Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 19-02-2017 Exécuté par shagu (administrateur) sur DESKTOP-1S8FNS1 (20-02-2017 07:44:12) Exécuté depuis C:\Users\shagu\Desktop Profils chargés: shagu (Profils disponibles: defaultuser0 & shagu) Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Edge) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (Sage France) C:\Program Files (x86)\Sage\Declarations Sociales\Serveur\DeclarationsSociales.Service.exe (Microsoft Corporation) C:\Windows\syswow64\svchost.exe () C:\Windows\syswow64\NetUtils2016.exe () C:\ProgramData\NetworkPacketManitor\Nettrans.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe () C:\Program Files (x86)\UCBrowser\Application\UCService.exe () C:\ProgramData\Voyasollam\Voyasollam.exe (Search Module Ltd.) C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe () C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe (Reimage®) C:\Program Files\Reimage\Reimage Protector\ReiSystem.exe (Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe () C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe (Microsoft Corporation) C:\Windows\syswow64\rundll32.exe (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe (E76YALI) C:\Users\shagu\AppData\Local\Temp\4Al4PnQuYPrUqr3FFgkc.exe (E76YALI) C:\Program Files (x86)\gamesdesktop\DVWUF19X4UB11HX.exe (E76YALI) C:\Users\shagu\AppData\Local\Temp\y0srZX2r7Mrm7n42SUjN.exe (Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 3\Integrator.exe (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Intel Corporation) C:\Windows\System32\igfxtray.exe (Intel Corporation) C:\Windows\System32\hkcmd.exe (Intel Corporation) C:\Windows\System32\igfxpers.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe () C:\Users\shagu\AppData\Roaming\gplyra\gplyra.exe () C:\Users\shagu\AppData\Roaming\cacaoweb\cacaoweb.exe (HhhooooooooooooooooooooOO) C:\Program Files\UD8MVCJA6E\72F13CPB5.exe (HhhooooooooooooooooooooOO) C:\Program Files\K08FHE8WEZ\CIK6GFBB3.exe (HhhooooooooooooooooooooOO) C:\Program Files\9D59N2UARQ\9D59N2UAR.exe (HhhooooooooooooooooooooOO) C:\Program Files\XCRBBFIWT2\XCRBBFIWT.exe (HhhooooooooooooooooooooOO) C:\Program Files\HBJ150IA9E\U0PGD0OB8.exe (HhhooooooooooooooooooooOO) C:\Program Files\YIC00DDH83\YIC00DDH8.exe () C:\Windows\SuperEx\SuperEx\SuperEx.exe (HhhooooooooooooooooooooOO) C:\Program Files\MGH6ES4EMS\MGH6ES4EM.exe (HhhooooooooooooooooooooOO) C:\Program Files\HR1EISSO8I\UG8TQSYP7.exe (HhhooooooooooooooooooooOO) C:\Program Files\G6QYP4DSM6\G6QYP4DSM.exe (HhhooooooooooooooooooooOO) C:\Program Files\7TQYK9F2L3\3CP63ST4A.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (HhhooooooooooooooooooooOO) C:\Program Files\2QOHOPBI8A\FFVWWPHJ8.exe (HhhooooooooooooooooooooOO) C:\Program Files\96S92P6X1T\96S92P6X1.exe (HhhooooooooooooooooooooOO) C:\Program Files\2DLEWYFEH1\2DLEWYFEH.exe (HhhooooooooooooooooooooOO) C:\Program Files\BNEY0VW1JX\BNEY0VW1J.exe (HhhooooooooooooooooooooOO) C:\Program Files\HAHXFC6EP5\HAHXFC6EP.exe (HhhooooooooooooooooooooOO) C:\Program Files\45GFA6D3KF\UJT9Q5P5J.exe (HhhooooooooooooooooooooOO) C:\Program Files\NMOSU88QUN\NMOSU88QU.exe (HhhooooooooooooooooooooOO) C:\Program Files\CL2Z8BKRBL\CL2Z8BKRB.exe (HhhooooooooooooooooooooOO) C:\Program Files\MZTH9TTY69\MZTH9TTY6.exe (HhhooooooooooooooooooooOO) C:\Program Files\EUHYMT8JEG\EUHYMT8JE.exe (HhhooooooooooooooooooooOO) C:\Program Files\UY9ZFDD2Q8\UY9ZFDD2Q.exe (HhhooooooooooooooooooooOO) C:\Program Files\N1HC2YI2Q6\DFV6IXU4O.exe (HhhooooooooooooooooooooOO) C:\Program Files\148NE6VHDY\LW3OM9X26.exe (HhhooooooooooooooooooooOO) C:\Program Files\ZIXN54QL90\ZIXN54QL9.exe (HhhooooooooooooooooooooOO) C:\Program Files\O2R7XAAT8Q\8UM85DCE2.exe (HhhooooooooooooooooooooOO) C:\Program Files\W39G0ASHJ1\GV4H8CV2C.exe (HhhooooooooooooooooooooOO) C:\Program Files\6AHBOB74A5\0OZIGFXM5.exe (HhhooooooooooooooooooooOO) C:\Program Files\3H3Q4COCAM\3H3Q4COCA.exe (HhhooooooooooooooooooooOO) C:\Program Files\EFNNQ7IA4E\EFNNQ7IA4.exe (Byte Technologies LLC) C:\Program Files\ByteFence\ByteFence.exe (The Chromium Authors) C:\Users\shagu\AppData\Local\chromium\Application\chrome.exe (HhhooooooooooooooooooooOO) C:\Program Files\IKV6HT8JBY\JNMPC1KAR.exe (HhhooooooooooooooooooooOO) C:\Program Files\G8QTO7W9PW\G8QTO7W9P.exe (HhhooooooooooooooooooooOO) C:\Program Files\Z0T35S67R9\Z0T35S67R.exe (HhhooooooooooooooooooooOO) C:\Program Files\73107794SP\73107794S.exe () C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe () C:\Program Files (x86)\UCBrowser\Application\6.0.1471.913\UCAgent.exe (Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Reason Software Company Inc.) C:\Program Files\ByteFence\rsEngineHelper.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-07] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11860072 2011-06-09] (Realtek Semiconductor) HKLM\...\Run: [gplyra] => C:\Users\shagu\AppData\Roaming\gplyra\gplyra.exe [1570304 2017-02-15] () <===== ATTENTION HKLM-x32\...\Run: [AgentMonitor] => C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe [317824 2016-01-18] () HKLM\...\RunOnce: [OMEWPRODUCT_P85C2] => C:\Users\shagu\AppData\Local\Temp\4Al4PnQuYPrUqr3FFgkc.exe [65536 2017-02-20] (E76YALI) <===== ATTENTION HKLM\...\RunOnce: [OTUTPRODUCT_6VSZ1] => C:\Program Files (x86)\gamesdesktop\DVWUF19X4UB11HX.exe [64512 2017-02-20] (E76YALI) <===== ATTENTION HKLM\...\RunOnce: [OMEWPRODUCT_03YSA] => C:\Users\shagu\AppData\Local\Temp\y0srZX2r7Mrm7n42SUjN.exe [65536 2017-02-20] (E76YALI) <===== ATTENTION HKLM\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs, HKLM-x32\...\Winlogon: [Userinit] wscript C:\WINDOWS\run.vbs, Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [cacaoweb] => C:\Users\shagu\AppData\Roaming\cacaoweb\cacaoweb.exe [563896 2016-12-22] () HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [vbcNbeg0Sm] => C:\Program Files\UD8MVCJA6E\72F13CPB5.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [10S41wBbCk] => C:\Program Files\K08FHE8WEZ\CIK6GFBB3.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [zFBS5cYeyn] => C:\Program Files\9D59N2UARQ\9D59N2UAR.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [jbGxsjN3SB] => C:\Program Files\XCRBBFIWT2\XCRBBFIWT.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [z6pKLjhQXS] => C:\Program Files\HBJ150IA9E\U0PGD0OB8.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [Jh6NMovUhE] => C:\Program Files\YIC00DDH83\YIC00DDH8.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [SuperEx] => C:\WINDOWS\SuperEx\SuperEx\SuperEx.exe [31232 2017-02-06] () HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [NJ7yTDdiis] => C:\Program Files\MGH6ES4EMS\MGH6ES4EM.