Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 26-12-2017
Exécuté par lorand (administrateur) sur LORAND-PC (27-12-2017 09:23:54)
Exécuté depuis C:\Users\lorand\Desktop
Profils chargés: lorand (Profils disponibles: lorand)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut non détecté(e)!)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Reason Software Company Inc.) C:\Program Files (x86)\Reason\Should I Remove It\ShouldIRemoveIt.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(SFR) C:\Program Files (x86)\SFR\Kit\9props.exe
(BitTorrent Inc.) C:\Users\lorand\AppData\Roaming\uTorrent\uTorrent.exe
(SFR & Celliance) C:\Program Files (x86)\SFR\Gestionnaire de Connexion 3G SFR\SFRABCdService.exe
(SFR) C:\Program Files (x86)\SFR\Gestionnaire de Connexion\SFR.Dashboard.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(BitTorrent Inc.) C:\Users\lorand\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe
(BitTorrent Inc.) C:\Users\lorand\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Magic Desktop for HP notification] => C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1243656 2013-12-09] (Easybits)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [1046488 2017-03-17] (DivX, LLC)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\Run: [Connexion SFR 9props.exe] => C:\Program Files (x86)\SFR\Kit\9props.exe [959880 2011-06-10] (SFR)
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\Run: [uTorrent] => C:\Users\lorand\AppData\Roaming\uTorrent\uTorrent.exe [1981624 2017-12-25] (BitTorrent Inc.)
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: G - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {18c72487-39c5-11e4-8fb7-c80aa9bd8849} - G:\Startme.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {273938ed-ef2d-11e5-a3a8-c80aa9bd8849} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {444727a7-b356-11e6-a17c-c80aa9bd8849} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {8969013c-99b1-11e6-a4e7-c80aa9bd8849} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {8969014a-99b1-11e6-a4e7-c80aa9bd8849} - G:\HiSuiteDownLoader.exe
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52272 2010-03-27] (EasyBits Software Corp.)
Startup: C:\Users\lorand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 - Capture d'écran et lancement.lnk [2014-08-23]
ShortcutTarget: OneNote 2007 - Capture d'écran et lancement.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{6B69B288-91BB-4B11-831A-7CF2BE82B35F}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKLM -> {68E8440F-8D90-4CCB-803E-68F6D82CAFA4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {68E8440F-8D90-4CCB-803E-68F6D82CAFA4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-890935660-2051842472-2433957122-1000 -> {68E8440F-8D90-4CCB-803E-68F6D82CAFA4} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-27] (Sun Microsystems, Inc.)
BHO: Pas de nom -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> Pas de fichier
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-07-03] (Sun Microsystems, Inc.)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-07-03] (Sun Microsystems, Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Pas de fichier
Toolbar: HKU\S-1-5-21-890935660-2051842472-2433957122-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: ; NoTitle
[General]
UpdateTime=16/04/2013 06:59:21
Last_AutoConfig_CRC32=3667743915
EncLevel=1
Type=1
[WISPR]
On=AHpwucsJMrg=
UseIDServer=AHpwucsJMrg=
Login=
Login2=
IMSI2=
URLStart=yn8no/eGiNwHODQWqU7Z0Inn9xs2LJsG
SaveSIM=AHpwucsJMrg=
SMSServer=VRCtnJXhz/Gpi63hvXtL7Q==
SMSCode=Fyrudsl1Jre199vJLxiIwA==
Domain=cuJ32qDXwcHuH+RkNNjZA6i2hOD8V+zu
