Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 26-11-2017 01
Exécuté par Evelyne (administrateur) sur EVELYNE (27-11-2017 10:01:59)
Exécuté depuis C:\Users\Evelyne\Desktop
Profils chargés: Evelyne (Profils disponibles: Evelyne)
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\stacsv64.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Realtek) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtWLan.exe
() C:\Windows\runSW.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Realtek) C:\Windows\SwUSB.exe
(SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Google, Inc) C:\Users\Evelyne\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Numera) C:\Program Files (x86)\BiLink Gateway\GatewaySysTray.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(Creative Technology Ltd.) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1657128 2008-11-25] (Synaptics, Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [2041112 2008-09-26] (Dell Inc.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [462848 2009-03-19] (IDT, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807600 2009-11-13] ()
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [237693 2008-12-09] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell.exe [442536 2008-11-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDVDDXSrv] => C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [144616 2011-03-01] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [144520 2017-07-19] (Panda Security, S.L.)
HKLM-x32\...\RunOnce: [Launcher] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe [165104 2009-04-17] (Softthinks)
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\Run: [Google Update] => C:\Users\Evelyne\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-11-14] (Google Inc.)
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\Run: [Google Photos Backup] => C:\Users\Evelyne\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-08] (Google, Inc)
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\Run: [WMPNSCFG] => C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\Run: [GoogleChromeAutoLaunch_C05975E2D9F2B1889CE3CBF4A89C0920] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [874648 2016-04-06] (Google Inc.)
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\MountPoints2: {42827163-aaf7-11e1-b8cc-8d102a66539e} - G:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2006-11-02] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Omron BiLink Gateway.lnk [2016-01-15]
ShortcutTarget: Omron BiLink Gateway.lnk -> C:\Windows\Installer\{2C632C81-343F-4E7A-A600-237FFD2F33C7}\NewShortcut1_8188288DFAC14FF2859A19505BA528D5.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 8.1 PE.lnk [2013-05-11]
ShortcutTarget: PHOTOfunSTUDIO 8.1 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PlexTools Professional LE.lnk [2012-06-26]
ShortcutTarget: PlexTools Professional LE.lnk -> C:\Program Files (x86)\Plextor\PTPLE\PTPLE.exe (Plextor SA/NV)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2009-07-14]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2009-07-14]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4A792D30-5A7A-4EBB-91DE-080DF06D9E0A}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6F00459B-72CF-4459-A181-9792C8AA9294}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{C4AB47C3-9B85-4B6A-8DD3-A0163C50E068}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://fr.msn.com/?ocid=iehp
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Panda Safe Web -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll => Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => Pas de fichier
BHO-x32: Skype add-on (mastermind) -> {22BF413B-C6D2-4d91-82A9-A0F997BA588C} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04] (Skype Technologies S.A.)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-03-08] (Oracle Corporation)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Panda Safe Web -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll => Pas de fichier
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-08] (Oracle Corporation)
Toolbar: HKLM-x32 - Panda Safe Web - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll Pas de fichier
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-08-10] [Lagacy] [non signé]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1209149.dll [Pas de fichier]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-03-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-03-08] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-10] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-03-17] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxps://www.google.fr/?gfe_rd=cr&ei=elq8U4bnMYOB8Qe-7YDYDQ&gws_rd=ssl
CHR StartupUrls: Default -> "hxxps://www.google.fr/?gfe_rd=cr&ei=elq8U4bnMYOB8Qe-7YDYDQ&gws_rd=ssl"
CHR DefaultSearchURL: Default -> hxxps://pandasecurity.mystart.com/results.php?pr=vmn&id=pandasafeweb&v=1_0_chromeextension_unknown__&searchfeed=web&hsimp=yhs-panda1&ent=ch_ss&q={searchTerms}
CHR DefaultSearchKeyword: Default -> safeWeb
CHR Profile: C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default [2017-11-27]
CHR Extension: (Slides) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-14]
CHR Extension: (Docs) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-14]
CHR Extension: (Google Drive) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-10]
CHR Extension: (CNRTL - CNRTL.fr) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\cojebfpfaaikknofipcimmgclgdkihcp [2014-03-21]
CHR Extension: (Recherche Google) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
CHR Extension: (Gmail hors connexion) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2014-03-21]
CHR Extension: (Sheets) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-14]
CHR Extension: (Google Docs hors connexion) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-20]
CHR Extension: (Gmail) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-08]
CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3353547757-451906959-4124511660-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S2 CLKMSVC10_1628BCEA; C:\Program Files (x86)\CyberLink\PowerDVD DX\Kernel\BD\NavFilter\kmsvc.exe [240360 2011-03-01] (CyberLink)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2009-07-14] (Creative Labs) [Fichier non signé]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2009-07-14] (Creative Labs) [Fichier non signé]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-04] (Creative Technology Ltd) [Fichier non signé]
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2008-12-18] (Stardock Corporation) [Fichier non signé]
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [109024 2017-07-19] (Panda Security, S.L.)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.) [Fichier non signé]
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48784 2017-07-19] (Panda Security, S.L.)
R2 RealtekWlanU; C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe [48856 2014-05-19] (Realtek)
S2 RTLDHCPService; C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe [262360 2014-04-23] (Realtek)
R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-12] ()
S2 SkypeUpdate; C:\Program Files (x86)\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [Fichier non signé]
S3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2009-07-14] (Creative Labs) [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
S3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [115072 2008-11-12] (Huawei Technologies Co., Ltd.) [Fichier non signé]
S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [112896 2008-11-12] (Huawei Technologies Co., Ltd.) [Fichier non signé]
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [105472 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [211008 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [119880 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [124488 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [82800 2017-03-13] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [116784 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [83824 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [134288 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [336168 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [225464 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [121952 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [279536 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [123976 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R3 OA008Ufd; C:\Windows\System32\DRIVERS\OA008Ufd.sys [158592 2009-02-09] (Creative Technology Ltd.)