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [CISnLD1WDc] => C:\Program Files\HR1EISSO8I\UG8TQSYP7.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [NmzCoKwHlZ] => C:\Program Files\G6QYP4DSM6\G6QYP4DSM.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [yGAXNASFzJ] => C:\Program Files\7TQYK9F2L3\3CP63ST4A.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [MDX0jHCpgL] => C:\Program Files\2QOHOPBI8A\FFVWWPHJ8.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [14yIxU6ZYc] => C:\Program Files\96S92P6X1T\96S92P6X1.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [pDDipqKIqI] => C:\Program Files\2DLEWYFEH1\2DLEWYFEH.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [S9u7W9EUSV] => C:\Program Files\BNEY0VW1JX\BNEY0VW1J.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [yUmAdZsXww] => C:\Program Files\HAHXFC6EP5\HAHXFC6EP.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [HYS4IOVKhj] => C:\Program Files\45GFA6D3KF\UJT9Q5P5J.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [ffGGtAwKQq] => C:\Program Files\NMOSU88QUN\NMOSU88QU.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [2wLeNYFha4] => C:\Program Files\CL2Z8BKRBL\CL2Z8BKRB.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [e9tfP94RW6] => C:\Program Files\MZTH9TTY69\MZTH9TTY6.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [s2SWcM7fEQ] => C:\Program Files\EUHYMT8JEG\EUHYMT8JE.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [F5V77GyE2i] => C:\Program Files\UY9ZFDD2Q8\UY9ZFDD2Q.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [dTkHqgTlg1] => C:\Program Files\N1HC2YI2Q6\DFV6IXU4O.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [McQBzlVOQq] => C:\Program Files\148NE6VHDY\LW3OM9X26.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [6S238jJqDc] => C:\Program Files\ZIXN54QL90\ZIXN54QL9.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [5L0ac3B513] => C:\Program Files\O2R7XAAT8Q\8UM85DCE2.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [rCwgoPGHnh] => C:\Program Files\W39G0ASHJ1\GV4H8CV2C.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [bv3UB0CQ22] => C:\Program Files\6AHBOB74A5\0OZIGFXM5.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [kTOBG3YOIr] => C:\Program Files\3H3Q4COCAM\3H3Q4COCA.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [4pgFoiOgSX] => C:\Program Files\EFNNQ7IA4E\EFNNQ7IA4.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [GoogleChromeAutoLaunch_20E21DB5AC800E060122B26ADD0DA166] => C:\Users\shagu\AppData\Local\chromium\Application\chrome.exe [828416 2017-01-21] (The Chromium Authors) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [0aPTB1mht8] => C:\Program Files\IKV6HT8JBY\JNMPC1KAR.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [8MS98DOnSt] => C:\Program Files\G8QTO7W9PW\G8QTO7W9P.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [i8l0YonkVV] => C:\Program Files\Z0T35S67R9\Z0T35S67R.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\Run: [oDTQAGl6jI] => C:\Program Files\73107794SP\73107794S.exe [370688 2017-02-20] (HhhooooooooooooooooooooOO) HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\...\MountPoints2: {07056a90-c299-11e6-8215-806e6f6e6963} - "D:\VTech_toy_Setup.exe" HKLM\...\Providers\7f9le1xv: C:\Program Files (x86)\Qihesclzty Schedule\local64spl.dll [307712 2017-02-20] () AppInit_DLLs: C:\ProgramData\Voyasollam\Bamstock.dll => C:\ProgramData\Voyasollam\Bamstock.dll [358912 2017-02-20] () AppInit_DLLs-x32: C:\ProgramData\Voyasollam\Hotnix.dll => C:\ProgramData\Voyasollam\Hotnix.dll [248320 2017-02-20] () ShellIconOverlayIdentifiers: [KzShlobj] -> {AAA0C5B8-933F-4200-93AD-B143D7FFF9F2} => C:\Program Files\¿ìѹ\X64\KZipShell.dll [2017-02-20] () BootExecute: autocheck autochk * 尀獵牥屳桳条屵灡摰瑡屡潬慣屬档潲業浵慜灰楬慣楴湯捜牨浯⹥硥⁥ⴭ畡潴氭畡据⵨瑡猭慴瑲灵ⴠ瀭潲楦敬搭物捥潴祲䐽晥畡瑬ⴠ爭獥潴敲氭獡⵴敳獳潩ⴭ敲瑳牯ⵥ慬瑳猭獥楳湯ਢ嬊䭈奅䱟䍏䱁䵟䍁䥈䕎屜体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮湕湩瑳污屬ㄱ㤵㜸㌶㠴〷㘷㌹㔰㐶੝〢㴢睤牯㩤〰〰〰㄰ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯啜楮獮慴汬㍜〶㼿㼿੝嬊䭈奅䱟䍏䱁䵟䍁䥈䕎屜体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮湕湩瑳污屬㔷ㅥ愴㙤搶挳摥㝡੝嬊䭈奅䱟䍏䱁䵟䍁䥈䕎屜体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮湕湩瑳污屬摁牤獥䉳潯嵫ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯啜楮獮慴汬䑜物捥䑴慲䕷嵸ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯啜楮獮慴汬䑜䵘剟湵楴敭੝嬊䭈奅䱟䍏䱁䵟䍁䥈䕎屜体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮湕湩瑳污屬潆瑮潣敲੝嬊䭈奅䱟䍏䱁䵟䍁䥈䕎屜体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮湕湩瑳污屬䕉〴੝嬊䭈奅䱟䍏䱁䵟䍁䥈䕎屜体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮湕湩瑳污屬䕉䐴瑡嵡ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯啜楮獮慴汬䥜㕅䅂䕋嵘ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯啜楮獮慴汬䥜䑅瑡嵡ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯啜楮獮慴汬䵜扯汩佥瑰潩偮捡嵫ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯啜楮獮慴汬䵜汐祡牥崲ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳畃牲湥噴牥楳湯啜楮獮慴汬卜档摥汵湩䅧敧瑮੝嬊䭈奅䱟䍏䱁䵟䍁䥈䕎屜体呆䅗䕒䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮湕湩瑳污屬䥗嵃∊潎敒潭敶㴢睤牯㩤〰〰〰㄰ਊ䡛䕋彙佌䅃彌䅍䡃义居卜䙏坔剁居楍牣獯景屴楗摮睯屳瑈汭䠠汥嵰∊䵉䍔久㐱䌮䵈㴢敨⡸⤲㈺ⰵ〰㔬ⰳ〰㜬ⰹ〰㜬ⰳ〰㜬ⰴ〰㘬ⰵ〰㘬Ɽ〰㔬ⰲ〰㘬ⱦ〰㘬ⱦ〰㜬ⰴੜ〰㈬ⰵ〰㔬Ᵽ〰㐬ⰹ〰㐬Ɽ〰㐬ⰵ〰㔬Ᵽ〰㐬ⰹ〰㐬Ɽ〰㐬ⰵ〰㔬ⰴ〰尬㐊ⰳ〰㔬Ᵽ〰㐬ⰸ〰㐬ⰵ〰㐬Ᵽ〰㔬ⰰ〰〬ⰰ〰甊慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥停潲数瑲卹敨瑥慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜慲晴汩履敄慦汵䥴潣嵮∊㴢敨⡸⤲㐺ⰰ〰㈬ⰵ〰㔬ⰳ〰㜬ⰹ〰㜬ⰳ〰㜬ⰴ〰㘬ⰵ〰㘬Ɽ䌽Ƿ㲔༞퀘ᆛⱦੜ〰㜬ⰴ〰㈬ⰵ〰㔬Ᵽ〰㔬ⰳ〰㜬ⰹ〰㜬ⰳ〰㜬ⰴ〰㘬ⰵ〰㘬Ɽ〰㌬ⰳ〰尬㌊ⰲ〰㔬Ᵽ〰㘬Ɽ〰㜬ⰳ〰㜬ⰲ〰㘬ⰱ〰㜬ⰴ〰㘬ⰹ〰㘬ⱥ〰㘬ⰷ〰㈬ⱥੜ〰㘬ⰴ〰㘬Ᵽ〰㘬Ᵽ〰㈬Ᵽ〰㌬ⰸ〰〬ⰰ〰ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥䍜湯整瑸敍畮慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥停潲数瑲卹敨瑥慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥䍜湯整瑸敍畮慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥停潲数瑲卹敨瑥慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥䍜湯整瑸敍畮慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥停潲数瑲卹敨瑥慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥䍜湯整瑸敍畮慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥停潲数瑲卹敨瑥慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥䍜湯整瑸敍畮慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥停潲数瑲卹敨瑥慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥䍜湯整瑸敍畮慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥停潲数瑲卹敨瑥慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥䍜湯整瑸敍畮慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙䱃十䕓当佒呏屜楗剮剁獜敨汬硥停潲数瑲卹敨瑥慈摮敬獲筜㑂䐱㡂〶㘭䔴ⴴㄱ㉄㤭〹ⴶ㑅䘹䑁ㅃ㌷䅃嵽∊㴢∢ਊ䡛䕋彙啃剒久彔单剅屜潓瑦慷敲䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮畒嵮∊畨佭㑢噥嘳㴢∢㩃停潲牧浡䘠汩獥⠠㡸⤶䑜獩偫䍜䙒㍄攮數∢ਊ䡛䕋彙啃剒久彔单剅屜潓瑦慷敲䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮畒嵮∊㍵湨十噰䩴㴢∢㩃停潲牧浡䘠汩獥⠠㡸⤶䉜䍥敬湡牥塜䰳㜷攮數∢ਊ䡛䕋彙啃剒久彔单剅屜潓瑦慷敲䵜捩潲潳瑦坜湩潤獷䍜牵敲瑮敖獲潩屮畒嵮∊婎教华硙䥳㴢∢㩃停潲牧浡䘠汩獥⠠㡸⤶䑜獩偫㑜兗䡂攮數∢ਊ䡛䕋彙啃剒久彔单剅屜潓瑦慷敲䵜捩潲潳瑦坜䨼þ㲕ࠟἘ˃‸ᆚ타✴傌ÿ䠼˓￿￿￿￿￿￿￿뿿￿￿￿￿￿￿￿￿ GroupPolicy: Restriction <======= ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{28515481-706b-4d57-898b-529b75b50f2b}: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{5e598de2-6db1-4d79-a9c6-d89f1c748cf7}: [DhcpNameServer] 192.168.1.254 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRHOjYN9_5EdL7qPpMxkGStHC4wmTIB36XWMy9a0VnLziUhrYEowxR-PbiLYmqBYHrYNX3Lc5VWOPmTxuFoWoz2zhnzfN1mFLqdjtKnE7MXG1nMMiGXCoiE5wvrPd7jYDsZuKjguQQw2NrQ8ZrDNWf4KUnqZ8-C3WcSJjd1S1ZROYgGAq-LWqPEDADzw,,&q={searchTerms} HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://fr.