Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 15-07-2017
Exécuté par Youcef (administrateur) sur NABILA-ARCHI (16-07-2017 23:12:03)
Exécuté depuis C:\Users\Youcef\Desktop
Profils chargés: Nabila & Youcef & Shahra (Profils disponibles: Nabila & Youcef & Shahra & DefaultAppPool)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TPHM\TPCHWMsg.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TOSHIBA) C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe
(Toshiba) C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(SoftEther VPN Project at University of Tsukuba, Japan.) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft® Windows® Operating System) C:\Windows\System32\Taskmgr.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [TosNC] => C:\Program Files\Toshiba\BulletinBoard\TosNcCore.exe [597928 2011-03-03] (TOSHIBA Corporation)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation)
HKLM\...\Run: [HSON] => C:\Program Files\TOSHIBA\TBS\HSON.exe [296824 2010-09-25] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [973176 2010-12-15] (TOSHIBA Corporation)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [Teco] => C:\Program Files\TOSHIBA\TECO\Teco.exe [1520552 2011-03-02] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
HKLM\...\Run: [TosWaitSrv] => C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe [712096 2011-07-01] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-08-03] (Toshiba Europe GmbH)
HKLM\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [415680 2012-02-05] (Autodesk, Inc.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-05-05] (Adobe Systems Incorporated)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944648 2015-06-12] (Synaptics Incorporated)
HKLM\...\Run: [SoftEther VPN Client UI Helper] => C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-09] (SoftEther VPN Project at University of Tsukuba, Japan.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-07-03] (AVAST Software)
HKLM-x32\...\Run: [NBAgent] => c:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe [1409424 2011-06-29] (Nero AG)
HKLM-x32\...\Run: [TSleepSrv] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [252792 2010-06-04] (TOSHIBA)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1294712 2010-11-29] (TOSHIBA Corporation)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [1047000 2017-04-06] (DivX, LLC)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [839384 2014-09-16] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [6153128 2017-05-22] (LogMeIn Inc.)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\...\Run: [Facebook Update] => C:\Users\Nabila\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-10-15] (Facebook Inc.)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-08-03] (Google Inc.)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\...\Policies\Explorer: []
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-08-03] (Google Inc.)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Run: [Akamai NetSession Interface] => C:\Users\Youcef\AppData\Local\Akamai\netsession_win.exe [4691384 2015-07-23] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Run: [{0CEEFF6C-F2E9-4926-AB61-C028EB28E43E}] => "C:\Users\Youcef\Downloads\XSplitGamecaster-2.8.1607.2027-pmuibl.exe" /cmdloc "HKCU\Software\SplitmediaLabs AiTemp\{0CEEFF6C-F2E9-4926-AB61-C028EB28E43E}"
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Run: [MyComGames] => C:\Users\Youcef\AppData\Local\MyComGames\MyComGames.exe [5519760 2017-07-14] (MY.COM B.V.)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Run: [FlashGet 3] => C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe [3377256 2013-04-18] (Trend Media Corporation Limited)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3491264 2013-01-21] (Tonec Inc.)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2017-06-13] (Piriform Ltd)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\MountPoints2: {6a3cfd27-1d52-11e7-9dd5-9cb70d11ff48} - "F:\Setup.exe"
HKU\S-1-5-21-2016996271-2594559083-2306366174-1004\...\Run: [TOPI.EXE] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\topi.exe [846936 2011-05-16] (TOSHIBA)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1004\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-08-03] (Google Inc.)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1004\...\Run: [Facebook Update] => C:\Users\Nabila\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-10-15] (Facebook Inc.)
HKU\S-1-5-21-2016996271-2594559083-2306366174-1004\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2016-07-16] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-07-14]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.587\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SoftEther VPN Client Manager Startup.lnk [2017-01-09]
ShortcutTarget: SoftEther VPN Client Manager Startup.lnk -> C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe (SoftEther VPN Project at University of Tsukuba, Japan.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Toshiba Places Icon Utility.lnk [2011-08-03]
ShortcutTarget: Toshiba Places Icon Utility.lnk -> C:\Program Files\TOSHIBA\TOSHIBA Places Icon Utility\TosDIMonitor.exe (Toshiba)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-08-03]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Youcef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2015-07-03]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Youcef\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
Startup: C:\Users\Youcef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2016-08-16]
ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe (Rainmeter)
GroupPolicy: Restriction - Chrome <==== ATTENTION

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

ProxyEnable: [S-1-5-21-2016996271-2594559083-2306366174-1000] => Proxy est activé.
ProxyServer: [S-1-5-21-2016996271-2594559083-2306366174-1000] => http=127.0.0.1:13837;https=127.0.0.1:13837
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 193.95.57.20 8.8.8.8
Tcpip\..\Interfaces\{18214A52-F5ED-4631-9858-9AF2ED30362C}: [DhcpNameServer] 193.95.59.20 193.95.57.20
Tcpip\..\Interfaces\{58008c0a-e6a5-4e1e-81e8-351061ab425d}: [DhcpNameServer] 50.30.0.50
Tcpip\..\Interfaces\{9eac6811-c2db-4fae-a49f-49a5711ed6f0}: [DhcpNameServer] 193.95.57.20 8.8.8.8

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=130918236829031593&GUID=784E9B0E-80FF-4E7F-B2B0-829786E75364
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1434051364&z=d790c6842caf3fb33d37fa6gcz1cfzee8wfgec5qfb&from=ient06110&uid=TOSHIBAXMK7575GSX_Y1QISA2KSXXY1QISA2KS&q={searchTerms}
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=130918236838490791&GUID=784E9B0E-80FF-4E7F-B2B0-829786E75364
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.delta-homes.com/?type=hp&ts=1434051364&z=d790c6842caf3fb33d37fa6gcz1cfzee8wfgec5qfb&from=ient06110&uid=TOSHIBAXMK7575GSX_Y1QISA2KSXXY1QISA2KS
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = hxxp://www2.delta-search.com/?babsrc=HP_ss&mntrId=CE5D9CB70D11C780&affID=119982&tsp=4987
HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1434051364&z=d790c6842caf3fb33d37fa6gcz1cfzee8wfgec5qfb&from=ient06110&uid=TOSHIBAXMK7575GSX_Y1QISA2KSXXY1QISA2KS&q={searchTerms}
HKU\S-1-5-21-2016996271-2594559083-2306366174-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKU\S-1-5-21-2016996271-2594559083-2306366174-1004\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
URLSearchHook: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 - (Pas de nom) - {539F76FD-084E-4858-86D5-62F02F54AE86} - Pas de fichier
SearchScopes: HKLM-x32 -> {756D1D40-E491-4E1D-9BC6-5B37CEDE646E} URL = hxxp://www.arabyonline.com/search/?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSERBM&pc=MSERT1
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> {756D1D40-E491-4E1D-9BC6-5B37CEDE646E} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1003 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE&rlz=1I7TEUA_frTN501
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1004 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1004 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = hxxp://search.babylon.com/?q={searchTerms}&affID=112477&tt=4312_6&babsrc=SP_ss&mntrId=ce5d88180000000000009cb70d11c780
SearchScopes: HKU\S-1-5-21-2016996271-2594559083-2306366174-1004 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2012-05-02] (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-03-27] (Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-03-27] (Oracle Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2012-05-02] (Internet Download Manager, Tonec Inc.)
