Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version:16-05-2016 Exécuté par papy (administrateur) sur DET (18-05-2016 10:00:19) Exécuté depuis C:\Users\papy\Downloads Profils chargés: papy (Profils disponibles: papy) Platform: Windows 8.1 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: IE) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe (Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\System32\SkyDrive.exe (Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagenta.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\ToolbarUpdater.exe (Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe () C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\loggingserver.exe (Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Qualcomm®Atheros®) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe (Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe (Pokki) C:\Users\papy\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2396096 2016-03-30] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13650648 2013-08-21] (Realtek Semiconductor) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [vProt] => "C:\Program Files (x86)\AVG Web TuneUp\vprot.exe" HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [570880 2013-12-27] (Nikon Corporation) HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation) HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-04-22] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [4883216 2016-05-04] (AVG Technologies CZ, s.r.o.) HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [133760 2013-12-24] (Qualcomm®Atheros®) HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd) HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload HKU\S-1-5-21-485677924-41462818-366947018-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8698584 2016-04-15] (Piriform Ltd) HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {2741153a-2c97-11e5-835c-3010b322e966} - "G:\DarkParables_GoldilocksAndTheFallenStar.exe" HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {7eeeb04c-efcb-11e4-8296-3010b322e966} - "F:\setup.exe" HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {8d558d11-6340-11e5-840a-3010b322e966} - "F:\ClawsAndFeathers2.exe" HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {9930d49d-045e-11e6-8621-3010b322e966} - "H:\Lenovo_Suite.exe" HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {c84f444e-643d-11e4-8255-806e6f6e6963} - "E:\Autorun.exe" HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {c881ffac-e362-11e5-85b7-3010b322e966} - "F:\Lenovo_Suite.exe" HKU\S-1-5-21-485677924-41462818-366947018-1001\...\MountPoints2: {d810ed1f-3782-11e5-837e-3010b322e966} - "F:\setup.exe" HKU\S-1-5-21-485677924-41462818-366947018-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> D:\Films\RRT\Fishdom H2O - Hidden Odyssey\fishdom-h2o-hidden-odyssey\Fishdom H2O Screensaver.scr HKU\S-1-5-18\...\Run: [SpybotPostWindows10UpgradeReInstall] => C:\Program Files\Common Files\AV\Spybot - Search and Destroy\Test.exe [1011200 2015-07-28] (Safer-Networking Ltd.) ShellIconOverlayIdentifiers: [ ACloudSynced] -> {5CCE71FA-9F61-4F24-9CD1-98D819B40D68} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudSyncing] -> {C1E1456F-C2D8-4C96-870D-35F1E13941EE} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated) ShellIconOverlayIdentifiers: [ ACloudToBeSynced] -> {307523FA-DDC0-4068-983F-2A6B34627744} => C:\Program Files (x86)\Acer\shellext\x64\shellext_win.dll [2015-05-06] (Acer Incorporated) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 62.197.111.140 109.88.203.3 Tcpip\..\Interfaces\{05B7BF37-FEB1-48C7-B545-E62BEDC8E850}: [DhcpNameServer] 172.19.0.1 Tcpip\..\Interfaces\{06CC247F-A475-47BA-8D1F-22D080E683B1}: [DhcpNameServer] 62.197.111.140 109.88.203.3 Tcpip\..\Interfaces\{5153AC0F-5879-47FE-8FDE-323AAAE37E52}: [DhcpNameServer] 62.197.111.140 109.88.203.3 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms} SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {84DE951B-939D-40CD-84D0-78FE7D414EE6} URL = SearchScopes: HKU\S-1-5-21-485677924-41462818-366947018-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=1015tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=dsp&q={searchTerms} BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-23] (Oracle Corporation) BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.1.8.599\AVG Web TuneUp.dll => Pas de fichier BHO: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-23] (Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\ssv.dll [2015-11-23] (Oracle Corporation) BHO-x32: Pas de nom -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> Pas de fichier BHO-x32: Pas de nom -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> Pas de fichier BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-23] (Oracle Corporation) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - Pas de