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL = SearchScopes: HKLM-x32 -> ielnksrch URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRHOjYN9_5EdL7qPpMxkGStHC4wmTIB36XWMy9a0VnLziUhrYEowxR-PbiLYmqBYHrYNX3Lc5VWOPmTxuFoWoz2zhnzfN1mFLqdjtKnE7MXG1nMMiGXCoiE5wvrPd7jYDsZuKjguQQw2NrQ8ZrDNWf4KUnqZ8-C3WcSJjd1S1ZROYgGAq-LWqPEDADzw,,&q={searchTerms} SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM-x32 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StBtAzyyByEtAtD0DtGyDtD0B0FtGyCyDtDyEtGtC0F0FtAtG0Czz0AyEtA0CyD0B0B0DtAyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1306435427%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-1826273261-1479682476-3830217024-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-1826273261-1479682476-3830217024-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://fr.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wbf_secureddownload_17_07_ssg01¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dfr%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1Qzu0Ezzzy0Azz0F0EzyyC0AyCtD0EyEyB0AtN0D0Tzu0StCzzyByCtN1L2XzutAtFtByBtFtCtFyDtDtN1L1Czu1StN1L1G1B1V1N2Y1L1Qzu2StDzzyBzy0ByD0EyEtGtCyCtCzytG0DyB0D0CtGyE0FyDyBtG0E0E0EyDtD0BtCyCyEtByB0E2QtN1M1F1B2Z1V1N2Y1L1Qzu2StA0EtDzztC0D0ByEtG0DyB0CtDtGyEtB0EtCtGzy0DyDyDtGzzzz0B0AtCyD0AtDzz0C0AtD2QtN0A0LzuyE%26cr%3D1099644063%26a%3Dwbf_secureddownload_17_07_ssg01%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-1826273261-1479682476-3830217024-1001 -> {C9D65B00-4F67-48F1-8E80-790AAE2F887C} URL = hxxp://www-searching.com/s.ashx?prd=opensearch&q={searchTerms}&s=H2Kzftpbl0cshmoAU,23e88ca2-8aa8-44b1-b319-9ee3506f76d4, SearchScopes: HKU\S-1-5-21-1826273261-1479682476-3830217024-1001 -> {ielnksrch} URL = hxxps://%66%65%65%64.%73%6F%6E%69%63-%73%65%61%72%63%68.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRHOjYN9_5EdL7qPpMxkGStHC4wmTIB36XWMy9a0VnLziUhrYEowxR-PbiLYmqBYHrYNX3Lc5VWOPmTxuFoWoz2zhnzfN1mFLqdjtKnE7MXG1nMMiGXCoiE5wvrPd7jYDsZuKjguQQw2NrQ8ZrDNWf4KUnqZ8-C3WcSJjd1S1ZROYgGAq-LWqPEDADzw,,&q={searchTerms} BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-02-20] (Microsoft Corporation) BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-02-20] (Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-02-20] (Microsoft Corporation) StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge Extension: (Adblock Plus) -> 10_EyeoGmbHAdblockPlus_d55gg7py3s0m0 => C:\Program Files\WindowsApps\EyeoGmbH.AdblockPlus_0.9.9.0_neutral__d55gg7py3s0m0 [2017-02-20] Edge Extension: (Office Online) -> 2016_MicrosoftOfficeOnline_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.OfficeOnline_1.5.0.0_neutral__8wekyb3d8bbwe [2017-02-20] Edge Extension: (Ghostery) -> EdgeExtension_GhosteryGhostery_kzkqe0pn505dg => C:\Program Files\WindowsApps\Ghostery.Ghostery_7.1.1.0_neutral__kzkqe0pn505dg [2017-02-20] FireFox: ======== FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-02-20] (Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.) Chrome: ======= CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - CHR HKU\S-1-5-21-1826273261-1479682476-3830217024-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S2 03735a5bef674249792b91c3a0317af8; C:\Program Files\03735a5bef674249792b91c3a0317af8\95098791c93564d12149b1e76c3ad2bc.exe [39826432 2017-02-17] () [Fichier non signé] <==== ATTENTION S2 ByteFenceService; C:\Program Files\ByteFence\ByteFenceService.exe [146912 2017-01-18] (Byte Technologies LLC) S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3699904 2016-12-28] (Microsoft Corporation) R2 DeclarationsSociales; C:\Program Files (x86)\Sage\Declarations Sociales\Serveur\DeclarationsSociales.Service.exe [15416 2016-06-16] (Sage France) R2 KuaizipUpdateChecker; C:\Program Files\¿ìѹ\X86\kuaizipUpdateChecker.dll [219032 2017-02-20] () R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation) R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation) R2 Nettrans; C:\ProgramData\NetworkPacketManitor\Nettrans.exe [43520 2017-02-20] () [Fichier non signé] R2 NetUtils2016srv; C:\WINDOWS\SysWOW64\NetUtils2016.exe [470592 2017-02-20] () R2 OtherSearch; C:\Program Files (x86)\y1V1qSd0Rl\kl.dll [829440 2017-02-18] () [Fichier non signé] <==== ATTENTION R2 ReimageRealTimeProtector; C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [8061808 2017-01-19] (Reimage®) R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [304456 2017-02-20] () R2 SMUpd; C:\Program Files\Common Files\Noobzo\GNUpdate\smu.exe [3110400 2017-02-20] (Search Module Ltd.) [Fichier non signé] <==== ATTENTION R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269400 2017-01-17] (Synaptics Incorporated) R2 UCBrowserSvc; C:\Program Files (x86)\UCBrowser\Application\UCService.exe [599440 2017-02-15] () R2 Voyasollam; C:\ProgramData\\Voyasollam\\Voyasollam.exe [982016 2017-02-20] () [Fichier non signé] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R1 7ad9afa1fb34e2ffbfe2d9be24eea4c0; C:\WINDOWS\system32\drivers\7ad9afa1fb34e2ffbfe2d9be24eea4c0.sys [96272 2017-02-17] (YHR5LV) <==== ATTENTION S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-02-03] (Disc Soft Ltd) S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2016-02-03] (Disc Soft Ltd) R2 KuaiZipDrive; C:\WINDOWS\system32\drivers\KuaiZipDrive.sys [92832 2017-02-20] (WinMount International Inc) R1 Lace514; C:\WINDOWS\System32\drivers\Lace_wpf_x64.sys [69400 2017-02-09] (Lace514) R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R1 NetUtils2016; C:\WINDOWS\system32\drivers\NetUtils2016.sys [909944 2017-02-20] () <==== ATTENTION R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2016-07-16] (Realtek Semiconductor Corporation ) R3 SMUpdd; C:\Program Files\Common Files\Noobzo\GNUpdate\smw.sys [52992 2017-02-20] () R1 ucdrv; C:\Program Files (x86)\UCBrowser\Security:ucdrv-x64.sys [25444 ] (UC Web Inc.) <==== ATTENTION S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) S1 clznlfdt; \??