Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 08-03-2017
Exécuté par user (administrateur) sur ADEL-PC (08-03-2017 22:29:03)
Exécuté depuis C:\Users\user\Desktop
Profils chargés: user (Profils disponibles: user)
Platform: Windows 7 Professional Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll",TrayApp
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16781824 2017-01-11] (Realtek Semiconductor)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2015-01-04] (Qualcomm®Atheros®)
HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\MountPoints2: {2c761125-c3ec-11e6-8878-f0761c7820fd} - G:\setup.exe
HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\MountPoints2: {8ca5807c-c866-11e5-ae8b-acb57de180d6} - G:\startme.exe
HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\MountPoints2: {d74b0444-e274-11e6-afc5-f0761c7820fd} - G:\Setup.exe /s
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [173272 2017-01-20] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [150760 2017-01-20] (NVIDIA Corporation)
ShellIconOverlayIdentifiers: [   IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-05-22] ()

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Winsock: Catalog5 07 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Pas de fichier 
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Pas de fichier 
Winsock: Catalog5-x64 07 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Pas de fichier 
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Pas de fichier 
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{1CEA9EB1-AD14-44D9-ADA9-A5A6183F1628}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{1CEA9EB1-AD14-44D9-ADA9-A5A6183F1628}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-35432687-4265226925-748956850-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2016-11-01] (Microsoft Corporation)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2015-12-08] (Internet Download Manager, Tonec Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2016-11-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-10-21] (Oracle Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2016-04-20] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\8d2jckcs.default-1466604170299 [2017-03-02]
FF NetworkProxy: Mozilla\Firefox\Profiles\8d2jckcs.default-1466604170299 -> type", 
FF HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2015-12-09]
FF HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\user\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\user\AppData\Roaming\IDM\idmmzcc5 [2017-03-08] [non signé]
FF HKU\S-1-5-21-35432687-4265226925-748956850-1000\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-10] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-08-24] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-10] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-10-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Pas de fichier]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2016-01-07] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> D:\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> D:\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-08-24] (Adobe Systems)

Chrome: 
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://google.fr/"
CHR DefaultSearchURL: Default -> hxxp://www.if-algerie.com/favicon.ico
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2017-03-08]
CHR Extension: (Google Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-15]
CHR Extension: (Google Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-15]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-03-10]
CHR Extension: (Le Bloqueur de Poper) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2017-03-02]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-03-10]
CHR Extension: (Adblock Plus) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-03-02]
CHR Extension: (Adobe Acrobat) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04]
CHR Extension: (Google Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-15]
CHR Extension: (Protection Web Avira) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2017-03-02]
CHR Extension: (AdBlock) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-02-26]
CHR Extension: (Institut Français d'Alger TCF DAP — A...) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjijlhhmbnhfodngdcdoeedidodbfikm [2016-10-20]
CHR Extension: (IDM Integration Module) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2016-12-09]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-08]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-03-10]
CHR Extension: (Chrome Media Router) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-07]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-18]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2015-12-18]