fichier Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - Pas de fichier Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - Pas de fichier FireFox: ======== FF ProfilePath: C:\Users\papy\AppData\Roaming\Mozilla\Firefox\Profiles\pabxspk4.default FF SelectedSearchEngine: AVG Secure Search FF Homepage: hxxps://mysearch.avg.com/?cid={918310EF-2D43-44C9-A6BE-E5498D74EE56}&mid=e2d5c75a276347cda126e159f5c60095-9afa3f30c00ab142e5b58b532dab7aee87aaee92&lang=fr&ds=AVG&coid=avgtbavg&cmpid=0715tb&pr=fr&d=2015-05-03 08:59:08&v=4.1.8.599&pid=wtu&sg=&sap=hp FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-13] () FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-23] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-23] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-13] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2015-07-23] (Adobe Systems, Inc.) FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.2.1\\npsitesafety.dll [Pas de fichier] FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] () FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-23] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files (x86)\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-23] (Oracle Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-03-22] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-03-22] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2013-08-06] () FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\papy\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-10] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: vasco.com/VascoCardReaderPlugin -> C:\Users\papy\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin.dll [2014-10-27] (VASCO Data Security) FF Plugin HKU\S-1-5-21-485677924-41462818-366947018-1001: vasco.com/VascoCardReaderPlugin64 -> C:\Users\papy\AppData\Roaming\VASCO\VascoCardReaderPlugin\3.2.3.4\npVascoCardReaderPlugin64.dll [2014-10-27] (VASCO Data Security) FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-12-01] FF Extension: Modify Headers - C:\Users\papy\AppData\Roaming\Mozilla\Firefox\Profiles\pabxspk4.default\Extensions\{b749fc7c-e949-447f-926c-3f4eed6accfe}.xpi [2016-05-07] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor => non trouvé(e) Chrome: ======= CHR HomePage: Default -> mysearch.avg.com/?rvt=1 CHR DefaultSearchURL: Default -> hxxps://mysearch.avg.com/search?rvt=1&sap=dsp&q={searchTerms} CHR DefaultSearchKeyword: Default -> https://mysearch.avg.com CHR DefaultSuggestURL: Default -> hxxps://toolbar.avg.com/acp?q={searchTerms}&o=1 CHR Profile: C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Slides) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-11] CHR Extension: (Google Docs) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-11] CHR Extension: (Google Drive) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22] CHR Extension: (YouTube) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (Adblock Plus) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09] CHR Extension: (AVG Secure Search) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\chfdnecihphmhljaaejmgoiahnihplgn [2015-12-23] CHR Extension: (Recherche Google) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-29] CHR Extension: (Google Sheets) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-11] CHR Extension: (SiteAdvisor) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-07-02] CHR Extension: (Google Docs hors connexion) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15] CHR Extension: (Modify Headers for Google Chrome™) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\innpjfdalfhpcoinfnehdnbkglpmogdi [2016-03-14] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02] CHR Extension: (Gmail) - C:\Users\papy\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-11] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx ==================== Services (Avec liste blanche) ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [318592 2013-12-24] (Windows (R) Win 7 DDK provider) [Fichier non signé] S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [638968 2016-05-04] (AVG Technologies CZ, s.r.o.) R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5155904 2016-05-04] (AVG Technologies CZ, s.r.o.) R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1078544 2016-04-22] (AVG Technologies CZ, s.r.o.) R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [710232 2016-05-04] (AVG Technologies CZ, s.r.o.) R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860760 2016-04-18] (Acer Incorporated) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd) R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-04-24] (WildTangent) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163200 2016-03-30] (NVIDIA Corporation) R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-28] (Intel(R) Corporation) [Fichier non signé] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-28] (Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-16] (Intel