SMS Prefix=
HSKA_Delay_sec=FPxupiVjt3M=
[Switcher]
Metric_Up=BBO5x6HWNTk=
Metric_Down=VcgjXPsGiaQ=
Metric_QOS=oRStYlppplM=
Confirm3G2WiFi=YHTxrF4ubx8=
ConfirmWiFi23G=YHTxrF4ubx8=
3G_Delay_Disconnect=AHpwucsJMrg=
Nb_MaxReject_SW_WiFi_2_3G=AHpwucsJMrg=
Nb_MaxReject_SW_3G_2_WIFI=AHpwucsJMrg=
Timer_Reject_Priv_3G=xIaOGZ3qKmM=
Timer_Reject_Priv_WiFi=xIaOGZ3qKmM=
Timer_Reject_Priv_Start=KzRUMdW0vmI=
SWITCH_Mode=AHpwucsJMrg=
[TCPUDP Monitor]
Ports List=KTuCFvsSlEs=
Timer2CheckPort=rh9QUWA0vmo=
PortsPersistenceDelay=xIaOGZ3qKmM=
UDPSegCumulDelay=SV2kJ3P8Hb4=
UDPSegNbLimit=YHTxrF4ubx8=
[XP TCP Optimizer]
TcpWindowSize=J3GDxnQwTw8=
GlobalMaxTcpWindowSize=J3GDxnQwTw8=
TcpMaxConnectRetransmissions=SV2kJ3P8Hb4=
Tcp1323Opts=fxOJMIA6/9A=
TcpWindowSize_BAK=YHTxrF4ubx8=
GlobalMaxTcpWindowSize_BAK=YHTxrF4ubx8=
TcpMaxConnectRetransmissions_BAK=YHTxrF4ubx8=
Tcp1323Opts_BAK=YHTxrF4ubx8=
[WIFI]
AutoConnect=YHTxrF4ubx8=
Interval_RefreshData=2rWiHO9V8Vw=
Interval_RefreshStatus=SV2kJ3P8Hb4=
[Ras3G]
AutoConnect=YHTxrF4ubx8=
Refresh3GModem=YHTxrF4ubx8=
Interval_RefreshStatus=SV2kJ3P8Hb4=
CxName=4kGOUWGvjUw=
[3G]
Interval_DeviceDetect=N0VSjb2du/U=
Interval_OpenCom=N0VSjb2du/U=
APN=2YFoFR480U5F1+bANCccZg==
SIM_Slot_Config=AHpwucsJMrg=
Interval_PIN_Test=2rWiHO9V8Vw=
Meter_Date=9wLSuCFGOwcJkWmhgr8zaKAnRxLDTA2M
Meter_DateRaZ=vXk4OEIu5gVfwtrX2JXRImXhVFgYCXwn
Meter_Value=oe46JCTwgfI=
Meter_Time=rV4kmfCddwU=
Operator=9uvKtBu1URE=
CSCA=zixb1pMiEjoT+sLpzsNPvg==
Device_Driver=VFR6+v1tnI2rczuEW+yzVJnIS3I9ya0/Xb+44fMog7o=
SMS Service PhoneNumber=DchVVSDhl5g=
Radio Off AppQuit=YHTxrF4ubx8=
AutoDetect=AHpwucsJMrg=
DataPort=YHTxrF4ubx8=
Modem=
[QOS]
DL_BW=N0VSjb2du/U=
QuickTestURL=XlcGUdZUEUDNRE7Y29siievxJxDd3cAuqabICZD+x+U=
DLServer=wmt5nJiZ/MllA2Mwf7UAKQ==
Ping1Server=UWS664OuKNfkd1hDg4KkwA==
Ping2Server=UWS664OuKNfkd1hDg4KkwA==
DLServerIP=2hqCRc3D5+Q=
Ping1ServerIP=2hqCRc3D5+Q=
Ping2ServerIP=2hqCRc3D5+Q=
URLTargetFile=XlcGUdZUEUDNRE7Y29siifyda5GyD6qrdwnezNguOh4=
TimeOutHTTP_sec=N0VSjb2du/U=
QuickTestURL_Alt=yn8no/eGiNzpBp4uinU4H3547xvxZSdi7VF9w83zGqc=
DLServer_Alt=l6wyUqp3PT7TKJvK1SZOlw==
Ping1Server_Alt=l6wyUqp3PT7TKJvK1SZOlw==
Ping2Server_Alt=l6wyUqp3PT7TKJvK1SZOlw==
DLServerIP_Alt=2hqCRc3D5+Q=
Ping1ServerIP_Alt=2hqCRc3D5+Q=
Ping2ServerIP_Alt=2hqCRc3D5+Q=
URLTargetFile_Alt=yn8no/eGiNzpBp4uinU4H7vkgkwejbsnw/nNWXPo0/I=
Interval_Ping2WiFi=N0VSjb2du/U=
Interval_OK=ahv5zs8RlOA=
Interval_NOK=vS+FePWBKIw=
Interval_OKDown=vS+FePWBKIw=
AntiBagot_Delay_Sec=xIaOGZ3qKmM=
DL_3G_GPRS=N0VSjb2du/U=
DL_3G_EDGE=N0VSjb2du/U=
DL_3G_3G=N0VSjb2du/U=
DL_3G_HSDPA=N0VSjb2du/U=
DL_3G_HSUPA=N0VSjb2du/U=
DL_3G_HSUDPA=N0VSjb2du/U=
NbRetry1xxxx=fxOJMIA6/9A=
[Updater]
URLProd_Data=/Rvp59TLGRORcDO4e67WoaKg6ahUmPMYH94d0l2xj5vDenKcP2mJYPmR+qVM4L1F
URLPreProd_Data=/Rvp59TLGRNBDZ2ZvcWVOLm5r2CgzaQPnbWeAqpUgO06s0KPyTsSdPZhLluusENiKisL5aQYtpc7RNtAlcdXuFzm8GZg2pIb
URLProd_Pub=
URLPreProd_Pub=
URLProd_App=/Rvp59TLGRORcDO4e67WoaKg6ahUmPMYH94d0l2xj5vDenKcP2mJYMHVYCMhqYUbqLaE4PxX7O4=
URLPreProd_App=/Rvp59TLGRNBDZ2ZvcWVOLm5r2CgzaQPnbWeAqpUgO06s0KPyTsSdPZhLluusENiKisL5aQYtpcf03JSCnlQt5yAheBbkG39
CheckAfterStartSec=shp525dF0nM=
[Logger]
Logger_URL=
IntervalSec=oNHFwqvtR7M=
CanProcess=AHpwucsJMrg=
[HotKey]
OpenSysInfo=
OpenRegedit=
OpenInfo=
[non trouvé(e)] <==== ATTENTION
FF ProfilePath: C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 [2017-12-25]
FF Homepage: Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 -> moz-extension://c453a17d-aae2-4331-9095-905375149f21/dynamicHomePage.html
FF NewTab: Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 -> about:newtab
FF Session Restore: Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 -> est activé.
