cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 17.01.2018 01
Exécuté par joe (administrateur) sur JOE-PC (18-01-2018 21:09:58)
Exécuté depuis C:\Users\joe\Desktop
Profils chargés: joe (Profils disponibles: joe)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.03\AsSysCtrlService.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ALCPU) C:\Program Files\Core Temp\Core Temp.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\TurboV EVO\TurboVHelp.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(juvlarN) C:\Users\joe\Desktop\vibrance.GUI.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTAgent.exe
(Spotify Ltd) C:\Users\joe\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ASUSTeK Computer Inc.) C:\Program Files\ASUS\TurboV EVO\TurboV_EVO.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avpui.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe
(AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksdeui.exe
() C:\Users\joe\AppData\Roaming\ZHP\ZHPDiag3.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Gavrila Martau) C:\Program Files\Total Uninstall 6\Tu.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10038304 2010-01-29] (Realtek Semiconductor)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2010-01-22] (NEC Electronics Corporation)
HKLM-x32\...\Run: [TurboV EVO] => C:\Program Files\ASUS\TurboV EVO\TurboV_EVO.exe [9921664 2010-05-06] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2131344 2016-06-20] (Wondershare)
HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3111712 2017-12-15] (Valve Corporation)
HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\Run: [vibranceGUI] => C:\Users\joe\Desktop\vibrance.GUI.exe [1072128 2015-05-26] (juvlarN)
HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3903056 2015-05-21] (Tonec Inc.)
HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-04-24] (Disc Soft Ltd)
HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\Run: [Spotify Web Helper] => C:\Users\joe\AppData\Roaming\Spotify\SpotifyWebHelper.exe [780688 2018-01-13] (Spotify Ltd)
HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\MountPoints2: {6c621b8f-4109-11e5-8b72-20cf3001cdbb} - H:\OriginInstaller.exe
HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\MountPoints2: {8cdba204-5a9f-11e5-9964-20cf3001cdbb} - J:\SETUP.EXE
HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\MountPoints2: {fb201657-4ce2-11e5-bf36-20cf3001cdbb} - I:\Setup.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{583F4045-EC79-4227-BFB3-8725DA1B523B}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{5F7A4B02-7F35-447E-BC0F-E19C1A35BEA0}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{750EBC80-AD4A-41EC-B509-18565BBDC72A}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-172831021-3283507413-674538517-1000 -> DefaultScope {07B87BE3-40DE-4457-BFF4-6F4905B1C61A} URL = hxxp://fr.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
SearchScopes: HKU\S-1-5-21-172831021-3283507413-674538517-1000 -> {07B87BE3-40DE-4457-BFF4-6F4905B1C61A} URL = hxxp://fr.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=EGMB
SearchScopes: HKU\S-1-5-21-172831021-3283507413-674538517-1000 -> {E3CB1A23-7306-46f1-A6CD-7B857A078114} URL = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=5369970905&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=fr&q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2017-07-12] (Internet Download Manager, Tonec Inc.)
BHO: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\IEExt\ie_plugin.dll [2018-01-09] (AO Kaspersky Lab)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2017-07-12] (Internet Download Manager, Tonec Inc.)
