Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017
Exécuté par Napoléon (administrateur) sur NAPOLEON (20-08-2017 22:13:06)
Exécuté depuis C:\Users\Napoléon\Desktop
Profils chargés: Napoléon (Profils disponibles: Napoléon & Administrateur)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(AMD) C:\WINDOWS\System32\atiesrxx.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
( ) C:\WINDOWS\System32\lxdncoms.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(AMD) C:\WINDOWS\System32\atieclxx.exe
(Microsoft Corporation) C:\WINDOWS\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
() C:\Program Files (x86)\Lexmark 2600 Series\lxdnmon.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Flux Software LLC) C:\Users\Napoléon\AppData\Local\FluxSoftware\Flux\flux.exe
() C:\Program Files (x86)\Lexmark 2600 Series\lxdnmsdmon.exe
() C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1593296 2016-02-04] (Bitdefender)
HKLM\...\Run: [lxdnmon.exe] => C:\Program Files (x86)\Lexmark 2600 Series\lxdnmon.exe [660136 2008-03-27] ()
HKLM\...\Run: [lxdnamon] => C:\Program Files (x86)\Lexmark 2600 Series\lxdnamon.exe [16040 2008-03-27] ()
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [80896 2017-08-14] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKU\S-1-5-21-1796868969-1956029960-148162015-1001\...\Run: [f.lux] => C:\Users\Napoléon\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
Startup: C:\Users\Napoléon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 - Capture d’écran et lancement.lnk [2016-10-03]
ShortcutTarget: OneNote 2010 - Capture d’écran et lancement.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{30A22D37-D0FA-4108-AB5D-E1D132E1152C}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKU\S-1-5-21-1796868969-1956029960-148162015-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.fr/
URLSearchHook: [S-1-5-21-1796868969-1956029960-148162015-1001] ATTENTION => URLSearchHook par défaut est absent
SearchScopes: HKU\S-1-5-21-1796868969-1956029960-148162015-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1796868969-1956029960-148162015-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2016-02-08] (Bitdefender)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2016-02-08] (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-08-14] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-29] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-14] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2016-02-08] (Bitdefender)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2016-02-08] (Bitdefender)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-29] (Google Inc.)
Toolbar: HKU\S-1-5-21-1796868969-1956029960-148162015-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
Toolbar: HKU\S-1-5-21-1796868969-1956029960-148162015-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2016-02-08] (Bitdefender)
FireFox:
========
FF DefaultProfile: 73suf53t.default
FF ProfilePath: C:\Users\Napoléon\AppData\Roaming\Mozilla\Firefox\Profiles\73suf53t.default [2017-08-17]
FF Extension: (Adblock Plus) - C:\Users\Napoléon\AppData\Roaming\Mozilla\Firefox\Profiles\73suf53t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-12]
FF HKLM\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2016-03-18]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-08] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-08] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://google.fr/"
CHR Profile: C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default [2017-08-20]
CHR Extension: (Google Slides) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-20]
CHR Extension: (Google Docs) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-20]
CHR Extension: (Google Drive) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-20]
CHR Extension: (YouTube) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-20]
CHR Extension: (Adblock Plus) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-20]
CHR Extension: (Google Sheets) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-20]
CHR Extension: (Google Docs hors connexion) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-20]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-20]
CHR Extension: (Gmail) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-20]
CHR Extension: (Chrome Media Router) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-20]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2017-01-24] (Ellora Assets Corp.) [Fichier non signé]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.)
S2 lxdnCATSCustConnectService; C:\WINDOWS\system32\spool\DRIVERS\x64\3\\lxdnserv.exe [29184 2009-04-28] (Lexmark International, Inc.)
R2 lxdn_device; C:\WINDOWS\system32\lxdncoms.exe [1044648 2008-02-28] ( )
R2 lxdn_device; C:\WINDOWS\SysWOW64\lxdncoms.exe [594600 2008-02-28] ( )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [111320 2016-01-22] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1574744 2016-01-29] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1622512 2016-01-22] (BitDefender)
R3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [806344 2016-01-22] (BitDefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [115800 2015-12-03] (BitDefender LLC)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [160032 2015-04-29] (BitDefender LLC)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-19] (Malwarebytes)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [477272 2015-06-02] (BitDefender S.R.L.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-08-20 22:13 - 2017-08-20 22:14 - 000015899 _____ C:\Users\Napoléon\Desktop\FRST.txt
2017-08-20 22:12 - 2017-08-20 22:12 - 000000000 ____D C:\Users\Napoléon\Desktop\FRST-OlderVersion
2017-08-20 21:53 - 2017-08-20 21:53 - 000002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-20 21:47 - 2017-08-20 21:47 - 001622528 _____ C:\Users\Napoléon\Downloads\ResetBrowser (1).exe
2017-08-20 21:46 - 2017-08-20 21:47 - 001622528 _____ C:\Users\Napoléon\Downloads\ResetBrowser.exe
2017-08-19 22:07 - 2017-08-19 22:07 - 000032954 _____ C:\Users\Napoléon\Downloads\fixlist (2).txt
2017-08-19 22:07 - 2017-08-19 22:07 - 000032954 _____ C:\Users\Napoléon\Downloads\fixlist (1).txt
2017-08-17 23:02 - 2017-08-17 23:02 - 000032954 _____ C:\Users\Napoléon\Downloads\fixlist.txt
2017-08-17 00:39 - 2017-08-17 00:42 - 086953530 _____ C:\Users\Napoléon\Downloads\ads.flv
2017-08-16 18:54 - 2017-08-16 18:54 - 000066894 _____ C:\Users\Napoléon\Downloads\FRST (1).txt
2017-08-15 22:51 - 2017-08-20 22:13 - 000000000 ____D C:\FRST
2017-08-15 22:46 - 2017-08-15 22:46 - 000000000 ____D C:\Users\Napoléon\Downloads\FRST-OlderVersion
2017-08-15 17:36 - 2017-08-15 18:39 - 000000244 _____ C:\Users\Napoléon\Downloads\Search.txt
2017-08-14 21:54 - 2017-08-14 21:54 - 000000395 _____ C:\Users\Napoléon\Downloads\majeur.au
2017-08-14 21:52 - 2017-08-14 21:52 - 000000395 _____ C:\Users\Napoléon\Downloads\lamodsol.au
2017-08-14 19:03 - 2017-08-14 19:03 - 000129851 _____ C:\Users\Napoléon\Downloads\Shortcut.txt
2017-08-14 19:00 - 2017-08-14 19:03 - 000041073 _____ C:\Users\Napoléon\Downloads\Addition.txt
2017-08-14 18:56 - 2017-08-14 19:03 - 000066560 _____ C:\Users\Napoléon\Downloads\FRST.txt
2017-08-14 18:54 - 2017-08-15 22:49 - 000000995 _____ C:\Users\Napoléon\Desktop\FRST64.exe - Raccourci.lnk
2017-08-14 18:51 - 2017-08-20 22:12 - 002395648 _____ (Farbar) C:\Users\Napoléon\Desktop\FRST64.exe
2017-08-14 05:08 - 2017-08-14 05:08 - 001007925 _____ C:\Users\Napoléon\Downloads\Annexe XII - Les Règles du jeu.pdf
2017-08-14 05:06 - 2017-08-14 05:06 - 003931506 _____ C:\Users\Napoléon\Downloads\Avant propos.pdf