BHO-x32: KeyringFlash Class -> {1E3705EE-8BC8-42FC-B312-C047256390E2} -> C:\Program Files (x86)\Keyring.net\Flash1.11.8\keyringflash.dll [2011-08-31] (iDOC K.K.)
BHO-x32: SAfie savei -> {7589A24E-1B45-A855-785D-5028500A0A46} -> C:\ProgramData\SAfie savei\51fadca63def0.dll [2013-08-01] ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2017-01-14] (Oracle Corporation)
BHO-x32: ArcPluginIEBHO Class -> {84BFE29A-8139-402a-B2A4-C23AE9E1A75F} -> C:\Program Files (x86)\Arc\Plugins\ArcPluginIE.dll => Pas de fichier
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-29] (Google Inc.)
BHO-x32: FlashGetBHO -> {b070d3e3-fec0-47d9-8e8a-99d4eeb3d3b0} -> C:\Users\Youcef\AppData\Roaming\FlashGetBHO\FlashGetBHO.dll [2012-11-01] (Trend Media Group)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-14] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-29] (Google Inc.)
Toolbar: HKU\S-1-5-21-2016996271-2594559083-2306366174-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
Toolbar: HKU\S-1-5-21-2016996271-2594559083-2306366174-1003 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
Toolbar: HKU\S-1-5-21-2016996271-2594559083-2306366174-1004 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
DPF: HKLM-x32 {6A060448-60F9-11D5-A6CD-0002B31F7455}
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-06-01] (Skype Technologies)

FireFox:
========
FF DefaultProfile: jg257bix.default-1500235049189
FF ProfilePath: C:\Users\Youcef\AppData\Roaming\Mozilla\Firefox\Profiles\jg257bix.default-1500235049189 [2017-07-16]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha978.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha978\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta946.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta946\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha862.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha862\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha749.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha749\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha487.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha487\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha711.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha711\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaWatchV1home553.net] - C:\Program Files (x86)\MediaWatchV1\MediaWatchV1home553\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaBuzzV1mode8064.net] - C:\Program Files (x86)\MediaBuzzV1\MediaBuzzV1mode8064\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@RichMediaViewV1release236.net] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release236\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@TrustMediaViewerV1alpha4653.net] - C:\Program Files (x86)\TrustMediaViewerV1\TrustMediaViewerV1alpha4653\ff => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [ext@RichMediaViewV1release4270.net] - C:\Program Files (x86)\RichMediaViewV1\RichMediaViewV1release4270\ff => non trouvé(e)
FF HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi => non trouvé(e)
FF HKU\S-1-5-21-2016996271-2594559083-2306366174-1000\...\Firefox\Extensions: [{85A9DD51-C7AB-8CCB-1BF6-9AF83F578FE1}] - C:\Program Files (x86)\ver2OffersWizard\190.xpi => non trouvé(e)
FF HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Youcef\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\Youcef\AppData\Roaming\IDM\idmmzcc5 [2017-07-02] [non signé]
FF HKU\S-1-5-21-2016996271-2594559083-2306366174-1003\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Youcef\AppData\Roaming\IDM\idmmzcc5
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-03-27] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-03-27] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-07-29] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Program Files (x86)\ArcPlugins\NPSWF32.dll [Pas de fichier]
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1228198.dll [2017-02-27] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2017-04-06] (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2016-10-06] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-14] (Oracle Corporation)
FF Plugin-x32: @keyring.net/KeyringUtility -> C:\ProgramData\keyring\plugin\1.2.1\npkrplugin-1.2.1.dll [2011-08-31] (iDOC K.K.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Pas de fichier]
FF Plugin-x32: @perfectworld.com/npArcPlayNowPlugin -> C:\Program Files (x86)\Arc\Plugins\npArcPluginFF.dll [Pas de fichier]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-04-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-07-29] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Nabila\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1000: @soe.sony.com/installer,version=1.0.3 -> C:\Users\Nabila\AppData\LocalLow\Sony Online Entertainment\npsoe.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Nabila\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-11] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2017-03-21] ()
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1003: @coreonline.com/run3d,version=1.0 -> C:\Users\Youcef\AppData\LocalLow\Square Enix\nprun3d.dll [2012-09-14] (Square Enix)
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1003: @my.com/Games -> C:\Users\Youcef\AppData\Local\MyComGames\NPMyComDetector.dll [2017-05-14] (MY.COM B.V.)