FF NewTabOverride: Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 -> Enabled: _39Members_@www.mapsgalaxy.com
FF Extension: (Avast Passwords) - C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi [2017-12-21]
FF Extension: (Avast SafePrice) - C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\Extensions\sp@avast.com.xpi [2017-12-05]
FF Extension: (Avast Online Security) - C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\Extensions\wrc@avast.com.xpi [2017-10-11]
FF Extension: (Adblock Plus) - C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-12]
FF SearchPlugin: C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\searchplugins\yahoo-avast.xml [2016-12-29]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2009-07-21] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2017-03-16] (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\Windows\SysWOW64\npdeployJava1.dll [2012-07-03] (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2012-07-03] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-890935660-2051842472-2433957122-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\lorand\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default [2017-12-27]
CHR Extension: (Google Drive) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (YouTube) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-31]
CHR Extension: (Recherche Google) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (AdBlock) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-12-25]
CHR Extension: (Gmail) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-31]
CHR Extension: (Chrome Media Router) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-25]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ezSharedSvc; C:\Windows\SysWOW64\ezsvc7.dll [129584 2009-02-22] (EasyBits Sofware AS) [Fichier non signé]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-09-27] (HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-02-22] (Hewlett-Packard Company) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [632792 2011-01-28] (PC Tools)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-06] ()
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [Fichier non signé]
R2 ServiceSFRABCD; C:\Program Files (x86)\SFR\Gestionnaire de Connexion 3G SFR\SFRABCDService.exe [657536 2009-11-05] (SFR & Celliance)
R2 SFR.Dashboard.Service; C:\Program Files (x86)\SFR\Gestionnaire de Connexion\SFR.Dashboard.Service.exe [32160 2013-10-11] (SFR)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-12-27] (Malwarebytes)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [677376 2007-06-29] (PixArt Imaging Inc.)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-23] (Realtek Semiconductor Corp.)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-27 09:23 - 2017-12-27 09:26 - 000022424 _____ C:\Users\lorand\Desktop\FRST.txt
2017-12-27 09:23 - 2017-12-27 09:23 - 000000000 ____D C:\FRST
2017-12-27 09:22 - 2017-12-27 09:22 - 002391552 _____ (Farbar) C:\Users\lorand\Desktop\FRST64.exe
2017-12-27 00:13 - 2017-12-27 00:14 - 000001554 _____ C:\Users\lorand\Desktop\fichier malwarebytes.txt
2017-12-26 21:30 - 2017-12-27 09:17 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-12-26 21:29 - 2017-12-26 21:29 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-12-26 21:28 - 2017-12-26 21:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-12-26 21:28 - 2017-11-29 09:11 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-12-26 21:26 - 2017-12-26 21:27 - 083316440 _____ (Malwarebytes ) C:\Users\lorand\Downloads\mb3-setup-35891.35891-3.3.1.2183-1.0.262-1.0.3374.exe
2017-12-26 21:21 - 2017-12-26 21:21 - 000001005 _____ C:\Users\lorand\Desktop\AdwCleaner[S0] - Raccourci.lnk
2017-12-26 21:11 - 2017-12-26 21:18 - 000000000 ____D C:\AdwCleaner
2017-12-26 21:11 - 2017-12-26 21:11 - 008198432 _____ (Malwarebytes) C:\Users\lorand\Downloads\adwcleaner_7.0.6.0.exe
2017-12-26 20:55 - 2017-12-26 20:58 - 000011091 _____ C:\Users\lorand\Desktop\ZHPCleaner.txt
2017-12-26 20:05 - 2017-12-26 20:05 - 000000832 _____ C:\Users\lorand\Desktop\ZHPCleaner.lnk
2017-12-26 20:04 - 2017-12-26 20:04 - 002999168 _____ C:\Users\lorand\Downloads\ZHPCleaner.exe
2017-12-26 00:35 - 2017-12-27 02:02 - 000164946 _____ C:\Users\lorand\Desktop\ZHPDiag.txt
2017-12-25 23:42 - 2017-12-27 02:03 - 000000000 ____D C:\Users\lorand\AppData\Roaming\ZHP
2017-12-25 23:42 - 2017-12-26 20:04 - 000000000 ____D C:\Users\lorand\AppData\Local\ZHP
2017-12-25 23:42 - 2017-12-25 23:42 - 000000822 _____ C:\Users\lorand\Desktop\ZHPDiag.lnk
2017-12-25 23:41 - 2017-12-25 23:41 - 002955136 _____ C:\Users\lorand\Downloads\ZHPDiag3.exe
2017-12-25 22:41 - 2017-12-25 22:41 - 000002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2017-12-25 22:41 - 2017-12-25 22:41 - 000001912 _____ C:\Windows\epplauncher.mif
2017-12-25 22:41 - 2017-12-25 22:41 - 000000000 ____D C:\Program Files (x86)\Microsoft Security Client
2017-12-25 22:40 - 2017-12-25 22:41 - 000000000 ____D C:\Program Files\Microsoft Security Client
2017-12-25 22:34 - 2017-12-25 22:38 - 015084224 _____ (Microsoft Corporation) C:\Users\lorand\Downloads\mseinstall.exe
2017-12-25 19:15 - 2017-12-25 19:15 - 000000000 ____D C:\Program Files\Malwarebytes
2017-12-25 19:13 - 2017-12-25 19:14 - 078346672 _____ (Malwarebytes ) C:\Users\lorand\Downloads\mb3-setup-consumer-3.3.1.2183 (1).exe
2017-12-25 18:46 - 2017-12-25 18:46 - 000000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-12-25 18:46 - 2017-12-25 18:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-12-25 18:46 - 2017-12-25 18:46 - 000000000 ____D C:\Program Files\CCleaner
2017-12-25 18:43 - 2017-12-25 18:43 - 000001236 _____ C:\Users\lorand\Desktop\ccsetup538 (1) - Raccourci.lnk
2017-12-25 18:34 - 2017-12-25 18:34 - 011201632 _____ (Piriform Ltd) C:\Users\lorand\Downloads\ccsetup538 (1).exe
2017-12-25 07:47 - 2017-12-27 09:16 - 000000000 ____D C:\Users\lorand\AppData\LocalLow\uTorrent
2017-12-16 19:09 - 2017-12-16 19:27 - 734530898 _____ C:\Users\lorand\Documents\La montagne entre nous.avi
2017-12-14 18:08 - 2017-12-14 18:08 - 000002100 _____ C:\Users\lorand\Downloads\33620171102121334086619-recap.pdf
2017-12-06 17:01 - 2017-12-06 17:01 - 000000000 ____D C:\Program Files\Common Files\Avast Software
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-27 09:26 - 2015-01-18 13:02 - 000000000 ____D C:\Users\lorand\AppData\Roaming\uTorrent
2017-12-27 09:15 - 2013-04-13 08:13 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2017-12-27 09:15 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-27 01:26 - 2009-07-14 05:45 - 000026192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-12-27 01:26 - 2009-07-14 05:45 - 000026192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-12-26 21:28 - 2012-01-29 10:29 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-12-25 19:00 - 2011-12-07 07:47 - 000000268 _____ C:\Windows\Tasks\RMSchedule.job
2017-12-25 18:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-12-25 18:47 - 2010-11-20 15:17 - 000000000 ____D C:\Users\lorand\AppData\Local\CrashDumps
2017-12-25 18:47 - 2009-09-07 02:57 - 000000000 ____D C:\Windows\Panther
2017-12-25 18:47 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\ModemLogs
2017-12-25 18:18 - 2017-04-04 12:50 - 000000000 ____D C:\Users\lorand\AppData\Local\Molotov
2017-12-25 18:08 - 2011-07-23 19:43 - 000000000 ____D C:\Program Files (x86)\Naviextras
2017-12-25 17:40 - 2012-01-04 13:51 - 000000000 ____D C:\Program Files\AVAST Software
2017-12-25 17:25 - 2015-12-03 19:03 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2017-12-25 17:16 - 2016-11-20 10:28 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-12-25 17:16 - 2012-05-17 09:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-12-25 17:07 - 2016-11-22 18:51 - 000000000 ____D C:\Users\lorand\AppData\LocalLow\Mozilla
2017-12-25 16:58 - 2017-03-19 09:37 - 000000000 ____D C:\Users\lorand\AppData\Local\Facebook
2017-12-25 16:44 - 2011-12-11 19:43 - 000000000 ____D C:\Users\lorand\AppData\LocalLow\Yahoo!