2017-08-14 05:02 - 2017-08-14 05:02 - 002926081 _____ C:\Users\Napoléon\Downloads\Pendant le match Sur le champ de jeu.pdf
2017-08-14 00:59 - 2017-08-14 00:59 - 003061760 _____ (Nicolas Coolman) C:\Users\Napoléon\Downloads\ZHPFix (3).exe
2017-08-14 00:57 - 2017-08-14 00:57 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-08-14 00:57 - 2017-08-14 00:57 - 000000000 ____D C:\Users\Napoléon\AppData\Roaming\Sun
2017-08-14 00:56 - 2017-08-14 00:56 - 000000000 ____D C:\Program Files (x86)\Java
2017-08-14 00:54 - 2017-08-14 00:54 - 000738368 _____ (Oracle Corporation) C:\Users\Napoléon\Downloads\jre-8u144-windows-i586-iftw (1).exe
2017-08-14 00:44 - 2017-08-14 00:44 - 000738368 _____ (Oracle Corporation) C:\Users\Napoléon\Downloads\jre-8u144-windows-i586-iftw.exe
2017-08-13 18:31 - 2017-08-13 18:31 - 000000833 _____ C:\Users\Napoléon\Desktop\ZHPDiag.lnk
2017-08-13 18:29 - 2017-08-13 18:29 - 002810240 _____ C:\Users\Napoléon\Downloads\ZHPDiag3 (3).exe
2017-08-13 02:01 - 2017-08-13 02:01 - 000085746 _____ C:\Users\Napoléon\Downloads\commentairecompose.fr-Ce que vous devez savoir sur lessai pour le bac de français.pdf
2017-08-13 02:01 - 2017-08-13 02:01 - 000085730 _____ C:\Users\Napoléon\Downloads\commentairecompose.fr-Ce que vous devez savoir sur lessai pour le bac de français (1).pdf
2017-08-12 21:11 - 2017-08-12 21:11 - 000001494 _____ C:\Users\Napoléon\Downloads\ZHPFix (1).exe - Raccourci.lnk
2017-08-12 21:10 - 2017-08-12 21:10 - 003061760 _____ (Nicolas Coolman) C:\Users\Napoléon\Downloads\ZHPFix (2).exe
2017-08-12 21:09 - 2017-08-12 21:09 - 003061760 _____ (Nicolas Coolman) C:\Users\Napoléon\Downloads\ZHPFix (1).exe
2017-08-12 21:09 - 2017-08-12 21:09 - 000000000 ____D C:\Users\Napoléon\Downloads\Quarantine
2017-08-11 05:58 - 2017-08-11 05:58 - 000000400 _____ C:\Users\Napoléon\Downloads\Gavotte.midi
2017-08-11 05:58 - 2017-08-11 05:58 - 000000238 _____ C:\Users\Napoléon\Downloads\Triory.midi
2017-08-11 05:57 - 2017-08-11 05:57 - 000000775 _____ C:\Users\Napoléon\Downloads\Lennuyquimetourmente.midi
2017-08-11 05:57 - 2017-08-11 05:57 - 000000570 _____ C:\Users\Napoléon\Downloads\Charlotte.midi
2017-08-11 05:57 - 2017-08-11 05:57 - 000000454 _____ C:\Users\Napoléon\Downloads\Cassandre (1).midi
2017-08-11 05:56 - 2017-08-11 05:56 - 000000419 _____ C:\Users\Napoléon\Downloads\Anthoinette.midi
2017-08-11 05:56 - 2017-08-11 05:56 - 000000323 _____ C:\Users\Napoléon\Downloads\Baisonsnousbelle.midi
2017-08-11 05:56 - 2017-08-11 05:56 - 000000285 _____ C:\Users\Napoléon\Downloads\Gaillarde.midi
2017-08-11 05:55 - 2017-08-11 05:55 - 000005125 _____ C:\Users\Napoléon\Downloads\Jouyssancevousdonneray.midi
2017-08-11 05:55 - 2017-08-11 05:55 - 000004641 _____ C:\Users\Napoléon\Downloads\Bellequitiensmavie.midi
2017-08-11 05:55 - 2017-08-11 05:55 - 000000571 _____ C:\Users\Napoléon\Downloads\Tourdion.midi
2017-08-11 05:02 - 2017-08-11 05:02 - 000004967 _____ C:\Users\Napoléon\Downloads\LeFifreouArigotdutroisiesmeton.midi
2017-08-11 03:11 - 2017-08-11 03:11 - 000000454 _____ C:\Users\Napoléon\Downloads\Cassandre.midi
2017-08-10 21:39 - 2017-08-10 21:39 - 002849152 _____ C:\Users\Napoléon\Downloads\ZHPCleaner (1).exe
2017-08-10 21:24 - 2017-08-10 21:25 - 000000000 ____D C:\Users\Napoléon\Documents\Essai Jobim (Gaël Liardon)
2017-08-10 21:16 - 2017-08-10 21:22 - 184277418 _____ C:\Users\Napoléon\Downloads\wetransfer-8f4443 (1).zip
2017-08-10 18:15 - 2017-08-10 18:21 - 184277418 _____ C:\Users\Napoléon\Downloads\wetransfer-8f4443.zip
2017-08-09 17:34 - 2017-07-21 15:40 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-09 17:34 - 2017-07-21 15:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-09 17:34 - 2017-07-15 12:10 - 000536688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-09 17:34 - 2017-07-14 08:49 - 025733632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-09 17:34 - 2017-07-14 07:35 - 005981184 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-09 17:34 - 2017-07-14 06:40 - 015254016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-09 17:34 - 2017-07-14 04:54 - 020270080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-09 17:34 - 2017-07-14 04:17 - 004546048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-09 17:34 - 2017-07-08 21:12 - 004169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-08-09 17:34 - 2017-07-08 19:45 - 007078912 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2017-08-09 17:34 - 2017-07-08 19:05 - 003631616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-09 17:34 - 2017-07-08 18:39 - 005274624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2017-08-09 17:34 - 2017-07-08 18:37 - 007797248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-09 17:34 - 2017-07-08 18:23 - 002749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-09 17:34 - 2017-07-08 17:59 - 005270016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-09 17:34 - 2017-06-24 18:46 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2017-08-09 17:34 - 2017-06-24 18:16 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2017-08-09 17:34 - 2017-06-13 19:23 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-08-09 17:34 - 2017-06-13 19:19 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2017-08-09 17:34 - 2017-06-13 19:07 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2017-08-09 17:34 - 2017-06-13 16:17 - 000656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-08-09 17:34 - 2017-06-13 16:16 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2017-08-09 17:34 - 2017-06-13 11:47 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-08-09 17:34 - 2017-06-13 10:22 - 001436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-08-09 17:34 - 2017-06-13 09:50 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2017-08-09 17:34 - 2017-06-11 22:13 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll
2017-08-09 17:34 - 2017-06-11 22:11 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2017-08-09 17:34 - 2017-06-11 22:02 - 002778112 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2017-08-09 17:34 - 2017-06-11 22:02 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2017-08-09 17:34 - 2017-06-11 21:52 - 002463744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2017-08-09 17:34 - 2017-06-08 03:48 - 002457936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-09 17:34 - 2017-06-06 20:38 - 000607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-09 17:34 - 2017-06-06 19:44 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-09 17:34 - 2017-05-27 18:42 - 001115136 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2017-08-09 17:33 - 2017-08-02 05:17 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-09 17:33 - 2017-07-15 12:10 - 000140016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-09 17:33 - 2017-07-15 12:06 - 000449840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-09 17:33 - 2017-07-15 12:06 - 000136832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-09 17:33 - 2017-07-14 22:08 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2017-08-09 17:33 - 2017-07-14 20:44 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2017-08-09 17:33 - 2017-07-14 08:44 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-08-09 17:33 - 2017-07-14 08:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-08-09 17:33 - 2017-07-14 07:26 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-08-09 17:33 - 2017-07-14 07:10 - 000806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-08-09 17:33 - 2017-07-14 06:23 - 003240960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-08-09 17:33 - 2017-07-14 06:07 - 001545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-09 17:33 - 2017-07-14 04:48 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-08-09 17:33 - 2017-07-14 04:38 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-08-09 17:33 - 2017-07-14 04:17 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-08-09 17:33 - 2017-07-14 04:09 - 013663744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-09 17:33 - 2017-07-14 03:53 - 002767872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-08-09 17:33 - 2017-07-14 03:50 - 001314816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-09 17:33 - 2017-07-08 22:14 - 000376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-09 17:33 - 2017-07-08 05:46 - 000377688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgrx.sys