Corporation) S2 libusbd; C:\Windows\SysWOW64\libusbd-nt.exe [18944 2005-03-09] (hxxp://libusb-win32.sourceforge.net) [Fichier non signé] R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-03-30] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-03-30] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-03-30] (NVIDIA Corporation) R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate) R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] () R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) S2 SkypeUpdate; D:\Utilitairesl\skype\Updater\Updater.exe [327296 2015-07-09] (Skype Technologies) S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Fichier non signé] R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [233216 2014-06-24] (acer) R2 vToolbarUpdater40.2.1; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.2.1\ToolbarUpdater.exe [1926544 2015-11-24] (AVG Secure Search) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation) S3 McAWFwk; c:\PROGRA~1\COMMON~1\mcafee\actwiz\mcawfwk.exe [X] S2 mccspsvc; "C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe" [X] S2 WtuSystemSupport; "C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe" [X] ===================== Pilotes (Avec liste blanche) ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3881472 2013-12-12] (Qualcomm Atheros Communications, Inc.) S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [303616 2015-05-01] () [Fichier non signé] S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.) R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.) R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [307456 2016-04-20] (AVG Technologies CZ, s.r.o.) R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.) R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.) R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.) R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [248576 2016-03-29] (AVG Technologies CZ, s.r.o.) R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [51968 2016-04-14] (AVG Technologies CZ, s.r.o.) R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71936 2016-05-04] (AVG Technologies CZ, s.r.o.) R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.) S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation) R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-12-24] (Qualcomm Atheros) R3 dtlitescsibus; C:\Windows\System32\drivers\dtlitescsibus.sys [30352 2015-04-30] (Disc Soft Ltd) S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation) S3 libusb0; C:\Windows\SysWOW64\drivers\libusb0.sys [33792 2005-03-09] () [Fichier non signé] S2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [35328 2015-05-01] () [Fichier non signé] R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation) S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-03-30] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-03-21] (NVIDIA Corporation) R2 RtkIOAC60; C:\Windows\system32\DRIVERS\RtkIOAC60.sys [29912 2013-07-19] (Realtek semiconductor corp) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2016-05-18 10:00 - 2016-05-18 10:00 - 00027592 _____ C:\Users\papy\Downloads\FRST.txt 2016-05-18 09:59 - 2016-05-18 10:00 - 00000000 ____D C:\FRST 2016-05-18 09:58 - 2016-05-18 09:58 - 02382336 _____ (Farbar) C:\Users\papy\Downloads\FRST64.exe 2016-05-18 07:50 - 2016-05-18 07:50 - 00002778 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2016-05-18 07:49 - 2016-05-18 07:50 - 00000000 ____D C:\Program Files\CCleaner 2016-05-18 07:49 - 2016-05-18 07:49 - 00000838 _____ C:\Users\Public\Desktop\CCleaner.lnk 2016-05-18 07:48 - 2016-05-18 07:48 - 06882192 _____ (Piriform Ltd) C:\Users\papy\Downloads\ccsetup517.exe 2016-05-16 17:51 - 2005-10-19 23:07 - 07029478 _____ C:\Users\papy\Downloads\Setup_Columbus_Terrain_Mod.exe 2016-05-16 17:50 - 2016-05-16 17:50 - 07012946 _____ C:\Users\papy\Downloads\Setup_Columbus_Terrain_Mod.zip 2016-05-15 08:25 - 2016-05-17 21:47 - 00001515 _____ C:\Users\papy\Desktop\NoahsArk - Raccourci.lnk 2016-05-15 08:23 - 2016-05-15 08:23 - 00000000 ____D C:\Users\papy\AppData\Roaming\The Chronicles of Noah's Ark 2016-05-14 17:40 - 2016-05-14 17:40 - 00416145 _____ C:\Users\papy\Downloads\XLN_RN_XLNation_Forest_Pack_V1.1.patch 2016-05-13 18:39 - 2016-05-13 18:39 - 05995712 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe 2016-05-13 18:24 - 2012-04-10 11:43 - 49925083 ____N C:\Users\papy\Downloads\RHM2.exe 2016-05-13 18:18 - 2016-05-13 18:18 - 23390907 _____ C:\Users\papy\Downloads\LasVegas-McMansions.zip 2016-05-13 18:16 - 2016-05-13 18:16 - 07927941 _____ C:\Users\papy\Downloads\NYC Taxi Cab Mod .rar 2016-05-13 18:15 - 2016-05-13 18:15 - 49884616 _____ C:\Users\papy\Downloads\RHM2.exe.zip 2016-05-13 18:14 - 2016-05-13 18:14 - 02874693 _____ C:\Users\papy\Downloads\Super Bank XL Nation - Center of Commerce.zip 2016-05-13 18:06 - 2016-05-13 18:06 - 