2017-12-25 16:44 - 2011-12-11 19:43 - 000000000 ____D C:\Program Files (x86)\Yahoo!
2017-12-25 08:30 - 2011-11-06 15:58 - 000000450 ____H C:\Windows\Tasks\Norton Security Scan for lorand.job
2017-12-24 19:16 - 2010-03-27 16:01 - 000747894 _____ C:\Windows\system32\perfh00C.dat
2017-12-24 19:16 - 2010-03-27 16:01 - 000150386 _____ C:\Windows\system32\perfc00C.dat
2017-12-24 19:16 - 2009-07-14 06:13 - 001669584 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-22 17:43 - 2013-06-26 17:47 - 000000000 ___RD C:\Users\lorand\Desktop\Vidéos
2017-12-22 15:07 - 2017-11-17 18:48 - 000000336 _____ C:\Windows\Tasks\HPCeeScheduleForlorand.job
2017-12-14 13:34 - 2014-06-13 17:17 - 000002153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-14 13:34 - 2014-06-13 17:17 - 000002141 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-12-13 07:39 - 2012-08-21 17:18 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-12-13 07:39 - 2012-08-21 17:18 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-13 07:39 - 2011-05-14 06:40 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-13 07:39 - 2010-03-27 07:43 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-12-03 13:26 - 2012-03-30 14:01 - 000000346 _____ C:\Windows\Tasks\HPCeeScheduleForLORAND-PC$.job
2017-12-02 20:57 - 2010-10-28 15:41 - 000000000 ____D C:\Users\lorand\AppData\Roaming\vlc
==================== Fichiers à la racine de certains dossiers =======
2017-11-15 16:27 - 2017-11-15 16:27 - 007649280 _____ () C:\Program Files (x86)\GUT224F.tmp
2015-02-08 08:14 - 2015-02-08 08:14 - 006103040 _____ () C:\Program Files (x86)\GUT6AE3.tmp
2012-11-18 19:41 - 2012-12-02 10:07 - 000000006 _____ () C:\Program Files (x86)\Common Files\WPVersion.txt
2014-06-09 11:01 - 2014-06-09 11:01 - 000000019 _____ () C:\Users\lorand\AppData\Roaming\ClipExtractor-UpdatePerformed.txt
2014-06-09 11:06 - 2014-06-09 11:10 - 000000595 _____ () C:\Users\lorand\AppData\Roaming\ClipExtractor-YouTube-Clip-ExtractorFlvConverterDefaultSettings.xml
2011-01-28 21:20 - 2011-06-10 20:58 - 000001854 _____ () C:\Users\lorand\AppData\Roaming\GhostObjGAFix.xml
2011-01-09 17:33 - 2017-10-28 14:04 - 000006004 _____ () C:\Users\lorand\AppData\Roaming\wklnhst.dat
Certains fichiers dans TEMP:
====================
2017-12-25 17:48 - 2006-12-17 14:07 - 000401462 _____ (Microsoft Corporation) C:\Users\lorand\AppData\Local\Temp\msvcp60.dll
2017-12-25 17:48 - 2007-06-01 19:08 - 000409692 _____ (Ashok P. Nadkarni) C:\Users\lorand\AppData\Local\Temp\twapi-2.0a2.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-12-24 21:51
==================== Fin de FRST.txt ============================
Exécuté par lorand (administrateur) sur LORAND-PC (27-12-2017 09:23:54)
Exécuté depuis C:\Users\lorand\Desktop
Profils chargés: lorand (Profils disponibles: lorand)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut non détecté(e)!)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Reason Software Company Inc.) C:\Program Files (x86)\Reason\Should I Remove It\ShouldIRemoveIt.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(PC Tools) C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(SFR) C:\Program Files (x86)\SFR\Kit\9props.exe
(BitTorrent Inc.) C:\Users\lorand\AppData\Roaming\uTorrent\uTorrent.exe
(SFR & Celliance) C:\Program Files (x86)\SFR\Gestionnaire de Connexion 3G SFR\SFRABCdService.exe
(SFR) C:\Program Files (x86)\SFR\Gestionnaire de Connexion\SFR.Dashboard.Service.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(BitTorrent Inc.) C:\Users\lorand\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe
(BitTorrent Inc.) C:\Users\lorand\AppData\Roaming\uTorrent\updates\3.5.1_44332\utorrentie.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
(Realtek Semiconductor Corp.) C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Magic Desktop for HP notification] => C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe [1243656 2013-12-09] (Easybits)
HKLM-x32\...\Run: [DivXMediaServer] => C:\Program Files (x86)\DivX\DivX Media Server\DivXMediaServer.exe [1046488 2017-03-17] (DivX, LLC)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\Run: [Connexion SFR 9props.exe] => C:\Program Files (x86)\SFR\Kit\9props.exe [959880 2011-06-10] (SFR)
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\Run: [uTorrent] => C:\Users\lorand\AppData\Roaming\uTorrent\uTorrent.exe [1981624 2017-12-25] (BitTorrent Inc.)