BHO-x32: Kaspersky Protection -> {0E2877D3-2641-4970-B794-A553E295428D} -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\IEExt\ie_plugin.dll [2018-01-09] (AO Kaspersky Lab)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
Toolbar: HKLM - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\IEExt\ie_plugin.dll [2018-01-09] (AO Kaspersky Lab)
Toolbar: HKLM-x32 - Kaspersky Protection Toolbar - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\IEExt\ie_plugin.dll [2018-01-09] (AO Kaspersky Lab)

FireFox:
========
FF DefaultProfile: 2u0holt8.default
FF ProfilePath: C:\Users\joe\AppData\Roaming\Mozilla\Firefox\Profiles\2u0holt8.default [2018-01-18]
FF Homepage: Mozilla\Firefox\Profiles\2u0holt8.default -> hxxp://www.google.fr/
FF Extension: (Disable Crash Auto Submit) - C:\Users\joe\AppData\Roaming\Mozilla\Firefox\Profiles\2u0holt8.default\features\{51fc67c2-c367-4207-b2c5-b525c0d0f17e}\disable-crash-autosubmit@mozilla.org.xpi [2018-01-15] [Legacy]
FF Extension: (Disable JavaScript Shared Memory) - C:\Users\joe\AppData\Roaming\Mozilla\Firefox\Profiles\2u0holt8.default\features\{51fc67c2-c367-4207-b2c5-b525c0d0f17e}\disable-js-shared-memory@mozilla.org.xpi [2018-01-15] [Legacy]
FF HKLM\...\Firefox\Extensions: [light_plugin_448EC0843447455C9DA355B3C2811D6A@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi
FF Extension: (Kaspersky Protection) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi [2018-01-09]
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_448EC0843447455C9DA355B3C2811D6A@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\FFExt\light_plugin_firefox\addon.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => non trouvé(e)
FF HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi
FF Extension: (Pas de nom) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2017-07-14]
FF HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\joe\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\joe\AppData\Roaming\IDM\idmmzcc5 [2018-01-18] [Legacy] [non signé]
FF HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\joe\AppData\Roaming\IDM\idmmzcc5
FF HKU\S-1-5-21-172831021-3283507413-674538517-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_137.dll [2018-01-10] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_137.dll [2018-01-10] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-07-30] ()
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-01-04] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-01-04] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-01-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-01-07] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-172831021-3283507413-674538517-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\joe\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-05-13] (RocketLife, LLP)

Chrome:
=======
CHR Profile: C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default [2018-01-18]
CHR Extension: (Adobe Acrobat) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-01-18]
CHR Extension: (Kaspersky Protection) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\mchjnmdbdlkdbfliogedbnpnanfjnolk [2018-01-18]
CHR Extension: (IDM Integration Module) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2018-01-18]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-01-18]
CHR Extension: (Chrome Media Router) - C:\Users\joe\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-01-18]
CHR HKLM\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-07-14]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mchjnmdbdlkdbfliogedbnpnanfjnolk] - hxxps://chrome.google.com/webstore/detail/mchjnmdbdlkdbfliogedbnpnanfjnolk
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-07-14]

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.03\AsSysCtrlService.exe [96896 2009-12-28] (ASUSTeK Computer Inc.)
R2 AVP18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\avp.exe [354672 2017-01-24] (AO Kaspersky Lab)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-04-24] (Disc Soft Ltd)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [332144 2017-11-21] (HP Inc.)
