Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017
Exécuté par -San (administrateur) sur SENSEI (09-09-2017 11:53:47)
Exécuté depuis C:\Users\-San\Desktop
Profils chargés: -San (Profils disponibles: -San)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\SyncUp\Server\SyncUp Server.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
() C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8447192 2015-01-28] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-08-01] (AVAST Software)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3216032 2015-04-29] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\Run: [SideSync] => C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe [12476064 2017-08-09] ()
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {27910091-d39d-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {279100a7-d39d-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {279100b2-d39d-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {279100d3-d39d-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {ae17c793-d975-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{36A7B5ED-B7CD-4E0A-8703-B5D360693A51}: [DhcpNameServer] 10.11.0.1
Tcpip\..\Interfaces\{E0033330-FA8F-4642-BBAB-7380878435A0}: [DhcpNameServer] 89.2.0.1 89.2.0.2
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-873874788-4279629544-91374092-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.fr/
HKU\S-1-5-21-873874788-4279629544-91374092-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-873874788-4279629544-91374092-1001 -> DefaultScope {0D606102-6597-444D-9733-5D3AB3ED24F3} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-873874788-4279629544-91374092-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-873874788-4279629544-91374092-1001 -> {0D606102-6597-444D-9733-5D3AB3ED24F3} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-873874788-4279629544-91374092-1001 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-07-11] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-07-11] (AVAST Software)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\-San\AppData\Roaming\Mozilla\Firefox\Profiles\tz6g68u3.default-1491260309506 [2017-09-04]
FF Extension: (Avast SafePrice) - C:\Users\-San\AppData\Roaming\Mozilla\Firefox\Profiles\tz6g68u3.default-1491260309506\Extensions\sp@avast.com.xpi [2017-07-11]
FF Extension: (Avast Online Security) - C:\Users\-San\AppData\Roaming\Mozilla\Firefox\Profiles\tz6g68u3.default-1491260309506\Extensions\wrc@avast.com.xpi [2017-07-11]
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-12] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-12] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-12] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-12] (Foxit Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-04-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin HKU\S-1-5-21-873874788-4279629544-91374092-1001: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default [2017-09-08]
CHR Extension: (Google Slides) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-26]
CHR Extension: (Duolingo sur le Web) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2016-09-01]
CHR Extension: (Google Docs) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-26]
CHR Extension: (Google Drive) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Adblock Plus) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (Recherche Google) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Universe) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebkhmhnhknbjjggjfagcaaoimilkogcn [2015-09-26]
CHR Extension: (PanicButton) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2015-12-17]
CHR Extension: (Google Sheets) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-26]
CHR Extension: (Bureau à distance Google Chrome) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-01-19]
CHR Extension: (Google Docs hors connexion) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-29]
CHR Extension: (SaltyBet+) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\kecciaioaghjcldgoonciaahfedkoafc [2016-08-23]
CHR Extension: (Humility) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhbfcidphkaciknigkhlfmjilfkkkcke [2017-01-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-26]
CHR Extension: (Chrome Media Router) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-01-20]
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-09-09]
CHR Extension: (Duolingo sur le Web) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2017-01-19]
CHR Extension: (BetterTTV) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2017-04-21]
CHR Extension: (Adblock Plus) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-13]
CHR Extension: (Universe) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ebkhmhnhknbjjggjfagcaaoimilkogcn [2017-01-19]
CHR Extension: (PanicButton) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2017-01-19]
CHR Extension: (AdBlock) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-08-10]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Chrome Media Router) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-01-20]
CHR Extension: (Google Slides) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-19]
CHR Extension: (Google Docs) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-19]
CHR Extension: (Google Drive) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-19]
CHR Extension: (YouTube) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-19]
CHR Extension: (Avast SafePrice) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-01-19]
CHR Extension: (Google Sheets) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-19]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2017-01-19]
CHR Extension: (Google Docs hors connexion) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-19]
