Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017
Exécuté par Francois (administrateur) sur FRANCOIS-PC (04-09-2017 19:40:54)
Exécuté depuis C:\Users\Francois\Desktop
Profils chargés: Francois (Profils disponibles: Francois)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
() C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files (x86)\No-IP\ducservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\No-IP\DUC40.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe
(Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe
(Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1705.1301.0_x64__8wekyb3d8bbwe\Calculator.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [602968 2015-12-07] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830232 2016-03-08] (Conexant Systems, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [112104 2017-06-19] (VMware, Inc.)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3071776 2017-08-28] (Valve Corporation)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [PhotoMasterImportAgent] => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [675608 2016-04-22] (CyberLink Corp.)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [NoIPDUCv4] => C:\Program Files (x86)\No-IP\DUC40.exe [347648 2015-07-21] ()
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1248848 2017-08-31] (CyberGhost S.A.)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-02] (Disc Soft Ltd)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27784672 2017-06-27] (Skype Technologies S.A.)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [632448 2017-05-11] ()
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\RunOnce: [Uninstall C:\Users\Francois\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Francois\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\MountPoints2: {2796fb66-203c-11e7-af3e-ac2b6ecce4de} - "H:\Lenovo_Suite.exe"
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{053aa05a-ae84-4f83-9099-9aca1009e44d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{65e6dfa3-ddbd-49c2-8239-26b0cf32077f}: [DhcpNameServer] 192.168.44.1
Tcpip\..\Interfaces\{e1be80d5-ee13-458c-9c0b-9e85bc4eb53d}: [DhcpNameServer] 8.8.8.8
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709369465&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709372771&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709377141&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll => Pas de fichier
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_112\bin\ssv.dll [2016-12-30] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL => Pas de fichier
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL => Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_112\bin\jp2ssv.dll [2016-12-30] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL Pas de fichier
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1288880404-4155176319-3141220653-1001 ->
FireFox:
========
FF DefaultProfile: cuece6iw.default
FF ProfilePath: C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default [2017-09-04]
FF Extension: (Avira Browser Safety) - C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default\Extensions\abs@avira.com.xpi [2017-07-20]
FF Extension: (Video DownloadHelper) - C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-19]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-06-03] ()
FF Plugin: @java.com/DTPlugin,version=11.112.2 -> C:\Program Files\Java\jre1.8.0_112\bin\dtplugin\npDeployJava1.dll [2016-12-30] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.112.2 -> C:\Program Files\Java\jre1.8.0_112\bin\plugin2\npjp2.dll [2016-12-30] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-06-03] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.80.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2017-05-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.80.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2017-05-15] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [Pas de fichier]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-06-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-06-27] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-1288880404-4155176319-3141220653-1001: SkypePlugin -> C:\Users\Francois\AppData\Local\SkypePlugin\7.31.0.56\npGatewayNpapi.dll [2017-02-03] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-1288880404-4155176319-3141220653-1001: SkypePlugin64 -> C:\Users\Francois\AppData\Local\SkypePlugin\7.31.0.56\npGatewayNpapi-x64.dll [2017-02-03] (Skype Technologies S.A.)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxps://www.google.fr/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.fr/"
CHR DefaultSearchURL: Profile 1 -> hxxps://mail.google.com/mail/u/0/#inbox
CHR Session Restore: Profile 1 -> est activé.
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default [2017-07-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-07]
CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-07]
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-04-25]
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-09-04]
CHR Extension: (MEGA) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2017-08-20]
CHR Extension: (Appel Skype) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-07-07]
CHR Extension: (Adblock Plus) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-13]
CHR Extension: (GeForce Experience Stream Client) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gjljknijpnfibppaijefibndmiabonep [2017-08-26]
CHR Extension: (Gamekit) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jeedakojomhhndjiacgkhlkknflflchl [2017-07-07]
CHR Extension: (Video DownloadHelper) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2017-07-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Speedtest by Ookla) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2017-07-06]
CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-13]
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-05-23]
CHR Extension: (Google Slides) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-01]
CHR Extension: (Google Docs) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-01]
CHR Extension: (Google Drive) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-01]
CHR Extension: (YouTube) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-01]
CHR Extension: (Google Sheets) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-01]
CHR Extension: (Google Docs hors connexion) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-03]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-16]
CHR Extension: (Speedtest by Ookla) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2017-05-10]
CHR Extension: (Gmail) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-01]
CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-14]
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\System Profile [2017-07-07]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
R3 cphs; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHeciSvc.exe [301504 2017-01-04] (Intel Corporation)
S3 cplspcon; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHDCPSvc.exe [480192 2017-01-04] (Intel Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-02] (Disc Soft Ltd)
S4 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [107520 2016-09-15] (Freemake) [Fichier non signé]
S4 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2016-09-15] (Ellora Assets Corp.) [Fichier non signé]
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)
S4 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [165616 2015-11-12] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxCUIService.exe [341952 2017-01-04] (Intel Corporation)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [57160 2017-06-05] (Lenovo Group Limited)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
R2 NoIPDUCService4; C:\Program Files (x86)\No-IP\ducservice.exe [12288 2015-07-20] () [Fichier non signé]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-27] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-08-18] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Fichier non signé]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123240 2017-03-17] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184688 2017-03-17] (Electronic Arts)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 SAService; C:\WINDOWS\system32\SAsrv.exe [431960 2015-09-15] (Conexant Systems, Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [267352 2017-03-23] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12482024 2017-06-19] ()
S3 wampapache; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [22016 2014-05-01] (Apache Software Foundation) [Fichier non signé]
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [10959360 2014-05-01] () [Fichier non signé]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation)
S2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2016-12-25] ()
S3 ampa; C:\WINDOWS\SysWOW64\ampa.sys [38320 2016-12-25] ()
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-02-05] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-02-05] (Disc Soft Ltd)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2017-06-29] (LogMeIn Inc.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-04-11] (Huawei Technologies Co., Ltd.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [300304 2015-11-13] (Intel Corporation)
R3 igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igdkmd64.sys [11039680 2017-01-04] (Intel Corporation)
R2 memudrv; C:\Program Files (x86)\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation)
R1 MpKsl6957c223; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{843D48E6-E44F-4E05-8BCE-6E21E213856C}\MpKsl6957c223.sys [44928 2017-09-04] (Microsoft Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2015-10-30] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7626488 2017-03-09] (Intel Corporation)
R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_984d7ebc1a4a35bd\nvlddmkm.sys [15625336 2017-06-28] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-08-18] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-08-18] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-08-18] (NVIDIA Corporation)
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] ()
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-12-22] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [408280 2015-10-15] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3094272 2015-12-30] (Realtek Semiconductor Corp.)