32014543 _____ C:\Users\papy\Downloads\XLN_PLT_UltimateMappackofRealworldmaps_UIM_1.0_0.zip 2016-05-13 18:06 - 2016-05-13 18:06 - 09033802 _____ C:\Users\papy\Downloads\XLN_skull613_Hiroshima_UIM_1.0.zip 2016-05-13 18:06 - 2016-05-13 18:06 - 03833342 _____ C:\Users\papy\Downloads\XLN_skullz_New_York_1.1_NoGM_and_GM.zip 2016-05-13 18:04 - 2016-05-13 18:04 - 12888578 _____ C:\Users\papy\Downloads\NEXL - Trams - NEXL Team.zip 2016-05-13 18:01 - 2016-05-13 18:03 - 131987045 _____ C:\Users\papy\Downloads\2014 retail MEGA PACK.rar 2016-05-13 10:42 - 2016-05-13 18:24 - 00000000 ____D C:\Users\papy\Downloads\__MACOSX 2016-05-13 10:36 - 2016-05-13 10:36 - 08535023 _____ C:\Users\papy\Downloads\XLNation_UserInterfaceMod_v1.79.9.zip 2016-05-11 07:27 - 2016-04-22 22:54 - 25816576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-05-11 07:27 - 2016-03-31 08:50 - 01307328 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-05-11 07:27 - 2016-03-31 05:40 - 00747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-05-11 07:27 - 2016-03-29 03:42 - 07446368 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-05-11 07:26 - 2016-04-22 22:15 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-05-11 07:26 - 2016-04-22 22:14 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-05-11 07:26 - 2016-04-22 22:08 - 06052864 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-05-11 07:26 - 2016-04-22 22:06 - 20349952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-05-11 07:26 - 2016-04-22 22:00 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-05-11 07:26 - 2016-04-22 21:35 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-05-11 07:26 - 2016-04-22 21:29 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-05-11 07:26 - 2016-04-22 21:24 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll 2016-05-11 07:26 - 2016-04-22 21:23 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-05-11 07:26 - 2016-04-22 21:19 - 15414784 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-05-11 07:26 - 2016-04-22 21:17 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-05-11 07:26 - 2016-04-22 21:14 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-05-11 07:26 - 2016-04-22 21:14 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-05-11 07:26 - 2016-04-22 21:14 - 00379392 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-05-11 07:26 - 2016-04-22 21:12 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-05-11 07:26 - 2016-04-22 20:58 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-05-11 07:26 - 2016-04-22 20:58 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll 2016-05-11 07:26 - 2016-04-22 20:54 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-05-11 07:26 - 2016-04-22 20:53 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-05-11 07:26 - 2016-04-22 20:52 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-05-11 07:26 - 2016-04-22 20:52 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-05-11 07:26 - 2016-04-22 20:52 - 00330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-05-11 07:26 - 2016-04-22 20:51 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-05-11 07:26 - 2016-04-22 20:40 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-05-11 07:26 - 2016-04-22 20:29 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-05-11 07:26 - 2016-04-22 20:27 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-05-11 07:26 - 2016-04-22 20:24 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-05-11 07:26 - 2016-04-22 20:23 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-05-11 07:26 - 2016-04-10 09:48 - 00738096 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll 2016-05-11 07:26 - 2016-04-10 09:48 - 00613624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll 2016-05-11 07:26 - 2016-04-10 06:21 - 01763376 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll 2016-05-11 07:26 - 2016-04-10 06:21 - 01489088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll 2016-05-11 07:26 - 2016-04-10 06:14 - 01380600 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll 2016-05-11 07:26 - 2016-04-10 00:07 - 01097728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll 2016-05-11 07:26 - 2016-04-09 23:58 - 00534016 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll 2016-05-11 07:26 - 2016-04-09 23:50 - 00375296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll 2016-05-11 07:26 - 2016-04-06 23:13 - 00561960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys 2016-05-11 07:26 - 2016-04-06 23:13 - 00137976 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-05-11 07:26 - 2016-04-06 20:20 - 00201728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-05-11 07:26 - 2016-04-06 20:19 - 00401920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-05-11 07:26 - 2016-04-06 20:19 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-05-11 07:26 - 2016-04-06 19:49 - 