CHR Extension: (Avast Online Security) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-01-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-19]
CHR Extension: (Chrome Media Router) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-19]
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\System Profile [2017-01-20]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Fichier non signé]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-08-01] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-08-01] (AVAST Software)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-24] (MAGIX AG) [Fichier non signé]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Fichier non signé]
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [255040 2014-08-25] (WildTangent)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2017-07-26] () [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-07-10] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2014-01-13] (Wacom Technology, Corp.)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R0 assdv2; C:\Windows\System32\Drivers\assdv2.sys [21816 2013-12-05] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [320008 2017-08-01] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-08-01] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-08-01] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57728 2017-08-01] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-07-11] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41800 2017-07-11] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146704 2017-08-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-07-11] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-07-11] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015880 2017-08-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-07-11] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-07-11] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-07-11] (AVAST Software)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-08-24] ()
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-07-26] (Huawei Technologies Co., Ltd.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [192960 2017-08-30] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\DRIVERS\farflt.sys [101824 2017-09-08] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-09-08] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253888 2017-09-08] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [94144 2017-09-09] (Malwarebytes)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83096 2015-11-25] (McAfee, Inc.)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-16] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-09 11:53 - 2017-09-09 11:55 - 000022723 _____ C:\Users\-San\Desktop\FRST.txt
2017-09-09 11:53 - 2017-09-09 11:53 - 002395648 _____ (Farbar) C:\Users\-San\Desktop\FRST64.exe
2017-09-09 11:53 - 2017-09-09 11:53 - 000000000 ____D C:\FRST
2017-09-09 07:22 - 2017-09-09 07:22 - 000030365 _____ C:\Users\-San\Downloads\zUoy7gV.jpeg
2017-09-09 07:21 - 2017-09-09 07:21 - 000042961 _____ C:\Users\-San\Downloads\RaxQTL0.jpeg
2017-09-08 18:25 - 2017-09-08 18:25 - 000040784 _____ C:\Users\-San\Downloads\BV-JDQNCUAAKbX-.jpg-large
2017-09-08 16:52 - 2017-09-08 16:52 - 000001550 _____ C:\Users\-San\Desktop\AdwCleaner[C1] 1.txt
2017-09-08 16:45 - 2017-09-08 16:45 - 008182736 _____ (Malwarebytes) C:\Users\-San\Downloads\adwcleaner_7.0.2.1 (1).exe
2017-09-08 16:44 - 2017-09-08 16:44 - 002869632 _____ C:\Users\-San\Downloads\zhpcleaner_2017.8.31.148 (2).exe
2017-09-08 16:44 - 2017-09-08 16:44 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-09-08 16:39 - 2017-09-08 16:39 - 000004632 _____ C:\Users\-San\Desktop\ZHPCleaner 1.txt
2017-09-08 16:35 - 2017-09-08 16:36 - 000004629 _____ C:\Users\-San\Desktop\ZHPCleaner.txt
2017-09-08 16:26 - 2017-09-08 16:45 - 000000906 _____ C:\Users\-San\Desktop\ZHPCleaner.lnk
2017-09-08 16:26 - 2017-09-08 16:26 - 002869632 _____ C:\Users\-San\Downloads\zhpcleaner_2017.8.31.148 (1).exe
2017-09-08 16:25 - 2017-09-08 16:25 - 008182736 _____ (Malwarebytes) C:\Users\-San\Downloads\adwcleaner_7.0.2.1.exe
2017-09-08 16:10 - 2017-09-08 16:10 - 002869632 _____ C:\Users\-San\Downloads\zhpcleaner_2017.8.31.148.exe
2017-09-08 10:20 - 2017-09-08 16:45 - 000000000 ____D C:\Users\-San\AppData\Roaming\ZHP
2017-09-08 10:20 - 2017-09-08 16:11 - 000000000 ____D C:\Users\-San\AppData\Local\ZHP
2017-09-08 10:19 - 2017-09-08 10:19 - 002827136 _____ C:\Users\-San\Downloads\zhpdiag_2017.8.31.148.exe
2017-09-07 22:15 - 2017-09-08 16:52 - 000101824 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-09-01 17:24 - 2017-09-01 17:24 - 000210953 _____ C:\Users\-San\Downloads\Facture du 28%2f06%2f2017.pdf
2017-08-30 13:06 - 2017-08-30 13:06 - 000112085 _____ C:\Users\-San\Downloads\Cy4Ru87UsAAt3VM (1).jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000207441 _____ C:\Users\-San\Downloads\Cy1dvioVIAAhcnQ.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000165123 _____ C:\Users\-San\Downloads\Cy3t0soUsAAIRIm.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000155629 _____ C:\Users\-San\Downloads\Cy4jqDjUoAEKgXF.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000151029 _____ C:\Users\-San\Downloads\Cy3t2q1UcAAeQdr.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000130111 _____ C:\Users\-San\Downloads\Cy1ryRCVQAM71ud.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000119118 _____ C:\Users\-San\Downloads\Cy3t1dXVQAAISfN.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000112085 _____ C:\Users\-San\Downloads\Cy4Ru87UsAAt3VM.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000069882 _____ C:\Users\-San\Downloads\Cy4R5NAUkAAM5-L.jpg-orig