S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [11376 2013-09-17] () [Fichier non signé]
R3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2016-03-01] (Anchorfree Inc.)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [196040 2017-07-27] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206976 2017-07-27] (Oracle Corporation)
R0 vsock; C:\WINDOWS\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [38376 2017-05-05] (VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [37344 2017-08-31] (Wellbia.com Co., Ltd.)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-04 19:40 - 2017-09-04 19:44 - 000027621 _____ C:\Users\Francois\Desktop\FRST.txt
2017-09-04 19:40 - 2017-09-04 19:40 - 000000000 ____D C:\FRST
2017-09-04 19:39 - 2017-09-04 19:40 - 002395648 _____ (Farbar) C:\Users\Francois\Desktop\FRST64.exe
2017-09-04 15:04 - 2017-09-04 15:04 - 000002214 _____ C:\Users\Francois\Desktop\ZHPFixReport.txt
2017-09-04 14:43 - 2017-09-04 14:44 - 003067264 _____ (Nicolas Coolman) C:\Users\Francois\Desktop\zhpfix_2017-6-13-1.exe
2017-09-04 11:30 - 2017-09-04 15:33 - 000181564 _____ C:\Users\Francois\Desktop\ZHPDiag.txt
2017-09-04 11:11 - 2017-09-04 11:11 - 000004141 _____ C:\Users\Francois\Desktop\Malwarebytes.txt
2017-09-04 11:03 - 2017-09-04 11:04 - 000000000 ____D C:\Users\Francois\Desktop\Your lie in april
2017-09-04 10:47 - 2017-09-04 15:07 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-09-04 10:47 - 2017-09-04 15:07 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-09-04 10:47 - 2017-09-04 15:06 - 000253888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-09-04 10:47 - 2017-09-04 11:17 - 000192960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-09-04 10:47 - 2017-09-04 11:16 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-09-04 10:47 - 2017-09-04 10:47 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-04 10:47 - 2017-09-04 10:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-09-04 10:46 - 2017-09-04 10:46 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-04 10:46 - 2017-09-04 10:46 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-04 10:44 - 2017-09-04 10:44 - 000001542 _____ C:\Users\Francois\Desktop\AdwCleaner[C0].txt
2017-09-04 10:35 - 2017-06-08 21:29 - 004110280 _____ C:\Users\Francois\Desktop\adwcleaner_6.047.exe
2017-09-04 10:09 - 2017-09-04 10:12 - 000002790 _____ C:\Users\Francois\Desktop\ZHPCleaner.txt
2017-09-04 09:40 - 2017-09-04 09:42 - 002830720 _____ C:\Users\Francois\Desktop\ZHPDiag3.exe
2017-09-04 09:39 - 2017-09-04 09:43 - 006965249 _____ C:\Users\Francois\Desktop\adwcleaner_7.0.2.1.exe
2017-09-04 09:39 - 2017-09-04 09:40 - 002869632 _____ C:\Users\Francois\Desktop\zhpcleaner_2017.8.31.148.exe
2017-09-02 00:24 - 2017-09-02 00:24 - 000007601 _____ C:\Users\Francois\AppData\Local\Resmon.ResmonCfg
2017-09-01 11:37 - 2017-09-01 11:37 - 000007892 _____ C:\Users\Francois\AppData\Local\recently-used.xbel
2017-09-01 09:14 - 2017-09-01 09:16 - 001050180 _____ C:\WINDOWS\Minidump\090117-39140-01.dmp
2017-08-31 20:55 - 2017-08-31 20:55 - 000037344 _____ (Wellbia.com Co., Ltd.) C:\WINDOWS\xhunter1.sys
2017-08-31 20:27 - 2017-08-31 20:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\S4 League
2017-08-31 16:59 - 2017-08-31 20:02 - 000000000 ____D C:\AeriaGames
2017-08-30 17:42 - 2017-08-30 17:43 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Craften Terminal
2017-08-30 17:25 - 2017-08-30 17:28 - 000000000 ____D C:\Users\Francois\AppData\Roaming\jEdit
2017-08-27 17:25 - 2017-08-27 17:27 - 001088268 _____ C:\WINDOWS\Minidump\082717-38031-01.dmp
2017-08-27 10:32 - 2017-08-27 10:32 - 007897776 _____ (Tim Kosse) C:\Users\Francois\Downloads\FileZilla_3.27.1_win64-setup.exe
2017-08-26 18:23 - 2017-08-26 18:23 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2017-08-26 18:09 - 2017-08-26 18:09 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-08-25 13:22 - 2017-08-25 13:23 - 004876550 _____ C:\Users\Francois\Downloads\forge-1.12.1-14.22.0.2462-installer-win.exe
2017-08-25 13:20 - 2017-08-25 13:21 - 004160345 _____ () C:\Users\Francois\Downloads\liteloader-installer-1.12.1-00-SNAPSHOT.exe
2017-08-22 11:21 - 2017-08-22 11:21 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC
2017-08-22 11:21 - 2017-08-22 11:21 - 000000000 ____D C:\ProgramData\Vitalwerks
2017-08-22 11:20 - 2017-08-22 11:20 - 000241736 _____ C:\Users\Francois\Downloads\DUCSetup_v4_1_1.exe
2017-08-21 19:53 - 2017-08-22 15:59 - 000000000 ____D C:\Users\Francois\Documents\Overwatch
2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\Roaming\.mono
2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\LocalLow\Blizzard Entertainment
2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\Local\Blizzard
2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\ProgramData\.mono
2017-08-21 14:42 - 2017-08-21 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch
2017-08-20 21:26 - 2017-09-04 10:17 - 000000000 ____D C:\Program Files (x86)\Overwatch
2017-08-20 20:32 - 2017-08-20 20:32 - 002812800 _____ C:\Users\Francois\Downloads\ZHPDiag3.exe
2017-08-14 00:17 - 2017-08-14 00:17 - 000000000 ____D C:\Users\Francois\80AE23DF71A44E3FB931F93AB5DF0BDD.TMP
2017-08-09 12:47 - 2017-08-09 12:47 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2017-08-07 02:20 - 2017-08-07 02:21 - 009037583 _____ C:\Users\Francois\Downloads\csgodouble.rar
2017-08-07 00:45 - 2017-09-02 23:21 - 000001234 _____ C:\Users\Francois\Desktop\Starter Pack Launcher.lnk
2017-08-07 00:45 - 2017-08-07 00:45 - 000001502 _____ C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Starter Pack Launcher (PyLNP).lnk
2017-08-07 00:44 - 2017-08-07 16:01 - 000000000 ____D C:\Program Files (x86)\Dwarf Fortress
2017-08-06 17:04 - 2017-08-06 17:04 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Python-Eggs
2017-08-06 16:37 - 2017-08-06 16:37 - 000000603 _____ C:\Users\Francois\Desktop\exhtpasswd.php
2017-08-06 15:39 - 2017-08-06 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY (64-bit)
2017-08-06 15:39 - 2017-08-06 15:39 - 000000000 ____D C:\Program Files\PuTTY