R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.)
S3 klvssbridge64_18.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 18.0.0\x64\vssbridge64.exe [426416 2018-01-09] (AO Kaspersky Lab)
R2 KSDE2.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 2.0\ksde.exe [354672 2017-01-24] (AO Kaspersky Lab)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.599\McCHSvc.exe [404376 2017-09-05] (McAfee, Inc.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519992 2018-01-10] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-04-01] (Electronic Arts)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 WsAppService; C:\Program Files (x86)\Wondershare\WAF\WsAppService.exe [252816 2015-04-30] (Wondershare)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-04-22] ()
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [247008 2016-12-26] (AO Kaspersky Lab)
S3 cpuz143; C:\Windows\temp\cpuz143\cpuz143_x64.sys [48960 2018-01-13] (CPUID)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-06-08] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-06-08] (Disc Soft Ltd)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [554408 2016-10-01] (AO Kaspersky Lab)
R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [70880 2017-12-24] (AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [117984 2017-12-24] (AO Kaspersky Lab)
R2 kldisk; C:\Windows\System32\DRIVERS\kldisk.sys [78216 2016-05-31] (AO Kaspersky Lab)
R3 klflt; C:\Windows\System32\DRIVERS\klflt.sys [206040 2018-01-09] (AO Kaspersky Lab)
R1 KLHK; C:\Windows\System32\DRIVERS\klhk.sys [350944 2018-01-09] (AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1071808 2018-01-09] (AO Kaspersky Lab)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [57936 2016-10-11] (AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [57568 2016-12-23] (AO Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [58592 2016-12-07] (AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [50672 2017-12-24] (AO Kaspersky Lab)
R3 kltap; C:\Windows\System32\DRIVERS\kltap.sys [52152 2016-06-07] (The OpenVPN Project)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [81904 2017-12-24] (AO Kaspersky Lab)
R1 Klwtp; C:\Windows\System32\DRIVERS\klwtp.sys [140000 2017-12-24] (AO Kaspersky Lab)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [199392 2017-12-24] (AO Kaspersky Lab)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2018-01-09] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31024 2018-01-10] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [59240 2017-12-15] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-11-16] (NVIDIA Corporation)
R3 VBAudioVACMME; C:\Windows\System32\DRIVERS\vbaudio_cable64_win7.sys [41192 2014-09-02] (Windows (R) Win 7 DDK provider)
R3 ALSysIO; \??\C:\Users\joe\AppData\Local\Temp\ALSysIO64.sys [X] <==== ATTENTION
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
S0 FACEIT; System32\Drivers\FACEIT.sys [X]
S3 MSICDSetup; \??\D:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S3 PlantronicsGC; system32\drivers\PLTGC.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-01-18 21:09 - 2018-01-18 21:15 - 000023698 _____ C:\Users\joe\Desktop\FRST.txt
2018-01-18 21:09 - 2018-01-18 21:09 - 002393088 _____ (Farbar) C:\Users\joe\Desktop\FRST64.exe
2018-01-18 21:04 - 2018-01-18 21:04 - 000000000 ____D C:\FRST
2018-01-18 20:37 - 2018-01-18 20:37 - 000000851 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total Uninstall 6.lnk
2018-01-18 20:37 - 2018-01-18 20:37 - 000000839 _____ C:\Users\Public\Desktop\Total Uninstall 6.lnk
2018-01-18 20:37 - 2018-01-18 20:37 - 000000016 _____ C:\ProgramData\mntemp
2018-01-18 20:37 - 2018-01-18 20:37 - 000000000 ____D C:\ProgramData\Martau
2018-01-18 20:37 - 2018-01-18 20:37 - 000000000 ____D C:\Program Files\Total Uninstall 6
2018-01-18 20:33 - 2018-01-18 20:37 - 026870272 _____ (Gavrila Martau ) C:\Users\joe\Downloads\Total-Uninstall-Setup-6.21.1.exe