R3 OA008Vid; C:\Windows\System32\DRIVERS\OA008Vid.sys [310784 2009-02-09] (Creative Technology Ltd.)
S0 PsBoot; C:\Windows\System32\Drivers\PsBoot.sys [40480 2014-03-11] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [178264 2017-07-19] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [137304 2017-07-19] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [206424 2017-07-19] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [132696 2017-07-19] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [146008 2017-07-19] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [116312 2017-07-19] (Panda Security, S.L.)
U3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [72280 2017-05-22] (Panda Security, S.L.)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu_Vista.sys [3959040 2016-03-02] (Realtek Semiconductor Corporation )
R2 {1E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7}; C:\Program Files (x86)\CyberLink\PowerDVD DX\000.fcl [146928 2010-01-07] (CyberLink Corp.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCAMp50a64; System32\Drivers\PCAMp50a64.sys [X]
S3 PCASp50a64; System32\Drivers\PCASp50a64.sys [X]
S3 PCD5SRVC{048DBD20-445E8C82-05040104}; \??\C:\PROGRA~2\DELLSU~1\HWDiag\bin\PCD5SRVC_x64.pkms [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-11-27 10:01 - 2017-11-27 10:04 - 000024365 _____ C:\Users\Evelyne\Desktop\FRST.txt
2017-11-27 10:00 - 2017-11-27 10:00 - 002391552 _____ (Farbar) C:\Users\Evelyne\Desktop\FRST64.exe
2017-11-27 09:58 - 2017-11-27 09:58 - 000001074 ____N C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3353547757-451906959-4124511660-1000UA.job
2017-11-27 09:58 - 2017-11-27 09:58 - 000001022 ____N C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3353547757-451906959-4124511660-1000Core.job
2017-11-27 09:58 - 2014-03-11 16:48 - 000040480 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PsBoot.sys
2017-11-26 23:28 - 2017-05-22 11:29 - 000072280 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2017-11-26 23:10 - 2017-11-26 22:43 - 000007913 _____ C:\Users\Evelyne\Desktop\AdwCleaner[C0].txt
2017-11-26 22:34 - 2017-11-26 22:34 - 008261584 _____ (Malwarebytes) C:\Users\Evelyne\Desktop\adwcleaner_7.0.4.0.exe
2017-11-26 22:12 - 2017-11-26 22:20 - 000007455 _____ C:\Users\Evelyne\Desktop\ZHPCleaner1.txt
2017-11-26 21:45 - 2017-11-26 21:45 - 000010888 _____ C:\Users\Evelyne\Desktop\ZHPCleaner.txt
2017-11-26 21:25 - 2017-11-26 21:25 - 000000740 _____ C:\Users\Evelyne\Desktop\ZHPCleaner.lnk
2017-11-26 21:23 - 2017-11-26 21:24 - 002980736 _____ C:\Users\Evelyne\Desktop\ZHPCleaner.exe
2017-11-26 14:30 - 2017-11-26 23:05 - 000157205 _____ C:\Users\Evelyne\Desktop\ZHPDiag.txt
2017-11-26 14:22 - 2017-11-26 22:53 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\ZHP
2017-11-26 14:22 - 2017-11-26 21:25 - 000000000 ____D C:\Users\Evelyne\AppData\Local\ZHP
2017-11-26 14:22 - 2017-11-26 14:22 - 000000730 _____ C:\Users\Evelyne\Desktop\ZHPDiag.lnk
2017-11-26 14:20 - 2017-11-26 14:20 - 002935680 _____ C:\Users\Evelyne\Desktop\ZHPDiag3.exe
2017-11-26 12:38 - 2017-11-26 12:38 - 000100340 _____ C:\Users\Evelyne\Desktop\UsbFix [Clean 1] EVELYNE.txt
2017-11-26 12:31 - 2017-11-26 12:31 - 000100337 _____ C:\Users\Evelyne\Desktop\UsbFix_Report.txt
2017-11-26 11:45 - 2017-11-21 19:02 - 005535056 _____ C:\Users\Evelyne\Downloads\o1417en_w_scan7031 (1).exe
2017-11-26 11:44 - 2017-11-26 11:44 - 000000000 ____D C:\Users\Evelyne\Downloads\o1417en_w_scan7031 (1)
2017-11-26 11:34 - 2017-11-26 11:34 - 000006076 _____ C:\Users\Evelyne\Desktop\UsbFix [Scan 1] EVELYNE.txt
2017-11-26 11:30 - 2017-11-26 12:31 - 000000006 _____ C:\usbfix-debug.txt
2017-11-26 11:26 - 2017-11-26 11:26 - 000001402 _____ C:\Users\Evelyne\Desktop\UsbFix.lnk
2017-11-26 11:25 - 2017-11-26 11:25 - 000000000 ____D C:\UsbFix
2017-11-26 11:22 - 2017-11-26 11:23 - 008222104 _____ (SOSVirus) C:\Users\Evelyne\Desktop\UsbFix_9.067.exe
2017-11-24 15:26 - 2017-11-24 15:26 - 000000104 _____ C:\Users\Evelyne\Desktop\Corbeille.lnk
2017-11-20 10:21 - 2017-11-20 10:22 - 000000000 ____D C:\Users\Evelyne\Documents\voiture
2017-11-19 15:35 - 2017-11-19 15:35 - 005535056 _____ C:\Users\Evelyne\Downloads\lide20lide30n670un676un1240uvst7031a_xpen.exe
2017-11-19 14:33 - 2017-11-19 14:34 - 005535056 _____ C:\Users\Evelyne\Downloads\o1417en_w_scan7031.exe
2017-11-19 13:58 - 2017-11-19 13:58 - 005173248 _____ C:\Users\Evelyne\Downloads\tb4135_en.exe
2017-11-18 18:12 - 2017-11-18 18:13 - 140123428 _____ C:\Users\Evelyne\Downloads\n600.zip
2017-11-18 16:36 - 2017-11-18 16:36 - 000001791 _____ C:\Users\Public\Desktop\Cle wifi Essentiel b.lnk