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1003: @nsroblox.roblox.com/launcher -> C:\Users\Youcef\AppData\Local\Roblox\Versions\version-7d64c9ce01664bca\\NPRobloxProxy.dll [2012-12-31] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1003: @nsroblox.roblox.com/launcher64 -> C:\Users\Youcef\AppData\Local\Roblox\Versions\version-7d64c9ce01664bca\\NPRobloxProxy64.dll [2012-12-31] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-2016996271-2594559083-2306366174-1003: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Youcef\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-07-15] (Unity Technologies ApS)

Chrome:
=======
CHR Profile: C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default [2017-07-16]
CHR Extension: (Google Slides) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-07-16]
CHR Extension: (Google Docs) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-07-16]
CHR Extension: (Google Drive) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-16]
CHR Extension: (YouTube) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-16]
CHR Extension: (Сookies Control) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfkpefbllpconnkfpdgagkifmflckkdp [2017-07-16]
CHR Extension: (Google Sheets) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-07-16]
CHR Extension: (Google Docs hors connexion) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-16]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-16]
CHR Extension: (Gmail) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-16]
CHR Extension: (Chrome Media Router) - C:\Users\Youcef\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-16]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-07-03] (AVAST Software s.r.o.)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [19232 2012-01-31] (Autodesk, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-07-03] (AVAST Software)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-09-16] (BlueStack Systems, Inc.)
S2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-09-16] (BlueStack Systems, Inc.)
S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-09-16] (BlueStack Systems, Inc.)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [409128 2017-03-07] (EasyAntiCheat Ltd)
S2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3760040 2017-05-22] (LogMeIn Inc.)
S2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [2610808 2017-06-15] (AnchorFree Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Fichier non signé]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.587\McCHSvc.exe [404376 2017-06-30] (McAfee, Inc.)
S2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)
S2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2015-10-21] ()
R2 SEVPNCLIENT; C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe [5248456 2017-01-09] (SoftEther VPN Project at University of Tsukuba, Japan.)
S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [1450064 2016-07-06] () [Fichier non signé]
S2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-06-12] (Synaptics Incorporated)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation)
S2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [X]

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AFTrafMgr1.2; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_2_64.sys [57272 2017-05-08] (AnchorFree Inc.)
R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [319984 2017-07-03] (AVAST Software s.r.o.)
R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [198944 2017-07-03] (AVAST Software s.r.o.)
R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [343264 2017-07-03] (AVAST Software s.r.o.)
R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [57704 2017-07-03] (AVAST Software s.r.o.)
S3 aswHdsKe; C:\WINDOWS\system32\drivers\aswHdsKe.sys [82936 2016-11-25] (AVAST Software)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [46984 2017-07-03] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [41800 2017-07-03] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [146664 2017-07-03] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [110352 2017-07-03] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [84392 2017-07-03] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [1015848 2017-07-03] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [585608 2017-07-03] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [198768 2017-07-03] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [361336 2017-07-03] (AVAST Software)
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-09-16] (BlueStack Systems)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [130688 2016-08-30] (Samsung Electronics Co., Ltd.)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [283200 2017-04-10] (DT Soft Ltd)
S3 FairplayKD; C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [78856 2016-08-14] (Multi Theft Auto)
R3 Hamachi; C:\WINDOWS\System32\drivers\Hamdrv.sys [45680 2015-08-03] (LogMeIn Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 Neo_VPN; C:\WINDOWS\System32\drivers\Neo6_x64_VPN.sys [38216 2017-01-09] (SoftEther Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvtdwu.inf_amd64_7b6a26f0085e5f11\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
R1 SeLow; C:\WINDOWS\system32\DRIVERS\SeLow_x64.sys [51024 2017-01-09] (SoftEther Corporation)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-12] (Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2016-08-05] (Anchorfree Inc.)
R3 Thotkey; C:\WINDOWS\System32\drivers\Thotkey.sys [54424 2015-08-05] (Toshiba Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R3 XSplit_Dummy; C:\WINDOWS\system32\drivers\xspltspk.sys [26200 2016-06-15] (SplitmediaLabs Limited)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-07-16 21:46 - 2017-07-16 21:49 - 00194429 _____ C:\Users\Youcef\Desktop\Addition.txt
2017-07-16 21:40 - 2017-07-16 23:12 - 00038916 _____ C:\Users\Youcef\Desktop\FRST.txt
2017-07-16 21:40 - 2017-07-16 23:11 - 00000000 ____D C:\FRST
2017-07-16 21:37 - 2017-07-16 21:37 - 02435584 _____ (Farbar) C:\Users\Youcef\Desktop\FRST64.exe
2017-07-16 17:08 - 2017-07-16 17:29 - 00002459 _____ C:\Users\Youcef\Desktop\Skyrim (SKSE).lnk
2017-07-16 16:40 - 2017-07-16 16:40 - 00000000 ____D C:\Users\Youcef\Desktop\rld
2017-07-16 16:33 - 2017-07-16 16:33 - 00000218 _____ C:\Users\Youcef\AppData\Local\recently-used.xbel