2017-08-30 11:57 - 2017-09-09 10:51 - 000094144 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-08-30 11:57 - 2017-09-08 16:52 - 000253888 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-08-30 11:57 - 2017-09-08 16:52 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-08-30 11:57 - 2017-08-30 11:57 - 000192960 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-08-30 11:57 - 2017-08-30 11:57 - 000001890 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-30 11:57 - 2017-08-30 11:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-30 11:56 - 2017-09-09 11:53 - 000000000 _____ C:\Windows\SysWOW64\last.dump
2017-08-28 06:56 - 2017-08-28 06:56 - 000165548 _____ C:\Users\-San\Downloads\ClpUbqpUoAAig1t.jpg-orig
2017-08-25 11:11 - 2017-08-25 11:11 - 000006456 _____ C:\Users\-San\Downloads\Marie-ange-Dalin.pdf
2017-08-22 19:51 - 2017-04-21 23:53 - 000029376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2017-08-22 19:51 - 2017-04-21 23:53 - 000018600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-08-22 19:51 - 2017-04-21 23:50 - 000030912 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-08-22 19:51 - 2017-04-21 23:50 - 000018592 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-08-22 19:51 - 2017-04-11 20:27 - 000987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2017-08-22 19:51 - 2017-04-11 20:27 - 000485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2017-08-22 19:51 - 2017-03-15 20:15 - 000993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2017-08-22 19:51 - 2017-03-15 20:15 - 000690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2017-08-21 13:06 - 2017-08-21 13:06 - 008726369 _____ C:\Users\-San\Downloads\drive-download-20170821T110459Z-001.zip
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-09 07:22 - 2015-10-08 23:02 - 039152640 ___SH C:\Users\-San\Downloads\Thumbs.db
2017-09-08 16:51 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-08 16:50 - 2016-08-27 20:27 - 000000000 ____D C:\AdwCleaner
2017-09-08 16:37 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-09-08 16:36 - 2016-03-11 23:55 - 000000000 ____D C:\Users\-San\AppData\Local\Akamai
2017-09-07 22:29 - 2015-09-26 13:09 - 000003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-873874788-4279629544-91374092-1001
2017-09-07 22:22 - 2015-09-26 14:42 - 000000000 ____D C:\Program Files (x86)\Google
2017-09-07 22:15 - 2015-09-27 10:05 - 000740352 ___SH C:\Users\-San\Desktop\Thumbs.db
2017-09-07 22:15 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2017-09-06 15:16 - 2014-09-06 21:37 - 000789456 _____ C:\Windows\system32\prfh0816.dat
2017-09-06 15:16 - 2014-09-06 21:37 - 000163968 _____ C:\Windows\system32\prfc0816.dat
2017-09-06 15:16 - 2014-09-06 20:34 - 000812006 _____ C:\Windows\system32\perfh00C.dat
2017-09-06 15:16 - 2014-09-06 20:34 - 000159544 _____ C:\Windows\system32\perfc00C.dat
2017-09-06 15:16 - 2014-09-06 19:46 - 000754948 _____ C:\Windows\system32\perfh007.dat
2017-09-06 15:16 - 2014-09-06 19:46 - 000159040 _____ C:\Windows\system32\perfc007.dat
2017-09-06 15:16 - 2014-03-18 12:03 - 003695380 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-05 18:49 - 2017-03-15 20:52 - 000000000 ___RD C:\Program Files (x86)\Skype
2017-09-05 18:49 - 2015-04-29 19:01 - 000000000 ____D C:\ProgramData\Skype
2017-08-30 10:09 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2017-08-29 09:57 - 2016-03-21 07:57 - 000373760 ___SH C:\Users\-San\Documents\Thumbs.db
2017-08-28 22:24 - 2015-09-26 14:42 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-28 22:24 - 2015-09-26 14:42 - 000002168 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-28 16:46 - 2017-05-07 21:37 - 000000226 _____ C:\Users\-San\SecurityKISSTunnel.config
2017-08-28 16:46 - 2017-05-07 21:36 - 000000000 ____D C:\Program Files\SecurityKISS Tunnel
2017-08-28 16:46 - 2015-09-26 13:02 - 000000000 ____D C:\Users\-San
2017-08-25 14:39 - 2015-04-29 18:55 - 000000000 ____D C:\Program Files (x86)\Foxit PhantomPDF
2017-08-25 11:32 - 2017-06-28 13:29 - 000005899 _____ C:\Users\-San\Documents\DALIN marie-ange LM.pdf
2017-08-24 11:27 - 2016-12-29 20:28 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-08-22 19:59 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2017-08-21 00:29 - 2017-05-11 21:45 - 000000000 ____D C:\Users\-San\Desktop\Fe
2017-08-19 19:10 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2017-08-17 09:08 - 2016-12-31 16:21 - 000012244 _____ C:\Users\-San\Documents\DALIN LM.pdf
2017-08-12 12:40 - 2017-04-10 10:06 - 000003914 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1466053026
2017-08-12 12:40 - 2016-06-16 06:57 - 000001066 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-08-11 06:43 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-10 07:05 - 2013-08-22 16:44 - 000440040 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-10 00:39 - 2015-12-19 00:27 - 001015880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2017-08-10 00:39 - 2015-12-19 00:27 - 000146704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
==================== Fichiers à la racine de certains dossiers =======
2016-09-19 01:33 - 2016-09-19 01:39 - 000000096 _____ () C:\Users\-San\AppData\Roaming\Camdata.ini
2016-09-19 01:33 - 2016-09-19 01:39 - 000000408 _____ () C:\Users\-San\AppData\Roaming\CamLayout.ini
2016-09-19 01:33 - 2016-09-19 01:39 - 000000408 _____ () C:\Users\-San\AppData\Roaming\CamShapes.ini
2016-09-19 01:32 - 2016-09-19 01:40 - 000004536 _____ () C:\Users\-San\AppData\Roaming\CamStudio.cfg
2015-09-26 15:55 - 2017-01-13 21:18 - 000000113 _____ () C:\Users\-San\AppData\Roaming\D2Info0
2015-10-17 19:31 - 2017-01-04 16:41 - 000000117 _____ () C:\Users\-San\AppData\Roaming\D2Info1
2015-09-26 15:55 - 2017-01-11 22:07 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_1
2015-09-26 16:27 - 2017-01-13 21:20 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_2
2015-09-27 02:44 - 2017-01-09 14:41 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_3