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S4 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [744640 2016-08-24] (Adobe Systems Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
S4 AIPS; C:\Program Files (x86)\netcut\services\AIPS.exe [262144 2011-07-28] (Arcai.com) [Fichier non signé]
S4 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [323200 2015-01-04] (Windows (R) Win 7 DDK provider) [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3042032 2017-01-17] (Microsoft Corporation)
S4 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2016-11-29] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [409128 2017-02-10] (EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2770312 2016-11-10] (ESET)
R2 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
S4 HiPatchService; D:\paladins\HiPatchService.exe [9728 2017-02-23] (Hi-Rez Studios) [Fichier non signé]
S4 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18488 2016-02-03] (Intel Corporation)
S4 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373744 2016-12-06] (Intel Corporation)
S4 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
S4 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2017-02-23] (NVIDIA Corporation)
S4 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [464440 2017-01-20] (NVIDIA Corporation)
S4 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2017-02-23] (NVIDIA Corporation)
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [117264 2010-06-25] (CACE Technologies, Inc.)
S4 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe [156928 2016-11-17] ()
S4 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [304408 2017-03-02] (RaMMicHaeL)
S4 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [805632 2016-11-17] ()
S4 uSHAREitSvc; C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.Service.exe [33224 2017-01-20] (SHAREit Technologies Co.Ltd)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S4 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2205568 2016-12-22] (Sony)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [77464 2015-01-04] (Qualcomm Atheros)
S3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [140600 2014-03-26] (Motorola Solutions, Inc.)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-12-17] (Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-12-17] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [262792 2016-11-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [197248 2016-11-10] (ESET)
R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [153216 2016-11-10] (ESET)
R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [208520 2016-11-10] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [61568 2016-11-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [84616 2016-11-10] (ESET)
R1 HssDRV6; C:\Windows\System32\DRIVERS\hssdrv6.sys [44648 2015-09-18] (AnchorFree Inc.)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [31728 2016-02-12] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [180264 2015-12-25] (Intel Corporation)
R2 NPF; C:\Windows\System32\drivers\npf.sys [35344 2010-06-25] (CACE Technologies, Inc.)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2017-02-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2017-02-23] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\DRIVERS\nvvhci.sys [57792 2017-02-23] (NVIDIA Corporation)
R3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [777944 2016-01-13] (Realsil Semiconductor Corporation)
U5 RTSUER; C:\Windows\System32\Drivers\RTSUER.sys [413912 2015-12-22] (Realsil Semiconductor Corporation)
R3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [28272 2017-01-30] ()
S3 taphss6; system32\DRIVERS\taphss6.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-03-08 22:29 - 2017-03-08 22:29 - 00018502 _____ C:\Users\user\Desktop\FRST.txt
2017-03-08 22:28 - 2017-03-08 22:29 - 00000000 ____D C:\FRST
2017-03-08 22:28 - 2017-03-08 22:28 - 02423808 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2017-03-08 10:00 - 2017-03-08 10:00 - 00003144 _____ C:\Windows\System32\Tasks\{FDBDD2DE-AB4E-4CFE-9B14-CA48E2225D1D}
2017-03-08 10:00 - 2017-03-08 10:00 - 00001871 _____ C:\Users\user\Desktop\ZHPFixReport.txt
2017-03-08 09:59 - 2017-03-08 10:00 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-03-08 09:59 - 2017-03-08 09:59 - 00001845 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-03-08 09:59 - 2017-03-08 09:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-03-08 09:45 - 2017-03-08 09:45 - 00448512 _____ (OldTimer Tools) C:\Users\user\Desktop\TFC.exe
2017-03-08 09:13 - 2017-03-08 09:13 - 00000000 ___RD C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2017-03-07 23:40 - 2017-03-07 23:40 - 00000000 ____D C:\Users\user\Desktop\cours
2017-03-07 23:34 - 2017-03-07 23:34 - 03497180 _____ C:\Users\user\Desktop\cours.zip
2017-03-06 19:08 - 2017-03-06 19:08 - 00000000 ____D C:\Users\user\AppData\Local\TempTaskUpdateDetection38D0856A-DC27-4288-BC9D-70893F2DD837
2017-03-05 17:49 - 2017-03-05 18:16 - 00000012 _____ C:\Users\user\Desktop\f.py
2017-03-05 17:46 - 2017-03-05 17:46 - 00000000 ____D C:\Users\user\AppData\Roaming\Sublime Text 3
2017-03-05 17:46 - 2017-03-05 17:46 - 00000000 ____D C:\Users\user\AppData\Local\Sublime Text 3
2017-03-05 17:43 - 2017-03-05 17:43 - 00000886 _____ C:\Users\user\Desktop\Sublime Text 3.lnk
2017-03-05 17:43 - 2017-03-05 17:43 - 00000000 ____D C:\Program Files\Sublime Text 3
2017-03-05 17:42 - 2017-03-05 17:42 - 00001685 _____ C:\Users\user\Desktop\IDLE (Python 3.6 32-bit).lnk
2017-03-05 17:19 - 2017-03-05 17:19 - 00000000 ____D C:\Users\user\.idlerc
2017-03-05 16:55 - 2017-03-05 16:56 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.6
2017-03-05 16:55 - 2017-03-05 16:55 - 00000000 ____D C:\Users\user\AppData\Local\Package Cache
2017-03-04 22:48 - 2017-03-08 10:04 - 00132426 _____ C:\Users\user\Desktop\ZHPDiag.txt
2017-03-04 22:42 - 2017-03-04 22:42 - 02707968 _____ C:\Users\user\ZHPDiag3.exe
2017-03-02 13:08 - 2017-03-02 13:09 - 00000000 ____D C:\Users\user\Desktop\msc
2017-03-02 13:07 - 2017-03-02 13:07 - 00000000 ____D C:\Users\user\Desktop\usthb
2017-03-02 13:07 - 2017-03-02 13:07 - 00000000 ____D C:\Users\user\Desktop\gta V
2017-03-02 13:07 - 2017-03-02 13:07 - 00000000 ____D C:\Users\user\Desktop\FaC
2017-03-02 11:43 - 2017-03-02 11:43 - 00003852 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-02 11:43 - 2017-03-02 11:43 - 00001408 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-03-02 11:43 - 2017-03-02 11:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-03-02 11:43 - 2017-02-23 19:32 - 01880512 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2017-03-02 11:43 - 2017-02-23 19:32 - 01755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2017-03-02 11:43 - 2017-02-23 19:32 - 01468864 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2017-03-02 11:43 - 2017-02-23 19:32 - 01317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2017-03-02 11:43 - 2017-02-23 19:32 - 00120256 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2017-03-02 11:42 - 2017-03-02 11:42 - 00004146 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-02 11:42 - 2017-02-23 15:32 - 00001951 _____ C:\Windows\NvContainerRecovery.bat
2017-03-02 11:42 - 2017-02-23 15:30 - 00001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat
2017-03-02 11:41 - 2017-02-23 19:32 - 00156608 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2017-03-02 11:41 - 2017-02-23 19:32 - 00124352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2017-03-02 11:41 - 2017-02-23 19:32 - 00057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys
2017-03-02 11:41 - 2017-02-23 19:32 - 00046016 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2017-03-02 01:43 - 2017-03-02 01:44 - 00000000 ____D C:\Program Files\Defraggler
2017-03-02 01:43 - 2017-03-02 01:43 - 00001724 _____ C:\Users\Public\Desktop\Defraggler.lnk
2017-03-02 01:43 - 2017-03-02 01:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2017-03-02 00:36 - 2017-03-02 00:36 - 00000000 ____D C:\Users\user\Desktop\RevoUninstallerPortable
2017-03-02 00:35 - 2017-03-02 00:35 - 07056416 _____ (PortableApps.com) C:\Users\user\Desktop\RevoUninstallerPortable_2.0.2.paf.exe
2017-03-02 00:31 - 2017-03-02 00:31 - 00001015 _____ C:\Users\Public\Desktop\Unchecky.lnk
2017-03-02 00:31 - 2017-03-02 00:31 - 00000000 ____D C:\ProgramData\Unchecky
2017-03-02 00:31 - 2017-03-02 00:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky
2017-03-02 00:31 - 2017-03-02 00:31 - 00000000 ____D C:\Program Files (x86)\Unchecky
2017-03-02 00:27 - 2017-03-07 23:34 - 00000000 ____D C:\Users\user\Downloads\Compressed
2017-03-02 00:09 - 2017-03-08 10:01 - 00000818 _____ C:\Users\user\Desktop\ZHPDiag.lnk
2017-03-01 23:42 - 2017-03-01 23:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2017-03-01 23:13 - 2017-03-01 23:17 - 00002562 _____ C:\Windows\diagwrn.xml
2017-03-01 23:13 - 2017-03-01 23:17 - 00001908 _____ C:\Windows\diagerr.xml
2017-03-01 22:45 - 2017-03-08 10:00 - 00000000 ____D C:\Users\user\AppData\Roaming\siw_tmp
2017-03-01 22:45 - 2017-03-01 23:28 - 00000000 ____D C:\Program Files (x86)\SIW DEMO
2017-03-01 22:45 - 2017-03-01 22:45 - 00000972 _____ C:\Users\user\Desktop\SIW DEMO.lnk
2017-03-01 22:45 - 2017-03-01 22:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SIW DEMO
2017-02-26 01:06 - 2017-02-26 01:06 - 00000000 ____D C:\Users\user\AppData\Roaming\Umeng
2017-02-26 01:05 - 2017-02-26 01:05 - 00001202 _____ C:\Users\Public\Desktop\SHAREit.lnk
2017-02-26 01:05 - 2017-02-26 01:05 - 00000000 ____D C:\Users\user\AppData\Local\SHAREit Technologies
2017-02-26 01:05 - 2017-02-26 01:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHAREit
2017-02-26 01:04 - 2017-02-26 01:04 - 00000000 ____D C:\Program Files (x86)\SHAREit Technologies
2017-02-18 22:05 - 2017-02-18 22:05 - 00000975 _____ C:\Users\user\Desktop\netcut.lnk
2017-02-18 22:05 - 2017-02-18 22:05 - 00000000 ____D C:\Program Files (x86)\netcut
2017-02-10 14:58 - 2017-03-02 13:05 - 00000000 ____D C:\Users\user\Desktop\cours rxo
2017-02-06 22:55 - 2017-03-02 12:07 - 00000000 ____D C:\Users\user\Desktop\$