2017-07-16 13:59 - 2017-07-16 13:59 - 00002353 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-16 13:59 - 2017-07-16 13:59 - 00002341 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-07-16 13:58 - 2017-07-16 13:58 - 01130328 _____ (Google Inc.) C:\Users\Youcef\Downloads\ChromeSetup (2).exe
2017-07-16 13:45 - 2017-07-16 13:45 - 00020207 _____ C:\Users\Youcef\Downloads\Tropico.5.PC.torrent
2017-07-14 19:51 - 2017-07-14 19:51 - 00000000 ____D C:\Users\Youcef\AppData\LocalLow\Thunder Lotus Games
2017-07-14 11:49 - 2017-07-14 11:49 - 00002016 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-07-14 11:49 - 2017-07-14 11:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-07-14 11:49 - 2017-07-14 11:49 - 00000000 ____D C:\ProgramData\McAfee Security Scan
2017-07-14 01:36 - 2017-07-14 01:36 - 00000000 ____D C:\Users\Youcef\Documents\SkidRow
2017-07-14 00:55 - 2017-07-14 00:55 - 00001052 _____ C:\Users\Public\Desktop\The Sexy Brutale.lnk
2017-07-14 00:55 - 2017-07-14 00:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sexy Brutale
2017-07-14 00:55 - 2017-07-14 00:55 - 00000000 ____D C:\Program Files (x86)\Tequila Works
2017-07-13 20:56 - 2017-07-13 20:56 - 00000000 ____D C:\Users\Youcef\Documents\Warm Lamp Games
2017-07-13 20:46 - 2017-07-13 20:46 - 00000000 ____D C:\Users\Youcef\AppData\Local\FOMM
2017-07-13 20:42 - 2017-07-13 20:50 - 00000000 ____D C:\Program Files\Beholder
2017-07-13 20:42 - 2017-07-13 20:42 - 00000579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Beholder.lnk
2017-07-13 20:42 - 2017-07-13 20:42 - 00000567 _____ C:\Users\Public\Desktop\Beholder.lnk
2017-07-13 20:36 - 2017-07-13 21:14 - 1556768768 _____ C:\Users\Youcef\Downloads\sr-thesexybrutale.iso
2017-07-13 20:26 - 2017-07-13 20:39 - 565444608 _____ C:\Users\Youcef\Downloads\rld-beholder.iso
2017-07-13 19:36 - 2017-07-16 21:59 - 00000000 ____D C:\Users\Youcef\AppData\LocalLow\Mozilla
2017-07-13 19:36 - 2017-07-14 11:59 - 00000000 ____D C:\Users\Youcef\AppData\Local\Mozilla
2017-07-13 19:35 - 2017-07-13 19:35 - 00001227 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-07-13 19:33 - 2017-07-13 19:33 - 00266424 _____ (Mozilla) C:\Users\Youcef\Downloads\Firefox Setup Stub 54.0.1.exe
2017-07-13 16:25 - 2017-07-13 16:25 - 01130328 _____ (Google Inc.) C:\Users\Youcef\Downloads\ChromeSetup (1).exe
2017-07-13 16:10 - 2017-07-13 16:10 - 00001492 _____ C:\Users\Youcef\Desktop\UsbFix.lnk
2017-07-13 16:09 - 2017-07-13 16:09 - 03824024 _____ (SOSVirus) C:\Users\Youcef\Downloads\UsbFix.exe
2017-07-13 00:21 - 2017-07-13 00:21 - 00000000 ____D C:\Users\Youcef\Desktop\Nouveau dossier
2017-07-13 00:15 - 2017-07-13 00:17 - 47735279 _____ C:\Users\Youcef\Downloads\Damso - Ipséité.zip
2017-07-13 00:02 - 2017-07-13 00:06 - 00000000 ____D C:\Users\Youcef\AppData\Local\Discord
2017-07-06 17:02 - 2017-07-06 17:02 - 00764260 _____ C:\Users\Youcef\Downloads\video-1485198645.mp4
2017-07-06 16:50 - 2017-07-06 16:50 - 00024875 _____ C:\Users\Youcef\Downloads\mdrrrrr.jpeg
2017-07-06 16:50 - 2017-07-06 16:50 - 00024875 _____ C:\Users\Youcef\Downloads\4e9ee6cab76f393abd8850f879a1935b.jpeg
2017-07-05 18:33 - 2017-07-05 18:33 - 00000000 ____D C:\Users\Youcef\AppData\Local\ZHP
2017-07-05 18:32 - 2017-07-05 18:32 - 02809728 _____ C:\Users\Youcef\ZHPCleaner.exe
2017-07-05 18:04 - 2017-07-16 21:36 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\ZHP
2017-07-05 18:04 - 2017-07-05 18:32 - 00000789 _____ C:\Users\Youcef\Desktop\ZHPCleaner.lnk
2017-07-05 17:29 - 2017-07-05 17:29 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-07-05 17:07 - 2017-07-07 21:45 - 615958747 _____ C:\WINDOWS\MEMORY.DMP
2017-07-05 16:52 - 2017-07-05 16:52 - 00002866 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-07-05 16:52 - 2017-07-05 16:52 - 00000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-07-05 16:52 - 2017-07-05 16:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-07-05 16:52 - 2017-07-05 16:52 - 00000000 ____D C:\Program Files\CCleaner
2017-07-05 16:31 - 2017-07-05 16:31 - 01821174 _____ C:\Users\Youcef\Downloads\Marine-le-pen-fiche-candidat.jpeg
2017-07-05 04:00 - 2017-07-05 04:00 - 00003178 _____ C:\WINDOWS\System32\Tasks\eteindre l'ordi
2017-07-03 20:14 - 2017-07-03 20:13 - 00400464 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2017-07-02 18:18 - 2017-07-02 18:18 - 00000000 ____D C:\Games
2017-07-02 18:15 - 2017-07-02 18:18 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2017-07-02 18:15 - 2017-07-02 18:16 - 00000000 ____D C:\Users\Youcef\Documents\Nexus Mod Manager
2017-07-02 18:15 - 2017-07-02 18:15 - 00000938 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2017-07-02 18:15 - 2017-07-02 18:15 - 00000000 ____D C:\Users\Youcef\AppData\Local\Black_Tree_Gaming
2017-07-02 18:15 - 2017-07-02 18:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2017-07-02 18:05 - 2017-07-02 18:05 - 00000000 ____D C:\Users\Youcef\AppData\Local\com.add0n.native_client
2017-07-02 18:05 - 2017-07-01 13:04 - 00000721 _____ C:\Users\Youcef\Desktop\uninstall.bat
2017-07-02 18:05 - 2017-07-01 13:04 - 00000545 _____ C:\Users\Youcef\Desktop\ReadMe.txt
2017-07-02 18:05 - 2017-07-01 13:04 - 00000206 _____ C:\Users\Youcef\Desktop\install.bat
2017-07-02 18:05 - 2017-07-01 13:04 - 00000000 ____D C:\Users\Youcef\Desktop\node
2017-07-02 18:05 - 2017-07-01 13:04 - 00000000 ____D C:\Users\Youcef\Desktop\app
2017-07-02 18:04 - 2017-07-02 18:04 - 13087836 _____ C:\Users\Youcef\Downloads\windows (1).zip
2017-07-02 18:03 - 2017-07-02 18:03 - 13087836 _____ C:\Users\Youcef\Downloads\windows.zip
2017-07-02 17:54 - 2017-07-16 16:34 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\IDM
2017-07-02 17:54 - 2017-07-02 17:54 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-07-02 17:54 - 2017-07-02 17:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-07-02 17:53 - 2017-07-02 17:55 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-07-02 17:50 - 2017-07-02 17:51 - 05641864 _____ C:\Users\Youcef\Downloads\Internet_Download_Manager_v6.11. 8.1(IDM)+Crack+Key.rar
2017-06-30 23:52 - 2017-06-30 23:52 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KingsIsle Entertainment
2017-06-30 23:51 - 2017-06-30 23:51 - 00000793 _____ C:\Users\Youcef\Desktop\Play Pirate101.lnk
2017-06-30 23:51 - 2017-06-30 23:51 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\InstallShield Installation Information
2017-06-30 23:51 - 2017-06-30 23:51 - 00000000 ____D C:\ProgramData\KingsIsle Entertainment
2017-06-30 23:49 - 2017-06-30 23:50 - 07406808 _____ (Acresso Software Inc.) C:\Users\Youcef\Downloads\InstallPirate101.exe