2015-10-06 14:48 - 2017-01-08 20:51 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_4
2015-12-21 17:29 - 2017-01-04 17:01 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_5
2015-10-17 19:31 - 2017-01-04 16:42 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId1_1
2015-11-20 23:31 - 2016-12-30 22:52 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId1_2
2015-11-22 18:23 - 2016-05-27 20:23 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId1_3
2016-05-14 22:22 - 2016-05-14 22:25 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId1_4
2016-09-19 01:23 - 2016-09-19 01:37 - 000000096 _____ () C:\Users\-San\AppData\Roaming\version2.xml
2017-06-12 17:48 - 2017-06-12 17:48 - 000006171 _____ () C:\Users\-San\AppData\Local\recently-used.xbel
2015-04-29 18:46 - 2015-04-29 18:46 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2016-09-19 01:07 - 2016-09-19 01:07 - 000000016 _____ () C:\ProgramData\mntemp
2016-09-19 01:07 - 2016-09-19 01:07 - 000005085 _____ () C:\ProgramData\oqztiqep.adk
Certains fichiers dans TEMP:
====================
2016-03-12 00:17 - 2016-03-12 00:17 - 000000512 _____ () C:\Users\-San\AppData\Local\Temp\fb1d5c12ab65a33663c67a42c8bf47b2.dll
2016-12-18 21:18 - 2016-12-18 21:18 - 038551552 _____ () C:\Users\-San\AppData\Local\Temp\FFSetupLatest.exe
2016-08-25 01:21 - 2016-08-25 01:21 - 002458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\-San\AppData\Local\Temp\libeay32.dll
2016-02-23 12:43 - 2016-02-23 12:43 - 000120336 _____ (McAfee, Inc.) C:\Users\-San\AppData\Local\Temp\McCSPInstall.dll
2016-05-10 04:19 - 2016-02-23 12:43 - 000123360 _____ (McAfee Inc.) C:\Users\-San\AppData\Local\Temp\mccspuninstall.exe
2016-08-25 01:21 - 2016-08-25 01:21 - 000970912 _____ (Microsoft Corporation) C:\Users\-San\AppData\Local\Temp\msvcr120.dll
2016-04-03 21:19 - 2016-05-09 22:20 - 045196928 _____ (Skype Technologies S.A.) C:\Users\-San\AppData\Local\Temp\SkypeSetup.exe
2016-08-25 01:21 - 2016-08-25 01:21 - 000772672 _____ () C:\Users\-San\AppData\Local\Temp\sqlite3.dll
2016-03-27 03:15 - 2016-03-27 03:15 - 003225688 _____ (Google Inc.) C:\Users\-San\AppData\Local\Temp\{201D74A5-D5F1-43DD-9E55-08949AEA56C7}-49.0.2623.110_49.0.2623.87_chrome_updater.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-09-02 10:23
==================== Fin de FRST.txt ============================
Exécuté par -San (administrateur) sur SENSEI (09-09-2017 11:53:47)
Exécuté depuis C:\Users\-San\Desktop
Profils chargés: -San (Profils disponibles: -San)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\WTabletServiceCon.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe
() C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\SyncUp\Server\SyncUp Server.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe
(ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
() C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe
(Wacom Technology) C:\Program Files\Tablet\Pen\WacomHost.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
() C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSPanel.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8447192 2015-01-28] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-08-01] (AVAST Software)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3216032 2015-04-29] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\ASUSWSLoader.exe [63296 2014-08-20] ()
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\Run: [SideSync] => C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe [12476064 2017-08-09] ()
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {27910091-d39d-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {279100a7-d39d-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {279100b2-d39d-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {279100d3-d39d-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-873874788-4279629544-91374092-1001\...\MountPoints2: {ae17c793-d975-11e6-82a8-1c872ccc92f8} - "E:\HiSuiteDownLoader.exe"
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{36A7B5ED-B7CD-4E0A-8703-B5D360693A51}: [DhcpNameServer] 10.11.0.1
Tcpip\..\Interfaces\{E0033330-FA8F-4642-BBAB-7380878435A0}: [DhcpNameServer] 89.2.0.1 89.2.0.2
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-873874788-4279629544-91374092-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.fr/
HKU\S-1-5-21-873874788-4279629544-91374092-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-873874788-4279629544-91374092-1001 -> DefaultScope {0D606102-6597-444D-9733-5D3AB3ED24F3} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-873874788-4279629544-91374092-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-873874788-4279629544-91374092-1001 -> {0D606102-6597-444D-9733-5D3AB3ED24F3} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-873874788-4279629544-91374092-1001 -> {d4fee3d1-1014-4db8-a824-573bf9ab51c7} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2017-07-11] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2017-07-11] (AVAST Software)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\-San\AppData\Roaming\Mozilla\Firefox\Profiles\tz6g68u3.default-1491260309506 [2017-09-04]
FF Extension: (Avast SafePrice) - C:\Users\-San\AppData\Roaming\Mozilla\Firefox\Profiles\tz6g68u3.default-1491260309506\Extensions\sp@avast.com.xpi [2017-07-11]
FF Extension: (Avast Online Security) - C:\Users\-San\AppData\Roaming\Mozilla\Firefox\Profiles\tz6g68u3.default-1491260309506\Extensions\wrc@avast.com.xpi [2017-07-11]
FF Plugin: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-12] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-12] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-12] (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2015-02-12] (Foxit Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-04-01] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @wacom.com/wtPlugin,version=2.1.0.3 -> C:\Program Files (x86)\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] ()
