Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 28-02-2019 01
Exécuté par LE CONNETABLE (administrateur) sur LEPATTON (01-03-2019 18:45:17)
Exécuté depuis C:\Users\LE CONNETABLE\Desktop
Profils chargés: LE CONNETABLE (Profils disponibles: LE CONNETABLE & DefaultAppPool)
Platform: Microsoft Windows 10 Famille Version 1803 17134.590 (X86) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
(Synology Inc. -> ) C:\Program Files\Synology\CloudStation\bin\vss-service.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(VIA Technologies Inc. -> VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(StorageCraft Technology Corporation -> StorageCraft Technology Corporation) C:\Program Files\StorageCraft\ShadowProtect\vsnapvss.exe
(StorageCraft Technology Corporation -> StorageCraft Technology Corporation) C:\Program Files\StorageCraft\ShadowProtect\ShadowProtectSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Synology Inc. -> Synology Inc.) C:\Users\LE CONNETABLE\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-ui.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Synology Inc. -> Synology Inc.) C:\Users\LE CONNETABLE\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-connect.exe
(Synology Inc. -> Synology Inc.) C:\Users\LE CONNETABLE\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-daemon.exe
(Adobe Systems, Incorporated -> ) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x86__kzf8qxf38zg5c\SkypeApp.exe
() [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19021.10411.0_x86__8wekyb3d8bbwe\Video.UI.exe
() [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x86__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x86__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
() [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x86__8wekyb3d8bbwe\WinStore.App.exe
() [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19011.11311.0_x86__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [486816 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [1423304 2015-07-24] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé]
HKLM\...\Run: [StorageCraft Mount Notifier] => C:\Program Files\StorageCraft\ShadowProtect\MountNotify.exe [17128 2017-12-08] (StorageCraft Technology Corporation -> StorageCraft Technology Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7685808 2017-09-20] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIJFE.EXE [249440 2012-02-29] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\...\MountPoints2: {3b1fc005-65ba-11e8-9523-90e6ba3b8062} - "J:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [28672 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Startup: C:\Users\LE CONNETABLE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Synology Cloud Station Drive.lnk [2019-03-01]
ShortcutTarget: Synology Cloud Station Drive.lnk -> C:\Program Files\Synology\CloudStation\bin\launcher.exe (Synology Inc. -> Synology Inc.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8e24db6c-f4a4-49c2-a0f5-3ec4be5bbce5}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3209782926-3138353277-2660692922-1000 -> DefaultScope {E2172FE1-4CAE-462C-BC76-50D9837A2F09} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&rlz=1I7PRFB_frFR451
SearchScopes: HKU\S-1-5-21-3209782926-3138353277-2660692922-1000 -> {E2172FE1-4CAE-462C-BC76-50D9837A2F09} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&rlz=1I7PRFB_frFR451
BHO: Module complémentaire de navigateur pour la désactivation de Google Analytics -> {75EF13CE-B59E-41ba-8A5A-A944031BD8B4} -> C:\Program Files\Google\Google Analytics Opt-Out\gaoptout.dll [2014-04-03] (Google Inc -> Google, Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Skype Software Sarl -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: j18nuzeb.default-1454691080315-1543947538337
FF DefaultProfile: ftxk7nwd.default
FF ProfilePath: C:\Users\LE CONNETABLE\AppData\Roaming\Mozilla\Firefox\Profiles\j18nuzeb.default-1454691080315-1543947538337 [2019-03-01]
FF Homepage: Mozilla\Firefox\Profiles\j18nuzeb.default-1454691080315-1543947538337 -> hxxps://messageriepro3.orange.fr/#mail/SF_INBOX
FF Extension: (uBlock Origin) - C:\Users\LE CONNETABLE\AppData\Roaming\Mozilla\Firefox\Profiles\j18nuzeb.default-1454691080315-1543947538337\Extensions\uBlock0@raymondhill.net.xpi [2019-02-19]
FF Extension: (wanteeed) - C:\Users\LE CONNETABLE\AppData\Roaming\Mozilla\Firefox\Profiles\j18nuzeb.default-1454691080315-1543947538337\Extensions\{EDB6A15C-5F8C-4531-92FA-98E988CF233C}.xpi [2018-12-04] [UpdateUrl:hxxps://app.wanteeed.com/extensions/update_firefox.json]
FF ProfilePath: C:\Users\LE CONNETABLE\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\ftxk7nwd.default [2019-03-01]
FF Extension: (Français (FR) Language Pack) - C:\Users\LE CONNETABLE\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\ftxk7nwd.default\Extensions\langpack-fr@palemoon.org.xpi [2018-05-22] [Legacy] [non signé]
FF Extension: (Skype Click to Call) - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] [Legacy] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_32_0_0_142.dll [2019-02-17] (Adobe Systems Incorporated -> )
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll [2014-03-11] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-21] (Google Inc -> Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-21] (Google Inc -> Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY SOLUTIONS LIMITED -> ABBYY)
R2 Cloud Station Drive VSS Service; C:\Program Files\Synology\CloudStation\bin\vss-service.exe [244248 2016-07-04] (Synology Inc. -> )
S4 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [36648 2016-10-06] (Dropbox, Inc -> Windows (R) Win 7 DDK provider)
S4 EpsonScanSvc; C:\WINDOWS\system32\EscSvc.exe [122000 2011-12-12] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S4 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [167520 2012-02-20] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921232 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4305040 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
S3 StorageCraft ImageReady; C:\Program Files\StorageCraft\ShadowProtect\ImageReady.exe [4409760 2017-12-08] (StorageCraft Technology Corporation -> )
S4 UsbClientService; C:\Program Files\Synology\Assistant\UsbClientService.exe [248840 2016-03-18] (Synology Inc. -> ) [Fichier non signé]
R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [46736 2015-12-09] (VIA Technologies Inc. -> VIA Technologies, Inc.)
R2 VSNAPVSS; C:\Program Files\StorageCraft\ShadowProtect\vsnapvss.exe [72936 2017-12-08] (StorageCraft Technology Corporation -> StorageCraft Technology Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [3379288 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [91768 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [281760 2013-03-25] (Tages SA -> )
R3 busenum; C:\WINDOWS\System32\drivers\busenum.sys [53728 2012-08-03] (Synology Inc. -> Windows (R) Win 7 DDK provider)
S3 camfilt2; C:\WINDOWS\system32\DRIVERS\camfilt2.sys [96384 2007-08-29] (Guillemot Corporation -> Guillemot Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109184 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25888 2013-03-25] (Tages SA -> )
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [221112 2018-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [75712 2018-02-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [5810 2004-08-13] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad32v.sys [44840 2015-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
S3 ovt530; C:\WINDOWS\System32\Drivers\ov530vid.sys [167464 2007-02-02] (Guillemot Corporation -> OmniVision Technologies, Inc.)
S3 RimVSerPort; C:\WINDOWS\System32\DRIVERS\RimSerial.sys [35840 2012-12-10] (Microsoft Windows Hardware Compatibility Publisher -> Research in Motion Ltd)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [746752 2015-07-28] (Realtek Semiconductor Corp -> Realtek )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147072 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [35088 2013-04-30] (AVAST Software -> The OpenVPN Project)
R3 VIAHdAudAddService; C:\WINDOWS\system32\drivers\viahduaa.sys [573560 2015-12-09] (VIA Technologies, Inc -> VIA Technologies, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [38488 2019-02-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [268976 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [47800 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [189952 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-03-01 18:45 - 2019-03-01 18:46 - 000017360 _____ C:\Users\LE CONNETABLE\Desktop\FRST.txt
2019-03-01 18:44 - 2019-03-01 18:45 - 000000000 ____D C:\FRST
2019-03-01 18:44 - 2019-03-01 18:44 - 001793024 _____ (Farbar) C:\Users\LE CONNETABLE\Desktop\FRST.exe
2019-03-01 17:12 - 2019-03-01 17:12 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\Bigflo & Oli - La vraie vie (2017) [320kbps]
2019-03-01 09:40 - 2019-03-01 09:40 - 000147224 _____ C:\Users\LE CONNETABLE\Desktop\ZHPDiag.txt
2019-03-01 09:31 - 2019-03-01 09:34 - 000000911 _____ C:\Users\LE CONNETABLE\Desktop\ZHPDiag.lnk
2019-03-01 09:30 - 2019-03-01 09:30 - 003208064 _____ C:\Users\LE CONNETABLE\Downloads\ZHPDiag3.exe
2019-03-01 08:04 - 2019-03-01 08:04 - 007316688 _____ (Malwarebytes) C:\Users\LE CONNETABLE\Downloads\adwcleaner_7.2.7.0.exe
2019-03-01 08:03 - 2019-03-01 08:03 - 007320272 _____ (Malwarebytes) C:\Users\LE CONNETABLE\Downloads\adwcleaner_7.2.6.0.exe
2019-03-01 07:45 - 2019-03-01 07:45 - 000013606 _____ C:\Users\LE CONNETABLE\Documents\cc_20190301_074505.reg
2019-02-27 07:46 - 2019-02-27 07:46 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\2019-02-27
2019-02-26 17:00 - 2019-02-26 17:00 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\2019-02-26
2019-02-23 19:24 - 2019-02-05 16:02 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\Tété - Fauthentique
2019-02-17 07:24 - 2019-02-06 07:52 - 004053504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-02-17 07:24 - 2019-02-06 07:52 - 002891776 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-02-17 07:24 - 2019-02-06 07:52 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-02-17 07:24 - 2019-02-06 04:01 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-02-17 07:24 - 2019-02-06 04:01 - 000720480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-02-17 07:24 - 2019-02-06 04:00 - 006683448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-02-17 07:24 - 2019-02-06 04:00 - 006572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-02-17 07:24 - 2019-02-06 04:00 - 002030904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-02-17 07:24 - 2019-02-06 03:52 - 022014464 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-02-17 07:24 - 2019-02-06 03:45 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-02-17 07:24 - 2019-02-06 03:42 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-02-17 07:24 - 2019-02-06 03:41 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2019-02-17 07:24 - 2019-02-06 03:40 - 005792256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-02-17 07:24 - 2019-02-06 03:37 - 004515840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-02-17 07:24 - 2019-01-12 03:28 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd3x40.dll
2019-02-17 07:24 - 2019-01-09 10:55 - 011919872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-02-17 07:24 - 2019-01-09 10:55 - 003257856 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-02-17 07:24 - 2019-01-09 10:51 - 002094080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2019-02-17 07:24 - 2019-01-09 06:48 - 000994264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-02-17 07:24 - 2019-01-09 06:43 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 004789944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 002253480 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 001990056 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 001617152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 000607376 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 000127744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 000071456 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2019-02-17 07:24 - 2019-01-09 06:32 - 013878272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-02-17 07:24 - 2019-01-09 06:26 - 002966016 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-02-17 07:24 - 2019-01-09 06:25 - 003255296 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-02-17 07:24 - 2019-01-09 06:24 - 002808320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-02-17 07:24 - 2019-01-09 06:24 - 001834496 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-02-17 07:24 - 2019-01-09 06:23 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-02-17 07:24 - 2019-01-09 06:21 - 001752064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-02-17 07:23 - 2019-02-06 08:11 - 001465504 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-02-17 07:23 - 2019-02-06 07:57 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-02-17 07:23 - 2019-02-06 07:53 - 001082880 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-02-17 07:23 - 2019-02-06 04:01 - 000307000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-02-17 07:23 - 2019-02-06 04:01 - 000033576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-02-17 07:23 - 2019-02-06 04:00 - 002144056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-02-17 07:23 - 2019-02-06 04:00 - 000100712 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2019-02-17 07:23 - 2019-02-06 04:00 - 000037176 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-02-17 07:23 - 2019-02-06 03:40 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-02-17 07:23 - 2019-02-06 03:40 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2019-02-17 07:23 - 2019-02-06 03:39 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-02-17 07:23 - 2019-02-06 03:39 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-02-17 07:23 - 2019-02-06 03:39 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-02-17 07:23 - 2019-02-06 03:38 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-02-17 07:23 - 2019-02-06 03:38 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-02-17 07:23 - 2019-02-06 03:38 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-02-17 07:23 - 2019-02-06 03:37 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-02-17 07:23 - 2019-02-06 03:37 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-02-17 07:23 - 2019-02-06 03:37 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-02-17 07:23 - 2019-02-06 03:37 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2019-02-17 07:23 - 2019-02-06 03:36 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-02-17 07:23 - 2019-02-06 03:35 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-02-17 07:23 - 2019-02-06 03:34 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-02-17 07:23 - 2019-01-09 12:08 - 000254776 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-02-17 07:23 - 2019-01-09 11:02 - 000636872 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-02-17 07:23 - 2019-01-09 10:55 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2019-02-17 07:23 - 2019-01-09 10:53 - 000958976 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2019-02-17 07:23 - 2019-01-09 06:53 - 000480056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-02-17 07:23 - 2019-01-09 06:48 - 000074040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-02-17 07:23 - 2019-01-09 06:44 - 000078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2019-02-17 07:23 - 2019-01-09 06:43 - 000986936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-02-17 07:23 - 2019-01-09 06:43 - 000949856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-02-17 07:23 - 2019-01-09 06:43 - 000831528 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-02-17 07:23 - 2019-01-09 06:43 - 000358904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-02-17 07:23 - 2019-01-09 06:43 - 000287640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-02-17 07:23 - 2019-01-09 06:43 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-02-17 07:23 - 2019-01-09 06:43 - 000195576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2019-02-17 07:23 - 2019-01-09 06:43 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-02-17 07:23 - 2019-01-09 06:42 - 001190496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-02-17 07:23 - 2019-01-09 06:42 - 001051032 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-02-17 07:23 - 2019-01-09 06:42 - 000371192 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2019-02-17 07:23 - 2019-01-09 06:42 - 000371192 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-02-17 07:23 - 2019-01-09 06:42 - 000140792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-02-17 07:23 - 2019-01-09 06:24 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-02-17 07:23 - 2019-01-09 06:23 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2019-02-17 07:23 - 2019-01-09 06:23 - 001189888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2019-02-17 07:23 - 2019-01-09 06:23 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2019-02-17 07:23 - 2019-01-09 06:21 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-02-17 07:23 - 2019-01-09 06:21 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2019-02-17 07:23 - 2019-01-09 06:21 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-17 07:23 - 2019-01-09 06:20 - 001272832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-02-17 07:23 - 2019-01-09 06:20 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-02-17 07:23 - 2019-01-09 06:20 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-02-17 07:23 - 2019-01-09 06:20 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-02-17 07:23 - 2019-01-09 06:19 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-02-17 07:23 - 2019-01-09 06:19 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2019-02-17 07:23 - 2019-01-09 06:18 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2019-02-17 07:23 - 2019-01-09 05:01 - 000806320 _____ C:\WINDOWS\system32\locale.nls
2019-02-17 07:23 - 2019-01-08 04:06 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjet40.dll
2019-02-17 07:23 - 2019-01-08 04:06 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd2x40.dll
2019-02-17 07:23 - 2019-01-08 04:06 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2019-02-14 08:33 - 2018-09-20 05:33 - 001499960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2019-02-08 08:53 - 2019-02-08 08:53 - 000024531 _____ C:\Users\LE CONNETABLE\Documents\lettre senior.odt
2019-02-08 08:06 - 2019-02-08 08:06 - 000022223 _____ C:\Users\LE CONNETABLE\Documents\senior.odt
2019-01-30 10:04 - 2019-01-30 10:04 - 000070725 _____ C:\Users\LE CONNETABLE\Downloads\RICE.pdf
==================== Un mois (modifiés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-03-01 18:36 - 2018-05-21 11:15 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-03-01 18:36 - 2018-04-11 21:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-01 17:52 - 2018-05-21 11:19 - 002000836 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-03-01 17:52 - 2018-04-12 06:12 - 000879862 _____ C:\WINDOWS\system32\perfh00C.dat
2019-03-01 17:52 - 2018-04-12 06:12 - 000184092 _____ C:\WINDOWS\system32\perfc00C.dat
2019-03-01 17:52 - 2018-04-11 21:31 - 000000000 ____D C:\WINDOWS\INF
2019-03-01 17:48 - 2018-05-21 11:24 - 000000000 ____D C:\Users\LE CONNETABLE
2019-03-01 17:48 - 2018-04-11 21:36 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-01 17:48 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-03-01 17:48 - 2016-07-05 15:02 - 000000000 ___RD C:\Users\LE CONNETABLE\Desktop\CloudStation
2019-03-01 17:47 - 2016-11-16 09:52 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\LocalLow\Mozilla
2019-03-01 17:46 - 2018-05-21 11:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-03-01 17:46 - 2017-05-17 06:57 - 000000000 ____D C:\ProgramData\NVIDIA
2019-03-01 17:45 - 2016-11-16 09:40 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-03-01 17:45 - 2014-06-17 11:08 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2019-03-01 17:43 - 2018-04-11 13:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-03-01 16:49 - 2018-11-23 07:26 - 000000000 ____D C:\Program Files\rempl
2019-03-01 10:02 - 2018-05-21 06:39 - 000000000 ___DC C:\WINDOWS\Panther
2019-03-01 10:02 - 2015-04-27 17:50 - 000000000 ____D C:\Users\LE CONNETABLE\Documents\hotel Patton
2019-03-01 09:40 - 2017-03-09 17:07 - 000000135 _____ C:\Users\LE
2019-03-01 09:40 - 2017-03-09 17:06 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Roaming\ZHP
2019-03-01 09:31 - 2017-06-26 07:11 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Local\ZHP
2019-03-01 07:45 - 2017-12-11 08:07 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Local\Packages
2019-03-01 07:35 - 2016-01-13 18:06 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Local\ElevatedDiagnostics
2019-02-28 08:34 - 2015-08-26 08:05 - 000000000 ____D C:\Users\LE CONNETABLE\Documents\fact non payé
2019-02-28 08:33 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2019-02-27 07:41 - 2018-06-21 10:18 - 000000000 ____D C:\ProgramData\Packages
2019-02-23 15:03 - 2018-02-28 08:18 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-02-22 09:30 - 2016-11-19 18:41 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\LAURENCE
2019-02-21 17:59 - 2017-04-12 13:30 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-02-19 09:40 - 2018-10-11 16:45 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\DENISE
2019-02-18 17:02 - 2018-05-21 11:15 - 000337048 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ___SD C:\WINDOWS\system32\F12
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ___RD C:\Program Files\Windows Defender
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\TextInput
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-02-17 07:38 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-02-17 07:38 - 2014-08-20 18:27 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Local\Adobe
2019-02-17 07:29 - 2018-04-11 21:25 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-02-15 09:45 - 2018-05-21 11:24 - 000002467 _____ C:\Users\LE CONNETABLE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-02-15 09:45 - 2016-02-04 19:30 - 000000000 ___RD C:\Users\LE CONNETABLE\OneDrive
2019-02-13 10:24 - 2013-08-14 21:53 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-02-13 10:22 - 2011-10-03 09:54 - 126228304 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-02-05 07:28 - 2016-04-06 16:03 - 000000000 ____D C:\Users\LE CONNETABLE\Documents\devis
2019-02-02 23:53 - 2018-11-24 07:33 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2019-02-02 23:53 - 2018-11-24 07:33 - 000179600 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2019-01-31 06:59 - 2014-06-17 11:08 - 000000000 ____D C:\ProgramData\Mozilla
2019-01-30 10:01 - 2013-03-29 11:40 - 000000000 ____D C:\Users\LE CONNETABLE\Documents\VERO
==================== Fichiers à la racine de certains dossiers =======
2017-09-21 17:23 - 2017-09-21 17:23 - 000000020 ___SH () C:\Users\LE CONNETABLE\AppData\Roaming\1816CA7466166.ind
2013-09-27 07:42 - 2013-09-27 07:42 - 000000024 ___SH () C:\Users\LE CONNETABLE\AppData\Roaming\1D959CA221C7573.sys
2017-09-21 17:23 - 2017-09-21 17:23 - 000000020 ___SH () C:\Users\LE CONNETABLE\AppData\Roaming\Programs8187ConfigDB.dat
2012-10-15 17:57 - 2014-05-15 11:39 - 000003760 _____ () C:\Users\LE CONNETABLE\AppData\Roaming\Rim.Desktop.Exception.log
2012-10-15 17:55 - 2014-05-19 16:50 - 000004205 _____ () C:\Users\LE CONNETABLE\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2012-10-15 17:57 - 2014-05-15 11:39 - 000001694 _____ () C:\Users\LE CONNETABLE\AppData\Roaming\Rim.DesktopHelper.Exception.log
2012-11-14 15:49 - 2014-05-15 11:39 - 000001463 _____ () C:\Users\LE CONNETABLE\AppData\Roaming\Rim.Transcoder.Exception.log
2013-09-27 07:42 - 2013-09-27 07:42 - 000000024 ___SH () C:\Users\LE CONNETABLE\AppData\Roaming\System5908ConfigCollection.dat
2012-11-14 15:49 - 2017-02-08 18:14 - 000019456 _____ () C:\Users\LE CONNETABLE\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-05-15 19:09 - 2016-05-17 06:46 - 000000129 _____ () C:\Users\LE CONNETABLE\AppData\Local\fd0e404db734464904e5f09af1edf356
2015-11-10 07:31 - 2015-11-10 07:31 - 000000017 _____ () C:\Users\LE CONNETABLE\AppData\Local\resmon.resmoncfg
2014-01-16 13:42 - 2014-01-16 13:42 - 000000000 _____ () C:\Users\LE CONNETABLE\AppData\Local\{578AD45E-D490-4792-AC23-09102312A253}
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dllhost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2018-05-21 11:15
==================== Fin de FRST.txt ============================
Exécuté par LE CONNETABLE (administrateur) sur LEPATTON (01-03-2019 18:45:17)
Exécuté depuis C:\Users\LE CONNETABLE\Desktop
Profils chargés: LE CONNETABLE (Profils disponibles: LE CONNETABLE & DefaultAppPool)
Platform: Microsoft Windows 10 Famille Version 1803 17134.590 (X86) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
(Synology Inc. -> ) C:\Program Files\Synology\CloudStation\bin\vss-service.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(VIA Technologies Inc. -> VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(StorageCraft Technology Corporation -> StorageCraft Technology Corporation) C:\Program Files\StorageCraft\ShadowProtect\vsnapvss.exe
(StorageCraft Technology Corporation -> StorageCraft Technology Corporation) C:\Program Files\StorageCraft\ShadowProtect\ShadowProtectSvc.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\NisSrv.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Synology Inc. -> Synology Inc.) C:\Users\LE CONNETABLE\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-ui.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Synology Inc. -> Synology Inc.) C:\Users\LE CONNETABLE\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-connect.exe
(Synology Inc. -> Synology Inc.) C:\Users\LE CONNETABLE\AppData\Local\CloudStation\CloudStation.app\bin\cloud-drive-daemon.exe
(Adobe Systems, Incorporated -> ) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x86__kzf8qxf38zg5c\SkypeApp.exe
() [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19021.10411.0_x86__8wekyb3d8bbwe\Video.UI.exe
() [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x86__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.40.70.0_x86__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
() [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18114.17710.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x86__8wekyb3d8bbwe\WinStore.App.exe
() [Fichier non signé] C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19011.11311.0_x86__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [486816 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [NvBackend] => C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe [2634896 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap.dll [1423304 2015-07-24] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé]
HKLM\...\Run: [StorageCraft Mount Notifier] => C:\Program Files\StorageCraft\ShadowProtect\MountNotify.exe [17128 2017-12-08] (StorageCraft Technology Corporation -> StorageCraft Technology Corporation)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [7685808 2017-09-20] (Piriform Ltd -> Piriform Ltd)
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIJFE.EXE [249440 2012-02-29] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\...\MountPoints2: {3b1fc005-65ba-11e8-9523-90e6ba3b8062} - "J:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3209782926-3138353277-2660692922-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [28672 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Startup: C:\Users\LE CONNETABLE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Synology Cloud Station Drive.lnk [2019-03-01]
ShortcutTarget: Synology Cloud Station Drive.lnk -> C:\Program Files\Synology\CloudStation\bin\launcher.exe (Synology Inc. -> Synology Inc.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8e24db6c-f4a4-49c2-a0f5-3ec4be5bbce5}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3209782926-3138353277-2660692922-1000 -> DefaultScope {E2172FE1-4CAE-462C-BC76-50D9837A2F09} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&rlz=1I7PRFB_frFR451
SearchScopes: HKU\S-1-5-21-3209782926-3138353277-2660692922-1000 -> {E2172FE1-4CAE-462C-BC76-50D9837A2F09} URL = hxxp://www.google.com/search?hl=en&q={searchTerms}&rlz=1I7PRFB_frFR451
BHO: Module complémentaire de navigateur pour la désactivation de Google Analytics -> {75EF13CE-B59E-41ba-8A5A-A944031BD8B4} -> C:\Program Files\Google\Google Analytics Opt-Out\gaoptout.dll [2014-04-03] (Google Inc -> Google, Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Skype Software Sarl -> Microsoft Corporation)
FireFox:
========
FF DefaultProfile: j18nuzeb.default-1454691080315-1543947538337
FF DefaultProfile: ftxk7nwd.default
FF ProfilePath: C:\Users\LE CONNETABLE\AppData\Roaming\Mozilla\Firefox\Profiles\j18nuzeb.default-1454691080315-1543947538337 [2019-03-01]
FF Homepage: Mozilla\Firefox\Profiles\j18nuzeb.default-1454691080315-1543947538337 -> hxxps://messageriepro3.orange.fr/#mail/SF_INBOX
FF Extension: (uBlock Origin) - C:\Users\LE CONNETABLE\AppData\Roaming\Mozilla\Firefox\Profiles\j18nuzeb.default-1454691080315-1543947538337\Extensions\uBlock0@raymondhill.net.xpi [2019-02-19]
FF Extension: (wanteeed) - C:\Users\LE CONNETABLE\AppData\Roaming\Mozilla\Firefox\Profiles\j18nuzeb.default-1454691080315-1543947538337\Extensions\{EDB6A15C-5F8C-4531-92FA-98E988CF233C}.xpi [2018-12-04] [UpdateUrl:hxxps://app.wanteeed.com/extensions/update_firefox.json]
FF ProfilePath: C:\Users\LE CONNETABLE\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\ftxk7nwd.default [2019-03-01]
FF Extension: (Français (FR) Language Pack) - C:\Users\LE CONNETABLE\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles\ftxk7nwd.default\Extensions\langpack-fr@palemoon.org.xpi [2018-05-22] [Legacy] [non signé]
FF Extension: (Skype Click to Call) - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] [Legacy] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_32_0_0_142.dll [2019-02-17] (Adobe Systems Incorporated -> )
FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1210150.dll [2014-03-11] (Adobe Systems, Inc.) [Fichier non signé]
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Fichier non signé]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-21] (Google Inc -> Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-21] (Google Inc -> Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY SOLUTIONS LIMITED -> ABBYY)
R2 Cloud Station Drive VSS Service; C:\Program Files\Synology\CloudStation\bin\vss-service.exe [244248 2016-07-04] (Synology Inc. -> )
S4 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [36648 2016-10-06] (Dropbox, Inc -> Windows (R) Win 7 DDK provider)
S4 EpsonScanSvc; C:\WINDOWS\system32\EscSvc.exe [122000 2011-12-12] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S4 EPSON_EB_RPCV4_04; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50ST7.EXE [167520 2012-02-20] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [921232 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe [1871504 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [4305040 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
S3 StorageCraft ImageReady; C:\Program Files\StorageCraft\ShadowProtect\ImageReady.exe [4409760 2017-12-08] (StorageCraft Technology Corporation -> )
S4 UsbClientService; C:\Program Files\Synology\Assistant\UsbClientService.exe [248840 2016-03-18] (Synology Inc. -> ) [Fichier non signé]
R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [46736 2015-12-09] (VIA Technologies Inc. -> VIA Technologies, Inc.)
R2 VSNAPVSS; C:\Program Files\StorageCraft\ShadowProtect\vsnapvss.exe [72936 2017-12-08] (StorageCraft Technology Corporation -> StorageCraft Technology Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [3379288 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [91768 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [281760 2013-03-25] (Tages SA -> )
R3 busenum; C:\WINDOWS\System32\drivers\busenum.sys [53728 2012-08-03] (Synology Inc. -> Windows (R) Win 7 DDK provider)
S3 camfilt2; C:\WINDOWS\system32\DRIVERS\camfilt2.sys [96384 2007-08-29] (Guillemot Corporation -> Guillemot Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [109184 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [25888 2013-03-25] (Tages SA -> )
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [221112 2018-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [75712 2018-02-01] (Malwarebytes Corporation -> Malwarebytes)
R3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [5810 2004-08-13] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18576 2015-07-24] (NVIDIA Corporation -> NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad32v.sys [44840 2015-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
S3 ovt530; C:\WINDOWS\System32\Drivers\ov530vid.sys [167464 2007-02-02] (Guillemot Corporation -> OmniVision Technologies, Inc.)
S3 RimVSerPort; C:\WINDOWS\System32\DRIVERS\RimSerial.sys [35840 2012-12-10] (Microsoft Windows Hardware Compatibility Publisher -> Research in Motion Ltd)
R3 rt640x86; C:\WINDOWS\System32\drivers\rt640x86.sys [746752 2015-07-28] (Realtek Semiconductor Corp -> Realtek )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [147072 2016-09-05] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [35088 2013-04-30] (AVAST Software -> The OpenVPN Project)
R3 VIAHdAudAddService; C:\WINDOWS\system32\drivers\viahduaa.sys [573560 2015-12-09] (VIA Technologies, Inc -> VIA Technologies, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [38488 2019-02-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [268976 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [47800 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [189952 2018-04-11] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-03-01 18:45 - 2019-03-01 18:46 - 000017360 _____ C:\Users\LE CONNETABLE\Desktop\FRST.txt
2019-03-01 18:44 - 2019-03-01 18:45 - 000000000 ____D C:\FRST
2019-03-01 18:44 - 2019-03-01 18:44 - 001793024 _____ (Farbar) C:\Users\LE CONNETABLE\Desktop\FRST.exe
2019-03-01 17:12 - 2019-03-01 17:12 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\Bigflo & Oli - La vraie vie (2017) [320kbps]
2019-03-01 09:40 - 2019-03-01 09:40 - 000147224 _____ C:\Users\LE CONNETABLE\Desktop\ZHPDiag.txt
2019-03-01 09:31 - 2019-03-01 09:34 - 000000911 _____ C:\Users\LE CONNETABLE\Desktop\ZHPDiag.lnk
2019-03-01 09:30 - 2019-03-01 09:30 - 003208064 _____ C:\Users\LE CONNETABLE\Downloads\ZHPDiag3.exe
2019-03-01 08:04 - 2019-03-01 08:04 - 007316688 _____ (Malwarebytes) C:\Users\LE CONNETABLE\Downloads\adwcleaner_7.2.7.0.exe
2019-03-01 08:03 - 2019-03-01 08:03 - 007320272 _____ (Malwarebytes) C:\Users\LE CONNETABLE\Downloads\adwcleaner_7.2.6.0.exe
2019-03-01 07:45 - 2019-03-01 07:45 - 000013606 _____ C:\Users\LE CONNETABLE\Documents\cc_20190301_074505.reg
2019-02-27 07:46 - 2019-02-27 07:46 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\2019-02-27
2019-02-26 17:00 - 2019-02-26 17:00 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\2019-02-26
2019-02-23 19:24 - 2019-02-05 16:02 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\Tété - Fauthentique
2019-02-17 07:24 - 2019-02-06 07:52 - 004053504 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-02-17 07:24 - 2019-02-06 07:52 - 002891776 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-02-17 07:24 - 2019-02-06 07:52 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-02-17 07:24 - 2019-02-06 04:01 - 001989040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-02-17 07:24 - 2019-02-06 04:01 - 000720480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-02-17 07:24 - 2019-02-06 04:00 - 006683448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-02-17 07:24 - 2019-02-06 04:00 - 006572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-02-17 07:24 - 2019-02-06 04:00 - 002030904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-02-17 07:24 - 2019-02-06 03:52 - 022014464 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-02-17 07:24 - 2019-02-06 03:45 - 019404288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-02-17 07:24 - 2019-02-06 03:42 - 003711488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-02-17 07:24 - 2019-02-06 03:41 - 005307392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2019-02-17 07:24 - 2019-02-06 03:40 - 005792256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-02-17 07:24 - 2019-02-06 03:37 - 004515840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-02-17 07:24 - 2019-01-12 03:28 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd3x40.dll
2019-02-17 07:24 - 2019-01-09 10:55 - 011919872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-02-17 07:24 - 2019-01-09 10:55 - 003257856 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-02-17 07:24 - 2019-01-09 10:51 - 002094080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2019-02-17 07:24 - 2019-01-09 06:48 - 000994264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-02-17 07:24 - 2019-01-09 06:43 - 006043496 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 004789944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 002253480 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 001990056 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 001617152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 000607376 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 000127744 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2019-02-17 07:24 - 2019-01-09 06:43 - 000071456 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2019-02-17 07:24 - 2019-01-09 06:32 - 013878272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-02-17 07:24 - 2019-01-09 06:26 - 002966016 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-02-17 07:24 - 2019-01-09 06:25 - 003255296 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-02-17 07:24 - 2019-01-09 06:24 - 002808320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-02-17 07:24 - 2019-01-09 06:24 - 001834496 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-02-17 07:24 - 2019-01-09 06:23 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-02-17 07:24 - 2019-01-09 06:21 - 001752064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-02-17 07:23 - 2019-02-06 08:11 - 001465504 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-02-17 07:23 - 2019-02-06 07:57 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-02-17 07:23 - 2019-02-06 07:53 - 001082880 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-02-17 07:23 - 2019-02-06 04:01 - 000307000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-02-17 07:23 - 2019-02-06 04:01 - 000033576 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-02-17 07:23 - 2019-02-06 04:00 - 002144056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-02-17 07:23 - 2019-02-06 04:00 - 000100712 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2019-02-17 07:23 - 2019-02-06 04:00 - 000037176 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-02-17 07:23 - 2019-02-06 03:40 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-02-17 07:23 - 2019-02-06 03:40 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2019-02-17 07:23 - 2019-02-06 03:39 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-02-17 07:23 - 2019-02-06 03:39 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-02-17 07:23 - 2019-02-06 03:39 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-02-17 07:23 - 2019-02-06 03:38 - 000608768 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-02-17 07:23 - 2019-02-06 03:38 - 000561152 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-02-17 07:23 - 2019-02-06 03:38 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-02-17 07:23 - 2019-02-06 03:37 - 000625664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-02-17 07:23 - 2019-02-06 03:37 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-02-17 07:23 - 2019-02-06 03:37 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-02-17 07:23 - 2019-02-06 03:37 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2019-02-17 07:23 - 2019-02-06 03:36 - 000675840 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-02-17 07:23 - 2019-02-06 03:35 - 000726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-02-17 07:23 - 2019-02-06 03:34 - 000074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-02-17 07:23 - 2019-01-09 12:08 - 000254776 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-02-17 07:23 - 2019-01-09 11:02 - 000636872 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-02-17 07:23 - 2019-01-09 10:55 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2019-02-17 07:23 - 2019-01-09 10:53 - 000958976 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2019-02-17 07:23 - 2019-01-09 06:53 - 000480056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-02-17 07:23 - 2019-01-09 06:48 - 000074040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-02-17 07:23 - 2019-01-09 06:44 - 000078688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2019-02-17 07:23 - 2019-01-09 06:43 - 000986936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-02-17 07:23 - 2019-01-09 06:43 - 000949856 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-02-17 07:23 - 2019-01-09 06:43 - 000831528 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-02-17 07:23 - 2019-01-09 06:43 - 000358904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-02-17 07:23 - 2019-01-09 06:43 - 000287640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-02-17 07:23 - 2019-01-09 06:43 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-02-17 07:23 - 2019-01-09 06:43 - 000195576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2019-02-17 07:23 - 2019-01-09 06:43 - 000129088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-02-17 07:23 - 2019-01-09 06:42 - 001190496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-02-17 07:23 - 2019-01-09 06:42 - 001051032 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-02-17 07:23 - 2019-01-09 06:42 - 000371192 _____ (Microsoft Corporation) C:\WINDOWS\system32\halmacpi.dll
2019-02-17 07:23 - 2019-01-09 06:42 - 000371192 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-02-17 07:23 - 2019-01-09 06:42 - 000140792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-02-17 07:23 - 2019-01-09 06:24 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-02-17 07:23 - 2019-01-09 06:23 - 001361408 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSPhotography.dll
2019-02-17 07:23 - 2019-01-09 06:23 - 001189888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2019-02-17 07:23 - 2019-01-09 06:23 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2019-02-17 07:23 - 2019-01-09 06:22 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
2019-02-17 07:23 - 2019-01-09 06:21 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-02-17 07:23 - 2019-01-09 06:21 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2019-02-17 07:23 - 2019-01-09 06:21 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-02-17 07:23 - 2019-01-09 06:20 - 001272832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-02-17 07:23 - 2019-01-09 06:20 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-02-17 07:23 - 2019-01-09 06:20 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-02-17 07:23 - 2019-01-09 06:20 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-02-17 07:23 - 2019-01-09 06:19 - 000678400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-02-17 07:23 - 2019-01-09 06:19 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2019-02-17 07:23 - 2019-01-09 06:18 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\GlobCollationHost.dll
2019-02-17 07:23 - 2019-01-09 05:01 - 000806320 _____ C:\WINDOWS\system32\locale.nls
2019-02-17 07:23 - 2019-01-08 04:06 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msjet40.dll
2019-02-17 07:23 - 2019-01-08 04:06 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrd2x40.dll
2019-02-17 07:23 - 2019-01-08 04:06 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2019-02-14 08:33 - 2018-09-20 05:33 - 001499960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll
2019-02-08 08:53 - 2019-02-08 08:53 - 000024531 _____ C:\Users\LE CONNETABLE\Documents\lettre senior.odt
2019-02-08 08:06 - 2019-02-08 08:06 - 000022223 _____ C:\Users\LE CONNETABLE\Documents\senior.odt
2019-01-30 10:04 - 2019-01-30 10:04 - 000070725 _____ C:\Users\LE CONNETABLE\Downloads\RICE.pdf
==================== Un mois (modifiés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-03-01 18:36 - 2018-05-21 11:15 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-03-01 18:36 - 2018-04-11 21:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-03-01 17:52 - 2018-05-21 11:19 - 002000836 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-03-01 17:52 - 2018-04-12 06:12 - 000879862 _____ C:\WINDOWS\system32\perfh00C.dat
2019-03-01 17:52 - 2018-04-12 06:12 - 000184092 _____ C:\WINDOWS\system32\perfc00C.dat
2019-03-01 17:52 - 2018-04-11 21:31 - 000000000 ____D C:\WINDOWS\INF
2019-03-01 17:48 - 2018-05-21 11:24 - 000000000 ____D C:\Users\LE CONNETABLE
2019-03-01 17:48 - 2018-04-11 21:36 - 000000000 ___HD C:\Program Files\WindowsApps
2019-03-01 17:48 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-03-01 17:48 - 2016-07-05 15:02 - 000000000 ___RD C:\Users\LE CONNETABLE\Desktop\CloudStation
2019-03-01 17:47 - 2016-11-16 09:52 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\LocalLow\Mozilla
2019-03-01 17:46 - 2018-05-21 11:48 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-03-01 17:46 - 2017-05-17 06:57 - 000000000 ____D C:\ProgramData\NVIDIA
2019-03-01 17:45 - 2016-11-16 09:40 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-03-01 17:45 - 2014-06-17 11:08 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2019-03-01 17:43 - 2018-04-11 13:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-03-01 16:49 - 2018-11-23 07:26 - 000000000 ____D C:\Program Files\rempl
2019-03-01 10:02 - 2018-05-21 06:39 - 000000000 ___DC C:\WINDOWS\Panther
2019-03-01 10:02 - 2015-04-27 17:50 - 000000000 ____D C:\Users\LE CONNETABLE\Documents\hotel Patton
2019-03-01 09:40 - 2017-03-09 17:07 - 000000135 _____ C:\Users\LE
2019-03-01 09:40 - 2017-03-09 17:06 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Roaming\ZHP
2019-03-01 09:31 - 2017-06-26 07:11 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Local\ZHP
2019-03-01 07:45 - 2017-12-11 08:07 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Local\Packages
2019-03-01 07:35 - 2016-01-13 18:06 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Local\ElevatedDiagnostics
2019-02-28 08:34 - 2015-08-26 08:05 - 000000000 ____D C:\Users\LE CONNETABLE\Documents\fact non payé
2019-02-28 08:33 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2019-02-27 07:41 - 2018-06-21 10:18 - 000000000 ____D C:\ProgramData\Packages
2019-02-23 15:03 - 2018-02-28 08:18 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-02-22 09:30 - 2016-11-19 18:41 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\LAURENCE
2019-02-21 17:59 - 2017-04-12 13:30 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-02-19 09:40 - 2018-10-11 16:45 - 000000000 ____D C:\Users\LE CONNETABLE\Downloads\DENISE
2019-02-18 17:02 - 2018-05-21 11:15 - 000337048 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ___SD C:\WINDOWS\system32\F12
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ___RD C:\Program Files\Windows Defender
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\TextInput
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-02-17 11:05 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-02-17 07:38 - 2018-04-11 21:36 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-02-17 07:38 - 2014-08-20 18:27 - 000000000 ____D C:\Users\LE CONNETABLE\AppData\Local\Adobe
2019-02-17 07:29 - 2018-04-11 21:25 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-02-15 09:45 - 2018-05-21 11:24 - 000002467 _____ C:\Users\LE CONNETABLE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-02-15 09:45 - 2016-02-04 19:30 - 000000000 ___RD C:\Users\LE CONNETABLE\OneDrive
2019-02-13 10:24 - 2013-08-14 21:53 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-02-13 10:22 - 2011-10-03 09:54 - 126228304 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-02-05 07:28 - 2016-04-06 16:03 - 000000000 ____D C:\Users\LE CONNETABLE\Documents\devis
2019-02-02 23:53 - 2018-11-24 07:33 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2019-02-02 23:53 - 2018-11-24 07:33 - 000179600 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2019-01-31 06:59 - 2014-06-17 11:08 - 000000000 ____D C:\ProgramData\Mozilla
2019-01-30 10:01 - 2013-03-29 11:40 - 000000000 ____D C:\Users\LE CONNETABLE\Documents\VERO
==================== Fichiers à la racine de certains dossiers =======
2017-09-21 17:23 - 2017-09-21 17:23 - 000000020 ___SH () C:\Users\LE CONNETABLE\AppData\Roaming\1816CA7466166.ind
2013-09-27 07:42 - 2013-09-27 07:42 - 000000024 ___SH () C:\Users\LE CONNETABLE\AppData\Roaming\1D959CA221C7573.sys
2017-09-21 17:23 - 2017-09-21 17:23 - 000000020 ___SH () C:\Users\LE CONNETABLE\AppData\Roaming\Programs8187ConfigDB.dat
2012-10-15 17:57 - 2014-05-15 11:39 - 000003760 _____ () C:\Users\LE CONNETABLE\AppData\Roaming\Rim.Desktop.Exception.log
2012-10-15 17:55 - 2014-05-19 16:50 - 000004205 _____ () C:\Users\LE CONNETABLE\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2012-10-15 17:57 - 2014-05-15 11:39 - 000001694 _____ () C:\Users\LE CONNETABLE\AppData\Roaming\Rim.DesktopHelper.Exception.log
2012-11-14 15:49 - 2014-05-15 11:39 - 000001463 _____ () C:\Users\LE CONNETABLE\AppData\Roaming\Rim.Transcoder.Exception.log
2013-09-27 07:42 - 2013-09-27 07:42 - 000000024 ___SH () C:\Users\LE CONNETABLE\AppData\Roaming\System5908ConfigCollection.dat
2012-11-14 15:49 - 2017-02-08 18:14 - 000019456 _____ () C:\Users\LE CONNETABLE\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-05-15 19:09 - 2016-05-17 06:46 - 000000129 _____ () C:\Users\LE CONNETABLE\AppData\Local\fd0e404db734464904e5f09af1edf356
2015-11-10 07:31 - 2015-11-10 07:31 - 000000017 _____ () C:\Users\LE CONNETABLE\AppData\Local\resmon.resmoncfg
2014-01-16 13:42 - 2014-01-16 13:42 - 000000000 _____ () C:\Users\LE CONNETABLE\AppData\Local\{578AD45E-D490-4792-AC23-09102312A253}
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dllhost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2018-05-21 11:15
==================== Fin de FRST.txt ============================