cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2017
Exécuté par MoMo_TV (administrateur) sur MOMO_TV-PC (01-11-2017 18:16:13)
Exécuté depuis C:\Users\MoMo_TV\Desktop
Profils chargés: MoMo_TV (Profils disponibles: MoMo_TV)
Platform: Windows 7 Professional Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Opera)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe
(Mediatek Inc.) C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe
(The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(SplitCam Co.) C:\Program Files (x86)\SplitCam\SplitCamService.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\48.0.2685.52\opera.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\ielowutil.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642728 2012-09-28] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3911248 2015-11-09] (Tonec Inc.)
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\MountPoints2: {2bccf213-9c34-11e5-9ef6-d02788b46033} - F:\autorun.exe
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\MountPoints2: {39eb17fd-84c7-11e7-89ea-d02788b46335} - F:\Setup.exe /s
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\MountPoints2: {6f105994-2d98-11e6-bff8-d02788b46335} - F:\autorun.exe
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\MountPoints2: {914e74f6-84e0-11e7-821f-d02788b46335} - F:\Setup.exe /s

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{04D47407-3549-4ED7-B40A-5563BCA3E94F}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{1229D543-0C77-431A-995A-55806F796ABD}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{3A720E87-AD60-4F8B-A728-8C8B607DA19F}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{3A9B356A-814F-4976-AF19-253AAA5AD34F}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8AE39389-469A-43CA-B92B-F58A01B15175}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{CD0F0A47-F5FF-4006-B946-827660437816}: [DhcpNameServer] 192.168.42.129

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-1816316752-662583435-4135652137-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-09-28] (Internet Download Manager, Tonec Inc.)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-05-02] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-05-02] (Oracle Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-09-28] (Internet Download Manager, Tonec Inc.)

FireFox:
========
FF DefaultProfile: dvpmjiao.default
FF ProfilePath: C:\Users\MoMo_TV\AppData\Roaming\Mozilla\Firefox\Profiles\dvpmjiao.default [2017-10-28]
FF Extension: (IDM integration) - C:\Users\MoMo_TV\AppData\Roaming\Mozilla\Firefox\Profiles\dvpmjiao.default\Extensions\mozilla_cc2@internetdownloadmanager.com [2017-02-12]
FF Extension: (iMacros for Firefox) - C:\Users\MoMo_TV\AppData\Roaming\Mozilla\Firefox\Profiles\dvpmjiao.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}.xpi [2017-07-16]
FF Extension: (NeoBux AdAlert) - C:\Users\MoMo_TV\AppData\Roaming\Mozilla\Firefox\Profiles\dvpmjiao.default\Extensions\{eb80b076-a444-444c-a590-5aee5d977d80}.xpi [2017-10-24]
FF HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-11-09]
FF HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\MoMo_TV\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\MoMo_TV\AppData\Roaming\IDM\idmmzcc5 [2017-11-01] [non signé]
FF HKU\S-1-5-21-1816316752-662583435-4135652137-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_27_0_0_170.dll [2017-10-16] ()
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-05-02] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-05-02] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_27_0_0_170.dll [2017-10-16] ()
FF Plugin-x32: @real.com/nppl3260;version=6.0.12.450 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nppl3260.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.448 -> C:\Program Files (x86)\Real Alternative\browser\plugins\nprpjplug.dll [2010-02-15] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-01-21] (VideoLAN)

Chrome:
=======
CHR Profile: C:\Users\MoMo_TV\AppData\Local\Google\Chrome\User Data\Default [2017-11-01]
CHR Extension: (IDM Integration Module) - C:\Users\MoMo_TV\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-11-01]
CHR Extension: (Chrome Web Store Payments) - C:\Users\MoMo_TV\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-11-01]
CHR Extension: (Chrome Media Router) - C:\Users\MoMo_TV\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-01]
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-11-09]

Opera:
=======
StartMenuInternet: (HKLM) Operadeveloper - C:\Program Files (x86)\Opera developer\Launcher.exe

