Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-06-2015 Ran by Famille (administrator) on BASE on 08-06-2015 09:01:44 Running from C:\Users\Famille\Desktop Loaded Profiles: Famille (Available Profiles: Famille & UpdatusUser & Mcx1-BASE) Platform: Microsoft Windows 7 Professionnel Service Pack 1 (X86) OS Language: Français (France) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Microsoft Corporation) C:\Windows\System32\CISVC.EXE (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch HKLM\...\Policies\Explorer: [AllowLegacyWebView] 1 HKLM\...\Policies\Explorer: [AllowUnhashedWebView] 1 HKU\S-1-5-21-829476245-3493506388-3716281456-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [6369048 2015-05-08] (Piriform Ltd) HKU\S-1-5-21-829476245-3493506388-3716281456-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr HKU\S-1-5-21-829476245-3493506388-3716281456-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.fr HKU\S-1-5-21-829476245-3493506388-3716281456-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://fr.msn.com/?ocid=iehp URLSearchHook: [S-1-5-21-829476245-3493506388-3716281456-1001] ATTENTION ==> Default URLSearchHook is missing. SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-17] (Oracle Corporation) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-17] (Oracle Corporation) BHO: DIALux Browser Helper Object -> {F586CB96-7091-42ec-9829-F5D5CE65AFC1} -> C:\Program Files\DIALux\Dialux.BHO_x86.dll [2013-12-10] (DIAL GmbH) Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1 FireFox: ======== FF ProfilePath: C:\Users\Famille\AppData\Roaming\Mozilla\Firefox\Profiles\qgui6yau.default FF DefaultSearchEngine,S: FF DefaultSearchUrl: FF SearchEngineOrder.1: FF SearchEngineOrder.1,S: FF SelectedSearchEngine,S: FF Homepage: hxxp://www.orange.fr/portail FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-17] () FF Plugin: @canalplus.fr/Assistants VOD,version=1.0.0.0 -> C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\npcpvod.dll [2010-07-06] (Canal+ Active) FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-17] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-17] (Oracle Corporation) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.) FF Extension: 20-20 3D Viewer - IKEA - C:\Users\Famille\AppData\Roaming\Mozilla\Firefox\Profiles\qgui6yau.default\Extensions\2020Player_IKEA@2020Technologies.com [2013-05-17] FF Extension: ImTranslator - C:\Users\Famille\AppData\Roaming\Mozilla\Firefox\Profiles\qgui6yau.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2014-01-24] FF Extension: Video DownloadHelper - C:\Users\Famille\AppData\Roaming\Mozilla\Firefox\Profiles\qgui6yau.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-14] FF Extension: Adblock Plus - C:\Users\Famille\AppData\Roaming\Mozilla\Firefox\Profiles\qgui6yau.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-12-16] Chrome: ======= CHR Profile: C:\Users\Famille\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\Famille\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2012-11-09] CHR Extension: (YouTube) - C:\Users\Famille\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-11-09] CHR Extension: (Adblock Plus) - C:\Users\Famille\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2012-11-23] CHR Extension: (Google Search) - C:\Users\Famille\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-11-09] CHR Extension: (Gmail) - C:\Users\Famille\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-11-09] ========================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 appdrvrem01; C:\Windows\System32\appdrvrem01.exe [316888 2014-09-03] (Protection Technology) S3 CanalPlus.VOD; C:\Program Files\Canal+\CANAL+ CANALSAT A LA DEMANDE\VOD\CanalPlus.VOD.exe [188416 2010-07-06] (Canal+ Active) [File not signed] S3 HFGService; C:\Windows\System32\HFGService.dll [413696 2009-12-21] (CSR, plc) S3 MajIndexEducationService; C:\Program Files\Index Education\Mise a jour automatique\ServiceMiseAJourIndex.exe [2930176 2014-11-10] (Index Education) [File not signed] S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 appdrv01; C:\Windows\System32\Drivers\appdrv01.sys [3333808 2014-09-03] (Protection Technology) S3 BthAudioHF; C:\Windows\System32\DRIVERS\BthAudioHF.sys [43008 2009-12-21] (CSR, plc) S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [22528 