2017-08-09 17:33 - 2017-07-08 05:16 - 007440728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-09 17:33 - 2017-07-08 05:16 - 001674520 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-08-09 17:33 - 2017-07-08 05:16 - 001534072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-08-09 17:33 - 2017-07-08 05:16 - 001499920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-08-09 17:33 - 2017-07-08 05:16 - 001370328 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-08-09 17:33 - 2017-07-08 05:16 - 000086360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2017-08-09 17:33 - 2017-06-13 19:51 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-08-09 17:33 - 2017-06-13 19:16 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2017-08-09 17:33 - 2017-06-13 19:11 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2017-08-09 17:33 - 2017-06-13 11:09 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-08-09 17:33 - 2017-06-13 10:16 - 000445952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-08-09 17:33 - 2017-06-13 10:10 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2017-08-09 17:33 - 2017-06-13 10:07 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2017-08-09 17:33 - 2017-06-13 10:03 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2017-08-09 17:33 - 2017-06-13 09:54 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2017-08-09 17:33 - 2017-06-12 02:14 - 000276320 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-09 17:33 - 2017-06-08 19:01 - 001737600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-08-09 17:33 - 2017-06-08 19:01 - 001502000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-08-09 17:33 - 2017-06-07 06:25 - 000428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2017-08-09 17:32 - 2017-07-14 05:58 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-08-09 17:32 - 2017-07-14 04:12 - 000693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-08-09 17:32 - 2017-07-14 03:48 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-08-09 17:32 - 2017-06-15 16:17 - 002551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-08-09 17:32 - 2017-06-15 16:16 - 001920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-08-09 17:32 - 2017-06-09 15:47 - 000448629 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-08-09 17:32 - 2017-05-27 18:38 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2017-08-08 17:27 - 2017-08-10 21:40 - 000000000 ____D C:\Users\Napoléon\AppData\Local\ZHP
2017-08-08 17:27 - 2017-08-08 17:27 - 002806656 _____ C:\Users\Napoléon\Downloads\ZHPDiag3 (2).exe
2017-08-08 17:26 - 2017-08-08 17:27 - 002806656 _____ C:\Users\Napoléon\Downloads\ZHPDiag3 (1).exe
2017-08-07 21:10 - 2017-08-07 21:10 - 000000565 _____ C:\Users\Napoléon\Downloads\disque01.m3u
2017-08-07 21:10 - 2017-08-07 21:10 - 000000565 _____ C:\Users\Napoléon\Downloads\disque01 (1).m3u
2017-08-06 22:18 - 2017-08-06 22:18 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (6).jpeg
2017-08-06 22:18 - 2017-08-06 22:18 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (5).jpeg
2017-08-06 22:15 - 2017-08-06 22:15 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (4).jpeg
2017-08-06 22:15 - 2017-08-06 22:15 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (3).jpeg
2017-08-06 21:43 - 2017-08-06 21:43 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035.jpeg
2017-08-06 21:43 - 2017-08-06 21:43 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (2).jpeg
2017-08-06 21:43 - 2017-08-06 21:43 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (1).jpeg
2017-08-04 23:04 - 2017-08-19 22:15 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-04 23:04 - 2017-08-11 17:23 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-04 23:04 - 2017-08-10 17:23 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-04 23:04 - 2017-08-10 17:23 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-04 23:04 - 2017-08-05 00:16 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-04 23:04 - 2017-08-05 00:15 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-04 23:04 - 2017-08-04 23:04 - 000001845 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-04 23:04 - 2017-08-04 23:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-04 23:03 - 2017-08-04 23:03 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-04 22:37 - 2017-08-04 22:38 - 000566128 _____ (Malwarebytes) C:\Users\Napoléon\Downloads\mbam-clean-2.3.0.1001.exe
2017-08-04 22:01 - 2017-08-04 22:04 - 000929737 _____ (Malwarebytes ) C:\Users\Napoléon\Downloads\Non confirmé 291255.crdownload
2017-08-04 22:00 - 2017-08-04 22:04 - 001004197 _____ (Malwarebytes ) C:\Users\Napoléon\Downloads\Non confirmé 438808.crdownload
2017-08-02 17:56 - 2017-08-02 17:56 - 000000000 ____D C:\Program Files (x86)\Soda PDF Desktop Manager
2017-08-02 17:50 - 2017-08-02 17:54 - 000000000 ____D C:\Users\Napoléon\AppData\Roaming\Soda PDF Desktop
2017-08-02 17:44 - 2017-08-02 17:54 - 000000000 ____D C:\ProgramData\Soda PDF Desktop
2017-08-02 17:44 - 2017-08-02 17:44 - 010582352 _____ (LULU Software) C:\Users\Napoléon\Downloads\Soda_PDF_Desktop_Installer (1).exe
2017-08-02 17:43 - 2017-08-02 17:43 - 010582352 _____ (LULU Software) C:\Users\Napoléon\Downloads\Soda_PDF_Desktop_Installer.exe
2017-08-02 16:40 - 2017-08-02 16:40 - 000180683 _____ C:\Users\Napoléon\Documents\actualisation pole emploi 07-2017.pdf
2017-08-01 21:28 - 2017-08-01 21:28 - 011478762 _____ C:\Users\Napoléon\Desktop\Grand Maître n°1.pdf
2017-08-01 01:01 - 2017-08-01 01:04 - 000000022 _____ C:\Users\Napoléon\Downloads\VictorHugoContreLaPeineDeMort.zip
2017-07-31 21:58 - 2017-07-31 21:58 - 000074740 _____ C:\Users\Napoléon\Downloads\Freemobile_0760001341_30-06-2017.pdf
2017-07-31 21:58 - 2017-07-31 21:58 - 000074740 _____ C:\Users\Napoléon\Downloads\Freemobile_0760001341_30-06-2017 (1).pdf
2017-07-31 21:52 - 2017-07-31 21:52 - 000033899 _____ C:\Users\Napoléon\Documents\CAF demande d'informations.pdf
2017-07-25 00:03 - 2017-07-25 00:03 - 001417355 _____ C:\Users\Napoléon\Downloads\10 Compléments RVC (9).pdf
2017-07-25 00:03 - 2017-07-25 00:03 - 001417355 _____ C:\Users\Napoléon\Downloads\10 Compléments RVC (8).pdf
2017-07-24 23:50 - 2017-07-24 23:50 - 006815239 _____ C:\Users\Napoléon\Downloads\une AVENTURE AMERICAINE - Moyenne.mov
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-08-20 21:56 - 2013-08-01 04:22 - 000003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1796868969-1956029960-148162015-1001
2017-08-20 21:53 - 2015-05-25 05:37 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-20 18:32 - 2016-06-17 04:48 - 000003948 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{747C7F70-0C0C-40EF-A5C6-8A7CF15EE0F9}
2017-08-20 18:31 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-20 18:30 - 2014-02-06 16:36 - 000000000 ___DO C:\Users\Napoléon\SkyDrive
2017-08-20 00:51 - 2015-09-25 17:32 - 000000000 ____D C:\Users\Napoléon\AppData\LocalLow\Adblock Plus for IE
2017-08-19 22:44 - 2015-05-25 02:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2017-08-19 22:44 - 2015-05-25 02:38 - 000000000 ____D C:\Program Files (x86)\Freemake
2017-08-19 22:44 - 2013-08-09 15:10 - 000000000 ____D C:\ProgramData\Freemake
2017-08-19 22:42 - 2015-05-26 00:09 - 000001338 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2017-08-19 22:14 - 2016-05-20 02:46 - 000000362 _____ C:\WINDOWS\Tasks\HPCeeScheduleForNapoléon.job
2017-08-19 22:14 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-19 22:13 - 2016-05-08 01:18 - 000049211 _____ C:\bdlog.txt
2017-08-19 22:13 - 2013-08-22 15:25 - 000524288 ___SH C:\WINDOWS\system32\config\BBI
2017-08-19 02:55 - 2013-10-24 00:32 - 000000000 ____D C:\Users\Napoléon\AppData\Roaming\Audacity
2017-08-18 18:15 - 2016-05-20 02:46 - 000003182 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForNapoléon
2017-08-17 23:08 - 2013-08-04 00:16 - 000000000 ____D C:\Users\Napoléon\AppData\LocalLow\Temp
2017-08-17 18:49 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\ELAM
2017-08-14 01:02 - 2017-03-19 19:13 - 000000000 ____D C:\Users\Napoléon\AppData\Roaming\ZHP
2017-08-14 00:58 - 2013-10-19 17:40 - 000000000 ____D C:\ProgramData\Oracle
2017-08-14 00:57 - 2014-10-30 04:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-13 01:48 - 2017-04-15 04:01 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-11 01:21 - 2017-06-08 18:27 - 000000000 ____D C:\Mes Sites Web
2017-08-10 21:24 - 2016-04-21 23:55 - 000000000 ____D C:\Users\Napoléon\Documents\Brassens, Année par année
2017-08-10 19:49 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2017-08-10 19:00 - 2017-03-21 19:54 - 000000000 ____D C:\Users\Napoléon\Documents\Avis de paiement AFPA
2017-08-10 17:21 - 2013-08-22 16:44 - 000484736 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-10 17:21 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2017-08-10 06:03 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-08-10 06:02 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-10 00:18 - 2014-12-26 02:41 - 000004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-08-09 19:31 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-09 19:31 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-09 19:24 - 2013-08-16 01:00 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-09 19:17 - 2013-08-03 21:06 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-08 23:10 - 2015-10-12 22:38 - 000004324 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-08-08 23:09 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-08-08 23:09 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-08 02:32 - 2014-07-31 05:21 - 000000000 ____D C:\Users\Napoléon\AppData\Local\CrashDumps
2017-08-07 04:18 - 2013-11-14 09:32 - 002027754 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-07 04:18 - 2013-11-14 09:13 - 000885876 _____ C:\WINDOWS\system32\perfh00C.dat
2017-08-07 04:18 - 2013-11-14 09:13 - 000192042 _____ C:\WINDOWS\system32\perfc00C.dat
2017-08-05 16:28 - 2013-08-01 04:06 - 000000000 ___HD C:\Users\Napoléon\Documents\hp.system.package.metadata
2017-08-05 16:28 - 2013-07-29 23:28 - 000000000 ____D C:\Users\Napoléon\Documents\CV et LM 2
2017-08-05 16:28 - 2013-05-28 21:14 - 000000000 ____D C:\RealBand
2017-08-05 16:28 - 2013-05-28 21:12 - 000000000 ____D C:\BIAB
2017-08-05 16:28 - 2013-05-22 10:15 - 000000000 ____D C:\Users\Napoléon\Downloads\Georges_Brassens-Le_Temps_Ne_Fait_Rien_A_Laffaire_-_30e_Anniversaire
2017-08-05 16:27 - 2017-06-14 23:09 - 000000000 ____D C:\Users\Napoléon\Desktop\Richelieu Simon fournier et Love Myun
2017-08-05 16:27 - 2016-05-19 00:57 - 000000000 ____D C:\Users\Napoléon\Documents\Factures
2017-08-05 16:27 - 2014-01-17 21:37 - 000000000 ____D C:\Users\Napoléon\Documents\Vaccai
2017-08-05 16:26 - 2015-06-28 23:14 - 000000000 ____D C:\Users\Napoléon\Documents\Guitare et couleurs
2017-08-05 16:26 - 2014-05-27 08:19 - 000000000 ____D C:\Users\Napoléon\Documents\My Kindle Content
2017-08-04 23:03 - 2014-10-06 17:32 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-04 22:23 - 2016-05-07 23:16 - 000000000 ____D C:\Users\Napoléon\AppData\Temp
2017-08-03 23:25 - 2016-10-05 16:59 - 000000000 ____D C:\ProgramData\Lx_cats
2017-07-29 02:03 - 2017-05-14 19:19 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-07-29 02:03 - 2017-05-14 19:19 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-07-21 23:37 - 2017-06-08 18:16 - 000000854 _____ C:\Users\Napoléon\Desktop\HTTrack Website Copier.lnk
==================== Fichiers à la racine de certains dossiers =======
2016-03-24 06:59 - 2014-08-13 11:21 - 003571712 _____ () C:\Program Files (x86)\SpicyGuitar_32.dll
2015-04-23 15:04 - 2015-04-23 15:04 - 000005120 _____ () C:\Users\Napoléon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-26 03:44 - 2015-06-26 03:44 - 000000218 _____ () C:\Users\Napoléon\AppData\Local\recently-used.xbel
2016-05-07 18:45 - 2016-05-07 18:45 - 000772446 _____ () C:\ProgramData\1462638742.bdinstall.bin
2012-11-22 09:34 - 2012-11-22 09:34 - 000000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
Certains fichiers dans TEMP:
====================
2017-08-19 22:40 - 2017-08-19 22:41 - 032637808 _____ (Ellora Assets Corporation ) C:\Users\Napoléon\AppData\Local\Temp\FreemakeVideoConverterFull.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-08-10 17:44
==================== Fin de FRST.txt ============================
Exécuté par Napoléon (administrateur) sur NAPOLEON (20-08-2017 22:13:06)
Exécuté depuis C:\Users\Napoléon\Desktop
Profils chargés: Napoléon (Profils disponibles: Napoléon & Administrateur)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe
(AMD) C:\WINDOWS\System32\atiesrxx.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
( ) C:\WINDOWS\System32\lxdncoms.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(AMD) C:\WINDOWS\System32\atieclxx.exe
(Microsoft Corporation) C:\WINDOWS\System32\SkyDrive.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteUser.exe
(Bitdefender) C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe
() C:\Program Files (x86)\Lexmark 2600 Series\lxdnmon.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Flux Software LLC) C:\Users\Napoléon\AppData\Local\FluxSoftware\Flux\flux.exe
() C:\Program Files (x86)\Lexmark 2600 Series\lxdnmsdmon.exe
() C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender 2015\bdagent.exe [1593296 2016-02-04] (Bitdefender)
HKLM\...\Run: [lxdnmon.exe] => C:\Program Files (x86)\Lexmark 2600 Series\lxdnmon.exe [660136 2008-03-27] ()
HKLM\...\Run: [lxdnamon] => C:\Program Files (x86)\Lexmark 2600 Series\lxdnamon.exe [16040 2008-03-27] ()
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [80896 2017-08-14] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
HKU\S-1-5-21-1796868969-1956029960-148162015-1001\...\Run: [f.lux] => C:\Users\Napoléon\AppData\Local\FluxSoftware\Flux\flux.exe [1024240 2016-12-06] (Flux Software LLC)
Startup: C:\Users\Napoléon\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 - Capture d’écran et lancement.lnk [2016-10-03]
ShortcutTarget: OneNote 2010 - Capture d’écran et lancement.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{30A22D37-D0FA-4108-AB5D-E1D132E1152C}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKU\S-1-5-21-1796868969-1956029960-148162015-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.fr/
URLSearchHook: [S-1-5-21-1796868969-1956029960-148162015-1001] ATTENTION => URLSearchHook par défaut est absent
SearchScopes: HKU\S-1-5-21-1796868969-1956029960-148162015-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1796868969-1956029960-148162015-1001 -> {D944BB61-2E34-4DBF-A683-47E505C587DC} URL =
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2016-02-08] (Bitdefender)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2016-07-21] (HP Inc.)