FF Plugin HKU\S-1-5-21-873874788-4279629544-91374092-1001: wacom.com/WacomTabletPlugin -> C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll [2012-12-25] (Wacom)
Chrome:
=======
CHR DefaultProfile: Profile 1
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default [2017-09-08]
CHR Extension: (Google Slides) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-26]
CHR Extension: (Duolingo sur le Web) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2016-09-01]
CHR Extension: (Google Docs) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-26]
CHR Extension: (Google Drive) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (YouTube) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-26]
CHR Extension: (Adblock Plus) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (Recherche Google) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Universe) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\ebkhmhnhknbjjggjfagcaaoimilkogcn [2015-09-26]
CHR Extension: (PanicButton) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2015-12-17]
CHR Extension: (Google Sheets) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-26]
CHR Extension: (Bureau à distance Google Chrome) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2017-01-19]
CHR Extension: (Google Docs hors connexion) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (AdBlock) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-29]
CHR Extension: (SaltyBet+) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\kecciaioaghjcldgoonciaahfedkoafc [2016-08-23]
CHR Extension: (Humility) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhbfcidphkaciknigkhlfmjilfkkkcke [2017-01-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-26]
CHR Extension: (Chrome Media Router) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-01-20]
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-09-09]
CHR Extension: (Duolingo sur le Web) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2017-01-19]
CHR Extension: (BetterTTV) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2017-04-21]
CHR Extension: (Adblock Plus) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-13]
CHR Extension: (Universe) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ebkhmhnhknbjjggjfagcaaoimilkogcn [2017-01-19]
CHR Extension: (PanicButton) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2017-01-19]
CHR Extension: (AdBlock) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-08-10]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]
CHR Extension: (Chrome Media Router) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2 [2017-01-20]
CHR Extension: (Google Slides) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-19]
CHR Extension: (Google Docs) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-19]
CHR Extension: (Google Drive) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-19]
CHR Extension: (YouTube) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-19]
CHR Extension: (Avast SafePrice) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2017-01-19]
CHR Extension: (Google Sheets) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-19]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2017-01-19]
CHR Extension: (Google Docs hors connexion) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-19]
CHR Extension: (Avast Online Security) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2017-01-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-19]
CHR Extension: (Gmail) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-19]
CHR Extension: (Chrome Media Router) - C:\Users\-San\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-19]
CHR Profile: C:\Users\-San\AppData\Local\Google\Chrome\User Data\System Profile [2017-01-20]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Fichier non signé]
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-08-01] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-08-01] (AVAST Software)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-24] (MAGIX AG) [Fichier non signé]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Fichier non signé]
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [255040 2014-08-25] (WildTangent)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2017-07-26] () [Fichier non signé]
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-07-10] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-21] (Malwarebytes)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 WTabletServiceCon; C:\Program Files\Tablet\Pen\WTabletServiceCon.exe [627992 2014-01-13] (Wacom Technology, Corp.)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] ()
R0 assdv2; C:\Windows\System32\Drivers\assdv2.sys [21816 2013-12-05] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [320008 2017-08-01] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-08-01] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-08-01] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57728 2017-08-01] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-07-11] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41800 2017-07-11] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146704 2017-08-10] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-07-11] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-07-11] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015880 2017-08-10] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-07-11] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-07-11] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-07-11] (AVAST Software)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-08-24] ()
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2017-07-26] (Huawei Technologies Co., Ltd.)
