C:\Windows\system32\perfc00A.dat
2017-06-06 11:01 - 2009-07-14 07:13 - 09348272 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-06 11:01 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-06 10:16 - 2017-01-27 23:18 - 00000000 ____D C:\Users\Léonie\AppData\LocalLow\Mozilla
2017-06-06 10:14 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-06 10:14 - 2009-07-14 06:45 - 00018512 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-06 10:08 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2017-06-06 10:06 - 2016-12-21 17:41 - 00045056 _____ C:\Windows\system32\acovcnt.exe
2017-06-06 10:06 - 2016-12-21 17:41 - 00000000 ___HD C:\ASUS.DAT
2017-06-06 10:05 - 2016-12-22 02:07 - 00000000 ____D C:\ProgramData\NVIDIA
2017-06-06 10:05 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-05 23:09 - 2017-01-02 21:43 - 00000000 ____D C:\Program Files (x86)\Steam
2017-06-05 22:10 - 2017-01-13 15:18 - 00000000 ____D C:\Users\Léonie\AppData\Local\Microsoft Games
2017-06-05 22:09 - 2017-04-18 09:08 - 00000000 ____D C:\Windows\Update
2017-06-05 22:09 - 2017-04-07 09:28 - 00000000 ____D C:\Update
2017-06-05 21:51 - 2017-04-10 20:48 - 00000000 ____D C:\Windows\system32\log
2017-06-03 15:23 - 2017-02-23 22:18 - 00004172 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-06-01 21:45 - 2017-02-23 22:22 - 00003920 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1487881344
2017-05-30 21:47 - 2016-12-30 19:14 - 00000000 ___SD C:\Users\Léonie\AppData\LocalLow\Temp
2017-05-30 18:01 - 2017-03-03 15:29 - 00007601 _____ C:\Users\Léonie\AppData\Local\Resmon.ResmonCfg
2017-05-23 21:59 - 2016-12-30 19:10 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\SoftGrid Client
2017-05-20 00:26 - 2009-07-14 07:08 - 00024426 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-05-13 10:05 - 2017-01-27 23:14 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-05-13 00:43 - 2017-02-23 22:18 - 00158880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2017-05-11 23:38 - 2017-01-29 18:42 - 00000000 ____D C:\Users\Léonie\Documents\My Downloads
2017-05-11 22:36 - 2017-03-30 11:18 - 00002394 _____ C:\Users\UpdatusUser\Desktop\chambrerdc(62553776).lnk
2017-05-11 22:36 - 2017-03-30 11:18 - 00002394 _____ C:\Users\Léonie\Desktop\chambrerdc(62553776).lnk
2017-05-11 22:36 - 2017-03-30 11:14 - 00002394 _____ C:\Users\UpdatusUser\Desktop\chambrejuliette(62658996).lnk
2017-05-11 22:36 - 2017-03-30 11:14 - 00002394 _____ C:\Users\Léonie\Desktop\chambrejuliette(62658996).lnk
2017-05-11 22:36 - 2017-02-03 23:20 - 00001435 _____ C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-05-11 22:35 - 2017-04-07 09:28 - 00000000 ____D C:\Users\Léonie\AppData\Local\AMD
2017-05-11 22:30 - 2016-12-22 02:01 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-05-11 22:21 - 2016-12-22 02:24 - 00000000 ____D C:\ProgramData\CyberLink
2017-05-11 22:21 - 2016-12-22 02:24 - 00000000 ____D C:\Program Files (x86)\CyberLink
2017-05-11 20:35 - 2017-05-03 21:24 - 00000000 _____ C:\Windows\SysWOW64\1111111
2017-05-11 20:35 - 2017-04-20 09:12 - 00000000 _____ C:\Windows\SysWOW64\11
2017-05-11 20:35 - 2017-04-07 09:25 - 00000000 ____D C:\Program Files\MK
2017-05-10 22:04 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2017-05-10 13:25 - 2017-02-23 22:18 - 00569192 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-05-10 13:25 - 2017-02-23 22:18 - 00339696 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-05-10 13:25 - 2017-02-23 22:18 - 00128648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2017-05-10 13:25 - 2017-02-23 22:18 - 00075704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-05-10 13:25 - 2017-02-23 22:18 - 00038296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-05-10 13:24 - 2017-02-23 22:19 - 00032600 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 01007160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00334576 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00311808 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00190256 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00101152 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-05-10 13:24 - 2017-02-23 22:18 - 00049016 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-05-09 21:04 - 2017-03-12 00:57 - 00004484 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-05-09 21:04 - 2017-01-02 21:16 - 00803320 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-05-09 21:04 - 2017-01-02 21:16 - 00144888 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-05-09 21:04 - 2017-01-02 21:16 - 00000000 ____D C:\Windows\system32\Macromed
2017-05-09 21:04 - 2011-04-13 04:47 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-05-09 15:00 - 2017-01-02 22:03 - 00000000 ____D C:\Users\Léonie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
==================== Fichiers à la racine de certains dossiers =======
2017-03-03 15:29 - 2017-05-30 18:01 - 0007601 _____ () C:\Users\Léonie\AppData\Local\Resmon.ResmonCfg
2011-04-13 04:48 - 2010-07-07 01:10 - 0131472 _____ () C:\ProgramData\FullRemove.exe
2016-12-22 02:24 - 2016-12-22 02:25 - 0000105 _____ () C:\ProgramData\{40BF1E83-20EB-11D8-97C5-0009C5020658}.log
2016-12-22 02:24 - 2016-12-22 02:24 - 0000107 _____ () C:\ProgramData\{C59C179C-668D-49A9-B6EA-0121CCFC1243}.log
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2009-07-29 07:04
==================== Fin de FRST.txt ============================