2017-11-18 16:36 - 2017-11-18 16:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cle wifi Essentiel b
2017-11-18 16:35 - 2016-03-02 07:37 - 003959040 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtwlanu_Vista.sys
2017-11-18 16:35 - 2016-02-23 10:18 - 001146072 ____R (Realtek Semiconductor Corp. ) C:\Windows\system32\Rtlihvs.dll
2017-11-18 16:34 - 2017-11-18 16:34 - 000000000 ____D C:\Program Files (x86)\REALTEK
2017-11-18 16:34 - 2015-08-12 18:25 - 000454360 _____ (Realtek) C:\Windows\SwUSB.exe
2017-11-18 16:34 - 2014-12-12 17:24 - 000044760 _____ () C:\Windows\runSW.exe
2017-11-18 16:34 - 2010-12-01 09:31 - 000451072 _____ C:\Windows\SysWOW64\ISSRemoveSP.exe
2017-11-18 16:34 - 2009-03-31 14:31 - 000380928 _____ (Realtek) C:\Windows\RtlUI2.exe
2017-11-18 16:34 - 2009-01-05 20:31 - 000000901 _____ C:\Windows\RtlUI2.exe.manifest
2017-11-18 16:34 - 2007-04-26 14:05 - 000100000 _____ C:\Windows\SysWOW64\EAPPkt9x.VXD
2017-11-18 16:34 - 2001-09-26 11:03 - 000012981 _____ C:\Windows\SysWOW64\REALPKT.VXD
2017-11-17 19:15 - 2017-11-17 19:19 - 000000000 ____D C:\Users\Evelyne\AppData\Local\panda
2017-11-17 19:03 - 2017-11-17 19:03 - 000000000 ____D C:\Users\Default\{878a4ac7-b449-4f78-b938-ebcb53abfcb1}
2017-11-17 18:57 - 2017-11-17 19:15 - 000002077 _____ C:\Users\Public\Desktop\Panda Protection.lnk
2017-11-17 18:57 - 2017-11-17 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Protection
2017-11-17 18:54 - 2017-11-17 18:54 - 001980152 _____ (Panda Security, S.L.) C:\Users\Evelyne\Downloads\PANDAFREEAV.exe
2017-11-14 19:22 - 2017-11-17 18:59 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\Panda Security
2017-11-14 19:21 - 2017-11-17 19:00 - 000000000 ____D C:\Program Files (x86)\Panda Security
2017-11-14 19:18 - 2017-11-17 19:00 - 000000000 ____D C:\ProgramData\Panda Security
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-11-27 10:01 - 2014-03-06 23:49 - 000000000 ____D C:\FRST
2017-11-27 09:50 - 2006-11-02 16:22 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-27 09:50 - 2006-11-02 16:22 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-26 23:29 - 2012-05-12 13:38 - 000000000 ____D C:\Users\Evelyne\AppData\Local\SoftThinks
2017-11-26 23:28 - 2006-11-02 16:42 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-26 23:27 - 2006-11-02 16:42 - 000032504 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-11-26 23:21 - 2012-06-05 12:30 - 000000000 ____D C:\Users\Evelyne\Documents\Fichiers Outlook
2017-11-26 22:43 - 2014-03-07 11:06 - 000000000 ____D C:\AdwCleaner
2017-11-26 21:09 - 2015-03-23 13:30 - 000000000 ____D C:\Users\Evelyne\Documents\assurances
2017-11-26 21:06 - 2012-06-12 21:40 - 000000000 ____D C:\Users\Evelyne\Documents\recettes
2017-11-26 20:54 - 2017-10-18 16:38 - 000000000 ____D C:\Users\Evelyne\Documents\passebecq
2017-11-26 20:12 - 2008-01-21 11:01 - 001615904 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-26 20:12 - 2008-01-21 11:00 - 000722488 _____ C:\Windows\system32\perfh00C.dat
2017-11-26 20:12 - 2008-01-21 11:00 - 000146290 _____ C:\Windows\system32\perfc00C.dat
2017-11-26 20:12 - 2006-11-02 14:33 - 000000000 ____D C:\Windows\inf
2017-11-26 11:16 - 2015-10-13 11:38 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\NewYu.Omron.Gateway
2017-11-22 18:54 - 2008-01-21 04:04 - 000000000 ____D C:\PerfLogs
2017-11-18 17:20 - 2012-11-15 15:11 - 000000000 ____D C:\Users\Evelyne\Documents\achats garanties notices
2017-11-18 16:36 - 2012-05-12 13:38 - 000000000 ____D C:\Users\Evelyne
2017-11-18 16:34 - 2009-07-14 19:56 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-11-18 11:47 - 2009-07-14 20:09 - 000000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2017-11-18 10:55 - 2012-05-15 09:52 - 000002425 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2017-11-18 10:38 - 2015-10-04 18:55 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\Skype
2017-11-17 19:09 - 2006-11-02 16:21 - 000429728 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-17 18:59 - 2012-05-12 13:39 - 000102504 _____ C:\Users\Evelyne\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-17 18:59 - 2006-11-02 14:34 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-11-15 10:08 - 2014-05-26 18:42 - 000000000 ____D C:\ProgramData\iolo
2017-11-14 18:50 - 2016-12-17 10:14 - 000003594 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3353547757-451906959-4124511660-1003UA1d25845f5284350
2017-11-14 18:50 - 2016-12-17 10:14 - 000003322 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3353547757-451906959-4124511660-1003Core1d2004332160b40
2017-11-14 18:39 - 2014-03-14 16:39 - 000000000 ____D C:\Program Files (x86)\Avira