2009-08-13] (CSR, plc) S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [61952 2009-12-21] (CSR, plc) R3 Dot4Scan; C:\Windows\System32\DRIVERS\Dot4Scan.sys [10752 2009-07-14] (Microsoft Corporation) R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [17344 2014-10-25] (Glarysoft Ltd) R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-04-14] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-04-14] (Malwarebytes Corporation) S3 TIEHDUSB; C:\Windows\System32\drivers\tiehdusb.sys [49536 2004-02-04] (Texas Instruments Incorporated) [File not signed] ========================== Drivers MD5 ======================= C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adp94xx.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adpahci.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\adpu320.sys ==> MD5 is legit C:\Windows\system32\drivers\afd.sys D0B388DA1D111A34366E04EB4A5DD156 C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\djsvs.sys ==> MD5 is legit C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit C:\Windows\system32\drivers\amdagp.sys ==> MD5 is legit C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\amdk8.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\amdppm.sys ==> MD5 is legit C:\Windows\system32\drivers\amdsata.sys D320BF87125326F996D4904FE24300FC C:\Windows\system32\DRIVERS\amdsbs.sys ==> MD5 is legit C:\Windows\System32\drivers\amdxata.sys 46387FB17B086D16DEA267D5BE23A2F2 C:\Windows\System32\Drivers\appdrv01.sys F951C27FE54E1B2B5ADA9719289B4756 C:\Windows\system32\drivers\appid.sys 81F97D8F8B3FB94A451CC6F7CF8B2965 C:\Windows\system32\DRIVERS\arc.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\arcsas.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit C:\Windows\system32\drivers\atapi.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\bxvbdx.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\b57nd60x.sys ==> MD5 is legit C:\Windows\system32\Drivers\Beep.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\BrFiltLo.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\BrFiltUp.sys ==> MD5 is legit C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\BthAudioHF.sys E7E57FFB1DCC91AF000E28AAEC98AD61 C:\Windows\System32\DRIVERS\BthAvrcp.sys DB99076533FFB38CBEC8AC88E4535850 C:\Windows\System32\DRIVERS\BthEnum.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bthmodem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\bthpan.sys ==> MD5 is legit C:\Windows\System32\Drivers\BTHport.sys 1153DE2E4F5941E10C399CB5592F78A1 C:\Windows\System32\Drivers\BTHUSB.sys C81E9413A25A439F436B1D4B6A0CF9E9 C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit C:\Windows\system32\drivers\cdrom.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\circlass.sys ==> MD5 is legit C:\Windows\System32\CLFS.sys 33A60554882FDF59CDA3E1806370BBA1 C:\Windows\system32\DRIVERS\CmBatt.sys ==> MD5 is legit C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit C:\Windows\System32\Drivers\cng.sys 3051724F223EA48968B19567DE2A81F4 C:\Windows\system32\DRIVERS\compbatt.sys ==> MD5 is legit C:\Windows\system32\drivers\CompositeBus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\crcdisk.sys ==> MD5 is legit C:\Windows\System32\drivers\csc.sys ==> MD5 is legit C:\Windows\System32\drivers\bthav.sys 5C4C3C1D3B626CFF74316DD07C8B6A1F C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit C:\Windows\System32\drivers\discache.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\disk.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\Dot4.sys B5E479EB83707DD698F66953E922042C C:\Windows\System32\DRIVERS\Dot4Prt.sys CAEFD09B6A6249C53A67D55A9A9FCABF C:\Windows\System32\DRIVERS\Dot4Scan.sys 9F7DE667C505CE6500BECDD8E11644D7 C:\Windows\System32\DRIVERS\dot4usb.sys CF491FF38D62143203C065260567E2F7 C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit C:\Windows\System32\drivers\dxgkrnl.sys 3583A5A8CC2E682BFFBD4630D0FEC08B C:\Windows\system32\DRIVERS\evbdx.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\elxstor.sys ==> MD5 is legit C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit C:\Windows\system32\Drivers\exfat.sys ==> MD5 is legit C:\Windows\system32\Drivers\fastfat.