BHO: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus64.dll [2015-09-22] (Eyeo GmbH)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2016-02-08] (Bitdefender)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-08-14] (Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-29] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-14] (Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
BHO-x32: Adblock Plus for IE Browser Helper Object -> {FFCB3198-32F3-4E8B-9539-4324694ED664} -> C:\Program Files\Adblock Plus for IE\AdblockPlus32.dll [2015-09-22] (Eyeo GmbH)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2016-02-08] (Bitdefender)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\Antispam32\pmbxie.dll [2016-02-08] (Bitdefender)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-29] (Google Inc.)
Toolbar: HKU\S-1-5-21-1796868969-1956029960-148162015-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-29] (Google Inc.)
Toolbar: HKU\S-1-5-21-1796868969-1956029960-148162015-1001 -> Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender 2015\pmbxie.dll [2016-02-08] (Bitdefender)
FireFox:
========
FF DefaultProfile: 73suf53t.default
FF ProfilePath: C:\Users\Napoléon\AppData\Roaming\Mozilla\Firefox\Profiles\73suf53t.default [2017-08-17]
FF Extension: (Adblock Plus) - C:\Users\Napoléon\AppData\Roaming\Mozilla\Firefox\Profiles\73suf53t.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-10-12]
FF HKLM\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff [2016-03-18]
FF HKLM-x32\...\Firefox\Extensions: [bdwteffv19@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender 2015\antispam32\bdwteff
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-08] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-08] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-14] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-27] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-05-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-01] (Adobe Systems Inc.)
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://google.fr/"
CHR Profile: C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default [2017-08-20]
CHR Extension: (Google Slides) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-08-20]
CHR Extension: (Google Docs) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-08-20]
CHR Extension: (Google Drive) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-08-20]
CHR Extension: (YouTube) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-20]
CHR Extension: (Adblock Plus) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-08-20]
CHR Extension: (Google Sheets) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-08-20]
CHR Extension: (Google Docs hors connexion) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-08-20]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-20]
CHR Extension: (Gmail) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-08-20]
CHR Extension: (Chrome Media Router) - C:\Users\Napoléon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-20]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2017-01-24] (Ellora Assets Corp.) [Fichier non signé]
R2 HPConnectedRemote; c:\Program Files (x86)\Hewlett-Packard\HP Connected Remote\HPConnectedRemoteService.exe [35232 2012-08-29] (Hewlett-Packard)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.)
S2 lxdnCATSCustConnectService; C:\WINDOWS\system32\spool\DRIVERS\x64\3\\lxdnserv.exe [29184 2009-04-28] (Lexmark International, Inc.)
R2 lxdn_device; C:\WINDOWS\system32\lxdncoms.exe [1044648 2008-02-28] ( )
R2 lxdn_device; C:\WINDOWS\SysWOW64\lxdncoms.exe [594600 2008-02-28] ( )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender 2015\updatesrv.exe [111320 2016-01-22] (Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exe [1574744 2016-01-29] (Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R0 avc3; C:\WINDOWS\System32\DRIVERS\avc3.sys [1622512 2016-01-22] (BitDefender)
R3 avckf; C:\WINDOWS\System32\DRIVERS\avckf.sys [806344 2016-01-22] (BitDefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [23568 2013-09-08] (Bitdefender)
R1 bdfwfpf; C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys [115800 2015-12-03] (BitDefender LLC)
R1 CLVirtualDrive; C:\WINDOWS\system32\DRIVERS\CLVirtualDrive.sys [92536 2012-06-25] (CyberLink)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [160032 2015-04-29] (BitDefender LLC)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-19] (Malwarebytes)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [477272 2015-06-02] (BitDefender S.R.L.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-08-20 22:13 - 2017-08-20 22:14 - 000015899 _____ C:\Users\Napoléon\Desktop\FRST.txt
2017-08-20 22:12 - 2017-08-20 22:12 - 000000000 ____D C:\Users\Napoléon\Desktop\FRST-OlderVersion
2017-08-20 21:53 - 2017-08-20 21:53 - 000002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-20 21:47 - 2017-08-20 21:47 - 001622528 _____ C:\Users\Napoléon\Downloads\ResetBrowser (1).exe
2017-08-20 21:46 - 2017-08-20 21:47 - 001622528 _____ C:\Users\Napoléon\Downloads\ResetBrowser.exe
2017-08-19 22:07 - 2017-08-19 22:07 - 000032954 _____ C:\Users\Napoléon\Downloads\fixlist (2).txt
2017-08-19 22:07 - 2017-08-19 22:07 - 000032954 _____ C:\Users\Napoléon\Downloads\fixlist (1).txt
2017-08-17 23:02 - 2017-08-17 23:02 - 000032954 _____ C:\Users\Napoléon\Downloads\fixlist.txt
2017-08-17 00:39 - 2017-08-17 00:42 - 086953530 _____ C:\Users\Napoléon\Downloads\ads.flv
2017-08-16 18:54 - 2017-08-16 18:54 - 000066894 _____ C:\Users\Napoléon\Downloads\FRST (1).txt
2017-08-15 22:51 - 2017-08-20 22:13 - 000000000 ____D C:\FRST
2017-08-15 22:46 - 2017-08-15 22:46 - 000000000 ____D C:\Users\Napoléon\Downloads\FRST-OlderVersion
2017-08-15 17:36 - 2017-08-15 18:39 - 000000244 _____ C:\Users\Napoléon\Downloads\Search.txt
2017-08-14 21:54 - 2017-08-14 21:54 - 000000395 _____ C:\Users\Napoléon\Downloads\majeur.au
2017-08-14 21:52 - 2017-08-14 21:52 - 000000395 _____ C:\Users\Napoléon\Downloads\lamodsol.au
2017-08-14 19:03 - 2017-08-14 19:03 - 000129851 _____ C:\Users\Napoléon\Downloads\Shortcut.txt
2017-08-14 19:00 - 2017-08-14 19:03 - 000041073 _____ C:\Users\Napoléon\Downloads\Addition.txt
2017-08-14 18:56 - 2017-08-14 19:03 - 000066560 _____ C:\Users\Napoléon\Downloads\FRST.txt
2017-08-14 18:54 - 2017-08-15 22:49 - 000000995 _____ C:\Users\Napoléon\Desktop\FRST64.exe - Raccourci.lnk
2017-08-14 18:51 - 2017-08-20 22:12 - 002395648 _____ (Farbar) C:\Users\Napoléon\Desktop\FRST64.exe
2017-08-14 05:08 - 2017-08-14 05:08 - 001007925 _____ C:\Users\Napoléon\Downloads\Annexe XII - Les Règles du jeu.pdf
2017-08-14 05:06 - 2017-08-14 05:06 - 003931506 _____ C:\Users\Napoléon\Downloads\Avant propos.pdf
2017-08-14 05:02 - 2017-08-14 05:02 - 002926081 _____ C:\Users\Napoléon\Downloads\Pendant le match Sur le champ de jeu.pdf
2017-08-14 00:59 - 2017-08-14 00:59 - 003061760 _____ (Nicolas Coolman) C:\Users\Napoléon\Downloads\ZHPFix (3).exe
2017-08-14 00:57 - 2017-08-14 00:57 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2017-08-14 00:57 - 2017-08-14 00:57 - 000000000 ____D C:\Users\Napoléon\AppData\Roaming\Sun