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: G - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {18c72487-39c5-11e4-8fb7-c80aa9bd8849} - G:\Startme.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {273938ed-ef2d-11e5-a3a8-c80aa9bd8849} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {444727a7-b356-11e6-a17c-c80aa9bd8849} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {8969013c-99b1-11e6-a4e7-c80aa9bd8849} - G:\HiSuiteDownLoader.exe
HKU\S-1-5-21-890935660-2051842472-2433957122-1000\...\MountPoints2: {8969014a-99b1-11e6-a4e7-c80aa9bd8849} - G:\HiSuiteDownLoader.exe
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52272 2010-03-27] (EasyBits Software Corp.)
Startup: C:\Users\lorand\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 - Capture d'écran et lancement.lnk [2014-08-23]
ShortcutTarget: OneNote 2007 - Capture d'écran et lancement.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{6B69B288-91BB-4B11-831A-7CF2BE82B35F}: [DhcpNameServer] 192.168.1.254
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKLM -> {68E8440F-8D90-4CCB-803E-68F6D82CAFA4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKLM-x32 -> {68E8440F-8D90-4CCB-803E-68F6D82CAFA4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=CPNTDF&pc=CPNTDF&src=IE-SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-890935660-2051842472-2433957122-1000 -> {68E8440F-8D90-4CCB-803E-68F6D82CAFA4} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll [2010-03-27] (Sun Microsystems, Inc.)
BHO: Pas de nom -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> Pas de fichier
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre6\bin\ssv.dll [2012-07-03] (Sun Microsystems, Inc.)
BHO-x32: Programme d'aide de l'Assistant de connexion Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll [2012-07-03] (Sun Microsystems, Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Pas de fichier
Toolbar: HKU\S-1-5-21-890935660-2051842472-2433957122-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
DPF: HKLM-x32 {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/fr/uno1/GAME_UNO1.cab
DPF: HKLM-x32 {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: ; NoTitle
[General]
UpdateTime=16/04/2013 06:59:21
Last_AutoConfig_CRC32=3667743915
EncLevel=1
Type=1
[WISPR]
On=AHpwucsJMrg=
UseIDServer=AHpwucsJMrg=
Login=
Login2=
IMSI2=
URLStart=yn8no/eGiNwHODQWqU7Z0Inn9xs2LJsG
SaveSIM=AHpwucsJMrg=
SMSServer=VRCtnJXhz/Gpi63hvXtL7Q==
SMSCode=Fyrudsl1Jre199vJLxiIwA==
Domain=cuJ32qDXwcHuH+RkNNjZA6i2hOD8V+zu
SMS Prefix=
HSKA_Delay_sec=FPxupiVjt3M=
[Switcher]
Metric_Up=BBO5x6HWNTk=
Metric_Down=VcgjXPsGiaQ=
Metric_QOS=oRStYlppplM=
Confirm3G2WiFi=YHTxrF4ubx8=
ConfirmWiFi23G=YHTxrF4ubx8=
3G_Delay_Disconnect=AHpwucsJMrg=
Nb_MaxReject_SW_WiFi_2_3G=AHpwucsJMrg=
Nb_MaxReject_SW_3G_2_WIFI=AHpwucsJMrg=
Timer_Reject_Priv_3G=xIaOGZ3qKmM=
Timer_Reject_Priv_WiFi=xIaOGZ3qKmM=
Timer_Reject_Priv_Start=KzRUMdW0vmI=
SWITCH_Mode=AHpwucsJMrg=
[TCPUDP Monitor]
Ports List=KTuCFvsSlEs=
Timer2CheckPort=rh9QUWA0vmo=
PortsPersistenceDelay=xIaOGZ3qKmM=
UDPSegCumulDelay=SV2kJ3P8Hb4=
UDPSegNbLimit=YHTxrF4ubx8=
[XP TCP Optimizer]
TcpWindowSize=J3GDxnQwTw8=
GlobalMaxTcpWindowSize=J3GDxnQwTw8=
TcpMaxConnectRetransmissions=SV2kJ3P8Hb4=
Tcp1323Opts=fxOJMIA6/9A=
TcpWindowSize_BAK=YHTxrF4ubx8=
GlobalMaxTcpWindowSize_BAK=YHTxrF4ubx8=
TcpMaxConnectRetransmissions_BAK=YHTxrF4ubx8=
Tcp1323Opts_BAK=YHTxrF4ubx8=
[WIFI]
AutoConnect=YHTxrF4ubx8=
Interval_RefreshData=2rWiHO9V8Vw=
Interval_RefreshStatus=SV2kJ3P8Hb4=
[Ras3G]
AutoConnect=YHTxrF4ubx8=
Refresh3GModem=YHTxrF4ubx8=
Interval_RefreshStatus=SV2kJ3P8Hb4=
CxName=4kGOUWGvjUw=
[3G]
Interval_DeviceDetect=N0VSjb2du/U=
Interval_OpenCom=N0VSjb2du/U=
APN=2YFoFR480U5F1+bANCccZg==
SIM_Slot_Config=AHpwucsJMrg=
Interval_PIN_Test=2rWiHO9V8Vw=
Meter_Date=9wLSuCFGOwcJkWmhgr8zaKAnRxLDTA2M
Meter_DateRaZ=vXk4OEIu5gVfwtrX2JXRImXhVFgYCXwn
Meter_Value=oe46JCTwgfI=
Meter_Time=rV4kmfCddwU=
Operator=9uvKtBu1URE=
CSCA=zixb1pMiEjoT+sLpzsNPvg==
Device_Driver=VFR6+v1tnI2rczuEW+yzVJnIS3I9ya0/Xb+44fMog7o=
SMS Service PhoneNumber=DchVVSDhl5g=
Radio Off AppQuit=YHTxrF4ubx8=
AutoDetect=AHpwucsJMrg=
DataPort=YHTxrF4ubx8=
Modem=
[QOS]
DL_BW=N0VSjb2du/U=
QuickTestURL=XlcGUdZUEUDNRE7Y29siievxJxDd3cAuqabICZD+x+U=
DLServer=wmt5nJiZ/MllA2Mwf7UAKQ==
Ping1Server=UWS664OuKNfkd1hDg4KkwA==
Ping2Server=UWS664OuKNfkd1hDg4KkwA==
