Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2016 Exécuté par User (administrateur) sur MEJINN-PC (01-09-2016 21:34:20) Exécuté depuis D:\Desktop Profils chargés: User (Profils disponibles: User) Platform: Windows 7 Home Premium Service Pack 1 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: FF) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe () C:\Windows\SysWOW64\ASGT.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe (Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe () C:\Program Files (x86)\D-Link\DWA-131\WlanWpsSvc.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe () C:\Users\User\AppData\Roaming\cacaoweb\cacaoweb.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Sony) C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (© 2015 Microsoft Corporation) C:\Users\User\AppData\Local\Microsoft\BingSvc\BingSvc.exe (Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.) C:\Users\User\AppData\Local\Akamai\netsession_win.exe () C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe (McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (D-Link Corp.) C:\Program Files (x86)\D-Link\DWA-131\wirelesscm.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe (Joyent, Inc) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe (NVIDIA Corporation) C:\ProgramData\NVIDIA Corporation\GeForce Experience\Update\setup.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registre (Avec liste blanche) =========================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2918656 2013-10-25] (ESET) HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1767944 2016-06-14] (NVIDIA Corporation) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15642744 2016-03-30] (Logitech Inc.) HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-01-07] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2312896 2016-02-12] (Adobe Systems Incorporated) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [uTorrent] => C:\Users\User\AppData\Roaming\uTorrent\uTorrent.exe [1972224 2016-08-12] (BitTorrent Inc.) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [cacaoweb] => C:\Users\User\AppData\Roaming\cacaoweb\cacaoweb.exe [563896 2016-08-06] () HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [puush] => C:\Program Files (x86)\puush\puush.exe HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [IDMan] => C:\Users\User\AppData\Local\Temp\Rar$EXa0.532\Crack\IDMan.exe /onboot <===== ATTENTION HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [457088 2015-09-23] (Sony) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2857248 2016-08-23] (Valve Corporation) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [BingSvc] => C:\Users\User\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-12] (© 2015 Microsoft Corporation) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [{3E75652D-99B1-417E-B163-BEF33CAD3F16}] => "D:\Downloads\LeagueofLegends_EUW_Installer_9_15_2014.exe" /cmdloc "HKCU\Software\Riot Games AiTemp\{3E75652D-99B1-417E-B163-BEF33CAD3F16}" HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [Akamai NetSession Interface] => C:\Users\User\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53123712 2016-05-17] (Skype Technologies S.A.) HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\MountPoints2: E - E:\install.exe HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\MountPoints2: {3c7d4da1-3518-11e5-9ae4-08606ec5a755} - G:\startme.exe HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Mystify.scr [242688 2010-11-20] (Microsoft Corporation) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-10-23] (Microsoft Corporation) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-01-22] () ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll Pas de fichier ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll Pas de fichier ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX64.dll Pas de fichier ShellIconOverlayIdentifiers: [IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Users\User\AppData\Local\Temp\Rar$EXa0.772\Crack\IDMShellExt64.dll [2014-04-21] (Tonec Inc.) ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX32.dll Pas de fichier ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX32.dll Pas de fichier ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\User\AppData\Local\MEGAsync\ShellExtX32.dll Pas de fichier Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2014-06-07] ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wireless Connection Manager.lnk [2013-10-30] ShortcutTarget: Wireless Connection Manager.lnk -> C:\Program Files (x86)\D-Link\DWA-131\wirelesscm.exe (D-Link Corp.) Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2014-07-23] () GroupPolicy: Restriction - Chrome <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) ProxyEnable: [.DEFAULT] => Proxy est activé. ProxyServer: [.DEFAULT] => http=127.0.0.1:57207;https=127.0.0.1:57207 Hosts: Fichier hosts non détecté dans le dossier par défaut Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{3E497710-EC3C-4721-8001-0ABF16EC8D74}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{9C4905AC-9CDE-44D1-B7D7-432B7D1E8B83}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{EE91EB9B-89D7-4C9D-891D-A9B6EC06A176}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1419877892&from=ill&uid=WDCXWD10EZEX-00KUWA0_WD-WCC1S534579245792&q={searchTerms} HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1419877892&from=ill&uid=WDCXWD10EZEX-00KUWA0_WD-WCC1S534579245792&q={searchTerms} HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=SK216&ocid=SK216DHP&osmkt=fr-fr HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxps://fr.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM -> {05C12E4C-6291-43F6-8C07-BBD3B3EF5E18} URL = SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSE1 SearchScopes: HKLM -> {15D811D6-979A-4DA0-9B21-A6E02AEABAEF} URL = SearchScopes: HKLM -> {5AA6BEBB-7C58-4146-9106-8F6046AD5CE8} URL = SearchScopes: HKU\S-1-5-21-2569905410-2087770512-1162047771-1000 -> {05C12E4C-6291-43F6-8C07-BBD3B3EF5E18} URL = SearchScopes: HKU\S-1-5-21-2569905410-2087770512-1162047771-1000 -> {15D811D6-979A-4DA0-9B21-A6E02AEABAEF} URL = SearchScopes: HKU\S-1-5-21-2569905410-2087770512-1162047771-1000 -> {533A5569-8A24-46DD-997F-E52E6C62DD9E} URL = hxxps://fr.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default SearchScopes: HKU\S-1-5-21-2569905410-2087770512-1162047771-1000 -> {5AA6BEBB-7C58-4146-9106-8F6046AD5CE8} URL = BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> Pas de fichier BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> Pas de fichier BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\ssv.dll [2016-03-24] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\jp2ssv.dll [2016-03-24] (Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-02-01] (Skype Technologies) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe FireFox: ======== FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default FF NewTab: chrome://quick_start/content/index.html FF DefaultSearchEngine: Bing FF SearchEngineOrder.3: Bing FF SelectedSearchEngine: Bing FF Homepage: hxxp://www.msn.com/?pc=SK216&ocid=SK216DHP&osmkt=fr-fr hxxps://fr.yahoo.com/?type=orcl_hpset FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK216DF&PC=SK216&q= FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_22_0_0_209.dll [2016-07-12] () FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-02-12] (Adobe Systems) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-12] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\dtplugin\npDeployJava1.dll [2016-03-24] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.77.2 -> C:\Program Files (x86)\Java\jre1.8.0_77\bin\plugin2\npjp2.dll [2016-03-24] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier] FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40728.0\npctrl.dll [2015-07-28] ( Microsoft Corporation) FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npnxgameEU.dll [2014-06-25] (Nexon) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-08-11] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-08-11] (NVIDIA Corporation) FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Pas de fichier] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-06-23] (Adobe Systems Inc.) FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-02-12] (Adobe Systems) FF Plugin HKU\S-1-5-21-2569905410-2087770512-1162047771-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-03-11] (Unity Technologies ApS) FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default\searchplugins\bing-.xml [2016-06-08] FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default\searchplugins\bingp.xml [2015-10-05] FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default\searchplugins\MyOnlineSearch.xml [2014-10-05] FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default\searchplugins\Search Provided by Yahoo.xml [2015-05-14] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml [2014-12-29] FF Extension: (Bing Search) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default\Extensions\bingsearch.full@microsoft.com.xpi [2016-06-08] FF Extension: (cacaoweb) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default\Extensions\cacaoweb@cacaoweb.org [2014-11-21] [non signé] FF Extension: (Nouvel onglet de Yahoo) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default\Extensions\jid1-G80Ec8LLEbK5fQ@jetpack.xpi [2015-10-09] [non signé] FF Extension: (Skype) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2016-05-25] FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\q4z3h53g.default\extensions\faststartff@gmail.com => non trouvé(e) FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird FF Extension: (ESET Smart Security Extension) - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-10-25] [non signé] FF HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\User\AppData\Roaming\IDM\idmmzcc5 FF Extension: (IDM CC) - C:\Users\User\AppData\Roaming\IDM\idmmzcc5 [2015-02-18] [non signé] FF HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\User\AppData\Roaming\IDM\idmmzcc5 Chrome: ======= CHR HomePage: Default -> hxxp://www.msn.com/fr-fr/?pc=__PARAM__&ocid=__PARAM__DHP CHR StartupUrls: Default -> "hxxp://isearch.omiga-plus.com/?type=hp&ts=1419877892&from=ill&uid=WDCXWD10EZEX-00KUWA0_WD-WCC1S534579245792" CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21] CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25] CHR Extension: (uBlock Origin) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2016-08-29] CHR Extension: (Recherche Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27] CHR Extension: (Bureau à distance Google Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-07-21] CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-08-28] CHR Extension: (iGraal) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmhkepipobnjllejbafajoemahjejdcm [2016-08-17] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02] CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-31] CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-08-31] CHR HKLM\...\Chrome\Extension: [fhidhffpdlhleocklmjbncdngoobjdli] - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhidhffpdlhleocklmjbncdngoobjdli.crx CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Users\User\AppData\Local\Temp\Rar$EXa0.772\Crack\IDMGCExt.crx CHR HKU\S-1-5-21-2569905410-2087770512-1162047771-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fhidhffpdlhleocklmjbncdngoobjdli] - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhidhffpdlhleocklmjbncdngoobjdli.crx CHR HKLM-x32\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Users\User\AppData\Local\Temp\Rar$EXa0.772\Crack\IDMGCExt.crx CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25] CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2016448 2016-01-15] (Adobe Systems, Incorporated) R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] () [Fichier non signé] S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1409032 2016-08-09] () R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation) R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\52.0.2743.48\remoting_host.exe [76616 2016-06-20] (Google Inc.) S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [243984 2016-03-21] (EasyAntiCheat Ltd) S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [42360 2011-01-12] (ESET) R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [810144 2011-01-12] (ESET) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation) U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-08-15] (Hi-Rez Studios) [Fichier non signé] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation) S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2909472 2015-08-07] (IObit) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [193656 2016-03-30] (Logitech Inc.) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WlanWpsSvc; C:\Program Files (x86)\D-Link\DWA-131\WlanWpsSvc.exe [167936 2008-06-26] () [Fichier non signé] ===================== Pilotes (Avec liste blanche) ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-03-07] (Disc Soft Ltd) R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [170640 2010-12-21] (ESET) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [141264 2010-12-21] (ESET) R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [125296 2010-12-21] (ESET) S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2014-11-03] (Echobit, LLC) S3 GameKB; C:\Windows\System32\drivers\GameKB.sys [27648 2012-05-11] () [Fichier non signé] R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-02-25] (REALiX(tm)) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech) R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Logitech Inc.) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) S3 RTL8192cu; C:\Windows\System32\DRIVERS\rtwlanu.sys [986728 2012-02-10] (Realtek Semiconductor Corporation ) U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] () S3 cpuz134; \??\C:\Users\User\AppData\Local\Temp\cpuz134\cpuz134_x64.sys [X] S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2016-09-01 21:33 - 2016-09-01 21:34 - 00000000 ____D C:\FRST 2016-08-29 16:38 - 2016-08-29 16:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2016-08-29 16:02 - 2016-08-29 16:02 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker 2016-08-29 16:02 - 2016-08-29 16:02 - 00000000 ____D C:\Program Files\Unlocker 2016-08-28 15:17 - 2016-08-28 15:17 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2016-08-28 15:17 - 2016-08-11 13:22 - 00138808 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2016-08-28 15:17 - 2016-05-04 04:23 - 00129824 _____ C:\Windows\SysWOW64\vulkan-1.dll 2016-08-28 15:17 - 2016-05-04 04:22 - 00130848 _____ C:\Windows\system32\vulkan-1.dll 2016-08-28 15:17 - 2016-05-04 04:22 - 00045344 _____ C:\Windows\system32\vulkaninfo.exe 2016-08-28 15:17 - 2016-05-04 04:22 - 00040224 _____ C:\Windows\SysWOW64\vulkaninfo.exe 2016-08-28 15:15 - 2016-08-16 07:19 - 00223304 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2016-08-28 15:15 - 2016-08-16 07:19 - 00054728 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 40068544 _____ C:\Windows\system32\nvcompiler.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 35182648 _____ C:\Windows\SysWOW64\nvcompiler.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 34798528 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 28203968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 17462904 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 14075960 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2016-08-28 15:15 - 2016-08-11 16:31 - 10719920 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 10530960 _____ C:\Windows\system32\nvptxJitCompiler.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 10264136 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 09078776 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 08674320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 08644640 _____ C:\Windows\SysWOW64\nvptxJitCompiler.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 03597248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 03166264 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 01922616 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6437254.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 01586744 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6437254.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 01021888 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00958912 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00945088 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00897592 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00695136 _____ C:\Windows\system32\nvfatbinaryLoader.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00584896 _____ C:\Windows\SysWOW64\nvfatbinaryLoader.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00544256 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00494120 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00459088 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00442816 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00409624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00395320 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00181488 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00159352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00153368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00131720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2016-08-28 15:15 - 2016-08-11 16:31 - 00000669 _____ C:\Windows\SysWOW64\nv-vk32.json 2016-08-28 15:15 - 2016-08-11 16:31 - 00000669 _____ C:\Windows\system32\nv-vk64.json 2016-08-28 15:12 - 2016-08-28 15:17 - 00000000 ____D C:\Windows\LastGood 2016-08-28 15:12 - 2016-04-14 07:38 - 00113216 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2016-08-28 15:12 - 2016-04-14 07:38 - 00102976 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2016-08-28 15:12 - 2016-04-14 07:38 - 00056384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2016-08-20 12:29 - 2016-08-28 15:09 - 00003350 _____ C:\Windows\System32\Tasks\ESET Windows 10 upgrade – Refresh settings 2016-08-09 22:38 - 2016-08-09 22:39 - 00000000 ____D C:\Users\User\AppData\Local\HirezLauncherUI ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2016-09-01 21:27 - 2013-10-23 14:55 - 00000000 ____D C:\Users\User\AppData\Roaming\Skype 2016-09-01 20:55 - 2014-11-21 01:05 - 00001070 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-09-01 20:47 - 2013-10-23 14:44 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-09-01 20:42 - 2015-09-03 23:58 - 00000000 ____D C:\Program Files (x86)\Steam 2016-09-01 17:18 - 2013-10-23 14:58 - 00000000 ____D C:\Users\User\AppData\Roaming\vlc 2016-09-01 07:04 - 2014-11-21 01:05 - 00001066 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-08-31 16:10 - 2009-07-14 06:45 - 00022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-08-31 16:10 - 2009-07-14 06:45 - 00022656 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-08-30 19:18 - 2016-04-01 11:37 - 00000000 ____D C:\Users\User\AppData\Local\Ubisoft Game Launcher 2016-08-30 17:00 - 2014-11-21 18:00 - 00000000 ____D C:\Users\User\AppData\Roaming\winservices 2016-08-29 17:04 - 2013-10-25 18:10 - 00000000 ____D C:\Users\User\AppData\Roaming\uTorrent 2016-08-29 17:03 - 2015-12-03 23:17 - 00000000 ____D C:\Users\User\AppData\Local\CrashDumps 2016-08-29 17:03 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf 2016-08-29 16:40 - 2014-07-15 03:39 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios 2016-08-29 16:38 - 2014-07-15 03:40 - 00000000 ____D C:\ProgramData\Hi-Rez Studios 2016-08-29 16:38 - 2013-10-22 18:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2016-08-29 16:25 - 2015-09-03 03:48 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2016-08-29 13:01 - 2009-07-14 17:24 - 03668978 _____ C:\Windows\system32\perfh00C.dat 2016-08-29 13:01 - 2009-07-14 17:24 - 01105316 _____ C:\Windows\system32\perfc00C.dat 2016-08-29 13:01 - 2009-07-14 07:13 - 00006256 _____ C:\Windows\system32\PerfStringBackup.INI 2016-08-29 02:10 - 2013-10-24 14:48 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2016-08-28 16:03 - 2014-10-14 12:52 - 00000000 ____D C:\ProgramData\Origin 2016-08-28 16:03 - 2014-10-14 12:51 - 00000000 ____D C:\Program Files (x86)\Origin 2016-08-28 15:17 - 2014-12-16 15:59 - 00000000 ____D C:\ProgramData\NVIDIA 2016-08-28 15:17 - 2013-10-24 14:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2016-08-28 15:17 - 2013-10-22 18:51 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2016-08-28 15:13 - 2013-12-17 20:55 - 00000000 ____D C:\Users\User\AppData\Local\NVIDIA 2016-08-28 15:09 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-08-28 14:53 - 2014-11-05 02:48 - 00000000 ____D C:\Users\User\AppData\Roaming\cacaoweb 2016-08-28 14:51 - 2014-09-28 17:05 - 00000000 ____D C:\Users\User\AppData\Local\Adobe 2016-08-23 23:44 - 2015-02-25 20:18 - 00000000 ____D C:\ProgramData\ProductData 2016-08-16 07:19 - 2014-09-20 20:07 - 01588688 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll 2016-08-12 22:05 - 2014-03-07 15:04 - 00000000 ____D C:\Users\User\AppData\Roaming\DAEMON Tools Lite 2016-08-11 16:31 - 2014-11-24 18:25 - 19832440 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2016-08-11 16:31 - 2014-11-24 18:25 - 17249896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2016-08-11 16:31 - 2014-11-24 18:25 - 14352304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2016-08-11 16:31 - 2014-11-24 18:25 - 03911624 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2016-08-11 16:31 - 2014-11-24 18:25 - 03451904 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2016-08-11 16:31 - 2014-11-24 18:25 - 00039731 _____ C:\Windows\system32\nvinfo.pb 2016-08-11 13:49 - 2016-04-01 11:43 - 00548920 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll 2016-08-11 13:49 - 2016-04-01 11:43 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll 2016-08-11 13:49 - 2014-12-16 15:58 - 06384576 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2016-08-11 13:49 - 2014-12-16 15:58 - 02469944 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2016-08-11 13:49 - 2014-12-16 15:58 - 01764408 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2016-08-11 13:49 - 2014-12-16 15:58 - 01363392 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2016-08-11 13:49 - 2014-12-16 15:58 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2016-08-11 13:49 - 2014-12-16 15:58 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2016-08-08 21:57 - 2014-11-21 01:08 - 00002409 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-08-08 13:54 - 2014-12-16 15:58 - 07255045 _____ C:\Windows\system32\nvcoproc.bin 2016-08-03 05:41 - 2014-10-03 14:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service ==================== Fichiers à la racine de certains dossiers ======= 2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\User\AppData\Roaming\BSAFT 2014-07-27 18:21 - 2014-10-04 11:41 - 0018056 _____ () C:\Users\User\AppData\Roaming\Bubble Dock.installation.log 2013-11-02 14:20 - 2014-06-17 18:47 - 0000113 _____ () C:\Users\User\AppData\Roaming\D2Info0 2013-11-02 14:20 - 2014-06-17 18:48 - 0000008 _____ () C:\Users\User\AppData\Roaming\DofusAppId0_1 2013-11-03 19:30 - 2013-11-30 01:20 - 0000008 _____ () C:\Users\User\AppData\Roaming\DofusAppId0_2 2013-11-08 20:53 - 2013-11-14 23:17 - 0000008 _____ () C:\Users\User\AppData\Roaming\DofusAppId0_3 2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\User\AppData\Roaming\DYKL 2014-09-01 10:18 - 2014-09-01 10:18 - 0001248 _____ () C:\Users\User\AppData\Roaming\MMZDRB 2014-09-01 10:18 - 2014-09-01 10:18 - 0002086 _____ () C:\Users\User\AppData\Roaming\QEPFQ 2014-03-07 15:03 - 2014-03-31 00:38 - 0000082 _____ () C:\Users\User\AppData\Roaming\WB.CFG 2014-07-27 18:20 - 2014-10-04 11:40 - 0000194 _____ () C:\Users\User\AppData\Roaming\WindApp.boostrap.log 2014-07-27 18:21 - 2014-10-04 11:41 - 0000748 _____ () C:\Users\User\AppData\Roaming\WindApp.installation.log 2014-11-19 13:57 - 2014-11-19 13:57 - 0667648 _____ () C:\Users\User\AppData\Roaming\~ztaedxm.exe 2013-12-26 21:36 - 2014-08-03 14:11 - 0004608 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-07-30 15:39 - 2015-07-30 15:41 - 29593968 _____ (Sony Mobile Communications ) C:\Users\User\AppData\Local\pcc.exe 2014-11-25 15:09 - 2015-01-26 20:31 - 0000041 _____ () C:\Users\User\AppData\Local\recently-fix.db 2014-06-23 18:51 - 2014-06-23 18:51 - 0000000 _____ () C:\Users\User\AppData\Local\{5802B62C-055D-4C95-843F-AACB9E3D435F} 2015-03-27 12:32 - 2015-03-27 12:32 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2014-09-30 16:57 - 2014-09-30 16:57 - 0431104 _____ () C:\ProgramData\uninstall_Winservices.exe Fichiers à déplacer ou supprimer: ==================== C:\ProgramData\uninstall_Winservices.exe Certains fichiers dans TEMP: ==================== C:\Users\User\AppData\Local\Temp\DeltaTB.exe ==================== Bamital & volsnap ================= (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2016-08-28 18:32 ==================== Fin de FRST.txt ============================