2017-08-14 00:56 - 2017-08-14 00:56 - 000000000 ____D C:\Program Files (x86)\Java
2017-08-14 00:54 - 2017-08-14 00:54 - 000738368 _____ (Oracle Corporation) C:\Users\Napoléon\Downloads\jre-8u144-windows-i586-iftw (1).exe
2017-08-14 00:44 - 2017-08-14 00:44 - 000738368 _____ (Oracle Corporation) C:\Users\Napoléon\Downloads\jre-8u144-windows-i586-iftw.exe
2017-08-13 18:31 - 2017-08-13 18:31 - 000000833 _____ C:\Users\Napoléon\Desktop\ZHPDiag.lnk
2017-08-13 18:29 - 2017-08-13 18:29 - 002810240 _____ C:\Users\Napoléon\Downloads\ZHPDiag3 (3).exe
2017-08-13 02:01 - 2017-08-13 02:01 - 000085746 _____ C:\Users\Napoléon\Downloads\commentairecompose.fr-Ce que vous devez savoir sur lessai pour le bac de français.pdf
2017-08-13 02:01 - 2017-08-13 02:01 - 000085730 _____ C:\Users\Napoléon\Downloads\commentairecompose.fr-Ce que vous devez savoir sur lessai pour le bac de français (1).pdf
2017-08-12 21:11 - 2017-08-12 21:11 - 000001494 _____ C:\Users\Napoléon\Downloads\ZHPFix (1).exe - Raccourci.lnk
2017-08-12 21:10 - 2017-08-12 21:10 - 003061760 _____ (Nicolas Coolman) C:\Users\Napoléon\Downloads\ZHPFix (2).exe
2017-08-12 21:09 - 2017-08-12 21:09 - 003061760 _____ (Nicolas Coolman) C:\Users\Napoléon\Downloads\ZHPFix (1).exe
2017-08-12 21:09 - 2017-08-12 21:09 - 000000000 ____D C:\Users\Napoléon\Downloads\Quarantine
2017-08-11 05:58 - 2017-08-11 05:58 - 000000400 _____ C:\Users\Napoléon\Downloads\Gavotte.midi
2017-08-11 05:58 - 2017-08-11 05:58 - 000000238 _____ C:\Users\Napoléon\Downloads\Triory.midi
2017-08-11 05:57 - 2017-08-11 05:57 - 000000775 _____ C:\Users\Napoléon\Downloads\Lennuyquimetourmente.midi
2017-08-11 05:57 - 2017-08-11 05:57 - 000000570 _____ C:\Users\Napoléon\Downloads\Charlotte.midi
2017-08-11 05:57 - 2017-08-11 05:57 - 000000454 _____ C:\Users\Napoléon\Downloads\Cassandre (1).midi
2017-08-11 05:56 - 2017-08-11 05:56 - 000000419 _____ C:\Users\Napoléon\Downloads\Anthoinette.midi
2017-08-11 05:56 - 2017-08-11 05:56 - 000000323 _____ C:\Users\Napoléon\Downloads\Baisonsnousbelle.midi
2017-08-11 05:56 - 2017-08-11 05:56 - 000000285 _____ C:\Users\Napoléon\Downloads\Gaillarde.midi
2017-08-11 05:55 - 2017-08-11 05:55 - 000005125 _____ C:\Users\Napoléon\Downloads\Jouyssancevousdonneray.midi
2017-08-11 05:55 - 2017-08-11 05:55 - 000004641 _____ C:\Users\Napoléon\Downloads\Bellequitiensmavie.midi
2017-08-11 05:55 - 2017-08-11 05:55 - 000000571 _____ C:\Users\Napoléon\Downloads\Tourdion.midi
2017-08-11 05:02 - 2017-08-11 05:02 - 000004967 _____ C:\Users\Napoléon\Downloads\LeFifreouArigotdutroisiesmeton.midi
2017-08-11 03:11 - 2017-08-11 03:11 - 000000454 _____ C:\Users\Napoléon\Downloads\Cassandre.midi
2017-08-10 21:39 - 2017-08-10 21:39 - 002849152 _____ C:\Users\Napoléon\Downloads\ZHPCleaner (1).exe
2017-08-10 21:24 - 2017-08-10 21:25 - 000000000 ____D C:\Users\Napoléon\Documents\Essai Jobim (Gaël Liardon)
2017-08-10 21:16 - 2017-08-10 21:22 - 184277418 _____ C:\Users\Napoléon\Downloads\wetransfer-8f4443 (1).zip
2017-08-10 18:15 - 2017-08-10 18:21 - 184277418 _____ C:\Users\Napoléon\Downloads\wetransfer-8f4443.zip
2017-08-09 17:34 - 2017-07-21 15:40 - 000518144 _____ C:\WINDOWS\SysWOW64\msjetoledb40.dll
2017-08-09 17:34 - 2017-07-21 15:40 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjtes40.dll
2017-08-09 17:34 - 2017-07-15 12:10 - 000536688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-08-09 17:34 - 2017-07-14 08:49 - 025733632 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-08-09 17:34 - 2017-07-14 07:35 - 005981184 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-08-09 17:34 - 2017-07-14 06:40 - 015254016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-08-09 17:34 - 2017-07-14 04:54 - 020270080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-08-09 17:34 - 2017-07-14 04:17 - 004546048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-08-09 17:34 - 2017-07-08 21:12 - 004169728 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-08-09 17:34 - 2017-07-08 19:45 - 007078912 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2017-08-09 17:34 - 2017-07-08 19:05 - 003631616 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-08-09 17:34 - 2017-07-08 18:39 - 005274624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2017-08-09 17:34 - 2017-07-08 18:37 - 007797248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2017-08-09 17:34 - 2017-07-08 18:23 - 002749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-08-09 17:34 - 2017-07-08 17:59 - 005270016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswdat10.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000641536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrepl40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxbde40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspbde40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000310272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000272896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstext40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-08-09 17:34 - 2017-07-01 15:47 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjter40.dll
2017-08-09 17:34 - 2017-06-24 18:46 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprapi.dll
2017-08-09 17:34 - 2017-06-24 18:16 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprapi.dll
2017-08-09 17:34 - 2017-06-13 19:23 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-08-09 17:34 - 2017-06-13 19:19 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2017-08-09 17:34 - 2017-06-13 19:07 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2017-08-09 17:34 - 2017-06-13 16:17 - 000656384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-08-09 17:34 - 2017-06-13 16:16 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2017-08-09 17:34 - 2017-06-13 11:47 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-08-09 17:34 - 2017-06-13 10:22 - 001436160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-08-09 17:34 - 2017-06-13 09:50 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2017-08-09 17:34 - 2017-06-11 22:13 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\umrdp.dll
2017-08-09 17:34 - 2017-06-11 22:11 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll
2017-08-09 17:34 - 2017-06-11 22:02 - 002778112 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2017-08-09 17:34 - 2017-06-11 22:02 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2017-08-09 17:34 - 2017-06-11 21:52 - 002463744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2017-08-09 17:34 - 2017-06-08 03:48 - 002457936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-08-09 17:34 - 2017-06-06 20:38 - 000607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2017-08-09 17:34 - 2017-06-06 19:44 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2017-08-09 17:34 - 2017-05-27 18:42 - 001115136 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2017-08-09 17:33 - 2017-08-02 05:17 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2017-08-09 17:33 - 2017-07-15 12:10 - 000140016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2017-08-09 17:33 - 2017-07-15 12:06 - 000449840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-08-09 17:33 - 2017-07-15 12:06 - 000136832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2017-08-09 17:33 - 2017-07-14 22:08 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2017-08-09 17:33 - 2017-07-14 20:44 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2017-08-09 17:33 - 2017-07-14 08:44 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2017-08-09 17:33 - 2017-07-14 08:19 - 000817664 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-08-09 17:33 - 2017-07-14 07:26 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2017-08-09 17:33 - 2017-07-14 07:10 - 000806912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2017-08-09 17:33 - 2017-07-14 06:23 - 003240960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-08-09 17:33 - 2017-07-14 06:07 - 001545728 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-08-09 17:33 - 2017-07-14 04:48 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2017-08-09 17:33 - 2017-07-14 04:38 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-08-09 17:33 - 2017-07-14 04:17 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2017-08-09 17:33 - 2017-07-14 04:09 - 013663744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-08-09 17:33 - 2017-07-14 03:53 - 002767872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-08-09 17:33 - 2017-07-14 03:50 - 001314816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-08-09 17:33 - 2017-07-08 22:14 - 000376672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2017-08-09 17:33 - 2017-07-08 05:46 - 000377688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgrx.sys
2017-08-09 17:33 - 2017-07-08 05:16 - 007440728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-08-09 17:33 - 2017-07-08 05:16 - 001674520 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-08-09 17:33 - 2017-07-08 05:16 - 001534072 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-08-09 17:33 - 2017-07-08 05:16 - 001499920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-08-09 17:33 - 2017-07-08 05:16 - 001370328 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-08-09 17:33 - 2017-07-08 05:16 - 000086360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2017-08-09 17:33 - 2017-06-13 19:51 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2017-08-09 17:33 - 2017-06-13 19:16 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2017-08-09 17:33 - 2017-06-13 19:11 - 000238080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2017-08-09 17:33 - 2017-06-13 11:09 - 000445440 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2017-08-09 17:33 - 2017-06-13 10:16 - 000445952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-08-09 17:33 - 2017-06-13 10:10 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2017-08-09 17:33 - 2017-06-13 10:07 - 000301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2017-08-09 17:33 - 2017-06-13 10:03 - 000302080 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2017-08-09 17:33 - 2017-06-13 09:54 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2017-08-09 17:33 - 2017-06-12 02:14 - 000276320 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2017-08-09 17:33 - 2017-06-08 19:01 - 001737600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2017-08-09 17:33 - 2017-06-08 19:01 - 001502000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2017-08-09 17:33 - 2017-06-07 06:25 - 000428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2017-08-09 17:32 - 2017-07-14 05:58 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2017-08-09 17:32 - 2017-07-14 04:12 - 000693248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2017-08-09 17:32 - 2017-07-14 03:48 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2017-08-09 17:32 - 2017-06-15 16:17 - 002551808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2017-08-09 17:32 - 2017-06-15 16:16 - 001920000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2017-08-09 17:32 - 2017-06-09 15:47 - 000448629 _____ C:\WINDOWS\system32\ApnDatabase.xml
2017-08-09 17:32 - 2017-05-27 18:38 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdsdwmdr.dll
2017-08-08 17:27 - 2017-08-10 21:40 - 000000000 ____D C:\Users\Napoléon\AppData\Local\ZHP
2017-08-08 17:27 - 2017-08-08 17:27 - 002806656 _____ C:\Users\Napoléon\Downloads\ZHPDiag3 (2).exe
2017-08-08 17:26 - 2017-08-08 17:27 - 002806656 _____ C:\Users\Napoléon\Downloads\ZHPDiag3 (1).exe
2017-08-07 21:10 - 2017-08-07 21:10 - 000000565 _____ C:\Users\Napoléon\Downloads\disque01.m3u
2017-08-07 21:10 - 2017-08-07 21:10 - 000000565 _____ C:\Users\Napoléon\Downloads\disque01 (1).m3u
2017-08-06 22:18 - 2017-08-06 22:18 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (6).jpeg
2017-08-06 22:18 - 2017-08-06 22:18 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (5).jpeg
2017-08-06 22:15 - 2017-08-06 22:15 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (4).jpeg
2017-08-06 22:15 - 2017-08-06 22:15 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (3).jpeg
2017-08-06 21:43 - 2017-08-06 21:43 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035.jpeg
2017-08-06 21:43 - 2017-08-06 21:43 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (2).jpeg
2017-08-06 21:43 - 2017-08-06 21:43 - 000106732 _____ C:\Users\Napoléon\Downloads\orca-image-1501972882884.jpg_1501972883035 (1).jpeg
2017-08-04 23:04 - 2017-08-19 22:15 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-08-04 23:04 - 2017-08-11 17:23 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-08-04 23:04 - 2017-08-10 17:23 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-08-04 23:04 - 2017-08-10 17:23 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-08-04 23:04 - 2017-08-05 00:16 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-08-04 23:04 - 2017-08-05 00:15 - 000077376 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-08-04 23:04 - 2017-08-04 23:04 - 000001845 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-04 23:04 - 2017-08-04 23:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-04 23:03 - 2017-08-04 23:03 - 000000000 ____D C:\Program Files\Malwarebytes
2017-08-04 22:37 - 2017-08-04 22:38 - 000566128 _____ (Malwarebytes) C:\Users\Napoléon\Downloads\mbam-clean-2.3.0.1001.exe
2017-08-04 22:01 - 2017-08-04 22:04 - 000929737 _____ (Malwarebytes ) C:\Users\Napoléon\Downloads\Non confirmé 291255.crdownload
2017-08-04 22:00 - 2017-08-04 22:04 - 001004197 _____ (Malwarebytes ) C:\Users\Napoléon\Downloads\Non confirmé 438808.crdownload
2017-08-02 17:56 - 2017-08-02 17:56 - 000000000 ____D C:\Program Files (x86)\Soda PDF Desktop Manager
2017-08-02 17:50 - 2017-08-02 17:54 - 000000000 ____D C:\Users\Napoléon\AppData\Roaming\Soda PDF Desktop
2017-08-02 17:44 - 2017-08-02 17:54 - 000000000 ____D C:\ProgramData\Soda PDF Desktop
2017-08-02 17:44 - 2017-08-02 17:44 - 010582352 _____ (LULU Software) C:\Users\Napoléon\Downloads\Soda_PDF_Desktop_Installer (1).exe
2017-08-02 17:43 - 2017-08-02 17:43 - 010582352 _____ (LULU Software) C:\Users\Napoléon\Downloads\Soda_PDF_Desktop_Installer.exe
2017-08-02 16:40 - 2017-08-02 16:40 - 000180683 _____ C:\Users\Napoléon\Documents\actualisation pole emploi 07-2017.pdf