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 BstHdAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Service.exe [441880 2016-06-30] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\Bluestacks\HD-LogRotatorService.exe [421400 2016-06-30] (BlueStack Systems, Inc.)
S3 BstHdPlusAndroidSvc; C:\Program Files (x86)\Bluestacks\HD-Plus-Service.exe [458264 2016-06-30] (BlueStack Systems, Inc.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [409128 2017-03-11] (EasyAntiCheat Ltd)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-03-28] (Hi-Rez Studios) [Fichier non signé]
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-06-27] (Nero AG)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-11-21] (Intel Corporation)
R2 MediatekRegistryWriter; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry.exe [405136 2014-12-04] (Mediatek Inc.)
R2 MediatekRegistryWriter64; C:\Program Files (x86)\MediatekWiFi\Common\RaRegistry64.exe [454288 2014-12-04] (Mediatek Inc.)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] ( ) [Fichier non signé]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72320 2017-03-22] (The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72320 2017-03-22] (The OpenVPN Project)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [Fichier non signé]
R2 SpliCamService; C:\Program Files (x86)\SplitCam\SplitCamService.exe [312616 2015-11-03] (SplitCam Co.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 BstHdDrv; C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [152672 2016-06-30] (BlueStack Systems)
S3 BstkDrv; C:\Program Files (x86)\Bluestacks\BstkDrv.sys [270904 2016-06-30] (Bluestack System Inc. )
S3 cmusbser; C:\Windows\System32\DRIVERS\cmusbser.sys [118144 2008-08-29] (Mobile Connector)
S3 DFX11_1; C:\Windows\System32\drivers\dfx11_1x64.sys [28008 2017-06-19] (Windows (R) Win 7 DDK provider)
S3 DFX12; C:\Windows\System32\drivers\dfx12x64.sys [29688 2017-06-19] (Windows (R) Win 7 DDK provider)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-11-21] (Intel Corporation)
R0 mv61xx; C:\Windows\System32\DRIVERS\mv61xx.sys [183144 2012-05-23] (Marvell Semiconductor, Inc.)
S3 netr28ux; C:\Windows\System32\DRIVERS\netr28ux.sys [2245456 2015-10-14] (MediaTek Inc.)
R3 scvad_simple; C:\Windows\System32\drivers\SplitCamAudio.sys [23552 2015-08-06] (Windows (R) Win 7 DDK provider)
R3 splitcam_hd_driver; C:\Windows\System32\DRIVERS\splitcam_hd_driver.sys [37088 2015-10-15] (Windows (R) Win 7 DDK provider)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2017-03-21] (Anchorfree Inc.)
S3 TSVAD_PCM; C:\Windows\System32\drivers\tsvadpcm.sys [33552 2016-08-11] (Windows (R) Win 7 DDK provider)
R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
R1 XQHDrv; C:\Windows\System32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
S3 MSICDSetup; \??\E:\CDriver64.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-11-01 18:16 - 2017-11-01 18:16 - 000015203 _____ C:\Users\MoMo_TV\Desktop\FRST.txt
2017-11-01 18:16 - 2017-11-01 18:16 - 000000000 ____D C:\FRST
2017-11-01 18:15 - 2017-11-01 18:15 - 002403328 _____ (Farbar) C:\Users\MoMo_TV\Desktop\FRST64.exe
2017-11-01 14:41 - 2017-11-01 14:41 - 000005248 _____ C:\Users\MoMo_TV\Downloads\rogue.txt
2017-11-01 14:34 - 2017-11-01 14:34 - 000002198 _____ C:\Users\MoMo_TV\Desktop\ZHPCleaner.txt
2017-11-01 14:26 - 2017-11-01 14:26 - 000005296 _____ C:\Users\MoMo_TV\Desktop\rogue killer.txt
2017-11-01 14:26 - 2017-11-01 14:26 - 000005248 _____ C:\Users\MoMo_TV\Desktop\rogue.txt