2018-01-18 20:13 - 2018-01-09 13:28 - 000004596 _____ C:\Users\joe\Desktop\AdwCleaner[C0].txt
2018-01-18 20:07 - 2018-01-18 20:07 - 008198432 _____ (Malwarebytes) C:\Users\joe\Downloads\adwcleaner_7.0.6.0.exe
2018-01-18 19:53 - 2018-01-18 19:56 - 000004602 _____ C:\Users\joe\Desktop\ZHPCleaner.txt
2018-01-18 19:48 - 2018-01-18 19:48 - 000000826 _____ C:\Users\joe\Desktop\ZHPCleaner.lnk
2018-01-18 19:46 - 2018-01-18 19:46 - 003046272 _____ C:\Users\joe\Downloads\ZHPCleaner.exe
2018-01-18 17:33 - 2018-01-18 17:33 - 000000000 ____D C:\Program Files (x86)\VulkanRT
2018-01-18 17:33 - 2018-01-04 04:01 - 000137528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2018-01-18 17:33 - 2017-11-03 00:15 - 000928568 _____ C:\Windows\system32\vulkan-1.dll
2018-01-18 17:33 - 2017-11-03 00:15 - 000798520 _____ C:\Windows\SysWOW64\vulkan-1.dll
2018-01-18 17:33 - 2017-11-03 00:15 - 000490808 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2018-01-18 17:33 - 2017-11-03 00:14 - 000591672 _____ C:\Windows\system32\vulkaninfo.exe
2018-01-18 17:32 - 2018-01-18 17:32 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation
2018-01-18 17:31 - 2018-01-04 05:39 - 040269624 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 035278136 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 035179080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 027856456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 019796008 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 018730328 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 017303112 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2018-01-18 17:31 - 2018-01-04 05:39 - 016450056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 013430632 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 012842984 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 011015584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 010900248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 003902448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 003432944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 001975184 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439065.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 001674544 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439065.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 001134952 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 001125688 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 001054512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000988144 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000939504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000885680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000616240 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000528312 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000506672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000447424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000407064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000226760 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2018-01-18 17:31 - 2018-01-04 05:39 - 000171896 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000154208 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000149736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000132072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000045600 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2018-01-18 17:31 - 2018-01-04 05:39 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2018-01-18 17:31 - 2018-01-04 05:39 - 000000669 _____ C:\Windows\system32\nv-vk64.json
2018-01-18 17:26 - 2018-01-18 17:26 - 000000000 ____D C:\Users\joe\ansel
2018-01-18 17:26 - 2017-12-15 06:03 - 000059240 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2018-01-18 16:36 - 2018-01-18 20:16 - 000168669 _____ C:\Users\joe\Desktop\ZHPDiag.txt
2018-01-18 16:34 - 2018-01-18 20:15 - 000000000 ____D C:\Users\joe\AppData\Roaming\ZHP
2018-01-18 16:34 - 2018-01-18 19:48 - 000000000 ____D C:\Users\joe\AppData\Local\ZHP