\C:\WINDOWS\system32\drivers\clznlfdt.sys [X] ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-02-20 07:44 - 2017-02-20 07:45 - 00036089 _____ C:\Users\shagu\Desktop\FRST.txt 2017-02-20 07:43 - 2017-02-20 07:44 - 00000000 ____D C:\FRST 2017-02-20 07:42 - 2017-02-20 07:43 - 02422784 _____ (Farbar) C:\Users\shagu\Desktop\FRST64.exe 2017-02-20 06:56 - 2017-02-20 06:56 - 00000000 ____D C:\Program Files\Z0T35S67R9 2017-02-20 06:56 - 2017-02-20 06:56 - 00000000 ____D C:\Program Files\73107794SP 2017-02-20 06:53 - 2017-02-20 06:53 - 00000000 ____D C:\Program Files (x86)\Reozerph 2017-02-20 06:49 - 2017-02-20 06:49 - 00012864 ____N C:\bootsqm.dat 2017-02-20 06:32 - 2017-02-20 07:19 - 00000000 ____D C:\AdwCleaner 2017-02-20 06:31 - 2017-02-20 06:31 - 04015056 _____ C:\Users\shagu\Downloads\adwcleaner_6.043.exe 2017-02-20 06:10 - 2017-02-20 06:10 - 00000000 ____D C:\Program Files\G8QTO7W9PW 2017-02-20 06:08 - 2017-02-20 06:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Socia2Sea Browser Enhancer 2017-02-20 06:07 - 2017-02-20 06:08 - 00000000 ____D C:\Program Files\03735a5bef674249792b91c3a0317af8 2017-02-20 06:06 - 2017-02-20 06:06 - 00000000 ____D C:\Program Files\IKV6HT8JBY 2017-02-20 05:58 - 2017-02-20 05:58 - 00000000 ____D C:\ProgramData\ByteFence 2017-02-20 05:57 - 2017-02-20 05:57 - 00000000 ____D C:\ProgramData\GlarySoft 2017-02-20 05:54 - 2017-02-20 05:54 - 00003458 _____ C:\Users\shagu\Desktop\MBAM-log-2017-02-20 (05-54-38).txt 2017-02-20 05:52 - 2017-02-20 05:52 - 00002342 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chromium.lnk 2017-02-20 05:52 - 2017-02-20 05:52 - 00000000 ____D C:\Users\shagu\AppData\Local\chromium 2017-02-20 05:50 - 2017-02-20 07:33 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 3 2017-02-20 05:50 - 2017-02-20 06:50 - 00000364 _____ C:\WINDOWS\Tasks\GlaryInitialize 3.job 2017-02-20 05:50 - 2017-02-20 05:50 - 00002692 _____ C:\WINDOWS\System32\Tasks\GlaryInitialize 3 2017-02-20 05:50 - 2017-02-20 05:50 - 00001195 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3.lnk 2017-02-20 05:50 - 2017-02-20 05:50 - 00001157 _____ C:\Users\shagu\Desktop\Glary Utilities 3.lnk 2017-02-20 05:50 - 2017-02-20 05:50 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Glary Utilities 3 2017-02-20 05:50 - 2017-02-20 05:50 - 00000000 ____D C:\Users\shagu\AppData\Roaming\GlarySoft 2017-02-20 05:48 - 2017-02-20 05:48 - 15796792 _____ C:\Users\shagu\Downloads\glary-utilities [1].exe 2017-02-20 05:40 - 2017-02-20 05:40 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Malwarebytes 2017-02-20 05:39 - 2017-02-20 06:50 - 00001010 _____ C:\WINDOWS\Tasks\Yahoo! Powered latom.job 2017-02-20 05:39 - 2017-02-20 05:53 - 00000000 ____D C:\Users\shagu\AppData\Local\{BAD08C8C-9E78-E034-F3E0-C5DCD7883944} 2017-02-20 05:39 - 2017-02-20 05:51 - 00000000 ____D C:\ProgramData\{D39216F1-59D0-9C37-DF16-0275455489BB} 2017-02-20 05:39 - 2017-02-20 05:48 - 00004088 _____ C:\WINDOWS\System32\Tasks\Yahoo! Powered latom 2017-02-20 05:39 - 2017-02-20 05:48 - 00000290 __RSH C:\ProgramData\ntuser.pol 2017-02-20 05:39 - 2017-02-20 05:39 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\shagu\Downloads\malwarebytes-anti-malware [1].exe 2017-02-20 05:39 - 2017-02-20 05:39 - 00001186 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2017-02-20 05:39 - 2017-02-20 05:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware 2017-02-20 05:39 - 2017-02-20 05:39 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-02-20 05:39 - 2017-02-20 05:39 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware 2017-02-20 05:39 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys 2017-02-20 05:38 - 2017-02-20 07:39 - 00000000 ____D C:\Program Files\ByteFence 2017-02-20 05:38 - 2017-02-20 05:46 - 01258608 _____ (SecuredDownload) C:\Users\shagu\Downloads\glary-utilities.exe 2017-02-20 05:38 - 2017-02-20 05:38 - 00003454 _____ C:\WINDOWS\System32\Tasks\ByteFence 2017-02-20 05:36 - 2017-02-20 05:36 - 01258608 _____ (SecuredDownload) C:\Users\shagu\Downloads\malwarebytes-anti-malware.exe 2017-02-20 05:34 - 2017-02-20 05:34 - 00000000 ____D C:\Program Files\EFNNQ7IA4E 2017-02-20 05:27 - 2017-02-20 05:27 - 00003548 _____ C:\WINDOWS\System32\Tasks\Reimage Reminder 2017-02-20 05:26 - 2017-02-20 05:26 - 00004352 _____ C:\WINDOWS\System32\Tasks\ReimageUpdater 2017-02-20 05:25 - 2017-02-20 05:29 - 00000000 ____D C:\rei 2017-02-20 05:25 - 2017-02-20 05:27 - 00000000 ____D C:\ProgramData\Reimage Protector 2017-02-20 05:25 - 2017-02-20 05:26 - 00000000 ____D C:\Program Files\Reimage 2017-02-20 05:25 - 2017-02-20 05:25 - 00001988 _____ C:\Users\Public\Desktop\PC Scan & Repair by Reimage.lnk 2017-02-20 05:25 - 2017-02-20 05:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Reimage Repair 2017-02-20 05:23 - 2017-02-20 05:28 - 00000140 _____ C:\WINDOWS\Reimage.ini 2017-02-20 05:23 - 2017-02-20 05:23 - 00604928 _____ (Reimage) C:\Users\shagu\Downloads\ReimageRepair.exe 2017-02-20 04:37 - 2017-02-20 04:37 - 00000000 ___HD C:\OneDriveTemp 2017-02-20 04:12 - 2017-02-20 04:12 - 00002052 _____ C:\WINDOWS\System32\Tasks\x6H14o86G1 2017-02-20 04:09 - 2017-02-20 04:09 - 00000000 ____D C:\Program Files\3H3Q4COCAM 2017-02-20 04:07 - 2017-02-20 07:32 - 00000000 ____D C:\Program Files (x86)\y1V1qSd0Rl 2017-02-20 04:06 - 2017-02-20 04:06 - 00000000 ____D C:\Program Files\W39G0ASHJ1 2017-02-20 04:06 - 2017-02-20 04:06 - 00000000 ____D C:\Program Files\6AHBOB74A5 2017-02-20 03:47 - 2017-02-20 03:47 - 00000000 ____D C:\Program Files\ZIXN54QL90 2017-02-20 03:47 - 2017-02-20 03:47 - 00000000 ____D C:\Program Files\O2R7XAAT8Q 2017-02-20 03:44 - 2017-02-20 03:44 - 00000000 ____D C:\Program Files\N1HC2YI2Q6 2017-02-20 03:44 - 2017-02-20 03:44 - 00000000 ____D C:\Program Files\148NE6VHDY 2017-02-20 03:42 - 2017-02-20 03:42 - 00000000 ____D C:\Program Files\UY9ZFDD2Q8 2017-02-20 03:41 - 2017-02-20 03:41 - 00000000 ____D C:\Program Files\EUHYMT8JEG 2017-02-20 03:38 - 2017-02-20 03:38 - 00000000 ____D C:\Program Files\MZTH9TTY69 2017-02-20 03:29 - 2017-02-20 03:29 - 00000000 ____D C:\Program Files\NMOSU88QUN 2017-02-20 03:29 - 2017-02-20 03:29 - 00000000 ____D C:\Program Files\CL2Z8BKRBL 2017-02-20 03:25 - 2017-02-20 03:29 - 00000000 ____D C:\Program Files (x86)\gamesdesktop 2017-02-20 03:24 - 2017-02-20 03:24 - 00000017 _____ C:\Users\shagu\AppData\Local\resmon.resmoncfg 2017-02-20 03:22 - 2017-02-20 03:22 - 00000000 ____D C:\Program Files\HAHXFC6EP5 2017-02-20 03:22 - 2017-02-20 03:22 - 00000000 ____D C:\Program Files\45GFA6D3KF 