Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:07-02-2016 Exécuté par Camille (administrateur) sur CAMILLE (14-02-2016 11:04:13) Exécuté depuis C:\Users\Camille\Downloads Profils chargés: Camille (Profils disponibles: Camille) Platform: Windows 10 Home Version 1511 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Edge) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe (Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe () C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe (MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Disc Soft Ltd) D:\DAEMON Tools Lite\DiscSoftBusService.exe (Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Program Files (x86)\ASUS\ASUS Manager\PC Cleanup\SecureDeleteBackground.exe (ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Power Manager\Power Manager_background.exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\SyncUp\Server\SyncUp Server.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\InstallShield Installation Information\{9AF45D7C-34F1-4BA0-B799-825C8C04494C}\AiChargerDT.exe (ASUSTeK) C:\Program Files (x86)\ASUS\ASUS Manager\Ai Charger II\Ai_ChargerII_TrayIcon(ASUS_Manager).exe (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Manager\AsHKService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\APRP\aprp.exe (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe () C:\Users\Camille\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe (ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.3.532\AsusWSPanel.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-13] (Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1386712 2014-06-12] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2199840 2014-04-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3216032 2014-12-25] (ASUSTek Computer Inc.) HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.3.532\ASUSWSLoader.exe [63272 2015-08-21] () HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [24952456 2015-12-08] (Dropbox, Inc.) HKLM-x32\...\Run: [MalwareProtectionLive] => C:\Users\Camille\AppData\Local\MalwareProtectionLive\MalwareProtectionClient.exe [1110048 2016-02-08] () HKU\S-1-5-21-759728317-214784433-617909235-1001\...\Run: [DAEMON Tools Lite Automount] => D:\DAEMON Tools Lite\DTAgent.exe [4179288 2015-11-18] (Disc Soft Ltd) HKU\S-1-5-21-759728317-214784433-617909235-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8590760 2015-12-08] (Piriform Ltd) HKU\S-1-5-21-759728317-214784433-617909235-1001\...\MountPoints2: {4f5431ac-909a-11e5-8287-40e2303192fd} - "G:\setup.exe" ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.3.532\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.3.532\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.3.532\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.) GroupPolicy: Restriction - Chrome <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Winsock: Catalog9 01 C:\WINDOWS\SysWOW64\BoxoreService.dll [303984 2016-01-19] (Boxore OU) Winsock: Catalog9 02 C:\WINDOWS\SysWOW64\BoxoreService.dll [303984 2016-01-19] (Boxore OU) Winsock: Catalog9 03 C:\WINDOWS\SysWOW64\BoxoreService.dll [303984 2016-01-19] (Boxore OU) Winsock: Catalog9 04 C:\WINDOWS\SysWOW64\BoxoreService.dll [303984 2016-01-19] (Boxore OU) Winsock: Catalog9 17 C:\WINDOWS\SysWOW64\BoxoreService.dll [303984 2016-01-19] (Boxore OU) Tcpip\Parameters: [DhcpNameServer] 192.168.0.254 Tcpip\..\Interfaces\{592204a4-cbff-41f0-8902-c1450f92c866}: [DhcpNameServer] 192.168.0.254 Tcpip\..\Interfaces\{947751c9-5659-4990-8d5a-3db16f58e1a6}: [DhcpNameServer] 192.168.0.254 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.palikan.com/?f=1&a=plk_mdcrw_16_06&cd=2XzuyEtN2Y1L1Qzu0FtDyBzyyDzytAyC0CyBzytByByDtCtDtN0D0Tzu0StCyDtDtDtN1L2XzutAtFtCzztFtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyD0F0A0EyE0ByD0AtGyD0BtAyDtGyE0AtAzztGtA0ByB0FtG0EyC0BtAyC0EtCtDtD0FzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0B0ByEtA0BtAyEtGyC0CyCtCtGyE0BtD0CtG0AtD0EyDtGzy0EtBtDzy0C0C0EyB0FtAyE2QtN0A0LzuyE&cr=1848398338&ir= HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.palikan.com/?f=1&a=plk_mdcrw_16_06&cd=2XzuyEtN2Y1L1Qzu0FtDyBzyyDzytAyC0CyBzytByByDtCtDtN0D0Tzu0StCyDtDtDtN1L2XzutAtFtCzztFtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyD0F0A0EyE0ByD0AtGyD0BtAyDtGyE0AtAzztGtA0ByB0FtG0EyC0BtAyC0EtCtDtD0FzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0B0ByEtA0BtAyEtGyC0CyCtCtGyE0BtD0CtG0AtD0EyDtGzy0EtBtDzy0C0C0EyB0FtAyE2QtN0A0LzuyE&cr=1848398338&ir= HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://do-search.com/web/?type=ds&ts=1448190750&z=e9915cf0fac93f61982d6c5gaz7zcbag7tde3m9w8e&from=dae&uid=kingstonxrbu-sc100s37128gd_50026b725114e406&q={searchTerms} HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://do-search.com/?type=hp&ts=1448190750&z=e9915cf0fac93f61982d6c5gaz7zcbag7tde3m9w8e&from=dae&uid=kingstonxrbu-sc100s37128gd_50026b725114e406 HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://do-search.com/web/?type=ds&ts=1448190750&z=e9915cf0fac93f61982d6c5gaz7zcbag7tde3m9w8e&from=dae&uid=kingstonxrbu-sc100s37128gd_50026b725114e406&q={searchTerms} HKU\S-1-5-21-759728317-214784433-617909235-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.palikan.com/?f=1&a=plk_mdcrw_16_06&cd=2XzuyEtN2Y1L1Qzu0FtDyBzyyDzytAyC0CyBzytByByDtCtDtN0D0Tzu0StCyDtDtDtN1L2XzutAtFtCzztFtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyD0F0A0EyE0ByD0AtGyD0BtAyDtGyE0AtAzztGtA0ByB0FtG0EyC0BtAyC0EtCtDtD0FzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0B0ByEtA0BtAyEtGyC0CyCtCtGyE0BtD0CtG0AtD0EyDtGzy0EtBtDzy0C0C0EyB0FtAyE2QtN0A0LzuyE&cr=1848398338&ir= HKU\S-1-5-21-759728317-214784433-617909235-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://do-search.com/?type=hp&ts=1448190750&z=e9915cf0fac93f61982d6c5gaz7zcbag7tde3m9w8e&from=dae&uid=kingstonxrbu-sc100s37128gd_50026b725114e406 SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.palikan.com/results.php?f=4&a=plk_mdcrw_16_06&cd=2XzuyEtN2Y1L1Qzu0FtDyBzyyDzytAyC0CyBzytByByDtCtDtN0D0Tzu0StCyDtDtDtN1L2XzutAtFtCzztFtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyD0F0A0EyE0ByD0AtGyD0BtAyDtGyE0AtAzztGtA0ByB0FtG0EyC0BtAyC0EtCtDtD0FzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0B0ByEtA0BtAyEtGyC0CyCtCtGyE0BtD0CtG0AtD0EyDtGzy0EtBtDzy0C0C0EyB0FtAyE2QtN0A0LzuyE&cr=1848398338&ir=&q={searchTerms} SearchScopes: HKLM -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.palikan.com/results.php?f=4&a=plk_mdcrw_16_06&cd=2XzuyEtN2Y1L1Qzu0FtDyBzyyDzytAyC0CyBzytByByDtCtDtN0D0Tzu0StCyDtDtDtN1L2XzutAtFtCzztFtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyD0F0A0EyE0ByD0AtGyD0BtAyDtGyE0AtAzztGtA0ByB0FtG0EyC0BtAyC0EtCtDtD0FzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0B0ByEtA0BtAyEtGyC0CyCtCtGyE0BtD0CtG0AtD0EyDtGzy0EtBtDzy0C0C0EyB0FtAyE2QtN0A0LzuyE&cr=1848398338&ir=&q={searchTerms} SearchScopes: HKLM -> {6586d803-df30-46d3-a89a-4136c8571d45} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_sien_15_52¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzytAyC0CyBzytByByDtCtDtN0D0Tzu0StCyEyDtDtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyByDzzyE0B0A0B0DtGyDzyzy0BtGtCzz0A0EtGtAtD0E0AtG0B0ByCyCtD0CyC0AzztAtDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0B0ByEtA0BtAyEtGyC0CyCtCtGyE0BtD0CtG0AtD0EyDtGzy0EtBtDzy0C0C0EyB0FtAyE2QtN0A0LzuyE%26cr%3D1571402390%26a%3Dwncy_sien_15_52%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\S-1-5-21-759728317-214784433-617909235-1001 -> DefaultScope {0322BF2D-0B2D-4B1B-9289-411081BDE42C} URL = hxxp://www.trovi.com/Results.aspx?q={searchTerms}&GD=SY1000167&SearchSource=56&UM=2 SearchScopes: HKU\S-1-5-21-759728317-214784433-617909235-1001 -> {0322BF2D-0B2D-4B1B-9289-411081BDE42C} URL = hxxp://www.trovi.com/Results.aspx?q={searchTerms}&GD=SY1000167&SearchSource=56&UM=2 SearchScopes: HKU\S-1-5-21-759728317-214784433-617909235-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-759728317-214784433-617909235-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKU\S-1-5-21-759728317-214784433-617909235-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.palikan.com/results.php?f=4&a=plk_mdcrw_16_06&cd=2XzuyEtN2Y1L1Qzu0FtDyBzyyDzytAyC0CyBzytByByDtCtDtN0D0Tzu0StCyDtDtDtN1L2XzutAtFtCzztFtDtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyD0F0A0EyE0ByD0AtGyD0BtAyDtGyE0AtAzztGtA0ByB0FtG0EyC0BtAyC0EtCtDtD0FzztC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0B0ByEtA0BtAyEtGyC0CyCtCtGyE0BtD0CtG0AtD0EyDtGzy0EtBtDzy0C0C0EyB0FtAyE2QtN0A0LzuyE&cr=1848398338&ir=&q={searchTerms} SearchScopes: HKU\S-1-5-21-759728317-214784433-617909235-1001 -> {6586d803-df30-46d3-a89a-4136c8571d45} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wncy_sien_15_52¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3DWincy%26cd%3D2XzuyEtN2Y1L1Qzu0FtDyBzyyDzytAyC0CyBzytByByDtCtDtN0D0Tzu0StCyEyDtDtN1L2XzutAtFtCyCtFtCtFtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2SyByDzzyE0B0A0B0DtGyDzyzy0BtGtCzz0A0EtGtAtD0E0AtG0B0ByCyCtD0CyC0AzztAtDtD2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0A0B0ByEtA0BtAyEtGyC0CyCtCtGyE0BtD0CtG0AtD0EyDtGzy0EtBtDzy0C0C0EyB0FtAyE2QtN0A0LzuyE%26cr%3D1571402390%26a%3Dwncy_sien_15_52%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-759728317-214784433-617909235-1001 -> {F90D9553-FBE0-49BF-B3C4-16357B36E0D6} URL = hxxps://fr.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=994519&p={searchTerms} StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge HomeButtonPage: HKU\S-1-5-21-759728317-214784433-617909235-1001 -> hxxp://google.fr/ FireFox: ======== FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] () FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2013-12-18] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-04-01] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-05-13] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-05-13] (NVIDIA Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] () Chrome: ======= CHR HomePage: Default -> hxxps://www.google.fr/ CHR StartupUrls: Default -> "hxxps://www.google.fr/" CHR Profile: C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-09-09] CHR Extension: (Google Docs) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-09] CHR Extension: (Google Drive) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03] CHR Extension: (Recherche Google) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Google Sheets) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-09-09] CHR Extension: (Google Docs hors connexion) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-18] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-09-09] CHR Extension: (Gmail) - C:\Users\Camille\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-09-09] CHR HKLM\...\Chrome\Extension: [ljibkigjccbegnbeojkoafejpoiachej] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-759728317-214784433-617909235-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ljibkigjccbegnbeojkoafejpoiachej] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ljibkigjccbegnbeojkoafejpoiachej] - hxxps://clients2.google.com/service/update2/crx StartMenuInternet: Google Chrome - chrome.exe ==================== Services (Avec liste blanche) ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2014-12-02] () R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.1.11.399\AsusWSWinService.exe [71168 2014-08-20] (ASUS Cloud Corporation) [Fichier non signé] S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-17] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [136048 2015-09-17] (Dropbox, Inc.) R3 Disc Soft Lite Bus Service; D:\DAEMON Tools Lite\DiscSoftBusService.exe [1369432 2015-11-18] (Disc Soft Ltd) R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-24] (MAGIX AG) [Fichier non signé] S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Fichier non signé] S2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [255040 2014-08-25] (WildTangent) R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Fichier non signé] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation) S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2012-08-22] () R0 assdv2; C:\Windows\System32\Drivers\assdv2.sys [21816 2013-12-05] () R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] () R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30264 2015-11-22] (Disc Soft Ltd) R3 dtliteusbbus; C:\Windows\System32\drivers\dtliteusbbus.sys [47160 2015-11-22] (Disc Soft Ltd) R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [80920 2015-07-02] (McAfee, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation) R3 RtkBtFilter; C:\Windows\system32\DRIVERS\RtkBtfilter.sys [593624 2015-12-11] (Realtek Semiconductor Corporation) R3 RTWlanE; C:\Windows\System32\drivers\rtwlane.sys [3445248 2015-10-30] (Realtek Semiconductor Corporation ) S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2016-02-14 11:04 - 2016-02-14 11:04 - 00025532 _____ C:\Users\Camille\Downloads\FRST.txt 2016-02-14 11:03 - 2016-02-14 11:04 - 00000000 ____D C:\FRST 2016-02-14 11:02 - 2016-02-14 11:03 - 02370560 _____ (Farbar) C:\Users\Camille\Downloads\FRST64.exe 2016-02-13 19:07 - 2016-02-14 00:50 - 127824848 _____ (Electronic Arts, Inc.) C:\Users\Camille\Downloads\OriginSetup.exe 2016-02-13 18:56 - 2016-02-13 19:05 - 31335272 _____ (Electronic Arts, Inc.) C:\Users\Camille\Downloads\OriginThinSetup (1).exe 2016-02-11 18:28 - 2016-02-11 18:28 - 00987728 _____ (Google Inc.) C:\Users\Camille\Downloads\ChromeSetup (3).exe 2016-02-11 18:25 - 2016-02-11 18:25 - 00987728 _____ (Google Inc.) C:\Users\Camille\Downloads\ChromeSetup (2).exe 2016-02-11 18:00 - 2016-02-11 18:00 - 00987728 _____ (Google Inc.) C:\Users\Camille\Downloads\ChromeSetup (1).exe 2016-02-11 12:17 - 2016-02-11 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-02-11 12:16 - 2016-02-11 12:16 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-02-11 12:16 - 2016-02-11 12:16 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-02-11 11:40 - 2016-01-29 07:57 - 04502352 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe 2016-02-11 11:40 - 2016-01-29 07:33 - 04064320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe 2016-02-11 11:40 - 2016-01-27 07:15 - 01557776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2016-02-11 11:40 - 2016-01-27 07:15 - 01542816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2016-02-11 11:40 - 2016-01-27 07:01 - 07476064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2016-02-11 11:40 - 2016-01-27 07:01 - 01997328 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2016-02-11 11:40 - 2016-01-27 07:01 - 01819720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2016-02-11 11:40 - 2016-01-27 06:59 - 00304752 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe 2016-02-11 11:40 - 2016-01-27 06:57 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2016-02-11 11:40 - 2016-01-27 06:57 - 01824264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll 2016-02-11 11:40 - 2016-01-27 06:57 - 00820704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll 2016-02-11 11:40 - 2016-01-27 06:56 - 21124344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2016-02-11 11:40 - 2016-01-27 06:55 - 05242496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2016-02-11 11:40 - 2016-01-27 06:55 - 00081112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe 2016-02-11 11:40 - 2016-01-27 06:54 - 00295264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2016-02-11 11:40 - 2016-01-27 06:46 - 02606824 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll 2016-02-11 11:40 - 2016-01-27 06:46 - 01270072 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll 2016-02-11 11:40 - 2016-01-27 06:45 - 22564328 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2016-02-11 11:40 - 2016-01-27 06:45 - 06605544 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2016-02-11 