2018-01-18 16:34 - 2018-01-18 16:34 - 000000816 _____ C:\Users\joe\Desktop\ZHPDiag.lnk
2018-01-18 16:33 - 2018-01-18 16:33 - 002964864 _____ C:\Users\joe\Downloads\ZHPDiag3.exe
2018-01-18 13:37 - 2018-01-18 13:37 - 000000504 _____ C:\Users\joe\Downloads\chewwga-0-9_8dd-f46______hristhoo.torrent
2018-01-18 13:32 - 2018-01-18 13:32 - 000000000 _____ C:\Users\joe\Downloads\chewwga-0-9_8dd-f46.torrent
2018-01-18 12:12 - 2018-01-18 12:12 - 000056276 _____ C:\Users\joe\Desktop8sfcdetails.txt
2018-01-18 11:57 - 2018-01-18 11:57 - 000000024 _____ C:\Users\joe\Desktop\cnet.txt
2018-01-15 20:30 - 2018-01-15 20:30 - 000045110 _____ C:\Users\joe\Downloads\WiFi_Hacker_Software_2018.xht
2018-01-13 22:13 - 2018-01-13 22:14 - 000150092 _____ C:\Windows\ntbtlog.txt
2018-01-13 21:59 - 2018-01-13 22:06 - 000000000 ____D C:\Program Files (x86)\OCCTPT
2018-01-13 21:59 - 2018-01-13 21:59 - 000000000 ____D C:\Windows\SysWOW64\directx
2018-01-10 10:58 - 2018-01-10 10:58 - 000001066 _____ C:\Users\Public\Desktop\VLC media player.lnk
2018-01-10 10:24 - 2018-01-10 10:24 - 000000000 ____D C:\Windows\System32\Tasks\Apple
2018-01-10 10:24 - 2018-01-10 10:24 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2018-01-09 21:27 - 2018-01-09 21:27 - 006730784 _____ (Kaspersky Lab) C:\Users\joe\Downloads\kpm8.0.6.538en_ru_de_pl_es_es_nl_it_fr_zh-hans_pt_pt_nb_ko_da_zh-hant_tr_sv_fi_11950.exe
2018-01-09 21:14 - 2018-01-09 22:32 - 000000351 _____ C:\Users\joe\Downloads\Kaspersky Reset Trial 5.1.0.41 [Hit2k].rar
2018-01-09 20:37 - 2018-01-09 20:37 - 001071808 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klif.sys
2018-01-09 20:37 - 2018-01-09 20:37 - 000350944 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
2018-01-09 20:37 - 2018-01-09 20:37 - 000206040 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klflt.sys
2018-01-09 20:37 - 2018-01-09 20:37 - 000149304 _____ (AO Kaspersky Lab) C:\Windows\system32\klhkum.dll
2018-01-09 20:37 - 2018-01-09 20:37 - 000002189 _____ C:\Users\Public\Desktop\Protection bancaire.lnk
2018-01-09 20:37 - 2018-01-09 20:37 - 000002117 _____ C:\Users\Public\Desktop\Kaspersky Total Security.lnk
2018-01-09 20:37 - 2018-01-09 20:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security
2018-01-09 20:37 - 2018-01-09 20:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection
2018-01-09 20:37 - 2018-01-09 20:37 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2018-01-09 20:37 - 2013-05-06 08:13 - 000110176 _____ (Kaspersky Lab ZAO) C:\Windows\system32\klfphc.dll
2018-01-09 20:10 - 2018-01-09 20:14 - 002415152 _____ (Kaspersky Lab) C:\Users\joe\Downloads\kts18.0.0.405abfr_12822 (1).exe
2018-01-09 15:48 - 2018-01-18 20:17 - 000000166 _____ C:\Users\joe\Desktop\Nouveau document texte.txt
2018-01-09 15:08 - 2018-01-09 15:31 - 000192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2018-01-09 15:07 - 2018-01-10 21:22 - 000000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2018-01-09 15:07 - 2018-01-09 15:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2018-01-09 15:07 - 2016-03-10 14:09 - 000064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2018-01-09 15:07 - 2016-03-10 14:08 - 000140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2018-01-09 15:07 - 2016-03-10 14:08 - 000027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2018-01-09 14:19 - 2018-01-09 14:20 - 000833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2018-01-09 14:19 - 2018-01-09 14:20 - 000002048 _____ C:\Windows\SysWOW64\winver.exe
2018-01-09 14:19 - 2018-01-09 14:19 - 000410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2018-01-09 14:19 - 2018-01-09 14:19 - 000113543 _____ C:\Windows\SysWOW64\slmgr.vbs
2018-01-09 14:19 - 2018-01-09 14:19 - 000001536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll
2018-01-09 13:45 - 2018-01-09 13:45 - 000000000 _____ C:\autoexec.bat
2018-01-09 13:22 - 2018-01-18 20:10 - 000000000 ____D C:\AdwCleaner
2018-01-09 12:16 - 2018-01-09 12:16 - 000008236 _____ C:\Users\joe\Desktop\cc_20180109_121641.reg