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\fdc.sys ==> MD5 is legit C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\flpydisk.sys ==> MD5 is legitB C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\fssfltr.sys 2ED0BABD4CD98ED820FD0D0BCBE96721 C:\Windows\system32\Drivers\Fs_Rec.sys 7DAE5EBCC80E45D3253F4923DC424D05 C:\Windows\System32\DRIVERS\fvevol.sys E306A24D9694C724FA2491278BF50FDB C:\Windows\system32\DRIVERS\gagp30kx.sys ==> MD5 is legit C:\Windows\System32\drivers\GUBootStartup.sys E9CDEB631E63E83A7540CF6E81B5486B C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit C:\Windows\system32\drivers\HdAudio.sys A5EF29D5315111C80A5C1ABAD14C8972 C:\Windows\system32\drivers\HDAudBus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\HidBatt.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\hidbth.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\hidir.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit C:\Windows\System32\drivers\HTTP.sys 487569E5DA56A5A432FF8AF6D3599CF9 C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit C:\Windows\system32\drivers\i8042prt.sys ==> MD5 is legit C:\Windows\system32\drivers\iaStorV.sys 5CD5F9A5444E6CDCB0AC89BD62D8B76E C:\Windows\system32\DRIVERS\iirsp.sys ==> MD5 is legit C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\intelppm.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit C:\Windows\system32\drivers\msiscsi.sys EB34CE31FABD4DC4343FD2AD16D2CAF9 C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\kbdhid.sys ==> MD5 is legit C:\Windows\System32\Drivers\ksecdd.sys A5B076011C853B4CAFD6296217A6E345 C:\Windows\System32\Drivers\ksecpkg.sys FD6A70D5D5B5BDF36AD265A232DAFB9A C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_fc.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_sas.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_sas2.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\lsi_scsi.sys ==> MD5 is legit C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit C:\Windows\system32\drivers\mbam.sys 3C21F7E95FFCA33EF1A83AA33D9663CF C:\Windows\system32\drivers\mwac.sys 167BCE00050B19DA25065335645A3C7A C:\Windows\system32\DRIVERS\megasas.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\MegaSR.sys ==> MD5 is legit C:\Windows\System32\drivers\modem.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit C:\Windows\System32\drivers\mountmgr.sys 644905A19D0F37F2233DFCE53BC4BC19 C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit C:\Windows\system32\drivers\mrxdav.sys 03F899F521D2AAED1C55008F734DF252 C:\Windows\System32\DRIVERS\mrxsmb.sys 5D16C921E3671636C0EBA3BBAAC5FD25 C:\Windows\System32\DRIVERS\mrxsmb10.sys 6D17A4791ACA19328C685D256349FEFC C:\Windows\System32\DRIVERS\mrxsmb20.sys B81F204D146000BE76651A50670A5E9E C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit C:\Windows\system32\Drivers\Msfs.sys ==> MD5 is legit C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit C:\Windows\system32\Drivers\MsRPC.sys ==> MD5 is legit C:\Windows\system32\drivers\mssmbios.sys ==> MD5 is legit C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\MTConfig.sys ==> MD5 is legit C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit C:\Windows\System32\drivers\ndis.sys 8C9C922D71F1CD4DEF73F186416B7896 C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit C:\Windows\system32\Drivers\NDProxy.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\nfrd960.sys ==> MD5 is legit C:\Windows\system32\Drivers\Npfs.sys ==> MD5 is legit C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit C:\Windows\system32\Drivers\Ntfs.sys C8DFF8D07755A66C7A4A738930F0FEAC C:\Windows\system32\Drivers\Null.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\nvlddmkm.sys 9A77B1C13BCCEDDF78DFD7AFC25B4F5E C:\Windows\system32\drivers\nvraid.sys B3E25EE28883877076E0E1FF877D02E0 C:\Windows\System32\drivers\nvstor.sys 4380E59A170D88C4F1022EFF6719A8A4 C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit C:\Windows\System32\drivers\partmgr.sys 3F34A1B4C5F6475F320C275E63AFCE9B C:\Windows\System32\DRIVERS\parvdm.sys ==> MD5 is legit C:\Windows\System32\drivers\pci.sys ==> MD5 is legit C:\Windows\system32\drivers\pciide.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\pcmcia.sys ==> MD5 is legit C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit C:\Windows\System32\drivers\peauth.sys AEBC369F7DC72AB3F5B9BDF34FA0D43F C:\Windows\System32\DRIVERS\point32.sys E1BDA4A545CB54889CC24DF72A024E75 C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\processr.