2017-11-14 18:29 - 2014-08-22 21:08 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-14 18:29 - 2014-03-14 16:39 - 000000000 ____D C:\ProgramData\Avira
2017-11-14 18:26 - 2014-03-14 16:41 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\Avira
==================== Fichiers à la racine de certains dossiers =======
2012-06-05 13:09 - 2014-10-14 14:06 - 000037214 _____ () C:\Users\Evelyne\AppData\Roaming\Valeurs séparées par une virgule (DOS).ADR
2013-06-17 23:33 - 2013-06-17 23:33 - 000022619 _____ () C:\Users\Evelyne\AppData\Roaming\Valeurs séparées par une virgule (Windows).ADR
2012-08-09 07:43 - 2016-04-23 13:28 - 000000680 _____ () C:\Users\Evelyne\AppData\Local\d3d9caps.dat
2012-05-12 14:34 - 2017-04-18 11:56 - 000196096 _____ () C:\Users\Evelyne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-06 23:29 - 2014-03-06 23:31 - 000437606 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistMSI0D12.txt
2013-05-11 18:20 - 2013-05-11 18:20 - 000365788 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistMSI5EB8.txt
2012-06-03 15:31 - 2012-06-03 15:31 - 000364126 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistMSI7BF7.txt
2014-03-06 23:29 - 2014-03-06 23:31 - 000014496 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistUI0D12.txt
2013-05-11 18:20 - 2013-05-11 18:20 - 000011366 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistUI5EB8.txt
2012-06-03 15:31 - 2012-06-03 15:31 - 000011462 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistUI7BF7.txt
2016-07-02 16:30 - 2016-11-19 18:35 - 000000167 _____ () C:\Users\Evelyne\AppData\Local\fthf.ini
Certains fichiers dans TEMP:
====================
2014-03-14 16:40 - 2016-03-11 19:05 - 000000000 ____D () C:\Users\Evelyne\AppData\Local\Temp\avgnt.exe
2012-12-11 15:12 - 2012-12-11 15:12 - 000670720 _____ (Microsoft Corporation) C:\Users\Evelyne\AppData\Local\Temp\CP210xVCPInstaller_x64.exe
2012-12-11 15:12 - 2012-12-11 15:12 - 000545280 _____ (Microsoft Corporation) C:\Users\Evelyne\AppData\Local\Temp\CP210xVCPInstaller_x86.exe
2017-06-15 22:15 - 2017-06-15 22:15 - 014456872 _____ (Microsoft Corporation) C:\Users\Evelyne\AppData\Local\Temp\vc_redist.x86.exe
2017-11-14 19:19 - 2017-11-14 19:19 - 069882248 _____ (Panda Security, S.L.) C:\Users\Evelyne\AppData\Local\Temp\{2EBBEBDC-DC35-4FE0-81D2-08AA5DD1B099}.exe
2017-11-17 18:55 - 2017-11-17 18:55 - 059161352 _____ (Panda Security, S.L.) C:\Users\Evelyne\AppData\Local\Temp\{AD3922ED-E3B4-4884-B0C1-9D9249998AE2}.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-11-26 22:54
==================== Fin de FRST.txt ============================
Exécuté par Evelyne (administrateur) sur EVELYNE (27-11-2017 10:01:59)
Exécuté depuis C:\Users\Evelyne\Desktop
Profils chargés: Evelyne (Profils disponibles: Evelyne)
Platform: Windows Vista (TM) Home Premium Service Pack 2 (X64) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\stacsv64.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Stardock Corporation) C:\Program Files\Dell\DellDock\DockLogin.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_15f4e438\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(Realtek) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe
(Realtek Semiconductor Corp.) C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtWLan.exe
() C:\Windows\runSW.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Realtek) C:\Windows\SwUSB.exe
(SoftThinks) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\STService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Google, Inc) C:\Users\Evelyne\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Numera) C:\Program Files (x86)\BiLink Gateway\GatewaySysTray.exe
(Panasonic Corporation) C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(Creative Technology Ltd.) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1584184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1657128 2008-11-25] (Synaptics, Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [2041112 2008-09-26] (Dell Inc.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [462848 2009-03-19] (IDT, Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-08-29] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Dell DataSafe Online] => C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe [1807600 2009-11-13] ()
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [237693 2008-12-09] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell.exe [442536 2008-11-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [PDVDDXSrv] => C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe [144616 2011-03-01] (CyberLink Corp.)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [144520 2017-07-19] (Panda Security, S.L.)