2017-06-27 16:03 - 2017-06-27 16:03 - 00001621 _____ C:\Users\Youcef\Desktop\TESV - Raccourci.lnk
2017-06-24 22:09 - 2017-06-24 22:09 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Skyrim Update 13
2017-06-24 20:58 - 2017-07-02 18:18 - 00000000 ____D C:\Users\Youcef\AppData\Local\Skyrim
2017-06-24 20:23 - 2017-06-24 20:23 - 00000000 ____D C:\Program Files (x86)\Bethesda
2017-06-24 18:30 - 2017-06-24 22:06 - 00000000 ____D C:\Users\Youcef\Documents\MEGAsync Downloads
2017-06-24 18:28 - 2017-06-24 18:28 - 13314392 _____ (MEGA Limited) C:\Users\Youcef\Downloads\MEGAsyncSetup.exe
2017-06-24 18:18 - 2017-06-24 21:40 - 03190340 _____ C:\Users\Youcef\Downloads\Non confirmé 299515.crdownload
2017-06-24 06:31 - 2017-06-24 06:31 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2017-06-23 19:37 - 2017-07-14 11:49 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\BITS
2017-06-23 19:37 - 2017-06-23 19:37 - 00000025 _____ C:\WINDOWS\emcore.INI
2017-06-23 19:37 - 2017-06-23 19:37 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FlashGet3.7
2017-06-23 19:37 - 2017-06-23 19:37 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\FlashgetSetup
2017-06-23 19:36 - 2017-06-23 19:36 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\FlashGetBHO
2017-06-23 19:36 - 2017-06-23 19:36 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\FlashGet
2017-06-23 19:36 - 2017-06-23 19:36 - 00000000 ____D C:\Program Files (x86)\FlashGet Network
2017-06-23 19:35 - 2017-06-23 19:35 - 06375088 _____ (Trend Media Corporation Limited.) C:\Users\Youcef\Downloads\flashget3.7.0.1220en.exe
2017-06-23 19:22 - 2017-06-23 19:22 - 01130328 _____ (Google Inc.) C:\Users\Youcef\Downloads\ChromeSetup.exe
2017-06-23 19:03 - 2017-07-06 17:02 - 00000000 ____D C:\Users\Youcef\Downloads\Video
2017-06-23 13:37 - 2017-06-23 13:37 - 00000000 ____D C:\Program Files (x86)\AGEIA Technologies
2017-06-23 11:59 - 2017-07-16 21:17 - 00000176 _____ C:\Users\Youcef\BullseyeCoverageError.txt
2017-06-23 11:58 - 2017-06-23 11:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2017-06-23 11:58 - 2017-06-23 11:58 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2017-06-23 11:56 - 2017-06-23 12:01 - 00000176 _____ C:\Users\Default\BullseyeCoverageError.txt
2017-06-22 21:08 - 2017-06-22 21:08 - 00001320 _____ C:\Users\Public\Desktop\Fallout 3 Launcher.lnk
2017-06-22 21:08 - 2017-06-22 21:08 - 00001276 _____ C:\Users\Public\Desktop\Fallout 3 Settings.lnk
2017-06-22 21:08 - 2017-06-22 21:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fallout
2017-06-22 20:42 - 2017-06-22 20:42 - 00000000 ____D C:\Program Files (x86)\Mr DJ
2017-06-22 15:31 - 2017-06-22 16:14 - 00000000 ____D C:\Users\Youcef\Downloads\Fallout 3 - GOTY repack Mr DJ
2017-06-22 15:22 - 2017-06-22 15:22 - 00001130 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk
2017-06-22 14:59 - 2017-06-03 10:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-06-22 14:59 - 2017-06-03 10:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2017-06-22 14:59 - 2017-06-03 10:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll
2017-06-22 14:58 - 2017-06-03 10:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2017-06-22 14:58 - 2017-06-03 10:16 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2017-06-22 14:58 - 2017-06-03 10:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll
2017-06-22 14:58 - 2017-06-03 10:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-06-22 14:58 - 2017-06-03 10:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2017-06-22 14:58 - 2017-06-03 10:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-06-22 14:57 - 2017-06-03 10:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-06-22 14:57 - 2017-06-03 10:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-06-22 14:57 - 2017-06-03 10:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2017-06-22 14:57 - 2017-06-03 10:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2017-06-22 14:57 - 2017-06-03 10:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-06-22 14:57 - 2017-06-03 10:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2017-06-22 14:57 - 2017-06-03 10:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2017-06-22 14:57 - 2017-06-03 10:28 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-06-22 14:57 - 2017-06-03 10:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBrokerUI.dll
2017-06-22 14:57 - 2017-06-03 10:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2017-06-22 14:57 - 2017-06-03 10:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2017-06-22 14:57 - 2017-06-03 10:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-06-22 14:57 - 2017-06-03 10:15 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-06-22 14:57 - 2017-06-03 10:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-06-22 14:57 - 2017-06-03 10:05 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-06-22 14:57 - 2017-06-03 10:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-06-22 14:57 - 2017-06-03 10:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-06-22 14:57 - 2017-03-04 07:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-06-22 14:57 - 2017-03-04 07:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2017-06-22 14:57 - 2017-03-04 07:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2017-06-22 14:57 - 2016-09-07 05:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2017-06-22 14:56 - 2017-06-03 11:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2017-06-22 14:56 - 2017-06-03 11:11 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-06-22 14:56 - 2017-06-03 11:06 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-06-22 14:56 - 2017-06-03 10:44 - 01412640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-06-22 14:56 - 2017-06-03 10:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2017-06-22 14:56 - 2017-06-03 10:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2017-06-22 14:56 - 2017-06-03 10:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2017-06-22 14:56 - 2017-06-03 10:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2017-06-22 14:56 - 2017-06-03 10:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-06-22 14:56 - 2017-06-03 10:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-06-22 14:56 - 2017-06-03 10:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-06-22 14:56 - 2017-06-03 10:08 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2017-06-22 14:56 - 2017-06-03 10:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll
2017-06-22 14:56 - 2017-06-03 10:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-06-22 14:55 - 2017-06-03 11:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2017-06-22 14:55 - 2017-06-03 10:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2017-06-22 14:55 - 2017-06-03 10:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-06-22 14:55 - 2017-06-03 09:40 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2017-06-22 14:24 - 2017-06-03 10:14 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-06-22 14:24 - 2017-06-03 09:52 - 03403264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-06-22 14:24 - 2017-06-03 09:50 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-06-22 14:24 - 2017-06-03 09:49 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2017-06-22 14:18 - 2017-06-03 11:11 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2017-06-22 14:18 - 2017-06-03 10:59 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-06-22 14:18 - 2017-06-03 10:50 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-06-22 14:18 - 2017-06-03 10:39 - 02532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-06-22 14:18 - 2017-06-03 10:16 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2017-06-22 14:18 - 2017-06-03 10:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-06-22 14:18 - 2017-06-03 10:14 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-06-22 14:18 - 2017-06-03 10:14 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-06-22 14:18 - 2017-06-03 10:10 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-06-22 14:18 - 2017-06-03 10:08 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-06-22 14:18 - 2017-06-03 10:07 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-06-22 14:18 - 2017-06-03 09:49 - 03615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-06-22 14:18 - 2017-06-03 09:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-06-22 14:18 - 2017-06-03 09:49 - 02318848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-06-22 14:18 - 2017-06-03 09:49 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-06-22 14:18 - 2017-06-03 09:48 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-06-22 14:17 - 2017-06-03 10:53 - 00404824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-06-22 14:17 - 2017-06-03 10:49 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2017-06-22 14:17 - 2017-06-03 10:45 - 22220864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-06-22 14:17 - 2017-06-03 10:10 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2017-06-22 14:16 - 2017-06-03 10:44 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-06-22 14:16 - 2017-06-03 10:11 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-06-22 14:16 - 2017-06-03 10:03 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-06-22 14:16 - 2017-06-03 09:53 - 08125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-06-22 14:16 - 2017-06-03 09:52 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2017-06-22 14:16 - 2017-06-03 09:50 - 04744704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-06-22 14:16 - 2017-06-03 09:46 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-06-22 14:13 - 2017-06-03 11:08 - 07783256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-06-22 14:13 - 2017-06-03 10:59 - 01181024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2017-06-22 14:13 - 2017-06-03 10:48 - 00857952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2017-06-22 14:13 - 2017-06-03 10:48 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2017-06-22 14:13 - 2017-06-03 10:09 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2017-06-22 14:13 - 2017-06-03 10:09 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2017-06-22 14:13 - 2017-06-03 10:07 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2017-06-22 14:13 - 2017-06-03 09:51 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2017-06-22 14:13 - 2017-06-03 09:48 - 01131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2017-06-22 14:13 - 2017-06-03 09:48 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2017-06-22 14:13 - 2017-05-25 06:56 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2017-06-22 14:13 - 2017-03-04 07:16 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2017-06-22 14:12 - 2017-06-03 11:14 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-06-22 14:12 - 2017-06-03 10:09 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2017-06-22 14:11 - 2017-06-03 11:09 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-06-22 14:11 - 2017-06-03 10:51 - 02187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-06-22 14:11 - 2017-06-03 10:51 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2017-06-22 14:11 - 2017-06-03 10:49 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-06-22 14:11 - 2017-06-03 09:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2017-06-22 14:11 - 2017-06-03 09:48 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-06-22 14:10 - 2017-06-03 10:18 - 22569984 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-06-22 14:10 - 2017-06-03 10:08 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2017-06-22 14:10 - 2017-06-03 10:00 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-06-22 14:10 - 2017-06-03 09:56 - 13091840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-06-22 14:09 - 2017-06-03 10:16 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2017-06-22 14:09 - 2017-06-03 10:07 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2017-06-22 14:09 - 2017-06-03 09:52 - 00975872 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2017-06-22 14:09 - 2017-06-03 09:49 - 00351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2017-06-22 14:09 - 2017-06-03 07:08 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2017-06-22 14:08 - 2017-06-03 11:14 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2017-06-22 14:08 - 2017-06-03 10:40 - 01566552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-06-22 14:08 - 2017-06-03 10:40 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2017-06-22 14:08 - 2017-06-03 10:14 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2017-06-22 14:08 - 2017-06-03 10:10 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2017-06-22 14:08 - 2017-06-03 10:06 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2017-06-22 14:08 - 2017-06-03 10:01 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-06-22 14:08 - 