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\ql2300.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\ql40xx.sys ==> MD5 is legit C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit C:\Windows\system32\Drivers\RDPWD.sys CD9214A6AE17D188D17C3CF8CB9CC693 C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\rfcomm.sys CB928D9E6DAF51879DD6BA8D02F01321 C:\Windows\System32\Drivers\RimUsb.sys 4F4A4C09CC5BE58A76CAC1C337E004E6 C:\Windows\System32\DRIVERS\RimSerial.sys 3A5633AD615E2B15291BD0B1B97CCD8A C:\Windows\System32\Drivers\RootMdm.sys 564297827D213F52C7A3A2FF749568CA C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit C:\Windows\system32\Drivers\secdrv.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sermouse.sys ==> MD5 is legit C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sfloppy.sys ==> MD5 is legit C:\Windows\system32\drivers\sisagp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\SiSRaid2.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\sisraid4.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit C:\Windows\system32\Drivers\spldr.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\srv.sys E4C2764065D66EA1D2D3EBC28FE99C46 C:\Windows\System32\DRIVERS\srv2.sys 03F0545BD8D4C77FA0AE1CEEDFCC71AB C:\Windows\System32\DRIVERS\srvnet.sys BE6BD660CAA6F291AE06A718A4FA8ABC C:\Windows\system32\DRIVERS\stexstor.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\serscan.sys EDB05BD63148796F23EA78506404A538 C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit C:\Windows\system32\drivers\swenum.sys ==> MD5 is legit C:\Windows\System32\drivers\tcpip.sys 5579DD18546999F5D0EC39D018726C6B C:\Windows\System32\DRIVERS\tcpip.sys 5579DD18546999F5D0EC39D018726C6B C:\Windows\System32\drivers\tcpipreg.sys 3EEBD3BD93DA46A26E89893C7AB2FF3B C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit C:\Windows\System32\drivers\tdtcp.sys 2C2C5AFE7EE4F620D69C23C0617651A8 C:\Windows\System32\DRIVERS\tdx.sys 7FE680A3DFA421C4A8E4879AE4C5AAB0 C:\Windows\system32\drivers\termdd.sys ==> MD5 is legit C:\Windows\System32\drivers\tiehdusb.sys A1124EBC672AA3AE1B327096C1DCC346 C:\Windows\System32\DRIVERS\tssecsrv.sys 6C5139E4283249518F7743D7043775B3 C:\Windows\System32\drivers\tsusbflt.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\uagp35.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\umpass.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\usbccgp.sys 0803FBA9FE829D61AE26EC0BCC910C46 C:\Windows\system32\drivers\usbcir.sys 2352AB5F9F8F097BF9D41D5A4718A041 C:\Windows\System32\DRIVERS\usbehci.sys D40855F89B69305140BBD7E9A3BA2DA6 C:\Windows\System32\DRIVERS\usbhub.sys EDF2DF71C4F1E13A6AC75F5224DE655A C:\Windows\System32\DRIVERS\usbohci.sys 9828C8D14CC2676421778F0DE638CF97 C:\Windows\system32\DRIVERS\usbprint.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\USBSTOR.SYS F991AB9CC6B908DB552166768176896A C:\Windows\system32\drivers\usbuhci.sys 800AABFD625EEFF899F7E5496BDE37AB C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit C:\Windows\System32\drivers\vga.sys ==> MD5 is legit C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit C:\Windows\system32\drivers\viaagp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\viac7.sys ==> MD5 is legit C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit C:\Windows\System32\drivers\vmbus.sys ==> MD5 is legit C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\vsmraid.sys ==> MD5 is legit C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\wacompen.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit C:\Windows\system32\DRIVERS\wd.sys ==> MD5 is legit C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645 C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit C:\Windows\system32\drivers\WinUsb.sys A67E5F9A400F3BD1BE3D80613B45F708 C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070 C:\Windows\system32\drivers\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-08 09:01 - 2015-06-08 09:02 - 00025672 _____ C:\Users\Famille\Desktop\FRST.txt 2015-06-08 08:59 - 2015-06-08 09:01 - 00000000 ____D C:\FRST 2015-06-08 08:57 - 2015-06-08 08:55 - 01147904 _____ (Farbar) C:\Users\Famille\Desktop\FRST.exe 2015-06-08 