HKLM-x32\...\RunOnce: [Launcher] => C:\Program Files (x86)\Dell DataSafe Local Backup\Components\scheduler\Launcher.exe [165104 2009-04-17] (Softthinks)
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\Run: [Google Update] => C:\Users\Evelyne\AppData\Local\Google\Update\1.3.33.7\GoogleUpdateCore.exe [601680 2017-11-14] (Google Inc.)
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\Run: [Google Photos Backup] => C:\Users\Evelyne\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe [3790936 2016-04-08] (Google, Inc)
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\Run: [WMPNSCFG] => C:\Program Files (x86)\Windows Media Player\WMPNSCFG.exe
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\Run: [GoogleChromeAutoLaunch_C05975E2D9F2B1889CE3CBF4A89C0920] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [874648 2016-04-06] (Google Inc.)
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\...\MountPoints2: {42827163-aaf7-11e1-b8cc-8d102a66539e} - G:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A11B02 PID_0083
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [899584 2006-11-02] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Omron BiLink Gateway.lnk [2016-01-15]
ShortcutTarget: Omron BiLink Gateway.lnk -> C:\Windows\Installer\{2C632C81-343F-4E7A-A600-237FFD2F33C7}\NewShortcut1_8188288DFAC14FF2859A19505BA528D5.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 8.1 PE.lnk [2013-05-11]
ShortcutTarget: PHOTOfunSTUDIO 8.1 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PlexTools Professional LE.lnk [2012-06-26]
ShortcutTarget: PlexTools Professional LE.lnk -> C:\Program Files (x86)\Plextor\PTPLE\PTPLE.exe (Plextor SA/NV)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2009-07-14]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock First Run.lnk [2009-07-14]
ShortcutTarget: Dell Dock First Run.lnk -> C:\Program Files\Dell\DellDock\DellDock.exe (Stardock Corporation)
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{4A792D30-5A7A-4EBB-91DE-080DF06D9E0A}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6F00459B-72CF-4459-A181-9792C8AA9294}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{C4AB47C3-9B85-4B6A-8DD3-A0163C50E068}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://safesearch.avira.com/#web/result?source=art&q=
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://fr.msn.com/?ocid=iehp
HKU\S-1-5-21-3353547757-451906959-4124511660-1003\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Panda Safe Web -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx64.dll => Pas de fichier
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => Pas de fichier
BHO-x32: Skype add-on (mastermind) -> {22BF413B-C6D2-4d91-82A9-A0F997BA588C} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2009-08-04] (Skype Technologies S.A.)
BHO-x32: Search Helper -> {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} -> C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2009-05-19] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-03-08] (Oracle Corporation)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-02-17] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Panda Safe Web -> {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} -> C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll => Pas de fichier
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-08] (Oracle Corporation)
Toolbar: HKLM-x32 - Panda Safe Web - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files (x86)\pandasecuritytb\pandasecurityDx.dll Pas de fichier
DPF: HKLM-x32 {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-08-10] [Lagacy] [non signé]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1209149.dll [Pas de fichier]
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-03-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-03-08] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeLive,version=1.3 -> C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll [2008-11-13] (Microsoft Corp.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-30] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-10] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2012-03-17] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxps://www.google.fr/?gfe_rd=cr&ei=elq8U4bnMYOB8Qe-7YDYDQ&gws_rd=ssl
CHR StartupUrls: Default -> "hxxps://www.google.fr/?gfe_rd=cr&ei=elq8U4bnMYOB8Qe-7YDYDQ&gws_rd=ssl"
CHR DefaultSearchURL: Default -> hxxps://pandasecurity.mystart.com/results.php?pr=vmn&id=pandasafeweb&v=1_0_chromeextension_unknown__&searchfeed=web&hsimp=yhs-panda1&ent=ch_ss&q={searchTerms}
CHR DefaultSearchKeyword: Default -> safeWeb
CHR Profile: C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default [2017-11-27]
CHR Extension: (Slides) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-14]
CHR Extension: (Docs) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-14]
CHR Extension: (Google Drive) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
CHR Extension: (YouTube) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-10]
CHR Extension: (CNRTL - CNRTL.fr) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\cojebfpfaaikknofipcimmgclgdkihcp [2014-03-21]
CHR Extension: (Recherche Google) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
CHR Extension: (Gmail hors connexion) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk [2014-03-21]
CHR Extension: (Sheets) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-14]
CHR Extension: (Google Docs hors connexion) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-09-20]
CHR Extension: (Gmail) - C:\Users\Evelyne\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-08]
CHR HKLM\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-3353547757-451906959-4124511660-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fagakgcelolinfnkfgekcnedpaklfcok] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S2 CLKMSVC10_1628BCEA; C:\Program Files (x86)\CyberLink\PowerDVD DX\Kernel\BD\NavFilter\kmsvc.exe [240360 2011-03-01] (CyberLink)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2009-07-14] (Creative Labs) [Fichier non signé]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2009-07-14] (Creative Labs) [Fichier non signé]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-04] (Creative Technology Ltd) [Fichier non signé]
R2 DockLoginService; C:\Program Files\Dell\DellDock\DockLogin.exe [155648 2008-12-18] (Stardock Corporation) [Fichier non signé]
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [109024 2017-07-19] (Panda Security, S.L.)
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.) [Fichier non signé]
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48784 2017-07-19] (Panda Security, S.L.)