2017-06-03 09:49 - 02475520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-06-22 14:08 - 2017-06-03 09:49 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-06-22 14:07 - 2017-06-03 11:14 - 01564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2017-06-22 14:07 - 2017-06-03 11:14 - 00629088 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2017-06-22 14:07 - 2017-06-03 11:14 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2017-06-22 14:07 - 2017-06-03 11:14 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2017-06-22 14:07 - 2017-06-03 11:14 - 00096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2017-06-22 14:07 - 2017-06-03 11:14 - 00034648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2017-06-22 14:07 - 2017-06-03 11:01 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2017-06-22 14:07 - 2017-06-03 10:22 - 07217152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-06-22 14:07 - 2017-06-03 09:52 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2017-06-22 14:06 - 2017-06-03 10:48 - 01112416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2017-06-22 14:06 - 2017-06-03 09:51 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2017-06-22 14:04 - 2017-06-03 11:14 - 01214816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-06-22 14:04 - 2017-06-03 11:14 - 00544096 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2017-06-22 14:04 - 2017-06-03 11:14 - 00334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2017-06-22 14:04 - 2017-06-03 11:14 - 00233824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2017-06-22 14:04 - 2017-06-03 10:59 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2017-06-22 14:04 - 2017-06-03 10:39 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-06-22 14:04 - 2017-06-03 10:08 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-06-22 14:03 - 2017-06-03 10:48 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-06-22 14:03 - 2017-06-03 10:48 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-06-22 14:03 - 2017-06-03 09:58 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2017-06-22 14:00 - 2017-06-03 11:16 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2017-06-22 14:00 - 2017-06-03 10:54 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2017-06-22 14:00 - 2017-06-03 10:50 - 00381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2017-06-22 14:00 - 2017-06-03 10:15 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-06-21 21:22 - 2017-07-16 16:38 - 00000000 ____D C:\Users\Youcef\Downloads\Compressed
2017-06-21 21:11 - 2017-06-21 21:11 - 00000000 ____D C:\Users\Youcef\Downloads\This is the Police - crack incl
2017-06-21 21:08 - 2017-06-21 21:08 - 00080199 _____ C:\Users\Youcef\Downloads\Fallout.3.Game.of.The.Year.Edition.MULTi3-PROPHET.torrent
2017-06-17 15:12 - 2017-07-13 19:36 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\Mozilla

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-07-16 21:21 - 2015-06-06 00:04 - 00000000 ____D C:\Users\Youcef\AppData\Local\LogMeIn Hamachi
2017-07-16 21:16 - 2016-11-05 19:39 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-07-16 21:00 - 2017-05-25 10:43 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\DMCache
2017-07-16 13:59 - 2012-09-26 12:41 - 00000000 ____D C:\Users\Youcef\AppData\Local\Google
2017-07-15 02:31 - 2017-01-09 17:28 - 00000000 ____D C:\Program Files\SoftEther VPN Client
2017-07-14 19:10 - 2012-12-30 12:15 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-07-14 11:49 - 2015-11-12 17:56 - 00000000 ____D C:\Program Files\McAfee Security Scan
2017-07-14 11:47 - 2017-05-12 18:10 - 00000000 ____D C:\Users\Youcef\AppData\Local\MyComGames
2017-07-13 20:41 - 2017-04-10 17:14 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\DAEMON Tools Lite
2017-07-13 19:36 - 2013-08-01 12:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-07-13 19:35 - 2014-05-18 17:26 - 00001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-07-13 19:35 - 2014-05-18 17:26 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-07-13 17:08 - 2017-03-08 18:43 - 00000000 ____D C:\Users\Youcef\Documents\My Games
2017-07-13 17:04 - 2016-08-04 19:51 - 00000000 ____D C:\Users\Youcef\AppData\Local\CrashDumps
2017-07-13 16:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-07-13 16:27 - 2011-08-03 11:41 - 00000000 ____D C:\Program Files (x86)\Google
2017-07-13 16:10 - 2014-02-26 00:35 - 00000000 ____D C:\UsbFix
2017-07-13 15:57 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-07-13 02:40 - 2016-11-05 19:49 - 00000000 ____D C:\Users\Youcef
2017-07-13 00:05 - 2016-08-11 23:51 - 00000000 ____D C:\Users\Youcef\AppData\Local\SquirrelTemp
2017-07-12 23:58 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-07-12 23:58 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-07-12 17:02 - 2016-11-05 19:44 - 00000000 ____D C:\ProgramData\NVIDIA
2017-07-12 17:01 - 2016-11-05 20:52 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-07-12 10:57 - 2016-11-05 19:50 - 00000000 ____D C:\Users\Nabila
2017-07-12 10:57 - 2016-11-05 19:49 - 00000000 ____D C:\Users\Shahra
2017-07-12 10:41 - 2013-07-23 12:23 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-07-12 10:40 - 2012-09-15 08:38 - 135225752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-07-10 15:22 - 2015-08-05 10:02 - 00000000 ____D C:\Users\Youcef\AppData\Local\Packages
2017-07-07 23:14 - 2017-05-11 19:11 - 00000000 ____D C:\WINDOWS\system32\UNP
2017-07-07 23:14 - 2017-05-11 19:11 - 00000000 ____D C:\Program Files\UNP
2017-07-07 21:45 - 2016-11-12 13:56 - 00000000 ____D C:\WINDOWS\Minidump
2017-07-07 01:07 - 2016-11-05 19:39 - 05121096 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-07-07 00:57 - 2012-11-14 18:06 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\Skype
2017-07-06 11:17 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-07-05 18:25 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-07-05 18:25 - 2016-06-29 18:38 - 00000000 ____D C:\AdwCleaner
2017-07-05 17:09 - 2016-11-05 20:52 - 00004042 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1468267936
2017-07-05 17:09 - 2016-07-11 21:12 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-07-05 17:01 - 2016-07-30 22:34 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\FileZilla
2017-07-05 17:01 - 2014-02-06 17:19 - 00000000 ____D C:\ProgramData\BlueStacksSetup
2017-07-05 17:00 - 2016-11-05 19:38 - 00000000 ___DC C:\WINDOWS\Panther