08:55 - 2015-06-08 08:55 - 01147904 _____ (Farbar) C:\Users\Famille\Downloads\FRST.exe 2015-06-08 08:54 - 2015-06-08 08:54 - 00000079 _____ C:\Windows\wininit.ini 2015-06-08 03:33 - 2014-12-06 05:49 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\tlntsess.exe 2015-06-08 02:15 - 2015-06-08 02:15 - 00002233 _____ C:\Users\Famille\Desktop\ZHPFixReport.txt 2015-06-08 01:39 - 2015-06-08 01:39 - 00088592 _____ C:\Users\Famille\Desktop\ZHPDiag.txt 2015-06-07 19:48 - 2015-06-08 08:40 - 00000392 _____ C:\Windows\setupact.log 2015-06-07 19:48 - 2015-06-07 19:48 - 00000000 _____ C:\Windows\setuperr.log 2015-06-07 19:47 - 2015-06-07 19:47 - 00000300 _____ C:\Windows\PFRO.log 2015-06-07 19:44 - 2015-06-07 19:44 - 00000000 ___SD C:\Users\Famille\Documents\Passwords Database 2015-06-07 19:10 - 2015-06-07 19:10 - 06549184 _____ (Piriform Ltd) C:\Users\Famille\Downloads\ccsetup506.exe 2015-06-07 11:37 - 2015-06-07 11:37 - 00000862 _____ C:\Windows\system32\termcap 2015-06-07 11:37 - 2015-06-07 11:37 - 00000000 ____D C:\Program Files\Microsoft Games 2015-06-07 11:31 - 2015-06-07 11:31 - 00000000 ____D C:\Users\Famille\Documents\Fichiers Outlook 2015-06-07 11:30 - 2015-06-07 11:30 - 00000000 ____D C:\Users\Famille\Documents\Add-in Express 2015-06-06 13:06 - 2015-06-06 13:06 - 00000000 ____D C:\Program Files\Mozilla Firefox 2015-06-06 02:22 - 2015-06-06 02:22 - 02231296 _____ C:\Users\Famille\Desktop\adwcleaner_4.206(1).exe 2015-06-06 02:06 - 2009-06-10 23:39 - 00000824 _____ C:\Windows\system32\Drivers\etc\hosts.20150606-020637.backup 2015-06-06 00:41 - 2015-06-08 08:54 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2015-06-06 00:41 - 2015-06-08 08:54 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2 2015-06-06 00:34 - 2015-06-06 00:35 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Famille\Downloads\spybot-2.4.exe 2015-06-06 00:05 - 2015-06-08 01:38 - 00000512 _____ C:\PhysicalDisk0_MBR.bin 2015-06-06 00:00 - 2015-06-08 02:15 - 00000000 ____D C:\Users\Famille\AppData\Roaming\ZHP 2015-06-06 00:00 - 2015-06-08 01:38 - 00000000 ____D C:\Program Files\ZHPDiag 2015-06-06 00:00 - 2015-06-06 11:50 - 00001933 _____ C:\Users\Famille\Desktop\ZHPFix.lnk 2015-06-06 00:00 - 2015-06-06 11:50 - 00001806 _____ C:\Users\Famille\Desktop\ZHPDiag.lnk 2015-06-06 00:00 - 2015-06-06 11:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP 2015-06-05 23:58 - 2015-06-05 23:58 - 06880102 _____ (Nicolas Coolman ) C:\Users\Famille\Desktop\ZHPDiag2.exe 2015-06-05 23:47 - 2015-06-05 23:47 - 00001279 _____ C:\Users\Famille\Desktop\mbam.txt 2015-06-05 22:50 - 2015-06-05 23:08 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-06-05 22:48 - 2015-06-05 23:08 - 00000000 ____D C:\Users\Famille\mbar 2015-06-05 08:53 - 2015-06-07 19:11 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk 2015-06-05 08:53 - 2015-06-07 19:11 - 00000000 ____D C:\Program Files\CCleaner 2015-06-05 08:53 - 2015-06-05 08:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2015-06-05 08:46 - 2015-06-05 08:47 - 106224800 _____ (Kaspersky Lab ZAO) C:\Users\Famille\Downloads\KVRT.exe 2015-06-05 08:44 - 2015-06-05 08:45 - 00000000 ____D C:\KVRT_Data 2015-06-04 20:10 - 2015-06-07 22:44 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-06-04 20:09 - 2015-06-05 22:48 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-06-04 20:09 - 2015-06-05 08:57 - 00001060 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2015-06-04 20:09 - 2015-06-05 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2015-06-04 20:09 - 2015-06-05 08:57 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware 2015-06-04 20:09 - 2015-04-14 09:37 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2015-06-04 20:09 - 2015-04-14 09:37 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys 2015-06-04 19:10 - 2015-06-04 19:11 - 02231296 _____ C:\Users\Famille\Downloads\adwcleaner_4.206.exe 2015-06-02 18:56 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-06-02 18:56 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2015-05-31 14:30 - 2015-05-31 14:30 - 00070699 _____ C:\Users\Public\Documents\Options.xul 2015-05-23 23:35 - 2015-05-23 23:44 - 739901446 _____ C:\Users\Famille\Downloads\La.Belle.Et.La.Bete.2014.FRENCH.BRRiP.avi 2015-05-20 18:48 - 2015-05-20 18:48 - 00000000 ____D C:\ProgramData\Malwarebytes 2015-05-19 19:14 - 2015-06-07 23:15 - 00000000 ____D C:\AdwCleaner 2015-05-19 18:42 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys 2015-05-17 22:46 - 2015-05-17 22:46 - 00264075 _____ C:\Users\Public\Documents\bookmarks.html 2015-05-17 22:46 - 2015-05-17 22:46 - 00132010 _____ C:\Users\Public\Documents\bookmarks-2015-05-17.json 2015-05-17 11:44 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-05-17 11:00 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-05-17 11:00 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-05-17 11:00 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-05-17 11:00 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-05-17 10:59 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-05-17 10:59 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-05-17 10:59 - 2015-04-04 05:10 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-05-17 10:59 - 2015-04-04 05:10 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-05-17 10:59 - 2015-04-04 05:05 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-05-17 10:59 - 2015-04-04 05:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-05-17 10:59 - 2015-04-04 05:04 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-05-17 10:59 - 2015-04-04 05:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-05-17 10:59 - 2015-04-04 05:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-05-17 10:59 - 2015-04-04 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-05-17 10:59 - 2015-04-04 04:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-05-17 10:53 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-05-17 10:53 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-05-17 10:53 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-05-17 10:53 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-05-17 10:53 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-05-17 10:53 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-05-17 10:53 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-05-17 10:53 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-05-17 10:53 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-05-17 10:53 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-05-17 10:53 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-05-17 10:53 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-05-17 10:53 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-05-17 10:53 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-05-17 10:53 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-05-17 10:53 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-05-17 10:53 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-05-17 10:53 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-05-17 10:53 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-05-17 10:53 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-05-17 10:53 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-05-17 10:53 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-05-17 10:53 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-05-17 10:53 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2015-05-17 10:52 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-05-17 10:52 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-05-17 10:52 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-05-17 10:52 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-05-17 10:52 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-05-17 10:52 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-05-17 10:52 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-05-17 10:52 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-05-17 10:51 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2015-05-17 10:51 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2015-05-17 10:51 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2015-05-17 10:51 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2015-05-17 10:48 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-05-16 10:34 - 2015-05-16 10:34 - 00007606 _____ C:\Users\Famille\AppData\Local\Resmon.ResmonCfg 2015-05-15 21:16 - 2015-05-15 21:16 - 00000000 ____D C:\Users\Famille\Mozilla 2015-05-15 20:07 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-08 08:49 - 2009-07-14 06:34 - 