2017-08-05 22:03 - 2017-08-05 22:03 - 000000000 ____D C:\ProgramData\AomeiBR
2017-08-05 21:53 - 2017-08-14 01:51 - 000001024 ____H C:\AMTAG.BIN
2017-08-05 21:53 - 2017-08-05 22:04 - 000000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant Standard Edition 6.3
2017-08-05 21:53 - 2017-08-05 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 6.3
2017-08-05 21:53 - 2016-12-28 16:25 - 001931112 _____ C:\WINDOWS\ampa.exe
2017-08-05 21:53 - 2016-12-25 23:26 - 000038320 _____ C:\WINDOWS\SysWOW64\ampa.sys
2017-08-05 21:53 - 2016-12-25 23:26 - 000038320 _____ C:\WINDOWS\system32\ampa.sys
2017-08-05 21:46 - 2017-08-05 21:46 - 000000000 ____D C:\Program Files (x86)\EaseUS
2017-08-05 13:52 - 2017-08-04 17:04 - 007873888 _____ (Tim Kosse) C:\Users\Francois\Downloads\FileZilla_3.27.0.1_win64-setup.exe
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-04 19:35 - 2016-11-27 06:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-09-04 15:23 - 2016-12-04 19:19 - 000000000 ____D C:\Users\Francois\AppData\Roaming\ZHP
2017-09-04 15:21 - 2016-11-27 07:00 - 000000000 ____D C:\ProgramData\NVIDIA
2017-09-04 15:15 - 2016-09-16 19:15 - 000000000 ____D C:\Program Files (x86)\Steam
2017-09-04 15:14 - 2016-11-20 22:20 - 000201169 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2017-09-04 15:13 - 2016-09-10 09:58 - 000000000 __SHD C:\Users\Francois\IntelGraphicsProfiles
2017-09-04 15:10 - 2016-07-17 00:40 - 002552862 _____ C:\WINDOWS\system32\perfh00C.dat
2017-09-04 15:10 - 2016-07-17 00:40 - 000675640 _____ C:\WINDOWS\system32\perfc00C.dat
2017-09-04 15:10 - 2015-11-03 21:28 - 005261026 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-09-04 15:06 - 2017-08-01 22:48 - 000000000 ____D C:\ProgramData\VMware
2017-09-04 15:06 - 2016-11-27 07:22 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-09-04 15:05 - 2016-07-16 08:04 - 003145728 _____ C:\WINDOWS\system32\config\BBI
2017-09-04 15:02 - 2016-09-17 10:38 - 000000000 ____D C:\Users\Francois\AppData\Roaming\.minecraft
2017-09-04 14:13 - 2016-09-16 20:57 - 000000000 ____D C:\FFOutput
2017-09-04 13:33 - 2016-09-10 10:21 - 000000000 ____D C:\Users\Francois\AppData\Local\CrashDumps
2017-09-04 11:52 - 2016-09-30 22:51 - 000000000 ____D C:\Users\Francois\AppData\Local\Battle.net
2017-09-04 11:52 - 2016-09-30 22:48 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-09-04 11:04 - 2017-02-05 01:12 - 000000000 ____D C:\Program Files\DAEMON Tools Lite
2017-09-04 11:04 - 2016-09-16 19:28 - 000000000 ____D C:\Program Files (x86)\FormatFactory
2017-09-04 11:04 - 2016-07-16 08:04 - 000000000 ____D C:\Program Files\RTX Encoder
2017-09-04 11:04 - 2016-07-16 08:04 - 000000000 ____D C:\Program Files\PCTools Lile Information
2017-09-04 10:46 - 2017-01-15 20:56 - 000000000 ____D C:\Program Files\CyberGhost 6
2017-09-04 10:44 - 2017-07-11 11:32 - 000000000 ____D C:\AdwCleaner
2017-09-04 01:00 - 2016-11-05 21:20 - 000000000 ____D C:\Program Files (x86)\osu!
2017-09-03 12:53 - 2016-09-25 11:18 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Audacity
2017-09-02 23:21 - 2017-07-20 19:52 - 000002264 _____ C:\Users\Francois\Desktop\WhatsApp.lnk
2017-09-02 23:21 - 2017-01-15 20:56 - 000001820 _____ C:\Users\Francois\Desktop\CyberGhost 6.lnk
2017-09-02 23:21 - 2016-11-12 12:39 - 000001171 _____ C:\Users\Francois\Desktop\CodeBlocks.lnk
2017-09-02 23:21 - 2016-10-20 14:32 - 000001059 _____ C:\Users\Francois\Desktop\mcedit.exe.lnk
2017-09-02 23:21 - 2016-09-17 10:42 - 000001037 _____ C:\Users\Francois\Desktop\Minecraft.lnk
2017-09-02 00:27 - 2016-11-27 07:07 - 000000000 ____D C:\Users\Francois
2017-09-01 22:19 - 2017-01-07 21:15 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-09-01 11:53 - 2016-09-17 11:23 - 000000000 ____D C:\Users\Francois\.gimp-2.8
2017-09-01 11:37 - 2016-09-17 11:55 - 000000000 ____D C:\Users\Francois\AppData\Local\gtk-2.0
2017-09-01 09:14 - 2017-07-26 19:39 - 799368595 _____ C:\WINDOWS\MEMORY.DMP
2017-09-01 09:14 - 2017-05-16 09:28 - 000000000 ____D C:\WINDOWS\Minidump
2017-08-30 17:32 - 2016-12-31 19:09 - 000000000 ____D C:\Users\Francois\AppData\Local\Eclipse
2017-08-30 17:32 - 2016-12-31 19:00 - 000000000 ____D C:\Users\Francois\.p2
2017-08-30 01:55 - 2017-05-28 21:17 - 000000000 ____D C:\Program Files (x86)\Heroes of the Storm
2017-08-29 17:49 - 2017-07-10 15:30 - 000000000 ____D C:\Users\Francois\AppData\Roaming\VMware
2017-08-29 17:49 - 2017-07-10 15:30 - 000000000 ____D C:\Users\Francois\AppData\Local\VMware
2017-08-29 17:49 - 2016-09-18 17:51 - 000000000 ____D C:\Users\Francois\AppData\Roaming\FileZilla
2017-08-29 13:30 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-29 11:51 - 2017-08-02 22:56 - 000000000 ____D C:\Users\Default\AppData\Roaming\VMware
2017-08-29 11:51 - 2017-08-02 22:56 - 000000000 ____D C:\Users\Default User\AppData\Roaming\VMware
2017-08-27 17:32 - 2017-08-03 07:52 - 000000000 ____D C:\Users\Francois\.TianTianVM
2017-08-27 10:18 - 2016-06-09 16:21 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-26 18:12 - 2016-11-27 06:59 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-08-26 18:11 - 2017-06-30 11:48 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:11 - 2017-06-30 11:48 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:11 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-08-26 18:10 - 2017-06-30 11:47 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:10 - 2016-11-27 06:59 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-08-26 18:09 - 2017-06-30 11:47 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:09 - 2017-06-30 11:47 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:09 - 2017-06-30 11:47 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:09 - 2017-06-30 11:47 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:09 - 2017-06-30 11:47 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 17:52 - 2016-09-10 11:04 - 000000000 ___HD C:\Users\Francois\AppData\Roaming\Skype
2017-08-26 17:52 - 2016-09-10 11:04 - 000000000 ____D C:\ProgramData\Skype
2017-08-24 15:34 - 2017-07-10 20:50 - 000000000 ____D C:\Users\Francois\Documents\Virtual Machines