R2 RealtekWlanU; C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RtlService.exe [48856 2014-05-19] (Realtek)
S2 RTLDHCPService; C:\Program Files (x86)\REALTEK\USB Wireless LAN Utility\RTLDHCP.exe [262360 2014-04-23] (Realtek)
R2 RunSwUSB; C:\Windows\runSW.exe [44760 2014-12-12] ()
S2 SkypeUpdate; C:\Program Files (x86)\Skype\Updater\Updater.exe [317400 2017-04-05] (Skype Technologies) [Fichier non signé]
S3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2009-07-14] (Creative Labs) [Fichier non signé]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [383544 2008-01-21] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
U5 GEARAspiWDM; C:\Windows\System32\Drivers\GEARAspiWDM.sys [33240 2012-08-21] (GEAR Software Inc.)
S3 hwdatacard; C:\Windows\System32\DRIVERS\ewusbmdm.sys [115072 2008-11-12] (Huawei Technologies Co., Ltd.) [Fichier non signé]
S3 hwusbfake; C:\Windows\System32\DRIVERS\ewusbfake.sys [112896 2008-11-12] (Huawei Technologies Co., Ltd.) [Fichier non signé]
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [105472 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [211008 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [119880 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [124488 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSNAHSL; C:\Windows\System32\DRIVERS\NNSNAHSL.sys [82800 2017-03-13] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [116784 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [83824 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [134288 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [336168 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [225464 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [121952 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [279536 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [123976 2017-04-06] (Panda Security, S.L.) [Fichier non signé]
R3 OA008Ufd; C:\Windows\System32\DRIVERS\OA008Ufd.sys [158592 2009-02-09] (Creative Technology Ltd.)
R3 OA008Vid; C:\Windows\System32\DRIVERS\OA008Vid.sys [310784 2009-02-09] (Creative Technology Ltd.)
S0 PsBoot; C:\Windows\System32\Drivers\PsBoot.sys [40480 2014-03-11] (Panda Security, S.L.)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [178264 2017-07-19] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [137304 2017-07-19] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [206424 2017-07-19] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [132696 2017-07-19] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [146008 2017-07-19] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [116312 2017-07-19] (Panda Security, S.L.)
U3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [72280 2017-05-22] (Panda Security, S.L.)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu_Vista.sys [3959040 2016-03-02] (Realtek Semiconductor Corporation )
R2 {1E444BE9-B8EC-4ce6-8C2B-6536FB7F4FB7}; C:\Program Files (x86)\CyberLink\PowerDVD DX\000.fcl [146928 2010-01-07] (CyberLink Corp.)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 PCAMp50a64; System32\Drivers\PCAMp50a64.sys [X]
S3 PCASp50a64; System32\Drivers\PCASp50a64.sys [X]
S3 PCD5SRVC{048DBD20-445E8C82-05040104}; \??\C:\PROGRA~2\DELLSU~1\HWDiag\bin\PCD5SRVC_x64.pkms [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-11-27 10:01 - 2017-11-27 10:04 - 000024365 _____ C:\Users\Evelyne\Desktop\FRST.txt
2017-11-27 10:00 - 2017-11-27 10:00 - 002391552 _____ (Farbar) C:\Users\Evelyne\Desktop\FRST64.exe
2017-11-27 09:58 - 2017-11-27 09:58 - 000001074 ____N C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3353547757-451906959-4124511660-1000UA.job
2017-11-27 09:58 - 2017-11-27 09:58 - 000001022 ____N C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3353547757-451906959-4124511660-1000Core.job
2017-11-27 09:58 - 2014-03-11 16:48 - 000040480 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PsBoot.sys
2017-11-26 23:28 - 2017-05-22 11:29 - 000072280 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2017-11-26 23:10 - 2017-11-26 22:43 - 000007913 _____ C:\Users\Evelyne\Desktop\AdwCleaner[C0].txt
2017-11-26 22:34 - 2017-11-26 22:34 - 008261584 _____ (Malwarebytes) C:\Users\Evelyne\Desktop\adwcleaner_7.0.4.0.exe
2017-11-26 22:12 - 2017-11-26 22:20 - 000007455 _____ C:\Users\Evelyne\Desktop\ZHPCleaner1.txt
2017-11-26 21:45 - 2017-11-26 21:45 - 000010888 _____ C:\Users\Evelyne\Desktop\ZHPCleaner.txt
2017-11-26 21:25 - 2017-11-26 21:25 - 000000740 _____ C:\Users\Evelyne\Desktop\ZHPCleaner.lnk
2017-11-26 21:23 - 2017-11-26 21:24 - 002980736 _____ C:\Users\Evelyne\Desktop\ZHPCleaner.exe