DLServerIP=2hqCRc3D5+Q=
Ping1ServerIP=2hqCRc3D5+Q=
Ping2ServerIP=2hqCRc3D5+Q=
URLTargetFile=XlcGUdZUEUDNRE7Y29siifyda5GyD6qrdwnezNguOh4=
TimeOutHTTP_sec=N0VSjb2du/U=
QuickTestURL_Alt=yn8no/eGiNzpBp4uinU4H3547xvxZSdi7VF9w83zGqc=
DLServer_Alt=l6wyUqp3PT7TKJvK1SZOlw==
Ping1Server_Alt=l6wyUqp3PT7TKJvK1SZOlw==
Ping2Server_Alt=l6wyUqp3PT7TKJvK1SZOlw==
DLServerIP_Alt=2hqCRc3D5+Q=
Ping1ServerIP_Alt=2hqCRc3D5+Q=
Ping2ServerIP_Alt=2hqCRc3D5+Q=
URLTargetFile_Alt=yn8no/eGiNzpBp4uinU4H7vkgkwejbsnw/nNWXPo0/I=
Interval_Ping2WiFi=N0VSjb2du/U=
Interval_OK=ahv5zs8RlOA=
Interval_NOK=vS+FePWBKIw=
Interval_OKDown=vS+FePWBKIw=
AntiBagot_Delay_Sec=xIaOGZ3qKmM=
DL_3G_GPRS=N0VSjb2du/U=
DL_3G_EDGE=N0VSjb2du/U=
DL_3G_3G=N0VSjb2du/U=
DL_3G_HSDPA=N0VSjb2du/U=
DL_3G_HSUPA=N0VSjb2du/U=
DL_3G_HSUDPA=N0VSjb2du/U=
NbRetry1xxxx=fxOJMIA6/9A=
[Updater]
URLProd_Data=/Rvp59TLGRORcDO4e67WoaKg6ahUmPMYH94d0l2xj5vDenKcP2mJYPmR+qVM4L1F
URLPreProd_Data=/Rvp59TLGRNBDZ2ZvcWVOLm5r2CgzaQPnbWeAqpUgO06s0KPyTsSdPZhLluusENiKisL5aQYtpc7RNtAlcdXuFzm8GZg2pIb
URLProd_Pub=
URLPreProd_Pub=
URLProd_App=/Rvp59TLGRORcDO4e67WoaKg6ahUmPMYH94d0l2xj5vDenKcP2mJYMHVYCMhqYUbqLaE4PxX7O4=
URLPreProd_App=/Rvp59TLGRNBDZ2ZvcWVOLm5r2CgzaQPnbWeAqpUgO06s0KPyTsSdPZhLluusENiKisL5aQYtpcf03JSCnlQt5yAheBbkG39
CheckAfterStartSec=shp525dF0nM=
[Logger]
Logger_URL=
IntervalSec=oNHFwqvtR7M=
CanProcess=AHpwucsJMrg=
[HotKey]
OpenSysInfo=
OpenRegedit=
OpenInfo=
[non trouvé(e)] <==== ATTENTION
FF ProfilePath: C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 [2017-12-25]
FF Homepage: Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 -> moz-extension://c453a17d-aae2-4331-9095-905375149f21/dynamicHomePage.html
FF NewTab: Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 -> about:newtab
FF Session Restore: Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 -> est activé.
FF NewTabOverride: Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389 -> Enabled: _39Members_@www.mapsgalaxy.com
FF Extension: (Avast Passwords) - C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi [2017-12-21]
FF Extension: (Avast SafePrice) - C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\Extensions\sp@avast.com.xpi [2017-12-05]
FF Extension: (Avast Online Security) - C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\Extensions\wrc@avast.com.xpi [2017-10-11]
FF Extension: (Adblock Plus) - C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-12]
FF SearchPlugin: C:\Users\lorand\AppData\Roaming\Mozilla\Firefox\Profiles\uuace2jn.default-1471592026389\searchplugins\yahoo-avast.xml [2016-12-29]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-13] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-13] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2009-07-21] (Adobe Systems, Inc.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2017-03-16] (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\Windows\SysWOW64\npdeployJava1.dll [2012-07-03] (Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2012-07-03] (Sun Microsystems, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2012-10-12] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2013-05-08] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-890935660-2051842472-2433957122-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\lorand\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-08-28] (Unity Technologies ApS)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default [2017-12-27]
CHR Extension: (Google Drive) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-31]
CHR Extension: (YouTube) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-31]
CHR Extension: (Recherche Google) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-31]
CHR Extension: (AdBlock) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-12-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-12-25]
CHR Extension: (Gmail) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-31]
CHR Extension: (Chrome Media Router) - C:\Users\lorand\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-25]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ezSharedSvc; C:\Windows\SysWOW64\ezsvc7.dll [129584 2009-02-22] (EasyBits Sofware AS) [Fichier non signé]
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [323952 2017-09-27] (HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.)