2017-08-22 19:57 - 2016-11-04 22:21 - 000000000 ____D C:\Users\Francois\AppData\Roaming\obs-studio
2017-08-22 15:23 - 2016-09-23 23:51 - 000000000 ____D C:\Users\Francois\AppData\Local\Blizzard Entertainment
2017-08-22 11:21 - 2016-11-01 17:53 - 000000000 ____D C:\Program Files (x86)\No-IP
2017-08-21 15:42 - 2016-09-30 23:00 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-08-20 20:28 - 2017-07-10 11:08 - 000000000 ____D C:\Users\Francois\.VirtualBox
2017-08-20 19:40 - 2017-03-11 23:36 - 000000000 ____D C:\Users\Francois\.MemuHyperv
2017-08-18 06:37 - 2017-06-30 11:48 - 001923008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2017-08-18 06:37 - 2017-06-30 11:48 - 001755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2017-08-18 06:37 - 2017-06-30 11:48 - 001505728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2017-08-18 06:37 - 2017-06-30 11:48 - 001317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2017-08-18 06:37 - 2017-06-30 11:48 - 000121280 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-08-18 06:37 - 2017-06-30 11:47 - 000057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2017-08-18 06:37 - 2017-06-30 11:47 - 000048064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2017-08-18 06:36 - 2017-06-30 11:47 - 000179136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2017-08-18 06:36 - 2017-06-30 11:47 - 000146368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2017-08-17 20:11 - 2017-03-17 19:56 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-08-17 18:26 - 2017-06-30 11:47 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-08-11 18:06 - 2016-10-14 19:58 - 000000000 ____D C:\Users\Francois\Documents\My Games
2017-08-10 21:28 - 2017-06-16 22:27 - 000000000 ____D C:\Users\Francois\Desktop\YGOPro DevPro Launcher
2017-08-10 19:59 - 2016-09-18 20:20 - 000000000 ____D C:\Users\Francois\AppData\Roaming\vlc
2017-08-09 12:47 - 2016-09-10 11:22 - 000000000 ____D C:\Users\Francois\AppData\Roaming\discord
2017-08-09 12:47 - 2016-09-10 11:22 - 000000000 ____D C:\Users\Francois\AppData\Local\Discord
2017-08-08 15:30 - 2017-03-05 16:16 - 000000600 _____ C:\Users\Francois\AppData\Local\PUTTY.RND
2017-08-05 20:26 - 2017-03-30 15:41 - 000000961 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2017-08-05 18:59 - 2017-07-20 19:52 - 000000000 ____D C:\Users\Francois\AppData\Roaming\WhatsApp
==================== Fichiers à la racine de certains dossiers =======
2016-12-04 02:00 - 2016-12-05 21:55 - 000000034 _____ () C:\Users\Francois\AppData\Roaming\AdobeWLCMCache.dat
2017-04-03 20:10 - 2017-04-03 20:10 - 000000125 _____ () C:\Users\Francois\AppData\Roaming\D2Info0
2017-04-03 20:10 - 2017-04-04 00:07 - 000000008 _____ () C:\Users\Francois\AppData\Roaming\DofusAppId0_1
2017-08-03 11:14 - 2017-08-03 11:24 - 000003062 _____ () C:\Users\Francois\AppData\Roaming\droid4xinstaller.log
2016-10-16 15:16 - 2016-10-16 15:16 - 000014336 ___SH () C:\Users\Francois\AppData\Roaming\Thumbs.db
2017-03-05 16:16 - 2017-08-08 15:30 - 000000600 _____ () C:\Users\Francois\AppData\Local\PUTTY.RND
2017-09-01 11:37 - 2017-09-01 11:37 - 000007892 _____ () C:\Users\Francois\AppData\Local\recently-used.xbel
2017-09-02 00:24 - 2017-09-02 00:24 - 000007601 _____ () C:\Users\Francois\AppData\Local\Resmon.ResmonCfg
2016-12-17 22:30 - 2017-03-11 02:06 - 000000552 _____ () C:\Users\Francois\AppData\Local\TroubleshooterConfig.json
2017-06-18 18:30 - 2017-06-18 18:30 - 000010255 _____ () C:\ProgramData\regid.2011-06.com.youtubebyclick_3C521B99-9ACE-47EA-AC9F-26075467D03B.swidtag
Fichiers à déplacer ou supprimer:
====================
C:\Users\Francois\ZHPCleaner.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-08-31 19:41
==================== Fin de FRST.txt ============================
Exécuté par Francois (administrateur) sur FRANCOIS-PC (04-09-2017 19:40:54)
Exécuté depuis C:\Users\Francois\Desktop
Profils chargés: Francois (Profils disponibles: Francois)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxCUIService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(CyberGhost S.A.) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
() C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
() C:\Program Files (x86)\No-IP\ducservice.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxEM.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.SettingsApp.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
() C:\Program Files (x86)\No-IP\DUC40.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe
(Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe
(Discord Inc.) C:\Users\Francois\AppData\Local\Discord\app-0.0.298\Discord.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHeciSvc.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1705.1301.0_x64__8wekyb3d8bbwe\Calculator.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [602968 2015-12-07] (Conexant Systems, Inc.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SACpl.exe [1830232 2016-03-08] (Conexant Systems, Inc.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323056 2015-11-04] (Intel Corporation)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2017-04-28] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [LenovoUtility] => C:\ProgramData\Lenovo\ImController\Plugins\IdeaOSDPackage\x64\utility.exe [911272 2017-07-27] (Lenovo(beijing) Limited)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [112104 2017-06-19] (VMware, Inc.)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3071776 2017-08-28] (Valve Corporation)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [PhotoMasterImportAgent] => C:\Program Files (x86)\Lenovo\Lenovo Photo Master\PhotoMasterImportAgent.exe [675608 2016-04-22] (CyberLink Corp.)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [NoIPDUCv4] => C:\Program Files (x86)\No-IP\DUC40.exe [347648 2015-07-21] ()
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1248848 2017-08-31] (CyberGhost S.A.)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-02] (Disc Soft Ltd)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27784672 2017-06-27] (Skype Technologies S.A.)