2018-01-07 22:15 - 2018-01-07 22:15 - 000002265 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-01-07 22:15 - 2018-01-07 22:15 - 000002253 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-01-07 22:12 - 2018-01-07 22:12 - 000003500 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-01-07 22:12 - 2018-01-07 22:12 - 000003372 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2018-01-07 21:55 - 2018-01-07 21:55 - 000262144 _____ C:\Windows\system32\config\elam
2018-01-07 21:49 - 2018-01-18 20:39 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2018-01-07 20:10 - 2018-01-07 20:10 - 000140800 _____ C:\Users\joe\AppData\Local\installer.dat
2018-01-07 20:09 - 2018-01-07 20:09 - 000045107 _____ C:\Users\joe\Downloads\Proxy_Switcher_Pro_519_Crack_Working_Free (2).xht
2018-01-07 20:08 - 2018-01-07 20:08 - 000045107 _____ C:\Users\joe\Downloads\Proxy_Switcher_Pro_519_Crack_Working_Free (1).xht
2018-01-07 20:07 - 2018-01-07 20:07 - 000045103 _____ C:\Users\joe\Downloads\Proxy_Switcher_Pro_519_Crack_Working_Free.xht
2018-01-07 19:37 - 2018-01-09 21:18 - 000000000 ____D C:\Users\joe\Desktop\KASPERSKY
2018-01-07 19:33 - 2018-01-09 20:16 - 000000000 ____D C:\ProgramData\Kaspersky Lab Setup Files
2017-12-24 21:18 - 2017-12-24 21:18 - 000199392 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\kneps.sys
2017-12-24 21:18 - 2017-12-24 21:18 - 000140000 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klwtp.sys
2017-12-24 21:18 - 2017-12-24 21:18 - 000117984 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klbackupflt.sys
2017-12-24 21:18 - 2017-12-24 21:18 - 000081904 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\kltdi.sys
2017-12-24 21:18 - 2017-12-24 21:18 - 000070880 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klbackupdisk.sys
2017-12-24 21:18 - 2017-12-24 21:18 - 000050672 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klpd.sys

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2018-01-18 20:53 - 2016-04-16 21:06 - 000000390 _____ C:\Windows\Tasks\HP Photo Creations Communicator.job
2018-01-18 20:51 - 2016-08-15 20:40 - 000000000 ___RD C:\Users\joe\Desktop\LOGICIEL
2018-01-18 20:37 - 2015-08-12 21:36 - 000000000 ____D C:\Program Files (x86)\Steam
2018-01-18 20:16 - 2009-07-14 19:24 - 000750438 _____ C:\Windows\system32\perfh00C.dat
2018-01-18 20:16 - 2009-07-14 19:24 - 000151084 _____ C:\Windows\system32\perfc00C.dat
2018-01-18 20:16 - 2009-07-14 09:13 - 001677458 _____ C:\Windows\system32\PerfStringBackup.INI
2018-01-18 20:16 - 2009-07-14 07:20 - 000000000 ____D C:\Windows\inf
2018-01-18 20:10 - 2016-07-27 18:41 - 000000000 ____D C:\ProgramData\NVIDIA
2018-01-18 20:10 - 2009-07-14 09:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-01-18 20:10 - 2009-07-14 08:45 - 000025664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-01-18 20:10 - 2009-07-14 08:45 - 000025664 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-01-18 19:57 - 2017-05-05 18:29 - 000000000 ____D C:\Users\joe\AppData\Roaming\DMCache
2018-01-18 19:51 - 2017-06-29 20:49 - 000000000 ____D C:\Users\joe\AppData\Roaming\TS3Client
2018-01-18 19:18 - 2017-03-07 00:51 - 000000324 _____ C:\Windows\Tasks\HPCeeScheduleForjoe.job
2018-01-18 19:17 - 2015-08-12 16:32 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-01-18 17:33 - 2017-03-06 16:36 - 000000000 ____D C:\Users\joe\AppData\Roaming\NVIDIA
2018-01-18 17:33 - 2015-08-12 16:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-01-18 17:33 - 2015-08-12 16:32 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-01-18 17:33 - 2015-08-12 16:30 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2018-01-18 17:26 - 2017-05-16 16:26 - 000003814 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-18 17:26 - 2017-03-06 16:30 - 000004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-18 17:26 - 2016-09-30 21:13 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-18 17:26 - 2016-09-08 19:23 - 000003798 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-18 17:26 - 2016-09-08 19:23 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-18 17:26 - 2016-09-08 19:23 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-18 17:26 - 2016-09-08 19:23 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-18 17:26 - 2016-09-08 19:23 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-01-18 17:26 - 2015-08-12 11:58 - 000000000 ____D C:\Users\joe