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-02-22] (Hewlett-Packard Company) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 PCToolsSSDMonitorSvc; C:\Program Files (x86)\Common Files\PC Tools\sMonitor\StartManSvc.exe [632792 2011-01-28] (PC Tools)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [247152 2009-07-06] ()
R2 RtVOsdService; C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe [315392 2010-06-24] (Realtek Semiconductor Corp.) [Fichier non signé]
R2 ServiceSFRABCD; C:\Program Files (x86)\SFR\Gestionnaire de Connexion 3G SFR\SFRABCDService.exe [657536 2009-11-05] (SFR & Celliance)
R2 SFR.Dashboard.Service; C:\Program Files (x86)\SFR\Gestionnaire de Connexion\SFR.Dashboard.Service.exe [32160 2013-10-11] (SFR)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-12-27] (Malwarebytes)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 PAC207; C:\Windows\System32\DRIVERS\PFC027.SYS [677376 2007-06-29] (PixArt Imaging Inc.)
S3 RSUSBSTOR; C:\Windows\SysWOW64\Drivers\RtsUStor.sys [225280 2009-09-23] (Realtek Semiconductor Corp.)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-27 09:23 - 2017-12-27 09:26 - 000022424 _____ C:\Users\lorand\Desktop\FRST.txt
2017-12-27 09:23 - 2017-12-27 09:23 - 000000000 ____D C:\FRST
2017-12-27 09:22 - 2017-12-27 09:22 - 002391552 _____ (Farbar) C:\Users\lorand\Desktop\FRST64.exe
2017-12-27 00:13 - 2017-12-27 00:14 - 000001554 _____ C:\Users\lorand\Desktop\fichier malwarebytes.txt
2017-12-26 21:30 - 2017-12-27 09:17 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2017-12-26 21:29 - 2017-12-26 21:29 - 000001867 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-12-26 21:28 - 2017-12-26 21:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-12-26 21:28 - 2017-11-29 09:11 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
2017-12-26 21:26 - 2017-12-26 21:27 - 083316440 _____ (Malwarebytes ) C:\Users\lorand\Downloads\mb3-setup-35891.35891-3.3.1.2183-1.0.262-1.0.3374.exe
2017-12-26 21:21 - 2017-12-26 21:21 - 000001005 _____ C:\Users\lorand\Desktop\AdwCleaner[S0] - Raccourci.lnk
2017-12-26 21:11 - 2017-12-26 21:18 - 000000000 ____D C:\AdwCleaner
2017-12-26 21:11 - 2017-12-26 21:11 - 008198432 _____ (Malwarebytes) C:\Users\lorand\Downloads\adwcleaner_7.0.6.0.exe
2017-12-26 20:55 - 2017-12-26 20:58 - 000011091 _____ C:\Users\lorand\Desktop\ZHPCleaner.txt
2017-12-26 20:05 - 2017-12-26 20:05 - 000000832 _____ C:\Users\lorand\Desktop\ZHPCleaner.lnk
2017-12-26 20:04 - 2017-12-26 20:04 - 002999168 _____ C:\Users\lorand\Downloads\ZHPCleaner.exe
2017-12-26 00:35 - 2017-12-27 02:02 - 000164946 _____ C:\Users\lorand\Desktop\ZHPDiag.txt
2017-12-25 23:42 - 2017-12-27 02:03 - 000000000 ____D C:\Users\lorand\AppData\Roaming\ZHP
2017-12-25 23:42 - 2017-12-26 20:04 - 000000000 ____D C:\Users\lorand\AppData\Local\ZHP
2017-12-25 23:42 - 2017-12-25 23:42 - 000000822 _____ C:\Users\lorand\Desktop\ZHPDiag.lnk
2017-12-25 23:41 - 2017-12-25 23:41 - 002955136 _____ C:\Users\lorand\Downloads\ZHPDiag3.exe
2017-12-25 22:41 - 2017-12-25 22:41 - 000002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2017-12-25 22:41 - 2017-12-25 22:41 - 000001912 _____ C:\Windows\epplauncher.mif
2017-12-25 22:41 - 2017-12-25 22:41 - 000000000 ____D C:\Program Files (x86)\Microsoft Security Client
2017-12-25 22:40 - 2017-12-25 22:41 - 000000000 ____D C:\Program Files\Microsoft Security Client
2017-12-25 22:34 - 2017-12-25 22:38 - 015084224 _____ (Microsoft Corporation) C:\Users\lorand\Downloads\mseinstall.exe
2017-12-25 19:15 - 2017-12-25 19:15 - 000000000 ____D C:\Program Files\Malwarebytes
2017-12-25 19:13 - 2017-12-25 19:14 - 078346672 _____ (Malwarebytes ) C:\Users\lorand\Downloads\mb3-setup-consumer-3.3.1.2183 (1).exe
2017-12-25 18:46 - 2017-12-25 18:46 - 000000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2017-12-25 18:46 - 2017-12-25 18:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-12-25 18:46 - 2017-12-25 18:46 - 000000000 ____D C:\Program Files\CCleaner
2017-12-25 18:43 - 2017-12-25 18:43 - 000001236 _____ C:\Users\lorand\Desktop\ccsetup538 (1) - Raccourci.lnk
2017-12-25 18:34 - 2017-12-25 18:34 - 011201632 _____ (Piriform Ltd) C:\Users\lorand\Downloads\ccsetup538 (1).exe
2017-12-25 07:47 - 2017-12-27 09:16 - 000000000 ____D C:\Users\lorand\AppData\LocalLow\uTorrent
2017-12-16 19:09 - 2017-12-16 19:27 - 734530898 _____ C:\Users\lorand\Documents\La montagne entre nous.avi
2017-12-14 18:08 - 2017-12-14 18:08 - 000002100 _____ C:\Users\lorand\Downloads\33620171102121334086619-recap.pdf