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [632448 2017-05-11] ()
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\RunOnce: [Uninstall C:\Users\Francois\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Francois\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\...\MountPoints2: {2796fb66-203c-11e7-af3e-ac2b6ecce4de} - "H:\Lenovo_Suite.exe"
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{053aa05a-ae84-4f83-9099-9aca1009e44d}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{65e6dfa3-ddbd-49c2-8239-26b0cf32077f}: [DhcpNameServer] 192.168.44.1
Tcpip\..\Interfaces\{e1be80d5-ee13-458c-9c0b-9e85bc4eb53d}: [DhcpNameServer] 8.8.8.8
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709369465&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709372771&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC
HKU\S-1-5-21-1288880404-4155176319-3141220653-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131437405709377141&GUID=9D2BE9B3-DDE7-4B1D-A5F2-3805C3C092CC
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll => Pas de fichier
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_112\bin\ssv.dll [2016-12-30] (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL => Pas de fichier
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL => Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_112\bin\jp2ssv.dll [2016-12-30] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL Pas de fichier
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1288880404-4155176319-3141220653-1001 ->
FireFox:
========
FF DefaultProfile: cuece6iw.default
FF ProfilePath: C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default [2017-09-04]
FF Extension: (Avira Browser Safety) - C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default\Extensions\abs@avira.com.xpi [2017-07-20]
FF Extension: (Video DownloadHelper) - C:\Users\Francois\AppData\Roaming\Mozilla\Firefox\Profiles\cuece6iw.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-19]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_25_0_0_171.dll [2017-06-03] ()
FF Plugin: @java.com/DTPlugin,version=11.112.2 -> C:\Program Files\Java\jre1.8.0_112\bin\dtplugin\npDeployJava1.dll [2016-12-30] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.112.2 -> C:\Program Files\Java\jre1.8.0_112\bin\plugin2\npjp2.dll [2016-12-30] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_25_0_0_171.dll [2017-06-03] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.80.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2017-05-15] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.80.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2017-05-15] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [Pas de fichier]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-06-27] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-06-27] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-1288880404-4155176319-3141220653-1001: SkypePlugin -> C:\Users\Francois\AppData\Local\SkypePlugin\7.31.0.56\npGatewayNpapi.dll [2017-02-03] (Skype Technologies S.A.)
FF Plugin HKU\S-1-5-21-1288880404-4155176319-3141220653-1001: SkypePlugin64 -> C:\Users\Francois\AppData\Local\SkypePlugin\7.31.0.56\npGatewayNpapi-x64.dll [2017-02-03] (Skype Technologies S.A.)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxps://www.google.fr/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.fr/"
CHR DefaultSearchURL: Profile 1 -> hxxps://mail.google.com/mail/u/0/#inbox
CHR Session Restore: Profile 1 -> est activé.
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default [2017-07-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-07]
CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-07]
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-04-25]
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-09-04]
CHR Extension: (MEGA) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2017-08-20]
CHR Extension: (Appel Skype) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-07-07]
CHR Extension: (Adblock Plus) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-13]
CHR Extension: (GeForce Experience Stream Client) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gjljknijpnfibppaijefibndmiabonep [2017-08-26]
CHR Extension: (Gamekit) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jeedakojomhhndjiacgkhlkknflflchl [2017-07-07]
CHR Extension: (Video DownloadHelper) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2017-07-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Speedtest by Ookla) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2017-07-06]
CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-13]
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-05-23]
CHR Extension: (Google Slides) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-01]
CHR Extension: (Google Docs) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-01]
CHR Extension: (Google Drive) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-01]
CHR Extension: (YouTube) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-01]
CHR Extension: (Google Sheets) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-01]
CHR Extension: (Google Docs hors connexion) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-03]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-16]
CHR Extension: (Speedtest by Ookla) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pgjjikdiikihdfpoppgaidccahalehjh [2017-05-10]
CHR Extension: (Gmail) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-01]
CHR Extension: (Chrome Media Router) - C:\Users\Francois\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-05-14]
CHR Profile: C:\Users\Francois\AppData\Local\Google\Chrome\User Data\System Profile [2017-07-07]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2207960 2016-09-26] (Adobe Systems, Incorporated)
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [232528 2017-08-31] (CyberGhost S.A.)
R3 cphs; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHeciSvc.exe [301504 2017-01-04] (Intel Corporation)
S3 cplspcon; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\IntelCpHDCPSvc.exe [480192 2017-01-04] (Intel Corporation)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-02] (Disc Soft Ltd)
S4 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [107520 2016-09-15] (Freemake) [Fichier non signé]
S4 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [9216 2016-09-15] (Ellora Assets Corp.) [Fichier non signé]
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [19440 2015-11-04] (Intel Corporation)
S4 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [165616 2015-11-12] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igfxCUIService.exe [341952 2017-01-04] (Intel Corporation)
R2 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [57160 2017-06-05] (Lenovo Group Limited)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
R2 NoIPDUCService4; C:\Program Files (x86)\No-IP\ducservice.exe [12288 2015-07-20] () [Fichier non signé]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-18] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-06-27] (NVIDIA Corporation)
R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-08-18] (NVIDIA Corporation)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Fichier non signé]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-05-11] (The OpenVPN Project)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2123240 2017-03-17] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184688 2017-03-17] (Electronic Arts)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
R2 SAService; C:\WINDOWS\system32\SAsrv.exe [431960 2015-09-15] (Conexant Systems, Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [267352 2017-03-23] (Synaptics Incorporated)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803440 2017-07-26] (TeamViewer GmbH)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [12482024 2017-06-19] ()
S3 wampapache; c:\wamp\bin\apache\apache2.4.9\bin\httpd.exe [22016 2014-05-01] (Apache Software Foundation) [Fichier non signé]
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.6.17\bin\mysqld.exe [10959360 2014-05-01] () [Fichier non signé]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-04-28] (Microsoft Corporation)
S2 OfficeSvc; C:\Program Files\Microsoft Office 15\ClientX64\integratedoffice.exe [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2016-12-25] ()
S3 ampa; C:\WINDOWS\SysWOW64\ampa.sys [38320 2016-12-25] ()
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-02-05] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-02-05] (Disc Soft Ltd)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2017-06-29] (LogMeIn Inc.)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-04-11] (Huawei Technologies Co., Ltd.)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [300304 2015-11-13] (Intel Corporation)
R3 igfx; C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_bde03d8af75e6be5\igdkmd64.sys [11039680 2017-01-04] (Intel Corporation)
R2 memudrv; C:\Program Files (x86)\Microvirt\MEmuHyperv\MEmuDrv.sys [260368 2015-11-02] (Microvirt Corporation)
R1 MpKsl6957c223; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{843D48E6-E44F-4E05-8BCE-6E21E213856C}\MpKsl6957c223.sys [44928 2017-09-04] (Microsoft Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNe64; C:\WINDOWS\System32\drivers\NETwew01.sys [3343872 2015-10-30] (Intel Corporation)
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7626488 2017-03-09] (Intel Corporation)
R2 NPF; C:\WINDOWS\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_984d7ebc1a4a35bd\nvlddmkm.sys [15625336 2017-06-28] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-08-18] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-08-18] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-08-18] (NVIDIA Corporation)
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2016-06-15] (The OpenVPN Project)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2013-09-30] ()
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-12-22] (Realtek )
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [408280 2015-10-15] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\WINDOWS\system32\DRIVERS\rtsuvc.sys [3094272 2015-12-30] (Realtek Semiconductor Corp.)