00025216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-06-08 08:49 - 2009-07-14 06:34 - 00025216 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-06-08 08:44 - 2012-11-09 20:21 - 01401528 _____ C:\Windows\WindowsUpdate.log 2015-06-08 08:40 - 2014-08-12 12:24 - 00000324 _____ C:\Windows\Tasks\GlaryInitialize 5.job 2015-06-08 08:40 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-06-08 02:10 - 2012-11-10 17:11 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2015-06-08 00:48 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\NDF 2015-06-08 00:41 - 2009-07-14 04:04 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts.20150608-013223.backup 2015-06-07 19:46 - 2014-01-25 23:25 - 00000000 ____D C:\ProgramData\Kaspersky Lab 2015-06-07 11:57 - 2012-12-16 16:22 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service 2015-06-07 11:38 - 2009-07-14 06:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2015-06-07 11:37 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\fr-FR 2015-06-07 11:37 - 2009-07-14 04:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2015-06-07 11:31 - 2012-11-09 21:05 - 01697686 _____ C:\Windows\system32\PerfStringBackup.INI 2015-06-06 02:19 - 2013-09-30 22:47 - 00000000 ____D C:\Users\Famille\AppData\Roaming\GlarySoft 2015-06-06 02:06 - 2009-07-14 04:04 - 00450771 ____R C:\Windows\system32\Drivers\etc\hosts.20150608-004132.backup 2015-06-05 22:48 - 2012-11-09 21:24 - 00000000 ____D C:\Users\Famille 2015-06-05 08:54 - 2013-10-23 11:14 - 00000000 ____D C:\Users\Famille\AppData\Roaming\uTorrent 2015-06-02 19:37 - 2014-12-23 00:52 - 00000000 ____D C:\Users\Mcx1-BASE 2015-06-02 19:13 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Microsoft.NET 2015-06-02 18:59 - 2015-04-05 03:01 - 00000000 ___SD C:\Windows\system32\GWX 2015-06-02 18:59 - 2009-07-14 11:01 - 00000000 ____D C:\Program Files\Windows Journal 2015-06-02 18:34 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\wfp 2015-06-02 18:31 - 2014-12-23 00:52 - 00000000 ___RD C:\Users\Mcx1-BASE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-06-02 18:31 - 2014-12-23 00:52 - 00000000 ___RD C:\Users\Mcx1-BASE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-06-02 18:31 - 2014-12-23 00:52 - 00000000 ____D C:\Users\Mcx1-BASE\AppData\Roaming\Macromedia 2015-06-02 18:31 - 2014-08-02 22:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2015-06-02 18:31 - 2014-08-02 22:49 - 00000000 ____D C:\Program Files\Samsung 2015-06-02 18:31 - 2013-04-14 03:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance 2015-06-02 18:31 - 2013-04-14 03:03 - 00000000 ___RD C:\Users\UpdatusUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories 2015-06-02 18:31 - 2013-04-14 03:03 - 00000000 ____D C:\Users\UpdatusUser\AppData\Roaming\Macromedia 2015-06-02 18:31 - 2013-04-14 03:02 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2015-06-02 18:31 - 2012-11-13 12:00 - 00000000 ___HD C:\Program Files\InstallShield Installation Information 2015-06-02 18:31 - 2009-07-14 10:39 - 00000000 ____D C:\Windows\system32\Drivers\fr-FR 2015-06-02 18:31 - 2009-07-14 04:37 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories 2015-06-02 18:29 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\registration 2015-06-02 18:26 - 2014-09-02 18:22 - 00000000 ____D C:\ProgramData\IndexEducation 2015-06-02 18:26 - 2013-04-14 03:03 - 00000000 ____D C:\ProgramData\NVIDIA 2015-06-02 18:26 - 2012-11-09 20:03 - 00000000 ____D C:\Windows.old 2015-06-02 18:24 - 2008-09-17 23:09 - 00000000 __RHD C:\MSOCache 2015-05-31 13:31 - 2014-05-20 12:59 - 00068608 ___SH C:\Users\Famille\Thumbs.db 2015-05-25 14:48 - 2014-08-02 22:57 - 00000000 ____D C:\Users\Famille\AppData\Roaming\Samsung 2015-05-19 18:37 - 2014-08-12 18:12 - 00000000 ____D C:\TEMP 2015-05-19 18:20 - 2014-08-28 18:34 - 00000000 ____D C:\Users\Famille\AppData\Local\Adobe 2015-05-17 12:57 - 2009-07-14 06:33 - 00469360 _____ C:\Windows\system32\FNTCACHE.DAT 2015-05-17 12:54 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\system32\AdvancedInstallers 2015-05-17 11:46 - 2012-11-10 12:24 - 00000000 ____D C:\ProgramData\Microsoft Help 2015-05-17 11:40 - 2013-08-21 03:10 - 00000000 ____D C:\Windows\system32\MRT 2015-05-17 11:33 - 2012-11-11 10:39 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-05-17 10:27 - 