R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [192960 2017-08-30] (Malwarebytes)
R3 MBAMFarflt; C:\Windows\system32\DRIVERS\farflt.sys [101824 2017-09-08] (Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-09-08] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253888 2017-09-08] (Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [94144 2017-09-09] (Malwarebytes)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [83096 2015-11-25] (McAfee, Inc.)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-16] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-09 11:53 - 2017-09-09 11:55 - 000022723 _____ C:\Users\-San\Desktop\FRST.txt
2017-09-09 11:53 - 2017-09-09 11:53 - 002395648 _____ (Farbar) C:\Users\-San\Desktop\FRST64.exe
2017-09-09 11:53 - 2017-09-09 11:53 - 000000000 ____D C:\FRST
2017-09-09 07:22 - 2017-09-09 07:22 - 000030365 _____ C:\Users\-San\Downloads\zUoy7gV.jpeg
2017-09-09 07:21 - 2017-09-09 07:21 - 000042961 _____ C:\Users\-San\Downloads\RaxQTL0.jpeg
2017-09-08 18:25 - 2017-09-08 18:25 - 000040784 _____ C:\Users\-San\Downloads\BV-JDQNCUAAKbX-.jpg-large
2017-09-08 16:52 - 2017-09-08 16:52 - 000001550 _____ C:\Users\-San\Desktop\AdwCleaner[C1] 1.txt
2017-09-08 16:45 - 2017-09-08 16:45 - 008182736 _____ (Malwarebytes) C:\Users\-San\Downloads\adwcleaner_7.0.2.1 (1).exe
2017-09-08 16:44 - 2017-09-08 16:44 - 002869632 _____ C:\Users\-San\Downloads\zhpcleaner_2017.8.31.148 (2).exe
2017-09-08 16:44 - 2017-09-08 16:44 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-09-08 16:39 - 2017-09-08 16:39 - 000004632 _____ C:\Users\-San\Desktop\ZHPCleaner 1.txt
2017-09-08 16:35 - 2017-09-08 16:36 - 000004629 _____ C:\Users\-San\Desktop\ZHPCleaner.txt
2017-09-08 16:26 - 2017-09-08 16:45 - 000000906 _____ C:\Users\-San\Desktop\ZHPCleaner.lnk
2017-09-08 16:26 - 2017-09-08 16:26 - 002869632 _____ C:\Users\-San\Downloads\zhpcleaner_2017.8.31.148 (1).exe
2017-09-08 16:25 - 2017-09-08 16:25 - 008182736 _____ (Malwarebytes) C:\Users\-San\Downloads\adwcleaner_7.0.2.1.exe
2017-09-08 16:10 - 2017-09-08 16:10 - 002869632 _____ C:\Users\-San\Downloads\zhpcleaner_2017.8.31.148.exe
2017-09-08 10:20 - 2017-09-08 16:45 - 000000000 ____D C:\Users\-San\AppData\Roaming\ZHP
2017-09-08 10:20 - 2017-09-08 16:11 - 000000000 ____D C:\Users\-San\AppData\Local\ZHP
2017-09-08 10:19 - 2017-09-08 10:19 - 002827136 _____ C:\Users\-San\Downloads\zhpdiag_2017.8.31.148.exe
2017-09-07 22:15 - 2017-09-08 16:52 - 000101824 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2017-09-01 17:24 - 2017-09-01 17:24 - 000210953 _____ C:\Users\-San\Downloads\Facture du 28%2f06%2f2017.pdf
2017-08-30 13:06 - 2017-08-30 13:06 - 000112085 _____ C:\Users\-San\Downloads\Cy4Ru87UsAAt3VM (1).jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000207441 _____ C:\Users\-San\Downloads\Cy1dvioVIAAhcnQ.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000165123 _____ C:\Users\-San\Downloads\Cy3t0soUsAAIRIm.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000155629 _____ C:\Users\-San\Downloads\Cy4jqDjUoAEKgXF.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000151029 _____ C:\Users\-San\Downloads\Cy3t2q1UcAAeQdr.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000130111 _____ C:\Users\-San\Downloads\Cy1ryRCVQAM71ud.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000119118 _____ C:\Users\-San\Downloads\Cy3t1dXVQAAISfN.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000112085 _____ C:\Users\-San\Downloads\Cy4Ru87UsAAt3VM.jpg-orig
2017-08-30 13:03 - 2017-08-30 13:03 - 000069882 _____ C:\Users\-San\Downloads\Cy4R5NAUkAAM5-L.jpg-orig
2017-08-30 11:57 - 2017-09-09 10:51 - 000094144 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2017-08-30 11:57 - 2017-09-08 16:52 - 000253888 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-08-30 11:57 - 2017-09-08 16:52 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2017-08-30 11:57 - 2017-08-30 11:57 - 000192960 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys
2017-08-30 11:57 - 2017-08-30 11:57 - 000001890 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-08-30 11:57 - 2017-08-30 11:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-08-30 11:56 - 2017-09-09 11:53 - 000000000 _____ C:\Windows\SysWOW64\last.dump
2017-08-28 06:56 - 2017-08-28 06:56 - 000165548 _____ C:\Users\-San\Downloads\ClpUbqpUoAAig1t.jpg-orig
2017-08-25 11:11 - 2017-08-25 11:11 - 000006456 _____ C:\Users\-San\Downloads\Marie-ange-Dalin.pdf
2017-08-22 19:51 - 2017-04-21 23:53 - 000029376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aspnet_counters.dll
2017-08-22 19:51 - 2017-04-21 23:53 - 000018600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr100_clr0400.dll
2017-08-22 19:51 - 2017-04-21 23:50 - 000030912 _____ (Microsoft Corporation) C:\Windows\system32\aspnet_counters.dll
2017-08-22 19:51 - 2017-04-21 23:50 - 000018592 _____ (Microsoft Corporation) C:\Windows\system32\msvcr100_clr0400.dll
2017-08-22 19:51 - 2017-04-11 20:27 - 000987840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2017-08-22 19:51 - 2017-04-11 20:27 - 000485576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2017-08-22 19:51 - 2017-03-15 20:15 - 000993632 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2017-08-22 19:51 - 2017-03-15 20:15 - 000690008 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2017-08-21 13:06 - 2017-08-21 13:06 - 008726369 _____ C:\Users\-San\Downloads\drive-download-20170821T110459Z-001.zip
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-09-09 07:22 - 2015-10-08 23:02 - 039152640 ___SH C:\Users\-San\Downloads\Thumbs.db
2017-09-08 16:51 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-09-08 16:50 - 2016-08-27 20:27 - 000000000 ____D C:\AdwCleaner
2017-09-08 16:37 - 2013-08-22 15:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2017-09-08 16:36 - 2016-03-11 23:55 - 000000000 ____D C:\Users\-San\AppData\Local\Akamai
2017-09-07 22:29 - 2015-09-26 13:09 - 000003594 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-873874788-4279629544-91374092-1001
2017-09-07 22:22 - 2015-09-26 14:42 - 000000000 ____D C:\Program Files (x86)\Google
2017-09-07 22:15 - 2015-09-27 10:05 - 000740352 ___SH C:\Users\-San\Desktop\Thumbs.db
2017-09-07 22:15 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2017-09-06 15:16 - 2014-09-06 21:37 - 000789456 _____ C:\Windows\system32\prfh0816.dat
2017-09-06 15:16 - 2014-09-06 21:37 - 000163968 _____ C:\Windows\system32\prfc0816.dat
2017-09-06 15:16 - 2014-09-06 20:34 - 000812006 _____ C:\Windows\system32\perfh00C.dat
2017-09-06 15:16 - 2014-09-06 20:34 - 000159544 _____ C:\Windows\system32\perfc00C.dat
2017-09-06 15:16 - 2014-09-06 19:46 - 000754948 _____ C:\Windows\system32\perfh007.dat
2017-09-06 15:16 - 2014-09-06 19:46 - 000159040 _____ C:\Windows\system32\perfc007.dat
2017-09-06 15:16 - 2014-03-18 12:03 - 003695380 _____ C:\Windows\system32\PerfStringBackup.INI
2017-09-05 18:49 - 2017-03-15 20:52 - 000000000 ___RD C:\Program Files (x86)\Skype
2017-09-05 18:49 - 2015-04-29 19:01 - 000000000 ____D C:\ProgramData\Skype
2017-08-30 10:09 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2017-08-29 09:57 - 2016-03-21 07:57 - 000373760 ___SH C:\Users\-San\Documents\Thumbs.db
2017-08-28 22:24 - 2015-09-26 14:42 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-28 22:24 - 2015-09-26 14:42 - 000002168 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-28 16:46 - 2017-05-07 21:37 - 000000226 _____ C:\Users\-San\SecurityKISSTunnel.config
2017-08-28 16:46 - 2017-05-07 21:36 - 000000000 ____D C:\Program Files\SecurityKISS Tunnel
2017-08-28 16:46 - 2015-09-26 13:02 - 000000000 ____D C:\Users\-San
2017-08-25 14:39 - 2015-04-29 18:55 - 000000000 ____D C:\Program Files (x86)\Foxit PhantomPDF
2017-08-25 11:32 - 2017-06-28 13:29 - 000005899 _____ C:\Users\-San\Documents\DALIN marie-ange LM.pdf
2017-08-24 11:27 - 2016-12-29 20:28 - 000077440 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-08-22 19:59 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2017-08-21 00:29 - 2017-05-11 21:45 - 000000000 ____D C:\Users\-San\Desktop\Fe