S2 SecDrv; C:\WINDOWS\SysWOW64\drivers\SECDRV.SYS [11376 2013-09-17] () [Fichier non signé]
R3 taphss6; C:\WINDOWS\System32\drivers\taphss6.sys [42064 2016-03-01] (Anchorfree Inc.)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [196040 2017-07-27] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206976 2017-07-27] (Oracle Corporation)
R0 vsock; C:\WINDOWS\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-mntapi20-shared.sys [38376 2017-05-05] (VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [37344 2017-08-31] (Wellbia.com Co., Ltd.)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-04 19:40 - 2017-09-04 19:44 - 000027621 _____ C:\Users\Francois\Desktop\FRST.txt
2017-09-04 19:40 - 2017-09-04 19:40 - 000000000 ____D C:\FRST
2017-09-04 19:39 - 2017-09-04 19:40 - 002395648 _____ (Farbar) C:\Users\Francois\Desktop\FRST64.exe
2017-09-04 15:04 - 2017-09-04 15:04 - 000002214 _____ C:\Users\Francois\Desktop\ZHPFixReport.txt
2017-09-04 14:43 - 2017-09-04 14:44 - 003067264 _____ (Nicolas Coolman) C:\Users\Francois\Desktop\zhpfix_2017-6-13-1.exe
2017-09-04 11:30 - 2017-09-04 15:33 - 000181564 _____ C:\Users\Francois\Desktop\ZHPDiag.txt
2017-09-04 11:11 - 2017-09-04 11:11 - 000004141 _____ C:\Users\Francois\Desktop\Malwarebytes.txt
2017-09-04 11:03 - 2017-09-04 11:04 - 000000000 ____D C:\Users\Francois\Desktop\Your lie in april
2017-09-04 10:47 - 2017-09-04 15:07 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-09-04 10:47 - 2017-09-04 15:07 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-09-04 10:47 - 2017-09-04 15:06 - 000253888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-09-04 10:47 - 2017-09-04 11:17 - 000192960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-09-04 10:47 - 2017-09-04 11:16 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-09-04 10:47 - 2017-09-04 10:47 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-09-04 10:47 - 2017-09-04 10:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-09-04 10:46 - 2017-09-04 10:46 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-09-04 10:46 - 2017-09-04 10:46 - 000000000 ____D C:\Program Files\Malwarebytes
2017-09-04 10:44 - 2017-09-04 10:44 - 000001542 _____ C:\Users\Francois\Desktop\AdwCleaner[C0].txt
2017-09-04 10:35 - 2017-06-08 21:29 - 004110280 _____ C:\Users\Francois\Desktop\adwcleaner_6.047.exe
2017-09-04 10:09 - 2017-09-04 10:12 - 000002790 _____ C:\Users\Francois\Desktop\ZHPCleaner.txt
2017-09-04 09:40 - 2017-09-04 09:42 - 002830720 _____ C:\Users\Francois\Desktop\ZHPDiag3.exe
2017-09-04 09:39 - 2017-09-04 09:43 - 006965249 _____ C:\Users\Francois\Desktop\adwcleaner_7.0.2.1.exe
2017-09-04 09:39 - 2017-09-04 09:40 - 002869632 _____ C:\Users\Francois\Desktop\zhpcleaner_2017.8.31.148.exe
2017-09-02 00:24 - 2017-09-02 00:24 - 000007601 _____ C:\Users\Francois\AppData\Local\Resmon.ResmonCfg
2017-09-01 11:37 - 2017-09-01 11:37 - 000007892 _____ C:\Users\Francois\AppData\Local\recently-used.xbel
2017-09-01 09:14 - 2017-09-01 09:16 - 001050180 _____ C:\WINDOWS\Minidump\090117-39140-01.dmp
2017-08-31 20:55 - 2017-08-31 20:55 - 000037344 _____ (Wellbia.com Co., Ltd.) C:\WINDOWS\xhunter1.sys
2017-08-31 20:27 - 2017-08-31 20:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\S4 League
2017-08-31 16:59 - 2017-08-31 20:02 - 000000000 ____D C:\AeriaGames
2017-08-30 17:42 - 2017-08-30 17:43 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Craften Terminal
2017-08-30 17:25 - 2017-08-30 17:28 - 000000000 ____D C:\Users\Francois\AppData\Roaming\jEdit
2017-08-27 17:25 - 2017-08-27 17:27 - 001088268 _____ C:\WINDOWS\Minidump\082717-38031-01.dmp
2017-08-27 10:32 - 2017-08-27 10:32 - 007897776 _____ (Tim Kosse) C:\Users\Francois\Downloads\FileZilla_3.27.1_win64-setup.exe
2017-08-26 18:23 - 2017-08-26 18:23 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2017-08-26 18:09 - 2017-08-26 18:09 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2017-08-25 13:22 - 2017-08-25 13:23 - 004876550 _____ C:\Users\Francois\Downloads\forge-1.12.1-14.22.0.2462-installer-win.exe
2017-08-25 13:20 - 2017-08-25 13:21 - 004160345 _____ () C:\Users\Francois\Downloads\liteloader-installer-1.12.1-00-SNAPSHOT.exe
2017-08-22 11:21 - 2017-08-22 11:21 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\No-IP DUC
2017-08-22 11:21 - 2017-08-22 11:21 - 000000000 ____D C:\ProgramData\Vitalwerks
2017-08-22 11:20 - 2017-08-22 11:20 - 000241736 _____ C:\Users\Francois\Downloads\DUCSetup_v4_1_1.exe
2017-08-21 19:53 - 2017-08-22 15:59 - 000000000 ____D C:\Users\Francois\Documents\Overwatch
2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\Roaming\.mono
2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\LocalLow\Blizzard Entertainment
2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\Users\Francois\AppData\Local\Blizzard
2017-08-21 15:43 - 2017-08-21 15:43 - 000000000 ____D C:\ProgramData\.mono
2017-08-21 14:42 - 2017-08-21 14:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch
2017-08-20 21:26 - 2017-09-04 10:17 - 000000000 ____D C:\Program Files (x86)\Overwatch
2017-08-20 20:32 - 2017-08-20 20:32 - 002812800 _____ C:\Users\Francois\Downloads\ZHPDiag3.exe
2017-08-14 00:17 - 2017-08-14 00:17 - 000000000 ____D C:\Users\Francois\80AE23DF71A44E3FB931F93AB5DF0BDD.TMP
2017-08-09 12:47 - 2017-08-09 12:47 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2017-08-07 02:20 - 2017-08-07 02:21 - 009037583 _____ C:\Users\Francois\Downloads\csgodouble.rar
2017-08-07 00:45 - 2017-09-02 23:21 - 000001234 _____ C:\Users\Francois\Desktop\Starter Pack Launcher.lnk
2017-08-07 00:45 - 2017-08-07 00:45 - 000001502 _____ C:\Users\Francois\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Starter Pack Launcher (PyLNP).lnk
2017-08-07 00:44 - 2017-08-07 16:01 - 000000000 ____D C:\Program Files (x86)\Dwarf Fortress
2017-08-06 17:04 - 2017-08-06 17:04 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Python-Eggs
2017-08-06 16:37 - 2017-08-06 16:37 - 000000603 _____ C:\Users\Francois\Desktop\exhtpasswd.php
2017-08-06 15:39 - 2017-08-06 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY (64-bit)
2017-08-06 15:39 - 2017-08-06 15:39 - 000000000 ____D C:\Program Files\PuTTY
2017-08-05 22:03 - 2017-08-05 22:03 - 000000000 ____D C:\ProgramData\AomeiBR
2017-08-05 21:53 - 2017-08-14 01:51 - 000001024 ____H C:\AMTAG.BIN
2017-08-05 21:53 - 2017-08-05 22:04 - 000000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant Standard Edition 6.3
2017-08-05 21:53 - 2017-08-05 21:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 6.3
2017-08-05 21:53 - 2016-12-28 16:25 - 001931112 _____ C:\WINDOWS\ampa.exe
2017-08-05 21:53 - 2016-12-25 23:26 - 000038320 _____ C:\WINDOWS\SysWOW64\ampa.sys
2017-08-05 21:53 - 2016-12-25 23:26 - 000038320 _____ C:\WINDOWS\system32\ampa.sys
2017-08-05 21:46 - 2017-08-05 21:46 - 000000000 ____D C:\Program Files (x86)\EaseUS
2017-08-05 13:52 - 2017-08-04 17:04 - 007873888 _____ (Tim Kosse) C:\Users\Francois\Downloads\FileZilla_3.27.0.1_win64-setup.exe
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-04 19:35 - 2016-11-27 06:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-09-04 15:23 - 2016-12-04 19:19 - 000000000 ____D C:\Users\Francois\AppData\Roaming\ZHP
2017-09-04 15:21 - 2016-11-27 07:00 - 000000000 ____D C:\ProgramData\NVIDIA
2017-09-04 15:15 - 2016-09-16 19:15 - 000000000 ____D C:\Program Files (x86)\Steam
2017-09-04 15:14 - 2016-11-20 22:20 - 000201169 _____ C:\WINDOWS\system32\InstallUtil.InstallLog
2017-09-04 15:13 - 2016-09-10 09:58 - 000000000 __SHD C:\Users\Francois\IntelGraphicsProfiles
2017-09-04 15:10 - 2016-07-17 00:40 - 002552862 _____ C:\WINDOWS\system32\perfh00C.dat
2017-09-04 15:10 - 2016-07-17 00:40 - 000675640 _____ C:\WINDOWS\system32\perfc00C.dat
2017-09-04 15:10 - 2015-11-03 21:28 - 005261026 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-09-04 15:06 - 2017-08-01 22:48 - 000000000 ____D C:\ProgramData\VMware
2017-09-04 15:06 - 2016-11-27 07:22 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-09-04 15:05 - 2016-07-16 08:04 - 003145728 _____ C:\WINDOWS\system32\config\BBI
2017-09-04 15:02 - 2016-09-17 10:38 - 000000000 ____D C:\Users\Francois\AppData\Roaming\.minecraft
2017-09-04 14:13 - 2016-09-16 20:57 - 000000000 ____D C:\FFOutput
2017-09-04 13:33 - 2016-09-10 10:21 - 000000000 ____D C:\Users\Francois\AppData\Local\CrashDumps
2017-09-04 11:52 - 2016-09-30 22:51 - 000000000 ____D C:\Users\Francois\AppData\Local\Battle.net
2017-09-04 11:52 - 2016-09-30 22:48 - 000000000 ____D C:\Program Files (x86)\Battle.net
2017-09-04 11:04 - 2017-02-05 01:12 - 000000000 ____D C:\Program Files\DAEMON Tools Lite
2017-09-04 11:04 - 2016-09-16 19:28 - 000000000 ____D C:\Program Files (x86)\FormatFactory
2017-09-04 11:04 - 2016-07-16 08:04 - 000000000 ____D C:\Program Files\RTX Encoder
2017-09-04 11:04 - 2016-07-16 08:04 - 000000000 ____D C:\Program Files\PCTools Lile Information
2017-09-04 10:46 - 2017-01-15 20:56 - 000000000 ____D C:\Program Files\CyberGhost 6
2017-09-04 10:44 - 2017-07-11 11:32 - 000000000 ____D C:\AdwCleaner
2017-09-04 01:00 - 2016-11-05 21:20 - 000000000 ____D C:\Program Files (x86)\osu!
2017-09-03 12:53 - 2016-09-25 11:18 - 000000000 ____D C:\Users\Francois\AppData\Roaming\Audacity
2017-09-02 23:21 - 2017-07-20 19:52 - 000002264 _____ C:\Users\Francois\Desktop\WhatsApp.lnk
2017-09-02 23:21 - 2017-01-15 20:56 - 000001820 _____ C:\Users\Francois\Desktop\CyberGhost 6.lnk
2017-09-02 23:21 - 2016-11-12 12:39 - 000001171 _____ C:\Users\Francois\Desktop\CodeBlocks.lnk
2017-09-02 23:21 - 2016-10-20 14:32 - 000001059 _____ C:\Users\Francois\Desktop\mcedit.exe.lnk
2017-09-02 23:21 - 2016-09-17 10:42 - 000001037 _____ C:\Users\Francois\Desktop\Minecraft.lnk
2017-09-02 00:27 - 2016-11-27 07:07 - 000000000 ____D C:\Users\Francois
2017-09-01 22:19 - 2017-01-07 21:15 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2017-09-01 11:53 - 2016-09-17 11:23 - 000000000 ____D C:\Users\Francois\.gimp-2.8
2017-09-01 11:37 - 2016-09-17 11:55 - 000000000 ____D C:\Users\Francois\AppData\Local\gtk-2.0
2017-09-01 09:14 - 2017-07-26 19:39 - 799368595 _____ C:\WINDOWS\MEMORY.DMP
2017-09-01 09:14 - 2017-05-16 09:28 - 000000000 ____D C:\WINDOWS\Minidump
2017-08-30 17:32 - 2016-12-31 19:09 - 000000000 ____D C:\Users\Francois\AppData\Local\Eclipse
2017-08-30 17:32 - 2016-12-31 19:00 - 000000000 ____D C:\Users\Francois\.p2
2017-08-30 01:55 - 2017-05-28 21:17 - 000000000 ____D C:\Program Files (x86)\Heroes of the Storm
2017-08-29 17:49 - 2017-07-10 15:30 - 000000000 ____D C:\Users\Francois\AppData\Roaming\VMware
2017-08-29 17:49 - 2017-07-10 15:30 - 000000000 ____D C:\Users\Francois\AppData\Local\VMware
2017-08-29 17:49 - 2016-09-18 17:51 - 000000000 ____D C:\Users\Francois\AppData\Roaming\FileZilla
2017-08-29 13:30 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-08-29 11:51 - 2017-08-02 22:56 - 000000000 ____D C:\Users\Default\AppData\Roaming\VMware
2017-08-29 11:51 - 2017-08-02 22:56 - 000000000 ____D C:\Users\Default User\AppData\Roaming\VMware
2017-08-27 17:32 - 2017-08-03 07:52 - 000000000 ____D C:\Users\Francois\.TianTianVM
2017-08-27 10:18 - 2016-06-09 16:21 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-26 18:12 - 2016-11-27 06:59 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-08-26 18:11 - 2017-06-30 11:48 - 000004000 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:11 - 2017-06-30 11:48 - 000003994 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:11 - 2016-07-16 13:45 - 000000000 ____D C:\WINDOWS\INF
2017-08-26 18:10 - 2017-06-30 11:47 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:10 - 2016-11-27 06:59 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-08-26 18:09 - 2017-06-30 11:47 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:09 - 2017-06-30 11:47 - 000003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:09 - 2017-06-30 11:47 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:09 - 2017-06-30 11:47 - 000003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 18:09 - 2017-06-30 11:47 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-08-26 17:52 - 2016-09-10 11:04 - 000000000 ___HD C:\Users\Francois\AppData\Roaming\Skype
2017-08-26 17:52 - 2016-09-10 11:04 - 000000000 ____D C:\ProgramData\Skype
2017-08-24 15:34 - 2017-07-10 20:50 - 000000000 ____D C:\Users\Francois\Documents\Virtual Machines
2017-08-22 19:57 - 2016-11-04 22:21 - 000000000 ____D C:\Users\Francois\AppData\Roaming\obs-studio
2017-08-22 15:23 - 2016-09-23 23:51 - 000000000 ____D C:\Users\Francois\AppData\Local\Blizzard Entertainment
2017-08-22 11:21 - 2016-11-01 17:53 - 000000000 ____D C:\Program Files (x86)\No-IP
2017-08-21 15:42 - 2016-09-30 23:00 - 000000000 ____D C:\Program Files (x86)\Hearthstone
2017-08-20 20:28 - 2017-07-10 11:08 - 000000000 ____D C:\Users\Francois\.VirtualBox
2017-08-20 19:40 - 2017-03-11 23:36 - 000000000 ____D C:\Users\Francois\.MemuHyperv
2017-08-18 06:37 - 2017-06-30 11:48 - 001923008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2017-08-18 06:37 - 2017-06-30 11:48 - 001755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2017-08-18 06:37 - 2017-06-30 11:48 - 001505728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2017-08-18 06:37 - 2017-06-30 11:48 - 001317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2017-08-18 06:37 - 2017-06-30 11:48 - 000121280 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-08-18 06:37 - 2017-06-30 11:47 - 000057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2017-08-18 06:37 - 2017-06-30 11:47 - 000048064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2017-08-18 06:36 - 2017-06-30 11:47 - 000179136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2017-08-18 06:36 - 2017-06-30 11:47 - 000146368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2017-08-17 20:11 - 2017-03-17 19:56 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-08-17 18:26 - 2017-06-30 11:47 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-08-11 18:06 - 2016-10-14 19:58 - 000000000 ____D C:\Users\Francois\Documents\My Games
2017-08-10 21:28 - 2017-06-16 22:27 - 000000000 ____D C:\Users\Francois\Desktop\YGOPro DevPro Launcher
2017-08-10 19:59 - 2016-09-18 20:20 - 000000000 ____D C:\Users\Francois\AppData\Roaming\vlc
2017-08-09 12:47 - 2016-09-10 11:22 - 000000000 ____D C:\Users\Francois\AppData\Roaming\discord
2017-08-09 12:47 - 2016-09-10 11:22 - 000000000 ____D C:\Users\Francois\AppData\Local\Discord
2017-08-08 15:30 - 2017-03-05 16:16 - 000000600 _____ C:\Users\Francois\AppData\Local\PUTTY.RND
2017-08-05 20:26 - 2017-03-30 15:41 - 000000961 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2017-08-05 18:59 - 2017-07-20 19:52 - 000000000 ____D C:\Users\Francois\AppData\Roaming\WhatsApp
==================== Fichiers à la racine de certains dossiers =======
2016-12-04 02:00 - 2016-12-05 21:55 - 000000034 _____ () C:\Users\Francois\AppData\Roaming\AdobeWLCMCache.dat
2017-04-03 20:10 - 2017-04-03 20:10 - 000000125 _____ () C:\Users\Francois\AppData\Roaming\D2Info0
2017-04-03 20:10 - 2017-04-04 00:07 - 000000008 _____ () C:\Users\Francois\AppData\Roaming\DofusAppId0_1
2017-08-03 11:14 - 2017-08-03 11:24 - 000003062 _____ () C:\Users\Francois\AppData\Roaming\droid4xinstaller.log
2016-10-16 15:16 - 2016-10-16 15:16 - 000014336 ___SH () C:\Users\Francois\AppData\Roaming\Thumbs.db
2017-03-05 16:16 - 2017-08-08 15:30 - 000000600 _____ () C:\Users\Francois\AppData\Local\PUTTY.RND
2017-09-01 11:37 - 2017-09-01 11:37 - 000007892 _____ () C:\Users\Francois\AppData\Local\recently-used.xbel
2017-09-02 00:24 - 2017-09-02 00:24 - 000007601 _____ () C:\Users\Francois\AppData\Local\Resmon.ResmonCfg
2016-12-17 22:30 - 2017-03-11 02:06 - 000000552 _____ () C:\Users\Francois\AppData\Local\TroubleshooterConfig.json
2017-06-18 18:30 - 2017-06-18 18:30 - 000010255 _____ () C:\ProgramData\regid.2011-06.com.youtubebyclick_3C521B99-9ACE-47EA-AC9F-26075467D03B.swidtag
Fichiers à déplacer ou supprimer:
====================
C:\Users\Francois\ZHPCleaner.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-08-31 19:41
==================== Fin de FRST.txt ============================