2018-01-18 16:36 - 2017-03-07 00:51 - 000003174 _____ C:\Windows\System32\Tasks\HPCeeScheduleForjoe
2018-01-18 16:19 - 2017-05-05 18:29 - 000000000 ____D C:\Users\joe\AppData\Roaming\IDM
2018-01-18 16:19 - 2017-05-05 18:29 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2018-01-18 16:19 - 2016-04-09 18:29 - 000000000 ____D C:\Users\joe\AppData\Roaming\vibranceGUI
2018-01-18 16:19 - 2015-08-14 20:15 - 000000000 ____D C:\Users\joe\AppData\Roaming\uTorrent
2018-01-18 16:19 - 2009-07-14 07:20 - 000000000 ____D C:\Windows\registration
2018-01-18 13:39 - 2017-05-05 18:29 - 000000000 ____D C:\Users\joe\Downloads\Compressed
2018-01-18 11:30 - 2016-02-07 14:42 - 000000000 ____D C:\Users\joe\AppData\Local\CrashDumps
2018-01-18 11:30 - 2015-08-12 18:29 - 000000000 ____D C:\Users\joe\AppData\Roaming\DAEMON Tools Lite
2018-01-15 20:33 - 2016-11-30 18:20 - 000000000 ____D C:\Users\joe\AppData\LocalLow\Mozilla
2018-01-14 16:08 - 2015-08-12 16:26 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-01-13 18:51 - 2016-04-07 19:57 - 000000000 ____D C:\Users\joe\AppData\Roaming\Spotify
2018-01-13 13:46 - 2017-08-17 23:01 - 000000000 ____D C:\Users\joe\AppData\Roaming\Molotov
2018-01-13 13:22 - 2017-10-21 22:44 - 000000000 ____D C:\Program Files\FACEIT AC
2018-01-13 13:21 - 2017-10-21 22:44 - 000000000 ____D C:\Users\joe\AppData\Roaming\FACEIT
2018-01-13 13:19 - 2017-10-21 22:44 - 000002013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FACEIT.lnk
2018-01-13 11:46 - 2016-04-07 20:01 - 000000000 ____D C:\Users\joe\AppData\Local\Spotify
2018-01-12 17:56 - 2015-08-18 20:24 - 000000000 ____D C:\Users\joe\AppData\Roaming\vlc
2018-01-10 18:33 - 2016-09-08 19:23 - 002425656 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2018-01-10 18:33 - 2016-09-08 19:23 - 002090800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2018-01-10 18:33 - 2016-09-08 19:23 - 001310008 _____ (NVIDIA Corporation) C:\Windows\system32\NvRtmpStreamer64.dll
2018-01-10 13:41 - 2017-03-06 16:30 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2018-01-10 10:24 - 2015-08-24 11:03 - 000002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2018-01-10 01:50 - 2016-09-27 09:13 - 000004614 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-01-10 01:50 - 2016-09-27 09:13 - 000004484 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-01-10 01:50 - 2015-12-06 18:44 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-01-10 01:50 - 2015-12-06 18:44 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-01-10 01:50 - 2015-12-06 18:44 - 000000000 ____D C:\Windows\system32\Macromed
2018-01-09 20:48 - 2016-11-04 22:23 - 000000000 ____D C:\Program Files\Common Files\AV
2018-01-09 20:47 - 2015-11-19 23:50 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-01-09 20:03 - 2016-11-24 11:49 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-01-09 20:03 - 2015-11-19 23:50 - 000000000 ____D C:\Users\joe\AppData\Roaming\Mozilla
2018-01-09 15:31 - 2009-07-14 19:35 - 000000000 ____D C:\Windows\ShellNew
2018-01-09 11:59 - 2017-03-06 16:18 - 000000000 ____D C:\Windows\pss
2018-01-07 22:15 - 2015-08-12 16:54 - 000000000 ____D C:\Program Files (x86)\Google
2018-01-07 22:12 - 2015-08-12 16:54 - 000000000 ____D C:\Users\joe\AppData\Local\Deployment
2018-01-07 22:03 - 2017-09-08 21:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Proxy Switcher Standard
2018-01-07 22:02 - 2017-09-25 22:43 - 000000000 ____D C:\ProgramData\McAfee Security Scan
2018-01-07 22:02 - 2017-07-26 16:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SecurityKISS Tunnel
2018-01-07 22:02 - 2017-07-26 16:01 - 000000000 ____D C:\Program Files\SecurityKISS Tunnel