00120384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-05-11 07:26 - 2016-04-06 19:40 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2016-05-11 07:26 - 2016-04-06 18:57 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-05-11 07:26 - 2016-04-06 18:52 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-05-11 07:26 - 2016-04-06 18:20 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2016-05-11 07:26 - 2016-04-06 17:48 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-05-11 07:25 - 2016-04-11 08:21 - 00074584 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\volmgr.sys 2016-05-11 07:25 - 2016-04-10 07:37 - 01549144 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2016-05-11 07:25 - 2016-04-10 01:29 - 04169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-05-10 08:29 - 2016-05-17 21:47 - 00000965 _____ C:\Users\papy\Desktop\Fishdom H2O - Raccourci.lnk 2016-05-10 07:20 - 2016-05-10 07:20 - 00003334 _____ C:\Windows\System32\Tasks\AcerCloud 2016-05-09 12:18 - 2016-05-17 21:22 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-05-09 12:17 - 2016-05-09 12:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-05-09 12:17 - 2016-05-09 12:17 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-05-09 12:17 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-05-09 12:17 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-05-09 12:17 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-05-09 10:55 - 2016-05-17 21:47 - 00001403 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2016-05-09 10:55 - 2016-05-09 11:05 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2016-05-09 10:55 - 2016-05-09 10:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2016-05-09 10:55 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2016-05-07 12:54 - 2016-05-07 12:54 - 00000000 ____D C:\Users\papy\Documents\SimCity 2016-05-07 12:49 - 2016-05-07 12:53 - 00000000 ____D C:\Program Files (x86)\SimCity v10 2016-05-04 16:58 - 2016-05-04 16:58 - 00071936 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avguniva.sys 2016-05-03 08:46 - 2016-05-03 08:57 - 00000925 _____ C:\siw_debug.txt 2016-05-03 08:46 - 2016-05-03 08:57 - 00000000 ____D C:\Users\papy\AppData\Roaming\siw_tmp 2016-05-03 08:46 - 2016-05-03 08:46 - 00000000 ____D C:\Users\papy\AppData\Local\CrashRpt 2016-05-02 12:13 - 2016-05-17 21:47 - 00000969 _____ C:\Users\papy\Desktop\DarkParables_RiseoftheSnowQueen - Raccourci.lnk 2016-05-02 12:13 - 2016-05-02 12:13 - 00000000 ____D C:\Users\papy\AppData\Roaming\Blue Tea Games 2016-05-02 12:09 - 2016-03-21 22:01 - 00109632 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2016-05-02 12:09 - 2016-03-21 22:01 - 00100416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2016-05-02 12:09 - 2016-03-21 22:01 - 00056384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2016-04-28 08:11 - 2016-04-28 08:11 - 00000000 ____D C:\Program Files (x86)\Microsoft ASP.NET 2016-04-28 08:06 - 2016-04-28 08:06 - 00084976 _____ (Gibson Research Corp., Laguna Niguel, California, USA.) C:\Users\papy\Downloads\never10.exe 2016-04-26 16:20 - 2016-04-26 16:20 - 00568151 _____ C:\Users\papy\Desktop\BE12 0624 2352 5092 2016-04-26 16-19-59 3.txt 2016-04-26 08:11 - 2016-04-26 08:11 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-04-26 08:11 - 2016-04-26 08:11 - 00000000 ___SD C:\Windows\system32\GWX 2016-04-25 12:35 - 2016-05-17 21:47 - 00001439 _____ C:\Users\papy\Desktop\Experiment - Raccourci.lnk 2016-04-25 12:34 - 2016-04-25 12:35 - 00000000 ____D C:\Users\papy\Documents\Exp_Saves 2016-04-25 12:27 - 2016-05-17 21:47 - 00001209 _____ C:\Users\papy\Desktop\frozen-kingdom - Raccourci.lnk 2016-04-25 12:26 - 2016-04-25 12:26 - 00000000 ____D C:\Users\papy\AppData\Roaming\Frozen Kingdom 2016-04-25 12:23 - 2016-05-17 21:47 - 00001529 _____ C:\Users\papy\Desktop\JewelQuestSleeplessStar - Raccourci.lnk 2016-04-25 12:22 - 2016-05-17 21:47 - 00000723 _____ C:\Users\papy\Desktop\ZY-Fishdom 3 - Raccourci.lnk 2016-04-25 12:22 - 2016-05-10 08:00 - 00000000 ____D C:\Users\papy\AppData\Roaming\Playrix Entertainment 2016-04-25 12:19 - 2016-05-17 21:47 - 00000682 _____ C:\Users\papy\Desktop\floria - Raccourci.lnk 2016-04-25 12:18 - 2016-04-25 12:19 - 00000000 ____D C:\Users\papy\AppData\Roaming\Floria 2016-04-25 12:11 - 2016-04-25 12:23 - 00000000 ____D C:\Users\Public\Documents\iWin 2016-04-25 12:07 - 2016-05-17 21:47 - 00000944 _____ C:\Users\papy\Desktop\TheEnchantingIslands - Raccourci.lnk 2016-04-24 19:04 - 2016-04-24 19:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vulkan 2016-04-24 19:04 - 2016-04-24 19:04 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2016-04-24 19:04 - 2016-03-22 04:25 - 00532536 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2016-04-24 19:04 - 2016-03-22 04:25 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2016-04-24 19:04 - 2016-03-22 04:10 - 00112184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2016-04-24 19:04 - 2016-03-16 23:30 - 00128792 _____ C:\Windows\SysWOW64\vulkan-1.dll 2016-04-24 19:04 - 2016-03-16 23:29 - 00127768 _____ C:\Windows\system32\vulkan-1.dll 2016-04-24 19:04 - 2016-03-16 23:29 - 00041752 _____ C:\Windows\SysWOW64\vulkaninfo.exe 2016-04-24 19:04 - 2016-03-16 23:28 - 00045848 _____ C:\Windows\system32\vulkaninfo.exe 2016-04-24 19:01 - 2016-03-24 12:58 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2016-04-24 19:01 - 2016-03-24 12:58 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 42923576 _____ C:\Windows\system32\nvcompiler.