11:40 - 2016-01-27 06:44 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2016-02-11 11:40 - 2016-01-27 06:44 - 00085320 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe 2016-02-11 11:40 - 2016-01-27 06:43 - 00359776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2016-02-11 11:40 - 2016-01-27 06:37 - 01998176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2016-02-11 11:40 - 2016-01-27 06:37 - 00576352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2016-02-11 11:40 - 2016-01-27 06:21 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll 2016-02-11 11:40 - 2016-01-27 06:15 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ztrace_maps.dll 2016-02-11 11:40 - 2016-01-27 06:13 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll 2016-02-11 11:40 - 2016-01-27 06:12 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll 2016-02-11 11:40 - 2016-01-27 06:11 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll 2016-02-11 11:40 - 2016-01-27 06:10 - 22394368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2016-02-11 11:40 - 2016-01-27 06:10 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll 2016-02-11 11:40 - 2016-01-27 06:08 - 00299008 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll 2016-02-11 11:40 - 2016-01-27 06:08 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ztrace_maps.dll 2016-02-11 11:40 - 2016-01-27 06:07 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassam.dll 2016-02-11 11:40 - 2016-01-27 06:05 - 19339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2016-02-11 11:40 - 2016-01-27 06:05 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2016-02-11 11:40 - 2016-01-27 06:05 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll 2016-02-11 11:40 - 2016-01-27 06:05 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll 2016-02-11 11:40 - 2016-01-27 06:04 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2016-02-11 11:40 - 2016-01-27 06:04 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll 2016-02-11 11:40 - 2016-01-27 06:03 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngckeyenum.dll 2016-02-11 11:40 - 2016-01-27 06:02 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll 2016-02-11 11:40 - 2016-01-27 06:01 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2016-02-11 11:40 - 2016-01-27 05:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassam.dll 2016-02-11 11:40 - 2016-01-27 05:58 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2016-02-11 11:40 - 2016-01-27 05:57 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2016-02-11 11:40 - 2016-01-27 05:55 - 12125696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2016-02-11 11:40 - 2016-01-27 05:55 - 03666432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2016-02-11 11:40 - 2016-01-27 05:54 - 24603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2016-02-11 11:40 - 2016-01-27 05:52 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2016-02-11 11:40 - 2016-01-27 05:50 - 02230784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2016-02-11 11:40 - 2016-01-27 05:50 - 01504768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2016-02-11 11:40 - 2016-01-27 05:50 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys 2016-02-11 11:40 - 2016-01-27 05:49 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2016-02-11 11:40 - 2016-01-27 05:48 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2016-02-11 11:40 - 2016-01-27 05:44 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgbkend.dll 2016-02-11 11:40 - 2016-01-27 05:42 - 01387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2016-02-11 11:40 - 2016-01-27 05:41 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2016-02-11 11:40 - 2016-01-27 05:39 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2016-02-11 11:40 - 2016-01-27 05:38 - 07835648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2016-02-11 11:40 - 2016-01-27 05:38 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2016-02-11 11:40 - 2016-01-27 05:37 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2016-02-11 11:40 - 2016-01-27 05:36 - 02757120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2016-02-11 11:40 - 2016-01-27 05:32 - 01087488 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll 2016-02-11 11:40 - 2016-01-27 05:31 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgbkend.dll 2016-02-11 09:17 - 2016-02-11 09:31 - 45855312 _____ (Google Inc.) C:\Users\Camille\Downloads\ChromeStandaloneSetup.exe 2016-02-11 09:12 - 2016-02-11 09:12 - 00987728 _____ (Google Inc.) C:\Users\Camille\Downloads\ChromeSetup.exe 2016-02-09 11:27 - 2016-02-10 18:46 - 00000000 ____D C:\ProgramData\Boxore 2016-02-09 11:27 - 2016-02-09 11:53 - 00008952 _____ C:\WINDOWS\SysWOW64\BoxoreServiceOff.ini 2016-02-09 11:27 - 2016-02-09 11:53 - 00008952 _____ C:\WINDOWS\system32\BoxoreServiceOff.ini 2016-02-09 11:27 - 2016-02-09 11:27 - 00000000 ____D C:\Users\Camille\AppData\Local\Boxore 2016-02-09 11:27 - 2016-01-19 03:22 - 00303984 _____ (Boxore OU) C:\WINDOWS\SysWOW64\BoxoreService.dll 2016-02-09 11:22 - 2016-02-14 10:51 - 00000000 ____D C:\Program Files (x86)\QuickSearch 2016-02-09 11:22 - 2016-02-09 11:22 - 00002044 _____ C:\WINDOWS\System32\Tasks\zyh3018 2016-02-09 11:22 - 2016-02-09 11:22 - 00000002 _____ C:\END 2016-02-09 11:22 - 2016-02-09 11:22 - 00000000 ____D C:\Users\Public\Documents\ShopperPro3 2016-02-09 11:09 - 2016-02-09 11:09 - 00001388 _____ C:\Users\Camille\Desktop\Continue installation .lnk 2016-02-09 11:09 - 2016-02-09 11:09 - 00000000 ____D C:\Program Files\Sound+ 2016-02-09 11:01 - 2016-02-09 11:18 - 00000000 ____D C:\Users\Camille\AppData\Local\Chromium 2016-02-09 10:51 - 2016-02-09 10:52 - 00000000 ____D C:\Users\Camille\AppData\Roaming\Nico Mak Computing 2016-02-08 23:41 - 2016-02-08 23:41 - 00357559 _____ C:\Users\Camille\Downloads\Charte_de_déontologie_de_la_commande_publique.pdf 2016-02-07 15:45 - 2016-02-07 15:46 - 00865395 _____ C:\Users\Camille\Downloads\GMP_001_0021.pdf 2016-02-07 15:25 - 2016-02-07 15:25 - 00347035 _____ C:\Users\Camille\Downloads\Article Impôt final.pdf 2016-02-04 12:20 - 2016-02-04 12:20 - 00328513 _____ C:\Users\Camille\Downloads\MTS_Volvenom_1490701_151214MillionDitchMansion.zip 2016-02-04 12:20 - 2016-02-04 12:20 - 00312520 _____ C:\Users\Camille\Downloads\MTS_Amichan619_1499786_TS4_Downton_Abbey.rar 2016-02-04 12:20 - 2016-02-04 12:20 - 00255709 _____ C:\Users\Camille\Downloads\MTS_bhj867_1487299_Dukemanor2.rar 2016-02-04 12:15 - 2016-02-04 12:15 - 00348573 _____ C:\Users\Camille\Downloads\MTS_edwardianed_1503468_WraythManor.zip 2016-02-04 12:14 - 2016-02-04 12:14 - 00403340 _____ C:\Users\Camille\Downloads\MTS_pollycranopolis_1592082_WillowLakeUltimate.zip 2016-02-04 12:12 - 2016-02-04 12:12 - 00212622 _____ C:\Users\Camille\Downloads\VillaCandida@Vidia.zip 2016-02-04 11:22 - 2016-02-04 11:23 - 00270586 _____ C:\Users\Camille\Downloads\ALDORA.zip 2016-02-04 11:20 - 2016-02-04 11:21 - 00228630 _____ C:\Users\Camille\Downloads\Casa de Balcones.zip 2016-02-04 11:20 - 2016-02-04 11:20 - 00300372 _____ C:\Users\Camille\Downloads\Optimum.zip 2016-02-03 17:17 - 2016-02-10 18:14 - 00000000 ____D C:\WINDOWS\Minidump 2016-02-03 17:00 - 2016-02-03 17:00 - 00255637 _____ C:\Users\Camille\Downloads\Elric Gothic Mansion.zip 2016-02-03 16:58 - 2016-02-03 16:58 - 00186189 _____ C:\Users\Camille\Downloads\evi pink as valentines.zip 2016-02-03 00:06 - 2016-02-03 00:06 - 00234053 _____ C:\Users\Camille\Downloads\Modern Living (By FarynGal).zip 2016-02-03 00:05 - 2016-02-03 00:05 - 00232090 _____ C:\Users\Camille\Downloads\Hammerton House.zip 2016-02-03 00:04 - 2016-02-03 00:04 - 00254338 _____ C:\Users\Camille\Downloads\Candy Victorian_By Ayyuff.zip 2016-02-03 00:02 - 2016-02-03 00:03 - 00204605 _____ C:\Users\Camille\Downloads\MB-Aura_of_Luxury.zip 2016-02-03 00:01 - 2016-02-03 00:01 - 00279931 _____ C:\Users\Camille\Downloads\Horizons.zip 2016-02-03 00:00 - 2016-02-03 00:00 - 00188187 _____ C:\Users\Camille\Downloads\Arisian Heights Apple0990.zip 2016-02-02 16:57 - 2016-02-02 16:57 - 00296194 _____ C:\Users\Camille\Downloads\Fleur de Nuit - by Onyxium.zip 2016-02-02 16:55 - 2016-02-02 16:55 - 00356897 _____ C:\Users\Camille\Downloads\Manhattan Apartments.zip 2016-02-02 14:50 - 2016-02-02 14:58 - 17101375 _____ C:\Users\Camille\Downloads\causette 02-févr.-2016 13-11-13.pdf 2016-02-01 11:41 - 2016-02-01 11:41 - 00043390 ____H C:\Users\Camille\Downloads\~WRL3087.tmp 2016-01-31 19:36 - 2016-01-31 19:37 - 00392154 _____ C:\Users\Camille\Downloads\MTS_artrui_1525641_Artrui_RivendellElvenOutpost.rar 2016-01-31 19:35 - 2016-01-31 19:35 - 00224514 _____ C:\Users\Camille\Downloads\MTS_artrui_1479037_Artrui_BadPalast.rar 2016-01-31 19:35 - 2016-01-31 19:35 - 00215628 _____ C:\Users\Camille\Downloads\MTS_ImAries_1480172_TuterMansion.rar 2016-01-31 19:33 - 2016-01-31 19:33 - 00188207 _____ C:\Users\Camille\Downloads\MTS_ibrianv_1477724_MuseApartments.zip 2016-01-31 18:08 - 2016-01-31 18:08 - 00217372 _____ C:\Users\Camille\Downloads\0x00000002!0x0da0009d8cc50004.zip 2016-01-31 18:07 - 2016-01-31 18:07 - 00171992 _____ C:\Users\Camille\Downloads\0x00000002!0x05e0009729860195.zip 2016-01-31 18:05 - 2016-01-31 18:06 - 00189455 _____ C:\Users\Camille\Downloads\212 Sunshine Drive.zip 2016-01-31 12:55 - 2016-01-31 12:55 - 00323554 _____ C:\Users\Camille\Downloads\The Green Paradise.zip 2016-01-31 12:53 - 2016-01-31 12:53 - 00347182 _____ C:\Users\Camille\Downloads\Yokaste.zip 2016-01-31 12:50 - 2016-01-31 12:50 - 00307100 _____ C:\Users\Camille\Downloads\River Chateau (By FarynGal).zip 2016-01-31 12:48 - 2016-01-31 12:49 - 00331634 _____ C:\Users\Camille\Downloads\cindydv.zip 2016-01-28 09:29 - 2016-01-16 07:23 - 08728920 _____ (Microsoft Corp.) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2016-01-28 09:29 - 2016-01-16 07:20 - 06971752 _____ (Microsoft Corp.) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2016-01-28 09:29 - 2016-01-16 06:45 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2016-01-28 09:29 - 2016-01-16 06:35 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2016-01-28 09:28 - 2016-01-16 07:37 - 00202472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll 2016-01-28 09:28 - 2016-01-16 07:36 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2016-01-28 09:28 - 2016-01-16 07:36 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2016-01-28 09:28 - 2016-01-16 07:34 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2016-01-28 09:28 - 2016-01-16 07:24 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll 2016-01-28 09:28 - 2016-01-16 07:23 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll 2016-01-28 09:28 - 2016-01-16 07:23 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll 2016-01-28 09:28 - 2016-01-16 07:23 - 00536256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2016-01-28 09:28 - 2016-01-16 07:23 - 00408120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2016-01-28 09:28 - 2016-01-16 07:23 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2016-01-28 09:28 - 2016-01-16 07:21 - 01750440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2016-01-28 09:28 - 2016-01-16 07:20 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll 2016-01-28 09:28 - 2016-01-16 07:20 - 00431240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll 2016-01-28 09:28 - 2016-01-16 07:20 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2016-01-28 09:28 - 2016-01-16 07:19 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll 2016-01-28 09:28 - 2016-01-16 07:19 - 00405568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2016-01-28 09:28 - 2016-01-16 07:12 - 01415200 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2016-01-28 09:28 - 2016-01-16 07:09 - 01089880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2016-01-28 09:28 - 2016-01-16 07:08 - 01174008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2016-01-28 09:28 - 2016-01-16 07:08 - 00440152 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe 2016-01-28 09:28 - 2016-01-16 06:46 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys 2016-01-28 09:28 - 2016-01-16 06:44 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2016-01-28 09:28 - 2016-01-16 06:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasadhlp.dll 2016-01-28 09:28 - 2016-01-16 06:44 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastlsext.dll 2016-01-28 09:28 - 2016-01-16 06:43 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttpcom.dll 2016-01-28 09:28 - 2016-01-16 06:42 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll 2016-01-28 09:28 - 2016-01-16 06:42 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\sscoreext.dll 2016-01-28 09:28 - 2016-01-16 06:41 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2016-01-28 09:28 - 2016-01-16 06:40 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasauto.dll 2016-01-28 09:28 - 2016-01-16 06:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaui.exe 2016-01-28 09:28 - 2016-01-16 06:40 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasautou.exe 2016-01-28 09:28 - 2016-01-16 06:39 - 00149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll 2016-01-28 09:28 - 2016-01-16 06:38 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll 2016-01-28 09:28 - 2016-01-16 06:38 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2016-01-28 09:28 - 2016-01-16 06:38 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimCfg.dll 2016-01-28 09:28 - 2016-01-16 06:38 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll 2016-01-28 09:28 - 2016-01-16 06:37 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2016-01-28 09:28 - 2016-01-16 06:37 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll 2016-01-28 09:28 - 2016-01-16 06:37 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll 2016-01-28 09:28 - 2016-01-16 06:37 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll 2016-01-28 09:28 - 2016-01-16 06:36 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2016-01-28 09:28 - 2016-01-16 06:36 - 00475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll 2016-01-28 09:28 - 2016-01-16 06:36 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2016-01-28 09:28 - 2016-01-16 06:36 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\SimAuth.dll 2016-01-28 09:28 - 2016-01-16 06:36 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastlsext.dll 2016-01-28 09:28 - 2016-01-16 06:35 - 00383488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2016-01-28 09:28 - 2016-01-16 06:35 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll 2016-01-28 09:28 - 2016-01-16 06:34 - 00610816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll 2016-01-28 09:28 - 2016-01-16 06:34 - 00590848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll 2016-01-28 09:28 - 2016-01-16 06:34 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll 2016-01-28 09:28 - 2016-01-16 06:34 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2016-01-28 09:28 - 2016-01-16 06:34 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttpcom.dll 2016-01-28 09:28 - 2016-01-16 06:33 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll 2016-01-28 09:28 - 2016-01-16 06:33 - 00574976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.UX.EapRequestHandler.dll 2016-01-28 09:28 - 2016-01-16 06:33 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll 2016-01-28 09:28 - 2016-01-16 06:32 - 00621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2016-01-28 09:28 - 2016-01-16 06:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pcaui.exe 2016-01-28 09:28 - 2016-01-16 06:31 - 00851456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll 2016-01-28 09:28 - 2016-01-16 06:31 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2016-01-28 09:28 - 2016-01-16 06:31 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll 2016-01-28 09:28 - 2016-01-16 06:31 - 00343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll 2016-01-28 09:28 - 2016-01-16 06:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe 2016-01-28 09:28 - 2016-01-16 06:30 - 02127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2016-01-28 09:28 - 2016-01-16 06:30 - 01053696 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2016-01-28 09:28 - 2016-01-16 06:30 - 00784384 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2016-01-28 09:28 - 2016-01-16 06:30 - 00157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimCfg.dll 2016-01-28 09:28 - 2016-01-16 06:30 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll 2016-01-28 09:28 - 2016-01-16 06:29 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe 2016-01-28 09:28 - 2016-01-16 06:29 - 00200704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll 2016-01-28 09:28 - 2016-01-16 06:28 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll 2016-01-28 09:28 - 2016-01-16 06:28 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll 2016-01-28 09:28 - 2016-01-16 06:28 - 00884736 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll 2016-01-28 09:28 - 2016-01-16 06:28 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SimAuth.dll 2016-01-28 09:28 - 2016-01-16 06:27 - 00335872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2016-01-28 09:28 - 2016-01-16 06:26 - 00535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll 2016-01-28 09:28 - 2016-01-16 06:26 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll 2016-01-28 09:28 - 2016-01-16 06:26 - 00260608 _____ C:\WINDOWS\system32\MTFServer.dll 2016-01-28 09:28 - 2016-01-16 06:26 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll 2016-01-28 09:28 - 2016-01-16 06:25 - 00510976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll 2016-01-28 09:28 - 2016-01-16 06:25 - 00457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2016-01-28 09:28 - 2016-01-16 06:25 - 00235008 _____ C:\WINDOWS\system32\MTF.dll 2016-01-28 09:28 - 2016-01-16 06:24 - 02057216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2016-01-28 09:28 - 2016-01-16 06:24 - 00613888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2016-01-28 09:28 - 2016-01-16 06:24 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll 2016-01-28 09:28 - 2016-01-16 06:24 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll 2016-01-28 09:28 - 2016-01-16 06:23 - 02050048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2016-01-28 09:28 - 2016-01-16 06:23 - 00687616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2016-01-28 09:28 - 2016-01-16 06:21 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll 2016-01-28 09:28 - 2016-01-16 06:20 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll 2016-01-28 09:28 - 2016-01-16 06:20 - 02597888 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2016-01-28 09:28 - 2016-01-16 06:20 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll 2016-01-28 09:28 - 2016-01-16 06:20 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll 2016-01-28 09:28 - 2016-01-16 06:19 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll 2016-01-28 09:28 - 2016-01-16 06:19 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll 2016-01-28 09:28 - 2016-01-16 06:19 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll 2016-01-28 09:28 - 2016-01-16 06:19 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll 2016-01-28 09:28 - 2016-01-16 06:18 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll 2016-01-28 09:28 - 2016-01-16 06:17 - 05503488 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2016-01-28 09:28 - 2016-01-16 06:16 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll 2016-01-28 09:28 - 2016-01-16 06:16 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll 2016-01-28 09:28 - 2016-01-16 06:15 - 04759040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2016-01-28 09:28 - 2016-01-16 06:14 - 01946624 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2016-01-28 09:28 - 2016-01-16 06:14 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll 2016-01-28 09:28 - 2016-01-16 06:11 - 00653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll 2016-01-28 08:38 - 2016-01-28 08:38 - 01849501 _____ C:\Users\Camille\Downloads\Nelly Oudshoorn Hormones (2) 2016-01-27 23:11 - 2016-01-27 23:11 - 00272236 _____ C:\Users\Camille\Downloads\Gardey histoire medecine.pdf 2016-01-24 21:56 - 2014-09-21 15:58 - 00069845 _____ C:\Users\Camille\0x00000000!0x02bb003866c50003.blueprint 2016-01-24 21:56 - 2014-09-21 15:58 - 00041344 _____ C:\Users\Camille\0x00000303!0x02bb003866c50003.bpi 2016-01-24 21:56 - 2014-09-21 15:58 - 00041148 _____ C:\Users\Camille\0x00000103!0x02bb003866c50003.bpi 2016-01-24 21:56 - 2014-09-21 15:58 - 00039247 _____ C:\Users\Camille\0x00000203!0x02bb003866c50003.bpi 2016-01-24 21:56 - 2014-09-21 15:58 - 00038053 _____ C:\Users\Camille\0x00000003!0x02bb003866c50003.bpi 2016-01-24 21:56 - 2014-09-21 15:58 - 00012456 _____ C:\Users\Camille\0x00000002!0x02bb003866c50003.bpi 2016-01-24 21:56 - 2014-09-21 15:58 - 00000180 _____ C:\Users\Camille\0x00000002!0x02bb003866c50003.trayitem 2016-01-24 21:55 - 2016-01-24 21:55 - 00210600 _____ C:\Users\Camille\Downloads\MTS_Kira_The_First_1463238_RedVilla.rar 2016-01-24 20:49 - 2016-01-24 20:49 - 00219981 _____ C:\Users\Camille\Downloads\MTS_BSUGurl83_1465959_BrownstoneByBSUGurl83.rar 2016-01-24 16:11 - 2016-01-24 16:11 - 00257878 _____ C:\Users\Camille\Downloads\MTS_MrDemeulemeester_1479988_Ror.zip 2016-01-23 18:23 - 2016-01-23 18:23 - 00183535 _____ C:\Users\Camille\Downloads\FLIX-Réservation-8012570009.pdf 2016-01-23 18:23 - 2016-01-23 18:23 - 00026314 _____ C:\Users\Camille\Downloads\FLIX-Étiquette de bagage-8012570009.pdf 2016-01-19 19:53 - 2016-01-19 19:53 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help 2016-01-19 19:53 - 2016-01-19 19:53 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help 2016-01-19 19:52 - 2016-01-19 19:52 - 00000000 ____D C:\WINDOWS\PCHEALTH 2016-01-19 18:01 - 2016-01-19 18:01 - 01849501 _____ C:\Users\Camille\Downloads\Nelly Oudshoorn Hormones (1) 2016-01-19 18:00 - 2016-01-19 18:00 - 01849501 _____ C:\Users\Camille\Downloads\Nelly Oudshoorn Hormones ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2016-02-14 10:54 - 2015-09-09 18:49 - 00004160 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A2B70956-BF9E-4D06-A875-5A4551526390} 2016-02-14 10:52 - 2015-11-22 12:23 - 00000000 ____D C:\ProgramData\Origin 2016-02-14 10:52 - 2015-11-21 23:15 - 00000000 ____D C:\Users\Camille\AppData\Local\MalwareProtectionLive 2016-02-14 10:51 - 2015-09-17 09:23 - 00001200 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2016-02-14 00:28 - 2015-09-17 09:23 - 00001204 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2016-02-13 21:41 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness 2016-02-13 18:48 - 2015-12-18 03:45 - 00000000 ____D C:\Users\Camille 2016-02-13 18:48 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF 2016-02-13 12:12 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache 2016-02-12 21:32 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps 2016-02-11 19:08 - 2015-09-09 19:08 - 00000000 ____D C:\Program Files (x86)\Google 2016-02-11 18:47 - 2015-10-30 20:00 - 00825296 _____ C:\WINDOWS\system32\perfh00C.dat 2016-02-11 18:47 - 2015-10-30 20:00 - 00156094 _____ C:\WINDOWS\system32\perfc00C.dat 2016-02-11 18:47 - 2015-09-23 22:06 - 01851820 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2016-02-11 18:40 - 2015-12-18 03:49 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2016-02-11 18:40 - 2015-12-18 03:45 - 00000000 ____D C:\ProgramData\NVIDIA 2016-02-11 18:40 - 2015-10-30 07:28 - 00524288 ___SH C:\WINDOWS\system32\config\BBI 2016-02-11 18:37 - 2015-09-09 18:32 - 00000000 __RHD C:\Users\Public\AccountPictures 2016-02-11 18:35 - 2015-10-30 20:03 - 00000000 ____D C:\Program Files\Windows Journal 2016-02-11 18:00 - 2015-09-09 19:08 - 00000000 ____D C:\Users\Camille\AppData\Local\Google 2016-02-11 12:16 - 2015-09-16 18:36 - 00000000 ____D C:\WINDOWS\system32\MRT 2016-02-11 12:14 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp 2016-02-11 12:14 - 2015-09-16 18:36 - 146614896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2016-02-11 09:32 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF 2016-02-10 18:32 - 2015-09-17 09:40 - 00000000 ___RD C:\Users\Camille\Dropbox 2016-02-10 18:32 - 2015-09-17 09:23 - 00000000 ____D C:\Users\Camille\AppData\Local\Dropbox 2016-02-09 10:51 - 2015-12-21 14:19 - 00000290 __RSH C:\ProgramData\ntuser.pol 2016-02-03 20:01 - 2015-10-30 08:26 - 00828920 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2016-02-03 20:01 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2016-01-28 23:58 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\system32\F12 2016-01-28 23:58 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog 2016-01-28 23:58 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2016-01-28 23:58 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2016-01-28 23:58 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe 2016-01-28 23:58 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser 2016-01-28 23:58 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr 2016-01-25 23:15 - 2015-09-09 19:23 - 00000000 ____D C:\Users\Camille\AppData\Local\Microsoft Help 2016-01-24 13:20 - 2013-08-22 14:25 - 00000199 _____ C:\WINDOWS\win.ini 2016-01-23 14:34 - 2015-09-20 13:01 - 00000000 ____D C:\Users\Camille\Desktop\Camille 2016-01-20 18:50 - 2016-01-14 12:52 - 00000000 ____D C:\Users\Camille\AppData\Local\ElevatedDiagnostics 2016-01-20 18:19 - 2015-12-18 03:44 - 00412624 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2016-01-19 19:52 - 2015-09-09 19:24 - 00000000 ____D C:\Program Files (x86)\Microsoft Works 2016-01-19 19:52 - 2014-12-25 16:29 - 00000000 ____D C:\ProgramData\Package Cache 2016-01-19 18:03 - 2015-09-09 19:06 - 00000000 __SHD C:\Users\Camille\AppData\LocalLow\EmieUserList 2016-01-19 18:03 - 2015-09-09 18:49 - 00000000 __SHD C:\Users\Camille\AppData\LocalLow\EmieSiteList ==================== Fichiers à la racine de certains dossiers ======= 2015-09-09 18:40 - 2015-09-23 21:36 - 0020041 _____ () C:\Users\Camille\AppData\Local\BTServer.log 2015-12-18 03:44 - 2015-12-18 03:44 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap ================= (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2016-02-06 12:54 ==================== Fin de FRST.txt ============================