2012-12-16 17:53 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-05-17 10:24 - 2009-07-14 11:01 - 00000000 ____D C:\Windows\ShellNew 2015-05-15 23:10 - 2013-09-30 22:53 - 00000000 ____D C:\ProgramData\GlarySoft ==================== Files in the root of some directories ======= 2012-12-31 14:44 - 2013-01-01 11:56 - 0000308 _____ () C:\Users\Famille\AppData\Roaming\Rim.Desktop.Exception.log 2012-12-31 14:42 - 2013-09-30 23:24 - 0002009 _____ () C:\Users\Famille\AppData\Roaming\Rim.Desktop.HttpServerSetup.log 2012-12-31 14:44 - 2013-01-01 11:56 - 0000385 _____ () C:\Users\Famille\AppData\Roaming\Rim.DesktopHelper.Exception.log 2012-11-10 00:41 - 2012-11-10 00:41 - 0033134 _____ () C:\Users\Famille\AppData\Roaming\UserTile.png 2015-05-16 10:34 - 2015-05-16 10:34 - 0007606 _____ () C:\Users\Famille\AppData\Local\Resmon.ResmonCfg 2014-01-25 23:32 - 2014-01-25 23:32 - 0017408 _____ () C:\Users\Famille\AppData\Local\WebpageIcons.db ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\explorer.exe => File is digitally signed C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed ==================== BCD ================================ Gestionnaire de d‚marrage Windows --------------------------------- identificateur {bootmgr} device partition=C: description Windows Boot Manager locale fr-FR inherit {globalsettings} default {current} resumeobject {8272ba80-2a99-11e2-a499-8280ab7b6456} displayorder {current} toolsdisplayorder {memdiag} timeout 30 Chargeur de d‚marrage Windows ----------------------------- identificateur {current} device partition=C: path \Windows\system32\winload.exe description Windows 7 locale fr-FR inherit {bootloadersettings} recoverysequence {8272ba82-2a99-11e2-a499-8280ab7b6456} recoveryenabled Yes osdevice partition=C: systemroot \Windows resumeobject {8272ba80-2a99-11e2-a499-8280ab7b6456} nx OptIn Chargeur de d‚marrage Windows ----------------------------- identificateur {8272ba82-2a99-11e2-a499-8280ab7b6456} device ramdisk=[C:]\Recovery\8272ba82-2a99-11e2-a499-8280ab7b6456\Winre.wim,{8272ba83-2a99-11e2-a499-8280ab7b6456} path \windows\system32\winload.exe description Windows Recovery Environment inherit {bootloadersettings} osdevice ramdisk=[C:]\Recovery\8272ba82-2a99-11e2-a499-8280ab7b6456\Winre.wim,{8272ba83-2a99-11e2-a499-8280ab7b6456} systemroot \windows nx OptIn winpe Yes Reprendre … partir de la mise en veille prolong‚e ------------------------------------------------- identificateur {8272ba80-2a99-11e2-a499-8280ab7b6456} device partition=C: path \Windows\system32\winresume.exe description Windows Resume Application locale fr-FR inherit {resumeloadersettings} filedevice partition=C: filepath \hiberfil.sys pae Yes debugoptionenabled No Testeur de m‚moire Windows -------------------------- identificateur {memdiag} device partition=C: path \boot\memtest.exe description Diagnostics m‚moire Windows locale fr-FR inherit {globalsettings} badmemoryaccess Yes Chargeur de systŠme d'exploitation Windows d'ancienne g‚n‚ration ---------------------------------------------------------------- identificateur {ntldr} device partition=C: path \ntldr description Version ant‚rieure de Windows ParamŠtres EMS -------------- identificateur {emssettings} bootems Yes ParamŠtres du d‚bogueur ----------------------- identificateur {dbgsettings} debugtype Serial debugport 1 baudrate 115200 Erreurs de m‚moire RAM ---------------------- identificateur {badmemory} ParamŠtres globaux ------------------ identificateur {globalsettings} inherit {dbgsettings} {emssettings} {badmemory} ParamŠtres du chargeur de d‚marrage ----------------------------------- identificateur {bootloadersettings} inherit {globalsettings} {hypervisorsettings} ParamŠtres de l'hyperviseur ------------------- identificateur {hypervisorsettings} hypervisordebugtype Serial hypervisordebugport 1 hypervisorbaudrate 115200 ParamŠtres du chargeur de reprise --------------------------------- identificateur {resumeloadersettings} inherit {globalsettings} Options de p‚riph‚rique ----------------------- identificateur {8272ba83-2a99-11e2-a499-8280ab7b6456} description Ramdisk Options ramdisksdidevice partition=C: ramdisksdipath \Recovery\8272ba82-2a99-11e2-a499-8280ab7b6456\boot.sdi LastRegBack: 2015-06-04 20:51 ==================== End of log ============================