2017-02-20 03:13 - 2017-02-20 03:13 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Sterferent 2017-02-20 03:09 - 2017-02-20 03:09 - 00000000 ____D C:\Program Files\BNEY0VW1JX 2017-02-20 03:08 - 2017-02-20 03:08 - 00000000 ____D C:\Program Files\2DLEWYFEH1 2017-02-20 03:07 - 2017-02-20 03:07 - 00000000 ____D C:\Program Files\96S92P6X1T 2017-02-20 03:06 - 2017-02-20 03:07 - 00000000 ____D C:\Program Files\2QOHOPBI8A 2017-02-20 03:04 - 2017-02-20 07:32 - 00625272 _____ C:\WINDOWS\system32\NetUtils2016.dll 2017-02-20 03:04 - 2017-02-20 03:05 - 00000000 ____D C:\Users\shagu\AppData\Roaming\gplyra 2017-02-20 03:04 - 2017-02-20 03:04 - 00909944 _____ C:\WINDOWS\system32\Drivers\NetUtils2016.sys 2017-02-20 03:04 - 2017-02-20 03:04 - 00470592 _____ C:\WINDOWS\SysWOW64\NetUtils2016.exe 2017-02-20 03:04 - 2017-02-20 03:04 - 00000000 ____D C:\WINDOWS\SysWOW64\sstmp 2017-02-20 03:04 - 2017-02-20 03:04 - 00000000 ____D C:\WINDOWS\system32\sstmp 2017-02-20 03:04 - 2017-02-20 03:04 - 00000000 ____D C:\Program Files\G6QYP4DSM6 2017-02-20 03:04 - 2017-02-20 03:04 - 00000000 ____D C:\Program Files\7TQYK9F2L3 2017-02-20 03:03 - 2017-02-20 03:20 - 00000000 ____D C:\Program Files (x86)\mpck 2017-02-20 03:02 - 2017-02-20 03:02 - 00002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk 2017-02-20 03:02 - 2017-02-20 03:02 - 00002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk 2017-02-20 03:02 - 2017-02-20 03:02 - 00002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk 2017-02-20 03:02 - 2017-02-20 03:02 - 00002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk 2017-02-20 03:02 - 2017-02-20 03:02 - 00002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2017-02-20 03:02 - 2017-02-20 03:02 - 00002491 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk 2017-02-20 03:02 - 2017-02-20 03:02 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk 2017-02-20 03:02 - 2017-02-20 03:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016 2017-02-20 02:53 - 2017-02-20 02:53 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2017-02-20 02:53 - 2017-02-20 02:53 - 00000867 _____ C:\Users\Public\Desktop\CCleaner.lnk 2017-02-20 02:53 - 2017-02-20 02:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2017-02-20 02:53 - 2017-02-20 02:53 - 00000000 ____D C:\Program Files\CCleaner 2017-02-20 02:49 - 2017-02-20 06:08 - 00000000 ____D C:\WINDOWS\system32\SSL 2017-02-20 02:48 - 2017-02-20 03:07 - 00000000 ____D C:\Users\shagu\AppData\Local\WikiThemes 2017-02-20 02:48 - 2017-02-20 02:49 - 00000000 __SHD C:\ProgramData\WindowsMsg 2017-02-20 02:47 - 2017-02-20 03:02 - 00000000 ____D C:\Users\shagu\AppData\Local\AppTrailers 2017-02-20 02:46 - 2017-02-20 03:15 - 00000000 ____D C:\Users\shagu\AppData\Local\app 2017-02-20 02:42 - 2017-02-20 06:50 - 00000324 _____ C:\WINDOWS\Tasks\UCBrowserUpdaterCore.job 2017-02-20 02:42 - 2017-02-20 05:28 - 00002678 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdaterCore 2017-02-20 02:42 - 2017-02-20 03:55 - 00000488 _____ C:\WINDOWS\Tasks\UCBrowserUpdater.job 2017-02-20 02:42 - 2017-02-20 02:42 - 00003506 _____ C:\WINDOWS\System32\Tasks\UCBrowserUpdater 2017-02-20 02:42 - 2017-02-20 02:42 - 00003476 _____ C:\WINDOWS\System32\Tasks\UCBrowserSecureUpdater 2017-02-20 02:41 - 2017-02-20 02:41 - 00001603 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC浏览器.lnk 2017-02-20 02:41 - 2017-02-20 02:41 - 00000000 ____D C:\Users\shagu\AppData\Local\UCBrowser 2017-02-20 02:41 - 2017-02-20 02:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UC浏览器 2017-02-20 02:40 - 2017-02-20 03:20 - 00000000 ____D C:\Users\shagu\AppData\Roaming\KuaiZip 2017-02-20 02:40 - 2017-02-20 02:40 - 00092832 _____ (WinMount International Inc) C:\WINDOWS\system32\Drivers\KuaiZipDrive.sys 2017-02-20 02:40 - 2017-02-20 02:40 - 00004128 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9D89B0CD-013E-4A3F-ACC2-932BA8279B44} 2017-02-20 02:40 - 2017-02-20 02:40 - 00000886 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\¿ìѹ.lnk 2017-02-20 02:40 - 2017-02-20 02:40 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Softlink 2017-02-20 02:39 - 2017-02-20 02:42 - 00000000 ____D C:\Program Files (x86)\UCBrowser 2017-02-20 02:39 - 2017-02-20 02:39 - 01906964 _____ C:\Users\shagu\AppData\Roaming\Triootlight.tst 2017-02-20 02:39 - 2017-02-20 02:39 - 01906964 _____ C:\Users\shagu\AppData\Roaming\Ding-Lex.tst 2017-02-20 02:39 - 2017-02-20 02:39 - 00000000 ____D C:\Program Files\¿ìѹ 2017-02-20 02:38 - 2017-02-20 02:34 - 00982016 _____ C:\Users\shagu\AppData\Roaming\Triootlight.exe 2017-02-20 02:38 - 2017-02-20 02:33 - 00982016 _____ C:\Users\shagu\AppData\Roaming\Ding-Lex.exe 2017-02-20 02:37 - 2017-02-20 02:37 - 00004422 _____ C:\WINDOWS\System32\Tasks\SMW_UpdateTask_Time_313835383239383434362d454a2a415034412a4a6c575a 2017-02-20 02:37 - 2017-02-20 02:37 - 00000000 ____D C:\ProgramData\SearchModule 2017-02-20 02:37 - 2017-02-20 02:37 - 00000000 ____D C:\Program Files\HR1EISSO8I 2017-02-20 02:37 - 2017-02-20 02:37 - 00000000 ____D C:\Program Files\Common Files\Noobzo 2017-02-20 02:36 - 2017-02-20 02:37 - 00000000 ____D C:\Program Files\MGH6ES4EMS 2017-02-20 02:36 - 2017-02-20 02:36 - 00000000 __SHD C:\Users\shagu\AppData\Local\svchost 2017-02-20 02:36 - 2017-02-20 02:36 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Mozilla 2017-02-20 02:36 - 2017-02-20 02:36 - 00000000 ____D C:\ProgramData\6d3ceda7-3187-0 2017-02-20 02:35 - 2017-02-20 02:35 - 00326144 _____ C:\ProgramData\smp2.exe 2017-02-20 02:35 - 2017-02-20 02:35 - 00278518 _____ C:\Users\shagu\AppData\Roaming\LexiBam.bin 2017-02-20 02:35 - 2017-02-20 02:35 - 00187904 _____ C:\WINDOWS\rsrcs.dll 2017-02-20 02:35 - 2017-02-20 02:35 - 00004262 _____ C:\WINDOWS\System32\Tasks\SMW_P 2017-02-20 02:35 - 2017-02-20 02:35 - 00002402 _____ C:\WINDOWS\SysWOW64\findit.xml 2017-02-20 02:35 - 2017-02-20 02:35 - 00000000 ____D C:\ProgramData\Voyasollams 2017-02-20 02:35 - 2017-02-20 02:35 - 00000000 ____D C:\ProgramData\6d3ceda7-3257-1 2017-02-20 02:34 - 2017-02-20 07:34 - 00000000 ____D C:\ProgramData\Voyasollam 2017-02-20 02:34 - 2017-02-20 04:12 - 00000002 _____ C:\END 2017-02-20 02:34 - 2017-02-20 02:39 - 07319040 _____ C:\Users\shagu\AppData\Roaming\agent.dat 2017-02-20 02:34 - 2017-02-20 02:39 - 00126464 _____ C:\Users\shagu\AppData\Roaming\noah.dat 2017-02-20 02:34 - 2017-02-20 02:39 - 00070752 _____ C:\Users\shagu\AppData\Roaming\Config.xml 2017-02-20 02:34 - 2017-02-20 02:39 - 00018432 _____ C:\Users\shagu\AppData\Roaming\Main.dat 2017-02-20 02:34 - 2017-02-20 02:39 - 00005568 _____ C:\Users\shagu\AppData\Roaming\md.xml 2017-02-20 02:34 - 2017-02-20 02:34 - 01906964 _____ C:\Users\shagu\AppData\Roaming\Viakix.tst 2017-02-20 02:34 - 2017-02-20 02:34 - 00278518 _____ C:\Users\shagu\AppData\Roaming\Zotstrong.bin 2017-02-20 02:34 - 2017-02-20 02:34 - 00000000 ____H C:\WINDOWS\system32\BITC7A.tmp 2017-02-20 02:34 - 2017-02-20 02:34 - 00000000 ____H C:\WINDOWS\system32\BIT3560.tmp 2017-02-20 02:34 - 2017-02-20 02:34 - 00000000 ____D C:\Program Files (x86)\Reozerph_ 2017-02-20 02:33 - 2017-02-20 03:04 - 00000000 ____D C:\Users\shagu\AppData\Local\Bertoward 2017-02-20 02:33 - 2017-02-20 02:35 - 00000000 ____D C:\ProgramData\NetworkPacketManitor 2017-02-20 02:33 - 2017-02-20 02:33 - 00278518 _____ C:\Users\shagu\AppData\Roaming\HomeLax.bin 2017-02-20 02:33 - 2017-02-20 02:33 - 00006144 _____ C:\WINDOWS\System32\Tasks\Qihesclzty Schedule 2017-02-20 02:33 - 2017-02-20 02:33 - 00000000 ____D C:\WINDOWS\SuperEx 2017-02-20 02:33 - 2017-02-20 02:33 - 00000000 ____D C:\Program Files (x86)\Qihesclzty Schedule 2017-02-20 02:33 - 2017-02-20 02:33 - 00000000 _____ C:\TOSTACK 2017-02-20 02:33 - 2017-02-20 02:32 - 00982016 _____ C:\Users\shagu\AppData\Roaming\Viakix.exe 2017-02-20 02:32 - 2017-02-20 02:34 - 00016224 _____ C:\Users\shagu\AppData\Roaming\InstallationConfiguration.xml 2017-02-20 02:32 - 2017-02-20 02:32 - 00140288 _____ C:\Users\shagu\AppData\Roaming\Installer.dat 2017-02-20 02:32 - 2017-02-20 02:32 - 00005154 _____ C:\WINDOWS\System32\Tasks\Clogingfureried 2017-02-20 02:32 - 2017-02-20 02:32 - 00000000 ____D C:\Program Files\YIC00DDH83 2017-02-20 02:31 - 2017-02-20 05:31 - 00000000 ____D C:\Program Files (x86)\DiskP 2017-02-20 02:31 - 2017-02-20 03:03 - 00000000 ____D C:\Program Files (x86)\BeCleaner 2017-02-20 02:31 - 2017-02-20 02:31 - 00000000 ____D C:\Program Files\XCRBBFIWT2 2017-02-20 02:31 - 2017-02-20 02:31 - 00000000 ____D C:\Program Files\HBJ150IA9E 2017-02-20 02:31 - 2017-02-20 02:31 - 00000000 ____D C:\Program Files\9D59N2UARQ 2017-02-20 02:30 - 2017-02-20 02:30 - 00001320 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gоoglе Сhrоmе.lnk 2017-02-20 02:30 - 2017-02-20 02:30 - 00000000 ____D C:\Users\shagu\AppData\Roaming\SPI 2017-02-20 02:30 - 2017-02-20 02:30 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Browsers 2017-02-20 02:30 - 2017-02-20 02:30 - 00000000 ____D C:\Program Files\UD8MVCJA6E 2017-02-20 02:30 - 2017-02-20 02:30 - 00000000 ____D C:\Program Files\K08FHE8WEZ 2017-02-20 02:26 - 2017-02-20 02:26 - 00000000 ____D C:\Program Files\Microsoft Office 15 2017-02-20 02:23 - 2017-02-20 02:23 - 03771704 _____ (Microsoft Corporation) C:\Users\shagu\Downloads\office-2016_16-0-7167-2060_fr_431791_32.exe 2017-02-20 02:10 - 2017-02-20 06:11 - 00000000 ____D C:\Program Files (x86)\Microsoft Office 2017-02-20 02:09 - 2017-02-20 02:09 - 00000000 ____D C:\Program Files (x86)\MSECache 2017-02-20 00:27 - 2017-02-20 00:27 - 00068994 _____ C:\Users\shagu\Downloads\DC_09_02_04_Malo_e.pdf 2017-02-20 00:27 - 2017-02-20 00:27 - 00064771 _____ C:\Users\shagu\Downloads\DC_09_02_04_Malo_c.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00083321 _____ C:\Users\shagu\Downloads\DC_09_02_04_Roland_c.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00079913 _____ C:\Users\shagu\Downloads\DC_09_02_04_Roland_e.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00062799 _____ C:\Users\shagu\Downloads\DC_09_02_04_Piman_e.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00061981 _____ C:\Users\shagu\Downloads\DC_09_02_03_Gama_e.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00059125 _____ C:\Users\shagu\Downloads\DC_09_02_04_Benoit_e.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00055503 _____ C:\Users\shagu\Downloads\DC_09_02_03_X_Y_e.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00049568 _____ C:\Users\shagu\Downloads\DC_09_02_04_Piman_c.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00044683 _____ C:\Users\shagu\Downloads\DC_09_02_04_Benoit_c.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00041652 _____ C:\Users\shagu\Downloads\DC_09_02_04_Louis_c.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00036638 _____ C:\Users\shagu\Downloads\DC_09_02_03_X_Y_c.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00033797 _____ C:\Users\shagu\Downloads\DC_09_02_03_Gama_c.pdf 2017-02-20 00:26 - 2017-02-20 00:26 - 00032843 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_c.pdf 2017-02-20 00:23 - 2017-02-20 00:23 - 00027808 _____ C:\Users\shagu\Downloads\DC_09_02_03_Louis_c.pdf 2017-02-20 00:12 - 2017-02-20 00:12 - 00047327 _____ C:\Users\shagu\Downloads\DC_09_02_03_Louis_e.pdf 2017-02-20 00:11 - 2017-02-20 00:11 - 00058876 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_e (1).pdf 2017-02-18 15:00 - 2017-02-18 15:00 - 00109916 _____ C:\Users\shagu\Downloads\DC_09_02_01_B (1).pdf 2017-02-17 23:18 - 2017-02-17 23:18 - 00096436 _____ C:\Users\shagu\Downloads\annabelle.eck.pdf 2017-02-17 23:07 - 2017-02-17 23:07 - 00058876 _____ C:\Users\shagu\Downloads\DC_09_02_03_Alpha_e.pdf 2017-02-17 23:02 - 2017-02-17 23:02 - 00399760 _____ C:\Users\shagu\Downloads\DC_09_02_08.pdf 2017-02-17 23:02 - 2017-02-17 23:02 - 00302979 _____ C:\Users\shagu\Downloads\DC_09_02_07.pdf 2017-02-17 23:02 - 2017-02-17 23:02 - 00259335 _____ C:\Users\shagu\Downloads\DC_09_02_06.pdf 2017-02-17 23:01 - 2017-02-17 23:02 - 00268802 _____ C:\Users\shagu\Downloads\DC_09_02_03.pdf 2017-02-17 23:01 - 2017-02-17 23:02 - 00190388 _____ C:\Users\shagu\Downloads\DC_09_02_05.pdf 2017-02-17 23:01 - 2017-02-17 23:02 - 00102768 _____ C:\Users\shagu\Downloads\DC_09_02_04.pdf 2017-02-17 23:01 - 2017-02-17 23:01 - 00387459 _____ C:\Users\shagu\Downloads\DC_09_02_02.pdf 2017-02-17 23:01 - 2017-02-17 23:01 - 00109916 _____ C:\Users\shagu\Downloads\DC_09_02_01_B.pdf 2017-02-17 19:09 - 2017-02-17 19:09 - 00000000 ____D C:\Users\shagu\AppData\Local\Downloaded Installations 2017-02-17 19:06 - 2014-11-17 11:17 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\capicom.dll 2017-02-17 19:06 - 2014-11-17 11:17 - 00159744 _____ (Inner Media, Inc.) C:\WINDOWS\SysWOW64\dzip32.dll 2017-02-17 19:06 - 2014-11-17 11:17 - 00139264 _____ (Inner Media, Inc.) C:\WINDOWS\SysWOW64\dunzip32.dll 2017-02-17 18:52 - 2016-09-28 15:46 - 00000000 ____D C:\Users\shagu\Desktop\SageI7L100v801 2017-02-17 18:46 - 2017-02-17 18:46 - 88093358 _____ (Acresso Software Inc.) C:\Users\shagu\Desktop\Sagedirect.exe 2017-02-17 18:29 - 2017-02-17 18:29 - 00001461 _____ C:\Users\shagu\Desktop\pmsw32 - Raccourci.lnk 