Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 23.08.2018
Exécuté par Arno (administrateur) sur ASIS (08-09-2018 14:37:49)
Exécuté depuis C:\Users\Arno\Desktop
Profils chargés: Arno (Profils disponibles: Arno & inesv_000 & sidon_000 & salomé)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: "%1" %*)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
( ) C:\Windows\System32\lxdrcoms.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 3\creator-ws.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(© 2015 Microsoft Corporation) C:\Users\Arno\AppData\Local\Microsoft\BingSvc\BingSvc.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Intel® Corporation) C:\Program Files\Intel\ConnectCenter\bin\CCFManager.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intel Corporation) C:\Program Files\Intel\STCServ\STCServ.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(VS Revo Group) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM\...\Run: [IntelConnectCenter] => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2015-03-16] (Intel® Corporation)
HKLM\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.16.589\ASUSWSLoader.exe
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [lxdrmon.exe] => C:\Program Files (x86) (x86)\Lexmark 4900 Series\lxdrmon.exe [676520 2010-02-04] ()
HKLM-x32\...\Run: [lxdramon] => C:\Program Files (x86) (x86)\Lexmark 4900 Series\lxdramon.exe [16040 2010-02-04] ()
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1285704 2014-08-08] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2014-07-30] (CANON INC.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-02-26] (Qualcomm®Atheros®)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\Run: [BingSvc] => C:\Users\Arno\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\MountPoints2: {57b68bde-feff-11e5-8326-40e23058af16} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\MountPoints2: {6cf4a82e-32de-11e7-84aa-40e23058af16} - "F:\Setup.exe"
HKU\S-1-5-18\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-18\...\RunOnce: [iCloud] => "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe"
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\Users\salomé\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2017-09-17]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{32F68C8C-7F11-4A63-9469-55EF1AE6BC39}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6CFD037F-7FBB-4F8D-8DCC-060351D9C488}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131619549589977746&GUID=BB4268E8-8601-429F-899A-5977F15F0816
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131619549589980243&GUID=BB4268E8-8601-429F-899A-5977F15F0816
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/fr-fr
URLSearchHook: HKLM-x32 -> Par défaut = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-233976193-1382472177-2432614907-1001 -> {96BBC430-9900-4299-9F5D-7951AB36EFDF} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2018-02-15] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Toolbar: HKU\S-1-5-21-233976193-1382472177-2432614907-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_3_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension
FF Extension: (PDF Architect 3 Creator) - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension [2015-03-25] [Legacy] [non signé]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-07-11] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Arno\AppData\Local\Google\Chrome\User Data\Default [2018-09-08]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-06]
CHR Extension: (Ghostify Hide Geo FREE) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\Default\Extensions\oaocmnfllndpbbmjmniielgaanaifehp [2018-09-06]
CHR Extension: (Chrome Media Router) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-09-06]
CHR Profile: C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch [2018-01-07] <==== ATTENTION
CHR Extension: (Google Slides) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-07-26]
CHR Extension: (Google Docs) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-26]
CHR Extension: (Google Drive) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-26]
CHR Extension: (YouTube) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-26]
CHR Extension: (Facebook) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2015-06-22]
CHR Extension: (Google News) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\dllkocilcinkggkchnjgegijklcililc [2015-06-22]
CHR Extension: (Google Agenda) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2015-10-25]
CHR Extension: (Avast SafePrice) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-07-26]
CHR Extension: (Avast Online Security) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-07-26]
CHR Extension: (Google Keep – Notes et listes) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2016-07-26]
CHR Extension: (Until AM Web App) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk [2015-06-22]
CHR Extension: (Google Maps) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-10-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-10]
CHR Extension: (Gmail) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-26]
CHR HKLM-x32\...\Chrome\Extension: [oaocmnfllndpbbmjmniielgaanaifehp] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-26] (Windows (R) Win 7 DDK provider) [Fichier non signé]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-02-17] ()
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-09] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2014-05-15] ()
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Fichier non signé]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 lxdr_device; C:\Windows\system32\lxdrcoms.exe [1039360 2009-10-16] ( )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2213696 2018-08-20] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3084104 2018-08-20] (Electronic Arts)
S3 PDF Architect 3; C:\Program Files (x86)\PDF Architect 3\ws.exe [2243288 2015-03-20] (pdfforge GmbH)
S3 PDF Architect 3 CrashHandler; C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe [901336 2015-03-20] (pdfforge GmbH)
R2 PDF Architect 3 Creator; C:\Program Files (x86)\PDF Architect 3\creator-ws.exe [740568 2015-03-20] (pdfforge GmbH)
R2 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6634224 2018-02-02] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [Fichier non signé]
S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S3 BstHdLogRotatorSvc; "C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe" [X]
S3 BstHdPlusAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe" BstHdPlusAndroidSvc Android [X]
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AsusTP; C:\Windows\System32\drivers\AsusTP.sys [82256 2016-11-03] (ASUS Corporation)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-07] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [129152 2016-04-25] (Samsung Electronics Co., Ltd.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [259360 2018-09-08] (Malwarebytes)
R2 npf; C:\Windows\system32\drivers\npf.sys [36600 2017-08-03] (Riverbed Technology, Inc.)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [827096 2015-03-11] (Realsil Semiconductor Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [159936 2016-08-15] (MBB)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
S3 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 BstkDrv; \??\C:\Program Files (x86)\BlueStacks\BstkDrv.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-09-08 12:25 - 2018-09-08 12:25 - 000001052 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2018-09-08 12:25 - 2018-09-08 12:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2018-09-08 12:25 - 2018-09-08 12:25 - 000000000 ____D C:\Program Files\VS Revo Group
2018-09-08 12:24 - 2018-09-08 12:24 - 007197480 _____ (VS Revo Group ) C:\Users\Arno\Desktop\revosetup.exe
2018-09-08 08:34 - 2018-09-08 08:38 - 000062074 _____ C:\Users\Arno\Desktop\Addition.txt
2018-09-08 08:31 - 2018-09-08 14:39 - 000026137 _____ C:\Users\Arno\Desktop\FRST.txt
2018-09-08 08:31 - 2018-09-08 14:37 - 000000000 ____D C:\FRST
2018-09-08 08:30 - 2018-09-08 08:30 - 002413056 _____ (Farbar) C:\Users\Arno\Desktop\FRST64.exe
2018-09-07 09:22 - 2018-09-07 09:22 - 000000000 ____D C:\Users\Arno\AppData\Local\mbam
2018-09-07 09:21 - 2018-09-08 14:25 - 000259360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-09-07 09:21 - 2018-09-07 09:21 - 000001885 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-09-07 09:21 - 2018-09-07 09:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-09-07 09:21 - 2018-07-12 08:42 - 000152688 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-09-07 09:20 - 2018-09-07 09:20 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-09-07 09:16 - 2018-09-08 14:10 - 000000000 ____D C:\Users\Arno\Documents\maintenance info
2018-09-07 08:22 - 2018-09-07 08:31 - 079729056 _____ (Malwarebytes ) C:\Users\Arno\Desktop\mb3-setup-consumer-3.5.1.2522-1.0.441-1.0.6669.exe
2018-09-07 08:15 - 2018-09-07 08:16 - 007571152 _____ (Malwarebytes) C:\Users\Arno\Desktop\adwcleaner_7.2.3.1.exe
2018-09-06 17:33 - 2018-09-06 17:33 - 000000875 _____ C:\Users\Arno\Desktop\ZHPCleaner.lnk
2018-09-06 17:31 - 2018-09-06 17:31 - 000000000 ____D C:\Users\Arno\Documents\Bluetooth Folder
2018-09-06 17:25 - 2018-09-06 17:25 - 003275136 _____ C:\Users\Arno\Downloads\ZHPCleaner.exe
2018-09-06 15:22 - 2018-09-06 15:22 - 000000000 ____D C:\Users\Arno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2018-09-06 15:21 - 2018-09-06 15:21 - 000000000 ____D C:\Users\Arno\AppData\Roaming\Google
2018-09-06 14:41 - 2018-09-07 16:24 - 003164032 _____ C:\Users\Arno\Downloads\ZHPDiag3.exe
2018-09-06 10:34 - 2018-09-06 10:34 - 000038626 _____ C:\Users\Arno\Downloads\Mandat SEPA.pdf
2018-09-06 10:32 - 2018-09-06 10:32 - 000004399 _____ C:\Users\Arno\Downloads\Compte_02018772117.pdf
2018-09-02 20:06 - 2018-09-02 21:30 - 001264353 _____ C:\Users\salomé\Downloads\Intro2.wve
2018-09-01 17:50 - 2018-09-01 17:50 - 000003072 ___SH C:\Users\salomé\Desktop\Thumbs.db
2018-09-01 15:59 - 2018-09-01 18:11 - 001039073 _____ C:\Users\salomé\Downloads\Intro1.wve
2018-08-25 21:29 - 2018-07-19 09:06 - 007371616 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-08-25 21:29 - 2018-07-19 08:48 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-08-25 21:29 - 2018-07-19 08:15 - 025745408 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-08-25 21:29 - 2018-07-19 06:35 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-08-25 21:29 - 2018-07-19 06:33 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-08-25 21:29 - 2018-07-19 06:33 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-08-25 21:29 - 2018-07-19 06:30 - 005778432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-08-25 21:29 - 2018-07-19 06:23 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-08-25 21:29 - 2018-07-19 06:22 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-08-25 21:29 - 2018-07-19 06:22 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-08-25 21:29 - 2018-07-19 06:22 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2018-08-25 21:29 - 2018-07-19 06:21 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-08-25 21:29 - 2018-07-19 06:05 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-08-25 21:29 - 2018-07-19 06:03 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-08-25 21:29 - 2018-07-19 06:01 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-08-25 21:29 - 2018-07-19 05:55 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-08-25 21:29 - 2018-07-19 05:55 - 000099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2018-08-25 21:29 - 2018-07-19 05:54 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-08-25 21:29 - 2018-07-19 05:53 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-08-25 21:29 - 2018-07-19 05:47 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-08-25 21:29 - 2018-07-19 05:46 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-08-25 21:29 - 2018-07-19 05:45 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-08-25 21:29 - 2018-07-19 05:45 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-08-25 21:29 - 2018-07-19 05:43 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-08-25 21:29 - 2018-07-19 05:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-08-25 21:29 - 2018-07-19 05:32 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-08-25 21:29 - 2018-07-19 05:31 - 004510720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-08-25 21:29 - 2018-07-19 05:30 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-08-25 21:29 - 2018-07-19 05:28 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-08-25 21:29 - 2018-07-19 05:28 - 002882048 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2018-08-25 21:29 - 2018-07-19 05:28 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-08-25 21:29 - 2018-07-19 05:28 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-08-25 21:29 - 2018-07-19 05:28 - 000333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-08-25 21:29 - 2018-07-19 05:20 - 001554944 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-08-25 21:29 - 2018-07-19 05:17 - 001049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2018-08-25 21:29 - 2018-07-19 05:09 - 004037632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-08-25 21:29 - 2018-07-19 05:09 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-08-25 21:29 - 2018-07-19 05:06 - 001329152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-08-25 21:29 - 2018-07-19 05:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-08-25 21:29 - 2018-07-13 09:51 - 002452824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-08-25 21:29 - 2018-07-07 20:33 - 001548632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2018-08-25 21:29 - 2018-07-07 19:05 - 004169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-08-25 21:29 - 2018-07-07 19:02 - 000096768 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-08-25 21:29 - 2018-07-07 19:00 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-08-25 21:29 - 2018-07-07 18:33 - 000078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-08-25 21:29 - 2018-07-07 18:31 - 000113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-08-25 21:29 - 2018-07-06 19:37 - 001754624 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2018-08-25 21:29 - 2018-07-06 18:36 - 001491968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2018-08-25 21:29 - 2018-06-30 20:00 - 001113952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2018-08-25 21:29 - 2018-06-24 17:11 - 000748544 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-08-25 21:29 - 2018-06-24 17:04 - 000504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-08-25 21:29 - 2018-06-19 15:38 - 003611136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2018-08-25 21:29 - 2018-06-19 15:38 - 003321344 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2018-08-25 21:29 - 2018-06-19 15:31 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2018-08-25 21:29 - 2018-06-19 15:29 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2018-08-25 21:29 - 2018-06-16 17:03 - 002779136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2018-08-25 21:29 - 2018-06-16 16:59 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-08-25 21:29 - 2018-06-15 06:34 - 000923512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2018-08-25 21:29 - 2018-06-15 04:28 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-08-25 21:29 - 2018-06-15 04:12 - 000477696 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2018-08-25 21:29 - 2018-06-15 04:00 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-08-25 21:29 - 2018-06-15 03:55 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2018-08-25 21:29 - 2018-06-15 03:43 - 000186880 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2018-08-25 21:29 - 2018-06-15 03:26 - 000514560 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2018-08-25 21:29 - 2018-06-15 03:22 - 000866304 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2018-08-25 21:29 - 2018-06-15 03:19 - 000399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2018-08-25 21:29 - 2018-06-08 20:47 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-09-08 14:40 - 2015-03-04 22:40 - 000000000 ____D C:\Users\Arno\AppData\Local\CrashDumps
2018-09-08 14:36 - 2015-03-02 20:37 - 000000000 __RDO C:\Users\Arno\OneDrive
2018-09-08 14:33 - 2015-06-05 19:33 - 000000346 _____ C:\Windows\Tasks\Chromium.job
2018-09-08 14:30 - 2015-03-02 19:55 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-233976193-1382472177-2432614907-1001
2018-09-08 14:27 - 2017-05-09 21:51 - 000000000 ____D C:\Users\Arno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2018-09-08 14:26 - 2015-03-02 19:51 - 000000062 _____ C:\Users\Arno\AppData\Roaming\sp_data.sys
2018-09-08 14:25 - 2018-01-04 18:44 - 000000290 __RSH C:\ProgramData\ntuser.pol
2018-09-08 14:24 - 2016-07-24 17:09 - 000000000 ____D C:\ProgramData\NVIDIA
2018-09-08 14:24 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-09-08 14:24 - 2013-08-22 15:25 - 001048576 ___SH C:\Windows\system32\config\BBI
2018-09-08 14:19 - 2015-08-21 10:14 - 000000000 ____D C:\ProgramData\Skype
2018-09-08 14:19 - 2015-03-10 23:40 - 000000000 ____D C:\ProgramData\lx_Cats
2018-09-08 11:38 - 2016-08-24 09:06 - 000003916 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{A7D6AB14-C76B-4777-860E-5DE82CFB0EBF}
2018-09-08 08:34 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2018-09-07 23:06 - 2015-08-17 20:29 - 000000000 ____D C:\Users\salomé\AppData\Local\CrashDumps
2018-09-07 17:47 - 2015-07-18 18:04 - 000000062 _____ C:\Users\salomé\AppData\Roaming\sp_data.sys
2018-09-07 17:45 - 2015-07-18 18:04 - 000000000 __RDO C:\Users\salomé\OneDrive
2018-09-07 16:35 - 2018-02-01 22:09 - 000814078 _____ C:\Windows\ntbtlog.txt
2018-09-07 16:31 - 2018-01-31 23:46 - 000000000 ____D C:\Users\Arno\AppData\Roaming\ZHP
2018-09-07 09:11 - 2015-03-02 19:49 - 000000000 ____D C:\Users\Arno
2018-09-07 08:23 - 2015-04-11 19:13 - 000000000 ____D C:\AdwCleaner
2018-09-07 07:51 - 2015-07-19 12:19 - 000003924 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1C14E62A-9209-4533-BC9E-0AF1BA09DD7D}
2018-09-06 20:27 - 2015-07-18 18:04 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-233976193-1382472177-2432614907-1009
2018-09-06 16:28 - 2017-03-30 20:09 - 000000000 ____D C:\Users\Arno\Documents\SALOME ECOLE
2018-09-06 16:13 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2018-09-06 15:00 - 2015-03-06 21:48 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2018-09-06 14:49 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2018-09-06 14:46 - 2015-03-02 19:49 - 000000000 ____D C:\Users\Arno\AppData\Local\Packages
2018-09-06 12:09 - 2018-01-31 23:46 - 000000000 ____D C:\Users\Arno\AppData\Local\ZHP
2018-09-06 12:03 - 2018-03-04 12:56 - 000000865 _____ C:\Users\Arno\Desktop\ZHPDiag.lnk
2018-09-06 11:47 - 2015-03-14 19:44 - 000000000 ____D C:\Users\Arno\AppData\Local\ElevatedDiagnostics
2018-09-05 20:15 - 2017-04-15 18:41 - 000001403 _____ C:\Users\salomé\Desktop\Roblox Player.lnk
2018-09-05 20:15 - 2017-04-15 18:31 - 000001218 _____ C:\Users\salomé\Desktop\Roblox Studio.lnk
2018-09-05 20:15 - 2017-04-15 18:31 - 000000000 ____D C:\Users\salomé\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2018-09-05 16:31 - 2015-03-04 21:02 - 000000000 ____D C:\Program Files (x86)\Origin
2018-09-04 17:44 - 2015-03-09 22:44 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-09-04 17:43 - 2017-02-25 18:33 - 000000000 ____D C:\ProgramData\CanonIJPLM
2018-09-02 21:44 - 2015-07-18 17:56 - 000000000 ____D C:\Users\salomé
2018-09-02 20:46 - 2016-12-04 21:26 - 003031552 ___SH C:\Users\salomé\Downloads\Thumbs.db
2018-09-02 19:34 - 2015-12-20 22:09 - 011284480 ___SH C:\Users\salomé\Documents\Thumbs.db
2018-08-31 21:43 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2018-08-28 20:30 - 2015-09-16 17:59 - 000000000 ____D C:\Users\salomé\AppData\Roaming\Origin
2018-08-28 20:17 - 2015-09-15 19:56 - 000000000 ____D C:\Program Files (x86)\Origin Games
2018-08-28 20:17 - 2015-03-04 21:02 - 000000000 ____D C:\ProgramData\Origin
2018-08-28 09:51 - 2013-08-22 16:44 - 000485312 _____ C:\Windows\system32\FNTCACHE.DAT
2018-08-27 23:05 - 2013-08-22 17:36 - 000000000 ___RD C:\Windows\ToastData
2018-08-27 19:11 - 2013-08-22 15:25 - 000000199 _____ C:\Windows\win.ini
2018-08-27 18:58 - 2015-03-05 08:34 - 000000000 ____D C:\Windows\system32\MRT
2018-08-27 18:50 - 2015-03-05 08:34 - 137343192 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-08-10 12:42 - 2015-03-08 18:52 - 000002244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
==================== Fichiers à la racine de certains dossiers =======
2018-03-05 12:13 - 2018-03-05 12:13 - 003035520 _____ () C:\Users\Arno\ZHPDiag3.exe
2010-08-28 22:43 - 2010-08-28 22:43 - 000096256 ____N (Google, inc) C:\Users\Arno\AppData\Roaming\AdbWinApi.dll
2010-08-28 22:43 - 2010-08-28 22:43 - 000060928 ____N (Google, inc) C:\Users\Arno\AppData\Roaming\AdbWinUsbApi.dll
2015-03-02 19:51 - 2018-09-08 14:26 - 000000062 _____ () C:\Users\Arno\AppData\Roaming\sp_data.sys
2015-03-26 20:04 - 2015-03-26 20:04 - 000000044 _____ () C:\Users\Arno\AppData\Roaming\WB.CFG
Certains fichiers dans TEMP:
====================
2018-01-29 09:05 - 2018-01-29 09:05 - 001055688 _____ (Bandicam Company) C:\Users\Arno\AppData\Local\Temp\bdcam64_0.dll
2018-03-04 13:27 - 2018-01-02 08:37 - 001737600 _____ (Microsoft Corporation) C:\Users\Arno\AppData\Local\Temp\dllnt_dump.dll
2018-01-31 23:07 - 2017-01-25 20:13 - 005012920 _____ (NVIDIA Corporation) C:\Users\Arno\AppData\Local\Temp\NVI2_29.DLL
2015-05-07 15:21 - 2015-05-08 17:45 - 036208576 _____ () C:\Users\inesv_000\AppData\Local\Temp\InstallIMVU_518.0.exe
2016-07-13 14:41 - 2016-07-13 14:52 - 035024686 _____ () C:\Users\inesv_000\AppData\Local\Temp\Second_Life_4_0_6_315555_i686_Setup.exe
2016-03-06 12:35 - 2016-06-28 18:05 - 038420480 _____ () C:\Users\inesv_000\AppData\Local\Temp\SkypeSetup.exe
2016-07-20 08:02 - 2016-07-20 09:01 - 055684712 _____ () C:\Users\inesv_000\AppData\Local\Temp\TempQQGameToolInstall_2001827882.exe
2016-07-21 13:23 - 2016-07-21 13:37 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(1).exe
2016-07-23 11:21 - 2016-07-23 11:36 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(2).exe
2016-07-24 15:23 - 2016-07-24 15:37 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(3).exe
2016-07-25 07:53 - 2016-07-26 13:16 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(4).exe
2016-07-20 08:02 - 2016-07-20 08:19 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa.exe
2017-04-08 11:15 - 2017-04-09 16:16 - 037191376 _____ () C:\Users\salomé\AppData\Local\Temp\InstallIMVU_531.0.exe
2018-05-13 10:57 - 2018-05-13 10:57 - 000043520 ____N () C:\Users\salomé\AppData\Local\Temp\proxy_vole5296437454078370788.dll
2016-07-07 09:43 - 2016-07-07 09:43 - 001941288 _____ () C:\Users\salomé\AppData\Local\Temp\Second_Life_4_0_6_315555_i686_Setup.exe
2018-04-10 20:50 - 2018-06-20 16:06 - 063222472 _____ (Skype Technologies S.A.) C:\Users\salomé\AppData\Local\Temp\SkypeSetup.exe
2016-07-20 10:52 - 2016-07-20 10:59 - 055684712 _____ () C:\Users\salomé\AppData\Local\Temp\TempQQGameToolInstall_2001827882.exe
2016-07-21 19:29 - 2016-07-26 19:48 - 016374480 _____ (腾讯公司) C:\Users\salomé\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa.exe
2017-01-26 09:26 - 2017-01-26 09:26 - 004297200 _____ (Bandicam Company) C:\Users\sidon_000\AppData\Local\Temp\bdfilters.dll
2016-07-23 18:41 - 2016-07-23 18:55 - 016374480 _____ (腾讯公司) C:\Users\sidon_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(1).exe
2016-07-21 08:28 - 2016-07-21 08:30 - 016374480 _____ (腾讯公司) C:\Users\sidon_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa.exe
2016-10-01 15:17 - 2016-10-01 15:25 - 056465784 _____ (Google Inc.) C:\Users\sidon_000\AppData\Local\Temp\{014DDA0B-503F-489F-8DE4-BD7A66FCA4AD}-53.0.2785.143_chrome_installer.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2018-09-02 05:04
==================== Fin de FRST.txt ============================
Exécuté par Arno (administrateur) sur ASIS (08-09-2018 14:37:49)
Exécuté depuis C:\Users\Arno\Desktop
Profils chargés: Arno (Profils disponibles: Arno & inesv_000 & sidon_000 & salomé)
Platform: Windows 8.1 (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: "%1" %*)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
() C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
( ) C:\Windows\System32\lxdrcoms.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect 3\creator-ws.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(© 2015 Microsoft Corporation) C:\Users\Arno\AppData\Local\Microsoft\BingSvc\BingSvc.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Intel® Corporation) C:\Program Files\Intel\ConnectCenter\bin\CCFManager.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Intel Corporation) C:\Program Files\Intel\STCServ\STCServ.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusSmartGestureDetector64.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(VS Revo Group) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111976 2013-09-11] (Intel Corporation)
HKLM\...\Run: [IntelConnectCenter] => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [90112 2015-03-16] (Intel® Corporation)
HKLM\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.16.589\ASUSWSLoader.exe
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM-x32\...\Run: [lxdrmon.exe] => C:\Program Files (x86) (x86)\Lexmark 4900 Series\lxdrmon.exe [676520 2010-02-04] ()
HKLM-x32\...\Run: [lxdramon] => C:\Program Files (x86) (x86)\Lexmark 4900 Series\lxdramon.exe [16040 2010-02-04] ()
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1285704 2014-08-08] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2014-07-30] (CANON INC.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-02-26] (Qualcomm®Atheros®)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\Run: [BingSvc] => C:\Users\Arno\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\MountPoints2: {57b68bde-feff-11e5-8326-40e23058af16} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\...\MountPoints2: {6cf4a82e-32de-11e7-84aa-40e23058af16} - "F:\Setup.exe"
HKU\S-1-5-18\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.)
HKU\S-1-5-18\...\RunOnce: [iCloud] => "C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe"
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\Users\salomé\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2017-09-17]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: autocheck autochk * sdnclean64.exe
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{32F68C8C-7F11-4A63-9469-55EF1AE6BC39}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6CFD037F-7FBB-4F8D-8DCC-060351D9C488}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131619549589977746&GUID=BB4268E8-8601-429F-899A-5977F15F0816
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131619549589980243&GUID=BB4268E8-8601-429F-899A-5977F15F0816
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKU\S-1-5-21-233976193-1382472177-2432614907-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/fr-fr
URLSearchHook: HKLM-x32 -> Par défaut = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope la valeur est absente
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-233976193-1382472177-2432614907-1001 -> {96BBC430-9900-4299-9F5D-7951AB36EFDF} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2018-02-15] (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2017-08-24] (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-05-15] (Microsoft Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
Toolbar: HKU\S-1-5-21-233976193-1382472177-2432614907-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2017-08-15] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [pdf_architect_3_conv@pdfarchitect.org] - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension
FF Extension: (PDF Architect 3 Creator) - C:\Program Files (x86)\PDF Architect 3\resources\pdfarchitect3firefoxextension [2015-03-25] [Legacy] [non signé]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2011-11-30] (CANON INC.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-07-11] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-10-23] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-07-19] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\Arno\AppData\Local\Google\Chrome\User Data\Default [2018-09-08]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-06]
CHR Extension: (Ghostify Hide Geo FREE) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\Default\Extensions\oaocmnfllndpbbmjmniielgaanaifehp [2018-09-06]
CHR Extension: (Chrome Media Router) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-09-06]
CHR Profile: C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch [2018-01-07] <==== ATTENTION
CHR Extension: (Google Slides) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-07-26]
CHR Extension: (Google Docs) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-26]
CHR Extension: (Google Drive) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-26]
CHR Extension: (YouTube) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-26]
CHR Extension: (Facebook) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\boeajhmfdjldchidhphikilcgdacljfm [2015-06-22]
CHR Extension: (Google News) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\dllkocilcinkggkchnjgegijklcililc [2015-06-22]
CHR Extension: (Google Agenda) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn [2015-10-25]
CHR Extension: (Avast SafePrice) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-07-26]
CHR Extension: (Avast Online Security) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-07-26]
CHR Extension: (Google Keep – Notes et listes) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2016-07-26]
CHR Extension: (Until AM Web App) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\kodigjkcpaoeodlnmcnekemakpnmegnk [2015-06-22]
CHR Extension: (Google Maps) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-10-25]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-10]
CHR Extension: (Gmail) - C:\Users\Arno\AppData\Local\Google\Chrome\User Data\tazoygroulychabch\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-07-26]
CHR HKLM-x32\...\Chrome\Extension: [oaocmnfllndpbbmjmniielgaanaifehp] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [319104 2014-02-26] (Windows (R) Win 7 DDK provider) [Fichier non signé]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2018-02-17] ()
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115632 2013-09-11] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [116656 2013-09-11] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148688 2013-09-11] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124880 2013-09-11] (Intel Corporation)
S2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [314696 2014-05-09] (Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [84616 2014-05-15] ()
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [827392 2013-09-02] (Intel(R) Corporation) [Fichier non signé]
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-10-23] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-10-23] (Intel Corporation)
R2 lxdr_device; C:\Windows\system32\lxdrcoms.exe [1039360 2009-10-16] ( )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2213696 2018-08-20] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3084104 2018-08-20] (Electronic Arts)
S3 PDF Architect 3; C:\Program Files (x86)\PDF Architect 3\ws.exe [2243288 2015-03-20] (pdfforge GmbH)
S3 PDF Architect 3 CrashHandler; C:\Program Files (x86)\PDF Architect 3\crash-handler-ws.exe [901336 2015-03-20] (pdfforge GmbH)
R2 PDF Architect 3 Creator; C:\Program Files (x86)\PDF Architect 3\creator-ws.exe [740568 2015-03-20] (pdfforge GmbH)
R2 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [6634224 2018-02-02] (TeamViewer GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-02-25] (Atheros) [Fichier non signé]
S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S3 BstHdLogRotatorSvc; "C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe" [X]
S3 BstHdPlusAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe" BstHdPlusAndroidSvc Android [X]
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem"
S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AsusTP; C:\Windows\System32\drivers\AsusTP.sys [82256 2016-11-03] (ASUS Corporation)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3892224 2014-03-07] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2014-02-25] (Qualcomm Atheros)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [129152 2016-04-25] (Samsung Electronics Co., Ltd.)
R3 DptfDevDram; C:\Windows\system32\DRIVERS\DptfDevDram.sys [143568 2013-09-11] (Intel Corporation)
R3 DptfDevPch; C:\Windows\system32\DRIVERS\DptfDevPch.sys [114680 2013-09-11] (Intel Corporation)
R3 DptfDevProc; C:\Windows\system32\DRIVERS\DptfDevProc.sys [287160 2013-09-11] (Intel Corporation)
R3 DptfManager; C:\Windows\system32\DRIVERS\DptfManager.sys [494272 2013-09-11] (Intel Corporation)
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [17280 2012-08-06] ( )
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [259360 2018-09-08] (Malwarebytes)
R2 npf; C:\Windows\system32\drivers\npf.sys [36600 2017-08-03] (Riverbed Technology, Inc.)
R2 plctrl; C:\Program Files\ASUS\P4G\plctrl.sys [14136 2014-02-11] (Windows (R) Win 7 DDK provider)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [827096 2015-03-11] (Realsil Semiconductor Corporation)
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [159936 2016-08-15] (MBB)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
S3 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 BstkDrv; \??\C:\Program Files (x86)\BlueStacks\BstkDrv.sys [X]
U0 msahci; system32\drivers\msahci.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-09-08 12:25 - 2018-09-08 12:25 - 000001052 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2018-09-08 12:25 - 2018-09-08 12:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2018-09-08 12:25 - 2018-09-08 12:25 - 000000000 ____D C:\Program Files\VS Revo Group
2018-09-08 12:24 - 2018-09-08 12:24 - 007197480 _____ (VS Revo Group ) C:\Users\Arno\Desktop\revosetup.exe
2018-09-08 08:34 - 2018-09-08 08:38 - 000062074 _____ C:\Users\Arno\Desktop\Addition.txt
2018-09-08 08:31 - 2018-09-08 14:39 - 000026137 _____ C:\Users\Arno\Desktop\FRST.txt
2018-09-08 08:31 - 2018-09-08 14:37 - 000000000 ____D C:\FRST
2018-09-08 08:30 - 2018-09-08 08:30 - 002413056 _____ (Farbar) C:\Users\Arno\Desktop\FRST64.exe
2018-09-07 09:22 - 2018-09-07 09:22 - 000000000 ____D C:\Users\Arno\AppData\Local\mbam
2018-09-07 09:21 - 2018-09-08 14:25 - 000259360 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2018-09-07 09:21 - 2018-09-07 09:21 - 000001885 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-09-07 09:21 - 2018-09-07 09:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-09-07 09:21 - 2018-07-12 08:42 - 000152688 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-09-07 09:20 - 2018-09-07 09:20 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-09-07 09:16 - 2018-09-08 14:10 - 000000000 ____D C:\Users\Arno\Documents\maintenance info
2018-09-07 08:22 - 2018-09-07 08:31 - 079729056 _____ (Malwarebytes ) C:\Users\Arno\Desktop\mb3-setup-consumer-3.5.1.2522-1.0.441-1.0.6669.exe
2018-09-07 08:15 - 2018-09-07 08:16 - 007571152 _____ (Malwarebytes) C:\Users\Arno\Desktop\adwcleaner_7.2.3.1.exe
2018-09-06 17:33 - 2018-09-06 17:33 - 000000875 _____ C:\Users\Arno\Desktop\ZHPCleaner.lnk
2018-09-06 17:31 - 2018-09-06 17:31 - 000000000 ____D C:\Users\Arno\Documents\Bluetooth Folder
2018-09-06 17:25 - 2018-09-06 17:25 - 003275136 _____ C:\Users\Arno\Downloads\ZHPCleaner.exe
2018-09-06 15:22 - 2018-09-06 15:22 - 000000000 ____D C:\Users\Arno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2018-09-06 15:21 - 2018-09-06 15:21 - 000000000 ____D C:\Users\Arno\AppData\Roaming\Google
2018-09-06 14:41 - 2018-09-07 16:24 - 003164032 _____ C:\Users\Arno\Downloads\ZHPDiag3.exe
2018-09-06 10:34 - 2018-09-06 10:34 - 000038626 _____ C:\Users\Arno\Downloads\Mandat SEPA.pdf
2018-09-06 10:32 - 2018-09-06 10:32 - 000004399 _____ C:\Users\Arno\Downloads\Compte_02018772117.pdf
2018-09-02 20:06 - 2018-09-02 21:30 - 001264353 _____ C:\Users\salomé\Downloads\Intro2.wve
2018-09-01 17:50 - 2018-09-01 17:50 - 000003072 ___SH C:\Users\salomé\Desktop\Thumbs.db
2018-09-01 15:59 - 2018-09-01 18:11 - 001039073 _____ C:\Users\salomé\Downloads\Intro1.wve
2018-08-25 21:29 - 2018-07-19 09:06 - 007371616 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-08-25 21:29 - 2018-07-19 08:48 - 001737600 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-08-25 21:29 - 2018-07-19 08:15 - 025745408 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-08-25 21:29 - 2018-07-19 06:35 - 002902016 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2018-08-25 21:29 - 2018-07-19 06:33 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-08-25 21:29 - 2018-07-19 06:33 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2018-08-25 21:29 - 2018-07-19 06:30 - 005778432 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-08-25 21:29 - 2018-07-19 06:23 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2018-08-25 21:29 - 2018-07-19 06:22 - 020286464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-08-25 21:29 - 2018-07-19 06:22 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-08-25 21:29 - 2018-07-19 06:22 - 000108544 _____ (Microsoft Corporation) C:\Windows\system32\hlink.dll
2018-08-25 21:29 - 2018-07-19 06:21 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2018-08-25 21:29 - 2018-07-19 06:05 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-08-25 21:29 - 2018-07-19 06:03 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2018-08-25 21:29 - 2018-07-19 06:01 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2018-08-25 21:29 - 2018-07-19 05:55 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-08-25 21:29 - 2018-07-19 05:55 - 000099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hlink.dll
2018-08-25 21:29 - 2018-07-19 05:54 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2018-08-25 21:29 - 2018-07-19 05:53 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-08-25 21:29 - 2018-07-19 05:47 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2018-08-25 21:29 - 2018-07-19 05:46 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-08-25 21:29 - 2018-07-19 05:45 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-08-25 21:29 - 2018-07-19 05:45 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2018-08-25 21:29 - 2018-07-19 05:43 - 002136064 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2018-08-25 21:29 - 2018-07-19 05:34 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-08-25 21:29 - 2018-07-19 05:32 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-08-25 21:29 - 2018-07-19 05:31 - 004510720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-08-25 21:29 - 2018-07-19 05:30 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2018-08-25 21:29 - 2018-07-19 05:28 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-08-25 21:29 - 2018-07-19 05:28 - 002882048 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2018-08-25 21:29 - 2018-07-19 05:28 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2018-08-25 21:29 - 2018-07-19 05:28 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-08-25 21:29 - 2018-07-19 05:28 - 000333312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2018-08-25 21:29 - 2018-07-19 05:20 - 001554944 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-08-25 21:29 - 2018-07-19 05:17 - 001049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2018-08-25 21:29 - 2018-07-19 05:09 - 004037632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-08-25 21:29 - 2018-07-19 05:09 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-08-25 21:29 - 2018-07-19 05:06 - 001329152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-08-25 21:29 - 2018-07-19 05:04 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-08-25 21:29 - 2018-07-13 09:51 - 002452824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-08-25 21:29 - 2018-07-07 20:33 - 001548632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2018-08-25 21:29 - 2018-07-07 19:05 - 004169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-08-25 21:29 - 2018-07-07 19:02 - 000096768 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2018-08-25 21:29 - 2018-07-07 19:00 - 000148992 _____ (Microsoft Corporation) C:\Windows\system32\t2embed.dll
2018-08-25 21:29 - 2018-07-07 18:33 - 000078336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2018-08-25 21:29 - 2018-07-07 18:31 - 000113664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\t2embed.dll
2018-08-25 21:29 - 2018-07-06 19:37 - 001754624 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2018-08-25 21:29 - 2018-07-06 18:36 - 001491968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2018-08-25 21:29 - 2018-06-30 20:00 - 001113952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2018-08-25 21:29 - 2018-06-24 17:11 - 000748544 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2018-08-25 21:29 - 2018-06-24 17:04 - 000504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StructuredQuery.dll
2018-08-25 21:29 - 2018-06-19 15:38 - 003611136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2018-08-25 21:29 - 2018-06-19 15:38 - 003321344 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2018-08-25 21:29 - 2018-06-19 15:31 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2018-08-25 21:29 - 2018-06-19 15:29 - 000065536 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2018-08-25 21:29 - 2018-06-16 17:03 - 002779136 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2018-08-25 21:29 - 2018-06-16 16:59 - 002464256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2018-08-25 21:29 - 2018-06-15 06:34 - 000923512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2018-08-25 21:29 - 2018-06-15 04:28 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2018-08-25 21:29 - 2018-06-15 04:12 - 000477696 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2018-08-25 21:29 - 2018-06-15 04:00 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2018-08-25 21:29 - 2018-06-15 03:55 - 000840192 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll
2018-08-25 21:29 - 2018-06-15 03:43 - 000186880 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2018-08-25 21:29 - 2018-06-15 03:26 - 000514560 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv
2018-08-25 21:29 - 2018-06-15 03:22 - 000866304 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2018-08-25 21:29 - 2018-06-15 03:19 - 000399360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv
2018-08-25 21:29 - 2018-06-08 20:47 - 000083456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2018-09-08 14:40 - 2015-03-04 22:40 - 000000000 ____D C:\Users\Arno\AppData\Local\CrashDumps
2018-09-08 14:36 - 2015-03-02 20:37 - 000000000 __RDO C:\Users\Arno\OneDrive
2018-09-08 14:33 - 2015-06-05 19:33 - 000000346 _____ C:\Windows\Tasks\Chromium.job
2018-09-08 14:30 - 2015-03-02 19:55 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-233976193-1382472177-2432614907-1001
2018-09-08 14:27 - 2017-05-09 21:51 - 000000000 ____D C:\Users\Arno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2018-09-08 14:26 - 2015-03-02 19:51 - 000000062 _____ C:\Users\Arno\AppData\Roaming\sp_data.sys
2018-09-08 14:25 - 2018-01-04 18:44 - 000000290 __RSH C:\ProgramData\ntuser.pol
2018-09-08 14:24 - 2016-07-24 17:09 - 000000000 ____D C:\ProgramData\NVIDIA
2018-09-08 14:24 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-09-08 14:24 - 2013-08-22 15:25 - 001048576 ___SH C:\Windows\system32\config\BBI
2018-09-08 14:19 - 2015-08-21 10:14 - 000000000 ____D C:\ProgramData\Skype
2018-09-08 14:19 - 2015-03-10 23:40 - 000000000 ____D C:\ProgramData\lx_Cats
2018-09-08 11:38 - 2016-08-24 09:06 - 000003916 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{A7D6AB14-C76B-4777-860E-5DE82CFB0EBF}
2018-09-08 08:34 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2018-09-07 23:06 - 2015-08-17 20:29 - 000000000 ____D C:\Users\salomé\AppData\Local\CrashDumps
2018-09-07 17:47 - 2015-07-18 18:04 - 000000062 _____ C:\Users\salomé\AppData\Roaming\sp_data.sys
2018-09-07 17:45 - 2015-07-18 18:04 - 000000000 __RDO C:\Users\salomé\OneDrive
2018-09-07 16:35 - 2018-02-01 22:09 - 000814078 _____ C:\Windows\ntbtlog.txt
2018-09-07 16:31 - 2018-01-31 23:46 - 000000000 ____D C:\Users\Arno\AppData\Roaming\ZHP
2018-09-07 09:11 - 2015-03-02 19:49 - 000000000 ____D C:\Users\Arno
2018-09-07 08:23 - 2015-04-11 19:13 - 000000000 ____D C:\AdwCleaner
2018-09-07 07:51 - 2015-07-19 12:19 - 000003924 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{1C14E62A-9209-4533-BC9E-0AF1BA09DD7D}
2018-09-06 20:27 - 2015-07-18 18:04 - 000003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-233976193-1382472177-2432614907-1009
2018-09-06 16:28 - 2017-03-30 20:09 - 000000000 ____D C:\Users\Arno\Documents\SALOME ECOLE
2018-09-06 16:13 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2018-09-06 15:00 - 2015-03-06 21:48 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2018-09-06 14:49 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2018-09-06 14:46 - 2015-03-02 19:49 - 000000000 ____D C:\Users\Arno\AppData\Local\Packages
2018-09-06 12:09 - 2018-01-31 23:46 - 000000000 ____D C:\Users\Arno\AppData\Local\ZHP
2018-09-06 12:03 - 2018-03-04 12:56 - 000000865 _____ C:\Users\Arno\Desktop\ZHPDiag.lnk
2018-09-06 11:47 - 2015-03-14 19:44 - 000000000 ____D C:\Users\Arno\AppData\Local\ElevatedDiagnostics
2018-09-05 20:15 - 2017-04-15 18:41 - 000001403 _____ C:\Users\salomé\Desktop\Roblox Player.lnk
2018-09-05 20:15 - 2017-04-15 18:31 - 000001218 _____ C:\Users\salomé\Desktop\Roblox Studio.lnk
2018-09-05 20:15 - 2017-04-15 18:31 - 000000000 ____D C:\Users\salomé\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2018-09-05 16:31 - 2015-03-04 21:02 - 000000000 ____D C:\Program Files (x86)\Origin
2018-09-04 17:44 - 2015-03-09 22:44 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-09-04 17:43 - 2017-02-25 18:33 - 000000000 ____D C:\ProgramData\CanonIJPLM
2018-09-02 21:44 - 2015-07-18 17:56 - 000000000 ____D C:\Users\salomé
2018-09-02 20:46 - 2016-12-04 21:26 - 003031552 ___SH C:\Users\salomé\Downloads\Thumbs.db
2018-09-02 19:34 - 2015-12-20 22:09 - 011284480 ___SH C:\Users\salomé\Documents\Thumbs.db
2018-08-31 21:43 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2018-08-28 20:30 - 2015-09-16 17:59 - 000000000 ____D C:\Users\salomé\AppData\Roaming\Origin
2018-08-28 20:17 - 2015-09-15 19:56 - 000000000 ____D C:\Program Files (x86)\Origin Games
2018-08-28 20:17 - 2015-03-04 21:02 - 000000000 ____D C:\ProgramData\Origin
2018-08-28 09:51 - 2013-08-22 16:44 - 000485312 _____ C:\Windows\system32\FNTCACHE.DAT
2018-08-27 23:05 - 2013-08-22 17:36 - 000000000 ___RD C:\Windows\ToastData
2018-08-27 19:11 - 2013-08-22 15:25 - 000000199 _____ C:\Windows\win.ini
2018-08-27 18:58 - 2015-03-05 08:34 - 000000000 ____D C:\Windows\system32\MRT
2018-08-27 18:50 - 2015-03-05 08:34 - 137343192 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-08-10 12:42 - 2015-03-08 18:52 - 000002244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
==================== Fichiers à la racine de certains dossiers =======
2018-03-05 12:13 - 2018-03-05 12:13 - 003035520 _____ () C:\Users\Arno\ZHPDiag3.exe
2010-08-28 22:43 - 2010-08-28 22:43 - 000096256 ____N (Google, inc) C:\Users\Arno\AppData\Roaming\AdbWinApi.dll
2010-08-28 22:43 - 2010-08-28 22:43 - 000060928 ____N (Google, inc) C:\Users\Arno\AppData\Roaming\AdbWinUsbApi.dll
2015-03-02 19:51 - 2018-09-08 14:26 - 000000062 _____ () C:\Users\Arno\AppData\Roaming\sp_data.sys
2015-03-26 20:04 - 2015-03-26 20:04 - 000000044 _____ () C:\Users\Arno\AppData\Roaming\WB.CFG
Certains fichiers dans TEMP:
====================
2018-01-29 09:05 - 2018-01-29 09:05 - 001055688 _____ (Bandicam Company) C:\Users\Arno\AppData\Local\Temp\bdcam64_0.dll
2018-03-04 13:27 - 2018-01-02 08:37 - 001737600 _____ (Microsoft Corporation) C:\Users\Arno\AppData\Local\Temp\dllnt_dump.dll
2018-01-31 23:07 - 2017-01-25 20:13 - 005012920 _____ (NVIDIA Corporation) C:\Users\Arno\AppData\Local\Temp\NVI2_29.DLL
2015-05-07 15:21 - 2015-05-08 17:45 - 036208576 _____ () C:\Users\inesv_000\AppData\Local\Temp\InstallIMVU_518.0.exe
2016-07-13 14:41 - 2016-07-13 14:52 - 035024686 _____ () C:\Users\inesv_000\AppData\Local\Temp\Second_Life_4_0_6_315555_i686_Setup.exe
2016-03-06 12:35 - 2016-06-28 18:05 - 038420480 _____ () C:\Users\inesv_000\AppData\Local\Temp\SkypeSetup.exe
2016-07-20 08:02 - 2016-07-20 09:01 - 055684712 _____ () C:\Users\inesv_000\AppData\Local\Temp\TempQQGameToolInstall_2001827882.exe
2016-07-21 13:23 - 2016-07-21 13:37 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(1).exe
2016-07-23 11:21 - 2016-07-23 11:36 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(2).exe
2016-07-24 15:23 - 2016-07-24 15:37 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(3).exe
2016-07-25 07:53 - 2016-07-26 13:16 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(4).exe
2016-07-20 08:02 - 2016-07-20 08:19 - 016374480 _____ (腾讯公司) C:\Users\inesv_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa.exe
2017-04-08 11:15 - 2017-04-09 16:16 - 037191376 _____ () C:\Users\salomé\AppData\Local\Temp\InstallIMVU_531.0.exe
2018-05-13 10:57 - 2018-05-13 10:57 - 000043520 ____N () C:\Users\salomé\AppData\Local\Temp\proxy_vole5296437454078370788.dll
2016-07-07 09:43 - 2016-07-07 09:43 - 001941288 _____ () C:\Users\salomé\AppData\Local\Temp\Second_Life_4_0_6_315555_i686_Setup.exe
2018-04-10 20:50 - 2018-06-20 16:06 - 063222472 _____ (Skype Technologies S.A.) C:\Users\salomé\AppData\Local\Temp\SkypeSetup.exe
2016-07-20 10:52 - 2016-07-20 10:59 - 055684712 _____ () C:\Users\salomé\AppData\Local\Temp\TempQQGameToolInstall_2001827882.exe
2016-07-21 19:29 - 2016-07-26 19:48 - 016374480 _____ (腾讯公司) C:\Users\salomé\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa.exe
2017-01-26 09:26 - 2017-01-26 09:26 - 004297200 _____ (Bandicam Company) C:\Users\sidon_000\AppData\Local\Temp\bdfilters.dll
2016-07-23 18:41 - 2016-07-23 18:55 - 016374480 _____ (腾讯公司) C:\Users\sidon_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa(1).exe
2016-07-21 08:28 - 2016-07-21 08:30 - 016374480 _____ (腾讯公司) C:\Users\sidon_000\AppData\Local\Temp\TempQQPhoneManager-5.6.1_710201.5056.pa.exe
2016-10-01 15:17 - 2016-10-01 15:25 - 056465784 _____ (Google Inc.) C:\Users\sidon_000\AppData\Local\Temp\{014DDA0B-503F-489F-8DE4-BD7A66FCA4AD}-53.0.2785.143_chrome_installer.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2018-09-02 05:04
==================== Fin de FRST.txt ============================