2018-01-07 22:02 - 2015-08-12 16:50 - 000000000 ____D C:\Users\joe\AppData\Roaming\Macromedia
2018-01-04 05:39 - 2017-08-23 22:22 - 022573984 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2018-01-04 05:39 - 2017-08-23 22:22 - 015408072 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2018-01-04 05:39 - 2017-07-02 10:46 - 019677112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2018-01-04 05:39 - 2017-06-09 23:17 - 000492048 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2018-01-04 05:39 - 2017-05-29 20:57 - 004375648 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2018-01-04 05:39 - 2017-03-06 16:33 - 003874728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2018-01-04 05:39 - 2017-03-06 16:33 - 001682288 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2018-01-04 05:39 - 2017-03-06 16:33 - 000045386 _____ C:\Windows\system32\nvinfo.pb
2018-01-04 04:33 - 2017-06-09 23:18 - 000001951 _____ C:\Windows\NvContainerRecovery.bat
2018-01-04 03:50 - 2017-05-29 20:59 - 005951336 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2018-01-04 03:50 - 2017-05-29 20:59 - 002588232 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2018-01-04 03:50 - 2017-05-29 20:59 - 001768480 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2018-01-04 03:50 - 2017-05-29 20:59 - 000631880 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2018-01-04 03:50 - 2017-05-29 20:59 - 000450352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2018-01-04 03:50 - 2017-05-29 20:59 - 000123704 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2018-01-04 03:50 - 2017-05-29 20:59 - 000081992 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2017-12-24 23:07 - 2017-05-29 20:59 - 007928821 _____ C:\Windows\system32\nvcoproc.bin

==================== Fichiers à la racine de certains dossiers =======

2016-05-16 09:54 - 2016-03-30 10:19 - 000000043 _____ () C:\Users\joe\AppData\Roaming\pdfdrawcodec.dll
2018-01-07 20:10 - 2018-01-07 20:10 - 000140800 _____ () C:\Users\joe\AppData\Local\installer.dat
2008-02-05 13:28 - 2008-02-05 13:28 - 000000051 _____ () C:\Users\joe\AppData\Local\setup.txt

Certains fichiers dans TEMP:
====================
2017-08-23 22:23 - 2017-08-10 02:21 - 000758288 _____ (NVIDIA Corporation) C:\Users\joe\AppData\Local\Temp\nvSCPAPI.dll
2017-08-23 22:23 - 2017-08-10 02:21 - 000873136 _____ (NVIDIA Corporation) C:\Users\joe\AppData\Local\Temp\nvSCPAPI64.dll
2017-08-23 22:23 - 2017-08-10 02:21 - 000390072 _____ (NVIDIA Corporation) C:\Users\joe\AppData\Local\Temp\nvStereoApiI.dll
2018-01-18 17:31 - 2017-08-10 02:21 - 000368576 _____ (NVIDIA Corporation) C:\Users\joe\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll
[2017-08-12 20:48] - [2016-11-10 20:32] - 001008640 _____ (Microsoft Corporation) E573BD9AB55C8E333C202B9E255F972E

C:\Windows\SysWOW64\User32.dll
[2018-01-09 14:19] - [2018-01-09 14:20] - 000833024 _____ (Microsoft Corporation) 2C9CC9F492CA596B1B9FC1AE5E916356

C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
C:\Windows\system32\drivers\cm_km.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\kl1.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klbackupdisk.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klbackupflt.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\kldisk.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klflt.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klhk.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klif.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klim6.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klkbdflt.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klmouflt.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klpd.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\kltdi.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\klwtp.sys -> Accès refusé <======= ATTENTION
C:\Windows\system32\drivers\kneps.sys -> Accès refusé <======= ATTENTION

LastRegBack: 2018-01-18 14:09

==================== Fin de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité