Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 18-02-2017 01 Exécuté par linji (administrateur) sur SROYALJL (19-02-2017 21:45:57) Exécuté depuis C:\Users\linji\Downloads Profils chargés: linji (Profils disponibles: linji) Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Edge) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Tencent) D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QQPCRTP.exe (Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Hewlett-Packard Company) C:\Windows\System32\hpservice.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel Corporation) C:\Windows\System32\igfxHK.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe (Intel Corporation) C:\Windows\System32\ibtsiva.exe (Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (Tencent) C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.exe () C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe (Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe (Microsoft Corporation) C:\Windows\System32\InputMethod\CHS\ChsIME.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Tencent) D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QQPCTray.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerSt.exe (HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe (HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe (Tencent) D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\plugins\QMNetMon\QQPCNetFlow.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe (Tencent) D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QQPCRealTimeSpeedup.exe (AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (Hewlett-Packard Development Company, L.P.) C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe (Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv.exe () C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Intel Corporation) C:\Windows\SysWOW64\IntelCpHeciSvc.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe () D:\DATA\ludashi\ComputerZService.exe () D:\DATA\ludashi\ComputerZTray.exe () D:\DATA\ludashi\Utils\MobileDeviceSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microleaves LTD) C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe (Microleaves LTD) C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe (Microleaves LTD) C:\Program Files (x86)\Microleaves\Traffic Exchange\Online-Guardian.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.109.0_x64__kzf8qxf38zg5c\SkypeHost.exe (HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe (鲁大师) D:\DATA\ludashi\ComputerZ_CN.exe (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (Spotify Ltd) C:\Users\linji\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\linji\AppData\Roaming\Spotify\SpotifyCrashService.exe (Spotify Ltd) C:\Users\linji\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd) C:\Users\linji\AppData\Roaming\Spotify\SpotifyWebHelper.exe (Spotify Ltd) C:\Users\linji\AppData\Roaming\Spotify\Spotify.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9181696 2016-12-02] (Realtek Semiconductor) HKLM-x32\...\Run: [AccelerometerSysTrayApplet] => C:\Program Files (x86)\Hewlett-Packard\HP 3D DriveGuard\AccelerometerST.exe [127528 2015-07-08] (Hewlett-Packard Company) HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (HP Inc.) HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [258600 2016-01-05] (HP) HKLM-x32\...\Run: [ QQPCTray] => D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QQPCTRAY.EXE [362304 2016-12-05] (Tencent) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [205512 2017-02-17] (AVAST Software) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [235624 2015-01-09] (CANON INC.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1314432 2016-06-09] (CANON INC.) HKLM-x32\...\RunOnce: [ldsgamecenter_uninst] => C:\Users\linji\AppData\Local\Temp\removelds_gcenter.bat [378 2017-02-19] () <===== ATTENTION HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1 HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\...\Run: [Spotify Web Helper] => C:\Users\linji\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-02-19] (Spotify Ltd) HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\...\Run: [Spotify] => C:\Users\linji\AppData\Roaming\Spotify\Spotify.exe [7133808 2017-02-19] (Spotify Ltd) HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\...\Run: [Discord] => C:\Users\linji\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.) HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-18\...\Run: [] => [X] ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google) ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\linji\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\linji\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\linji\AppData\Local\MEGAsync\ShellExtX64.dll [2014-05-01] () ShellIconOverlayIdentifiers: [.QMDeskTopGCIcon] -> {B7667919-3765-4815-A66D-98A09BE662D6} => D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QMGCShellExt64.dll [2016-12-05] (Tencent) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-17] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-02-17] (AVAST Software) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.14.0.dll [2017-02-07] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\linji\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\linji\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\linji\AppData\Local\MEGAsync\ShellExtX32.dll [2014-05-01] () Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-02-18] ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS) GroupPolicy: Restriction - Chrome <======= ATTENTION GroupPolicy\User: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\Parameters: [DhcpNameServer] 109.88.203.3 62.197.111.140 Tcpip\..\Interfaces\{17ba6fc5-1a40-48e5-8ab1-8a2202243931}: [DhcpNameServer] 109.88.203.3 62.197.111.140 Tcpip\..\Interfaces\{5b538753-9434-445f-800a-b98693e59cf1}: [NameServer] 192.168.1.1 Tcpip\..\Interfaces\{5b538753-9434-445f-800a-b98693e59cf1}: [DhcpNameServer] 109.88.203.3 62.197.111.140 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hao.360.cn/?a1004 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131127203805158799&GUID=1D0F7D49-74F9-46B1-8533-69B17F0883F3 HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE SearchScopes: HKLM-x32 -> {008CC757-E25B-48CA-8F4B-783333AD9749} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> DefaultScope {3D8B4390-0AF1-440A-9B59-8F69A66B8CCB} URL = hxxp://www.google.com.hk/search?hl=zh-CN&q={searchTerms} SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> {008CC757-E25B-48CA-8F4B-783333AD9749} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=U453DF&PC=U453&q={searchTerms}&src=IE-SearchBox SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> {3D8B4390-0AF1-440A-9B59-8F69A66B8CCB} URL = hxxp://www.google.com.hk/search?hl=zh-CN&q={searchTerms} SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> {44177982-996D-4b79-B29F-5B60E13A5169} URL = hxxp://www.baidu.com/s?wd={searchTerms}&tn=98012088_2_dg&ch=1&ie=utf-8 SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> {A2B95EDB-B3B1-4E29-B10B-660928417E08} URL = hxxps://www.baidu.com/s?wd={searchTerms}&tn=92367411_hao_pg SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> {B268CAB7-805A-4F09-909C-F46C47C6FE3C} URL = SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> {BF9D931B-6F4F-40B0-5ED3-7DD8CCC0FB92} URL = SearchScopes: HKU\S-1-5-21-3245419771-2977825503-3689396286-1001 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7B38C5D3A1-BF01-4834-AAF0-40325E8E9A0C%7D&gp=811041 BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2016-12-28] (Microsoft Corporation) BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.) BHO: Pas de nom -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Pas de fichier BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_121\bin\ssv.dll [2017-01-22] (Oracle Corporation) BHO: 电脑管家网页防火墙 -> {7C260B4B-F7A0-40B5-B403-BEFCDC6A4C3B} -> D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\TSWebMon64.dat [2016-12-05] (Tencent) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-02-09] (Google Inc.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-12-28] (Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_121\bin\jp2ssv.dll [2017-01-22] (Oracle Corporation) BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2016-12-28] (Microsoft Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.) BHO-x32: Pas de nom -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> Pas de fichier BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2016-10-31] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-02-09] (Google Inc.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) BHO-x32: QQMiniDL Helper Class -> {C9C7334B-5657-41e1-8F79-F6AACECA05F4} -> C:\Program Files (x86)\Common Files\Tencent\QQMiniDL\60\Browser\QQIEHelper01.dll [2014-07-15] (Tencent Technology (Shenzhen) Company Limited) BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2016-12-28] (Microsoft Corporation) BHO-x32: AccountProtectBHO Class -> {DDD362CF-523B-4BC9-8FDC-58F93B6BC945} -> C:\Users\linji\AppData\Roaming\Tencent\QQ\QQAntiPhishing\AccountProtect.dll [2016-06-27] (Tencent) BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2016-07-21] (HP Inc.) BHO-x32: ͬ²½Ò»¼ü°²×°Ö§³Ö -> {F72C8153-7140-4FEE-8F69-CA4579D71195} -> C:\Program Files\Tongbu\Addin\tbIEAddin.dll [2016-08-22] (同步网络平台) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-02-09] (Google Inc.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.) Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-02-09] (Google Inc.) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-12-28] (Microsoft Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-05-25] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-05-25] (Microsoft Corporation) Edge: ====== Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2016-12-08] Edge Extension: (Please enter your password) -> EdgeExtension_28944StefanvdTurnOfftheLightsextension_pe3vc7q6mjj3e => C:\Program Files\WindowsApps\28944Stefanvd.TurnOfftheLightsextension_3.3.21.0_neutral__pe3vc7q6mjj3e [2017-01-23] Edge Extension: (AdBlock) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_1.11.0.0_neutral__c1wakc4j0nefm [2017-02-17] FireFox: ======== FF DefaultProfile: j3oumhm3.default FF ProfilePath: C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default [2017-02-19] FF NewTab: Mozilla\Firefox\Profiles\j3oumhm3.default -> about:newtab FF DefaultSearchEngine: Mozilla\Firefox\Profiles\j3oumhm3.default -> Поиск@Mail.Ru FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\j3oumhm3.default -> Avast Search FF SelectedSearchEngine: Mozilla\Firefox\Profiles\j3oumhm3.default -> Поиск@Mail.Ru FF Homepage: Mozilla\Firefox\Profiles\j3oumhm3.default -> about:home FF Keyword.URL: Mozilla\Firefox\Profiles\j3oumhm3.default -> hxxp://go.mail.ru/distib/ep/?product_id=%7BADCF60F9-00B0-493A-A573-65081B94035C%7D&gp=811037 FF Extension: (MEGA) - C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\Extensions\firefox@mega.co.nz.xpi [2017-02-17] FF Extension: (uBlock Origin) - C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\Extensions\uBlock0@raymondhill.net.xpi [2017-02-05] FF Extension: (YouTube High Definition) - C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2017-02-04] FF Extension: (ReminderFox) - C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}.xpi [2016-09-20] FF Extension: (Video DownloadHelper) - C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-01-03] FF Extension: (Adblock Plus) - C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-24] FF SearchPlugin: C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\searchplugins\avast-search.xml [2017-01-22] FF SearchPlugin: C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\searchplugins\google-avast.xml [2017-01-22] FF SearchPlugin: C:\Users\linji\AppData\Roaming\Mozilla\Firefox\Profiles\j3oumhm3.default\searchplugins\mailru.xml [2017-02-04] FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 [2017-02-17] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48 FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF48 [2017-02-17] FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF48 FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF48 FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-22] () FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-01-22] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-01-22] (Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-12-28] (Microsoft Corporation) FF Plugin: @tongbu.com/tongbu,version=0.1 -> C:\Program Files\Tongbu\Addin\npTongbuAddin.dll [2016-08-22] (同步网络平台) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-22] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1225195.dll [2016-09-20] (Adobe Systems, Inc.) FF Plugin-x32: @baidu.com/YunWebDetectPlugin -> C:\Users\linji\AppData\Roaming\baidu\BaiduYunGuanjia\npYunWebDetect.dll [2016-12-29] (Baidu.com, Inc.) FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2015-10-29] (CANON INC.) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @kingsfot.com/npkws -> d:\kinggsoft\kduu_ba\sp7\npkws.dll [Pas de fichier] FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-12-28] (Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2016-12-28] (Microsoft Corporation) FF Plugin-x32: @qq.com/npAndroidAssistant -> C:\Program Files (x86)\Common Files\Tencent\QQPhoneManager\2.0.201.3192\npQQPhoneManagerExt.dll [2014-05-30] (腾讯公司) FF Plugin-x32: @qq.com/npqscall -> C:\Program Files (x86)\Common Files\Tencent\Npchrome\npactivex.dll [2016-02-17] (Tencent) FF Plugin-x32: @qq.com/QQlive -> D:\QQLive\9.12.1291.0\npQQLive.dll [Pas de fichier] FF Plugin-x32: @qq.com/QQMiniDLPlugin -> C:\Program Files (x86)\Common Files\Tencent\QQMiniDL\60\Browser\npXFMiniDLPlugin.dll [2014-04-25] (Tencent Technology (Shenzhen) Company Limited) FF Plugin-x32: @qq.com/QQMusicHelper -> C:\Program Files (x86)\Tencent\QQMusicHelper\QQMusicHelper1224.19.47.41\npQQMusicHelper.dll [2015-12-18] (Tencent) FF Plugin-x32: @qq.com/QQPCMgr -> D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\npQMExtensionsMozilla.dll [2016-12-05] (Tencent Technology (Shenzhen) Company Limited) FF Plugin-x32: @qq.com/QQPhotoDrawEx -> C:\Program Files (x86)\Tencent\Qzone\npQQPhotoDrawEx.dll [2013-08-13] () FF Plugin-x32: @qq.com/QzoneMusic -> C:\Program Files (x86)\Tencent\QQMusic\QzoneMusic\npQzoneMusic.dll [2016-02-26] (Tencent) FF Plugin-x32: @qq.com/TXSSO -> C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.5.14\Bin\npSSOAxCtrlForPTLogin.dll [2016-10-31] (Tencent) FF Plugin-x32: @tencent.com/npQQMailWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\npQQMailWebKit.dll [2013-04-25] (Tencent) FF Plugin-x32: @tencent.com/nptxftnWebKit,version=1.0.0.1 -> C:\Program Files (x86)\QQMailPlugin\nptxftnWebKit.dll [2013-04-08] (Tencent Technology (Shenzhen) Company Limited) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-08] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-08] (Google Inc.) FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-06-25] () FF Plugin-x32: @xunlei.com/DapCtrl -> C:\Users\Public\Thunder Network\XMP5\Addins\npDapCtrl.dll [2016-11-15] (ShenZhen Thunder Networking Technologies Ltd.) FF Plugin-x32: @xunlei.com/npaplayer -> C:\Users\Public\Thunder Network\APlayer\codecs\npaplayer.dll [Pas de fichier] FF Plugin-x32: @xunlei.com/npxluser -> C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll [2016-12-05] (Thunder Networking Technologies,LTD) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3245419771-2977825503-3689396286-1001: @1.qq.com/npqqwebgame -> C:\Users\linji\AppData\Roaming\Tencent\WebGamePlugin\1.0.4.3\npqqwebgame.dll [2015-10-20] ( ) FF Plugin HKU\S-1-5-21-3245419771-2977825503-3689396286-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\linji\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-08] (Unity Technologies ApS) FF Plugin HKU\S-1-5-21-3245419771-2977825503-3689396286-1001: @xunlei.com/npxluser -> C:\Program Files (x86)\Common Files\Thunder Network\UserAgent\npxluser2.0.2.3.dll [2016-12-05] (Thunder Networking Technologies,LTD) Chrome: ======= CHR HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\linji\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2016-12-02] CHR HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bmkckgpgekmanipelfidlhmkfcjicion] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fkkcgfbgohboipdhliafmacjnhjbhmim] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3245419771-2977825503-3689396286-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ccfifbojenkenpkmnbnndeadpfdiffof] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [jkfpchpiljkaemlpmpebnglgkomamfeo] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [oelpkepjlgmehajehfeicfbjdiobdkfj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [ojlcebdkbpjdpiligkdbbkdkfjmchbfd] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2016-09-22] (Apple Inc.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7142136 2017-02-17] (AVAST Software s.r.o.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [262736 2017-02-17] (AVAST Software) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [278784 2017-02-17] (AVAST Software) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1465352 2017-01-13] () S3 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1364096 2016-05-25] (Microsoft Corporation) S3 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1687680 2016-05-25] (Microsoft Corporation) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699904 2016-12-28] (Microsoft Corporation) S3 cplspcon; C:\WINDOWS\system32\IntelCpHDCPSvc.exe [623072 2016-03-18] (Intel Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-17] (Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-02-17] (Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46400 2017-02-07] (Dropbox, Inc.) S2 dg597; C:\WINDOWS\SysWOW64\dg597\dg597.dll [125296 2016-12-05] () S2 DGPNPSEV; C:\Program Files (x86)\MyDrivers\DriverGenius\DgService.exe [392776 2016-12-05] (MyDrivers.com) S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1467072 2016-08-29] (Disc Soft Ltd) S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [389392 2016-11-30] (EasyAntiCheat Ltd) U2 emexkl; C:\ProgramData\emexkl.dll [123704 2016-06-02] () R2 esifsvc; C:\WINDOWS\system32\Intel\DPTF\esif_uf.exe [2215168 2016-08-22] (Intel Corporation) R2 ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-06-08] () R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-06-25] (WildTangent) S4 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [2621448 2016-09-13] (LogMeIn Inc.) S2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-10-10] (Hi-Rez Studios) [Fichier non signé] R3 HPSupportSolutionsFrameworkService; c:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [31776 2016-12-07] (HP Inc.) R2 HpSvc; D:\DATA\ludashi\lpi\HpSvc.dll [252840 2017-01-13] () R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (HP Inc.) S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-07-22] (Intel Corporation) R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373728 2016-03-18] (Intel Corporation) S3 ihelpermsgpushsvr; C:\Program Files (x86)\PP苹果助手3.0\ihelpermsgpushsvr.exe [261832 2016-02-16] (广州爱禾网络技术有限公司) [Fichier non signé] R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [387144 2016-02-04] () S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) S3 Intel(R) WiDi SAM; C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-06-23] (Intel Corporation) S3 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-14] (Intel Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-08-31] (LogMeIn, Inc.) S3 npggsvc; C:\WINDOWS\SysWOW64\GameMon.des [4362656 2016-02-24] (INCA Internet Co., Ltd.) [Fichier non signé] R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-01-20] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462784 2017-02-10] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-01-20] (NVIDIA Corporation) R2 QPCore; C:\Program Files (x86)\Common Files\Tencent\QQProtect\Bin\QQProtect.exe [115520 2017-02-17] (Tencent) R2 QQPCRTP; D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QQPCRTP.exe [315920 2016-12-05] (Tencent) S2 QQRepairFixSVC; C:\Program Files (x86)\Tencent\QQPCMGR\QQRepairFixSVC [155368 2017-02-17] () S3 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] () R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [322560 2016-12-02] (Realtek Semiconductor) S2 SecureLine; C:\Program Files\AVAST Software\SecureLine\VpnSvc.exe [592392 2016-05-23] () S2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [266872 2016-08-19] (Synaptics Incorporated) R2 SystemUsageReportSvc_WILLAMETTE; C:\Program Files (x86)\Intel Driver Update Utility\SUR\SurSvc.exe [117400 2016-06-08] () S3 USER_ESRV_SVC_WILLAMETTE; C:\Program Files\Intel\SUR\WILLAMETTE\ESRV\esrv_svc.exe [416408 2016-06-08] () S3 VSStandardCollectorService140; C:\Program Files (x86)\Microsoft Visual Studio 14.0\Team Tools\DiagnosticsHub\Collector\StandardCollector.Service.exe [108776 2016-07-26] (Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X] ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 aswbidsdriver; C:\WINDOWS\system32\drivers\aswbidsdrivera.sys [309784 2017-02-17] (AVAST Software s.r.o.) R0 aswbidsh; C:\WINDOWS\system32\drivers\aswbidsha.sys [189768 2017-02-17] (AVAST Software s.r.o.) R0 aswblog; C:\WINDOWS\system32\drivers\aswbloga.sys [334600 2017-02-17] (AVAST Software s.r.o.) R0 aswbuniv; C:\WINDOWS\system32\drivers\aswbuniva.sys [48528 2017-02-17] (AVAST Software s.r.o.) S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [38296 2017-02-17] (AVAST Software) R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [32088 2017-02-17] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [126088 2017-02-17] (AVAST Software) R1 aswNetSec; C:\WINDOWS\system32\drivers\aswNetSec.sys [456456 2017-02-17] (AVAST Software) R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [100640 2017-02-17] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\drivers\aswRvrt.sys [74680 2017-02-17] (AVAST Software) R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [991496 2017-02-17] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [547904 2017-02-17] (AVAST Software) R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [162528 2017-02-17] (AVAST Software) S3 aswTap; C:\WINDOWS\System32\drivers\aswTap.sys [44640 2014-09-05] (The OpenVPN Project) R0 aswVmm; C:\WINDOWS\system32\drivers\aswVmm.sys [337080 2017-02-17] (AVAST Software) R0 bootsafe; C:\WINDOWS\System32\Drivers\bootsafe64_ev.sys [58096 2017-01-22] (Kingsoft Corporation) R3 clwvd6; C:\WINDOWS\system32\DRIVERS\clwvd6.sys [41704 2013-10-29] (CyberLink Corporation) R2 ComputerZLock; D:\DATA\ludashi\ComputerZLock_x64.sys [45504 2017-01-13] (www.ludashi.com) R3 ComputerZ_x64; D:\DATA\ludashi\ComputerZ_x64.sys [49152 2016-06-27] (ludashi.com) R2 DgSafe; C:\WINDOWS\system32\drivers\DgSafe.sys [419592 2017-01-22] (MyDrivers.com) R2 DgSafe; C:\WINDOWS\SysWOW64\drivers\DgSafe.sys [508656 2016-03-06] (MyDrivers.com) R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [71232 2016-08-22] (Intel Corporation) R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [66624 2016-08-22] (Intel Corporation) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-09-17] (Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-09-17] (Disc Soft Ltd) R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [350272 2016-08-22] (Intel Corporation) R3 Hamachi; C:\WINDOWS\System32\drivers\Hamdrv.sys [45680 2016-05-04] (LogMeIn Inc.) R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [249616 2016-10-19] (Intel Corporation) R0 kavbootc; C:\WINDOWS\System32\drivers\kavbootc64.sys [55384 2017-01-22] (Kingsoft Corporation) R3 ksapi64; C:\WINDOWS\system32\drivers\ksapi64.sys [79000 2017-01-22] (Kingsoft Corporation) S3 LDSBoxDrv; D:\LDSGameMaster\LDSGamePlayerPK\vbox\LDSBoxDrv.sys [263400 2017-01-16] (Ludashi Corporation) R3 mt7612US; C:\WINDOWS\System32\drivers\mt7612US.sys [377864 2015-12-09] (MediaTek Inc.) S3 MyDrivers0_0_1; C:\Program Files (x86)\MyDrivers\DriverGenius\MyDrivers64.sys [33024 2017-01-22] (MyDrivers.com) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () U5 Netwtw02; C:\Windows\System32\Drivers\Netwtw02.sys [6731520 2016-02-17] (Intel Corporation) R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [7308560 2016-09-13] (Intel Corporation) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvhmi.inf_amd64_5603cb253b01e5cd\nvlddmkm.sys [14516664 2017-02-10] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-01-20] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [47672 2017-01-06] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-01-20] (NVIDIA Corporation) R1 QMUdisk; D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QMUdisk64_ev.sys [192248 2017-01-11] (Tencent) R2 QQSysMonX64; D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QQSysMonX64_EV.sys [154352 2016-12-05] (电脑管家) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [946696 2016-11-21] (Realtek ) S3 RTSPER; C:\WINDOWS\system32\DRIVERS\RtsPer.sys [761560 2015-09-18] (Realsil Semiconductor Corporation) R3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2015-06-04] () R3 SensorsSimulatorDriver; C:\WINDOWS\System32\drivers\WUDFRd.sys [216064 2016-07-16] (Microsoft Corporation) S3 SGXEPC; C:\WINDOWS\System32\drivers\sgx_driver.sys [54768 2015-06-19] (Windows (R) Win 7 DDK provider) S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [33448 2015-07-28] (Synaptics Incorporated) R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [72824 2016-08-19] (Synaptics Incorporated) R3 softaal; D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\softaal64_ev.sys [44272 2016-12-05] (Tencent) R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [41824 2016-11-03] (SteelSeries ApS) R3 TAOAccelerator; C:\WINDOWS\system32\Drivers\TAOAccelerator64_ev.sys [99664 2016-12-05] (Tencent) R2 TAOKernelDriver; C:\WINDOWS\system32\Drivers\TAOKernelEx64_ev.sys [143600 2016-12-05] (Tencent Technology(Shenzhen) Company Limited) R3 TcHardWare; D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\QQPCHW-x64_ev.sys [27888 2016-12-05] (Tencent) S3 TesSafe; C:\WINDOWS\system32\TesSafe.sys [1101024 2016-10-01] (TENCENT) R1 TFsFlt; C:\WINDOWS\System32\Drivers\TFsFltX64_ev.sys [97008 2016-12-05] (电脑管家) S1 TSDefenseBt; D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\TSDefenseBT64.sys [28984 2016-12-05] (Tencent) R2 tsnethlpx64; D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\TsNetHlpX64_ev.sys [57584 2016-12-05] () R1 TSSysKit; D:\Program Files (x86)\Tencent\QQPCMgr\12.1.18196.221\TSSysKit64_EV.sys [96504 2016-12-05] (电脑管家) S3 VBoxUSBMon; D:\LDSGameMaster\LDSGamePlayerPK\vbox\VBoxUSBMon.sys [136936 2017-01-16] (Ludashi Corporation) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30544 2015-08-12] (HP) S3 dbx; system32\DRIVERS\dbx.sys [X] U4 TimeBroker; pas de ImagePath S1 XLGuard; system32\drivers\XLGuard.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) NETSVCx32: HpSvc -> C:\DATA\ludashi\lpi\HpSvc.dll ==> Pas de fichier NETSVCx32: dg597 -> C:\WINDOWS\SysWOW64\dg597\dg597.dll () ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-02-19 21:45 - 2017-02-19 21:46 - 00048685 _____ C:\Users\linji\Downloads\FRST.txt 2017-02-19 21:45 - 2017-02-19 21:45 - 00000000 ____D C:\FRST 2017-02-19 21:44 - 2017-02-19 21:44 - 02422784 _____ (Farbar) C:\Users\linji\Downloads\FRST64.exe 2017-02-19 19:20 - 2017-02-19 19:20 - 16777216 _____ (The qBittorrent project) C:\Users\linji\Downloads\qbittorrent_3.3.10_setup.exe 2017-02-19 19:20 - 2017-02-19 19:20 - 00029977 _____ C:\Users\linji\Downloads\grimm-s05e02-french-hdtv.torrent 2017-02-19 19:20 - 2017-02-19 19:20 - 00029977 _____ C:\Users\linji\Downloads\grimm-s05e02-french-hdtv (1).torrent 2017-02-19 14:39 - 2017-02-19 15:24 - 00000000 ____D C:\Users\linji\AppData\Local\PianoFacile - Le clavier 2017-02-19 14:39 - 2017-02-19 14:39 - 05973844 _____ C:\Users\linji\Downloads\PFLC - Installeur.zip 2017-02-19 14:37 - 2017-02-19 14:37 - 01189943 _____ C:\Users\linji\Downloads\freepiano (1).rar.g93m1hf.partial 2017-02-19 14:37 - 2017-02-19 14:37 - 01185832 _____ C:\Users\linji\Downloads\freepiano.rar.sdsfwc1.partial 2017-02-19 14:32 - 2017-02-19 17:32 - 00000000 ____D C:\Users\linji\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pvm 2017-02-19 14:31 - 2017-02-19 14:31 - 02260619 _____ C:\Users\linji\Downloads\Piano-Virtuel-Midi-setup-6.1.exe 2017-02-18 19:40 - 2017-02-19 19:21 - 00000000 ____D C:\Users\linji\AppData\Roaming\steelseries-engine-3-client 2017-02-18 19:40 - 2017-02-18 19:41 - 00000000 ____D C:\ProgramData\SteelSeries 2017-02-18 19:40 - 2017-02-18 19:41 - 00000000 ____D C:\Program Files\SteelSeries 2017-02-18 19:40 - 2017-02-18 19:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SteelSeries 2017-02-18 19:39 - 2017-02-18 19:39 - 81582144 _____ C:\Users\linji\Downloads\SteelSeriesEngine3.9.10Setup.exe 2017-02-18 18:25 - 2017-02-18 18:25 - 00000044 _____ C:\Users\linji\Desktop\teamspeak.txt 2017-02-18 18:21 - 2017-02-18 18:21 - 00000000 ____D C:\Users\linji\AppData\Local\TeamSpeak 3 2017-02-18 18:21 - 2017-02-18 18:21 - 00000000 ____D C:\Users\linji\.TeamSpeak 3 2017-02-18 18:21 - 2017-02-18 18:21 - 00000000 ____D C:\Users\linji\.QtWebEngineProcess 2017-02-18 18:20 - 2017-02-19 01:51 - 01388448 _____ C:\Users\Public\ASR.dat 2017-02-17 23:38 - 2017-02-17 23:38 - 00220176 _____ C:\WINDOWS\QEK4aF56EpsWy.Lbs3r 2017-02-17 23:32 - 2017-02-17 23:32 - 00000000 ____D C:\WINDOWS\LastGood 2017-02-17 23:31 - 2017-02-10 03:33 - 40192056 _____ C:\WINDOWS\system32\nvcompiler.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 35272760 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 34979384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 28242488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 19007016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 14674896 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 11122728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 11019704 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 08990072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 03168192 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 01983424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437866.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 01589696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437866.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 01052096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00991288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00959424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00946456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00910784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00721952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00687224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00609728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00573448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2017-02-17 23:31 - 2017-02-10 03:33 - 00499136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2017-02-17 23:25 - 2017-02-17 23:25 - 00000000 ____D C:\ProgramData\SWCUTemp 2017-02-17 23:24 - 2017-02-17 23:24 - 00000000 ____D C:\WINDOWS\Panther 2017-02-17 23:15 - 2017-02-17 23:15 - 00003994 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update 2017-02-17 23:14 - 2017-02-17 23:14 - 00398408 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2017-02-17 23:14 - 2017-02-17 23:14 - 00334600 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbloga.sys 2017-02-17 23:14 - 2017-02-17 23:14 - 00309784 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys 2017-02-17 23:14 - 2017-02-17 23:14 - 00189768 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbidsha.sys 2017-02-17 23:14 - 2017-02-17 23:14 - 00048528 _____ (AVAST Software s.r.o.) C:\WINDOWS\system32\Drivers\aswbuniva.sys 2017-02-17 16:55 - 2017-02-17 23:12 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2017-02-17 16:55 - 2017-02-17 16:55 - 00001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk 2017-02-17 16:55 - 2017-02-17 16:55 - 00001227 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk 2017-02-17 16:55 - 2017-02-17 16:55 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2017-02-17 16:50 - 2017-02-17 16:50 - 00245616 _____ C:\Users\linji\Downloads\Firefox Setup Stub 51.0.1.exe 2017-02-17 16:21 - 2017-02-19 17:09 - 00000000 ____D C:\Users\linji\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ÌÚѶÈí¼þ 2017-02-16 22:09 - 2017-02-16 22:14 - 00000000 ____D C:\Users\linji\AppData\Roaming\discord 2017-02-16 22:09 - 2017-02-16 22:09 - 52553728 _____ (Hammer & Chisel, Inc.) C:\Users\linji\Downloads\DiscordSetup.exe 2017-02-16 22:09 - 2017-02-16 22:09 - 00002244 _____ C:\Users\linji\Desktop\Discord.lnk 2017-02-16 22:09 - 2017-02-16 22:09 - 00000000 ____D C:\Users\linji\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc 2017-02-16 22:09 - 2017-02-16 22:09 - 00000000 ____D C:\Users\linji\AppData\Local\SquirrelTemp 2017-02-16 22:09 - 2017-02-16 22:09 - 00000000 ____D C:\Users\linji\AppData\Local\Discord 2017-02-09 22:43 - 2017-02-09 22:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2017-02-09 22:42 - 2017-02-09 22:42 - 00000000 ____D C:\Users\Default\AppData\Local\Google 2017-02-09 22:42 - 2017-02-09 22:42 - 00000000 ____D C:\Users\Default User\AppData\Local\Google 2017-02-07 22:05 - 2017-02-08 13:06 - 00000000 ___HD C:\ProgramData\CanonIJMIG 2017-02-07 22:04 - 2017-02-07 22:04 - 00000000 ___HD C:\ProgramData\CanonIJEGV 2017-02-07 22:04 - 2017-02-07 22:04 - 00000000 ____D C:\Users\linji\Desktop\Print 2017-02-07 22:03 - 2017-02-07 22:03 - 00000000 ___HD C:\ProgramData\CanonIJMyPrinter 2017-02-07 22:01 - 2017-02-15 15:59 - 00000000 ____D C:\Users\linji\AppData\Roaming\Canon 2017-02-07 22:01 - 2017-02-07 22:01 - 00000000 ___HD C:\ProgramData\CanonIJQuickMenu 2017-02-07 21:59 - 2017-02-07 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Enregistrement utilisateur de Canon MG5700 series 2017-02-07 21:58 - 2017-02-07 21:58 - 00000000 ____D C:\Users\linji\AppData\LocalLow\Canon Easy-WebPrint EX2 2017-02-07 21:58 - 2017-02-07 21:58 - 00000000 ____D C:\Users\linji\AppData\LocalLow\Canon Easy-WebPrint EX 2017-02-07 21:56 - 2017-02-07 21:58 - 00000000 ____D C:\Program Files\Canon 2017-02-07 21:56 - 2017-02-07 21:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon MG5700 series Manual 2017-02-07 21:53 - 2017-02-07 21:58 - 00000000 ____D C:\ProgramData\CanonIJWSpt 2017-02-07 21:52 - 2017-02-07 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Canon Utilities 2017-02-07 21:52 - 2017-02-07 21:52 - 00000000 ____D C:\ProgramData\Canon IJ Network Tool 2017-02-07 21:52 - 2015-01-29 11:22 - 00353792 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNC_CSL.dll 2017-02-07 21:52 - 2014-12-02 16:01 - 00096256 _____ C:\WINDOWS\SysWOW64\CNC178ED.TBL 2017-02-07 21:52 - 2008-08-25 18:02 - 00015872 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNHMCA.dll 2017-02-07 21:51 - 2017-02-07 21:51 - 00000000 ___HD C:\ProgramData\CanonBJ 2017-02-07 21:51 - 2017-02-07 21:51 - 00000000 ____D C:\WINDOWS\system32\STRING 2017-02-07 21:51 - 2015-03-17 08:51 - 00375296 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6PPM.DLL 2017-02-07 21:51 - 2015-03-17 08:51 - 00039424 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6UI.DLL 2017-02-07 21:51 - 2015-03-17 08:50 - 00380928 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNMNPPM.DLL 2017-02-07 21:48 - 2015-03-15 05:00 - 00406528 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMCS.DLL 2017-02-07 21:47 - 2017-02-07 21:48 - 00000000 ___HD C:\Program Files\CanonBJ 2017-02-07 21:46 - 2017-02-07 21:46 - 00010256 _____ C:\WINDOWS\994.HCj4Y 2017-02-07 21:25 - 2017-02-07 21:25 - 00000000 ___HD C:\ProgramData\CanonIJETV 2017-02-07 21:07 - 2017-02-07 22:23 - 00000000 ____D C:\ProgramData\CanonIJPLM 2017-02-07 21:07 - 2017-02-07 21:07 - 00000000 ____D C:\ProgramData\Canon 2017-02-07 21:05 - 2017-02-07 22:01 - 00000000 ____D C:\Program Files (x86)\Canon 2017-02-07 05:38 - 2017-02-07 05:38 - 00046400 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2017-02-07 05:38 - 2017-02-07 05:38 - 00046192 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2017-02-07 05:38 - 2017-02-07 05:38 - 00046192 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2017-02-07 05:38 - 2017-02-07 05:38 - 00046192 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2017-02-05 05:36 - 2017-02-05 05:36 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software 2017-02-05 01:26 - 2017-02-05 01:26 - 00000000 ____D C:\Users\linji\AppData\Roaming\Malwarebytes 2017-02-05 01:26 - 2017-02-05 01:26 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-02-05 01:19 - 2017-02-05 01:19 - 00000000 ____D C:\Users\linji\AppData\Roaming\Mirillis 2017-02-05 01:19 - 2017-02-05 01:19 - 00000000 ____D C:\Users\linji\AppData\Local\Mirillis 2017-02-05 01:19 - 2017-02-05 01:19 - 00000000 ____D C:\ProgramData\Mirillis 2017-02-05 01:19 - 2017-02-05 01:19 - 00000000 ____D C:\Action! 2017-02-05 01:18 - 2017-02-05 01:18 - 00002119 _____ C:\Users\Public\Desktop\Action!.lnk 2017-02-05 01:18 - 2017-02-05 01:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis 2017-02-05 01:18 - 2017-02-05 01:18 - 00000000 ____D C:\Program Files (x86)\Mirillis 2017-02-05 01:05 - 2017-02-05 01:05 - 00000000 ____D C:\Users\linji\AppData\Local\ScreenCapture 2017-02-05 01:05 - 2017-02-05 01:05 - 00000000 ____D C:\ProgramData\Movavi 2017-02-05 01:04 - 2017-02-05 01:04 - 00004096 _____ C:\ProgramData\nakuvtjg.ewu 2017-02-05 01:04 - 2017-02-05 01:04 - 00000000 ____D C:\ProgramData\Movavi Screen Capture 8 2017-02-04 10:53 - 2017-02-04 10:53 - 00000000 ____D C:\Users\linji\AppData\LocalLow\Unity 2017-02-04 10:53 - 2017-02-04 10:53 - 00000000 ____D C:\Users\linji\AppData\Local\Unity 2017-02-04 10:52 - 2017-02-04 12:33 - 00000000 ____D C:\Users\linji\AppData\Local\Mail.Ru 2017-02-04 10:52 - 2017-02-04 11:53 - 00000000 ____D C:\ProgramData\Mail.Ru 2017-01-28 10:53 - 2017-01-28 10:53 - 00003486 _____ C:\WINDOWS\System32\Tasks\{0B2F2E8D-1F85-4B81-BC20-8C4DECED17BB} 2017-01-28 09:53 - 2017-01-28 09:54 - 00000000 ____D C:\Users\linji\AppData\Local\midori 2017-01-28 09:53 - 2017-01-28 09:53 - 00000000 ____D C:\Users\linji\AppData\Local\webkit 2017-01-28 09:53 - 2017-01-28 09:53 - 00000000 ____D C:\Users\linji\AppData\Local\fontconfig 2017-01-28 09:53 - 2017-01-28 09:53 - 00000000 ____D C:\Users\linji\.dbus-keyrings 2017-01-28 09:36 - 2017-01-28 09:36 - 00000000 ____D C:\Users\linji\AppData\LocalLow\MangaGamer 2017-01-26 19:24 - 2017-01-26 19:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes 2017-01-26 19:24 - 2017-01-26 19:24 - 00000000 ____D C:\Program Files\iTunes 2017-01-26 19:24 - 2017-01-26 19:24 - 00000000 ____D C:\Program Files\iPod 2017-01-26 19:22 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-01-26 19:22 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-01-26 01:13 - 2017-01-26 01:13 - 00103936 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-39-1.exe 2017-01-26 01:12 - 2017-01-26 01:12 - 00326656 _____ C:\WINDOWS\SysWOW64\vulkan-1-1-0-39-1.dll 2017-01-26 01:09 - 2017-01-26 01:09 - 00322560 _____ C:\WINDOWS\system32\vulkan-1-1-0-39-1.dll 2017-01-26 01:09 - 2017-01-26 01:09 - 00118272 _____ C:\WINDOWS\system32\vulkaninfo-1-1-0-39-1.exe 2017-01-24 16:51 - 2017-02-10 03:33 - 09305984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2017-01-24 16:51 - 2017-02-10 03:33 - 02717752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2017-01-24 16:51 - 2017-02-10 03:33 - 00447984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2017-01-24 16:51 - 2017-01-20 17:38 - 09308896 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SET40EE.tmp 2017-01-24 16:51 - 2017-01-20 17:38 - 02715072 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SET4267.tmp 2017-01-24 16:51 - 2017-01-20 17:38 - 01985080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6437849.dll 2017-01-24 16:51 - 2017-01-20 17:38 - 01591352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6437849.dll 2017-01-24 16:51 - 2017-01-20 17:38 - 00447800 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SET35FC.tmp 2017-01-24 16:51 - 2017-01-20 17:38 - 00000669 _____ C:\WINDOWS\SysWOW64\nv-vk32.json 2017-01-24 16:51 - 2017-01-20 17:38 - 00000669 _____ C:\WINDOWS\system32\nv-vk64.json 2017-01-22 21:50 - 2017-01-22 21:39 - 00114776 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\ksapi.sys 2017-01-22 21:50 - 2017-01-22 21:39 - 00033024 _____ (MyDrivers.com) C:\WINDOWS\system32\Drivers\mydrivers64.sys 2017-01-22 21:50 - 2017-01-22 21:39 - 00033024 _____ (MyDrivers.com) C:\WINDOWS\system32\Drivers\mydrivers.sys 2017-01-22 21:50 - 2017-01-22 21:38 - 00063136 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\kavbootc64_ev.sys 2017-01-22 21:50 - 2017-01-22 21:38 - 00053912 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\kavbootc_ev.sys 2017-01-22 21:50 - 2017-01-22 21:38 - 00046168 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\kavbootc.sys 2017-01-22 21:50 - 2017-01-22 21:36 - 00058096 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\bootsafe64_ev.sys 2017-01-22 21:50 - 2017-01-22 21:36 - 00057072 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\bootsafe_ev.sys 2017-01-22 21:50 - 2017-01-22 21:36 - 00051800 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\bootsafe.sys 2017-01-22 17:38 - 2017-02-18 23:25 - 00004034 _____ C:\WINDOWS\System32\Tasks\SafeZone scheduled Autoupdate 1485103094 2017-01-22 17:38 - 2017-02-18 23:25 - 00001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk 2017-01-22 17:38 - 2017-02-17 23:14 - 00032088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2017-01-22 17:38 - 2017-01-22 17:38 - 00001095 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk 2017-01-22 17:37 - 2017-01-22 17:37 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Premium.lnk 2017-01-22 17:36 - 2017-02-17 23:15 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys 2017-01-22 17:36 - 2017-02-17 23:14 - 00991496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2017-01-22 17:36 - 2017-02-17 23:14 - 00547904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2017-01-22 17:36 - 2017-02-17 23:14 - 00456456 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetSec.sys 2017-01-22 17:36 - 2017-02-17 23:14 - 00337080 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswvmm.sys.148736971595304 2017-01-22 17:36 - 2017-02-17 23:14 - 00162528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2017-01-22 17:36 - 2017-02-17 23:14 - 00126088 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2017-01-22 17:36 - 2017-02-17 23:14 - 00100640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2017-01-22 17:36 - 2017-02-17 23:14 - 00074680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2017-01-22 17:36 - 2017-02-17 23:14 - 00038296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2017-01-22 17:36 - 2017-01-22 17:36 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr 2017-01-22 17:36 - 2017-01-22 17:36 - 00044952 _____ () C:\WINDOWS\system32\Drivers\staport.sys 2017-01-21 14:40 - 2017-01-22 17:37 - 00000000 ____D C:\Users\linji\.LDSBoxHypervisorGlobal 2017-01-21 14:39 - 2017-01-21 14:39 - 00000000 ____D C:\Users\linji\AppData\Roaming\LDSGameMaster 2017-01-21 14:39 - 2017-01-21 14:39 - 00000000 ____D C:\Users\linji\AppData\Local\LDSGameMaster 2017-01-21 14:39 - 2017-01-21 14:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\抢红包助手 ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-02-19 21:27 - 2016-11-22 07:56 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-02-19 21:17 - 2016-10-21 13:58 - 00000052 _____ C:\Users\linji\AppData\Roaming\localcache.dat 2017-02-19 21:17 - 2016-10-21 13:58 - 00000052 _____ C:\Users\linji\AppData\Local\masm71.dat 2017-02-19 19:25 - 2017-01-03 02:05 - 00000000 ____D C:\Users\linji\AppData\Roaming\Spotify 2017-02-19 19:25 - 2017-01-03 02:05 - 00000000 ____D C:\Users\linji\AppData\Local\Spotify 2017-02-19 19:24 - 2016-02-28 10:01 - 00000000 ____D C:\Users\linji\AppData\Roaming\vlc 2017-02-19 19:23 - 2016-07-15 23:29 - 00000000 ____D C:\Users\linji\AppData\Roaming\qBittorrent 2017-02-19 19:23 - 2016-02-17 17:02 - 00000000 ____D C:\Program Files (x86)\Steam 2017-02-19 19:17 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF 2017-02-19 17:37 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-19 17:12 - 2016-07-12 15:27 - 00000000 ____D C:\Program Files (x86)\LDSGameCenter 2017-02-19 14:11 - 2016-02-18 03:42 - 00000000 ____D C:\ProgramData\NVIDIA 2017-02-18 20:57 - 2016-10-04 15:23 - 00000000 ____D C:\Users\linji\AppData\Local\Battle.net 2017-02-18 20:52 - 2016-10-04 15:20 - 00000000 ____D C:\Program Files (x86)\Battle.net 2017-02-18 18:30 - 2016-05-06 12:40 - 00000000 ____D C:\Users\linji\AppData\Roaming\TS3Client 2017-02-18 18:30 - 2016-02-18 17:16 - 00000000 ____D C:\Users\linji\AppData\Local\ElevatedDiagnostics 2017-02-18 18:21 - 2016-11-22 07:59 - 00000000 ____D C:\Users\linji 2017-02-18 18:21 - 2016-05-06 12:40 - 00000000 ____D C:\Users\linji\AppData\Local\TeamSpeak 3 Client 2017-02-18 17:22 - 2016-11-22 07:59 - 03120248 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-02-18 17:22 - 2016-07-16 23:40 - 01344042 _____ C:\WINDOWS\system32\perfh00C.dat 2017-02-18 17:22 - 2016-07-16 23:40 - 00335234 _____ C:\WINDOWS\system32\perfc00C.dat 2017-02-18 17:20 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-17 23:34 - 2016-08-12 12:23 - 00000000 ___HD C:\Temp 2017-02-17 23:34 - 2016-03-28 08:58 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-02-17 23:33 - 2016-07-12 15:28 - 00000000 ____D C:\Users\linji\AppData\Roaming\Ludashi 2017-02-17 23:27 - 2016-11-22 07:57 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-02-17 23:26 - 2016-12-18 18:30 - 00004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-17 23:26 - 2016-11-22 08:12 - 00003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-17 23:26 - 2016-11-22 08:12 - 00003884 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-17 23:26 - 2016-11-22 08:12 - 00003866 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-17 23:26 - 2016-11-22 08:12 - 00003858 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-17 23:26 - 2016-11-22 08:12 - 00003696 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-02-17 23:26 - 2016-11-22 07:57 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2017-02-17 23:26 - 2016-01-29 06:11 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-02-17 23:24 - 2016-11-22 08:12 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-02-17 23:24 - 2016-11-22 07:57 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2017-02-17 23:24 - 2016-09-24 15:38 - 00000000 ____D C:\Program Files (x86)\Hi-Rez Studios 2017-02-17 23:24 - 2016-08-11 04:19 - 00000350 _____ C:\WINDOWS\Tasks\HPCeeScheduleForlinji.job 2017-02-17 23:24 - 2016-02-18 18:45 - 00000000 ____D C:\ProgramData\TXQMPC 2017-02-17 23:24 - 2016-02-17 14:11 - 00000000 __SHD C:\Users\linji\IntelGraphicsProfiles 2017-02-17 23:23 - 2016-07-16 07:04 - 00524288 _____ C:\WINDOWS\system32\config\BBI 2017-02-17 23:23 - 2016-02-17 17:17 - 00000000 ____D C:\Users\linji\AppData\Roaming\Skype 2017-02-17 23:14 - 2016-01-29 06:20 - 00000000 ____D C:\ProgramData\AVAST Software 2017-02-17 17:10 - 2016-11-19 11:49 - 00000000 ____D C:\Users\linji\AppData\LocalLow\Mozilla 2017-02-17 17:08 - 2016-11-27 20:38 - 00000000 ____D C:\Users\linji\Desktop\fourberie de CS 2017-02-17 17:02 - 2016-03-06 19:08 - 00000021 _____ C:\Users\linji\AppData\Roaming\fixcfg.ini 2017-02-17 17:02 - 2016-03-06 19:08 - 00000000 ____D C:\WINDOWS\SysWOW64\dg597 2017-02-17 16:55 - 2016-12-08 16:44 - 00000000 ____D C:\Users\linji\AppData\Local\CrashDumps 2017-02-17 16:50 - 2016-07-16 07:04 - 00032768 _____ C:\WINDOWS\system32\config\ELAM 2017-02-17 16:22 - 2016-03-02 15:53 - 00000000 ____D C:\Users\linji\AppData\Roaming\BaiduYunGuanjia 2017-02-17 16:21 - 2016-08-12 12:21 - 00000000 ____D C:\Program Files\Tongbu 2017-02-17 16:21 - 2016-08-12 12:20 - 00000000 ____D C:\Users\linji\Documents\Tongbu 2017-02-17 16:20 - 2016-11-05 15:40 - 00000808 _____ C:\Users\Public\Desktop\腾讯QQ.lnk 2017-02-17 16:20 - 2016-03-26 10:37 - 00000000 ____D C:\Users\linji\Documents\Tencent Files 2017-02-17 16:20 - 2016-03-02 16:09 - 00000000 ____D C:\Users\linji\AppData\Roaming\BaiduYunKongMing 2017-02-17 16:20 - 2016-02-17 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\腾讯软件 2017-02-16 23:21 - 2016-05-15 20:53 - 00000000 ____D C:\Users\linji\BrawlhallaReplays 2017-02-16 22:26 - 2016-02-17 14:39 - 00000000 ____D C:\ProgramData\Tencent 2017-02-16 17:06 - 2016-11-22 08:12 - 00003242 _____ C:\WINDOWS\System32\Tasks\HPCeeScheduleForlinji 2017-02-11 11:22 - 2016-12-02 18:32 - 00000000 ____D C:\WINDOWS\Minidump 2017-02-11 02:29 - 2016-09-26 01:23 - 00000000 ____D C:\Users\linji\AppData\Roaming\Frontwing 2017-02-11 02:29 - 2016-05-27 06:06 - 00000000 ____D C:\Users\linji\AppData\Roaming\SmartSteamEmu 2017-02-10 20:29 - 2016-10-28 19:22 - 14516664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2017-02-10 17:13 - 2016-02-17 17:08 - 00000000 ____D C:\Users\linji\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2017-02-10 07:20 - 2016-03-06 19:03 - 00000000 ____D C:\Users\linji\AppData\Roaming\dg 2017-02-10 03:33 - 2016-12-05 17:07 - 00576192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2017-02-10 03:33 - 2016-10-28 19:22 - 04078008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2017-02-10 03:33 - 2016-10-28 19:22 - 03597128 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2017-02-10 03:33 - 2016-10-28 19:22 - 00043556 _____ C:\WINDOWS\system32\nvinfo.pb 2017-02-10 00:13 - 2016-10-08 21:57 - 00001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2017-02-09 23:57 - 2016-11-22 07:57 - 07791217 _____ C:\WINDOWS\system32\nvcoproc.bin 2017-02-09 23:57 - 2016-11-22 07:57 - 06403640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2017-02-09 23:57 - 2016-11-22 07:57 - 02477504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2017-02-09 23:57 - 2016-11-22 07:57 - 01764408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2017-02-09 23:57 - 2016-11-22 07:57 - 00548288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2017-02-09 23:57 - 2016-11-22 07:57 - 00393784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2017-02-09 23:57 - 2016-11-22 07:57 - 00083512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2017-02-09 23:57 - 2016-11-22 07:57 - 00071224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2017-02-09 22:43 - 2016-01-29 06:22 - 00000000 ____D C:\Program Files (x86)\Dropbox 2017-02-09 22:42 - 2016-03-13 22:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive 2017-02-09 22:39 - 2016-07-03 09:59 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner 2017-02-08 19:17 - 2016-03-13 22:48 - 00000000 ___RD C:\Users\linji\Google Drive 2017-02-08 16:03 - 2016-02-18 20:37 - 00000000 ____D C:\Users\linji\AppData\Local\Google 2017-02-08 16:03 - 2016-02-18 20:37 - 00000000 ____D C:\Program Files (x86)\Google 2017-02-08 14:35 - 2016-02-17 14:11 - 00000000 ____D C:\Users\linji\AppData\Local\Packages 2017-02-08 14:18 - 2016-03-13 07:59 - 00000000 ____D C:\Users\linji\AppData\Roaming\RenPy 2017-02-08 13:51 - 2016-11-22 08:12 - 00003574 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2017-02-08 13:51 - 2016-11-22 08:12 - 00003350 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2017-02-08 13:02 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-02-07 22:03 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\FxsTmp 2017-02-07 21:52 - 2016-07-16 12:47 - 00000000 __RSD C:\WINDOWS\Media 2017-02-07 21:32 - 2016-09-17 15:41 - 00000000 ____D C:\Program Files (x86)\epson 2017-02-07 21:31 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-02-07 21:03 - 2016-09-17 15:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON 2017-02-07 21:03 - 2016-01-29 06:08 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-02-06 16:35 - 2016-02-17 15:02 - 00000000 ___RD C:\Users\linji\Dropbox 2017-02-05 05:36 - 2016-03-27 01:03 - 00000000 ____D C:\Program Files\Common Files\AV 2017-02-05 01:05 - 2016-06-11 16:50 - 00000000 ____D C:\Users\linji\AppData\Local\Movavi 2017-02-04 11:56 - 2016-12-02 18:32 - 00000290 __RSH C:\Users\linji\ntuser.pol 2017-02-04 11:56 - 2016-12-02 16:09 - 00000290 __RSH C:\ProgramData\ntuser.pol 2017-02-04 01:00 - 2016-02-20 00:11 - 00000000 ____D C:\Users\linji\AppData\Local\Warframe 2017-02-03 16:14 - 2016-02-17 17:16 - 00000000 ____D C:\ProgramData\Skype 2017-02-03 16:13 - 2016-02-17 17:17 - 00000000 ___RD C:\Program Files (x86)\Skype 2017-01-28 09:36 - 2016-12-10 11:50 - 00000000 ____D C:\Users\linji\AppData\Roaming\MangaGamer 2017-01-27 17:14 - 2016-03-07 19:08 - 00000936 _____ C:\Users\linji\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\lol.lnk 2017-01-26 20:42 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-01-26 19:24 - 2016-02-17 21:57 - 00000000 ____D C:\Program Files\Common Files\Apple 2017-01-26 01:13 - 2016-09-02 17:49 - 00103936 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2017-01-26 01:12 - 2016-09-02 17:49 - 00326656 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2017-01-26 01:09 - 2016-09-02 17:49 - 00322560 _____ C:\WINDOWS\system32\vulkan-1.dll 2017-01-26 01:09 - 2016-09-02 17:49 - 00118272 _____ C:\WINDOWS\system32\vulkaninfo.exe 2017-01-22 21:54 - 2016-10-30 17:14 - 00110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2017-01-22 21:54 - 2016-06-10 23:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-01-22 21:53 - 2016-10-30 17:14 - 00000000 ____D C:\Program Files\Java 2017-01-22 21:40 - 2016-08-24 00:41 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2017-01-22 21:39 - 2017-01-05 22:23 - 00079000 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\ksapi64.sys 2017-01-22 21:38 - 2017-01-05 22:23 - 00055384 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\kavbootc64.sys 2017-01-22 21:38 - 2016-10-17 16:43 - 00419592 _____ (MyDrivers.com) C:\WINDOWS\system32\Drivers\dgsafe_del.sys 2017-01-22 21:38 - 2016-10-17 16:43 - 00419592 _____ (MyDrivers.com) C:\WINDOWS\system32\Drivers\DgSafe.sys 2017-01-22 21:36 - 2017-01-05 22:27 - 00052824 _____ (Kingsoft Corporation) C:\WINDOWS\system32\Drivers\bootsafe64.sys 2017-01-22 21:35 - 2016-02-17 14:59 - 00000000 ____D C:\Users\linji\AppData\Local\Tencent 2017-01-22 18:20 - 2016-11-22 08:12 - 00003542 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task 2017-01-22 18:19 - 2016-03-26 10:39 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2017-01-22 18:16 - 2016-12-02 16:09 - 00000000 ____D C:\Users\linji\AppData\Roaming\ASPackage 2017-01-22 18:16 - 2016-12-02 16:09 - 00000000 ____D C:\Program Files (x86)\Youtube AdBlock 2017-01-22 18:16 - 2016-12-02 16:09 - 00000000 ____D C:\Program Files (x86)\36444335-1480691363-3933-3656-DC4A3EF4324B 2017-01-22 18:16 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-01-22 18:16 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-01-22 17:37 - 2016-01-29 06:20 - 00000000 ____D C:\Program Files\AVAST Software 2017-01-22 10:38 - 2016-02-19 19:25 - 00000000 ____D C:\Users\linji\AppData\Local\Arma 3 Launcher 2017-01-21 14:39 - 2016-07-12 15:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\鲁大师 2017-01-20 21:21 - 2016-07-12 21:06 - 00000000 ____D C:\Users\linji\AppData\Roaming\DrvMgr 2017-01-20 19:39 - 2017-01-17 17:36 - 00057792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2017-01-20 19:39 - 2016-10-08 21:57 - 01872320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2017-01-20 19:39 - 2016-10-08 21:57 - 01755072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll 2017-01-20 19:39 - 2016-10-08 21:57 - 01464768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2017-01-20 19:39 - 2016-10-08 21:57 - 01317312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll 2017-01-20 19:39 - 2016-10-08 21:57 - 00120256 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll 2017-01-20 17:38 - 2016-12-05 17:07 - 00576192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SET4288.tmp 2017-01-20 17:38 - 2016-11-22 07:57 - 00514616 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL 2017-01-20 17:38 - 2016-11-22 07:57 - 00420408 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2017-01-20 17:38 - 2016-10-28 19:22 - 04079032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\SETFFF9.tmp 2017-01-20 17:38 - 2016-10-28 19:22 - 03597640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\SET366B.tmp 2017-01-20 14:36 - 2016-12-18 18:30 - 00001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat ==================== Fichiers à la racine de certains dossiers ======= 2016-05-07 17:22 - 2016-05-07 17:22 - 0000042 _____ () C:\Users\linji\AppData\Roaming\altisrpfr.txt 2016-05-07 17:22 - 2016-05-07 17:33 - 0000001 _____ () C:\Users\linji\AppData\Roaming\altisrpfrJSRS.txt 2016-05-07 17:22 - 2016-05-07 17:22 - 0000047 _____ () C:\Users\linji\AppData\Roaming\altisrpfrts.txt 2016-09-02 09:29 - 2016-09-01 18:03 - 2710480 _____ (淘宝) C:\Users\linji\AppData\Roaming\DandelionSetup.exe 2016-03-06 19:08 - 2017-02-17 17:02 - 0000021 _____ () C:\Users\linji\AppData\Roaming\fixcfg.ini 2016-02-18 18:45 - 2016-02-18 18:45 - 0005120 _____ () C:\Users\linji\AppData\Roaming\GiftBag.db 2016-10-21 13:58 - 2017-02-19 21:17 - 0000052 _____ () C:\Users\linji\AppData\Roaming\localcache.dat 2016-02-21 10:56 - 2016-03-13 23:13 - 0002404 _____ () C:\Users\linji\AppData\Roaming\net.telestream.gameshow.xml 2016-07-10 19:28 - 2016-07-10 19:28 - 0704320 _____ () C:\Users\linji\AppData\Roaming\TXQBINSTX.DLL 2016-09-20 19:38 - 2016-09-20 19:39 - 48185856 _____ (Tencent Inc.) C:\Users\linji\AppData\Roaming\TXQBINSTX2.EXE 2016-02-28 15:58 - 2016-02-28 16:03 - 0000045 _____ () C:\Users\linji\AppData\Roaming\xlaccolsetupstatus.ini 2016-02-28 11:44 - 2016-03-07 17:22 - 0000092 _____ () C:\Users\linji\AppData\Roaming\xlgdlapp.ini 2016-07-18 20:59 - 2016-07-03 04:28 - 0719714 ___SH () C:\Users\linji\AppData\Local\CSIDL_ 2016-07-18 21:01 - 2016-07-03 04:28 - 0719714 ___SH () C:\Users\linji\AppData\Local\CSIDL_X 2016-02-17 14:24 - 2016-02-17 20:31 - 2128896 _____ () C:\Users\linji\AppData\Local\file__0.localstorage 2016-10-21 13:58 - 2017-02-19 21:17 - 0000052 _____ () C:\Users\linji\AppData\Local\masm71.dat 2016-02-21 10:56 - 2016-03-13 23:13 - 0000601 _____ () C:\ProgramData\ContentToHashDecode.bin 2016-06-17 05:52 - 2016-06-06 14:52 - 0126640 _____ (Kingsoft Corporation) C:\ProgramData\dbsf.dll 2016-03-02 18:58 - 2016-03-04 20:42 - 0000223 _____ () C:\ProgramData\DP0004.dat 2016-06-02 21:25 - 2016-06-02 21:25 - 0123704 _____ () C:\ProgramData\emexkl.dll 2016-02-21 10:56 - 2016-03-13 23:13 - 0000003 _____ () C:\ProgramData\ExponentBeforeReversal.bin 2016-02-21 10:56 - 2016-03-13 23:13 - 0000004 _____ () C:\ProgramData\KeyInBlob.bin 2016-09-21 15:09 - 2016-09-21 15:09 - 0000016 _____ () C:\ProgramData\mntemp 2016-02-21 10:56 - 2016-03-13 23:13 - 0000128 _____ () C:\ProgramData\ModulusBeforeReversal.bin 2016-02-21 10:56 - 2016-03-13 23:13 - 0000128 _____ () C:\ProgramData\ModulusInBlob.bin 2017-02-05 01:04 - 2017-02-05 01:04 - 0004096 _____ () C:\ProgramData\nakuvtjg.ewu 2016-06-02 21:25 - 2016-12-23 19:23 - 0007280 _____ () C:\ProgramData\nmlist.ini 2016-06-11 16:50 - 2016-06-11 16:50 - 0004887 _____ () C:\ProgramData\nolecicr.ofg 2016-12-18 18:30 - 2017-01-17 17:36 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log 2016-12-18 18:30 - 2017-01-16 22:16 - 0006687 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1 2016-02-21 10:56 - 2016-03-13 23:13 - 0000140 _____ () C:\ProgramData\PublicKeyDecode.bin 2016-02-21 10:56 - 2016-03-13 23:13 - 0000128 _____ () C:\ProgramData\SignatureDecode.bin 2016-07-18 20:42 - 2016-07-18 20:43 - 0512000 _____ () C:\ProgramData\smp2.exe 2016-07-16 03:27 - 2016-07-16 03:27 - 0000000 _____ () C:\ProgramData\UserDefault.log Fichiers à déplacer ou supprimer: ==================== C:\Users\linji\AppData\Local\Temp\removelds_gcenter.bat C:\ProgramData\dbsf.dll C:\ProgramData\DP0004.dat C:\ProgramData\emexkl.dll C:\ProgramData\smp2.exe C:\Users\Public\ASR.dat ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-02-12 17:37 ==================== Fin de FRST.txt ============================