2017-11-01 13:08 - 2017-11-01 13:08 - 002964864 _____ C:\Users\MoMo_TV\Desktop\ZHPCleaner.exe
2017-11-01 12:54 - 2017-11-01 12:54 - 000000858 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-11-01 12:54 - 2017-11-01 12:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-11-01 12:54 - 2017-11-01 12:54 - 000000000 ____D C:\Program Files\RogueKiller
2017-11-01 12:49 - 2017-11-01 12:52 - 036097984 _____ (Adlice Software ) C:\Users\MoMo_TV\Desktop\RogueKiller_setup_ref3.exe
2017-11-01 11:38 - 2017-11-01 11:38 - 000004476 _____ C:\Users\MoMo_TV\Desktop\eset.txt
2017-11-01 11:09 - 2017-11-01 11:09 - 002870984 _____ (ESET) C:\Users\MoMo_TV\Desktop\esetsmartinstaller_fra.exe
2017-11-01 11:09 - 2017-11-01 11:09 - 000000000 ____D C:\Program Files (x86)\ESET
2017-11-01 10:41 - 2017-11-01 10:41 - 000145872 _____ C:\Users\MoMo_TV\Desktop\ZHPDiag.txt
2017-11-01 10:39 - 2017-11-01 10:39 - 000000824 _____ C:\Users\MoMo_TV\Desktop\ZHPDiag.lnk
2017-11-01 10:38 - 2017-11-01 14:28 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\ZHP
2017-11-01 10:37 - 2017-11-01 10:37 - 002924416 _____ C:\Users\MoMo_TV\Desktop\ZHPDiag.exe
2017-11-01 09:35 - 2017-11-01 09:36 - 000002602 _____ C:\Users\MoMo_TV\Desktop\Rkill.txt
2017-11-01 09:35 - 2017-11-01 09:35 - 001780224 _____ (Bleeping Computer, LLC) C:\Users\MoMo_TV\Desktop\rkill-unsigned.exe
2017-10-30 22:36 - 2017-10-30 22:36 - 000000000 ____D C:\Users\MoMo_TV\Documents\CPY_SAVES
2017-10-29 19:10 - 2017-10-29 19:10 - 000000000 _____ C:\Users\MoMo_TV\Desktop\Sp.LeBatondelaverite-Zone-Telechargement.ws.part1.htm
2017-10-28 22:18 - 2017-11-01 09:26 - 000000000 ____D C:\Program Files\theHunter - Call of the Wild
2017-10-28 22:18 - 2017-10-28 22:18 - 000001689 _____ C:\Users\Public\Desktop\theHunter - Call of the Wild.lnk
2017-10-28 12:05 - 2017-10-28 12:05 - 000000000 ____D C:\Users\Public\Documents\Steam
2017-10-28 12:05 - 2017-10-28 12:05 - 000000000 ____D C:\Users\MoMo_TV\Documents\Avalanche Studios
2017-10-26 20:25 - 2017-10-29 22:15 - 000000213 _____ C:\Users\MoMo_TV\Desktop\jeux chase .txt
2017-10-26 18:27 - 2017-10-26 18:27 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\ElevatedDiagnostics
2017-10-26 00:23 - 2017-10-24 07:05 - 1470612832 ____N C:\Users\MoMo_TV\Desktop\[nextorrent.pw] Shot.Caller.2017.FRENCH.BDRip.XviD-GZR.avi
2017-10-24 23:04 - 2017-10-24 23:06 - 009784448 _____ C:\Users\MoMo_TV\Downloads\22798086_125881324728006_6338459877274288128_n.mp4
2017-10-21 17:04 - 2017-10-21 17:15 - 000000000 ____D C:\ProgramData\Epic
2017-10-21 17:04 - 2017-10-21 17:04 - 000001242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2017-10-21 17:04 - 2017-10-21 17:04 - 000001230 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk
2017-10-21 17:04 - 2017-10-21 17:04 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\UnrealEngineLauncher
2017-10-21 17:04 - 2017-10-21 17:04 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\UnrealEngine
2017-10-21 17:04 - 2017-10-21 17:04 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\EpicGamesLauncher
2017-10-21 17:04 - 2017-10-21 17:04 - 000000000 ____D C:\Program Files (x86)\Epic Games
2017-10-21 12:34 - 2017-10-21 12:55 - 000000000 ____D C:\Users\MoMo_TV\Desktop\p48 2 am
2017-10-21 12:04 - 2017-10-21 12:26 - 000000000 ____D C:\Users\MoMo_TV\Desktop\p48 4 am
2017-10-21 11:55 - 2017-10-21 12:57 - 000000108 _____ C:\usbfix-debug.txt
2017-10-10 21:39 - 2017-10-10 21:39 - 001031316 _____ C:\Users\MoMo_TV\Downloads\22267924_135444100532169_5473992340521615360_n.mp4
2017-10-06 20:02 - 2017-10-06 20:02 - 000002033 _____ C:\Users\MoMo_TV\Downloads\PlayerLite.swf

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-11-01 17:16 - 2016-06-20 19:31 - 000003896 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1466447470
2017-11-01 17:16 - 2016-06-20 19:27 - 000000000 ____D C:\Program Files (x86)\Opera developer
2017-11-01 14:45 - 2009-07-14 05:45 - 000031088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-11-01 14:45 - 2009-07-14 05:45 - 000031088 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-11-01 14:44 - 2011-04-12 10:16 - 000762620 _____ C:\Windows\system32\perfh00C.dat
2017-11-01 14:44 - 2011-04-12 10:16 - 000155046 _____ C:\Windows\system32\perfc00C.dat
2017-11-01 14:44 - 2009-07-14 06:13 - 001699590 _____ C:\Windows\system32\PerfStringBackup.INI
2017-11-01 14:44 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-11-01 14:38 - 2017-03-11 09:04 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-11-01 14:38 - 2016-03-25 19:14 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\HTC MediaHub
2017-11-01 14:38 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-11-01 14:36 - 2015-11-20 18:51 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\DMCache
2017-11-01 14:34 - 2015-12-18 19:41 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\ZHP
2017-11-01 12:54 - 2015-12-18 19:11 - 000028272 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-11-01 11:01 - 2015-11-20 18:51 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\IDM
2017-11-01 09:40 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2017-11-01 09:38 - 2015-12-07 22:12 - 000004484 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-11-01 09:38 - 2015-11-20 20:44 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-11-01 09:38 - 2015-11-20 20:44 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-11-01 09:38 - 2015-11-20 20:44 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-11-01 09:38 - 2015-11-20 20:44 - 000000000 ____D C:\Windows\system32\Macromed
2017-11-01 09:37 - 2015-11-21 17:47 - 000000000 ____D C:\Program Files (x86)\Opera
2017-11-01 09:26 - 2016-02-20 00:07 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\vlc
2017-11-01 09:26 - 2016-01-16 17:59 - 000000000 ____D C:\Program Files\Common Files\logishrd
2017-11-01 09:26 - 2015-11-20 19:48 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-01 09:26 - 2015-11-20 17:08 - 000000000 ____D C:\Users\MoMo_TV
2017-11-01 09:26 - 2009-07-14 05:45 - 000275768 _____ C:\Windows\system32\FNTCACHE.DAT
2017-11-01 09:26 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2017-11-01 09:26 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\AppCompat
2017-10-29 18:14 - 2016-07-06 09:48 - 000000000 ____D C:\Users\MoMo_TV\Documents\ViberDownloads
2017-10-28 22:36 - 2016-05-01 21:14 - 000000000 ____D C:\Windows\SysWOW64\directx
2017-10-28 22:05 - 2016-03-18 15:59 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\CrashDumps
2017-10-28 20:23 - 2015-11-20 18:01 - 000057944 _____ C:\Users\MoMo_TV\AppData\Local\GDIPFONTCACHEV1.DAT
2017-10-28 19:22 - 2017-10-01 13:17 - 000000000 ____D C:\Program Files (x86)\KolotibabloWorker
2017-10-28 19:21 - 2016-12-03 20:36 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\Yandex
2017-10-28 19:21 - 2016-03-24 21:53 - 000000000 ____D C:\Program Files (x86)\Pure APK Install
2017-10-28 19:13 - 2015-11-20 18:30 - 000000000 ____D C:\Program Files (x86)\Steam
2017-10-28 16:22 - 2009-07-14 06:08 - 000032482 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-10-28 10:39 - 2015-11-21 17:47 - 000003876 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1448124459
2017-10-28 02:00 - 2017-01-03 23:22 - 000000000 ____D C:\Users\MoMo_TV\AppData\LocalLow\Mozilla
2017-10-27 11:50 - 2016-02-19 14:40 - 000000000 ____D C:\Users\MoMo_TV\.android
2017-10-27 00:16 - 2016-06-11 01:21 - 000000348 _____ C:\Users\MoMo_TV\Desktop\free cccam.cfg
2017-10-26 18:41 - 2016-08-13 00:06 - 000000000 ____D C:\Users\MoMo_TV\AppData\Local\Nox
2017-10-26 18:40 - 2017-09-18 19:24 - 000000000 ____D C:\Users\MoMo_TV\vmlogs
2017-10-26 18:40 - 2016-08-13 00:07 - 000000000 ____D C:\Users\MoMo_TV\.BigNox
2017-10-25 20:31 - 2017-01-01 17:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-10-25 20:31 - 2015-12-20 00:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-10-21 23:24 - 2017-10-01 17:55 - 000000000 ____D C:\Users\Invité
2017-10-21 23:24 - 2017-10-01 17:55 - 000000000 ____D C:\Users\HomeGroupUser$
2017-10-21 23:24 - 2017-10-01 17:55 - 000000000 ____D C:\Users\Administrateur
2017-10-21 17:22 - 2016-07-08 14:15 - 000000000 ____D C:\Users\MoMo_TV\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-10-21 12:56 - 2016-07-06 22:46 - 000000000 ____D C:\UsbFix
2017-10-21 12:34 - 2016-03-18 14:40 - 000000000 ___SD C:\Users\MoMo_TV\AppData\LocalLow\Temp
2017-10-16 21:54 - 2015-11-28 18:59 - 000004630 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier

==================== Fichiers à la racine de certains dossiers =======

2017-04-28 22:58 - 2017-04-28 23:40 - 000001599 _____ () C:\Users\MoMo_TV\AppData\Roaming\droid4xinstaller.log
2016-10-15 00:37 - 2016-10-15 01:02 - 000135091 _____ () C:\Users\MoMo_TV\AppData\Roaming\net.telestream.wirecast.xml
2016-10-15 00:37 - 2016-10-15 00:37 - 000004755 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_BAMBUSER_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000004935 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_CHURCHSTREAMING_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000003931 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_DAILYMOTION_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000005919 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_LIGHTCAST_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000004356 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_MAKETV_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000003439 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_MERIDIX_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000003825 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_MERIDIX_AFFILIATE_ID_brandingimage_main.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000016357 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_ONSTREAM_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000010088 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMINGCHURCH_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000004482 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMINGCHURCH_AFFILIATE_ID_brandingimage_main.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000007122 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMING_MEDIA_HOSTING_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000008261 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMSHARK_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000010619 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAMVU_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000005241 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_STREAM_SPOT_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000008986 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_SUNDAY_STREAMS_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000003213 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_THE_CUBE_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000022670 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_TILTEDGLOBE_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000003302 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_TULIX_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000008949 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_VERIZON_AFFILIATE_ID_brandingimage_destination.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000008949 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_VERIZON_AFFILIATE_ID_brandingimage_main.png
2016-10-15 00:37 - 2016-10-15 00:37 - 000008683 _____ () C:\Users\MoMo_TV\AppData\Roaming\net_telestream_wirecast_partner_NO_ZIXI_AFFILIATE_ID_brandingimage_destination.png
2017-03-01 00:46 - 2017-03-01 00:51 - 000011264 ___SH () C:\Users\MoMo_TV\AppData\Roaming\Thumbs.db
2016-08-15 19:40 - 2016-08-15 19:40 - 000000553 _____ () C:\Users\MoMo_TV\AppData\Local\Nox_crash.log
2017-03-03 03:19 - 2017-03-03 03:19 - 000000218 _____ () C:\Users\MoMo_TV\AppData\Local\recently-used.xbel

Certains fichiers dans TEMP:
====================
2017-11-01 12:54 - 2016-09-23 19:29 - 001732032 _____ (Microsoft Corporation) C:\Users\MoMo_TV\AppData\Local\Temp\dllnt_dump.dll

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-10-30 00:21

==================== Fin de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité