Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 30-07-2019 01
Exécuté par fred (administrateur) sur PC-DE-FRED (Compaq-Presario FZ090AA-ABF SR5605FR) (31-07-2019 11:35:32)
Exécuté depuis C:\Users\fred\Desktop
Profils chargés: fred & (Profils disponibles: fred)
Platform: Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ABBYY SOLUTIONS LIMITED -> ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Update\GoogleUpdate.exe
(Hewlett-Packard Company) [Fichier non signé] C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\conime.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe
(Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [13539872 2008-05-22] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] => C:\Windows\system32\NvMcTray.dll [92704 2008-05-22] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112238410\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240143\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-4063909282-817335085-3764614855-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\WLXPGSS.SCR [307056 2010-04-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [16835256 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\WLXPGSS.SCR [307056 2010-04-17] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\system32\ff_vfw.dll [79360 2012-04-09] () [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\49.0.2623.112\Installer\chrmstp.exe [2019-07-31] (Google Inc -> Google Inc.)
AppInit_DLLs: c:\progra~2\browse~1\261095~1.52\{c16c1~1\browse~1.dll => Pas de fichier
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0671A5F1-7D32-4E5A-AC1D-32C0A780247A} - System32\Tasks\Registration => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe
Task: {072B621C-D758-45DC-A235-706E1C01798E} - System32\Tasks\Microsoft\Windows\RestartManager\{1BC0ACF5-11D3-40c3-AF75-01807EB52A74} => C:\Windows\system32\rmclient.exe [14848 2006-11-02] (Microsoft Windows -> Microsoft Corporation)
Task: {0D157297-B758-44B1-833B-549362F4DD79} - \e-Buyer Updater -> Pas de fichier <==== ATTENTION
Task: {12C3AD5E-19D6-4F6F-9E0A-17F1E045BB4D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-22] (Google Inc -> Google Inc.)
Task: {14D13EF6-F4A8-4211-9FD7-F3A41D5487AB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-07-29] (Adobe Inc. -> Adobe) [Fichier non signé]
Task: {1DF0ECFD-F8BF-4A73-B9B5-06D6267847CD} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1663824 2019-07-30] (AVAST Software s.r.o. -> AVAST Software)
Task: {3668507C-AC4B-41F9-8AB3-7506FA78C063} - \Plus-HD-4.9-updater -> Pas de fichier <==== ATTENTION
Task: {48C6BB10-356A-41FA-9B97-ABC3F57BC785} - System32\Tasks\{3F36DC2D-A60A-9D74-73F7-10F02F638877}\Tofal => C:\Users\fred\AppData\Roaming\3f36dc2da60a9d7473f710f02f638877\Tofal.exe [2235904 2013-04-12] () [Fichier non signé]
Task: {4D40B64D-B986-4C2B-9A8C-1008C73B0B5F} - \PC-Doctor\Scheduled Maintenance -> Pas de fichier <==== ATTENTION
Task: {51287D4A-CF0C-468A-9882-4D582D66B347} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {51A5DA1E-CB84-42E5-926E-1ACD9F18DA19} - System32\Tasks\RecoveryCD => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe
Task: {53F20A18-4D76-4D05-98D7-C748E19FCD9B} - System32\Tasks\SyncTask\{13BC4BBF-AF78-7FFA-C118-11EF1C0DE924} => C:\Users\fred\AppData\Local\Kotinare\SyncTask.exe [503296 2013-04-17] () [Fichier non signé] <==== ATTENTION
Task: {56B9D9A5-83C8-46C3-A2E4-C93E709B22AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-22] (Google Inc -> Google Inc.)
Task: {5944CC37-521C-4D64-9619-0B22504ADDEC} - \Plus-HD-4.9-codedownloader -> Pas de fichier <==== ATTENTION
Task: {5A3B8B4A-A1DE-4CDB-B357-C6DA6FE553B2} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
Task: {6996AEFB-F7B8-494F-A31B-DC1B0BF4CD2B} - \PC-Doctor\Scheduled Maintenance Swap -> Pas de fichier <==== ATTENTION
Task: {D58322ED-369B-4AC4-8A74-D795B105178F} - System32\Tasks\Microsoft\Windows\RestartManager\{F3A50CF6-D6AC-4c01-9858-C8C24E6F939B} => C:\Windows\system32\rmclient.exe [14848 2006-11-02] (Microsoft Windows -> Microsoft Corporation)
Task: {D75C3F1C-E45F-4ADF-913F-3BF53A39729F} - \Plus-HD-4.9-chromeinstaller -> Pas de fichier <==== ATTENTION
Task: {DED46C12-41E6-43C0-9C14-FEA17A9C9F43} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4063909282-817335085-3764614855-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [178840 2012-07-27] (RealNetworks, Inc. -> RealNetworks, Inc.)
Task: {EE7E1984-B596-41B3-A03D-5712511CB259} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4063909282-817335085-3764614855-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [178840 2012-07-27] (RealNetworks, Inc. -> RealNetworks, Inc.)
Task: {F677D685-8D90-4CD9-B814-62ECB00B16E4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16835256 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {F92E0C5E-A137-425E-8EAF-374CE4203620} - System32\Tasks\{3F36DC2D-A60A-9D74-73F7-10F02F638877}\Kotepapal => C:\Users\fred\AppData\Roaming\3f36dc2da60a9d7473f710f02f638877\Kotepapal.exe [2219520 2013-04-17] () [Fichier non signé]
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A931B032-600D-4B9F-B99D-743C0D7B1B7C}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=84&bd=Presario&pf=cndt
HKU\S-1-5-21-4063909282-817335085-3764614855-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=84&bd=Presario&pf=cndt
HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=84&bd=Presario&pf=cndt
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM -> {0F4E98B1-F375-4A9E-B9FB-A11B51B67BF4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
SearchScopes: HKLM -> {84911681-7550-4E3A-9F4B-0189E415A793} URL = hxxp://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000 -> {0F4E98B1-F375-4A9E-B9FB-A11B51B67BF4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000 -> {84911681-7550-4E3A-9F4B-0189E415A793} URL = hxxp://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673 -> {0F4E98B1-F375-4A9E-B9FB-A11B51B67BF4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673 -> {84911681-7550-4E3A-9F4B-0189E415A793} URL = hxxp://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
BHO: Aide pour le lien d'Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-09-19] (RealNetworks, Inc. -> RealPlayer)
BHO: Pas de nom -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Pas de fichier
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-12-14] (Oracle America, Inc. -> Oracle Corporation)
BHO: Programme d'aide de l'Assistant de connexion Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation -> Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-06-13] (Google Inc -> Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-12-14] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-06-13] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-4063909282-817335085-3764614855-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-06-13] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-06-13] (Google Inc -> Google Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\fred\AppData\Roaming\mozilla\firefox\Profiles\4ls7zw7b.default-1564517685916 [2019-07-31]
FF Extension: (Hotfix for Firefox bug 1548973 (armagaddon 2.0) mitigation) - C:\Users\fred\AppData\Roaming\mozilla\firefox\Profiles\4ls7zw7b.default-1564517685916\features\{ac31a59c-a91b-43ff-b84d-89cef981580e}\hotfix-bug-1548973@mozilla.org.xpi [2019-07-30] [Legacy]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-09-19] [Legacy] [non signé]
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: (RealPlayer Browser Record Plugin) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-09-19] [Legacy] [non signé]
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-12-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-12-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=15.0.6.14 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll [2012-09-19] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.6.14 -> C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll [2012-09-19] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-09-19] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-09-19] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprpplugin;version=15.0.6.14 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll [2012-09-19] (RealNetworks, Inc. -> RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-06-01] (Google Inc -> Google LLC)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-06-01] (Google Inc -> Google LLC)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxp://selected-search.com/search?q={searchTerms}&
CHR DefaultSearchKeyword: Default -> ss
CHR Profile: C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default [2019-07-31]
CHR Extension: (Search Selector) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\egenicdiafgbhogabodhpfcbcgnpocip [2019-06-01]
CHR Extension: (Stylish – Thèmes personnalisés pour sites Web) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2019-07-30]
CHR Extension: (Search Selector Beta) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\gboaiodgdajeapekadgejlbmabjganof [2019-07-29]
CHR Extension: (AdBlock) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-07-30]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2014-12-14]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-08-22]
CHR HKLM\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [egenicdiafgbhogabodhpfcbcgnpocip] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gboaiodgdajeapekadgejlbmabjganof] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-09-19]
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [egenicdiafgbhogabodhpfcbcgnpocip] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gboaiodgdajeapekadgejlbmabjganof] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [egenicdiafgbhogabodhpfcbcgnpocip] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gboaiodgdajeapekadgejlbmabjganof] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY SOLUTIONS LIMITED -> ABBYY)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-07-29] (Adobe Inc. -> Adobe) [Fichier non signé]
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Software AS -> EasyBits Sofware AS) [Fichier non signé]
R2 LightScribeService; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4753104 2018-05-09] (Malwarebytes Corporation -> Malwarebytes)
R2 nvsvc; C:\Windows\system32\nvvsvc.exe [118784 2008-05-22] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
S3 GameConsoleService; "C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe" [X]
S2 HP Health Check Service; "c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe" [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [128736 2018-04-26] (Malwarebytes Corporation -> Malwarebytes)
S4 iteatapi; C:\Windows\system32\drivers\iteatapi.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
S4 iteraid; C:\Windows\system32\drivers\iteraid.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [165088 2019-07-30] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [40160 2019-07-31] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [220896 2019-07-31] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [70264 2019-07-31] (Malwarebytes Corporation -> Malwarebytes)
S4 Mraid35x; C:\Windows\system32\drivers\mraid35x.sys [33384 2006-11-02] (Microsoft Windows -> LSI Logic Corporation)
S4 ntrigdigi; C:\Windows\system32\drivers\ntrigdigi.sys [20608 2006-11-02] (Microsoft Windows -> N-trig Innovative Technologies)
R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [7465312 2008-05-22] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S4 nvsmu; C:\Windows\system32\drivers\nvsmu.sys [15360 2008-05-22] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S0 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [50688 2005-08-10] (Protection Technology) [Fichier non signé]
R0 sfhlp02; C:\Windows\System32\drivers\sfhlp02.sys [6656 2005-05-16] (Protection Technology) [Fichier non signé]
R0 sfsync02; C:\Windows\System32\drivers\sfsync02.sys [19968 2005-08-10] (Protection Technology) [Fichier non signé]
S4 uliahci; C:\Windows\system32\drivers\uliahci.sys [238648 2008-01-21] (Microsoft Windows -> ULi Electronics Inc.)
S4 UlSata; C:\Windows\system32\drivers\ulsata.sys [98408 2006-11-02] (Microsoft Windows -> Promise Technology, Inc.)
S4 ulsata2; C:\Windows\system32\drivers\ulsata2.sys [115816 2008-01-21] (Microsoft Windows -> Promise Technology, Inc.)
S3 xnacc; C:\Windows\System32\DRIVERS\xnacc.sys [521216 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-07-31 11:35 - 2019-07-31 11:40 - 000025775 _____ C:\Users\fred\Desktop\FRST.txt
2019-07-31 11:35 - 2019-07-31 11:35 - 000000000 ____D C:\FRST
2019-07-31 11:33 - 2019-07-31 11:34 - 001447936 _____ (Farbar) C:\Users\fred\Desktop\FRST.exe
2019-07-31 11:25 - 2019-07-31 11:25 - 000001987 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-07-31 11:25 - 2019-07-31 11:25 - 000001975 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-07-31 11:24 - 2019-07-31 11:24 - 001151544 _____ (Google LLC) C:\Users\fred\Downloads\ChromeSetup.exe
2019-07-30 22:18 - 2019-07-30 22:18 - 002431280 _____ (Opera Software) C:\Users\fred\Downloads\OperaSetup.exe
2019-07-30 22:04 - 2019-07-31 11:24 - 000000000 ____D C:\Users\fred\AppData\LocalLow\Mozilla
2019-07-30 22:04 - 2019-07-30 22:04 - 000000000 ____D C:\Users\fred\AppData\Local\Mozilla
2019-07-30 22:03 - 2019-07-30 22:03 - 045674856 _____ (Mozilla) C:\Users\fred\Downloads\Firefox Setup 52.9.0esr.exe
2019-07-30 21:56 - 2019-07-30 21:56 - 000000000 ____D C:\Users\fred\AppData\Local\CEF
2019-07-30 21:47 - 2019-07-30 21:47 - 000047720 _____ () C:\Windows\system32\Drivers\staport.sys
2019-07-30 21:45 - 2019-07-30 21:45 - 001142072 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2019-07-30 21:45 - 2019-07-30 21:45 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2019-07-30 21:43 - 2019-07-30 21:45 - 000000000 ____D C:\ProgramData\AVAST Software
2019-07-30 21:40 - 2019-07-30 21:40 - 020891464 _____ (Piriform Software Ltd) C:\Users\fred\Downloads\ccsetup560.exe
2019-07-30 21:15 - 2019-07-30 21:15 - 000000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2019-07-30 21:15 - 2019-07-30 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2019-07-30 21:13 - 2019-07-30 21:13 - 000000000 ____D C:\Program Files\VideoLAN
2019-07-30 21:10 - 2019-07-30 21:10 - 040693736 _____ C:\Users\fred\Downloads\vlc-3.0.7.1-win32 (1).exe
2019-07-30 21:09 - 2019-07-30 21:09 - 000000000 ____D C:\Users\fred\AppData\Local\Skype
2019-07-30 21:08 - 2019-07-30 21:41 - 000000000 ____D C:\Users\fred\AppData\Roaming\Skype
2019-07-30 21:07 - 2019-07-30 21:07 - 000000000 ____D C:\Users\fred\AppData\Local\VirtualStore
2019-07-30 20:18 - 2019-07-30 20:19 - 040693736 _____ C:\Users\fred\Downloads\vlc-3.0.7.1-win32.exe
2019-07-30 20:08 - 2019-07-31 11:21 - 000040160 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2019-07-30 20:07 - 2019-07-31 11:22 - 000070264 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2019-07-30 20:07 - 2019-07-31 11:20 - 000220896 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-07-30 20:07 - 2019-07-30 20:07 - 000165088 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2019-07-30 19:49 - 2019-07-30 19:49 - 000020395 _____ C:\Users\fred\Desktop\compterendu.txt
2019-07-30 19:09 - 2019-07-30 19:09 - 000001861 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-07-30 19:09 - 2019-07-30 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-07-30 19:09 - 2019-07-30 19:09 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-07-30 19:09 - 2019-07-30 19:09 - 000000000 ____D C:\Program Files\Malwarebytes
2019-07-30 19:09 - 2018-04-26 05:36 - 000128736 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae.sys
2019-07-30 19:08 - 2019-07-30 19:08 - 076534856 _____ (Malwarebytes ) C:\Users\fred\Downloads\mb3-setup-legacywos-3.5.1.2522-1.0.365-1.0.5292.exe
2019-07-30 18:43 - 2019-07-30 18:43 - 064760528 _____ (Malwarebytes ) C:\Users\fred\Downloads\mb3-setup-consumer-3.8.3.2965-1.0.613-1.0.11764 (1).exe
2019-07-30 18:42 - 2019-07-30 18:43 - 007623880 _____ (Malwarebytes) C:\Users\fred\Downloads\adwcleaner_7.4 (2).exe
2019-07-30 18:38 - 2019-07-30 18:38 - 000003447 _____ C:\Users\fred\Desktop\AdwCleaner[C01].txt
2019-07-30 18:35 - 2019-07-30 18:35 - 007623880 _____ (Malwarebytes) C:\Users\fred\Downloads\adwcleaner_7.4 (1).exe
2019-07-30 18:24 - 2019-07-30 18:24 - 000090221 _____ C:\Users\fred\Desktop\ZHPCleaner (R).txt
2019-07-30 17:35 - 2019-07-30 17:35 - 000101762 _____ C:\Users\fred\Desktop\ZHPCleaner (S).txt
2019-07-30 17:18 - 2019-07-30 17:18 - 003072896 _____ (Nicolas Coolman) C:\Users\fred\Downloads\ZHPCleaner.exe
2019-07-30 16:05 - 2019-07-30 16:07 - 000000000 ____D C:\AdwCleaner
2019-07-30 15:24 - 2019-07-30 19:56 - 000223125 _____ C:\Users\fred\Desktop\ZHPDiag.txt
2019-07-30 15:17 - 2019-07-30 15:17 - 002990976 _____ (Nicolas Coolman) C:\Users\fred\Downloads\ZHPDiag3.exe
2019-07-30 15:16 - 2019-07-30 15:16 - 007623880 _____ (Malwarebytes) C:\Users\fred\Downloads\adwcleaner_7.4.exe
2019-07-30 14:54 - 2019-07-30 14:54 - 000024576 _____ C:\Windows\system32\config\SECURITY.rhk
2019-07-30 10:28 - 2019-07-30 10:28 - 043448428 _____ C:\Users\fred\Downloads\windows_7_style_for_vista_by_giannisgx89.rar
2019-07-30 10:25 - 2019-07-30 10:26 - 064760528 _____ (Malwarebytes ) C:\Users\fred\Downloads\mb3-setup-consumer-3.8.3.2965-1.0.613-1.0.11764.exe
2019-07-30 10:22 - 2019-07-30 10:22 - 003268600 _____ (WiseCleaner.com ) C:\Users\fred\Downloads\WRCFree_10.2.4.684.exe
2019-07-29 21:55 - 2019-07-30 22:35 - 000000000 ____D C:\Users\fred\AppData\Roaming\Teeworlds
2019-07-29 21:52 - 2019-07-29 21:53 - 017692605 _____ C:\Users\fred\Downloads\DDNet-12.5-win32.zip
2019-07-29 19:57 - 2019-07-29 19:57 - 000000779 _____ C:\Users\fred\AppData\Roaming\AdobeWLCMR2Cache.dat
2019-07-29 19:57 - 2019-07-29 19:57 - 000000000 ____D C:\Users\fred\.java
2019-07-29 19:55 - 2019-07-29 19:55 - 000516931 _____ (-) C:\Users\fred\Downloads\AZ_Minecraft_Launcher_Offline.exe
2019-07-29 19:55 - 2019-07-29 19:55 - 000000000 ____D C:\Users\fred\AppData\Roaming\.azlauncher
2019-07-29 19:25 - 2019-07-29 19:25 - 000000000 ____D C:\Users\fred\AppData\Local\Kotinare
2019-07-29 19:24 - 2019-07-29 19:24 - 000274910 _____ C:\Users\fred\AppData\Roaming\Gamolesado
2019-07-17 16:36 - 2019-07-17 16:36 - 000000000 ____D C:\Users\fred\AppData\Local\Natohek
2019-07-17 16:35 - 2019-07-17 16:35 - 000334297 _____ C:\Users\fred\AppData\Roaming\Rodire
==================== Un mois (modifiés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-07-31 11:25 - 2012-09-19 10:50 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-07-31 11:25 - 2012-09-19 09:50 - 000000000 ____D C:\Program Files\Google
2019-07-31 11:20 - 2006-11-02 14:58 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-07-31 11:20 - 2006-11-02 14:45 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2019-07-31 11:20 - 2006-11-02 14:45 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2019-07-30 22:45 - 2006-11-02 14:58 - 000032564 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2019-07-30 22:08 - 2008-10-17 13:08 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2019-07-30 22:04 - 2012-09-22 09:23 - 000000000 ____D C:\Users\fred\AppData\Roaming\mozilla
2019-07-30 21:47 - 2006-11-02 13:18 - 000000000 ____D C:\Windows\inf
2019-07-30 21:46 - 2008-10-17 22:36 - 000000000 ____D C:\Windows\Panther
2019-07-30 21:43 - 2012-09-19 09:51 - 000000810 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-07-30 21:43 - 2012-09-19 09:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-07-30 21:43 - 2012-09-19 09:51 - 000000000 ____D C:\Program Files\CCleaner
2019-07-30 21:14 - 2008-10-17 22:35 - 000721898 _____ C:\Windows\system32\perfh00C.dat
2019-07-30 21:14 - 2008-10-17 22:35 - 000145732 _____ C:\Windows\system32\perfc00C.dat
2019-07-30 21:14 - 2006-11-02 12:33 - 001614504 _____ C:\Windows\system32\PerfStringBackup.INI
2019-07-30 20:21 - 2013-01-01 19:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1 Jeu par jour
2019-07-30 19:57 - 2008-10-17 13:20 - 000000000 ____D C:\ProgramData\HP
2019-07-30 19:47 - 2019-04-21 16:35 - 000000000 ____D C:\Users\fred\AppData\Roaming\3f36dc2da60a9d7473f710f02f638877
2019-07-30 18:38 - 2008-10-17 22:50 - 000000000 ___HD C:\hp
2019-07-30 17:38 - 2012-10-05 08:41 - 000000000 ____D C:\Users\fred\Downloads\ThirstOfNight-BitTorrent-a
2019-07-30 16:08 - 2008-10-17 13:11 - 000000000 ____D C:\Program Files\CyberLink
2019-07-30 14:57 - 2012-09-17 22:33 - 000074920 _____ C:\Users\fred\AppData\Local\GDIPFONTCACHEV1.DAT
2019-07-30 14:56 - 2006-11-02 14:44 - 000294960 _____ C:\Windows\system32\FNTCACHE.DAT
2019-07-30 14:55 - 2006-11-02 12:22 - 040370176 _____ C:\Windows\system32\config\SOFTWARE.bak
2019-07-30 14:55 - 2006-11-02 12:22 - 000262144 _____ C:\Windows\system32\config\SAM.bak
2019-07-30 14:55 - 2006-11-02 12:22 - 000262144 _____ C:\Windows\system32\config\DEFAULT.bak
2019-07-30 14:36 - 2012-09-18 03:11 - 000000680 _____ C:\Users\fred\AppData\Local\d3d9caps.dat
2019-07-30 10:10 - 2017-05-14 00:13 - 000000000 ___HD C:\Users\fred\AppData\Local\1e9ed1e11c62a16a
2019-07-30 10:10 - 2016-10-18 00:12 - 000000000 ____D C:\Users\fred\AppData\Roaming\{8D82BB39-A8D0-D64F-C3E6-F19D1F340CA3}
2019-07-30 10:08 - 2015-03-20 18:12 - 000000453 _____ C:\Users\fred\AppData\Roaming\WB.CFG
2019-07-29 19:57 - 2012-09-17 22:27 - 000000000 ___HD C:\Users\fred
2019-07-29 19:34 - 2012-09-19 10:11 - 000842296 _____ (Adobe) C:\Windows\system32\FlashPlayerApp.exe
2019-07-29 19:34 - 2012-09-19 10:11 - 000175160 _____ (Adobe) C:\Windows\system32\FlashPlayerCPLApp.cpl
2019-07-29 19:34 - 2008-10-17 13:10 - 000000000 ____D C:\Windows\system32\Macromed
==================== Fichiers à la racine de certains dossiers ================
2019-07-29 19:57 - 2019-07-29 19:57 - 000000779 _____ () C:\Users\fred\AppData\Roaming\AdobeWLCMR2Cache.dat
2019-03-06 16:23 - 2019-03-06 16:23 - 000216495 _____ () C:\Users\fred\AppData\Roaming\Donucod
2019-07-29 19:24 - 2019-07-29 19:24 - 000274910 _____ () C:\Users\fred\AppData\Roaming\Gamolesado
2019-04-21 16:29 - 2019-04-21 16:29 - 000292884 _____ () C:\Users\fred\AppData\Roaming\Hotanabedu
2019-07-17 16:35 - 2019-07-17 16:35 - 000334297 _____ () C:\Users\fred\AppData\Roaming\Rodire
2019-06-17 17:04 - 2019-06-17 17:04 - 000197340 _____ () C:\Users\fred\AppData\Roaming\Sehogole
2019-06-01 19:02 - 2019-06-01 19:02 - 000277464 _____ () C:\Users\fred\AppData\Roaming\Supod
2019-04-28 10:47 - 2019-04-28 10:47 - 000159365 _____ () C:\Users\fred\AppData\Roaming\Tesudeda
2015-03-20 18:12 - 2019-07-30 10:08 - 000000453 _____ () C:\Users\fred\AppData\Roaming\WB.CFG
2013-10-30 13:48 - 2013-10-30 13:54 - 000000126 _____ () C:\Users\fred\AppData\Roaming\wklnhst.dat
2012-09-18 03:11 - 2019-07-30 14:36 - 000000680 _____ () C:\Users\fred\AppData\Local\d3d9caps.dat
2012-09-22 11:01 - 2019-04-21 16:35 - 000048128 _____ () C:\Users\fred\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ===============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2019-07-31 11:29
==================== Fin de FRST.txt ============================
Exécuté par fred (administrateur) sur PC-DE-FRED (Compaq-Presario FZ090AA-ABF SR5605FR) (31-07-2019 11:35:32)
Exécuté depuis C:\Users\fred\Desktop
Profils chargés: fred & (Profils disponibles: fred)
Platform: Microsoft® Windows Vista™ Édition Familiale Basique Service Pack 2 (X86) Langue: Français (France)
Internet Explorer Version 9 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ABBYY SOLUTIONS LIMITED -> ABBYY) C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc -> Google Inc.) C:\Program Files\Google\Update\GoogleUpdate.exe
(Hewlett-Packard Company) [Fichier non signé] C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\conime.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\SLsvc.exe
(Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner.exe
==================== Registre (Avec liste blanche) ===========================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Run: [NvCplDaemon] => C:\Windows\system32\NvCpl.dll [13539872 2008-05-22] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] => C:\Windows\system32\NvMcTray.dll [92704 2008-05-22] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112238410\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240143\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-4063909282-817335085-3764614855-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\WLXPGSS.SCR [307056 2010-04-17] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [16835256 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\WLXPGSS.SCR [307056 2010-04-17] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\system32\ff_vfw.dll [79360 2012-04-09] () [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\49.0.2623.112\Installer\chrmstp.exe [2019-07-31] (Google Inc -> Google Inc.)
AppInit_DLLs: c:\progra~2\browse~1\261095~1.52\{c16c1~1\browse~1.dll => Pas de fichier
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0671A5F1-7D32-4E5A-AC1D-32C0A780247A} - System32\Tasks\Registration => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe
Task: {072B621C-D758-45DC-A235-706E1C01798E} - System32\Tasks\Microsoft\Windows\RestartManager\{1BC0ACF5-11D3-40c3-AF75-01807EB52A74} => C:\Windows\system32\rmclient.exe [14848 2006-11-02] (Microsoft Windows -> Microsoft Corporation)
Task: {0D157297-B758-44B1-833B-549362F4DD79} - \e-Buyer Updater -> Pas de fichier <==== ATTENTION
Task: {12C3AD5E-19D6-4F6F-9E0A-17F1E045BB4D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-22] (Google Inc -> Google Inc.)
Task: {14D13EF6-F4A8-4211-9FD7-F3A41D5487AB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-07-29] (Adobe Inc. -> Adobe) [Fichier non signé]
Task: {1DF0ECFD-F8BF-4A73-B9B5-06D6267847CD} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1663824 2019-07-30] (AVAST Software s.r.o. -> AVAST Software)
Task: {3668507C-AC4B-41F9-8AB3-7506FA78C063} - \Plus-HD-4.9-updater -> Pas de fichier <==== ATTENTION
Task: {48C6BB10-356A-41FA-9B97-ABC3F57BC785} - System32\Tasks\{3F36DC2D-A60A-9D74-73F7-10F02F638877}\Tofal => C:\Users\fred\AppData\Roaming\3f36dc2da60a9d7473f710f02f638877\Tofal.exe [2235904 2013-04-12] () [Fichier non signé]
Task: {4D40B64D-B986-4C2B-9A8C-1008C73B0B5F} - \PC-Doctor\Scheduled Maintenance -> Pas de fichier <==== ATTENTION
Task: {51287D4A-CF0C-468A-9882-4D582D66B347} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {51A5DA1E-CB84-42E5-926E-1ACD9F18DA19} - System32\Tasks\RecoveryCD => C:\Program Files\Hewlett-Packard\SDP\RemEngine.exe
Task: {53F20A18-4D76-4D05-98D7-C748E19FCD9B} - System32\Tasks\SyncTask\{13BC4BBF-AF78-7FFA-C118-11EF1C0DE924} => C:\Users\fred\AppData\Local\Kotinare\SyncTask.exe [503296 2013-04-17] () [Fichier non signé] <==== ATTENTION
Task: {56B9D9A5-83C8-46C3-A2E4-C93E709B22AA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [144200 2015-10-22] (Google Inc -> Google Inc.)
Task: {5944CC37-521C-4D64-9619-0B22504ADDEC} - \Plus-HD-4.9-codedownloader -> Pas de fichier <==== ATTENTION
Task: {5A3B8B4A-A1DE-4CDB-B357-C6DA6FE553B2} - System32\Tasks\HP Health Check => c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
Task: {6996AEFB-F7B8-494F-A31B-DC1B0BF4CD2B} - \PC-Doctor\Scheduled Maintenance Swap -> Pas de fichier <==== ATTENTION
Task: {D58322ED-369B-4AC4-8A74-D795B105178F} - System32\Tasks\Microsoft\Windows\RestartManager\{F3A50CF6-D6AC-4c01-9858-C8C24E6F939B} => C:\Windows\system32\rmclient.exe [14848 2006-11-02] (Microsoft Windows -> Microsoft Corporation)
Task: {D75C3F1C-E45F-4ADF-913F-3BF53A39729F} - \Plus-HD-4.9-chromeinstaller -> Pas de fichier <==== ATTENTION
Task: {DED46C12-41E6-43C0-9C14-FEA17A9C9F43} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4063909282-817335085-3764614855-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [178840 2012-07-27] (RealNetworks, Inc. -> RealNetworks, Inc.)
Task: {EE7E1984-B596-41B3-A03D-5712511CB259} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4063909282-817335085-3764614855-1000 => C:\Program Files\Real\RealUpgrade\RealUpgrade.exe [178840 2012-07-27] (RealNetworks, Inc. -> RealNetworks, Inc.)
Task: {F677D685-8D90-4CD9-B814-62ECB00B16E4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16835256 2019-07-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {F92E0C5E-A137-425E-8EAF-374CE4203620} - System32\Tasks\{3F36DC2D-A60A-9D74-73F7-10F02F638877}\Kotepapal => C:\Users\fred\AppData\Roaming\3f36dc2da60a9d7473f710f02f638877\Kotepapal.exe [2219520 2013-04-17] () [Fichier non signé]
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{A931B032-600D-4B9F-B99D-743C0D7B1B7C}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=84&bd=Presario&pf=cndt
HKU\S-1-5-21-4063909282-817335085-3764614855-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=84&bd=Presario&pf=cndt
HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=fr_fr&c=84&bd=Presario&pf=cndt
SearchScopes: HKLM -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKLM -> {0F4E98B1-F375-4A9E-B9FB-A11B51B67BF4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
SearchScopes: HKLM -> {84911681-7550-4E3A-9F4B-0189E415A793} URL = hxxp://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000 -> {0F4E98B1-F375-4A9E-B9FB-A11B51B67BF4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000 -> {84911681-7550-4E3A-9F4B-0189E415A793} URL = hxxp://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673 -> DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673 -> {0F4E98B1-F375-4A9E-B9FB-A11B51B67BF4} URL = hxxp://slirsredirect.search.aol.com/slirs_http/sredir?sredir=1156&query={searchTerms}&invocationType=tb50hpcndtie7-fr-fr
SearchScopes: HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673 -> {84911681-7550-4E3A-9F4B-0189E415A793} URL = hxxp://fr.kelkoopartners.net/ctl/do/search?siteSearchQuery={searchTerms}&fromform=true&x=true&y=true&partner=hp&partnerId=96913932
BHO: Aide pour le lien d'Adobe PDF Reader -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll [2012-09-19] (RealNetworks, Inc. -> RealPlayer)
BHO: Pas de nom -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Pas de fichier
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2014-12-14] (Oracle America, Inc. -> Oracle Corporation)
BHO: Programme d'aide de l'Assistant de connexion Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation -> Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-06-13] (Google Inc -> Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-12-14] (Oracle America, Inc. -> Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-06-13] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-4063909282-817335085-3764614855-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-06-13] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2016-06-13] (Google Inc -> Google Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\fred\AppData\Roaming\mozilla\firefox\Profiles\4ls7zw7b.default-1564517685916 [2019-07-31]
FF Extension: (Hotfix for Firefox bug 1548973 (armagaddon 2.0) mitigation) - C:\Users\fred\AppData\Roaming\mozilla\firefox\Profiles\4ls7zw7b.default-1564517685916\features\{ac31a59c-a91b-43ff-b84d-89cef981580e}\hotfix-bug-1548973@mozilla.org.xpi [2019-07-30] [Legacy]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-09-19] [Legacy] [non signé]
FF HKLM\...\Firefox\Extensions: [{0153E448-190B-4987-BDE1-F256CADA672F}] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: (RealPlayer Browser Record Plugin) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-09-19] [Legacy] [non signé]
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-12-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-12-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=15.0.6.14 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll [2012-09-19] (RealNetworks, Inc. -> RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.6.14 -> C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll [2012-09-19] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll [2012-09-19] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.6.14 -> C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll [2012-09-19] (RealNetworks, Inc.) [Fichier non signé]
FF Plugin: @real.com/nprpplugin;version=15.0.6.14 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpplugin.dll [2012-09-19] (RealNetworks, Inc. -> RealPlayer)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-06-01] (Google Inc -> Google LLC)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-06-01] (Google Inc -> Google LLC)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxp://selected-search.com/search?q={searchTerms}&
CHR DefaultSearchKeyword: Default -> ss
CHR Profile: C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default [2019-07-31]
CHR Extension: (Search Selector) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\egenicdiafgbhogabodhpfcbcgnpocip [2019-06-01]
CHR Extension: (Stylish – Thèmes personnalisés pour sites Web) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjnbnpbmkenffdnngjfgmeleoegfcffe [2019-07-30]
CHR Extension: (Search Selector Beta) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\gboaiodgdajeapekadgejlbmabjganof [2019-07-29]
CHR Extension: (AdBlock) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-07-30]
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk [2014-12-14]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\fred\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-08-22]
CHR HKLM\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [egenicdiafgbhogabodhpfcbcgnpocip] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [gboaiodgdajeapekadgejlbmabjganof] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-09-19]
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [egenicdiafgbhogabodhpfcbcgnpocip] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gboaiodgdajeapekadgejlbmabjganof] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [egenicdiafgbhogabodhpfcbcgnpocip] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4063909282-817335085-3764614855-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-07312019112240673\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gboaiodgdajeapekadgejlbmabjganof] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY SOLUTIONS LIMITED -> ABBYY)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-07-29] (Adobe Inc. -> Adobe) [Fichier non signé]
R2 ezSharedSvc; C:\Windows\System32\ezsvc7.dll [129992 2008-02-03] (EasyBits Software AS -> EasyBits Sofware AS) [Fichier non signé]
R2 LightScribeService; c:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2008-06-09] (Hewlett-Packard Company) [Fichier non signé]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4753104 2018-05-09] (Malwarebytes Corporation -> Malwarebytes)
R2 nvsvc; C:\Windows\system32\nvvsvc.exe [118784 2008-05-22] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
S3 GameConsoleService; "C:\Program Files\HP Games\My HP Game Console\GameConsoleService.exe" [X]
S2 HP Health Check Service; "c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe" [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [128736 2018-04-26] (Malwarebytes Corporation -> Malwarebytes)
S4 iteatapi; C:\Windows\system32\drivers\iteatapi.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
S4 iteraid; C:\Windows\system32\drivers\iteraid.sys [35944 2006-11-02] (Microsoft Windows -> Integrated Technology Express, Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [165088 2019-07-30] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [40160 2019-07-31] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [220896 2019-07-31] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [70264 2019-07-31] (Malwarebytes Corporation -> Malwarebytes)
S4 Mraid35x; C:\Windows\system32\drivers\mraid35x.sys [33384 2006-11-02] (Microsoft Windows -> LSI Logic Corporation)
S4 ntrigdigi; C:\Windows\system32\drivers\ntrigdigi.sys [20608 2006-11-02] (Microsoft Windows -> N-trig Innovative Technologies)
R3 nvlddmkm; C:\Windows\System32\DRIVERS\nvlddmkm.sys [7465312 2008-05-22] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S4 nvsmu; C:\Windows\system32\drivers\nvsmu.sys [15360 2008-05-22] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S0 sfdrv01; C:\Windows\System32\drivers\sfdrv01.sys [50688 2005-08-10] (Protection Technology) [Fichier non signé]
R0 sfhlp02; C:\Windows\System32\drivers\sfhlp02.sys [6656 2005-05-16] (Protection Technology) [Fichier non signé]
R0 sfsync02; C:\Windows\System32\drivers\sfsync02.sys [19968 2005-08-10] (Protection Technology) [Fichier non signé]
S4 uliahci; C:\Windows\system32\drivers\uliahci.sys [238648 2008-01-21] (Microsoft Windows -> ULi Electronics Inc.)
S4 UlSata; C:\Windows\system32\drivers\ulsata.sys [98408 2006-11-02] (Microsoft Windows -> Promise Technology, Inc.)
S4 ulsata2; C:\Windows\system32\drivers\ulsata2.sys [115816 2008-01-21] (Microsoft Windows -> Promise Technology, Inc.)
S3 xnacc; C:\Windows\System32\DRIVERS\xnacc.sys [521216 2008-01-21] (Microsoft Windows -> Microsoft Corporation)
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-07-31 11:35 - 2019-07-31 11:40 - 000025775 _____ C:\Users\fred\Desktop\FRST.txt
2019-07-31 11:35 - 2019-07-31 11:35 - 000000000 ____D C:\FRST
2019-07-31 11:33 - 2019-07-31 11:34 - 001447936 _____ (Farbar) C:\Users\fred\Desktop\FRST.exe
2019-07-31 11:25 - 2019-07-31 11:25 - 000001987 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-07-31 11:25 - 2019-07-31 11:25 - 000001975 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-07-31 11:24 - 2019-07-31 11:24 - 001151544 _____ (Google LLC) C:\Users\fred\Downloads\ChromeSetup.exe
2019-07-30 22:18 - 2019-07-30 22:18 - 002431280 _____ (Opera Software) C:\Users\fred\Downloads\OperaSetup.exe
2019-07-30 22:04 - 2019-07-31 11:24 - 000000000 ____D C:\Users\fred\AppData\LocalLow\Mozilla
2019-07-30 22:04 - 2019-07-30 22:04 - 000000000 ____D C:\Users\fred\AppData\Local\Mozilla
2019-07-30 22:03 - 2019-07-30 22:03 - 045674856 _____ (Mozilla) C:\Users\fred\Downloads\Firefox Setup 52.9.0esr.exe
2019-07-30 21:56 - 2019-07-30 21:56 - 000000000 ____D C:\Users\fred\AppData\Local\CEF
2019-07-30 21:47 - 2019-07-30 21:47 - 000047720 _____ () C:\Windows\system32\Drivers\staport.sys
2019-07-30 21:45 - 2019-07-30 21:45 - 001142072 _____ (Microsoft Corporation) C:\Windows\ucrtbase.dll
2019-07-30 21:45 - 2019-07-30 21:45 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2019-07-30 21:43 - 2019-07-30 21:45 - 000000000 ____D C:\ProgramData\AVAST Software
2019-07-30 21:40 - 2019-07-30 21:40 - 020891464 _____ (Piriform Software Ltd) C:\Users\fred\Downloads\ccsetup560.exe
2019-07-30 21:15 - 2019-07-30 21:15 - 000000865 _____ C:\Users\Public\Desktop\VLC media player.lnk
2019-07-30 21:15 - 2019-07-30 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2019-07-30 21:13 - 2019-07-30 21:13 - 000000000 ____D C:\Program Files\VideoLAN
2019-07-30 21:10 - 2019-07-30 21:10 - 040693736 _____ C:\Users\fred\Downloads\vlc-3.0.7.1-win32 (1).exe
2019-07-30 21:09 - 2019-07-30 21:09 - 000000000 ____D C:\Users\fred\AppData\Local\Skype
2019-07-30 21:08 - 2019-07-30 21:41 - 000000000 ____D C:\Users\fred\AppData\Roaming\Skype
2019-07-30 21:07 - 2019-07-30 21:07 - 000000000 ____D C:\Users\fred\AppData\Local\VirtualStore
2019-07-30 20:18 - 2019-07-30 20:19 - 040693736 _____ C:\Users\fred\Downloads\vlc-3.0.7.1-win32.exe
2019-07-30 20:08 - 2019-07-31 11:21 - 000040160 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2019-07-30 20:07 - 2019-07-31 11:22 - 000070264 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2019-07-30 20:07 - 2019-07-31 11:20 - 000220896 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-07-30 20:07 - 2019-07-30 20:07 - 000165088 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2019-07-30 19:49 - 2019-07-30 19:49 - 000020395 _____ C:\Users\fred\Desktop\compterendu.txt
2019-07-30 19:09 - 2019-07-30 19:09 - 000001861 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-07-30 19:09 - 2019-07-30 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-07-30 19:09 - 2019-07-30 19:09 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-07-30 19:09 - 2019-07-30 19:09 - 000000000 ____D C:\Program Files\Malwarebytes
2019-07-30 19:09 - 2018-04-26 05:36 - 000128736 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae.sys
2019-07-30 19:08 - 2019-07-30 19:08 - 076534856 _____ (Malwarebytes ) C:\Users\fred\Downloads\mb3-setup-legacywos-3.5.1.2522-1.0.365-1.0.5292.exe
2019-07-30 18:43 - 2019-07-30 18:43 - 064760528 _____ (Malwarebytes ) C:\Users\fred\Downloads\mb3-setup-consumer-3.8.3.2965-1.0.613-1.0.11764 (1).exe
2019-07-30 18:42 - 2019-07-30 18:43 - 007623880 _____ (Malwarebytes) C:\Users\fred\Downloads\adwcleaner_7.4 (2).exe
2019-07-30 18:38 - 2019-07-30 18:38 - 000003447 _____ C:\Users\fred\Desktop\AdwCleaner[C01].txt
2019-07-30 18:35 - 2019-07-30 18:35 - 007623880 _____ (Malwarebytes) C:\Users\fred\Downloads\adwcleaner_7.4 (1).exe
2019-07-30 18:24 - 2019-07-30 18:24 - 000090221 _____ C:\Users\fred\Desktop\ZHPCleaner (R).txt
2019-07-30 17:35 - 2019-07-30 17:35 - 000101762 _____ C:\Users\fred\Desktop\ZHPCleaner (S).txt
2019-07-30 17:18 - 2019-07-30 17:18 - 003072896 _____ (Nicolas Coolman) C:\Users\fred\Downloads\ZHPCleaner.exe
2019-07-30 16:05 - 2019-07-30 16:07 - 000000000 ____D C:\AdwCleaner
2019-07-30 15:24 - 2019-07-30 19:56 - 000223125 _____ C:\Users\fred\Desktop\ZHPDiag.txt
2019-07-30 15:17 - 2019-07-30 15:17 - 002990976 _____ (Nicolas Coolman) C:\Users\fred\Downloads\ZHPDiag3.exe
2019-07-30 15:16 - 2019-07-30 15:16 - 007623880 _____ (Malwarebytes) C:\Users\fred\Downloads\adwcleaner_7.4.exe
2019-07-30 14:54 - 2019-07-30 14:54 - 000024576 _____ C:\Windows\system32\config\SECURITY.rhk
2019-07-30 10:28 - 2019-07-30 10:28 - 043448428 _____ C:\Users\fred\Downloads\windows_7_style_for_vista_by_giannisgx89.rar
2019-07-30 10:25 - 2019-07-30 10:26 - 064760528 _____ (Malwarebytes ) C:\Users\fred\Downloads\mb3-setup-consumer-3.8.3.2965-1.0.613-1.0.11764.exe
2019-07-30 10:22 - 2019-07-30 10:22 - 003268600 _____ (WiseCleaner.com ) C:\Users\fred\Downloads\WRCFree_10.2.4.684.exe
2019-07-29 21:55 - 2019-07-30 22:35 - 000000000 ____D C:\Users\fred\AppData\Roaming\Teeworlds
2019-07-29 21:52 - 2019-07-29 21:53 - 017692605 _____ C:\Users\fred\Downloads\DDNet-12.5-win32.zip
2019-07-29 19:57 - 2019-07-29 19:57 - 000000779 _____ C:\Users\fred\AppData\Roaming\AdobeWLCMR2Cache.dat
2019-07-29 19:57 - 2019-07-29 19:57 - 000000000 ____D C:\Users\fred\.java
2019-07-29 19:55 - 2019-07-29 19:55 - 000516931 _____ (-) C:\Users\fred\Downloads\AZ_Minecraft_Launcher_Offline.exe
2019-07-29 19:55 - 2019-07-29 19:55 - 000000000 ____D C:\Users\fred\AppData\Roaming\.azlauncher
2019-07-29 19:25 - 2019-07-29 19:25 - 000000000 ____D C:\Users\fred\AppData\Local\Kotinare
2019-07-29 19:24 - 2019-07-29 19:24 - 000274910 _____ C:\Users\fred\AppData\Roaming\Gamolesado
2019-07-17 16:36 - 2019-07-17 16:36 - 000000000 ____D C:\Users\fred\AppData\Local\Natohek
2019-07-17 16:35 - 2019-07-17 16:35 - 000334297 _____ C:\Users\fred\AppData\Roaming\Rodire
==================== Un mois (modifiés) ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-07-31 11:25 - 2012-09-19 10:50 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-07-31 11:25 - 2012-09-19 09:50 - 000000000 ____D C:\Program Files\Google
2019-07-31 11:20 - 2006-11-02 14:58 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-07-31 11:20 - 2006-11-02 14:45 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2019-07-31 11:20 - 2006-11-02 14:45 - 000003616 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2019-07-30 22:45 - 2006-11-02 14:58 - 000032564 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2019-07-30 22:08 - 2008-10-17 13:08 - 000000000 ___HD C:\Program Files\InstallShield Installation Information
2019-07-30 22:04 - 2012-09-22 09:23 - 000000000 ____D C:\Users\fred\AppData\Roaming\mozilla
2019-07-30 21:47 - 2006-11-02 13:18 - 000000000 ____D C:\Windows\inf
2019-07-30 21:46 - 2008-10-17 22:36 - 000000000 ____D C:\Windows\Panther
2019-07-30 21:43 - 2012-09-19 09:51 - 000000810 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-07-30 21:43 - 2012-09-19 09:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-07-30 21:43 - 2012-09-19 09:51 - 000000000 ____D C:\Program Files\CCleaner
2019-07-30 21:14 - 2008-10-17 22:35 - 000721898 _____ C:\Windows\system32\perfh00C.dat
2019-07-30 21:14 - 2008-10-17 22:35 - 000145732 _____ C:\Windows\system32\perfc00C.dat
2019-07-30 21:14 - 2006-11-02 12:33 - 001614504 _____ C:\Windows\system32\PerfStringBackup.INI
2019-07-30 20:21 - 2013-01-01 19:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\1 Jeu par jour
2019-07-30 19:57 - 2008-10-17 13:20 - 000000000 ____D C:\ProgramData\HP
2019-07-30 19:47 - 2019-04-21 16:35 - 000000000 ____D C:\Users\fred\AppData\Roaming\3f36dc2da60a9d7473f710f02f638877
2019-07-30 18:38 - 2008-10-17 22:50 - 000000000 ___HD C:\hp
2019-07-30 17:38 - 2012-10-05 08:41 - 000000000 ____D C:\Users\fred\Downloads\ThirstOfNight-BitTorrent-a
2019-07-30 16:08 - 2008-10-17 13:11 - 000000000 ____D C:\Program Files\CyberLink
2019-07-30 14:57 - 2012-09-17 22:33 - 000074920 _____ C:\Users\fred\AppData\Local\GDIPFONTCACHEV1.DAT
2019-07-30 14:56 - 2006-11-02 14:44 - 000294960 _____ C:\Windows\system32\FNTCACHE.DAT
2019-07-30 14:55 - 2006-11-02 12:22 - 040370176 _____ C:\Windows\system32\config\SOFTWARE.bak
2019-07-30 14:55 - 2006-11-02 12:22 - 000262144 _____ C:\Windows\system32\config\SAM.bak
2019-07-30 14:55 - 2006-11-02 12:22 - 000262144 _____ C:\Windows\system32\config\DEFAULT.bak
2019-07-30 14:36 - 2012-09-18 03:11 - 000000680 _____ C:\Users\fred\AppData\Local\d3d9caps.dat
2019-07-30 10:10 - 2017-05-14 00:13 - 000000000 ___HD C:\Users\fred\AppData\Local\1e9ed1e11c62a16a
2019-07-30 10:10 - 2016-10-18 00:12 - 000000000 ____D C:\Users\fred\AppData\Roaming\{8D82BB39-A8D0-D64F-C3E6-F19D1F340CA3}
2019-07-30 10:08 - 2015-03-20 18:12 - 000000453 _____ C:\Users\fred\AppData\Roaming\WB.CFG
2019-07-29 19:57 - 2012-09-17 22:27 - 000000000 ___HD C:\Users\fred
2019-07-29 19:34 - 2012-09-19 10:11 - 000842296 _____ (Adobe) C:\Windows\system32\FlashPlayerApp.exe
2019-07-29 19:34 - 2012-09-19 10:11 - 000175160 _____ (Adobe) C:\Windows\system32\FlashPlayerCPLApp.cpl
2019-07-29 19:34 - 2008-10-17 13:10 - 000000000 ____D C:\Windows\system32\Macromed
==================== Fichiers à la racine de certains dossiers ================
2019-07-29 19:57 - 2019-07-29 19:57 - 000000779 _____ () C:\Users\fred\AppData\Roaming\AdobeWLCMR2Cache.dat
2019-03-06 16:23 - 2019-03-06 16:23 - 000216495 _____ () C:\Users\fred\AppData\Roaming\Donucod
2019-07-29 19:24 - 2019-07-29 19:24 - 000274910 _____ () C:\Users\fred\AppData\Roaming\Gamolesado
2019-04-21 16:29 - 2019-04-21 16:29 - 000292884 _____ () C:\Users\fred\AppData\Roaming\Hotanabedu
2019-07-17 16:35 - 2019-07-17 16:35 - 000334297 _____ () C:\Users\fred\AppData\Roaming\Rodire
2019-06-17 17:04 - 2019-06-17 17:04 - 000197340 _____ () C:\Users\fred\AppData\Roaming\Sehogole
2019-06-01 19:02 - 2019-06-01 19:02 - 000277464 _____ () C:\Users\fred\AppData\Roaming\Supod
2019-04-28 10:47 - 2019-04-28 10:47 - 000159365 _____ () C:\Users\fred\AppData\Roaming\Tesudeda
2015-03-20 18:12 - 2019-07-30 10:08 - 000000453 _____ () C:\Users\fred\AppData\Roaming\WB.CFG
2013-10-30 13:48 - 2013-10-30 13:54 - 000000126 _____ () C:\Users\fred\AppData\Roaming\wklnhst.dat
2012-09-18 03:11 - 2019-07-30 14:36 - 000000680 _____ () C:\Users\fred\AppData\Local\d3d9caps.dat
2012-09-22 11:01 - 2019-04-21 16:35 - 000048128 _____ () C:\Users\fred\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ===============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
LastRegBack: 2019-07-31 11:29
==================== Fin de FRST.txt ============================