2017-08-01 21:28 - 2017-08-01 21:28 - 011478762 _____ C:\Users\Napoléon\Desktop\Grand Maître n°1.pdf
2017-08-01 01:01 - 2017-08-01 01:04 - 000000022 _____ C:\Users\Napoléon\Downloads\VictorHugoContreLaPeineDeMort.zip
2017-07-31 21:58 - 2017-07-31 21:58 - 000074740 _____ C:\Users\Napoléon\Downloads\Freemobile_0760001341_30-06-2017.pdf
2017-07-31 21:58 - 2017-07-31 21:58 - 000074740 _____ C:\Users\Napoléon\Downloads\Freemobile_0760001341_30-06-2017 (1).pdf
2017-07-31 21:52 - 2017-07-31 21:52 - 000033899 _____ C:\Users\Napoléon\Documents\CAF demande d'informations.pdf
2017-07-25 00:03 - 2017-07-25 00:03 - 001417355 _____ C:\Users\Napoléon\Downloads\10 Compléments RVC (9).pdf
2017-07-25 00:03 - 2017-07-25 00:03 - 001417355 _____ C:\Users\Napoléon\Downloads\10 Compléments RVC (8).pdf
2017-07-24 23:50 - 2017-07-24 23:50 - 006815239 _____ C:\Users\Napoléon\Downloads\une AVENTURE AMERICAINE - Moyenne.mov
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-08-20 21:56 - 2013-08-01 04:22 - 000003596 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1796868969-1956029960-148162015-1001
2017-08-20 21:53 - 2015-05-25 05:37 - 000000000 ____D C:\Program Files (x86)\Google
2017-08-20 18:32 - 2016-06-17 04:48 - 000003948 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{747C7F70-0C0C-40EF-A5C6-8A7CF15EE0F9}
2017-08-20 18:31 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-08-20 18:30 - 2014-02-06 16:36 - 000000000 ___DO C:\Users\Napoléon\SkyDrive
2017-08-20 00:51 - 2015-09-25 17:32 - 000000000 ____D C:\Users\Napoléon\AppData\LocalLow\Adblock Plus for IE
2017-08-19 22:44 - 2015-05-25 02:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2017-08-19 22:44 - 2015-05-25 02:38 - 000000000 ____D C:\Program Files (x86)\Freemake
2017-08-19 22:44 - 2013-08-09 15:10 - 000000000 ____D C:\ProgramData\Freemake
2017-08-19 22:42 - 2015-05-26 00:09 - 000001338 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2017-08-19 22:14 - 2016-05-20 02:46 - 000000362 _____ C:\WINDOWS\Tasks\HPCeeScheduleForNapoléon.job
2017-08-19 22:14 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-08-19 22:13 - 2016-05-08 01:18 - 000049211 _____ C:\bdlog.txt
2017-08-19 22:13 - 2013-08-22 15:25 - 000524288 ___SH C:\WINDOWS\system32\config\BBI
2017-08-19 02:55 - 2013-10-24 00:32 - 000000000 ____D C:\Users\Napoléon\AppData\Roaming\Audacity
2017-08-18 18:15 - 2016-05-20 02:46 - 000003182 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForNapoléon
2017-08-17 23:08 - 2013-08-04 00:16 - 000000000 ____D C:\Users\Napoléon\AppData\LocalLow\Temp
2017-08-17 18:49 - 2013-08-22 15:25 - 000262144 ___SH C:\WINDOWS\system32\config\ELAM
2017-08-14 01:02 - 2017-03-19 19:13 - 000000000 ____D C:\Users\Napoléon\AppData\Roaming\ZHP
2017-08-14 00:58 - 2013-10-19 17:40 - 000000000 ____D C:\ProgramData\Oracle
2017-08-14 00:57 - 2014-10-30 04:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-13 01:48 - 2017-04-15 04:01 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-11 01:21 - 2017-06-08 18:27 - 000000000 ____D C:\Mes Sites Web
2017-08-10 21:24 - 2016-04-21 23:55 - 000000000 ____D C:\Users\Napoléon\Documents\Brassens, Année par année
2017-08-10 19:49 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2017-08-10 19:00 - 2017-03-21 19:54 - 000000000 ____D C:\Users\Napoléon\Documents\Avis de paiement AFPA
2017-08-10 17:21 - 2013-08-22 16:44 - 000484736 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-08-10 17:21 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2017-08-10 06:03 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2017-08-10 06:02 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2017-08-10 00:18 - 2014-12-26 02:41 - 000004476 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2017-08-09 19:31 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-09 19:31 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-08-09 19:24 - 2013-08-16 01:00 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-08-09 19:17 - 2013-08-03 21:06 - 140394280 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-08-08 23:10 - 2015-10-12 22:38 - 000004324 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-08-08 23:09 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-08-08 23:09 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-08-08 02:32 - 2014-07-31 05:21 - 000000000 ____D C:\Users\Napoléon\AppData\Local\CrashDumps
2017-08-07 04:18 - 2013-11-14 09:32 - 002027754 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-08-07 04:18 - 2013-11-14 09:13 - 000885876 _____ C:\WINDOWS\system32\perfh00C.dat
2017-08-07 04:18 - 2013-11-14 09:13 - 000192042 _____ C:\WINDOWS\system32\perfc00C.dat
2017-08-05 16:28 - 2013-08-01 04:06 - 000000000 ___HD C:\Users\Napoléon\Documents\hp.system.package.metadata
2017-08-05 16:28 - 2013-07-29 23:28 - 000000000 ____D C:\Users\Napoléon\Documents\CV et LM 2
2017-08-05 16:28 - 2013-05-28 21:14 - 000000000 ____D C:\RealBand
2017-08-05 16:28 - 2013-05-28 21:12 - 000000000 ____D C:\BIAB
2017-08-05 16:28 - 2013-05-22 10:15 - 000000000 ____D C:\Users\Napoléon\Downloads\Georges_Brassens-Le_Temps_Ne_Fait_Rien_A_Laffaire_-_30e_Anniversaire
2017-08-05 16:27 - 2017-06-14 23:09 - 000000000 ____D C:\Users\Napoléon\Desktop\Richelieu Simon fournier et Love Myun
2017-08-05 16:27 - 2016-05-19 00:57 - 000000000 ____D C:\Users\Napoléon\Documents\Factures
2017-08-05 16:27 - 2014-01-17 21:37 - 000000000 ____D C:\Users\Napoléon\Documents\Vaccai
2017-08-05 16:26 - 2015-06-28 23:14 - 000000000 ____D C:\Users\Napoléon\Documents\Guitare et couleurs
2017-08-05 16:26 - 2014-05-27 08:19 - 000000000 ____D C:\Users\Napoléon\Documents\My Kindle Content
2017-08-04 23:03 - 2014-10-06 17:32 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-08-04 22:23 - 2016-05-07 23:16 - 000000000 ____D C:\Users\Napoléon\AppData\Temp
2017-08-03 23:25 - 2016-10-05 16:59 - 000000000 ____D C:\ProgramData\Lx_cats
2017-07-29 02:03 - 2017-05-14 19:19 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-07-29 02:03 - 2017-05-14 19:19 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-07-21 23:37 - 2017-06-08 18:16 - 000000854 _____ C:\Users\Napoléon\Desktop\HTTrack Website Copier.lnk
==================== Fichiers à la racine de certains dossiers =======
2016-03-24 06:59 - 2014-08-13 11:21 - 003571712 _____ () C:\Program Files (x86)\SpicyGuitar_32.dll
2015-04-23 15:04 - 2015-04-23 15:04 - 000005120 _____ () C:\Users\Napoléon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-06-26 03:44 - 2015-06-26 03:44 - 000000218 _____ () C:\Users\Napoléon\AppData\Local\recently-used.xbel
2016-05-07 18:45 - 2016-05-07 18:45 - 000772446 _____ () C:\ProgramData\1462638742.bdinstall.bin
2012-11-22 09:34 - 2012-11-22 09:34 - 000000141 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.64.bc
Certains fichiers dans TEMP:
====================
2017-08-19 22:40 - 2017-08-19 22:41 - 032637808 _____ (Ellora Assets Corporation ) C:\Users\Napoléon\AppData\Local\Temp\FreemakeVideoConverterFull.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-08-10 17:44
==================== Fin de FRST.txt ============================