2017-11-26 14:30 - 2017-11-26 23:05 - 000157205 _____ C:\Users\Evelyne\Desktop\ZHPDiag.txt
2017-11-26 14:22 - 2017-11-26 22:53 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\ZHP
2017-11-26 14:22 - 2017-11-26 21:25 - 000000000 ____D C:\Users\Evelyne\AppData\Local\ZHP
2017-11-26 14:22 - 2017-11-26 14:22 - 000000730 _____ C:\Users\Evelyne\Desktop\ZHPDiag.lnk
2017-11-26 14:20 - 2017-11-26 14:20 - 002935680 _____ C:\Users\Evelyne\Desktop\ZHPDiag3.exe
2017-11-26 12:38 - 2017-11-26 12:38 - 000100340 _____ C:\Users\Evelyne\Desktop\UsbFix [Clean 1] EVELYNE.txt
2017-11-26 12:31 - 2017-11-26 12:31 - 000100337 _____ C:\Users\Evelyne\Desktop\UsbFix_Report.txt
2017-11-26 11:45 - 2017-11-21 19:02 - 005535056 _____ C:\Users\Evelyne\Downloads\o1417en_w_scan7031 (1).exe
2017-11-26 11:44 - 2017-11-26 11:44 - 000000000 ____D C:\Users\Evelyne\Downloads\o1417en_w_scan7031 (1)
2017-11-26 11:34 - 2017-11-26 11:34 - 000006076 _____ C:\Users\Evelyne\Desktop\UsbFix [Scan 1] EVELYNE.txt
2017-11-26 11:30 - 2017-11-26 12:31 - 000000006 _____ C:\usbfix-debug.txt
2017-11-26 11:26 - 2017-11-26 11:26 - 000001402 _____ C:\Users\Evelyne\Desktop\UsbFix.lnk
2017-11-26 11:25 - 2017-11-26 11:25 - 000000000 ____D C:\UsbFix
2017-11-26 11:22 - 2017-11-26 11:23 - 008222104 _____ (SOSVirus) C:\Users\Evelyne\Desktop\UsbFix_9.067.exe
2017-11-24 15:26 - 2017-11-24 15:26 - 000000104 _____ C:\Users\Evelyne\Desktop\Corbeille.lnk
2017-11-20 10:21 - 2017-11-20 10:22 - 000000000 ____D C:\Users\Evelyne\Documents\voiture
2017-11-19 15:35 - 2017-11-19 15:35 - 005535056 _____ C:\Users\Evelyne\Downloads\lide20lide30n670un676un1240uvst7031a_xpen.exe
2017-11-19 14:33 - 2017-11-19 14:34 - 005535056 _____ C:\Users\Evelyne\Downloads\o1417en_w_scan7031.exe
2017-11-19 13:58 - 2017-11-19 13:58 - 005173248 _____ C:\Users\Evelyne\Downloads\tb4135_en.exe
2017-11-18 18:12 - 2017-11-18 18:13 - 140123428 _____ C:\Users\Evelyne\Downloads\n600.zip
2017-11-18 16:36 - 2017-11-18 16:36 - 000001791 _____ C:\Users\Public\Desktop\Cle wifi Essentiel b.lnk
2017-11-18 16:36 - 2017-11-18 16:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cle wifi Essentiel b
2017-11-18 16:35 - 2016-03-02 07:37 - 003959040 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\rtwlanu_Vista.sys
2017-11-18 16:35 - 2016-02-23 10:18 - 001146072 ____R (Realtek Semiconductor Corp. ) C:\Windows\system32\Rtlihvs.dll
2017-11-18 16:34 - 2017-11-18 16:34 - 000000000 ____D C:\Program Files (x86)\REALTEK
2017-11-18 16:34 - 2015-08-12 18:25 - 000454360 _____ (Realtek) C:\Windows\SwUSB.exe
2017-11-18 16:34 - 2014-12-12 17:24 - 000044760 _____ () C:\Windows\runSW.exe
2017-11-18 16:34 - 2010-12-01 09:31 - 000451072 _____ C:\Windows\SysWOW64\ISSRemoveSP.exe
2017-11-18 16:34 - 2009-03-31 14:31 - 000380928 _____ (Realtek) C:\Windows\RtlUI2.exe
2017-11-18 16:34 - 2009-01-05 20:31 - 000000901 _____ C:\Windows\RtlUI2.exe.manifest
2017-11-18 16:34 - 2007-04-26 14:05 - 000100000 _____ C:\Windows\SysWOW64\EAPPkt9x.VXD
2017-11-18 16:34 - 2001-09-26 11:03 - 000012981 _____ C:\Windows\SysWOW64\REALPKT.VXD
2017-11-17 19:15 - 2017-11-17 19:19 - 000000000 ____D C:\Users\Evelyne\AppData\Local\panda
2017-11-17 19:03 - 2017-11-17 19:03 - 000000000 ____D C:\Users\Default\{878a4ac7-b449-4f78-b938-ebcb53abfcb1}
2017-11-17 18:57 - 2017-11-17 19:15 - 000002077 _____ C:\Users\Public\Desktop\Panda Protection.lnk
2017-11-17 18:57 - 2017-11-17 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Protection
2017-11-17 18:54 - 2017-11-17 18:54 - 001980152 _____ (Panda Security, S.L.) C:\Users\Evelyne\Downloads\PANDAFREEAV.exe
2017-11-14 19:22 - 2017-11-17 18:59 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\Panda Security
2017-11-14 19:21 - 2017-11-17 19:00 - 000000000 ____D C:\Program Files (x86)\Panda Security
2017-11-14 19:18 - 2017-11-17 19:00 - 000000000 ____D C:\ProgramData\Panda Security
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-11-27 10:01 - 2014-03-06 23:49 - 000000000 ____D C:\FRST
2017-11-27 09:50 - 2006-11-02 16:22 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-27 09:50 - 2006-11-02 16:22 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-26 23:29 - 2012-05-12 13:38 - 000000000 ____D C:\Users\Evelyne\AppData\Local\SoftThinks
2017-11-26 23:28 - 2006-11-02 16:42 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-26 23:27 - 2006-11-02 16:42 - 000032504 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-11-26 23:21 - 2012-06-05 12:30 - 000000000 ____D C:\Users\Evelyne\Documents\Fichiers Outlook
2017-11-26 22:43 - 2014-03-07 11:06 - 000000000 ____D C:\AdwCleaner
2017-11-26 21:09 - 2015-03-23 13:30 - 000000000 ____D C:\Users\Evelyne\Documents\assurances