2017-12-06 17:01 - 2017-12-06 17:01 - 000000000 ____D C:\Program Files\Common Files\Avast Software
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-12-27 09:26 - 2015-01-18 13:02 - 000000000 ____D C:\Users\lorand\AppData\Roaming\uTorrent
2017-12-27 09:15 - 2013-04-13 08:13 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2017-12-27 09:15 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-12-27 01:26 - 2009-07-14 05:45 - 000026192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-12-27 01:26 - 2009-07-14 05:45 - 000026192 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-12-26 21:28 - 2012-01-29 10:29 - 000000000 ____D C:\ProgramData\Malwarebytes
2017-12-25 19:00 - 2011-12-07 07:47 - 000000268 _____ C:\Windows\Tasks\RMSchedule.job
2017-12-25 18:56 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2017-12-25 18:47 - 2010-11-20 15:17 - 000000000 ____D C:\Users\lorand\AppData\Local\CrashDumps
2017-12-25 18:47 - 2009-09-07 02:57 - 000000000 ____D C:\Windows\Panther
2017-12-25 18:47 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\ModemLogs
2017-12-25 18:18 - 2017-04-04 12:50 - 000000000 ____D C:\Users\lorand\AppData\Local\Molotov
2017-12-25 18:08 - 2011-07-23 19:43 - 000000000 ____D C:\Program Files (x86)\Naviextras
2017-12-25 17:40 - 2012-01-04 13:51 - 000000000 ____D C:\Program Files\AVAST Software
2017-12-25 17:25 - 2015-12-03 19:03 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2017-12-25 17:16 - 2016-11-20 10:28 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-12-25 17:16 - 2012-05-17 09:13 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-12-25 17:07 - 2016-11-22 18:51 - 000000000 ____D C:\Users\lorand\AppData\LocalLow\Mozilla
2017-12-25 16:58 - 2017-03-19 09:37 - 000000000 ____D C:\Users\lorand\AppData\Local\Facebook
2017-12-25 16:44 - 2011-12-11 19:43 - 000000000 ____D C:\Users\lorand\AppData\LocalLow\Yahoo!
2017-12-25 16:44 - 2011-12-11 19:43 - 000000000 ____D C:\Program Files (x86)\Yahoo!
2017-12-25 08:30 - 2011-11-06 15:58 - 000000450 ____H C:\Windows\Tasks\Norton Security Scan for lorand.job
2017-12-24 19:16 - 2010-03-27 16:01 - 000747894 _____ C:\Windows\system32\perfh00C.dat
2017-12-24 19:16 - 2010-03-27 16:01 - 000150386 _____ C:\Windows\system32\perfc00C.dat
2017-12-24 19:16 - 2009-07-14 06:13 - 001669584 _____ C:\Windows\system32\PerfStringBackup.INI
2017-12-22 17:43 - 2013-06-26 17:47 - 000000000 ___RD C:\Users\lorand\Desktop\Vidéos
2017-12-22 15:07 - 2017-11-17 18:48 - 000000336 _____ C:\Windows\Tasks\HPCeeScheduleForlorand.job
2017-12-14 13:34 - 2014-06-13 17:17 - 000002153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-12-14 13:34 - 2014-06-13 17:17 - 000002141 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-12-13 07:39 - 2012-08-21 17:18 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-12-13 07:39 - 2012-08-21 17:18 - 000000000 ____D C:\Windows\system32\Macromed
2017-12-13 07:39 - 2011-05-14 06:40 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-12-13 07:39 - 2010-03-27 07:43 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-12-03 13:26 - 2012-03-30 14:01 - 000000346 _____ C:\Windows\Tasks\HPCeeScheduleForLORAND-PC$.job
2017-12-02 20:57 - 2010-10-28 15:41 - 000000000 ____D C:\Users\lorand\AppData\Roaming\vlc
==================== Fichiers à la racine de certains dossiers =======
2017-11-15 16:27 - 2017-11-15 16:27 - 007649280 _____ () C:\Program Files (x86)\GUT224F.tmp
2015-02-08 08:14 - 2015-02-08 08:14 - 006103040 _____ () C:\Program Files (x86)\GUT6AE3.tmp
2012-11-18 19:41 - 2012-12-02 10:07 - 000000006 _____ () C:\Program Files (x86)\Common Files\WPVersion.txt
2014-06-09 11:01 - 2014-06-09 11:01 - 000000019 _____ () C:\Users\lorand\AppData\Roaming\ClipExtractor-UpdatePerformed.txt
2014-06-09 11:06 - 2014-06-09 11:10 - 000000595 _____ () C:\Users\lorand\AppData\Roaming\ClipExtractor-YouTube-Clip-ExtractorFlvConverterDefaultSettings.xml
2011-01-28 21:20 - 2011-06-10 20:58 - 000001854 _____ () C:\Users\lorand\AppData\Roaming\GhostObjGAFix.xml
2011-01-09 17:33 - 2017-10-28 14:04 - 000006004 _____ () C:\Users\lorand\AppData\Roaming\wklnhst.dat
Certains fichiers dans TEMP:
====================
2017-12-25 17:48 - 2006-12-17 14:07 - 000401462 _____ (Microsoft Corporation) C:\Users\lorand\AppData\Local\Temp\msvcp60.dll
2017-12-25 17:48 - 2007-06-01 19:08 - 000409692 _____ (Ashok P. Nadkarni) C:\Users\lorand\AppData\Local\Temp\twapi-2.0a2.dll
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-12-24 21:51
==================== Fin de FRST.txt ============================