2017-07-03 20:15 - 2017-06-07 11:53 - 00061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
2017-07-03 20:15 - 2017-03-07 14:13 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update
2017-07-03 20:15 - 2015-06-12 20:03 - 00361336 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys
2017-07-03 20:14 - 2013-09-23 16:07 - 00000000 ____D C:\ProgramData\AVAST Software
2017-07-03 20:13 - 2017-03-07 14:13 - 00343264 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys
2017-07-03 20:13 - 2017-03-07 14:13 - 00319984 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys
2017-07-03 20:13 - 2017-03-07 14:13 - 00198944 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys
2017-07-03 20:13 - 2017-03-07 14:13 - 00057704 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys
2017-07-03 20:13 - 2016-07-11 19:06 - 00041800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2017-07-03 20:13 - 2015-06-12 20:03 - 01015848 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2017-07-03 20:13 - 2015-06-12 20:03 - 00585608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2017-07-03 20:13 - 2015-06-12 20:03 - 00360792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.149910933403106
2017-07-03 20:13 - 2015-06-12 20:03 - 00198768 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2017-07-03 20:13 - 2015-06-12 20:03 - 00146664 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2017-07-03 20:13 - 2015-06-12 20:03 - 00110352 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2017-07-03 20:13 - 2015-06-12 20:03 - 00084392 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2017-07-03 20:13 - 2015-06-12 20:03 - 00046984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2017-07-02 18:07 - 2014-01-29 23:08 - 00000290 __RSH C:\ProgramData\ntuser.pol
2017-07-02 17:55 - 2017-05-25 10:43 - 00001089 _____ C:\Users\Youcef\Desktop\Internet Download Manager.lnk
2017-07-02 08:56 - 2016-11-05 19:48 - 03346698 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-07-02 08:56 - 2016-07-16 23:40 - 01481960 _____ C:\WINDOWS\system32\perfh00C.dat
2017-07-02 08:56 - 2016-07-16 23:40 - 00374614 _____ C:\WINDOWS\system32\perfc00C.dat
2017-06-30 18:00 - 2011-08-03 11:24 - 00000000 ____D C:\ProgramData\Skype
2017-06-30 15:46 - 2016-07-16 12:49 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-06-30 15:46 - 2016-07-16 12:49 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-26 02:40 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-06-25 02:08 - 2015-06-12 19:55 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\TS3Client
2017-06-24 18:29 - 2015-07-03 13:56 - 00000000 ____D C:\Users\Youcef\AppData\Local\MEGAsync
2017-06-24 13:02 - 2015-08-05 02:10 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-06-24 06:31 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-06-24 06:31 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\appraiser
2017-06-24 06:31 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-06-23 13:29 - 2016-11-05 20:15 - 00000000 ____D C:\Users\Default\AppData\Local\LogMeIn Hamachi
2017-06-23 13:29 - 2016-11-05 20:15 - 00000000 ____D C:\Users\Default User\AppData\Local\LogMeIn Hamachi
2017-06-23 12:39 - 2015-08-05 10:57 - 00000000 ____D C:\Users\Youcef\AppData\Local\ElevatedDiagnostics
2017-06-22 15:24 - 2014-02-06 11:15 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-22 15:22 - 2016-08-12 00:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2017-06-22 15:21 - 2016-08-12 00:56 - 00000000 ____D C:\Program Files (x86)\Hotspot Shield
2017-06-22 15:18 - 2016-08-12 00:56 - 00000000 ____D C:\ProgramData\Hotspot Shield
2017-06-22 13:45 - 2017-01-27 21:18 - 00003286 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-06-22 13:45 - 2015-08-05 11:48 - 00002464 _____ C:\Users\Youcef\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-06-22 13:45 - 2015-08-05 11:48 - 00000000 ___RD C:\Users\Youcef\OneDrive
2017-06-21 21:11 - 2015-07-18 12:12 - 00000000 ____D C:\Users\Youcef\AppData\Roaming\deluge

==================== Fichiers à la racine de certains dossiers =======

2013-05-24 21:01 - 2013-05-25 14:59 - 0011862 _____ () C:\Users\Youcef\AppData\Roaming\TheHunterSettings_live.bin
2013-05-24 20:34 - 2013-05-24 20:34 - 0000047 _____ () C:\Users\Youcef\AppData\Roaming\TheHunterSettings_live.cfg
2016-09-16 18:32 - 2016-09-16 18:32 - 0001456 _____ () C:\Users\Youcef\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2016-02-10 18:33 - 2016-09-24 20:49 - 0007680 _____ () C:\Users\Youcef\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-08-12 14:57 - 2015-08-12 14:57 - 0000000 ___SH () C:\Users\Youcef\AppData\Local\LumaEmu
2017-07-16 16:33 - 2017-07-16 16:33 - 0000218 _____ () C:\Users\Youcef\AppData\Local\recently-used.xbel
2015-08-02 18:25 - 2015-08-02 18:25 - 0000000 _____ () C:\Users\Youcef\AppData\Local\recently-used.xbel.5QVL2X
2015-08-26 21:09 - 2015-08-26 21:09 - 0000000 _____ () C:\Users\Youcef\AppData\Local\recently-used.xbel.G89R3X
2015-08-02 18:25 - 2015-08-02 18:25 - 0000000 _____ () C:\Users\Youcef\AppData\Local\recently-used.xbel.Q5DK2X
2016-08-04 13:24 - 2016-08-04 13:24 - 0000000 _____ () C:\Users\Youcef\AppData\Local\{86C68AD0-05B3-46B2-A444-D77A4DD1C557}
2013-08-09 18:56 - 2013-08-09 18:56 - 0001026 _____ () C:\ProgramData\AscentiaLauncher-3.0 new.exe - Raccourci.lnk
2013-03-15 15:40 - 2013-03-15 15:40 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Fichiers à déplacer ou supprimer:
====================
C:\Users\Nabila\SETUP.EXE
C:\Users\Youcef\ZHPCleaner.exe


Certains fichiers dans TEMP:
====================
2013-11-21 21:08 - 2013-11-21 21:08 - 0028672 _____ (WindowsUpdate) C:\Users\Nabila\AppData\Local\Temp\151nohh3x3415.jpg.exe
2013-11-16 20:48 - 2013-11-16 20:48 - 0503576 _____ () C:\Users\Nabila\AppData\Local\Temp\15204815.exe
2013-11-16 20:32 - 2013-11-21 20:49 - 0415510 _____ (WindowsUpdate) C:\Users\Nabila\AppData\Local\Temp\521nohh3x3452.jpg.exe
2013-11-21 21:07 - 2013-11-21 21:07 - 0028672 _____ (WindowsUpdate) C:\Users\Nabila\AppData\Local\Temp\531nohh3x3453.jpg.exe
2010-11-18 19:27 - 2010-11-18 19:27 - 0587776 _____ (Igor Pavlov) C:\Users\Nabila\AppData\Local\Temp\7za.exe
2013-11-04 09:23 - 2013-11-04 09:23 - 0113704 _____ () C:\Users\Nabila\AppData\Local\Temp\ubi7A20.tmp.exe
2017-07-05 17:11 - 2017-07-05 17:11 - 0010520 _____ () C:\Users\Youcef\AppData\Local\Temp\BullseyeCoverage-x86-3.dll

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-07-14 20:58

==================== Fin de FRST.txt ============================