2017-02-17 18:07 - 2017-02-17 19:29 - 00000000 ____D C:\Users\shagu\OneDrive\Documents\Sage 2017-02-17 18:05 - 2017-02-17 18:05 - 00001305 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\visiodasb.lnk 2017-02-17 18:03 - 2017-02-17 18:03 - 00001084 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SagePaie.lnk 2017-02-17 17:53 - 2016-12-06 13:35 - 01905728 _____ (Sage) C:\WINDOWS\SysWOW64\Snadosql.dll 2017-02-17 17:53 - 2016-04-27 15:21 - 01046528 _____ (Sage France) C:\WINDOWS\SysWOW64\SnadoOra.dll 2017-02-17 17:53 - 2014-11-17 11:17 - 06525440 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\WINDOWS\system32\cdintf450_64.dll 2017-02-17 17:53 - 2014-11-17 11:17 - 04809728 _____ (Amyuni Technologies hxxp://www.amyuni.com) C:\WINDOWS\SysWOW64\cdintf450.dll 2017-02-17 17:51 - 2017-02-17 17:54 - 00000000 ____D C:\Program Files (x86)\SagePaie 2017-02-17 17:40 - 2017-02-17 18:12 - 512812436 _____ C:\Users\shagu\Downloads\SageI7L100V801.rar 2017-02-17 16:56 - 2017-02-17 16:56 - 02956983 _____ C:\WINDOWS\5a75bb87c1d7158018bf5939ad268a0d.exe 2017-02-17 16:47 - 2017-02-17 16:47 - 00096272 _____ (YHR5LV) C:\WINDOWS\system32\Drivers\7ad9afa1fb34e2ffbfe2d9be24eea4c0.sys 2017-02-17 13:58 - 2017-02-17 13:58 - 02069664 _____ C:\Users\shagu\Downloads\winrar-32-bits_5-40_fr_9632.exe 2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Users\shagu\AppData\Roaming\WinRAR 2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-02-17 13:58 - 2017-02-17 13:58 - 00000000 ____D C:\Program Files (x86)\WinRAR 2017-02-17 13:48 - 2017-02-17 13:45 - 00002023 _____ C:\Users\shagu\Desktop\Sage direct.lnk 2017-02-17 13:37 - 2017-02-17 13:44 - 47171608 _____ (Acresso Software Inc.) C:\Users\shagu\Downloads\Sagedirect.exe 2017-02-17 13:34 - 2017-02-17 13:43 - 44241285 _____ C:\Users\shagu\Downloads\Sagedirect.zip 2017-02-17 13:33 - 2017-02-17 19:29 - 00000000 ____D C:\Users\shagu\AppData\Roaming\Sage 2017-02-17 13:33 - 2017-02-17 13:33 - 00000106 _____ C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2017-02-17 13:25 - 2017-02-17 19:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sage 2017-02-17 13:22 - 2017-02-17 13:22 - 00000000 ____D C:\ProgramData\Package Cache 2017-02-17 13:21 - 2015-12-08 14:15 - 01177584 _____ C:\WINDOWS\system32\sage.common.dll 2017-02-17 13:20 - 2017-02-17 19:10 - 00000000 ____D C:\Program Files (x86)\Sage 2017-02-17 13:20 - 2017-02-17 19:09 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2017-02-17 13:19 - 2017-02-17 19:07 - 00000000 ____D C:\ProgramData\Sage 2017-02-17 12:53 - 2017-02-19 22:14 - 00000000 ____D C:\Users\shagu\Desktop\Comptalia 2017-02-17 12:39 - 2017-02-17 12:39 - 00126841 _____ C:\Users\shagu\Downloads\annabelle.eck_planning.pdf 2017-02-17 12:39 - 2017-02-17 12:39 - 00126840 _____ C:\Users\shagu\Downloads\annabelle.eck_planning (1).pdf 2017-02-17 12:39 - 2017-02-17 12:39 - 00082227 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_février_2017.pdf 2017-02-17 12:38 - 2017-02-17 12:38 - 00089043 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Analyse_financière.pdf 2017-02-17 12:38 - 2017-02-17 12:38 - 00086046 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Pratique_Sage.pdf 2017-02-17 12:38 - 2017-02-17 12:38 - 00080792 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_DP.pdf 2017-02-17 12:37 - 2017-02-17 12:37 - 00094255 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Fiscalité.pdf 2017-02-17 12:37 - 2017-02-17 12:37 - 00089528 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Pratique_de_la_paie.pdf 2017-02-17 12:37 - 2017-02-17 12:37 - 00087474 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_ComptaAnaCo.pdf 2017-02-17 12:36 - 2017-02-17 12:36 - 00089018 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Compta_appro_15_(CO).pdf 2017-02-17 12:36 - 2017-02-17 12:36 - 00079367 _____ C:\Users\shagu\Downloads\annabelle.eck_planning_Graduate_-__Collaborateur_administratif_et_comptable_Réussir_mon_titre_pro.pdf 2017-02-17 12:25 - 2017-02-17 13:15 - 494419925 _____ C:\Users\shagu\Downloads\SagePaieI7V810.rar 2017-02-17 06:39 - 2017-02-17 06:39 - 00001860 _____ C:\Users\shagu\Downloads\lm-comptabilite-et-gestion-spontanee-stage.pdf 2017-02-17 06:37 - 2017-02-17 06:37 - 00001945 _____ C:\Users\shagu\Downloads\lm-comptable-stage-spontanee-stage.pdf 2017-02-16 17:11 - 2017-02-16 17:11 - 00096832 _____ C:\Users\shagu\Downloads\RIB AECK.pdf 2017-02-16 16:57 - 2017-02-16 16:58 - 05787195 _____ C:\Users\shagu\Downloads\IMG_9530.pdf 2017-02-16 16:57 - 2017-02-16 16:57 - 04306713 _____ C:\Users\shagu\Downloads\IMG_9527.pdf 2017-02-16 16:57 - 2017-02-16 16:57 - 02885579 _____ C:\Users\shagu\Downloads\IMG_9528.pdf 2017-02-16 16:57 - 2017-02-16 16:57 - 02789578 _____ C:\Users\shagu\Downloads\IMG_9529.pdf 2017-02-16 16:55 - 2017-02-16 16:56 - 04522306 _____ C:\Users\shagu\Downloads\IMG_9526.pdf 2017-02-16 16:51 - 2017-02-16 16:51 - 03137686 _____ C:\Users\shagu\Downloads\IMG_9525.pdf 2017-02-15 20:17 - 2017-02-16 00:36 - 734576954 _____ C:\Users\shagu\Downloads\__Madagascar__www.LibertyLand.tv.avi 2017-02-15 19:28 - 2017-02-15 20:03 - 730118490 _____ C:\Users\shagu\Downloads\Storks.2016.FRENCH.BDRip.XviD-NOTAG.avi 2017-02-15 16:23 - 2017-02-15 19:24 - 729318314 _____ C:\Users\shagu\Downloads\Trolls.2016.FRENCH.BDRip.XviD-EXTREME.avi 2017-02-15 10:46 - 2017-02-15 11:05 - 31872167 _____ C:\Users\shagu\Downloads\wetransfer-e0c4a6.zip.wr59pee.partial 2017-02-13 18:12 - 2017-02-13 18:18 - 00000000 ____D C:\Users\shagu\Desktop\Films enfants 2017-02-13 18:06 - 2017-02-13 21:51 - 634191872 _____ C:\Users\shagu\Downloads\Alpha.Omega--www.libertyland.tv.rar.9mo0h89.partial 2017-02-13 17:31 - 2017-02-13 18:17 - 688471135 _____ C:\Users\shagu\Downloads\Maya.the.Bee.Movie(-_1@1_-)2014.FRENCH.BDRIP.XVID-www.libertyland.tv.rar 2017-02-13 16:34 - 2017-02-13 16:34 - 01255464 _____ ( ) C:\Users\shagu\Downloads\adobe_flash_setup.exe 2017-02-10 21:16 - 2017-02-10 21:27 - 00000000 ____D C:\Users\shagu\Desktop\Photos de famille 2017-02-09 10:03 - 2017-02-09 10:03 - 00069400 _____ (Lace514) C:\WINDOWS\system32\Drivers\Lace_wpf_x64.sys 2017-02-01 09:13 - 2017-02-01 09:13 - 00059438 _____ C:\Users\shagu\Downloads\RECAPITULATIFANNUELDESFRAIS_20170117.pdf 2017-01-30 14:50 - 2017-01-30 14:50 - 00000000 ____D C:\Users\shagu\Desktop\Mud Dogs 2017-01-30 14:20 - 2017-01-30 14:21 - 00000000 ____D C:\Users\shagu\Desktop\MostovoÏ 2017-01-30 12:01 - 2017-01-30 12:18 - 126082401 _____ C:\Users\shagu\Downloads\wetransfer-33500a (7).zip.e1i0vi2.partial 2017-01-30 11:47 - 2017-01-30 11:58 - 202347433 _____ C:\Users\shagu\Downloads\wetransfer-33500a (6).zip.y6pjt1d.partial 2017-01-30 11:13 - 2017-01-30 11:20 - 166439865 _____ C:\Users\shagu\Downloads\wetransfer-33500a (5).zip.3377z61.partial 2017-01-30 09:59 - 2017-01-30 11:12 - 143750153 _____ C:\Users\shagu\Downloads\wetransfer-33500a (4).zip.p0yi8nv.partial 2017-01-30 09:05 - 2017-01-30 09:49 - 1333531033 _____ C:\Users\shagu\Downloads\wetransfer-33500a (3).zip.a5mocuh.partial 2017-01-30 08:16 - 2017-01-30 08:20 - 14460969 _____ C:\Users\shagu\Downloads\wetransfer-33500a (2).zip.yxzkfzf.partial 2017-01-30 07:46 - 2017-01-30 07:59 - 08969729 _____ C:\Users\shagu\Downloads\wetransfer-33500a (1).zip.b7ob66g.partial 2017-01-30 07:19 - 2017-01-30 07:44 - 67625553 _____ C:\Users\shagu\Downloads\wetransfer-33500a.zip.mvwwpjc.partial 2017-01-25 13:48 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-01-25 13:48 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-01-24 11:58 - 2017-02-20 02:54 - 00000000 ____D C:\WINDOWS\Minidump ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-02-20 07:38 - 2016-12-22 21:30 - 00000000 ____D C:\Users\shagu\AppData\Roaming\cacaoweb 2017-02-20 07:34 - 2016-12-15 00:40 - 00000000 ___RD C:\Users\shagu\OneDrive 2017-02-20 07:30 - 2016-12-15 08:36 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-02-20 07:30 - 2016-12-15 08:36 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-02-20 06:58 - 2016-12-14 23:57 - 02252768 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-02-20 06:58 - 2016-12-14 23:19 - 01042790 _____ C:\WINDOWS\system32\perfh00C.dat 2017-02-20 06:58 - 2016-12-14 23:19 - 00219150 _____ C:\WINDOWS\system32\perfc00C.dat 2017-02-20 06:52 - 2016-12-14 23:56 - 00000000 ____D C:\Users\shagu 2017-02-20 06:15 - 2016-12-14 23:08 - 00000000 ____D C:\WINDOWS\INF 2017-02-20 05:39 - 2016-12-14 23:10 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-02-20 05:39 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-02-20 05:33 - 2016-12-14 23:10 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-20 05:33 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-20 05:32 - 2016-12-14 23:58 - 00000000 ____D C:\Users\shagu\AppData\Local\Packages 2017-02-20 04:32 - 2016-12-14 22:45 - 00524288 _____ C:\WINDOWS\system32\config\BBI 2017-02-20 03:55 - 2016-12-15 08:36 - 00334688 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-02-20 03:37 - 2016-12-14 23:10 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2017-02-20 03:08 - 2017-01-12 15:26 - 00000000 ____D C:\Program Files (x86)\Google 2017-02-20 02:59 - 2016-12-14 23:24 - 00000000 ___DC C:\WINDOWS\Panther 2017-02-20 02:26 - 2016-12-14 23:10 - 00000000 ____D C:\Program Files\Common Files\microsoft shared 2017-02-17 19:09 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\Help 2017-02-17 09:03 - 2017-01-02 13:56 - 00000000 ____D C:\Users\shagu\Desktop\Nouveau dossier 2017-02-08 07:51 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-01-27 18:21 - 2016-12-14 23:10 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-01-27 10:05 - 2017-01-13 00:07 - 00000000 ____D C:\Users\shagu\Desktop\ok coral 2017-01-25 15:52 - 2016-12-14 22:51 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-01-24 12:31 - 2016-12-17 10:28 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-01-24 12:31 - 2016-12-15 00:40 - 00002415 _____ C:\Users\shagu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-01-22 11:27 - 2017-01-12 15:25 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk ==================== Fichiers à la racine de certains dossiers ======= 2017-02-20 02:34 - 2017-02-20 02:39 - 7319040 _____ () C:\Users\shagu\AppData\Roaming\agent.dat 2017-02-20 03:03 - 2017-02-20 03:04 - 0023622 _____ () C:\Users\shagu\AppData\Roaming\aliexpress.ico 2017-02-20 03:03 - 2017-02-20 03:03 - 0099678 _____ () C:\Users\shagu\AppData\Roaming\booking.ico 2017-02-20 02:34 - 2017-02-20 02:39 - 0070752 _____ () C:\Users\shagu\AppData\Roaming\Config.xml 2017-02-20 02:38 - 2017-02-20 02:33 - 0982016 _____ () C:\Users\shagu\AppData\Roaming\Ding-Lex.exe 2017-02-20 02:39 - 2017-02-20 02:39 - 1906964 _____ () C:\Users\shagu\AppData\Roaming\Ding-Lex.tst 2017-02-20 02:33 - 2017-02-20 02:33 - 0278518 _____ () C:\Users\shagu\AppData\Roaming\HomeLax.bin 2017-02-20 02:32 - 2017-02-20 02:34 - 0016224 _____ () C:\Users\shagu\AppData\Roaming\InstallationConfiguration.xml 2017-02-20 02:32 - 2017-02-20 02:32 - 0140288 _____ () C:\Users\shagu\AppData\Roaming\Installer.dat 2017-02-20 02:35 - 2017-02-20 02:35 - 0278518 _____ () C:\Users\shagu\AppData\Roaming\LexiBam.bin 2017-02-20 02:34 - 2017-02-20 02:39 - 0018432 _____ () C:\Users\shagu\AppData\Roaming\Main.dat 2017-02-20 02:34 - 2017-02-20 02:39 - 0005568 _____ () C:\Users\shagu\AppData\Roaming\md.xml 2017-02-20 02:34 - 2017-02-20 02:39 - 0126464 _____ () C:\Users\shagu\AppData\Roaming\noah.dat 2017-02-20 02:38 - 2017-02-20 02:34 - 0982016 _____ () C:\Users\shagu\AppData\Roaming\Triootlight.exe 2017-02-20 02:39 - 2017-02-20 02:39 - 1906964 _____ () C:\Users\shagu\AppData\Roaming\Triootlight.tst 2017-02-20 02:36 - 2017-02-20 02:41 - 0032038 _____ () C:\Users\shagu\AppData\Roaming\uninstall_temp.ico 2017-02-20 02:33 - 2017-02-20 02:32 - 0982016 _____ () C:\Users\shagu\AppData\Roaming\Viakix.exe 2017-02-20 02:34 - 2017-02-20 02:34 - 1906964 _____ () C:\Users\shagu\AppData\Roaming\Viakix.tst 2017-02-20 02:34 - 2017-02-20 02:34 - 0278518 _____ () C:\Users\shagu\AppData\Roaming\Zotstrong.bin 2017-02-20 03:24 - 2017-02-20 03:24 - 0000017 _____ () C:\Users\shagu\AppData\Local\resmon.resmoncfg 2017-02-17 13:33 - 2017-02-17 13:33 - 0000106 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc 2017-02-20 02:35 - 2017-02-20 02:35 - 0326144 _____ () C:\ProgramData\smp2.exe Fichiers à déplacer ou supprimer: ==================== C:\Users\shagu\AppData\Roaming\gplyra\gplyra.exe C:\Users\shagu\AppData\Local\Temp\4Al4PnQuYPrUqr3FFgkc.exe C:\Program Files (x86)\gamesdesktop\DVWUF19X4UB11HX.exe C:\Users\shagu\AppData\Local\Temp\y0srZX2r7Mrm7n42SUjN.exe C:\ProgramData\smp2.exe Certains fichiers dans TEMP: ==================== 2017-02-20 03:21 - 2017-02-20 03:21 - 0065536 _____ (E76YALI) C:\Users\shagu\AppData\Local\Temp\4Al4PnQuYPrUqr3FFgkc.exe 2017-02-20 03:30 - 2017-02-20 03:30 - 0065536 _____ (E76YALI) C:\Users\shagu\AppData\Local\Temp\y0srZX2r7Mrm7n42SUjN.exe ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement C:\WINDOWS\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-02-11 20:39 ==================== Fin de FRST.txt ============================