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 37567424 _____ C:\Windows\SysWOW64\nvcompiler.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 31555008 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 25321408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 21355248 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 20897416 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 17748712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 17342392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 17248408 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 12567608 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2016-04-24 19:01 - 2016-03-22 06:12 - 10550736 _____ C:\Windows\system32\nvptxJitCompiler.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 08659472 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 03235896 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 02809280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436472.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 01573432 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436472.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00959544 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00889400 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00753208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00695864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00678520 _____ C:\Windows\system32\nvfatbinaryLoader.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00571912 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00473592 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00391632 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00153392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00129208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2016-04-24 19:01 - 2016-03-22 06:12 - 00000139 _____ C:\Windows\SysWOW64\nv-vk32.json 2016-04-24 19:01 - 2016-03-22 06:12 - 00000139 _____ C:\Windows\system32\nv-vk64.json 2016-04-24 18:55 - 2016-03-30 03:05 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2016-04-22 07:39 - 2016-04-22 07:39 - 00000000 ____D C:\Users\papy\AppData\Roaming\Gold Casual Games 2016-04-22 07:38 - 2016-04-22 07:38 - 00000000 ____D C:\objets_caches 2016-04-20 14:17 - 2016-04-20 14:17 - 00307456 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2016-05-18 09:39 - 2015-09-30 18:05 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-05-18 09:22 - 2015-04-11 09:38 - 00001084 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-05-18 08:11 - 2015-04-11 08:36 - 00003592 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-485677924-41462818-366947018-1001 2016-05-18 08:04 - 2015-04-11 08:36 - 00000000 ____D C:\Users\papy\OneDrive 2016-05-18 08:03 - 2015-04-11 08:29 - 00000000 ____D C:\Users\papy\AppData\Local\SweetLabs App Platform 2016-05-18 08:01 - 2015-04-11 09:38 - 00001080 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-05-18 08:01 - 2014-11-04 18:53 - 00000000 ____D C:\ProgramData\NVIDIA 2016-05-18 08:01 - 2013-08-22 16:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-05-18 07:59 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\BBI 2016-05-18 07:31 - 2015-04-11 08:41 - 00003912 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{473BC33B-0EE9-440F-8583-5CE828319A56} 2016-05-17 22:50 - 2016-01-02 14:04 - 00000000 ____D C:\Steam 2016-05-17 22:06 - 2015-12-01 17:56 - 00000000 ____D C:\ProgramData\MFAData 2016-05-17 21:47 - 2016-04-16 09:45 - 00000876 _____ C:\Users\papy\Desktop\HelloVenice - Raccourci.lnk 2016-05-17 21:47 - 2016-04-11 08:29 - 00001120 _____ C:\Users\papy\Desktop\CharmTale2 - Raccourci.lnk 2016-05-17 21:47 - 2016-04-06 18:20 - 00000836 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Prison architect.lnk 2016-05-17 21:47 - 2016-01-09 09:25 - 00001334 _____ C:\Users\papy\Desktop\cm2 - Raccourci.lnk 2016-05-17 21:47 - 2016-01-04 08:49 - 00000672 _____ C:\Users\papy\Desktop\JMS - Raccourci.lnk 2016-05-17 21:47 - 2015-12-28 11:41 - 00001521 _____ C:\Users\papy\Desktop\LostInReefs3 - Raccourci.lnk 2016-05-17 21:47 - 2015-12-14 14:02 - 00000654 _____ C:\Users\papy\Desktop\VillageQuest - Raccourci.lnk 2016-05-17 21:47 - 2015-12-14 13:17 - 00000796 _____ C:\Users\papy\Desktop\ArtifactsOfEternity - Raccourci.lnk 2016-05-17 21:47 - 2015-12-01 17:32 - 00001239 _____ C:\Users\papy\Desktop\Téléchargements - Raccourci.lnk 2016-05-17 21:47 - 2015-09-23 09:24 - 00000664 _____ C:\Users\papy\Desktop\SafariVenture - Raccourci.lnk 2016-05-17 21:47 - 2015-09-05 11:37 - 00000666 _____ C:\Users\papy\Desktop\Musique - Raccourci.lnk 2016-05-17 21:47 - 2015-07-26 10:33 - 00001422 _____ C:\Users\papy\Desktop\Photoshop - Raccourci.lnk 2016-05-17 21:47 - 2015-07-26 10:18 - 00000935 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk 2016-05-17 21:47 - 2015-07-26 10:17 - 00000905 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk 2016-05-17 21:47 - 2015-07-26 10:17 - 00000880 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6.lnk 2016-05-17 21:47 - 2015-07-26 10:16 - 00000852 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6.lnk 2016-05-17 21:47 - 2015-07-26 10:15 - 00001539 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk 2016-05-17 21:47 - 2015-07-26 10:15 - 00001000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk 2016-05-17 21:47 - 2015-07-17 16:27 - 00001496 _____ C:\Users\papy\Desktop\TheTreasuresOfMontezuma4 - Raccourci.lnk 2016-05-17 21:47 - 2015-06-06 10:24 - 00001171 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2016-05-17 21:47 - 2015-04-23 11:45 - 00000788 _____ C:\Users\Public\Desktop\Azteca.lnk 2016-05-17 21:47 - 2015-04-14 16:05 - 07153152 ___SH C:\Users\papy\Desktop\Thumbs.db 2016-05-17 21:47 - 2015-04-13 12:26 - 00002001 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jouer à Puzzle Express.lnk 2016-05-17 21:47 - 2015-04-13 12:26 - 00000796 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ArtifactsOfEternity - Raccourci.lnk 2016-05-17 21:47 - 2015-04-13 12:26 - 00000641 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Document.lnk 2016-05-17 21:47 - 2015-04-11 10:17 - 00001965 _____ C:\Users\Public\Desktop\Jouer à Puzzle Express.lnk 2016-05-17 21:47 - 2015-04-11 10:07 - 00001939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Game Manager.lnk 2016-05-17 21:47 - 2015-04-11 10:07 - 00001248 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Encore plus de jeux.lnk 2016-05-17 21:47 - 2015-04-11 09:39 - 00002217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-05-17 21:47 - 2015-04-11 08:33 - 00002428 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC App Store.lnk 2016-05-17 21:47 - 2015-04-11 08:33 - 00002402 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pokki Start Menu.lnk 2016-05-17 21:47 - 2015-04-11 08:30 - 00001458 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk 2016-05-17 21:47 - 2015-04-11 08:29 - 00000469 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Documents.lnk 2016-05-17 21:47 - 2015-04-11 08:29 - 00000467 _____ C:\Users\papy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pictures.lnk 2016-05-17 21:47 - 2014-11-04 19:14 - 00002000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk 2016-05-17 21:47 - 2014-11-04 19:01 - 00001943 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spotify.lnk 2016-05-17 21:47 - 2014-07-14 17:38 - 00002550 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games App - acer.lnk 2016-05-17 15:15 - 2014-11-02 02:18 - 00811108 _____ C:\Windows\system32\perfh00C.dat 2016-05-17 15:15 - 2014-11-02 02:18 - 00159206 _____ C:\Windows\system32\perfc00C.dat 2016-05-17 15:15 - 2014-03-18 12:03 - 01824010 _____ C:\Windows\system32\PerfStringBackup.INI 2016-05-17 15:15 - 2013-08-22 15:36 - 00000000 ____D C:\Windows\Inf 2016-05-17 07:57 - 2015-04-11 16:16 - 00000000 ____D C:\Users\papy\Desktop\Document 2016-05-16 19:28 - 2015-05-10 08:57 - 00000000 ____D C:\Users\papy\AppData\Roaming\vlc 2016-05-16 18:55 - 2015-04-11 13:02 - 00000000 ____D C:\Users\papy\AppData\Local\ElevatedDiagnostics 2016-05-16 17:33 - 2015-12-01 17:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG Zen 2016-05-16 16:16 - 2014-11-04 19:07 - 00000000 ____D C:\ProgramData\Temp 2016-05-15 08:24 - 2015-05-09 17:35 - 00000000 ____D C:\Jeux 2016-05-15 08:12 - 2016-01-03 16:23 - 00000000 ____D C:\Users\papy\Desktop\Calendrier paiements 2016-05-14 17:07 - 2015-04-11 08:37 - 00000000 ____D C:\Users\papy\AppData\Local\CrashDumps 2016-05-14 07:34 - 2013-08-22 17:20 - 00000000 ____D C:\Windows\CbsTemp 2016-05-14 07:16 - 2013-08-22 15:25 - 00262144 ___SH C:\Windows\system32\config\ELAM 2016-05-13 18:39 - 2015-09-30 18:05 - 00003890 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-05-13 10:46 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\system32\NDF 2016-05-12 08:12 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\rescache 2016-05-11 22:08 - 2014-07-14 17:36 - 00829944 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-05-11 22:08 - 2014-07-14 17:36 - 00176632 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-05-11 15:09 - 2013-08-22 17:36 - 00000000 ____D C:\Windows\AppReadiness 2016-05-11 12:07 - 2013-08-22 16:44 - 04993320 _____ C:\Windows\system32\FNTCACHE.DAT 2016-05-11 07:56 - 2015-04-13 11:32 - 00000000 ____D C:\Windows\system32\MRT 2016-05-11 07:56 - 2014-03-18 11:45 - 00000000 ____D C:\Program Files\Windows Journal 2016-05-11 07:46 - 2015-04-13 11:32 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-05-11 07:25 - 2016-04-13 07:31 - 01737088 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-05-11 07:25 - 2016-04-13 07:31 - 01663184 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2016-05-11 07:25 - 2016-04-13 07:31 - 01523208 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2016-05-11 07:25 - 2016-04-13 07:31 - 01501488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-05-11 07:25 - 2016-04-13 07:31 - 01490120 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2016-05-11 07:25 - 2016-04-13 07:31 - 01358952 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2016-05-11 07:25 - 2016-04-13 07:31 - 00246784 _____ (Microsoft Corporation) C:\Windows\system32\microsoft-windows-system-events.dll 2016-05-11 07:17 - 2015-04-11 09:38 - 00004056 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-05-11 07:17 - 2015-04-11 09:38 - 00003820 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-05-10 17:12 - 2015-12-01 17:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG 2016-05-10 07:19 - 2014-11-04 19:04 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer 2016-05-10 07:17 - 2015-04-11 08:31 - 00000000 ____D C:\Users\papy\AppData\Local\clear.fi 2016-05-09 12:42 - 2015-05-03 08:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee 2016-05-09 10:55 - 2015-12-01 20:53 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2016-05-04 18:21 - 2016-04-07 10:27 - 00000000 ____D C:\Program Files\Recuva 2016-05-02 16:07 - 2016-01-21 12:48 - 00000000 ____D C:\Users\papy\Desktop\Jeux 2016-05-02 12:10 - 2015-09-30 14:42 - 00000000 ____D C:\Users\papy\AppData\Local\NVIDIA Corporation 2016-05-02 12:10 - 2015-04-11 08:31 - 00000000 ____D C:\Users\papy\AppData\Local\NVIDIA 2016-05-01 16:11 - 2016-01-04 08:49 - 00000000 ____D C:\Users\papy\AppData\Roaming\Jewel Match Snowscapes 2016-04-29 08:25 - 2013-08-22 17:36 - 00000000 ___HD C:\Program Files\WindowsApps 2016-04-28 08:13 - 2015-05-06 10:35 - 00000000 ____D C:\Program Files\Microsoft Silverlight 2016-04-28 08:13 - 2015-05-06 10:35 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight 2016-04-28 08:11 - 2015-05-06 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2016-04-27 14:16 - 2015-07-20 07:52 - 00003442 _____ C:\Windows\System32\Tasks\BacKGroundAgent 2016-04-27 14:16 - 2014-07-14 18:16 - 00000000 ___HD C:\OEM 2016-04-25 12:06 - 2015-05-19 18:53 - 00000000 ____D C:\Users\papy\Documents\My Games 2016-04-24 19:05 - 2014-11-04 18:52 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-04-24 19:03 - 2014-11-04 18:52 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-04-24 18:33 - 2015-08-26 11:35 - 00000000 ____D C:\Program Files (x86)\MarkAny 2016-04-24 18:27 - 2015-08-26 11:30 - 00000000 ____D C:\Users\papy\AppData\Roaming\Samsung 2016-04-24 18:27 - 2015-08-26 11:30 - 00000000 ____D C:\Users\papy\AppData\Local\Samsung 2016-04-24 18:27 - 2015-08-26 11:28 - 00000000 ____D C:\ProgramData\Samsung 2016-04-24 18:27 - 2015-08-26 11:28 - 00000000 ____D C:\Program Files (x86)\Samsung 2016-04-24 18:27 - 2014-11-04 18:43 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-04-24 18:17 - 2015-12-01 22:47 - 00000085 _____ C:\Windows\wininit.ini ==================== Fichiers à la racine de certains dossiers ======= 2015-09-30 12:07 - 2015-09-30 12:06 - 0661456 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcp110.dll 2015-09-30 12:04 - 2015-09-30 12:04 - 0660128 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcp120.dll 2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\Digital Mono 2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\DirectoryService 2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ____N () C:\Users\papy\AppData\Roaming\Displays 2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ___RH () C:\ProgramData\Documentation 2014-11-04 18:56 - 2014-11-04 18:56 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2015-05-20 12:54 - 2015-05-20 12:54 - 0000268 ___RH () C:\ProgramData\Drum Kits 2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\Examples 2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\External Build System 2015-05-20 12:54 - 2015-05-20 12:54 - 0000012 ___RH () C:\ProgramData\Filesystems 2015-05-20 12:54 - 2015-05-20 12:54 - 0000020 ____H () C:\ProgramData\PKP_DLes.DAT 2015-05-20 12:54 - 2016-03-11 13:01 - 0000020 ____H () C:\ProgramData\PKP_DLet.DAT 2015-05-20 12:54 - 2015-05-20 12:54 - 0000020 ____H () C:\ProgramData\PKP_DLev.DAT Fichiers à déplacer ou supprimer: ==================== C:\Users\papy\d3dx9_43.dll ==================== Bamital & volsnap ================= (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2016-05-10 07:49 ==================== Fin de FRST.txt ============================