2017-08-19 19:10 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2017-08-17 09:08 - 2016-12-31 16:21 - 000012244 _____ C:\Users\-San\Documents\DALIN LM.pdf
2017-08-12 12:40 - 2017-04-10 10:06 - 000003914 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1466053026
2017-08-12 12:40 - 2016-06-16 06:57 - 000001066 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-08-11 06:43 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-10 07:05 - 2013-08-22 16:44 - 000440040 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-10 00:39 - 2015-12-19 00:27 - 001015880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2017-08-10 00:39 - 2015-12-19 00:27 - 000146704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
==================== Fichiers à la racine de certains dossiers =======
2016-09-19 01:33 - 2016-09-19 01:39 - 000000096 _____ () C:\Users\-San\AppData\Roaming\Camdata.ini
2016-09-19 01:33 - 2016-09-19 01:39 - 000000408 _____ () C:\Users\-San\AppData\Roaming\CamLayout.ini
2016-09-19 01:33 - 2016-09-19 01:39 - 000000408 _____ () C:\Users\-San\AppData\Roaming\CamShapes.ini
2016-09-19 01:32 - 2016-09-19 01:40 - 000004536 _____ () C:\Users\-San\AppData\Roaming\CamStudio.cfg
2015-09-26 15:55 - 2017-01-13 21:18 - 000000113 _____ () C:\Users\-San\AppData\Roaming\D2Info0
2015-10-17 19:31 - 2017-01-04 16:41 - 000000117 _____ () C:\Users\-San\AppData\Roaming\D2Info1
2015-09-26 15:55 - 2017-01-11 22:07 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_1
2015-09-26 16:27 - 2017-01-13 21:20 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_2
2015-09-27 02:44 - 2017-01-09 14:41 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_3
2015-10-06 14:48 - 2017-01-08 20:51 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_4
2015-12-21 17:29 - 2017-01-04 17:01 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId0_5
2015-10-17 19:31 - 2017-01-04 16:42 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId1_1
2015-11-20 23:31 - 2016-12-30 22:52 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId1_2
2015-11-22 18:23 - 2016-05-27 20:23 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId1_3
2016-05-14 22:22 - 2016-05-14 22:25 - 000000008 _____ () C:\Users\-San\AppData\Roaming\DofusAppId1_4
2016-09-19 01:23 - 2016-09-19 01:37 - 000000096 _____ () C:\Users\-San\AppData\Roaming\version2.xml
2017-06-12 17:48 - 2017-06-12 17:48 - 000006171 _____ () C:\Users\-San\AppData\Local\recently-used.xbel
2015-04-29 18:46 - 2015-04-29 18:46 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2016-09-19 01:07 - 2016-09-19 01:07 - 000000016 _____ () C:\ProgramData\mntemp
2016-09-19 01:07 - 2016-09-19 01:07 - 000005085 _____ () C:\ProgramData\oqztiqep.adk
Certains fichiers dans TEMP:
====================
2016-03-12 00:17 - 2016-03-12 00:17 - 000000512 _____ () C:\Users\-San\AppData\Local\Temp\fb1d5c12ab65a33663c67a42c8bf47b2.dll
2016-12-18 21:18 - 2016-12-18 21:18 - 038551552 _____ () C:\Users\-San\AppData\Local\Temp\FFSetupLatest.exe
2016-08-25 01:21 - 2016-08-25 01:21 - 002458672 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Users\-San\AppData\Local\Temp\libeay32.dll
2016-02-23 12:43 - 2016-02-23 12:43 - 000120336 _____ (McAfee, Inc.) C:\Users\-San\AppData\Local\Temp\McCSPInstall.dll
2016-05-10 04:19 - 2016-02-23 12:43 - 000123360 _____ (McAfee Inc.) C:\Users\-San\AppData\Local\Temp\mccspuninstall.exe
2016-08-25 01:21 - 2016-08-25 01:21 - 000970912 _____ (Microsoft Corporation) C:\Users\-San\AppData\Local\Temp\msvcr120.dll
2016-04-03 21:19 - 2016-05-09 22:20 - 045196928 _____ (Skype Technologies S.A.) C:\Users\-San\AppData\Local\Temp\SkypeSetup.exe
2016-08-25 01:21 - 2016-08-25 01:21 - 000772672 _____ () C:\Users\-San\AppData\Local\Temp\sqlite3.dll
2016-03-27 03:15 - 2016-03-27 03:15 - 003225688 _____ (Google Inc.) C:\Users\-San\AppData\Local\Temp\{201D74A5-D5F1-43DD-9E55-08949AEA56C7}-49.0.2623.110_49.0.2623.87_chrome_updater.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-09-02 10:23
==================== Fin de FRST.txt ============================