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-03-08 22:24 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-08 10:11 - 2009-07-14 05:45 - 00034560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-03-08 10:11 - 2009-07-14 05:45 - 00034560 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-03-08 10:04 - 2016-06-22 16:50 - 00000000 ____D C:\Users\user\AppData\Roaming\DMCache
2017-03-08 10:02 - 2016-12-15 20:40 - 00000000 ____D C:\Users\user\AppData\Roaming\ZHP
2017-03-08 09:38 - 2016-01-19 22:22 - 00001002 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2017-03-07 22:58 - 2016-11-05 20:32 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-05 16:55 - 2015-12-08 13:59 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-04 12:25 - 2016-02-27 21:52 - 00000000 ____D C:\Users\user\AppData\Local\NVIDIA Corporation
2017-03-04 12:21 - 2017-02-05 21:51 - 00000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-03-04 12:21 - 2015-12-08 14:02 - 00000000 __SHD C:\Users\user\IntelGraphicsProfiles
2017-03-04 12:21 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2017-03-02 13:06 - 2016-07-06 13:41 - 00000000 ____D C:\Users\user\Downloads\Torrents
2017-03-02 13:05 - 2010-11-21 07:19 - 00666866 _____ C:\Windows\system32\perfh00C.dat
2017-03-02 13:05 - 2010-11-21 07:19 - 00125870 _____ C:\Windows\system32\perfc00C.dat
2017-03-02 13:05 - 2009-07-14 06:13 - 01495292 _____ C:\Windows\system32\PerfStringBackup.INI
2017-03-02 13:05 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-03-02 11:44 - 2016-06-22 19:43 - 00000000 ____D C:\Users\user\AppData\Local\NVIDIA
2017-03-02 11:43 - 2016-01-30 19:15 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-02 11:43 - 2015-12-08 14:15 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2017-03-02 11:43 - 2015-12-08 14:15 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-03-02 11:42 - 2016-12-17 11:28 - 00003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-02 11:42 - 2016-12-17 11:28 - 00003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-02 11:42 - 2016-12-17 11:28 - 00003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-02 11:42 - 2016-12-17 11:28 - 00003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-02 11:42 - 2016-12-17 11:28 - 00003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-02 01:41 - 2016-12-15 22:22 - 00000000 ____D C:\ProgramData\Intel
2017-03-02 01:40 - 2017-01-04 19:58 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2017-03-02 01:40 - 2016-12-15 22:22 - 00000000 ____D C:\Windows\System32\Tasks\Intel
2017-03-02 01:40 - 2015-12-08 13:49 - 00000000 ____D C:\Program Files (x86)\Intel
2017-03-02 01:32 - 2016-07-11 12:58 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-03-02 01:14 - 2016-02-26 02:37 - 00000000 ____D C:\Users\user\AppData\Local\Sony
2017-03-02 01:13 - 2016-02-26 02:17 - 00000000 ____D C:\Users\user\AppData\Roaming\Sony
2017-03-02 01:11 - 2016-02-26 02:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2017-03-02 00:46 - 2009-07-14 05:45 - 00434432 _____ C:\Windows\system32\FNTCACHE.DAT
2017-03-01 23:42 - 2016-01-13 21:38 - 00000000 ____D C:\Users\user\AppData\Roaming\Skype