2017-11-26 21:06 - 2012-06-12 21:40 - 000000000 ____D C:\Users\Evelyne\Documents\recettes
2017-11-26 20:54 - 2017-10-18 16:38 - 000000000 ____D C:\Users\Evelyne\Documents\passebecq
2017-11-26 20:12 - 2008-01-21 11:01 - 001615904 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-26 20:12 - 2008-01-21 11:00 - 000722488 _____ C:\Windows\system32\perfh00C.dat
2017-11-26 20:12 - 2008-01-21 11:00 - 000146290 _____ C:\Windows\system32\perfc00C.dat
2017-11-26 20:12 - 2006-11-02 14:33 - 000000000 ____D C:\Windows\inf
2017-11-26 11:16 - 2015-10-13 11:38 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\NewYu.Omron.Gateway
2017-11-22 18:54 - 2008-01-21 04:04 - 000000000 ____D C:\PerfLogs
2017-11-18 17:20 - 2012-11-15 15:11 - 000000000 ____D C:\Users\Evelyne\Documents\achats garanties notices
2017-11-18 16:36 - 2012-05-12 13:38 - 000000000 ____D C:\Users\Evelyne
2017-11-18 16:34 - 2009-07-14 19:56 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-11-18 11:47 - 2009-07-14 20:09 - 000000000 ____D C:\Program Files (x86)\Dell DataSafe Local Backup
2017-11-18 10:55 - 2012-05-15 09:52 - 000002425 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2017-11-18 10:38 - 2015-10-04 18:55 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\Skype
2017-11-17 19:09 - 2006-11-02 16:21 - 000429728 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-17 18:59 - 2012-05-12 13:39 - 000102504 _____ C:\Users\Evelyne\AppData\Local\GDIPFONTCACHEV1.DAT
2017-11-17 18:59 - 2006-11-02 14:34 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-11-15 10:08 - 2014-05-26 18:42 - 000000000 ____D C:\ProgramData\iolo
2017-11-14 18:50 - 2016-12-17 10:14 - 000003594 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3353547757-451906959-4124511660-1003UA1d25845f5284350
2017-11-14 18:50 - 2016-12-17 10:14 - 000003322 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3353547757-451906959-4124511660-1003Core1d2004332160b40
2017-11-14 18:39 - 2014-03-14 16:39 - 000000000 ____D C:\Program Files (x86)\Avira
2017-11-14 18:29 - 2014-08-22 21:08 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-14 18:29 - 2014-03-14 16:39 - 000000000 ____D C:\ProgramData\Avira
2017-11-14 18:26 - 2014-03-14 16:41 - 000000000 ____D C:\Users\Evelyne\AppData\Roaming\Avira
==================== Fichiers à la racine de certains dossiers =======
2012-06-05 13:09 - 2014-10-14 14:06 - 000037214 _____ () C:\Users\Evelyne\AppData\Roaming\Valeurs séparées par une virgule (DOS).ADR
2013-06-17 23:33 - 2013-06-17 23:33 - 000022619 _____ () C:\Users\Evelyne\AppData\Roaming\Valeurs séparées par une virgule (Windows).ADR
2012-08-09 07:43 - 2016-04-23 13:28 - 000000680 _____ () C:\Users\Evelyne\AppData\Local\d3d9caps.dat
2012-05-12 14:34 - 2017-04-18 11:56 - 000196096 _____ () C:\Users\Evelyne\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-03-06 23:29 - 2014-03-06 23:31 - 000437606 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistMSI0D12.txt
2013-05-11 18:20 - 2013-05-11 18:20 - 000365788 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistMSI5EB8.txt
2012-06-03 15:31 - 2012-06-03 15:31 - 000364126 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistMSI7BF7.txt
2014-03-06 23:29 - 2014-03-06 23:31 - 000014496 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistUI0D12.txt
2013-05-11 18:20 - 2013-05-11 18:20 - 000011366 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistUI5EB8.txt
2012-06-03 15:31 - 2012-06-03 15:31 - 000011462 _____ () C:\Users\Evelyne\AppData\Local\dd_vcredistUI7BF7.txt
2016-07-02 16:30 - 2016-11-19 18:35 - 000000167 _____ () C:\Users\Evelyne\AppData\Local\fthf.ini
Certains fichiers dans TEMP:
====================
2014-03-14 16:40 - 2016-03-11 19:05 - 000000000 ____D () C:\Users\Evelyne\AppData\Local\Temp\avgnt.exe
2012-12-11 15:12 - 2012-12-11 15:12 - 000670720 _____ (Microsoft Corporation) C:\Users\Evelyne\AppData\Local\Temp\CP210xVCPInstaller_x64.exe
2012-12-11 15:12 - 2012-12-11 15:12 - 000545280 _____ (Microsoft Corporation) C:\Users\Evelyne\AppData\Local\Temp\CP210xVCPInstaller_x86.exe
2017-06-15 22:15 - 2017-06-15 22:15 - 014456872 _____ (Microsoft Corporation) C:\Users\Evelyne\AppData\Local\Temp\vc_redist.x86.exe
2017-11-14 19:19 - 2017-11-14 19:19 - 069882248 _____ (Panda Security, S.L.) C:\Users\Evelyne\AppData\Local\Temp\{2EBBEBDC-DC35-4FE0-81D2-08AA5DD1B099}.exe
2017-11-17 18:55 - 2017-11-17 18:55 - 059161352 _____ (Panda Security, S.L.) C:\Users\Evelyne\AppData\Local\Temp\{AD3922ED-E3B4-4884-B0C1-9D9249998AE2}.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-11-26 22:54
==================== Fin de FRST.txt ============================