2017-03-01 23:42 - 2015-12-08 14:00 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-03-01 23:34 - 2017-01-23 14:40 - 00000000 ____D C:\ProgramData\Hi-Rez Studios
2017-03-01 23:34 - 2016-08-12 23:28 - 00000000 ____D C:\Program Files (x86)\DSPRobotics
2017-03-01 22:55 - 2016-01-13 21:13 - 00111448 _____ C:\Users\user\AppData\Local\GDIPFONTCACHEV1.DAT
2017-03-01 22:44 - 2016-06-22 16:50 - 00000000 ____D C:\Users\user\AppData\Roaming\IDM
2017-03-01 22:25 - 2016-02-29 13:00 - 00000000 ____D C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-03-01 22:23 - 2016-01-07 15:33 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-03-01 22:07 - 2016-02-05 16:41 - 00000000 ____D C:\Users\user\AppData\Local\CrashDumps
2017-03-01 21:31 - 2016-11-05 12:44 - 00000000 ____D C:\Users\user\Documents\The Witcher 3
2017-03-01 21:16 - 2016-01-16 17:51 - 00000000 ____D C:\Users\user\AppData\Roaming\uTorrent
2017-03-01 19:47 - 2016-01-15 02:12 - 00000000 ____D C:\Users\user\AppData\Local\Deployment
2017-02-26 01:04 - 2017-01-04 12:15 - 00000000 ____D C:\Users\user\AppData\Local\Lenovo
2017-02-26 01:04 - 2017-01-04 12:15 - 00000000 ____D C:\ProgramData\Lenovo
2017-02-24 00:10 - 2016-01-30 18:15 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-24 00:09 - 2016-01-30 18:15 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-02-24 00:07 - 2016-12-17 00:35 - 00000000 ____D C:\Windows\pss
2017-02-23 18:23 - 2016-01-13 21:20 - 00000000 ____D C:\Windows\system32\MRT
2017-02-23 18:20 - 2016-01-13 21:20 - 138020592 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-02-18 22:05 - 2016-07-15 03:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\arcai.com
2017-02-16 17:21 - 2016-01-13 21:38 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-02-16 17:21 - 2016-01-13 21:38 - 00000000 ____D C:\ProgramData\Skype
2017-02-10 20:48 - 2017-01-23 17:42 - 00409128 _____ (EasyAntiCheat Ltd) C:\Windows\SysWOW64\EasyAntiCheat.exe
2017-02-07 17:27 - 2016-03-10 22:54 - 00002193 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-07 17:15 - 2017-02-04 21:46 - 00000000 ____D C:\Windows\SysWOW64\NV
2017-02-07 17:15 - 2017-02-04 21:46 - 00000000 ____D C:\Windows\system32\NV
2017-02-07 00:29 - 2017-02-05 21:51 - 00000200 _____ C:\Windows\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat

==================== Fichiers à la racine de certains dossiers =======

2016-02-26 02:05 - 2016-02-26 02:06 - 29511952 _____ (Sony Mobile Communications                                  ) C:\Users\user\AppData\Local\pcc.exe
2016-06-22 20:08 - 2016-12-17 15:46 - 0007597 _____ () C:\Users\user\AppData\Local\Resmon.ResmonCfg
2016-09-22 09:28 - 2016-09-22 09:28 - 0000000 _____ () C:\Users\user\AppData\Local\{0B26EB94-D6FC-40D3-9D68-35B07ED680B8}
2017-02-04 21:27 - 2017-02-04 21:27 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-12-17 13:16 - 2017-01-24 21:46 - 0005110 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-17 13:16 - 2017-01-24 03:17 - 0005504 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1

Fichiers à déplacer ou supprimer:
====================
C:\Users\user\ZHPDiag3.exe


==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-03-04 02:23

==================== Fin de FRST.txt ============================